HM Treasury – Transposition of the Fifth Money Laundering Directive
Thursday 4 January 2024
HM Treasury is consulting on implementing the Fifth Money Laundering Directive (5MLD). The UK agreed to an implementation period with the European Union in which common rules would remain in place until January 2020. The UK was also heavily involved in the negotiation of 5MLD and will continue to share the objectives which it seeks to achieve and will be transposing the 5MLD into UK legislation before the end of the implementation period.
The most impactful proposal for credit unions is the proposal to include credit unions on the list of firms required to contribute information to a national register of bank accounts, possibly on a weekly basis. Please get in touch with ABCUL with your views on these proposals by emailing enquiries@abcul.org or calling 0161 832 3694 by Wednesday 5 June 2019.
Key proposals for credit unions
Customer Due Diligence (CDD)
Electronic Identification Processes
5MLD sets out under which circumstances secure, remote or electronic processes may be taken into account in undertaking customer due diligence. The government is asking for views on whether additional clarification as to what constitutes a ‘secure’ electronic identification process and whether details of this should be set out in guidance.
Electronic identification processes need to be “regulated, recognised, approved or accepted at a national level by the national competent authority” in order for these to be taken into account for verification. The consultation recognises that this approval can be implicit and welcomes views on whether standards on such processes set out in Treasury approved guidance (such as the Joint Money Laundering Steering Group (JMLSG)) would constitute implicit recognition.
Government is asking whether such a change would likely to encourage firms to make more use of electronic means of identification with further clarity around what processes would be acceptable. Government is also asking if there are any additional measures they could introduce to encourage the use of electronic means of identification.
Customer Due diligence requirements for corporates
Currently where the beneficial owner of a company is identified as the senior managing official of that company, firms must take reasonable steps to verify the identity of the person who holds the senior managing official position. Where firms exhaust all possible means of identifying the beneficial owner and hasn’t succeeded then they must keep written records of the actions taken to identify the beneficial owner.
Where a firm fails to identify a beneficial owner, 5MLD will require firms to take further steps to verify the identity of the senior person in the company and keep written record of these actions. The government proposes to amend regulation 28(8) of the Money Laundering Regulations (MLRs) to add this requirement.
Understanding the ownership and control structure of corporates
The government proposes to introduce an explicit requirement for firms to “understand the nature of their customer’s business and its ownership and control structure”. This was a recommendation from the Financial Action Task Force (FATF) which was only partly met by regulation 28(4)(c) of the MLRs which requires firms to take reasonable measures to understand the ownership and control structure of a legal person (such as a company) which is beneficially owned by another legal person.
Essentially, the change here is the removal of the words ‘reasonable measures’ from firm’s requirement to understand the ownership structure of their corporate customers.
Where firms cannot apply Customer Due Diligence
Regulation 31 requires firms to cease transactions and consider filing a Suspicious Activity Report (SAR) where they cannot apply Customer Due Diligence (CDD) measures under regulation 28. Government proposes to extend requirement this where a firm cannot apply additional CDD measures for credit institutions and financial institutions under regulation 29. They also intend this requirement to apply where firms cannot apply the Enhance Due Diligence (EDD) measures under regulations 33-35.
The proposals intend to clarify that if any of the measures in regulations 29 and 33-35 cannot be taken, firms are required to terminate the relationship and consider filing a Suspicious Activity Report (SAR).
Government is seeking views on whether this clarification should be made and whether to exclude those requirements which have ‘built-in follow up actions’ such as the requirement to gain approval from a senior manager before establishing a relationship with a Politically Exposed Person (PEP). In this example, if management approval cannot be acquired to on-board a PEP then a relationship cannot be formed in the first place and the firm would not need to terminate the relationship.
Additional Customer Due Diligence steps for financial firms (regulation 29)
- Requires insurance companies to identify and verify the beneficiary of the policy.
- Requires all firms to not create new anonymous accounts or passbooks.
Beneficial Owner Register Requirements for companies and trusts
5MLD requires that where firms enter into a business relationship with a company or trust that is subject to beneficiary ownership registration requirements they must collect either:
- Proof of registration on this register
- An excerpt of the register
Currently regulation 30 (2) requires a firm to verify the identity of a customer, any person purporting to act on behalf of the customer and any beneficial owner of the customer before establishing a business relationship or carrying out a transaction.
The government proposes to amend this regulation to include the requirements above to collect proof of registration or an excerpt of the register from the company of trust. However, this would only be required in the case of new business relationships.
The government proposes to put the onus on the company or trust to provide the proof of registration to the firm, upon the firm’s request (generally at the point a business relationship is being considered). The consultation notes that the Companies House register is public so the firm could potentially obtain the information directly if it so wishes.
Requirement for Ongoing CDD where there is a duty to review beneficial ownership information
5MLD requires that where firms have a legal duty to perform a review of beneficial ownership information (such as where they are required to obtain or confirm a company’s tax jurisdiction under international tax regulations) customer due diligence should also be performed.
New Register for Trusts
5MLD requires to UK to create a non-public register of trusts for which registration of new trusts will be required from April 2020. Where dealing with a trust, firms will be required to collect proof of registration on the Trust Register, however, the onus will be on the trust to provide this.
