Singapore Real Estate AML Compliance: Estate Agent Obligations Under the CEA and CDSA

TL;DR. Singapore estate agents are subject to AML/CFT obligations under the CEA Practice Guidelines and the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act (CDSA, Cap 65A). The CEA requires agents to conduct CDD on clients before entering a property transaction and to file a Suspicious Transaction Report with the Suspicious Transaction Reporting Office (STRO) when they have reasonable grounds for suspicion. Corporate buyers must be verified through ACRA Bizfile before the transaction proceeds.

Key Takeaways

• Singapore estate agents are designated non-financial businesses and professions (DNFBPs) supervised directly by the CEA for AML/CFT compliance.
• The CEA PMLPFTF Regulations (revised 1 July 2025) added a new obligation to conduct CDD on Unrepresented Counterparties, the other party in the transaction.
• The CDSA 2024 amendments created rash and negligent ML offences. Failing to act on obvious red flags now carries criminal exposure.
• STR must be filed via SONAR as soon as reasonably practicable after suspicion arises. There is no minimum transaction threshold.
• Per-contravention CEA penalties (effective 1 July 2025) mean multiple CDD failures in a single transaction can produce multiple separate fines of up to SGD 200,000 each.
• The 2023 money laundering case saw approximately SGD 3 billion in assets seized, prompting the 2025 legislative reforms that shape the current framework (SPF, November 2024).

What is Singapore’s legal framework for real estate AML?

Singapore’s AML framework for estate agents rests on two statutes and one dedicated regulatory regime. The CDSA (Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act, Cap 65A) is the primary money laundering offence statute. The Real Estate Agents Act 2010, as amended by the Anti-Money Laundering and Other Matters (Estate Agents and Developers) Act 2025 (passed 8 March 2025), gives CEA its supervisory powers. Together, these instruments create a compliance obligation that cannot be satisfied with good intentions alone.

FATF Recommendations 22-23 and global real estate typologies

The CEA’s role as AML supervisor. The Monetary Authority of Singapore (MAS) supervises financial institutions. The Council for Estate Agencies (CEA) is the direct AML/CFT supervisor for estate agents as DNFBPs. These are separate supervisory regimes with separate enforcement powers. An estate agent who is fully compliant with MAS-regulated financial products is still independently liable to the CEA for any AML breach in a property transaction.

The PMLPFTF Regulations. The CEA Estate Agents (Prevention of Money Laundering, Proliferation Financing and Terrorism Financing) Regulations 2021 (PMLPFTF Regulations) is the operational rulebook. A revised version came into effect on 1 July 2025, with full compliance required by 1 January 2026. The CEA published a 67-page practitioner guide on 30 June 2025 to support implementation, titled Guide on Estate Agents (Prevention of Money Laundering, Proliferation Financing and Financing of Terrorism) Regulations 2021 (CEA, June 2025).

When the obligation triggers. CDD must be conducted at the start of the business relationship, before or when the agent begins to act for the client. This is the same trigger point as Malaysia’s BNM DNFBP framework. An agent cannot defer identity checks to the signing of the option to purchase or the tenancy agreement.

New from 1 July 2025: Unrepresented Counterparty (UCP) due diligence. The revised PMLPFTF Regulations added a new obligation. Agents must now conduct CDD on the Unrepresented Counterparty, that is, the other party in the transaction who is not their own client. One exception applies: HDB residential rental transactions are exempt from UCP due diligence.

The UCP obligation is a departure from the standard DNFBP model, where CDD runs only to your own client. Singapore is requiring estate agents to treat the counterparty as a separate CDD subject. This increases the data-gathering workload per transaction significantly and creates a gap for agents who believe they only need to verify the party they represent.

The CDSA 2024 amendments. The 2024 amendments to the CDSA added two new offences that did not previously exist: rash money laundering and negligent money laundering. Before 2024, criminal ML exposure required proof of intent. The 2024 amendments mean that an estate agent who ignores obvious red flags, even without knowing the funds are illicit, can now face criminal charges. The penalties differ by offence tier and are set out in Section 5 below.

Why the 2025 reforms happened. In August 2023, Singapore Police Force arrested ten foreign nationals in a coordinated operation. The case involved approximately SGD 3 billion in assets seized, frozen, or subject to disposal orders. By November 2024, SGD 2.8 billion had been surrendered or forfeited across the ten convicted persons (SPF, November 2024). Several of the assets involved Singapore real estate. The scale of the case made it the largest single money laundering prosecution in Singapore’s history and directly prompted the 2025 legislative reforms.

What does CEA’s CDD framework require from estate agents?

