Guidelines to MAS Notice 626
The documents MAS accepts, the 25% example and the non-face-to-face checks.
Singapore KYC, notice by notice.
Each MAS sector Notice (all revised 30 June 2025) asks for the same five identity items and accepts Myinfo as a reliable and independent source.
Fill Easy returns Myinfo data through Singpass, ACRA and foreign registry records, and company ownership.
A summary, not legal advice: the official text governs, and your compliance team decides what your policies require.
One regulator, one Notice per sector.
The Monetary Authority of Singapore issues an AML/CFT Notice and matching Guidelines for each kind of financial institution, all revised or reissued on 30 June 2025 and in force from 1 July 2025.
Corporate service providers answer to ACRA instead, under the Corporate Service Providers Act 2024 (in force 9 June 2025). Companies must keep a register of registrable controllers.
At a glance
- Rules
- Sector AML/CFT Notices and Guidelines, revised 30 June 2025, in force 1 July 2025
- Beneficial owner
- No fixed threshold in the Notices; more than 25% is given as an example
- Records
- At least five years after the relationship ends
- Regulators
MASMonetary Authority of Singapore
ACRAAccounting and Corporate Regulatory AuthorityACRA supervises corporate service providers.- Digital identity
- SingpassSingpass and MyinfoMAS treats Myinfo as a reliable and independent source for name, ID number, date of birth, nationality and address.
Choose your sector.
MAS sets due diligence in a Notice for each kind of institution. Pick yours to see what it accepts, and what Fill Easy supplies.
Notice 626BanksMAS Notice 626, revised 30 June 2025 (opens in a new tab)Individuals
Identify the customer
Full name and aliases, unique identification number (identity card, birth certificate or passport), residential address, date of birth and nationality (para 6.6(a)).
GovVerify · SingpassNRIC or FIN, name, nationality and address from Myinfo's government sources, shared with the customer's consent.Verify from a reliable, independent source
Para 6.9. The Guidelines (6-6-1 and 6-6-2) name a passport or national identity card and, for address, an identity card, recent utility or telephone bill, bank statement or government letter. MAS treats Myinfo as a reliable and independent source for all five items, with no further document or photograph (circular AMLD 01/2018).
GovVerify · SingpassMyinfo data through Singpass, which MAS accepts in place of identity documents and a photograph for these five items.Foreign customers
Myinfo holds no passport details, so for foreigners MAS expects further checks beyond Myinfo (circular AMLD 01/2022).
GovVerifyCustomers from Hong Kong, Singapore, the UAE or Mainland China verified by their government's digital identity, where your policy accepts it.
Companies
Identify and verify the entity
Name, registration number, registered address and principal place of business, date and place of incorporation, legal form, constitution and powers. The Guidelines accept records in an independent company registry, the certificate of incorporation or good standing, and the constitution (6-6-1 and 6-6-2 and Appendix A).
CorpVerify · registry searchThe ACRA business profile and constitution for a Singapore company; the home registry's extract for a foreign one.Directors and executives
Names and identification numbers of directors and anyone with executive authority; the Guidelines name company registries as a source.
CorpVerify · registry searchDirectors and officers as the registry records them, with their identification details where the registry holds them.Beneficial owners
Ownership, then control by other means, then executive authority, verified with reasonable measures and the structure understood (para 6.13 to 6.15). The Notices set no percentage: more than 25% is only an example (Guidelines 6-8-2), and a customer's own declaration needs corroborating.
CorpVerify · UBO tracingOwnership traced through each registry to the natural persons at the top, with each layer's jurisdiction and holding.Ongoing monitoring
Customer information kept up to date through the relationship.
Monitoring and remediationThe book re-checked at source from one Excel file, with director, owner, address and status changes flagged.
Non-face-to-face and records
- Non-face-to-face due diligence must be at least as robust as face to face (para 6.27 to 6.29).
- The Guidelines (6-11-3) suggest further checks against impersonation, such as a verified phone call, confirming address or employer, certified identity documents or a first deposit from a Singapore bank account.
- Records kept for at least five years after the relationship ends (para 12.3).
SFA04-N02Capital markets intermediariesMAS Notice SFA04-N02, 30 June 2025 (opens in a new tab)Individuals
Identify the customer
Full name and aliases, unique identification number (identity card, birth certificate or passport), residential address, date of birth and nationality (para 6.5 and 6.6).
GovVerify · SingpassNRIC or FIN, name, nationality and address from Myinfo's government sources, shared with the customer's consent.Verify from a reliable, independent source
Para 6.9. The Guidelines (6-6-1 and 6-6-2) name a passport or national identity card and, for address, an identity card, recent utility or telephone bill, bank statement or government letter. MAS treats Myinfo as a reliable and independent source for all five items, with no further document or photograph (circular AMLD 01/2018).
GovVerify · SingpassMyinfo data through Singpass, which MAS accepts in place of identity documents and a photograph for these five items.Foreign customers
Myinfo holds no passport details, so for foreigners MAS expects further checks beyond Myinfo (circular AMLD 01/2022).
