Anti-Money Laundering Compliance for Foreign Companies in the Philippines: A 2026 Lawyer's Guide

Introduction

For foreign companies entering or operating within the Philippine market, understanding the anti-money laundering (AML) landscape is not merely a box-ticking exercise. It is a legal obligation that carries both criminal and civil consequences, and one that operates across a significantly broader scope than most foreign investors initially expect.

Republic Act No. 9160, known as the Anti-Money Laundering Act of 2001 (AMLA), is the cornerstone of the Philippines’ AML framework. Since its enactment, AMLA has been amended five times — by Republic Act Nos. 9194 (2003), 10167 (2012), 10365 (2013), 10927 (2017), and 11521 (2021) — each amendment expanding the scope of covered persons, the types of reportable transactions, and the enforcement powers of the Anti-Money Laundering Council (AMLC). The result is a compliance regime that now reaches far beyond banks and financial institutions, capturing a wide range of businesses that foreign companies routinely operate in the Philippines.

The critical context for 2026 is the Philippines’ delisting from the Financial Action Task Force (FATF) grey list in February 2025. This was a significant diplomatic and economic milestone. However — and this is a point that bears immediate emphasis — delisting does not reduce AML obligations. If anything, the post-delisting environment reflects a system that has been hardened to international standards, with increased enforcement capacity and broader coverage. The AMLC’s 2026 enforcement activity confirms this trajectory.

For foreign investors, the question is not whether AML compliance matters. It does, at a fundamental level. The question is: what specifically does a foreign company operating in the Philippines need to do, and what are the specific risks of getting it wrong?

This article provides a comprehensive analysis of the AML compliance framework as it applies to foreign companies in the Philippines in 2026.

The Constitutional and Statutory Framework

Republic Act No. 9160: The Foundation

The Anti-Money Laundering Act of 2001 (RA 9160) was enacted to prevent money laundering in the Philippines and to cooperate with international efforts to combat the proceeds of crime. RA 9160 primarily targets the “layering” and “integration” stages of money laundering — the processes by which illegally derived funds are made to appear legitimate.

Under RA 9160, money laundering is defined as a crime committed by any person who, knowing that the monetary instrument or property involved represents, or are the proceeds of, an unlawful act, conducts or facilitates a transaction involving such instrument or property, or assists in the placement, layering, or integration of the proceeds of unlawful activity.

The law establishes the Anti-Money Laundering Council (AMLC), a body attached to the Bangko Sentral ng Pilipinas (BSP), composed of the Governor of the BSP as chairman, and the Commissioner of the Insurance Commission and the Chairman of the Securities and Exchange Commission as members. The AMLC is the primary enforcement agency and has quasi-judicial powers to freeze accounts and impose penalties.

Amendments That Expanded Coverage for Foreign Companies

Each amendment to RA 9160 has progressively widened the net. For foreign companies operating in the Philippines, the most consequential amendments are:

RA 10365 (2013): This amendment aligned Philippine AML law with the revised FATF 40+9 Recommendations, particularly expanding the criteria for covered persons to include lawyers, accountants, and trust and company service providers when they prepare for or carry out transactions for clients in the specified covered services.

RA 10927 (2017): This amendment brought casinos — including Philippine Offshore Gaming Operators (POGOs) — under the AMLA framework, a move that significantly affected the gaming and hospitality sectors where foreign investors are heavily represented.

RA 11521 (2021): The most recent and most expansive amendment added Virtual Asset Service Providers (VASPs) — cryptocurrency exchanges and similar platforms — real estate developers and brokers, dealers in precious metals and stones, and extended coverage to additional DNFBP (Designated Non-Financial Businesses and Professions) categories. RA 11521 also strengthened the AMLC’s authority to cooperate with foreign counterparts and lifted certain bank secrecy provisions to facilitate investigations.

The FATF Grey List Delisting: Context and Consequences

The Philippines was placed on the FATF grey list in June 2021, reflecting concerns about strategic deficiencies in its AML/CFT framework. Following a series of legislative reforms — including the passage of RA 11521 and the enactment of the Amendments to the Terrorism Financing Prevention and Suppression Act (RA 10168) implementing rules — the Philippines was removed from the grey list in February 2025.

