Revised regulatory coverage and clearer expectations against blanket de-risking.
The updated Guidelines on Anti-Money Laundering, Countering Financing of Terrorism, Countering Proliferation Financing and Targeted Financial Sanctions (AML/CFT/CPF and TFS) for Labuan Key Reporting Institutions (KRIs) take effect on 28 October 2026. Compliance is immediate unless otherwise specified by Labuan FSA. (Paragraphs 4.1–4.2.)
Key Changes
1. Revised coverage of Labuan Key Reporting Institutions
The revised KRI list retains trust companies and managed trust companies but no longer expressly lists private trust companies. It narrows insurance/takaful coverage to specified life/family business and fund-manager coverage to public/Islamic public funds, expressly includes development finance business, and no longer expressly lists fund administrators, credit token, international trading or factoring businesses. (Paragraph 3.1.)
2. Sanctions applicability beyond KRIs is expressly clarified
Sanctions requirements expressly apply to all Labuan financial institutions regulated or supervised by Labuan FSA. Entities identified as Labuan Specified Entities are directed to separate AML/CFT guidance. (Paragraphs 3.3–3.4.)
3. Customer-specific assessment, not blanket de-risking
When a Labuan financial institution is the customer, KRIs must consider relevant national, sectoral and thematic risk findings alongside individual risks. They must avoid blanket de-risking, consider effective mitigation, apply proportionate customer due diligence (CDD) and document their decisions, subject to mandatory legal or regulatory action. (Paragraphs 10.4–10.5.)
4. New practical guidance on proportionate CDD
New Appendix II guidance explains that sector ratings inform, but do not automatically determine, customer ratings. Examples are illustrative, not prescribed outcomes. (Paragraph 4.11 and Example 3.)
5. Updated financial intelligence department references
References now use Bank Negara Malaysia’s Financial Intelligence Department (FInD). The next-working-day suspicious transaction report (STR) deadline after suspicion is established remains unchanged. (Paragraphs 7.16(viii) and 17.1–17.14.)
What This Means for Businesses
- Confirm your entity’s applicable regulatory framework.
- Review customer-risk assessments and document decisions and mitigation.
- Keep beneficial ownership information current and maintain sanctions controls.
Key takeaway: Apply customer-specific, documented risk assessments, not automatic sector-wide exclusions. Beneficial ownership, sanctions screening, freezing/blocking and reporting obligations are continuing requirements, not newly introduced duties.
For enquiries about your Labuan entity’s documentation and applicable requirements, contact Signature Trust Ltd.
General information only; not legal advice. Check entity-specific requirements against the full Guidelines and relevant separate guidance.
Basis: Guidelines updated 28 October 2026, compared with the version effective 3 February 2025.
Frequently Asked Questions
When do the amendments take effect?
28 October 2026, with immediate compliance unless Labuan FSA specifies otherwise.
Are private trust companies exempt from all obligations?
No such conclusion should be drawn. Private trust companies are no longer expressly listed as KRIs, but the applicable separate framework must be checked. Sanctions requirements apply to all Labuan financial institutions regulated or supervised by Labuan FSA.
Does this guarantee access to banking services?
No. The new rules require individual assessment of financial-institution customers rather than blanket exclusions. Institutions must still assess risk, consider mitigation and comply with mandatory restrictions.
Do beneficial ownership checks still apply?
Yes, where required under the applicable framework. Beneficial ownership identification and verification were already part of the KRI Guidelines and are not new requirements introduced by this amendment.
What should clients prepare?
As a practical step, keep ownership and control information, identification records and explanations of business activities and expected transactions current. Your service provider may request supporting documents for its assessment.