KYC
TECHZERO1 SMC PRIVATE LIMITED
KNOW YOUR CUSTOMER (KYC)
PROCEDURES HANDBOOK
KNOW YOUR CUSTOMER (KYC) & ANTI–MONEY LAUNDERING (AML) PROCEDURE HANDBOOK
POLICY GUIDELINES FOR KNOW YOUR CUSTOMER (KYC)
A Hand book containing detailed guidelines on KYC Policy P olicies was required to help management and staff to fully understand their obligations. This would help our front-end staff and managers to have direct interaction with the customers. KYC Laws are in the evolutionary process, new regulations and subsequent amendments will require a regular update of our procedures and skills to remain in line with the best practices followed internationally.
Regulatory Policies across the globe are focused on strict compliance of Anti Money Laundering (AML) and Know Your Customer (KYC) Laws/Regulations according to international standards. Fintech in every country are required to strictly comply with these standards besides seeking certification from their foreign correspondents that they are fully compliant with these regulations. Seen from this perspective, SBP has prescribed Prudential Regulations, which must be complied with by the financial institutions, banks, FinTech’s and their employees. Consequently, Fintech companies and banks are required to know their customers as well as their business.
We have created awareness through our website and web-portal and have also put in place procedures for our merchants and customer’s due diligence. Prevention of criminal use of banking channels for the purpose of Money Laundering and other unlawful trades is the responsibility assigned to the banks/Financial Institutions. Since KYC & AML Regulations are relatively new concepts, training courses were arranged by the u s to provide the necessary KNOW HOW to our field force.
We expect that every employee of the company, particularly Field Force and Customer Support and Regional Manager, will carefully study these guidelines, which will help them to meet their regulatory obligations. With concerted efforts and teamwork, we should be able to meet this challenge successful.
1.1 KNOW YOUR CUSTOMER (“KYC”)
The general perception of staff on KYC policy is inaccurate that central bank’s regulations make the new account opening difficult. On the contrary, proper account documentation and KYC procedures provide satisfaction and protection to the staff against unforeseen events and assist in establishing relationship in accordance with the TechZero1’s policies. Getting maximum reliable information about the customer is the basic principle of good banking which enables the Techzero1 as a Fintech Company and its partner’s bank to make correct decisions to meet with customer’s genuine banking requirements promptly. Techzero1’s officers / staff have not to be alarmed or frightened but prudently ensure that all the necessary documents have been obtained at the time of the merchant onboarding and account opening.
Our partner’s financial institutions have a statutory obligation to know their customers and to understand the nature of the business that is being conducted with us. This applies to every type of customer regardless of who they are, their personal status, or the type of account or service that they require.
Knowing your customer means:
- Seeking evidence of identity and address and independently confirming that evidence at the start of a business relationship with the Techzero1 and its partner bank. (See sub-sections 4.2-4.7).
- Seeking information regarding the nature of the business that the customer expects to conduct with the Techzero1, establishing sources of income and expected patterns of transactions, and keeping that information up to date, to show what might be regarded as normal activity for that customer. (See sub-section 4.10).
All prospective customers for accounts with TECHZERO1 must be seen face to face. The appropriate account opening and customer information forms must be completed, and any additional interview notes must be obtained and retained in the customer file. Customer Identification – General Principles
1.1.1 The Need to Verify Identity and Address
The Bank must verify the credentials of every customer when an account is first opened. This applies to all types of accounts (personal customers; sole traders/proprietors; partnerships; private and public companies etc.). Customers introduced from other branches are included in this requirement. An exemption is given when the applicant customer is itself at another bank or financial institutions.
Identity must also be verified whenever a customer without an account with the Bank (i.e. online e-commerce customer) requires a wallet / card-based remittance transaction of Rs.500,000 or more. This limit in case of merchants could be Rs.5,000,000, (case to case basis) if the IBFT / Card / Wallet remittance is to be credited to an account in the customer’s own name). The purpose of remittance column has already been included in the remittance form.
1.1.2 Completion of Account Opening and Know Your Customer Forms
All prospective merchants must complete in full the appropriate Account Sign Up Form and provide the necessary documentary evidence of identity and financial information. If any column on either form is not applicable it should be marked as N/A, no section should be left blank. The interviewer must also complete and sign the “Account Opening process with Techzero1 – “Know Your Customer” form.
Any additional information obtained during the interview about the merchant’s background and
financial standing should be recorded by the staff and kept in the merchant’s file.
1.1.3 Completion of Account Signing up Formalities and Authorization
No account will be opened until the account opening and Know Your Customer forms have been completed, and all documents have been received and examined to ensure that they are valid. For example:
- The Customer Identification Number / CNIC has not expired.
- The documents are uploaded after original seen sign offs and stamped.
- Agreement’s mandate duly signed and completed.
- All documentary evidence, information and signatures are consistent.
- In the case of giving a Third Party Mandate that the Third Party Mandate Form has been duly signed and completed.
- The email of Thanks should be sent through the registered email id of the merchant on their given addresses to notify the customer that their account has been opened.