This delisting was a significant positive development for the country’s international standing and its attractiveness to foreign investors. However, the conditions that led to delisting — namely, an expanded and more rigorously enforced AML framework — remain in place. The AMLC has been explicit that post-delisting enforcement will be as robust as during the grey list period, if not more so.

Who Is a “Covered Person”?

A fundamental question for any foreign company operating in the Philippines is whether it qualifies as a “covered person” under AMLA, because the compliance obligations that follow are substantial.

Under Section 3 of RA 9160, as amended, “covered persons” include:

Financial Institutions

Banks, including the BSP, and quasi-banks
Trust entities and investment houses
Securities dealers, brokers, and investment companies
Insurance companies and insurance agents
Pre-need companies and pension plans
Remittance and transfer companies
Electronic money issuers
Money changers and pawnshops
Microfinance and cooperative banks
Credit card companies

Designated Non-Financial Businesses and Professions (DNFBPs)

This is the category most relevant to foreign companies that are not financial institutions. DNFBPs include:

Casinos (including POGOs under RA 10927)
Real estate brokers and developers (added by RA 11521)
Dealers in precious metals and stones
Lawyers and accountants — but only when providing the specific covered services defined in AMLA Section 3(l)(i)-(vi), which include managing client money, securities or other assets, and financial transactions on behalf of clients
Trust and company service providers (TCSPs), including corporate services, nominee shareholdings, and fiduciary services
Virtual Asset Service Providers (VASPs) (added by RA 11521)

Practical Implications for Foreign Companies

A foreign company operating in the Philippines through a branch office, representative office, regional headquarters (RHQ), or regional operating headquarters (ROHQ) may itself be a covered person depending on its activities. More importantly, a foreign company’s Philippine subsidiaries, joint ventures, or local partners may be covered persons — and the foreign company may face AML risk through those relationships.

Foreign companies in the following sectors should assume they have direct AML obligations:

Any company operating a casino or gaming operation in the Philippines
Any company engaged in real estate development or brokerage
Any company dealing in precious metals, stones, or jewelry
Any company operating as a VASP or cryptocurrency exchange
Any company providing corporate, fiduciary, or nominee services

Even if a foreign company’s activities do not fall within a covered category, the AML obligations of its banking relationships, service providers, and counterparties create indirect compliance considerations that management must understand.

Customer Due Diligence: Know Your Customer in a Philippine Context

Enhanced vs. Standard Due Diligence

The AMLA framework requires covered persons to implement a Customer Due Diligence (CDD) framework appropriate to their risk profile. The AMLC has issued regulations — particularly under the 2026 updated framework following RA 11521 and AMLC Resolution No. TF-112 (Series of 2026) — that require both standard and enhanced due diligence measures depending on the risk level.

Standard Due Diligence applies to lower-risk customers and transactions. It requires:

Identification of the customer through reliable, independent documents, data, or information
Identification of the beneficial owner (see below)
Understanding the nature and purpose of the business relationship
Ongoing monitoring of the customer’s transactions

Enhanced Due Diligence (EDD) is required for higher-risk situations, including:

Politically Exposed Persons (PEPs) — including foreign PEPs and their family members and close associates
Correspondent banking relationships
Non-face-to-face business relationships (increasingly common for foreign companies establishing Philippine operations remotely)
Complex or unusually large transactions
Transactions with no apparent economic or lawful purpose

Beneficial Ownership: The HARBOR Platform

One of the most significant compliance developments for foreign companies in 2026 is the full operational launch of the SEC HARBOR platform (Hierarchical and Applicable Relations and Beneficial Ownership Registry) on January 30, 2026.

Under SEC Memorandum Circular No. 15, Series of 2025 — the Beneficial Ownership Disclosure Rules of 2026 — the SEC has separated beneficial ownership reporting from the annual General Information Sheet (GIS) process and established HARBOR as the exclusive digital system for filing beneficial ownership disclosures.

