Anti-Money Laundering Compliance for Foreign Companies in the Philippines: A Comprehensive Legal Guide
Foreign companies operating in or through the Philippines face a complex and increasingly stringent anti-money laundering (AML) regulatory environment. The Philippines' primary AML legislation — Republic Act No. 9160, otherwise known as the Anti-Money Laundering Act of 2001 (AMLA), as amended by Republic Act Nos. 9194, 10167, 10365, 10927, and 11521 — imposes broad obligations on both financial and non-financial entities, with severe penalties for non-compliance.
For foreign investors, understanding the Philippine AML framework is not merely a matter of regulatory compliance — it is a prerequisite to maintaining banking relationships, securing government licenses, and avoiding criminal liability. This guide provides a comprehensive overview of the AML obligations that foreign companies must satisfy when doing business in the Philippines.
The Philippine AML Legislative Framework
The cornerstone of Philippine AML law is Republic Act No. 9160, enacted on September 29, 2001. The law has been amended five times to strengthen its reach and align with international standards:
- RA 9194 (2003) — Lowered the threshold for covered transactions and authorized the Anti-Money Laundering Council (AMLC) to examine bank deposits with court approval without notifying account holders
- RA 10167 (2012) — Enhanced the AMLC's powers to seek freezing orders and introduced civil forfeiture provisions, allowing asset recovery without a prior criminal conviction
- RA 10365 (2013) — Expanded the list of covered institutions to include dealers in precious metals, stones, jewelry, and other high-value goods, as well as other designated non-financial businesses and professions
- RA 10927 (2017) — Brought casinos, including internet-based and ship-based casino operations, under the AMLA's coverage, requiring them to report transactions exceeding PHP 5 million
- RA 11521 (2021) — The most comprehensive amendment to date, extending coverage to virtual asset service providers, offshore gaming operators, and real estate developers and brokers; strengthened penalties; and expanded the AMLC's enforcement and international cooperation powers
Together, these laws create a regulatory framework that applies to virtually every sector in which foreign companies commonly operate in the Philippines — from banking and insurance to real estate, gaming, fintech, and virtual asset services.
The Anti-Money Laundering Council (AMLC)
The AMLC is the Philippines' financial intelligence unit, established under Section 7 of RA 9160. It is composed of three members who act unanimously:
- The Governor of the Bangko Sentral ng Pilipinas (BSP), as Chairman
- The Chairperson of the Securities and Exchange Commission (SEC), as member
- The Commissioner of the Insurance Commission (IC), as member
The AMLC's powers are extensive. Under RA 9160, as amended by RA 11521, the Council is empowered to:
- Investigate suspicious transactions, covered transactions deemed suspicious, and money laundering activities
- Issue freeze orders effective for twenty (20) days, extendable up to six (6) months upon petition to the Court of Appeals
- Examine bank deposits and investments related to unlawful activities, upon court authorization
- Pursue civil forfeiture of assets derived from unlawful activities, even without a criminal conviction
- Apply for search and seizure orders and subpoenas in the conduct of investigations
- Implement targeted financial sanctions related to the proliferation of weapons of mass destruction, terrorism, and terrorism financing pursuant to United Nations Security Council resolutions
- Coordinate directly with foreign financial intelligence units without going through diplomatic channels — a critical power added by RA 11521
For foreign companies, the AMLC's direct coordination authority with foreign counterparts means that AML violations in the Philippines can trigger investigations and enforcement actions in the company's home jurisdiction, and vice versa.
Who Are "Covered Persons" Under the AMLA?
The AMLA applies to a broad range of entities defined as "covered persons" under Section 3(a), as amended. Foreign companies should carefully assess whether their Philippine operations fall within any of the following categories:
Financial Institutions
- Banks (universal, commercial, thrift, rural, cooperative, Islamic), non-banks, quasi-banks, trust entities, and all institutions supervised or regulated by the BSP
- Insurance companies, pre-need companies, and all entities supervised by the Insurance Commission
- Securities dealers, brokers, investment houses, mutual funds, close-end investment companies, and entities administering or dealing in currency, commodities, or financial derivatives — all supervised by the SEC
- Foreign exchange corporations, money changers, money payment, remittance, and transfer companies
Designated Non-Financial Businesses and Professions (DNFBPs)
- Jewelry dealers and dealers in precious metals and stones — added by RA 10365 (2013)
- Company service providers, persons who provide any of the following services: acting as formation agent, director, secretary, or partner of a company
- Casinos, including internet-based and ship-based casinos — added by RA 10927 (2017)
- Real estate developers and brokers involved in transactions above PHP 7.5 million — added by RA 11521 (2021)
- Offshore gaming operators and their service providers supervised or regulated by PAGCOR — added by RA 11521 (2021)
Virtual Asset Service Providers (VASPs)
RA 11521 brought virtual asset service providers — including cryptocurrency exchanges, digital wallet providers, and platforms facilitating the transfer, exchange, or custody of virtual assets — within the AMLA's coverage. This is particularly significant for foreign fintech companies establishing operations in the Philippines or serving Philippine customers.