- The login ids and passwords book should only be issued after the account opening form has been completed in all respects and the Letter of Thanks issued by the Techzero1 has been received by the customer.
In the absence of the Country Compliance Officer the account opening will be approved by CEO.
1.1.4 Reporting of Suspicious Circumstances
If there are any suspicious circumstances surrounding the opening or operation of any account, the matter must be reported immediately to the respective CCO / CEO. After making discreet inquiries, the respective CCO / CEO together with partner’s banks will send their detailed report to the Bank’s Head Compliance, giving reasons for the suspicion with their findings and shall endorse a copy thereof to the Business Group Head and Head of Compliance Group. If it is established that the transaction under review is suspicious, the CCO after due diligence and necessary checks will advise Head of Compliance Group, who will discuss it with the Techzero1’S CEO and President of the partner bank and subsequently the transaction will be reported to the State Bank of Pakistan.
1.2 CUSTOMER IDENTIFICATION – WHOSE IDENTITY MUST BE VERIFIED
Establishing the identity of anyone who wishes to do business with the Techzero1, and the bank is vital. For all applicants the Techzero1 and the bank is required to be satisfied with that:
- The person we are dealing with is who she/he says they are and lives permanently at the address they have given.
- The sole traders/proprietors, partnership, company we are dealing with is a legitimate business with a known address and represents legitimate owners.
Therefore, in respect of accounts for sole traders/proprietors, partnerships and companies, it is necessary to verify the identity of the business entity PLUS the key individuals who will be operating and managing the account as well as those who are investing into the business or controlling it.
For joint accounts, the identity of all account holders must be established. This also applies to any other third parties (e.g. power of attorney holders) who are permitted by the account holder to operate the account.
If the customer gives a mandate to a third party to operate the account, the mandate form should be signed by both parties i.e. the account holder and the third party. In such cases the identity of both should be obtained in line with the normal procedures set out above for personal customers.
1.3 CUSTOMER IDENTIFICATION – MERCHANT’S ONBOARDING
For each type of customer, certain documentation must be obtained and sufficient information gathered for us to be certain that:
- We know our new customer, having verified identity and address and understanding the customer’s business and the expected levels of transactions.
- The new customer has understood and accepted the TechZero1’s terms and conditions for the account.
- We are satisfied that the mandated individuals do have the authority of the account holder(s) to control the account, and.
- We are satisfied that the account holder(s) and their business are legitimate, and the Techzero1 and the bank are not at risk of financial loss or reputational damage.
Original identification documents must be seen, photocopied and retained in the customer’s file. Care must be taken to ensure that the copies are clear and legible and that the copies are stamped, signed and dated to show that the originals have been seen. If there is any doubt about the legality or acceptability of any document, immediate reference must be made to the Business Manager.
When a prospective customer does not yet have a permanent residential address, documentary evidence of the temporary address should be obtained and an undertaking received from the customer that documentary evidence of the permanent address will be provided to the Techzero1 as soon as it is available.
Documentary evidence could be a copy of the lease / tenancy agreement or a letter from the landlord stating that the person wishes to open account lives in his or her property as a tenant etc. This should be obtained together with a copy of the landlord’s CNIC and utility bill.
Care must be taken to ensure that the information presented / collected makes sense on a cumulative basis and does indeed relate to the applicant.
Accounts must not be opened on the strength of faxed documentation, even from within the Group. Only original or certified photocopy documentation is acceptable.
1.4 DOCUMENTATION REQUIREMENTS TO OPEN ACCOUNT
The following documentation requirements have been issued by the State Bank of Pakistan under Regulation PR-1 for the FinTech’s and Banks to obtain when they open various types of merchant’s accounts along with KYC form. Exceptions from these requirements are not allowed
DOCUMENTS TO BE OBTAINED FROM VARIOUS TYPES OF CUSTOMERS/ACCOUNT HOLDER(S) UNDER REGULATION M-1
| SR.# | Nature of Account | Documents / Papers to be Obtained |
|---|---|---|
| I | Individuals | 1. Attested CNIC/Passport verified via NADRA VERISYS.2. If CNIC has no photo: i. Attested photograph (Gazetted Officer/Nazim) ii. Attested CNIC without photo iii. Written confirmation of no other photo ID3. Salaried person: Service card or employment certificate4. Illiterate: Passport-size photo + thumb impressions |
| II | Sole Trader / Proprietorship | Efforts must be made to verify business existence.1. Attested CNIC/Passport verified via VERISYS2. If CNIC has no photo: i. Attested photograph ii. Attested CNIC without photo iii. Written confirmation of no photo ID |
| III | Partnership | 1. Attested CNIC copies of all partners2. Attested Partnership Deed3. Registration Certificate (Registrar of Firms) — or mark “unregistered”4. Original Authority Letter for account operator |
| IV | Joint Stock Companies | 1. Board Resolution authorizing account opening & operators2. Memorandum & Articles of Association3. Certificate of Incorporation4. Certificate of Commencement of Business5. Attested CNIC copies of all directors6. Form 29 (List of Directors from SECP) |
| — | Foreign Joint Stock Companies (Relaxed SBP Rules) | 1. Power of Attorney to open account2. Certificate from Company Secretary confirming business start date & that no Commencement Certificate is issued in that country |
| V | Clubs, Societies & Associations | 1. Certified Registration Certificate2. By-laws / Rules & Regulations3. Governing Body Resolution + CNIC copies of authorized persons4. Undertaking to inform bank of any change in authorized operators |
| VI | Agents’ Accounts | 1. Certified Power of Attorney2. Attested CNIC/Passport of agent |
| VII | Trust Accounts | 1. Attested Registration Certificate2. Attested CNICs of all trustees3. Certified Instrument of TrustBanks must ensure full KYC, due diligence & AML/CFT compliance |
| VIII | Executors / Administrators | 1. Attested CNICs of Executor/Administrator2. Certified Letter of Administration or Probate |
| IX | Government Accounts | 1. Must not be opened in personal names of officials2. Account opened only with special resolution/authority endorsed by Ministry of Finance or Provincial/Local Finance Department |
1.5 PROCEDURES WHERE IDENTIFICATION C ANNOT BE COMPLETED
Businesses where all the required information cannot be obtained will be declined. Exceptions will only be permitted on the decision of the Country Compliance Officer & CEO, who determines whether there are genuine reasons for the information or documentation not being available. In cases where there are no valid explanations for the absence of the information or documentation, the circumstances must be reported as a possible suspicion.