For foreign companies, the implications are direct:

Who must file: Domestic corporations, one-person corporations (OPCs), branches and representative offices of foreign companies, and entities involving trusts or nominees must all file beneficial ownership declarations through HARBOR.
The 20% threshold: A natural person who directly or indirectly owns or controls at least 20% of the shares or voting interests in a corporation is a beneficial owner. Where no individual meets this threshold through equity ownership, any natural person exercising effective control through other means must be identified.
Aggregation of indirect ownership: Indirect beneficial ownership interests must be traced through ownership chains. For a foreign parent company with multiple intermediate holding companies, the ultimate beneficial owner must be identified even where Philippine equity is held through offshore structures.
Filing timeline: All entities registered with the SEC must submit their initial beneficial ownership declaration through HARBOR within the transition period ending January 30, 2026, with annual updates required thereafter.

For foreign companies, particularly those with complex multi-jurisdictional ownership structures, the HARBOR requirements create a significant compliance burden — but also provide the AMLC with a powerful new tool to trace the true beneficial owners of companies operating in the Philippines. This is directly relevant to the anti-dummy law enforcement issues discussed in our previous article.

Suspicious Transaction Reports: When and How to Report

The STR Obligation

Under Section 9 of RA 9160, covered persons are required to submit a Suspicious Transaction Report (STR) to the AMLC when they know, suspect, or have reason to suspect that a transaction or a series of transactions involves proceeds of an unlawful activity or is related to money laundering or terrorism financing.

The STR obligation is triggered not only by actual knowledge but by reasonable grounds for suspicion. The threshold is intentionally low — it does not require proof, only suspicion. Failure to file an STR when required is itself a criminal offense under AMLA.

What Constitutes a Suspicious Transaction

The AMLC has published guidelines on transaction indicators that may give rise to STR obligations. For foreign companies operating in the Philippines, the following scenarios are particularly relevant:

Unusually complex ownership structures: Companies with nominee shareholders, layered holding companies across multiple jurisdictions, or beneficial owners that are difficult to identify may generate STRs from their banking relationships.
Frequent changes in beneficial ownership: Regular changes in shareholdings or board composition, particularly when involving offshore entities, may be viewed as suspicious.
Large cash transactions: Transactions involving large amounts of cash remain a primary indicator, even for legitimate businesses.
Transactions inconsistent with business profile: Revenue or transaction volumes that are inconsistent with the nature of the stated business activity.
Unusual cross-border movements: Large transfers to or from jurisdictions with elevated corruption or weak AML regimes.
Transactions involving high-risk industries: Gaming, real estate, cash-intensive businesses, and companies dealing in high-value portable goods are subject to heightened scrutiny.

STR Confidentiality and Non-Disclosure

Critically, the identity of the person filing an STR and the fact of the filing itself are strictly confidential under AMLA. A covered person who discloses the filing of an STR to the subject of the report — or to any unauthorized third party — commits a criminal offense. This creates a difficult balance for compliance teams: the obligation to file is mandatory, but the disclosure of filing is prohibited.

AML Compliance for Specific Foreign Entity Types

Branch Offices and Representative Offices

Foreign companies registered with the SEC as branch offices or representative offices are subject to the same AML obligations as domestic corporations for their Philippine operations. The branch office, as a registered entity, is the covered person. The foreign parent company’s AML policies may apply by group policy, but the Philippine entity bears the direct obligation to comply with AMLA and AMLC regulations.

Branch offices should note that the HARBOR beneficial ownership declaration must identify the ultimate beneficial owner of the foreign parent, even where that beneficial owner is an individual several layers removed from the Philippine entity.

Regional Operating Headquarters (ROHQs)

ROHQs — entities established by multinational companies to perform qualifying services for their affiliated companies in the Asia-Pacific region — are registered with the SEC and subject to corporate compliance obligations. While ROHQs are not typically engaged in revenue-generating commercial activities in the Philippines, they may still be subject to AML obligations depending on the nature of their activities, particularly if they handle funds or assets on behalf of affiliated entities.