CEA’s CDD framework classifies customers by entity type and escalates the verification burden based on risk. The table below sets out the minimum requirements under the PMLPFTF Regulations (revised 1 July 2025) and the triggers that require enhanced due diligence (CEA PMLPFTF Guide, June 2025).

Screening obligations. Agents must screen clients, beneficial owners, and UCPs against three consolidated lists: the FATF black and grey lists, the Terrorism (Suppression of Financing) Act 2002 (TSOFA) designations, and the UN Security Council consolidated list. A name match is not automatically a blocker, but it requires documented review and escalation before the transaction proceeds.

Singapore’s beneficial ownership threshold. The PMLPFTF Regulations adopt the Companies Act definition of registrable controllers. Under that definition, any person with more than 25% of shares or voting rights is a registrable controller, matching the UK’s bright-line threshold. A second limb applies regardless of shareholding: any person who exercises significant influence or effective control over the company must also be identified and verified. This means the effective CDD obligation is broader than a pure percentage test. An agent who identifies only the 25%-and-above shareholders has not completed BO verification if someone else exercises de facto control (CEA PMLPFTF Regulations 2021, revised 30 June 2025).

Record-keeping period. All CDD documents, transaction records, risk assessments, and STR files must be retained for a minimum of five years from transaction completion or the end of the business relationship (CEA PMLPFTF Guide, June 2025). This is one year shorter than Malaysia’s six-year requirement.

How do you verify a corporate buyer using ACRA?

Verifying a corporate buyer in Singapore starts at ACRA Bizfile+. A standard business profile costs SGD 5.50 (approximately USD 4.10) per search (ACRA, 2025). The profile returns a set of verified corporate data directly from the registry, which forms the backbone of CDD for any Singapore-registered entity.

Full guide to ACRA Bizfile and Singapore company searches

What an ACRA business profile returns. A standard Bizfile+ profile provides: registered company name and Unique Entity Number (UEN), a 9-10 character anchor identifier. It also returns entity type, registration status (Live, Struck Off, In Liquidation, or Wound Up), registered office address, date of incorporation, principal activity via SSIC code, paid-up capital, current and historical officers (directors, company secretary, auditor with appointment dates), and shareholding structure for companies with 20 or fewer shareholders.

Critical limitation: shareholding above 20 shareholders. For companies with more than 20 shareholders, the standard Bizfile+ profile does not disclose the full shareholding list. This is a statutory limit, not a system deficiency. When the ACRA profile shows a company with complex or undisclosed ownership, the agent must request supplementary documentation directly from the corporate buyer.

Critical limitation: the RORC is not public. The Register of Registrable Controllers (RORC) holds beneficial ownership data at the individual controller level. However, the RORC is held by the company itself and is not publicly accessible through ACRA Bizfile+. The agent must request RORC disclosure from the corporate buyer in writing. Neither Singapore nor Malaysia has a public beneficial ownership register equivalent to the UK’s Persons with Significant Control (PSC) register at Companies House.

In practice, requesting RORC disclosure from a corporate buyer is the step most often skipped. The ACRA profile looks complete because it has officers and shareholders listed. But for complex structures, that data shows only the first layer. Documented evidence that you asked for the RORC, and the response you received, is what separates a defensible CDD file from a non-compliant one.

BDG Singapore verification workflow (5 steps).

1. Buyer provides company name and UEN.
2. Run a BDG Singapore lookup, which queries ACRA directly. The query returns the UEN, entity type, registration status, registered address, director list, and shareholding data for companies with 20 or fewer shareholders.
3. Screen all named directors and shareholders against the FATF lists, the UN Security Council consolidated list, and the TSOFA designations.
4. For entities with complex ownership, more than 20 shareholders, or where the ACRA profile shows a holding company as a shareholder: request supplementary documentation directly from the buyer. The agent may not proceed if beneficial ownership cannot be established.
5. Document the ACRA extract (with lookup date), screening results, and the risk assessment in the CDD file. Retain for five years.

BusinessDataGuide’s Singapore harness queries ACRA directly, returning the UEN, entity type, registration status, director list, and shareholding data for companies with 20 or fewer shareholders.

How do you file a Suspicious Transaction Report with STRO?

The Suspicious Transaction Reporting Office (STRO), operated by the Singapore Police Force (SPF), receives all STR filings from estate agents. The legal basis is the CDSA. There is no minimum transaction value threshold. If you have reasonable grounds for suspicion, you must file.