If funds are being held on behalf of the prospective merchant / customer, the written approval of the respective CEO must be obtained before funds are returned to the customer. In these circumstances, funds must never be paid away to a third party.
1.6 CUSTOMER IDENTIFICATION – CASH REMITTANCES FOR NON-ACCOUNT HOLDERS
Cash remittances for nonaccount holders present a high risk for the Techzero1 and the bank and increase the TechZero1’s vulnerability to money laundering. The additional measures listed below have therefore been introduced to mitigate those risks.
1.6.1 Outward Remittances for non-account holders
- Whenever there is any doubt in respect of the documentation, reference must be made to the country compliance officer and operations manager before acceptance of the transaction. Copies of the documentary evidence are to be retained with the remittance advice.
- Where the level of income does not appear to support the value of the remittance, but there appears to be a valid explanation, the remittance will be accepted. However, any further requests for that customer must be monitored. Any suspicions must be reported to the compliance officer using the Internal Report Suspicious Transaction Form (See Specimen Forms – Section 9).
- The Finance Manager must authorize any cash remittance of Rs.500,000 or above and make notation on the remittance form and sign the form to confirm that all of the procedures and evidence is satisfactory
1.6.2 Inward Remittances
Cash payment to non-account holders of TechZero1 SMC Private Limited will require proper evidence of identity.
1.7 CUSTOMER IDENTIFICATION – SPECIAL CIRCUMSTANCES
1.7.1 Circumstances for Declining New Accounts
New relationships that do not appear to be legitimate including those where the applicant does not supply essential documentation as required in accordance with section 4.5 or proof of identity and address must be declined.
1.8 MAINTAINING RECORD FOR THE ACCOUNTS OPENED AND CLOSED
Regional offices and Head offices will keep a record of all accounts being opened and closed; Operation Manager will send a monthly report of all accounts opened and closed to the Company’s Compliance Officer with copy to the CEO. The report will show the title of accounts, type, address and closing balance of accounts that were opened and last balance of accounts those were closed. AOF and record of accounts opened and closed must be maintained for 5 years after the relationship has ended.
1.9 KNOWING THE CUSTOMER’S BUSINESS
It is not sufficient only to identify the customer; it is also necessary to understand the customer’s
business and the use of the account or other banking service
Knowing the customer obviously includes knowing who the customer is and where he / she lives or conducts their business, but KYC is also about what the customer does, his/her/their financial circumstances and how the account will be used.
For all merchants and account holders’ information is required on:
- The purpose of the account
- The customer’s occupation profession and source(s) of income. (At times, it could be difficult for the fintech company and the bank to verify an individual’s source of income. Under such circumstances, the branch manager or account opening officer will satisfy himself / herself when interviewing customer at the time of account opening about customer’s statement about his / her income. However, for corporate and commercial customers source of income will be determined from their financials)
- The beneficial owner of any funds to be deposited or invested.
For accounts with cheque and payment facilities the following additional information is required:
- The customer’s normal expenses and outgoings; and
- Other bank accounts, credit cards, etc. held by the customer.
Unemployed customers or other customers whose income cann ot be ascertained must state whether they have any other source of income.
Customers in business should clearly state the nature of their business or profession, e.g. “importers and dealers in watches” or “accountant in private practice”. Similarly, customers in employment should state their position and the employer’s name and address. Vague words or phrases (e.g. “in business” or “in service”), should not be used.
Directors of Private Companies must confirm whether they are the principal shareholders and, if not, the beneficial owners of the company must be identified.
- KYC information is needed to establish a pattern of expected activity and can assist the Bank:
- To meet the customer’s business requirements.
- To recognize unusual transactions and thus protect the customer and the Bank from fraud
- To recognize any unusual transaction which might raise suspicion of money laundering.
