Singapore VCC AML duties: what the board, manager and EFI each do

A Singapore VCC must appoint an eligible financial institution to perform much of the required anti-money laundering and countering the financing of terrorism work. That appointment does not transfer the VCC’s accountability. The board must understand the risks, approve the arrangements and check that the work is being done properly.

This distinction matters because a VCC may also have a fund manager, administrator, transfer agent and compliance professionals. Several parties may handle investor information, but the legal duties cannot be reduced to a sentence in a service agreement.

The VCC is the regulated starting point

Section 84 of the Variable Capital Companies Act allows requirements for preventing money laundering, terrorism financing and proliferation financing to be imposed on VCCs. The current operational requirements sit in MAS Notice VCC-N01 and its accompanying guidance.

A VCC’s members are treated as customers for this purpose. The work therefore reaches beyond a one-time subscription check. It includes assessing risk, identifying and verifying relevant persons, understanding beneficial ownership, screening, ongoing monitoring, record keeping and responding when suspicion or sanctions concerns arise.

What the eligible financial institution does

The VCC appoints an eligible financial institution, commonly called the EFI, that is regulated and supervised by MAS for AML and CFT. The EFI performs the checks and measures assigned under the notice. Depending on the arrangement, that may include customer due diligence, beneficial-owner verification, screening, risk classification and ongoing monitoring.

The appointment should identify which legal entity is the EFI, the VCCs and sub-funds covered, the systems used, the records supplied to the board, escalation routes and access to underlying evidence. If an administrator collects documents for the EFI, the contract chain must still show who makes the required decisions and who can retrieve the complete file.

What stays with the board

The board approves the VCC’s money laundering, terrorism financing and proliferation financing risk assessment, policies and control arrangements. It should receive enough information to challenge high-risk decisions, overdue reviews, screening alerts, exceptions and gaps in the EFI’s service.

The MAS guidance to Notice VCC-N01 addresses the relationship between the VCC and EFI. Board minutes should show substantive review, not only that a compliance report was tabled. Where the VCC has no separate senior management, the board may also carry the senior-management decisions required by the framework.

The manager’s role is connected but different

The VCC manager understands the investment strategy, distribution arrangements, investor profile and transactions. It should give the board and EFI accurate information about those activities and tell them when the risk changes. The manager may itself be the appointed EFI if it meets the relevant requirements and the appointment is properly documented.

Fund-management regulation and VCC AML obligations remain distinct. Appointing a regulated manager does not by itself complete the VCC’s EFI appointment, board approvals, VCC risk assessment or beneficial-owner records. The manager should also avoid assuming that an administrator has taken responsibility for every AML decision merely because it holds the investor files.

A practical responsibility table

Build the VCC’s own control file

Keep the EFI appointment, service-level terms, risk assessment, policies, customer-risk methodology, board approvals, compliance-officer appointment and reporting calendar together. Add a map showing where customer documents, screening results, beneficial-owner records and transaction-monitoring evidence are stored.

For an umbrella VCC, decide how the risk assessment distinguishes sub-funds. A private-credit sub-fund with a small institutional investor base does not necessarily present the same risk as a widely distributed strategy with frequent subscriptions and redemptions. One group policy may be appropriate, but the assessment should still describe material differences.

Test the arrangement with a real event

Take a sample investor and trace the whole process. Confirm who identified the customer and beneficial owner, who verified the records, which screening was completed, how the risk rating was reached, who approved any enhanced measures and where ongoing monitoring appears. Then test an alert or change, such as a new beneficial owner or sanctions match.

If the board receives a quarterly dashboard showing one overdue review, it should be able to identify the affected relationship, reason, interim controls and completion date. A red count without the supporting path is not adequate oversight.

Review changes since July 2025

The revised MAS AML and CFT notices and guidelines that took effect on 1 July 2025 included proliferation-financing risk and clearer supervisory expectations in areas such as beneficial ownership, source of wealth, source of funds, screening and suspicious-transaction reporting. VCCs using older policies should compare them with the current notice and guidance rather than relying on a 2022 template.

Our VCC appointments guide covers other required roles, and the VCC annual compliance calendar helps place the review in the wider year. The Funds, VCCs and Cross-Border Structures hub connects vehicle, manager and tax decisions.

The board should be able to answer four questions without calling several providers: who is the EFI, where is the current risk assessment, who decides high-risk cases and how can the VCC retrieve the evidence behind its latest compliance report?