Introduction: Context and importance of AML for fiduciaries in Switzerland
The Anti-Money Laundering Act (AML) is not just a mere administrative formality. It is a key pillar to ensure the integrity of the Swiss financial system. As a fiduciary, you are on the front line to detect and prevent suspicious activities. But beware, AML requirements are constantly evolving. Since recent reforms, compliance expectations have become even stricter. So, are you sure you are up to date?
In this article, we review the key obligations, processes to implement, and pitfalls to avoid. In practical terms, we will give you the tools to navigate this demanding regulatory framework while protecting your business.
Fiduciary obligations under AML
In Switzerland, fiduciaries are financial intermediaries subject to AML. This means you have specific legal responsibilities. Here are the main ones:
- Client identification: You must verify the identity of your clients and beneficial owners.
- Transaction monitoring: Any unusual or suspicious operation must be identified and analyzed.
- Reporting obligation: If you suspect money laundering activity, you must alert the Money Laundering Reporting Office Switzerland (MROS).
- Ongoing training: You and your staff must be regularly trained on AML obligations.
Failure to comply with these obligations can be costly, both financially and reputationally. Penalties can reach several hundred thousand francs, not to mention the impact on your credibility.
KYC process: identifying clients and beneficial owners
The KYC (Know Your Customer) process is at the heart of AML. But how does it work in practice?
Key steps of KYC
- Client identification: You must verify your client’s identity using official documents (passport, ID card, commercial register extract, etc.).
- Beneficial owner identification: If your client acts on behalf of a third party, you must know who is really behind the transaction.
- Information verification: The data provided must be cross-checked with reliable sources to ensure accuracy.
- Risk assessment: Each client must be classified according to their risk level (low, medium, high).
Practical example
A client asks you to open a company in Geneva. He provides a valid passport, but you notice he hesitates to answer questions about the source of funds. In this case, you must deepen your checks and, if necessary, refuse the business relationship.
PEPs and managing high-risk business relationships
PEPs, or politically exposed persons, represent a particular risk. Why? Because they hold important public functions and are therefore more likely to be involved in corruption cases.
How to identify a PEP?
- Check if the client or beneficial owner appears on a PEP list.
- Ask specific questions about political or public functions held.
- Be attentive to family or professional relationships with PEPs.
What to do if you identify a PEP?
- Strengthen your controls: Analyze in detail the origin of funds and transactions.
- Obtain internal approval: Any relationship with a PEP must be validated by management.
- Continuous monitoring: Transactions must be closely monitored to detect any suspicious activity.
Failure to comply with these obligations can result in severe penalties.
Monitoring and tracking international sanctions under AML
International sanctions are another crucial aspect of AML. As a fiduciary, you must ensure your clients are not on sanction lists.
How to proceed?
- Regularly check sanction lists published by SECO.
- Implement automated monitoring tools to quickly detect matches.
- Train your team so they know how to react if a match is found.
Failure to comply with these obligations can result in financial penalties or even criminal prosecution.
Reporting procedures to MROS: requirements and risks for fiduciaries
MROS (Money Laundering Reporting Office Switzerland) is your main contact in case of suspicion. But be careful, reporting a suspicious activity is not to be taken lightly.
When to report?
- If you have reasonable suspicion of money laundering.
- If a transaction seems unusually complex or disproportionate to the client’s profile.
How to report?
- Gather evidence: Documents, correspondence, bank statements, etc.
- Complete the official form available on the MROS website.
- Send the report as soon as possible.
Risks of not reporting
- Fines up to CHF 500,000.
- Suspension of your operating license.
- Risk of criminal prosecution.
Compliance file: best practices and internal audits
A well-maintained compliance file is your best ally in case of inspection. Here’s what it should contain:
Checklist: Contents of the compliance file
- Copies of identity documents of clients and beneficial owners.
- Results of risk assessments.
- Transaction history.
- Internal audit reports.
- Proof of ongoing training for you and your team.
Best practices
- Update your files regularly.
- Digitize your documents for quick access.
- Conduct internal audits at least once a year.
Outlook: impact of AML reforms and upcoming introduction of the PSPA
AML continues to evolve, and the next big step is the introduction of the Payment Service Providers Act (PSPA). This new law aims to further strengthen transparency and the fight against money laundering.
What could change
- New reporting obligations for payment service providers.
- Stricter controls for cross-border transactions.
- Harsher penalties in case of non-compliance.
In short, it’s time to prepare. In our opinion, the best approach is to invest in robust compliance tools and train your teams regularly.