VASPs must register with the BSP under BSP Circular No. 1108 (Series of 2021), which establishes the regulatory framework for virtual asset service providers, including capitalization requirements, consumer protection standards, and AML/CFT obligations.
Core Compliance Obligations
1. Customer Identification and Know-Your-Customer (KYC)
All covered persons must implement robust KYC procedures as mandated by Section 9 of RA 9160, as amended, and the AMLC's 2018 Revised Implementing Rules and Regulations (IRR). These include:
- Customer identification — verifying the true identity and existence of clients using reliable, independent source documents
- Beneficial ownership identification — identifying the natural persons who ultimately own or control a client that is a juridical person, trust, or legal arrangement. The AMLC's Guidelines on Identifying Beneficial Ownership require covered persons to look through corporate structures to identify individuals who own or control 25% or more of the entity, or who otherwise exercise ultimate effective control
- Purpose and intended nature of the business relationship — understanding the client's business and the expected pattern of transactions
- Ongoing monitoring — ensuring that transactions are consistent with the institution's knowledge of the customer, the customer's business, and risk profile
- Enhanced due diligence (EDD) — for higher-risk clients, including politically exposed persons (PEPs), correspondent banking relationships, and clients from high-risk jurisdictions
2. Record-Keeping
Covered persons must maintain all transaction records and customer identification documents for a minimum of five (5) years from the date of the transaction or the closure of the account, whichever is later. This obligation applies to both domestic and cross-border transactions. Records must be sufficient to permit reconstruction of individual transactions to provide evidence, if necessary, for prosecution of criminal activity.
3. Covered Transaction Reports (CTRs)
Under Section 3(b) of the AMLA, as amended by RA 11521, covered persons must report "covered transactions" to the AMLC. The thresholds vary by institution type:
- General threshold: Any single transaction in cash or equivalent monetary instrument involving a total amount in excess of PHP 500,000 within one banking day
- Casinos: Any single casino cash transaction exceeding PHP 5,000,000 or its equivalent in other currencies
- Real estate developers and brokers: Any single cash transaction exceeding PHP 7,500,000 or its equivalent
Reports must be submitted to the AMLC within five (5) working days from the occurrence of the transaction.
4. Suspicious Transaction Reports (STRs)
Covered persons are required to report suspicious transactions to the AMLC regardless of the amount involved. Under Section 3(b-1), as amended by RA 11521, a transaction is considered suspicious when any of the following circumstances exists:
- There is no underlying legal or trade obligation, purpose, or economic justification
- The client is not properly identified
- The amount involved is not commensurate with the business or financial capacity of the client
- The transaction appears to be structured to avoid reporting requirements
- The transaction deviates from the client's profile or past transaction patterns
- The transaction is in any way related to an unlawful activity under the AMLA
- Any transaction that is similar or analogous to any of the foregoing
STRs must also be filed within five (5) working days from the date the transaction is determined to be suspicious. Failure to report carries severe penalties, including criminal liability for the responsible officers of the covered person.
5. Internal AML Compliance Programs
The AMLC's 2018 Revised IRR requires all covered persons to establish and maintain comprehensive money laundering and terrorism financing prevention programs, including:
- A designated compliance officer at the management level
- Written internal policies, procedures, and controls for AML/CFT compliance
- Ongoing employee training programs on AML/CFT obligations and red flags
- An independent audit function to test the adequacy and effectiveness of the AML/CFT program
- Risk-based assessment methodologies to identify, assess, and mitigate ML/TF risks
Beneficial Ownership Transparency
Beneficial ownership transparency has become a critical component of the Philippine AML framework, driven by both domestic legislation and international pressure. The Revised Corporation Code of the Philippines (RA 11232), enacted in 2019, requires corporations to disclose beneficial ownership information in their General Information Sheets (GIS) filed annually with the SEC.
Under Section 177(b) of the Revised Corporation Code, the SEC may require any corporation to disclose information regarding the beneficial ownership of shares. The SEC has issued Memorandum Circular No. 1 (Series of 2021) establishing specific beneficial ownership reporting requirements, including the disclosure of natural persons who:
- Own or control 25% or more of the corporation's shares
- Exercise ultimate effective control over the corporation through other means
- Are the senior managing officials of the corporation, if no natural person meets the above criteria
For foreign companies operating through Philippine subsidiaries, branches, or representative offices, compliance with beneficial ownership disclosure requirements is mandatory. The SEC's compliance rate has improved significantly — from 26% in 2021 to 69% in 2024 — reflecting increased enforcement attention.