Domestic Corporations with Foreign Equity

A Philippine domestic corporation with foreign shareholders is subject to the same AML obligations as any Philippine corporation. The foreign shareholders, however, are not themselves covered persons solely by virtue of their equity ownership. The AML obligations fall on the corporation and its board and compliance officers.

For foreign investors in domestic corporations, the key AML risk is the beneficial ownership disclosure: if any individual foreign or local person holds 20% or more of the shares (directly or indirectly), they must be identified in the HARBOR declaration. This creates a direct interface between AML compliance and the Foreign Investment Negative List enforcement — an issue discussed in our recent article on Commonwealth Act No. 108.

The Consequences of Non-Compliance

Criminal Penalties

AMLA imposes severe criminal penalties for violations:

For money laundering offenses under RA 9160, penalties range from imprisonment of four (4) to fourteen (14) years and a fine of not less than One Million Pesos (₱1,000,000) but not more than five (5) times the value of the monetary instrument or property involved — a formula that can produce extraordinarily large fines for significant transactions.

For failure to file an STR, covered persons — and the directors, officers, or employees who had knowledge of the transaction and failed to report — face imprisonment of six (6) to ten (10) years and a fine of not less than Five Hundred Thousand Pesos (₱500,000).

For tipping off — disclosing to a transaction subject that an STR has been filed — the penalty is imprisonment of two (2) to six (6) years and a fine of not less than Two Hundred Fifty Thousand Pesos (₱250,000).

Administrative and Civil Consequences

Beyond criminal penalties, covered persons face:

Freeze orders on accounts and properties, issued by the Court of Appeals upon AMLC application, which can be converted into forfeiture proceedings
AMLC administrative sanctions, including suspension of operations, revocation of licenses, and monetary penalties
Regulatory sanctions from sectoral regulators (BSP, SEC, IC), including license revocation for financial institutions
Reputational damage that can affect the company’s ability to maintain banking relationships and conduct business in the Philippines

FATF Consequences of Non-Compliance

While the Philippines has been delisted from the FATF grey list, the country remains subject to FATF’s ongoing monitoring process. Ongoing deficiencies or a deterioration in AML compliance standards could result in re-listing — a risk that creates significant political and regulatory pressure on the AMLC and Philippine regulators to maintain — and increase — enforcement activity.

The Intersection with Anti-Dummy Law Enforcement

A particularly important consideration for foreign investors in 2026 is the interaction between AML compliance obligations and the enforcement of Commonwealth Act No. 108 (the Anti-Dummy Law). Our analysis of CA 108 in a recent article noted the heightened enforcement posture of Philippine authorities, including the Department of Justice’s dedicated Anti-Dummy Law Enforcement Unit.

The HARBOR beneficial ownership declarations filed through the SEC create a formal, searchable record of the true beneficial owners of companies registered in the Philippines. If a foreign investor has structured their investment to comply with foreign equity restrictions while maintaining de facto control through nominee arrangements, the HARBOR declaration — if completed accurately — creates a documentary record that could expose that arrangement. If completed inaccurately to conceal the true ownership structure, the foreign investor faces simultaneous exposure under AMLA (for filing false or misleading beneficial ownership information) and CA 108 (for the underlying dummy arrangement).

This creates a difficult situation for foreign investors who may have established nominal Filipino ownership structures in the past. We strongly advise any foreign investor in this position to seek legal counsel immediately to evaluate their options, including restructuring, voluntary disclosure, or regularization.

