AML-2.2 AML-2.2 On-going Customer Due Diligence and Transaction Monitoring
Risk Based Monitoring
AML-2.2.1
Capital Market Licensees must develop risk-based monitoring systems appropriate to the complexity of their business, their number of clients and types of transactions. These systems must be configured to identify significant or abnormal transactions or patterns of activity. Such systems must include limits on the number, types or size of transactions undertaken outside expected norms; and must include limits for cash and non-cash transactions including transactions inaccepted crypto-assets .Amended: January 2022
Amended: January 2020
Added: October 2010AML-2.2.2
Capital Market Licensees risk-based monitoring systems should therefore be configured to help identify:(a) Transactions which do not appear to have a clear purpose or which make no obvious economic sense;(b) Significant or large transactions not consistent with the normal or expected behaviour of a customer; and(c) Unusual patterns of activity (relative to other customers of the same profile or of similar types of transactions, for instance because of differences in terms of volumes, transaction type, or flows to or from certain countries), or activity outside the expected or regular pattern of a customer's account activity.Amended: January 2022
Added: October 2010Automated Transaction Monitoring
AML-2.2.3
Capital Market Licensees must consider the need to include automated transaction monitoring as part of their risk-based monitoring systems to spot abnormal or unusual flow of funds. In the absence of automated transaction monitoring systems, all transactions above BD6,000 must be viewed as 'significant' and be captured in a daily transactions report for monitoring by the MLRO or a relevant delegated official, and records retained by theCapital Market Licensees for five years after the date of the transaction.Amended: January 2022
Added: October 2010AML-2.2.4
The CBB would expect larger
Capital Market Licensees to include automated transaction monitoring as part of their risk-based monitoring systems. See also Chapters AML-3 and AML-6, regarding the responsibilities of the MLRO and record-keeping requirements. Where theCapital Market Licensee is not receiving funds — for instance where it is simply acting as agent on behalf of a principal, and the customer is directly remitting funds to the principal — then theCapital Market Licensee may agree with the principal that the latter should be responsible for the daily monitoring of such transactions.Amended: January 2022
Added: October 2010Unusual Transactions or Customer Behaviour
AML-2.2.5
Where a
Capital Market Licensee's risk-based monitoring systems identify significant or abnormal transactions (as defined in paragraph AML-2.2.2 and rule AML-2.2.3), it must verify the source of funds for those transactions, particularly where the transactions are above the transactions threshold of BD6,000. Furthermore,Capital Market Licensees must examine the background and purpose to those transactions and document their findings. In the case of one-off transactions where there is no ongoing account relationship, theCapital Market Licensees must file a Suspicious Transaction Report (STR) if it is unable to verify the source of funds to its satisfaction (see Chapter AML-4).Amended: January 2022
Added: October 2010AML-2.2.6
The investigations required under rule AML-2.2.5 must be carried out by the MLRO (or relevant delegated official). The documents relating to these findings must be maintained for five years from the date when the transaction was completed (see also rule AML-6.1.1 (b)).
October 2010AML-2.2.7
Capital Market Licensees must consider instances where there is a significant, unexpected or unexplained change in customer activity.Amended: January 2022
Added: October 2010AML-2.2.8
When an existing customer closes one account and opens another, the
Capital Market Licensees must review its customer identity information and update its records accordingly. Where the information available falls short of the requirements contained in Chapter AML-1, the missing or out-of-date information must be obtained and re-verified with the customer.Amended: January 2022
Added: October 2010AML-2.2.9
Once identification procedures have been satisfactorily completed and, as long as records concerning the customer are maintained in line with Chapters AML-1 and AML-6, no further evidence of identity is needed when transactions are subsequently undertaken within the expected level and type of activity for that customer, provided reasonably regular contact has been maintained between the parties and no doubts have arisen as to the customer's identity.
October 2010Ongoing Monitoring
AML-2.2.10
Capital Market Licensees must take reasonable steps to:(a) Scrutinize transactions undertaken throughout the course of that relationship to ensure that transactions being conducted are consistent with thecapital market licensee 's knowledge of the customer, their business risk and risk profile; and(b) Ensure that they receive and maintain up-to-date and relevant copies of the identification documents specified in Chapter AML-1, by undertaking reviews of existing records, particularly for higher risk categories of customers.Capital Market Licensees must require all customers to provide up-to-date identification documents in their standard terms and conditions of business.Amended: January 2022
Amended: October 2017
Added: October 2010AML-2.2.11
Capital Market Licensees must review and update their customer due diligence information at least every three years, particularly for higher risk categories of customers. If, upon performing such a review, copies of identification documents are more than 12 months out-of-date, theCapital Market Licensees must take steps to obtain updated copies as soon as possible.Amended: January 2022
Amended: October 2017
Added: October 2010AML-2.2.12
Capital Market Licensees must in addition to rules AML-2.2.10 and AML-2.2.11, maintain information and documents in respect to client transactions such as date of execution, value of transaction, type ofSecurities and identity of the counterparty.Amended: January 2022
Added: October 2010