GovVerifyCustomers from Hong Kong, Singapore, the UAE or Mainland China verified by their government's digital identity, where your policy accepts it.
Companies
Identify and verify the entity
Name, registration number, registered address and principal place of business, date and place of incorporation, legal form, constitution and powers. The Guidelines accept records in an independent company registry, the certificate of incorporation or good standing, and the constitution (6-6-1 and 6-6-2 and Appendix A).
CorpVerify · registry searchThe ACRA business profile and constitution for a Singapore company; the home registry's extract for a foreign one.Directors and executives
Names and identification numbers of directors and anyone with executive authority; the Guidelines name company registries as a source.
CorpVerify · registry searchDirectors and officers as the registry records them, with their identification details where the registry holds them.Beneficial owners
Ownership, then control by other means, then executive authority, verified with reasonable measures and the structure understood (para 6.13). The Notices set no percentage: more than 25% is only an example (Guidelines 6-8-2), and a customer's own declaration needs corroborating.
CorpVerify · UBO tracingOwnership traced through each registry to the natural persons at the top, with each layer's jurisdiction and holding.Ongoing monitoring
Customer information kept up to date through the relationship.
Monitoring and remediationThe book re-checked at source from one Excel file, with director, owner, address and status changes flagged.
Non-face-to-face and records
- Non-face-to-face due diligence must be at least as robust as face to face (para 6.27 to 6.29).
- The Guidelines (6-11-3) suggest further checks against impersonation, such as a verified phone call, confirming address or employer, certified identity documents or a first deposit from a Singapore bank account.
- Records kept for at least five years after the relationship ends (para 11.3).
Notice 314Life insurersMAS Notice 314, 30 June 2025 (opens in a new tab)Individuals
Identify the customer
Full name and aliases, unique identification number (identity card, birth certificate or passport), residential address, date of birth and nationality (para 6.4 and 6.5).
GovVerify · SingpassNRIC or FIN, name, nationality and address from Myinfo's government sources, shared with the customer's consent.Verify from a reliable, independent source
Para 6.8. The Guidelines (6-5-1 and 6-5-2) name a passport or national identity card and, for address, an identity card, recent utility or telephone bill, bank statement or government letter. MAS treats Myinfo as a reliable and independent source for all five items, with no further document or photograph (circular AMLD 01/2018).
GovVerify · SingpassMyinfo data through Singpass, which MAS accepts in place of identity documents and a photograph for these five items.Foreign customers
Myinfo holds no passport details, so for foreigners MAS expects further checks beyond Myinfo (circular AMLD 01/2022).
GovVerifyCustomers from Hong Kong, Singapore, the UAE or Mainland China verified by their government's digital identity, where your policy accepts it.
Companies
Identify and verify the entity
Name, registration number, registered address and principal place of business, date and place of incorporation, legal form, constitution and powers. The Guidelines accept records in an independent company registry, the certificate of incorporation or good standing, and the constitution (6-5-1 and 6-5-2 and Appendix A).
CorpVerify · registry searchThe ACRA business profile and constitution for a Singapore company; the home registry's extract for a foreign one.Directors and executives
Names and identification numbers of directors and anyone with executive authority; the Guidelines name company registries as a source.
CorpVerify · registry searchDirectors and officers as the registry records them, with their identification details where the registry holds them.Beneficial owners
Ownership, then control by other means, then executive authority, verified with reasonable measures and the structure understood (para 6.15). The Notices set no percentage: more than 25% is only an example (Guidelines 6-8-2), and a customer's own declaration needs corroborating.
CorpVerify · UBO tracingOwnership traced through each registry to the natural persons at the top, with each layer's jurisdiction and holding.Ongoing monitoring
Customer information kept up to date through the relationship.
Monitoring and remediationThe book re-checked at source from one Excel file, with director, owner, address and status changes flagged.
Non-face-to-face and records
- Non-face-to-face due diligence must be at least as robust as face to face (para 6.31 to 6.33).
- The Guidelines (6-11-3) suggest further checks against impersonation, such as a verified phone call, confirming address or employer, certified identity documents or a first deposit from a Singapore bank account.
- Records kept for at least five years after the relationship ends (para 10.3).
PSN01 · PSN02Payment service providersMAS Notice PSN01, revised 30 June 2025 (opens in a new tab)Individuals
Identify the customer
Full name and aliases, unique identification number (identity card, birth certificate or passport), residential address, date of birth and nationality (para 7.5 and 7.6).
GovVerify · SingpassNRIC or FIN, name, nationality and address from Myinfo's government sources, shared with the customer's consent.Verify from a reliable, independent source
Para 7.9. The Guidelines (section 7-6) name a passport or national identity card and, for address, an identity card, recent utility or telephone bill, bank statement or government letter. MAS treats Myinfo as a reliable and independent source for all five items, with no further document or photograph (circular AMLD 01/2018).
