6 Ways FATFs Changes to Ultimate Beneficial Ownership will Affect Your Risk Based Approach

Anyone without a strong compliance background may wonder why the Financial Action Task Force (FATF) matters as it’s only an advisory body, but this advice often becomes international law. So, the changes to Recommendation 24 should be considered carefully.

In March 2022, global regulatory watchdog, FATF adopted amendments to Recommendation 24 (R.24) of its 40 Recommendations that govern global Anti-Money Laundering (AML) policy. This is the one concerning Ultimate Beneficial Ownership (UBO) – the person who ultimately gains from money moving into or out of a business.

The changes are important as R.24 has faced criticism in the past for being a blanket-approach that did not consider the variances of a risk-based approach or the unique needs of Non-Profit Organisations (NPO). R.24 has been under scrutiny for the past two years. Following input from the Global NPO Coalition, the private sector, and FATF itself, the recommendation has been rewritten to strengthen requirements for transparency on beneficial ownership globally and legal persons.

What are legal persons and why do they matter?

Before delving into the changes and how they’ll affect your company, we should establish exactly what legal persons are. FATF defines them as

Legal persons are any entities other than natural persons that can establish a permanent customer relationship with a financial institution or otherwise own property. This can include companies, bodies corporate, foundations, anstalt, partnerships, or associations and other relevantly similar entities that have legal personality. This can include NPOs that can take a variety of forms which vary between jurisdictions such as foundations, associations or cooperative societies.

It’s a comprehensive definition, but really it just means any entity that can hold rights and liabilities in law which is not a human being. From a money launderer’s perspective this is a feature of the global financial system that is ripe to be exploited, by forming companies and assigning incorrect UBOs they can hide the real beneficiaries of the proceeds of crime more easily.

Understanding legal persons is important as under the old version of R.24 financial institutions (FI) were responsible for finding the UBO of a company, whereas now the legal persons are obliged to have that information on record and make it available to the country they’re operating in.

This information must be publicly available through a beneficial ownership registry. It’s likely that this will be folded into existing registers such as Companies House in the UK or the Dutch Business Register (Handelsregister). This information is easily accessed by FIs, Designated Non-financial Businesses or Persons (DNFBPs), and regulators, which would make investigations much simpler.

Before the update

Prior to the revision to R.24 there was a requirement to have a register for UBOs, but this was often separate from specific business information. The exact wording from FATF was:

Countries should ensure that there is adequate, accurate and up-to-date information on the beneficial ownership and control of legal persons that can be obtained or accessed rapidly and efficiently by competent authorities, through either a register of beneficial ownership or an alternative mechanism.

In the UK there is the Persons with significant control (PSC) register. It is widely regarded as a failure and filled with incomplete, incorrect, or inadequate information.

Much of this was due to many companies claiming DTR5 exemptions, which means they claimed they fell under Chapter 5 of the Financial Conduct Authority’s (FCA) Disclosure and Transparency Rules. An exemption best explained by AML expert and Dark Money Files host, Graham Barrow, for companies listed on the London Stock Exchange’s Main Market, a European Economic Area equivalent, or specific markets in the USA, Japan, Switzerland, or Israel. Graham Barrow goes on to explain that this exemption meant that companies did not need to file with the PSC register as they had met superior transparency requirements for those markets. However, many companies using this exemption were not listed on any markets.

This was not just a problem in the UK, but a global issue. And had rendered R.24 ineffective at tackling money laundering and terrorism financing. Companies were able to be formed and trade without any clarity as to the UBO. It meant that money was circulating through companies without any substantial knowledge as to who the real beneficiary was.

Operating in this way means that transaction monitoring struggles to provide a full picture of customer behavior at pace. Instead, compliance officers normally have to wait for patterns to emerge and determine suspicious activity from there. This process has been sped up thanks to the advent of real-time transaction monitoring but it could be even faster if UBOs were properly identified.

The six challenges to identifying UBOs

There are a few key difficulties that regulated businesses face when identifying UBOs

1) Risk assessment

Not all risk-based approaches are the same, with good reason as every business has unique requirements depending on where they operate and their industry. But certain standards must be met regardless of these factors.