No merchant will be onboarded, and account should be opened until a satisfactory understanding of the customer’s business has been obtained and documented on the Know Your Customer form.
Knowing the customer’s business is not a “one off “event.
Regular contact with the customer must be used to keep such knowledge up to date and appropriate notes must be placed in the customer’s file. All information gathered during the monitoring of existing client accounts (see Section 5) which updates knowledge of the customer, and his/her business, must be the subject of a similar note for the file.
1.10 POLITICALLY EXPOSED PERSONS (PEPS)
Business relationships with individuals holding important public positions and with people or companies clearly related to them may expose a fintech company and the bank to significant reputational and/or legal risks. Such politically exposed persons (*PEPs*) are individuals who are or have been entrusted with prominent public functions, including heads of state or of government, senior politicians, senior government, judicial or military officials, senior executives of publicly owned corporations and important political party officials. There is always a possibility, especially in countries where corruption is widespread, that such people abuse their public powers for their own illicit enrichment through the receipt of bribes, embezzlement etc.
The TechZero1’s staff should gather sufficient information from a new customer, and check publicly available information, to establish whether the customer is PEP. TechZero1’s staff should investigate the source of funds before accepting PEP. The decision to open an account for PEP should be taken at the CEO level.
1.11 TRANSACTIONS THROUGH CORRESPONDENT RELATIONSHIPS
Transactions conducted through correspondent relationships can present an additional risk for all fintech companies and the banks unless sufficiently know your customer procedures have been undertaken by the remitting fintech and the bank on the underlying client and the origin of the funds. Consequently, to comply with new regulatory guidance, additional measures will be required to ensure that we “know our correspondent banks”.
Particular attention should be paid when continuing the relationship with Correspondent Banks located in jurisdictions that have poor KYC standards or have been identified by the Financial Action Task Force (FATF) as being non-co-operative (list attached in section 9). The purpose will be to ascertain whether the correspondent bank is itself regulated for money laundering. The prevention and, if so, whether the correspondent is required to adopt Know Your Customer procedures to international standards. (PR M4, Section 4)
The volume and nature of transactions flowing through fintech and correspondent accounts with banks that do not have equivalent anti-money laundering procedures will need to be monitored against expected levels and destinations. Any material variances or unusual circumstances (whether isolated transactions or trends) will be subject to additional enquiries.
The TechZero1 and the Bank will consider terminating the accounts of correspondents who fail to provide satisfactory answers to such enquiries including, where appropriate, confirming the identity of customers featuring in unusual or suspicious circumstance
2 REVIEWING AND MONITORING CUSTOMER ACCOUNTS
2.1 THE NEED FOR VIGILANCE
Whilst it can be assumed that most merchants and the customers are honest and that their transactions are legitimate, this is not always the case. As with all banks, there will be some prospective customers who approach the TechZero1 and the bank with the deliberate intention of using our services to launder criminal funds. It is hoped that the TechZero1’s enhanced procedures for merchant’s account opening and for handling cash remittances will identify these situations at the outset.
However, it is not only prospective merchants and the customers who may put the TechZero1 and the bank at risk. Occasionally, merchants may seek deliberately to build up a degree of trust before they use the fintech company and the bank for criminal purposes; others may turn to crime because of a change in their personal circumstances. It is possible, therefore, that some existing customers may become deliberately or unintentionally involved in money laundering through cash deposits, transfers in, transfers out, or through lending or trade finance (examples are included in Section 7 of this Handbook). It is therefore vital that all staff are vigilant and that all unusual transactions for any customers are identified, discretely researched and, where there is a suspicion of money laundering, a report is made to the CCO (see Section 9 Specimen Forms).
The foundation of any monitoring procedure lies in the initial collection of identification and “know your customer” information and the ongoing updating of that information. Updating arises from regular contact with the customer and the results of regular monitoring procedures.
The nature of the business that a customer expects to conduct must be ascertained when the account is opened and regularly updated. This will enable management and staff to judge whether the customer’s transactions are in line with expectations or whether unusual transactions give cause for concern and possible suspicion that criminal money is involved.
The initial period of any new merchant and the customer relationship presents the greatest vulnerability and therefore warrants additional monitoring procedures. Once the initial period (up to the first six months) is over, ongoing routine monitoring covering all transactions becomes the norm.
Dormant and inactive accounts need to be monitored to respond to any transaction which, because of the ‘dormant’ nature of the account, is unexpected or unusual and warrants review or approval
2.2 UPDATING KNOWLEDGE OF THE CUSTOMER
All managers and staff must recognize the need to keep up to date the TechZero1’s knowledge of the customer with reference to:
- Documenting the merchant’s / customer’s banking habits and patterns of transactions.
- Documenting events or changes that are considered important for a sound knowledge of
- Merchant’s / customers and their activities.
- Noting merchant’s / customers with particularly large sums being credited/debited to/from their accounts.
- Providing easy and immediate access to merchants / customers and KYC information for the CCO and CEO; and
- Ensuring that the true beneficial owner and source of all funds is known.
- A file note must be completed recording every meeting and telephone conversation with the merchant / customer and filed in the merchant / customer file.