Money Laundering as a Crime: The Elements
Under Section 4 of RA 9160, money laundering is defined as a crime committed by:
- Any person who, knowing that any monetary instrument or property represents, involves, or relates to the proceeds of an unlawful activity, transacts or attempts to transact said instrument or property
- Any person who, knowing that any monetary instrument or property involves proceeds of an unlawful activity, performs or fails to perform any act that facilitates the offense of money laundering
- Any person who, knowing that any monetary instrument or property is required to be disclosed and filed with the AMLC, fails to do so
The law enumerates thirty-six (36) categories of "unlawful activities" as predicate offenses — from kidnapping, drug trafficking, and graft and corruption to securities fraud, tax crimes exceeding PHP 25 million in deficiency tax (added by RA 11521), and felonies punishable under the laws of other countries.
This last category — Section 3(i)(36), felonies punishable under foreign penal laws — is particularly significant for foreign companies. It means that proceeds from criminal activity committed abroad can constitute predicate offenses for Philippine money laundering charges if those proceeds enter the Philippine financial system.
Penalties for Non-Compliance
The penalties under the AMLA are severe and apply to both natural and juridical persons:
Criminal Penalties for Money Laundering
Under Section 14 of RA 9160, as amended, the crime of money laundering is punishable by:
- Imprisonment of seven (7) to fourteen (14) years
- A fine of not less than Three Million Pesos (PHP 3,000,000) but not more than twice the value of the monetary instrument or property involved in the offense
For violations of Section 4(c) — failure to disclose or file required reports with the AMLC — the penalty ranges from six (6) months to four (4) years imprisonment and a fine of not less than One Hundred Thousand Pesos (PHP 100,000) but not more than Five Hundred Thousand Pesos (PHP 500,000).
Penalties for Failure to Report
Covered persons who fail to file covered transaction reports or suspicious transaction reports face administrative sanctions from their supervising authority (BSP, SEC, or IC), including:
- Fines and monetary penalties
- Suspension or revocation of licenses and permits
- Censure, reprimand, or other disciplinary actions against responsible officers
Civil Forfeiture
Under Sections 12 and 12-A, the AMLC may file civil forfeiture proceedings to recover monetary instruments or properties that are proceeds of, or used in the commission of, unlawful activities. Critically, civil forfeiture can proceed independently of a criminal prosecution — the government need not secure a criminal conviction before seeking forfeiture of assets.
Freeze Orders
The AMLC may petition the Court of Appeals for an ex parte freeze order upon determination of probable cause that assets are related to unlawful activities. Freeze orders take effect immediately for twenty (20) days and may be extended up to six (6) months after a summary hearing. If no case is filed within the court-determined period, the freeze order is automatically lifted.
The Philippines and the FATF
The Philippines' AML compliance history with the Financial Action Task Force (FATF) provides important context for foreign investors. The Philippines was placed on the FATF's "gray list" (Jurisdictions Under Increased Monitoring) in June 2021 due to strategic deficiencies in its AML/CFT framework.
After nearly three years of intensive reform — including the passage of RA 11521, strengthening of beneficial ownership transparency, enhancement of AMLC enforcement capabilities, and improvement of inter-agency coordination — the Philippines was removed from the FATF gray list in February 2024. The FATF recognized that the Philippines had substantially addressed the strategic deficiencies identified in its action plan.
For foreign companies, the Philippines' exit from the gray list is significant because:
- Enhanced due diligence requirements that foreign banks may have applied to Philippine correspondent relationships are likely to be relaxed
- The Philippines' commitment to maintaining FATF compliance means that AML enforcement will remain a priority — companies should not expect any relaxation of domestic compliance standards
- The Asia/Pacific Group on Money Laundering (APG), the FATF-style regional body of which the Philippines is a member, will continue to monitor compliance through its mutual evaluation process
Specific Considerations for Foreign Companies
Foreign Branch Offices and Subsidiaries
Foreign companies operating in the Philippines through a branch office or subsidiary that is itself a covered person must ensure that the Philippine entity maintains a standalone AML compliance program that meets all AMLC requirements. The AMLC does not accept group-level compliance programs as a substitute for entity-level Philippine programs, although the Philippine entity may leverage group resources and systems.