Legal persons are a common issue when conducting risk assessments, across the fourth round of Mutual Evaluation Reports from FATF – the investigations and evaluations of a country’s AML capabilities – there is a trend where not all types of legal persons are covered. This oversight results in varying levels of scrutiny being applied to companies. It may be an issue of education, as not all businesses may be aware of the full range of legal persons that can exist.

By standardising the issue in domestic law, FIs, DNFBPs, and regulators will all be immediately aware of what legal persons to consider. When everyone is looking for the same underlying risks and then making their decisions it will make for better informed risk-based approaches, rather than letting misuse of legal persons slip through unnoticed.

2) Accurate UBO information

Having accurate information is vital to any AML activity, but especially when conducting transaction monitoring and investigating how suspicious a transaction may be. Without accurate UBO information that has been verified and monitored it is far more difficult to understand whether the flow of money is illicit.

The importance of accurate UBO information increases when looking at foreign transactions and businesses. Many criminals route their money across borders to get around sanctions (we have a great on demand webinar on this topic here) and to simply make their money harder to track.

By creating a register of UBO information that is accurate and verified, countries will make it far easier for FIs and DNFBPs to investigate transactions and understand whose hands money is flowing through.

3) Communicating UBO information

Making UBO information easily and quickly accessible to authorities is vital for investigations. However, with weak registers and some FIs and DNFBPs failing to provide that information in a timely manner – if they had it at all – many countries fail at this hurdle.

Technology can help with this element, while UBO registers are being built and to cross-check this information businesses can assist by implementing API-based solutions that can quickly convey all the necessary information to the local regulator. For jurisdictions that use goAML, Sentinels provides a simple SAR filing solution so that suspicious activity can be logged with the regulator in a few clicks.

4) Shareholder arrangements

For nations that use nominee shareholder arrangements the AML risk increases for any business, domestic or foreign, that chooses to work with companies in that country. A nominee shareholder is someone who holds shares in benefit for another person. This creates a thick layer of obscurity that needs investigation and businesses should have on record who the nominee is holding shares for and log that information for simpler transaction monitoring.

As part of the revision to R.24 it may also be that countries no longer allow bearer shares and bearer share warrants to be issued. These are shares in securities held in custody by an agent.

Most nations have already implemented this rule, but many offshore jurisdictions still allow them to some degree. These jurisdictions only offer immobilized bearer shares which means they are kept with a licensed provider. Mobile bearer shares which provide full anonymity are no longer legal anywhere in the world.

FATF’s revisions to R.24 would see immobilized bearer shares held with financial institutions rather than licensed providers which would also come with a requirement for timely access to the UBO information for those shares. FIs may see stricter accessibility regulations come into effect to facilitate this revision and may not be able to provide as much privacy to customers as a result.

5) Penalties

Fines and fees are one of the most headline-grabbing aspects of AML and carry huge reputational and occasionally existential threats for businesses. However, when it comes to UBOs there is little that regulators can do. There are seemingly no provisions in law, anywhere, to penalise a business for poor, incorrect, or purposefully wrong UBO information.

However, this is certain to change following FATF’s review of R.24, the global watchdog has made clear that it wants an overhaul of the approach countries and companies take towards UBO information. And encouraging harsh fines is a powerful way to achieve that.

6) International alignment

Regulatory harmonisation has been a popular talking point at AML conferences for years. And due to a lack of standards some nations have not considered UBO information in any degree, making sharing information across borders far more difficult.

Language barriers do not help but creating registers and potentially centralising information as the European Banking Authority’s EuReCa is set to do may see greater efficiency in the future in some parts of the world.

What this means for transaction monitoring

In its public statement on the revision to Recommendation 24, FATF ended with this line:

The FATF expects all countries to take concrete steps to implement these new standards promptly, and to determine the appropriate sequence and timeframe for implementation at national level.

Every business should expect significant legal changes to occur in the near future with regards to R.24 and should encourage updating the UBO information for customers.

Your transaction monitoring solution should be geared towards these changes, providing a deep understanding of who your customers are. Rich client profiles are necessary to see how they move money at scale and to track who the UBOs are for various clients.

Don’t lose track of your customers or their transactions.