Accounts where there is little personal contact with the merchant / customer should be subject to review on a regular basis to ensure that any change of address or changes in circumstances that have been notified are recorded. Particular attention should be paid to any new sources of income or unexpected use of the account.
If at any time any member of staff believes that the level and nature of activity in an account is not consistent with the known business or profession of the merchant / customer, or if the transactions otherwise appear to be unusual or suspicious, a report should be made to the CCO.
2.3 SEMI – ANNUAL REVIEW OF ACCOUNTS
2.4 MONITORING RECENTLY OPENED ACCOUNTS
Accounts that have been opened within the previous six months should be closely monitored:
- To establish a normal pattern of activity.
- To ensure that the activity is in line with the merchant’s expected profile on account opening.
- To ensure that the verified identification information remains unchanged, e.g. no early notification of change of address or account signatories.
- To check and review the source of funds.
- To ensure that there are no unexplained large transactions.
2.5 TRANSACTION MONITORING
The most important safeguard against money laundering is the ability to detect suspicious transactions and to take further action to prevent the recurrence of such transactions. A few monitoring procedures have therefore been introduced for cash and non-cash transactions and these are set out below.
2.5.1 Monitoring Transactions for Merchants and Account Holders – Non-Cash Remittances & transactions
Wire transfer remittances are a high-risk area warranting special attention. Although most wire transfers involve legitimate business transactions, the speed and anonymity they afford have made the system attractive to drug traffickers and money launderers who can swiftly move their money from bank to bank and country to country and thus conceal their source and ownership.
Information on the purpose, identity of the originator and the ultimate beneficiary must be available for all foreign remittances. Further enquiries should be made if these details are not included in incoming remittances to ascertain whether there is a reportable suspicion.
2.6 THRESHOLD LIMITS
All transactions across accounts, above the following specified financial thresholds, will be reviewed and signed off as being in line with KYC information retrospectively by the respective business managers. Computer reports will be produced for accounts with a debit or credit transactions or turnover above the following threshold limits:
| High Value Transactions Limit Online and Over-the-Counter Transactions Limit for | = Rs.5,000,000 |
| Account Holders (Refer section 5.6) Cash Transactions Limit for Non-Account | = Rs.1,000,000 |
| Holders (walk-in-customers, Refer Sections | |
3.1, 4.2, 4.7 and 5.6) Cash Transactions Limit for Non-Account Holders | = Rs.500,000 |
| (Walk-in-Customers) where the funds will be moved | |
| to his own account | = Rs.1,000,000 |
- Personal and Business Accounts: Thresholds will be input into the system as per the merchant’s and account holder’s financials. For Sole Traders / Partnership accounts business managers will decide the expected debit and credit turnover in the account, and in case of personal accounts, an individual’s annual income / salary will be input as threshold limits in the system.
- Corporate Accounts: In line with the financial or expected turnovers in corporate accounts, Business Managers will decide the respective parameters to be used as threshold limits for accounts falling into this category.
The above limits have been put in place to monitor the accounts’ activities and by no means suggest that any transaction exceeding the limits will constitute a “Suspicious Transaction”. Operation Managers should use their judgment when they review such transactions and must refer to their respective Business Managers or Area Heads when in doubt.
2.7 EXCEPTION REPORTS
In order to monitor the exceptions, the following reports will be generated which will be a vital tool for monitoring customer transactions:
2.7.1 Income / Salary / Turnover Exceptions Report
This will show all the accounts where income / salary or Turnover DR or CR exceeds 25% of the parameters amount set in the account. This report will be a basic tool for monitoring financial KYC. The parameters will be updated as and when there is a change in customer circumstances.
2.7.2 High Value Transactions Report
This report will pick all customer accounts where there is any transaction of Rs.5 million (debit or credit) or over. Treasury transactions will of course be excluded from this report.
2.7.3 Over The Counter Transactions Report
This report will pick all cash transactions of Rs.1 million or over (debit or credit).
2.7.4 Transactions Alert Report
This report will pick all transactions which have taken place in any account for Rs. 1 million or more, so that Business Managers could review the transactions to ensure that these were in line with the customer’s business. Any transaction, which in his / her opinion does not match the customer’s financial profile, will be examined appropriately.
It will be the responsibility of the Business Manager to review these reports and take actions where necessary and make notifications on the reports as to what action was taken. These reports will be checked / audited by the respective CCO monthly.
Financial thresholds should be kept under review and will require to be increased / decreased in the light of experience.
2.8 MONITORING TRANSACTIONS FOR ACCOUNT HOLDERS – CASH REMITTANCES & TRANSACTIONS
Cash transactions leave the Techzero1 and the bank particularly vulnerable because of the bearer nature and universal acceptability of currency notes and the fact that there is little or no audit trial. Special care is required in handling cash transactions of large amounts. The KYC procedure should
identify customers who use cash as an integral part of their business, e.g. retail outlets, grocery stores, or restaurants. For such merchants and the customers, the normal amount and frequency of cash deposits should be estimated based on discussions with the customer and the monitoring of account transactions.