A HMRC technical consultation will be published this year which will consult on the information that the trustee would need to provide which is likely to be more than simply the trust registration number.
Changes to Enhanced Due Diligence
Transactions involving third countries
Firms are currently required to undertake Enhanced Due Diligence (EDD) in relation to high-risk third countries. During the implementation period, the UK will continue to use the EU list of high-risk countries but the UK government will legislate to for its own list of high-risk countries which will likely be closely aligned with the EU’s list.
The scope for when firms need to perform (EDD) will be changed from covering ‘natural persons or legal entities established in the third countries’ to ‘business relationships or transactions involving high-risk third countries’. This broadens the scope of when Enhance Due Diligence will need to be performed and will focus on whether the transaction involves a high-risk country rather than the nationality of the parties involved. Any enhanced monitoring required will also apply to this new scope.
What will constitute a business relationship or transaction involving a high-risk country?
The government is considering how broadly to define which transactions ‘involve’ a high-risk third country as the 5MLD does not set out directly what ‘involve’ means in this context.
The government sees merit in providing as broad a definition as possible; however, they acknowledge that issues will arise if the definition is set too broadly. For example, the government intends to narrow the definition to exclude UK citizens who are also nationals of countries identified as high-risk countries to be subject to EDD purely as a result from having such a connection. Including these people in the definition of involve could unfairly exclude them from financial services.
The government is seeking views what unintended consequences a broad definition of ‘involve’ could have.
Actions required for Enhanced Due Diligence
Currently firms are required to examine the background and purpose of business relationships and transactions with customers established in high-risk countries but under 5MLD firms will be explicitly required to obtain additional information on:
- The customer and beneficial owner(s)
- The intended nature of the business relationship
- The source of funds and wealth of the customer and beneficial owners(s)
- The reasons for the intended for performed transactions
Firms will also be expected to apply at least one additional measure to those carrying out transactions involving high-risk countries i.e.:
- Applying additional elements of enhanced due diligence
- Introduce an enhanced reporting mechanism or systematic reporting for financial transactions.
- Limiting the business relationships with natural persons or legal entities from the high-risk country.
Politically Exposed Persons
The Government will use the Financial Conduct Authority’s indicative list of Politically Exposed Persons (PEPs) for other sectors; there is no change for credit unions. Our information guide on PEPs can be found here.
Duty to report discrepancies to central beneficial owners lists
Article 30(4) of the 5MLD will require firms to report any discrepancies between the beneficial ownership information held on central registers (i.e. Companies House and People with Significant Control) and the information that they hold.
As a part of due diligence requirements, firms are required to identify and take reasonable steps to verify a customer’s beneficial ownership information and may utilise information from Companies House or People with Significant Control registers but may not solely rely on them.
If a firm notices a discrepancy with the information on the register it would need to report that discrepancy. The government proposes to use a reporting mechanism built into Companies House for this purpose. Companies House would then investigate by contacting the company and asking if the information held with them is accurate.
National Register of bank account ownership
5MLD requires the UK to establish a centralised automated mechanism which allows identification of natural and legal persons which hold or control bank accounts, payment accounts or safe deposits held by credit institutions in the UK.
This would be accessible to Financial Intelligence Units (FIUs) and other competent authorities. The government proposes that these will be:
- Financial Conduct Authority
- National Crime Agency
- Serious Fraud Office
- the 43 territorial police forces in England and Wales
- the police services of Scotland and Northern Ireland
- HM Revenue & Customs
- Companies House
This would include the following information:
- The name of the customer account-holder, and any person purporting to act on behalf of the customer, along with a unique identification number or other information needed for the purposes of CDD.
- The names of any beneficial owners of the customer account-holder (where relevant)
- The names of the lessees of any safe deposit boxes and the duration of the lease period.
- The IBAN numbers of the bank or payment account, along with the dates on which the account was opened and closed
The government is proposing to require credit unions to contribute to this register despite the lack of an IBAN number on members’ accounts. The government believes that excluding credit unions from the requirement would incentivise money launderers to exploit these accounts. However, the government acknowledges that the benefits of including such information on the register must be weighed against the costs of administrative and financial costs of doing so.
Scope of information included on the register
5MLD is not clear on the precise nature of the information to be displayed on the register but the government is currently proposing to require firms to submit the following:
- Person’s name
- Address
- Date of birth
- Unique identifying number provided by the credit union
- Date(s) the account was opened / closed
- For Trustees or unincorporated institutions, the individual account-holder’s details
The government is considering the merits of requiring registration of specific types of unique identifier such as passport numbers and/or national insurance numbers.
For companies the government are proposing to require:
- Registered name of legal person;
- Registered company number (or for non-UK companies an equivalent identifying number)
- Date(s) that the account was opened / closed
- Names of the ultimate beneficial owners of the legal person
- Unique identifying number provided by the credit union for the beneficial owners.
The government is also considering whether to require passport and / or national insurance numbers for the beneficial owners of the company.
Submission of information
The government currently envisages that updates to information contained on the register will be submitted on a weekly basis, with no obligation to re-submit data which has not changed since the previous date of submission.
The government is also considering a system where the relevant bodies can access the information on the register directly by accessing the systems of the reporting organisations which has been used in other jurisdictions which have implemented similar registers.