Register for SONAR before any transaction. Filing happens via SONAR, the STRO Online Notices And Reporting platform, at https://www.police.gov.sg/sonar. Account registration must be completed before the transaction is undertaken, not at the point suspicion arises. Technical support for SONAR is available at SPF_STRO_IT_Team@spf.gov.sg.

Step-by-step STR filing process.

1. Identify the suspicion. The agent or salesperson forms a reasonable ground for suspicion that a transaction involves proceeds of crime, terrorist financing, or proliferation financing. Document the specific indicators that gave rise to suspicion: date, behaviour, transaction details, documentation anomalies.

2. Do not confront the client. Tipping off is a criminal offence under the CDSA. Do not tell the client, the counterparty, or any third party that an STR is being filed or considered. Do not ask questions designed to alert the client that a report is imminent.

3. Log into SONAR. Access the filing portal at https://www.police.gov.sg/sonar using the registered agency account. Each licensed estate agency must have an active SONAR registration.

4. Complete the STR form. Provide full details of the suspicious transaction: parties involved, transaction type, property address, transaction value, date and sequence of events, and the specific red flags observed. Attach supporting documents where available.

5. Submit as soon as reasonably practicable. The CDSA requires filing as soon as reasonably practicable after suspicion arises. There is no fixed clock, but delay is itself an offence. Do not defer filing to wait for additional confirmation of suspicion.

6. Notify the estate agency’s Compliance Officer. Estate agencies must appoint a designated Compliance Officer responsible for overseeing STR submissions. The Compliance Officer maintains a log of all STRs filed and ensures the agency meets its independent filing obligation. Both the licensed estate agency and the individual registered salesperson carry independent filing obligations under the CDSA.

7. Retain a copy of the filed STR. Document the SONAR reference number and the date of submission in the client file. This forms part of the five-year CDD record.

Confidentiality and safe harbour. The identity of the STR filer is confidential and protected by law under the CDSA. Information disclosed in the STR is not admissible in civil or criminal proceedings against the reporter. These protections exist to encourage reporting without fear of retaliation or collateral litigation.

Tipping-off is a criminal offence. Once an STR is filed or is under consideration, any disclosure to the subject of the report, or to any other person, constitutes tipping off under the CDSA. This includes indirect disclosure: asking a colleague to confirm a fact in a way that alerts the client is sufficient. The prohibition applies until STRO authorises disclosure.

From public CEA enforcement records, the most common AML compliance failure among Singapore estate agents is not a failure to verify identity at onboarding. It is the absence of a documented risk assessment and the failure to escalate unusual transactions to the Compliance Officer. An STR system that works only when suspicion is “obvious” does not meet the CDSA standard of “reasonable grounds.”

What are the penalties for AML failures under CDSA and CEA?

The 2024 CDSA amendments and the 2025 CEA framework changes materially increased the exposure for estate agents and their agencies. The table below sets out the current penalty structure (CDSA, Cap 65A as amended 2024; CEA PMLPFTF Guide, June 2025).

The per-contravention shift is material. Before 1 July 2025, CEA penalties were assessed on a per-case basis. From 1 July 2025, penalties are assessed on a per-contravention basis. An agent who fails to verify identity, fails to screen against sanctions lists, and fails to document a risk assessment in a single transaction has committed three separate contraventions. Each can attract a separate fine of up to SGD 200,000 for the agency and SGD 100,000 for the salesperson. A single poorly handled transaction now carries a theoretical maximum agency exposure of several hundred thousand Singapore dollars.

The rash and negligent offences changed the risk calculus. Before the 2024 CDSA amendment, criminal ML exposure required proving intent. The new rash offence covers situations where an agent took unjustified risks in proceeding despite obvious red flags. The negligent offence covers failure to take reasonable care. Both carry custodial sentences. Estate agents who previously relied on the “I didn’t know” defence should note that the defence no longer applies where the risk was obvious or where reasonable care would have revealed it.

Conviction triggers automatic licence action. Under the Anti-Money Laundering and Other Matters (Estate Agents and Developers) Act 2025, a conviction for money laundering or terrorism financing makes the individual deemed unfit to hold an estate agent licence or salesperson registration. CEA revokes the licence as a consequence of conviction, not as an additional penalty. There is no discretion.

How does Singapore compare to Malaysia on real estate AML?

Singapore and Malaysia share the same foundational architecture: both are Asia/Pacific Group on Money Laundering (APG) members, both have designated estate agents as DNFBPs with CDD obligations, and both use suspicion-based STR filing with no minimum transaction threshold. Both prohibit tipping-off and both operate a second layer of supervision through a professional licensing body: BOVAEP in Malaysia, CEA in Singapore.