Practical Compliance Framework for Foreign Companies

Based on our analysis of the current legal framework and AMLC enforcement trends, foreign companies operating in the Philippines should implement the following as a minimum compliance baseline:

1. AML Compliance Program

Every covered person must have a documented AML compliance program that includes:

A designated AML Compliance Officer (either a full-time position or a defined function for smaller entities)
Written AML policies and procedures, approved by the board of directors
Customer Identification Program (CIP) procedures with clear documentation standards
Transaction monitoring systems appropriate to the entity’s risk profile
An STR filing protocol with clear escalation procedures
Training programs for relevant employees

2. Beneficial Ownership Identification and HARBOR Filing

All Philippine entities with foreign ownership should conduct an immediate beneficial ownership review to:

Identify all natural persons who directly or indirectly hold 20% or more of shares
Trace ownership chains through any intermediate holding companies, including offshore entities
Identify any natural persons exercising effective control who do not meet the 20% equity threshold
Ensure all required beneficial ownership information is current and filed with the SEC through HARBOR

3. Correspondent Bank Due Diligence

Foreign companies should expect their Philippine banking relationships to conduct due diligence reviews, including requests for beneficial ownership information, corporate structure charts, and AML compliance documentation. Proactive engagement with banking partners — providing updated information before it is requested — significantly reduces the risk of account closures or transaction restrictions.

4. Third-Party and Counterparty Risk Assessment

Foreign companies operating joint ventures, partnerships, or significant vendor relationships in the Philippines should conduct AML risk assessments on counterparties. This is particularly important in sectors with elevated AML risk profiles, including real estate, gaming, and cash-intensive businesses.

5. Ongoing Monitoring and Training

AML compliance is not a one-time exercise. Foreign companies should:

Conduct regular (at minimum annual) reviews of their beneficial ownership information
Monitor transactions against the entity’s stated business profile and flag unusual patterns
Provide regular AML training to all employees with exposure to financial transactions or customer relationships
Stay current with AMLC issuances, BSP circulars, and SEC regulations that may affect their compliance obligations

Looking Ahead: Emerging AML Issues for Foreign Investors in the Philippines

Digital Assets and VASPs

The inclusion of VASPs under AMLA by RA 11521 was a significant development that many foreign companies operating in or entering the Philippine market may not have fully appreciated. If a foreign company’s Philippine operations involve cryptocurrency transactions, token exchanges, or virtual asset services of any kind, those operations are directly covered by AMLA as of 2021.

The BSP and SEC have been working to clarify the regulatory framework for digital asset service providers, and foreign companies in this space should monitor forthcoming BSP circulars and SEC memoranda that will define the specific AML compliance obligations for VASPs.

Real Estate Sector Scrutiny

Real estate developers and brokers were added as covered persons under RA 11521. For foreign companies involved in property development, investment, or brokerage in the Philippines, this means that AML compliance obligations now apply directly to those activities. Real estate transactions involving large cash components, transactions through complex corporate structures, or transactions with non-resident counterparties will receive particular scrutiny.

Cross-Border Enforcement Cooperation

The AMLC has been increasingly active in cooperation with foreign counterparts, including through the Egmont Group, an international network of financial intelligence units. Foreign companies operating in the Philippines should be aware that information shared with the AMLC may be shared with foreign FIUs, and that foreign AML investigations may be facilitated through AMLC channels.

Conclusion

The Philippines’ AML framework in 2026 is substantially more robust, more comprehensive, and more actively enforced than it was even five years ago. The removal from the FATF grey list was a milestone, not a relaxation.

For foreign companies operating in or entering the Philippine market, the message is clear: AML compliance is not optional, and the consequences of non-compliance are severe. The good news is that a well-designed AML compliance program — one that includes proper customer due diligence, accurate beneficial ownership identification through the HARBOR platform, a functioning STR reporting protocol, and ongoing monitoring — is entirely achievable and entirely compatible with a successful business operation in the Philippines.

The first step is understanding whether your company qualifies as a covered person, identifying your beneficial owners, and ensuring your HARBOR declaration is accurate and current. From there, a structured compliance program tailored to your specific industry and risk profile will put you in the strongest possible position.

As always, we recommend engaging qualified Philippine legal counsel to assess your specific situation and ensure your compliance framework is appropriately calibrated to your risk level and business activities.

This article is for informational purposes only and does not constitute legal advice. For specific guidance on AML compliance obligations for your company in the Philippines, please contact Tungol & Tan Law Offices.