GovVerify · SingpassMyinfo data through Singpass, which MAS accepts in place of identity documents and a photograph for these five items.Foreign customers
Myinfo holds no passport details, so for foreigners MAS expects further checks beyond Myinfo (circular AMLD 01/2022).
GovVerifyCustomers from Hong Kong, Singapore, the UAE or Mainland China verified by their government's digital identity, where your policy accepts it.
Companies
Identify and verify the entity
Name, registration number, registered address and principal place of business, date and place of incorporation, legal form, constitution and powers. The Guidelines accept records in an independent company registry, the certificate of incorporation or good standing, and the constitution (section 7-6 and Appendix A).
CorpVerify · registry searchThe ACRA business profile and constitution for a Singapore company; the home registry's extract for a foreign one.Directors and executives
Names and identification numbers of directors and anyone with executive authority; the Guidelines name company registries as a source.
CorpVerify · registry searchDirectors and officers as the registry records them, with their identification details where the registry holds them.Beneficial owners
Ownership, then control by other means, then executive authority, verified with reasonable measures and the structure understood (para 7.13). The Notices set no percentage: more than 25% is only an example (Guidelines 7-8-2), and a customer's own declaration needs corroborating.
CorpVerify · UBO tracingOwnership traced through each registry to the natural persons at the top, with each layer's jurisdiction and holding.Ongoing monitoring
Customer information kept up to date through the relationship.
Monitoring and remediationThe book re-checked at source from one Excel file, with director, owner, address and status changes flagged.
Non-face-to-face and records
- Non-face-to-face due diligence must be at least as robust as face to face (para 7.34 to 7.39).
- The Guidelines (7-12-3) suggest further checks against impersonation, such as a verified phone call, confirming address or employer, certified identity documents or a first deposit from a Singapore bank account.
- The PSN01 Guidelines add real-time video, a digital signature with PKI credentials and biometrics; PSN02 adds the customer proving control of their token wallet.
- After the first non-face-to-face customer, an external auditor or independent consultant assesses the controls, including anti-impersonation technology, and reports to MAS within a year (PSN01 7.37 and 7.38; PSN02 6.37).
- Records kept for at least five years after the relationship ends (para 16.3).
Read the source
The official text.
MAS circular AMLD 01/2018
Myinfo as a reliable, independent source for non-face-to-face due diligence.
MAS circular AMLD 01/2022
Non-face-to-face due diligence, foreigners on Myinfo and company registries.
ACRA: registrable controllers
Who a company must record in its register of registrable controllers.
Questions about Singapore KYC and AML
Not covered here? Ask our team
Can we rely on the data Fill Easy returns?
Yes, as verification evidence. Each MAS Notice asks you to verify identity using reliable, independent source data, documents or information (Notice 626, para 6.9, and its equivalents). MAS has said Myinfo is a reliable and independent source for name, identification number, date of birth, nationality and address (circular AMLD 01/2018), and the Guidelines count reports from independent company registries among the hardest documents to counterfeit (Guidelines to Notice 626, 6-3-1). Fill Easy passes Singpass and registry data on unaltered, with source and retrieval time. You rely on the source, not on Fill Easy as an intermediary, and the decision stays with your firm.
Does Fill Easy make us compliant with Singapore AML rules?
No. The due diligence duty sits with your firm under Singapore AML rules, and your policies decide what is enough. Fill Easy supplies the evidence those policies rely on: records from the government or registry source, each showing where and when it was retrieved.
Does Myinfo remove the need for a copy of the identity card?
For the five items Myinfo holds, MAS has said it will not require further identification documents or a photograph (circular AMLD 01/2018). Customers not on Myinfo, or who do not consent, go through normal due diligence.
How do we verify foreigners living in Singapore?
Passport details are not on Myinfo, so MAS expects Myinfo to be supplemented with further checks for foreigners (circular AMLD 01/2022). Customers from Hong Kong, the UAE or Mainland China can be verified through their own government's digital identity, where your policy accepts it.
Is there a beneficial ownership threshold?
Not in the Notices. The Guidelines give more than 25% only as an example, a person below it who exercises control is still a beneficial owner, and a customer's own declaration still needs corroborating. Fill Easy traces ownership through each registry to the natural persons at the top.
Can we verify a company's documents on a video call?
Not on their own. MAS expects legal persons to be checked against company registries, and documents that cannot be verified against a registry should not be verified by video call alone (circular AMLD 01/2022).
What changed on 1 July 2025?
MAS revised or reissued every sector Notice and its Guidelines. Among the changes, the Notices now list the information to collect on beneficial owners, allow date of birth and nationality in place of a connected party's identification number where risk is not high, and bring proliferation financing into scope.
Do payment service providers have extra duties for remote onboarding?
Yes. After their first non-face-to-face customer, an external auditor or independent consultant assesses the controls, including any technology used against impersonation, and the report goes to MAS within a year (PSN01 7.37 and 7.38; PSN02 6.37).
How long must we keep the records?
At least five years after the business relationship ends or the transaction completes, in a form that can be produced in court if electronic.