The basic principle to be followed is that the size and frequency of cash transactions should have relevance to the nature and size of the customer’s business and portion of sales generated on a cash basis. Further examples of what constitute suspicious transactions appear in Section 7.
2.9 LARGE CASH TRANSACTIONS
For any merchant or account holder who undertakes, or requests, a cash transaction of any type (including foreign exchange) for Rs.1,000,000 or more. Operation and Business Managers should approve and confirm that such transactions are in line with the KYC information. Where the funds are not drawn from, or credited to, the customer’s account, a note of the transactions should be placed on the customer’s file.
2.9.1 Monitoring Transactions – Cash Remittances for Non-Account Holders
It is not the Banks’ policy to deal with Non-Account Holders. Cash remittances for non- account holders present a particularly high risk for the Bank and require special care and vigilance. However, there could be instances where branch managers in consultation with their Business managers wish to accommodate non account holders with view to establish business relations in future, therefore they will obtain the necessary documents to accommodate the transaction.
- Copies of the documentary evidence obtained (CNIC and source of funds) should be retained with the remittance advice for five years following the date of the transaction.
- All cash remittances of Rs.500,000 and above should be transacted with the prior approval of the Business Manager / Operations Manager.
- In the case of requests for multiple cash remittance transactions by the same non account holder, enquiries should be made to assess whether there are reasons to suspect criminal activity. Any suspicions should be reported promptly to the CCO on the Transactions Alert Report form.
- In cases where the source of funds has not been verified satisfactorily e.g. because the remitter claims that the funds represent cash savings for several years, any subsequent transactions for that customer should be the subject of further enquiries.
- In general terms, staff should not hesitate to withhold their services to non-account holders who do not provide proper identification, give evasive answers to simple questions, or otherwise arouse suspicion of involvement in questionable activities.
3 RECORD KEEPING
3.1 DOCUMENT RETENTION
Records are to be retained to provide an audit trial for all funds and adequate evidence for the law enforcement agencies in their investigations;
The minimum retention periods to comply with SBP Money Laundering Regulations are:
- Account opening records and documentary evidence of identity – at least 5 years after the account is closed.
- Account ledger records – at least 5 years.
- Individual transaction records – at least 5 years.
- CCO records of suspicious reports received and reported to FMU – SBP will be kept by the TechZero1 and the bank indefinitely, till the bank gets permission from SBP to destroy such records. (PR3, Section 3)
HOWEVER
If it is known that a Police or tax investigation is under way, all records relating to the merchant account and customer under investigation must be retained until Police / Tax Authorities advise otherwise. The CCO is responsible for managing such situations for the TechZero1.
Transaction documents must be capable of distinguishing between the transactions relating to different customers and of identifying where the transaction took place and in what form.
3.2 RETRIEVAL OF DOCUMENTS
Subject to the minimum retention periods specified under 6.1 above, documents that are required under court order must be capable of being retrieved and produced within seven calendar days of the date when the order was served.
4 RECOGNISING SUSPICIONS OF MONEY LAUNDERING
4.1 WHAT IS SUSPICION?
As the types of transactions that may be used by a money launderer are almost unlimited, it is difficult to define a suspicious transaction. Suspicion is personal and subjective and falls far short of proof based on firm evidence. However, the suspicion must at least have some foundation and not just be based on mere speculation.
A suspicious transaction will often be:
- Any transaction where the amount, duration or other specific feature is inconsistent with the customer’s professional or business activities, standard of living or normal movements on the account.
- A transaction that is not logical from an economic, financial or banking point of view.
The key to recognizing suspicions is based on having enough knowledge about a customer’s normal expected transactions and financial circumstances to be able to recognize the abnormal / unusual, and from the abnormal, what might be suspicious. For example, a customer who is unemployed or working in a junior position but is making frequent large cash deposits may be involved in money laundering fraud.
4.2 EXAMPLES OF SUSPICIOUS TRANSACTIONS
Examples of what might constitute a suspicious transaction, by activity, are liste below. These are by no means exhaustive an only provide examples of some of the most basic ways by which money can be laundered. This shoul not be applie as a routine instrument in place of Common Sense.
Identification of these types of transactions does not automatically establish suspicion but shoul prompt enquiry an consideration of the circumstances. Due consideration shoul be given to the merchant’s an customer’s explanation for such transactions but not every explanation can be accepte without scrutinizing the transaction.
It is justifiable to suspect a customer who is reluctant to provide necessary information an documents to establish relationships. Business Managers shoul pay more attention to customers who provide minimal or misleading information when opening an account or provide information that is difficult or expensive for the TechZero1 an the bank to verify.
4.2.1 Transactions Which Do Not Make Economic Sense
A merchant an customer relationship with the Techzero1 an the bank that does not appear to make economic sense,
e.g. a merchant or a customer having many accounts with the same bank, frequent transfers between different accounts or exaggeratedly high liquidity.
Transactions in which assets are withdrawn immediately after being deposited, unless the merchant’s or a customer’s business activities furnish a plausible reason for immediate withdrawal.