Correspondent Banking and Wire Transfers
Foreign banks maintaining correspondent relationships with Philippine banks must comply with the BSP's regulations on correspondent banking, including enhanced due diligence on respondent institutions and ongoing monitoring of the relationship. The BSP prohibits Philippine banks from maintaining correspondent relationships with shell banks.
Cross-Border Wire Transfer Rules
Under the AMLC's rules implementing the FATF's Recommendation 16 (wire transfers), all cross-border wire transfers must include originator information (name, account number, address or national identity number, or date and place of birth) and beneficiary information. Covered persons must ensure compliance with these requirements for all inbound and outbound transfers.
Tax Crime as a Predicate Offense
RA 11521 added a significant provision — Section 3(i)(35) — making tax crimes a predicate offense for money laundering where the deficiency basic tax due in the final assessment exceeds PHP 25 million per taxable year, per tax type, and there is a finding of probable cause with fraud, willful misrepresentation, or malicious intent. For foreign companies with substantial Philippine tax obligations, this creates an additional layer of risk — tax non-compliance can now trigger money laundering investigations and asset freezing.
Virtual Assets and Fintech
Foreign fintech companies offering virtual asset services to Philippine customers must register with the BSP as VASPs and comply with all AML/CFT obligations applicable to covered persons. The BSP's regulatory sandbox framework may be available for innovative fintech services, but AML compliance is non-negotiable even within the sandbox.
Practical Compliance Steps for Foreign Companies
Based on the current state of Philippine AML law, foreign companies doing business in the Philippines should take the following concrete compliance steps:
- Determine whether your Philippine operations constitute a "covered person" under Section 3(a) of the AMLA — this is the threshold question for all AML compliance obligations
- If you are a covered person, appoint a designated compliance officer at the management level within your Philippine entity
- Develop and implement a written AML/CFT compliance program that includes KYC/CDD policies, transaction monitoring procedures, and employee training
- Register your MLRO (Money Laundering Reporting Officer) with the AMLC and ensure direct reporting lines to the AMLC Secretariat
- Implement automated transaction monitoring systems capable of detecting covered transactions (above the applicable threshold) and suspicious transaction patterns
- File CTRs and STRs within the five (5) working day deadline — late or missed filings carry administrative and criminal penalties
- Maintain complete transaction and KYC records for at least five (5) years
- Conduct annual risk assessments of your ML/TF exposure and update your compliance program accordingly
- Disclose beneficial ownership information in your SEC filings and ensure ongoing accuracy
- Provide regular AML/CFT training to all relevant personnel, with specialized training for compliance staff
- Engage independent auditors to test the adequacy and effectiveness of your AML/CFT program at least annually
- Even if not a covered person, maintain strong internal controls — any entity can be charged with money laundering under Section 4 if it transacts proceeds of unlawful activity with knowledge
Conclusion
The Philippines' anti-money laundering framework has undergone a dramatic transformation over the past two decades — from the original RA 9160 in 2001 to the comprehensive amendments of RA 11521 in 2021. The country's successful exit from the FATF gray list in 2024 signals both the seriousness of the government's commitment to AML enforcement and the likelihood that compliance standards will continue to tighten.
For foreign companies operating in the Philippines, AML compliance is not an optional add-on to business operations — it is a fundamental requirement that affects banking access, regulatory standing, and exposure to criminal liability. The penalties are severe: up to fourteen years' imprisonment for money laundering, civil forfeiture of assets without criminal conviction, and freeze orders that can immobilize business operations for months.
Companies that invest in robust compliance programs, maintain transparent beneficial ownership structures, and take their reporting obligations seriously will find the Philippine regulatory environment manageable. Those that treat AML compliance as an afterthought risk consequences that can be existential.
At Tungol & Tan, our regulatory compliance practice assists foreign companies in designing and implementing AML/CFT programs tailored to the Philippine legal environment. Whether you are establishing a new Philippine presence, restructuring existing operations, or responding to an AMLC inquiry, we invite you to contact our office for a confidential consultation on your AML compliance obligations.
Related Articles
5 Tax Incentives Foreign Investors Can Claim Under the CREATE MORE Act
The CREATE MORE Act (RA 12066) overhauled the Philippines' tax incentive framework in late 2024. Here are five key benefits every foreign investor should know before registering with BOI or PEZA.
Can a Foreign Company Hire Filipino Remote Workers Without a Local Entity?
Many foreign startups and businesses hire Filipino talent remotely — but doing it legally requires understanding the line between independent contractors and employees under Philippine law.
SRRV Retirement Visa Philippines: 7 Questions Foreigners Always Ask
Thinking about retiring in the Philippines? Here are seven frequently asked questions about the Special Resident Retiree's Visa — including the 2025 rule changes that lowered the minimum age to 40.