FAQ
What are the new obligations of the AML revision for fiduciaries?
Fiduciaries must now strengthen their KYC controls, monitor transactions in real time, and report any suspicious activity to MROS.
How to improve compliance with KYC requirements?
Invest in automated tools, train your teams, and conduct regular audits to identify weaknesses.
What are the roles of OAR-FIDUCIAIRE|SUISSE and MROS?
OAR-FIDUCIAIRE|SUISSE supervises fiduciaries regarding AML, while MROS receives and analyzes reports of suspicious activities.
What does a fiduciary risk in case of non-compliance with AML?
Fines up to CHF 500,000, suspension of the operating license, and criminal prosecution.
What tools can help comply with AML?
Compliance management software, sanction databases, and specialized training for your staff.
Will the PSPA impact fiduciaries?
Yes, especially if you offer payment services. Expect additional obligations and stricter controls.
Practical implementation of internal audits for AML compliance
Internal audits are essential to ensure your fiduciary complies with AML requirements. They help identify weaknesses in your processes and correct them before an external inspection reveals non-compliance.
Steps for an effective internal audit
- Audit planning:
- Define the objectives of the audit (e.g., check KYC file compliance or assess reporting processes).
- Identify the necessary resources, including team members involved.
- Audit execution:
- Analyze a representative sample of client files.
- Check documentation of KYC processes and risk assessments.
- Test automated monitoring tools to ensure their effectiveness.
- Report and recommendations:
- Write a detailed report of the results, highlighting weaknesses and non-compliance.
- Propose corrective actions and a timeline for implementation.
- Follow-up:
- Ensure recommendations have been implemented.
- Schedule the next audit to assess progress.
Checklist: Preparing for an internal audit
- Define audit objectives.
- Select a representative sample of client files.
- Check KYC document compliance.
- Analyze risk assessments.
- Test automated monitoring tools.
- Write an audit report with recommendations.
- Plan follow-up to assess progress.
Technological tools for optimal compliance
Technology plays a key role in AML compliance management. Digital tools allow you to automate processes, reduce human error, and save time.
Types of available tools
- KYC software:
- Automatic identity verification.
- Risk analysis based on algorithms.
- Integration with sanction databases.
- Transaction monitoring tools:
- Real-time detection of unusual transactions.
- Automatic alerts for suspicious activities.
- Document management systems:
- Secure archiving of compliance documents.
- Quick and centralized access to client files.
Comparative table of compliance tools
| Feature | Software A | Software B | Software C |
|---|---|---|---|
| Automated KYC verification | Yes | Yes | No |
| Transaction monitoring | Yes | No | Yes |
| Integration with sanction databases | Yes | Yes | Yes |
| Monthly cost (CHF) | 500 | 300 | 200 |
| Customer support | 24/7 | 9am-6pm | 9am-5pm |
Tips for choosing a tool
- Prioritize solutions that offer easy integration with your existing systems.
- Test several tools before committing.
- Make sure the provider offers responsive technical support.
Case studies: common mistakes and lessons learned
Case 1: Insufficient identification of beneficial owners
A fiduciary based in Zurich was fined for not properly identifying the beneficial owners of several clients. Result: a CHF 200,000 fine and loss of major clients.
Lesson learned: Do not rely solely on information provided by the client. Use verification tools and request additional documents if necessary.
Case 2: Failure to report to MROS
A firm in Lausanne failed to report a suspicious transaction, thinking it was an administrative error. An investigation revealed the transaction was linked to an international fraud case. The firm was forced to close temporarily.
Lesson learned: When in doubt, it is better to report a suspicious transaction. MROS is there to analyze and confirm your suspicions.
FAQ (continued)
How to manage relationships with high-risk clients?
For high-risk clients, it is crucial to strengthen controls. This includes thorough verification of the source of funds, increased transaction monitoring, and internal validation by management before establishing a business relationship.
What are the deadlines for reporting suspicious activity to MROS?
You must report suspicious activity to MROS without delay, ideally as soon as you have reasonable suspicion. Failure to do so may result in penalties.
What are the benefits of regular internal audits?
An internal audit allows you to identify and correct weaknesses in your compliance processes before an external inspection detects them. This reduces the risk of penalties and improves your fiduciary’s reputation.
How to prepare for an OAR inspection?
Ensure your compliance files are complete and up to date. Train your team regularly and conduct internal audits to verify your processes meet AML requirements.
Do fiduciaries need to monitor cryptocurrencies?
Yes, if your clients use cryptocurrencies, you must implement specific controls to monitor these transactions, as they are often associated with increased money laundering risks.