Transactions with that cannot be reconcile with the usual activities of the customer,
e.g. the use of LC an other methods of trade finance to move money between
countries where such trade is not consistent with the customer’s usual business.
Transactions, which, without a plausible reason, result in the intensive use of what was previously a relatively inactive account, such as a merchant’s or customer’s account which shows virtually no normal personal or business relate activities but is use to receive or disburse unusually large sums which have no obvious purpose or relationship to the customer an / or his business.
4.2.2 Money Laundering Using Cash Transactions
Merchant or Customers remitting cash overseas without justification of legitimate earnings or source of funds.
Unusually large cash deposits made by an individual, or company, whose ostensible business activities woul normally be generate by cheques an other instruments.
Merchant or customers transferring large sums of money to or from overseas locations with instructions for payment in cash.
- Substantial increase in cash deposits of any individual or business without apparent cause, especially if such deposits are subsequently transferre within a short perio out of the account to a destination not normally associate with the customer.
- Merchant or customers who constantly deposit cash to cover requests for banker’s drafts, money transfers, or other negotiable an readily marketable money instruments.
- Customers who deposit cash by means of numerous credit slips, so that although each individual deposit is unremarkable, the total of all credits is significant.
- Company accounts whose transactions, both deposits an withdrawals, are denominate by cash, rather than the forms of debit an credit normally associated
with commercial operations (e.g. cheques, letters of credit, bills of exchange, etc.).
4.2.3 Money Laundering using Bank Accounts and Payment Methods
- Merchant or customers who wish to maintain several Third-Party Mandates for clients’ accounts which do not appear consistent with the type of business, including transactions, which involve nominee names.
- Any company whose account shows virtually no normal banking, or relate activities, but is use to receive or disburse large sums which have no obvious purpose or relationship with the account holder and/or their business (e.g. a substantial increase in turnover of an account).
- Reluctance to provide normal information when opening an account, providing minimal or fictitious information or, when applying to open an account, providing information that is difficult or expensive for the financial institution to verify.
- Merchant or customers who appear to have accounts with several financial institutions within the same locality, especially when the Bank is aware of a regular consolidation process from such accounts, prior to a request for onwar transmission of the funds.
- Matching payments out with credits pai in by cash on the same or previous day.
- Paying in “large” thir party cheques endorse in favor of the customer.
- “Large” cash withdrawals from a previously dormant/inactive account or from an account which has just receive unexpectedly large credit from abroad.
- Companie’s representatives avoiding contact with the Techzero1 & the bank.
- Explanatory remark “at the request of one of our merchant or customers”, whose name is not provide an use of unusual payment routes.
- A merchant or customer who opens an account in the name of a company that is active locally an proceeds to make payments an withdrawals of large sums in foreign currency.
- Substantial increases in deposits of cash or negotiable instruments by a professional firm or company, using client accounts or in-house company or trust accounts, especially if the deposits are promptly transferre between other client company or trust accounts.
- Merchant or Customers who have numerous accounts an pay in amounts of cash to each of them in circumstances in which the total of credits woul be a large amount.
- Merchant or Customers who decline to provide information that, in normal circumstances, woul make the customer eligible for credit, or for other banking services that woul be regarde as valuable.
- Insufficient use of normal banking facilities, e.g. avoidance of high-interest rate facilities for large balances.
- Large number of individuals making payments into the same account, without an adequate explanation.
4.2.4 Money Laundering by Secured and Unsecured Lending
Merchant or customers who repay problem loans unexpectedly.
Requests to borrow against assets hel by a financial institution, or a thir party, where the origin of the assets is not known, or the assets are inconsistent with the merchant’s or customer’s standing.
Request by a merchant or by the customer for the Techzero1 or the bank to provide or arrange finance where the cause of the customer’s financial contribution to a deal is unclear, particularly where property is involved.
A loan without apparent justification, or where the conditions are abnormal or loans made against offshore guarantees.
Use of external bank guarantees to guarantee a loan.
Guarantee deposits made by unknown thir parties, who do not maintain close business relationships with the customer.
The presentation of a bank guarantee for abnormally large amounts.
4.2.5 Money Laundering using Off-shore International Activity
- Use of Letters of Credit an other methods of trade finance to move money between countries where such trade is not consistent with the customer’s usual business.
- Customers who make regular and/or “large” payments, including electronic transactions (e.g. SWIFT) that cannot be clearly identifie as bona fide transactions to, or receive regular and/or “large” payments from, countries which are commonly associate with the production, processing or marketing of drugs.
- proscribe terrorist organizations or are known to be countries supporting strict banking secrecy.
- Building up excessive balances, not consistent with the known turnover of the merchant’s or customer’s business, an subsequent transfer to account(s) hel overseas.
- Unexplaine electronic fun transfers by customers on an in-and-out basis, or without passing through an account.
- Frequent requests for traveler’s cheques, or foreign currency drafts, or other negotiable instruments to be issued.
- Frequent paying in of traveler’s cheques, or foreign currency drafts, particularly if originating from overseas.