Malaysia real estate AML obligations under AMLA 2001 and BNM policy

Where the frameworks diverge. Five differences matter in practice.

First, supervisory architecture differs. Singapore operates a clean separation: MAS supervises financial institutions, CEA supervises estate agents. Malaysia runs a dual structure where BNM sets the AML policy for all DNFBPs and BOVAEP operates as a licensing and professional standards body alongside it.

Second, the beneficial ownership threshold approach differs. Singapore applies a 25% shareholding threshold (Companies Act definition of registrable controllers, adopted by the PMLPFTF Regulations) combined with an effective control test. Malaysia uses a 20% shareholding threshold under the Companies Act 2016 (amended 2024). Neither country has a publicly accessible beneficial ownership register equivalent to the UK’s PSC register.

Third, the STR timing requirement differs. Singapore requires filing “as soon as reasonably practicable” after suspicion arises. Malaysia requires filing by the next working day. Malaysia’s deadline is more prescriptive.

Fourth, record-keeping periods differ: five years in Singapore versus six years in Malaysia.

Fifth, CEA’s per-contravention penalty structure (up to SGD 200,000 per contravention for agencies, effective 1 July 2025) differs structurally from Malaysia’s criminal penalty ceiling of MYR 3 million for AML offences. Singapore’s per-contravention model can, in theory, produce aggregate penalties exceeding the Malaysian criminal ceiling in a single transaction with multiple failures.

The most significant practical difference is the UCP obligation. Singapore now requires CDD on the counterparty in a transaction, not just your own client. Malaysia has no equivalent requirement under the current BNM DNFBP policy document. An agent operating across both markets needs two different CDD checklists, not one.

A detailed framework-by-framework comparison, covering all five differences with reference to the specific regulatory texts, is available in the Malaysia-Singapore real estate AML comparison.

Full Malaysia vs Singapore real estate AML comparison

Frequently asked questions

Does the CEA CDD obligation apply to rental transactions, or only sales?

The CEA PMLPFTF Regulations apply to both property sales and rental transactions. The UCP due diligence obligation introduced on 1 July 2025 includes one specific exemption: HDB residential rental transactions are exempt from the counterparty CDD requirement. All other transaction types, including private residential, commercial, and industrial rentals, carry the full CDD obligation for both the client and the unrepresented counterparty (CEA PMLPFTF Regulations, revised 1 July 2025).

What is a UEN and why does it matter for corporate buyer checks?

The Unique Entity Number (UEN) is Singapore’s master business identifier. ACRA assigns a 9-10 character UEN to every registered business entity. It is the anchor identifier for all Bizfile+ queries. An agent requesting CDD documents from a corporate buyer should always ask for the UEN first. A company that cannot provide its UEN is either unregistered or providing incorrect company details, which is itself a red flag requiring escalation before the transaction proceeds (ACRA, 2025).

Can an estate agent proceed with a transaction if the STR has been filed but no response has come from STRO?

Filing an STR does not automatically block the transaction. The CDSA requires filing as soon as reasonably practicable after suspicion arises. Whether to proceed with the transaction after filing depends on the specific facts and the agent’s continuing assessment of the risk. STRO may contact the agent for further information or may issue a notice to delay the transaction. In the absence of such a notice, the agent retains responsibility for the risk assessment decision. Consult the CEA or legal counsel if the transaction involves high-value assets and the suspicion involves credible money laundering indicators (CDSA, Cap 65A; CEA PMLPFTF Guide, June 2025).

What is the difference between the CEA penalty and the CDSA penalty for the same failure?

They operate on different tracks and can run concurrently. The CDSA penalty is criminal: it applies when the estate agent commits or facilitates an ML offence. The CEA disciplinary penalty is regulatory: it applies when the agent breaches AML/CFT compliance obligations, regardless of whether an actual ML offence is proven. An agent who fails to conduct proper CDD may face CEA disciplinary action even if no money laundering ultimately occurred in the transaction. A conviction under CDSA also triggers automatic licence revocation under the Anti-Money Laundering and Other Matters Act 2025, separate from any CEA penalty (CEA PMLPFTF Guide, June 2025).

Does a salesperson employed by an estate agency have their own STR obligation, or does the agency file on their behalf?

Both carry independent filing obligations under the CDSA. The estate agency and the individual registered salesperson are each separately required to file an STR when they have reasonable grounds for suspicion. The agency’s Compliance Officer oversees the STR process, but that oversight role does not replace the salesperson’s independent obligation. A salesperson who has reasonable grounds for suspicion and fails to file because “the agency will handle it” remains personally liable (CDSA, Cap 65A; CEA PMLPFTF Guide, June 2025).