5 REPORTING SUSPICIONS
5.1 OVERVIEW
The Bank must, by Law, have procedures in place for reporting suspicious transactions and circumstances. There are four stages to the TechZero1’s suspicious transaction reporting procedure:
- It is the duty of every member of management and staff to report any suspicious transactions or suspicions to the Company Compliance Officer (CCO) with copy to the CEO and Head of Compliance of the partner financial institution.
- All Internal Suspicious Transaction Reports must reach CCO with a copy to CEO and must not be blocked at any level.
- The CCO will initially scrutinize the report and will decide on the basis of all available information and additional enquiries whether the transaction remains suspicious or whether there is some additional information that removes the suspicion.
- If the CCO considers the suspicion to be justified, he will prepare a report in conjunction with the respective Business Manager / Relationship Manager after making discreet enquiries for the CCO who will review the findings and accordingly discuss it with the CEO. CEO will discuss the matter with the partner financial institution and accordingly advise Financial Monitoring Unit (FMU) at State Bank of Pakistan (SBP). The Internal Suspicious Report Form will remain on file within the Techzero1 or the bank and is not passed to FMU. The name of the individual member of staff who made the report will not be revealed.
Once a report has been made in line with these procedures, all personal legal obligations have been met. All reports submitted to FMU are treated with the strictest confidence. The merchant or the customer is never informed and to do so would be a criminal offence.
5.2 REPORTING PROCEDURES FOR STAFF AND MANAGEMENT
- Staff with any suspicion must report immediately on the Internal Suspicious Transaction Report Form a copy of which is set out in Section 9.
- Company’s staff must provide the original of the Suspicious Transaction Report Form to the Business Manager and at the same time send a copy to the CCO. The Business Manager will consider the report, incorporate any comments of his own, and forward the original to the CCO and a copy to the CEO.
- In the absence of the CEO, back-up Risk Manager will be designated by CCO.
- It is important that the reason for the suspicion is explained fully. It is of critical importance that such suspicions must not be discussed with anyone outside the Techzero1 and the bank. Care must be taken in discussing a suspicion, even with other colleagues, and if this is considered not to be appropriate, then discussion must only be held with the CCO or CEO.
- It is vital that no mention of such suspicion is made to the merchant or the customer. Any discussion of this nature would risk a tipping off offence being committed if the merchant or the customer became aware that a report had been submitted.
- All staff must note that once the reporting process has commenced, it must be followed through and completed, even if the original suspicion might appear to have been resolved.
- The CCO will examine all reports and make additional enquiries as deemed appropriate. If also suspicious, the CCO will submit a formal disclosure report to the CEO for review and onward submission to the FMU (if appropriate) through Head of Compliance of the partner bank.
- This procedure must be followed and repeated every time there is an unusual transaction, even if the Techzero1 and the bank has already notified FMU of previous unusual transactions relating to that customer/account.
- All reports will be retained by the CCO for reference purposes whether or not the transaction is reported to FMU.
- TECHZERO1 will not hesitate to report to partner bank or the Financial Monitoring Unit at State Bank of Pakistan, because by failing to make a report, we are committing an offence. Business managers will give top priority to queries raised by CEO regarding any account which is under suspicion, as the delays could cause serious problems.
5.3 CEO REPORTING PROCEDURE
The CEO will, on receipt of the report from CCO, undertake sufficient enquiries to determine whether, in his judgement, the abnormal transaction is suspicious.
The CEO may wish to review:
- The account opening records and KYC informati
- Historical transaction patterns
The CEO may wish to discuss the report with:
- Head of Compliance
- The member of operations and business staff
- Other members of management as may be appropriate.
The CEO will:
- Review CCO’s Report.
- Document his enquiries.
If the CCO decides to make a report to the FMU at SBP, he will discuss his findings with the CEO. After getting the CEO’s clearance, he will send the same to the FMU at SBP. If the CCO / Head of Compliance Group decides not to make a report to FMU, a record of the report will be retained after recording their findings.
5.4 ACTIONS AFTER REPORTING
When the investigators need to use the information from the Bank, they will contact the Bank with an appropriate Court Order, and it is this information that may be used in Court.
It is possible that FMU or an investigator might approach the Bank for additional explanation of the initial report, or for other information. No member of management or staff provide any explanation or information, and the enquirer must be referred to the Compliance Officer.
5.5 COMPLETING THE ANNUAL ACKNOWLEDGEMENT FORM FOR THE PREVENTION OF MONEY LAUNDERING
Annually, all branch managers must complete the “Annual Acknowledgement Form for the Prevention of Money Laundering” and submit it to the respective GMs. The purpose of the form is to certify that either they have not been suspicious, or that any suspicions have been reported to the RCO and additionally confirming that they have read the Anti Money Laundering Handbook and fully understand their legal obligations and the requirements of the Bank.
These forms will be forwarded to the respective Regional Compliance Officers (RCOs) for onward submission to the Regional Head Compliance (RHC).
6 SPECIMEN FORMS / LISTS
- SuspiciousTransaction Internal Report Form
- Annual Acknowledgement Form for the Prevention of Money Laundering
- LargeCash Transactions Form
- SUSPICIOUS TRANSACTION – TechZero1’s Internal Report Form