Listen to this article
0:00 / 0:00

Key Takeaways

  • Foreign-owned companies in St. Lucia fall within AML/KYC obligations where they qualify as financial institutions or persons engaged in other business activity.
  • Customer due diligence ranges from simplified to enhanced measures, with extra scrutiny applied to politically exposed persons and higher-risk relationships.
  • Ongoing monitoring, record-keeping, and suspicious transaction reporting through a compliance officer are core duties overseen by the Financial Intelligence Authority.
  • Registered agents play a defined role in meeting these requirements, and non-compliance carries penalties under the applicable framework.

Anti-money laundering and know-your-customer rules are the controls a business must apply to verify who its customers are, understand where their money comes from, and report activity that looks suspicious. These obligations are live and enforceable in St. Lucia, set chiefly by the Money Laundering (Prevention) Act and supervised by the Financial Intelligence Authority. For a foreign owner, AML/KYC in St. Lucia rarely lands on the company itself; it lands on the licensed registered agent and on any regulated business you operate, while you carry the practical duty of supplying clean documentation when asked.

This article explains how the regime works, which businesses fall inside it, the due diligence and reporting steps required, record-keeping periods, and the penalties for failure. It matters most to non-resident owners of International Business Companies, investors using St. Lucian structures, and their advisers who must keep an entity in good standing. A useful starting reference is the FIA's own overview page.

The backbone of the regime is the Money Laundering (Prevention) Act (MLPA), Chapter 12.20 of the Revised Laws of Saint Lucia, first enacted as No. 8 of 2010 and carried into a 2023 Revision. Its companion instrument, the Money Laundering (Prevention) Regulations (MLPR), fills in the procedural detail on wire transfers, correspondent banking, and customer due diligence.

A formal definition of "beneficial owner" entered the statute through the Money Laundering (Prevention) (Amendment) Act No. 16 of 2021. That single change reshaped how ownership and control of a legal person must be identified and recorded.

The framework does not sit alone. It is reinforced by the Proceeds of Crime Act (Chapter 3.04), the Anti-Terrorism Act (Chapter 3.16), and the United Nations (Counter Proliferation Financing) Act (Cap. 12.30) enacted in 2022.

A further measure, the Registration of Supervised Entities Act No. 12 of 2023, introduced a duty for certain non-financial businesses to register with the supervisor. The whole package is built to meet the FATF 40 Recommendations and Caribbean Financial Action Task Force standards, with the most recent CFATF Enhanced Follow-Up Report assessing progress up to 26 May 2023.

Which penalty applies

Where a penalty under the Act conflicts with one set out in its Regulations, the penalty in the Act prevails.

Company Incorporation in St. Lucia

Set up your company in St. Lucia with Expanship handling registration end to end.

The Financial Intelligence Authority (FIA) is the body that receives reports, supervises regulated businesses, and feeds intelligence to law enforcement. Established in October 2003 and now operating under the MLPA, it is a hybrid unit holding regulatory, supervisory, and investigative powers at once.

Its statutory functions include collecting and analysing suspicious transaction reports, disseminating intelligence to bodies such as the Inland Revenue Department, the Customs and Excise Department, the Commissioner of Police, and the Director of Public Prosecutions, and advising reporting entities of their obligations. The Authority also sets training expectations for the firms it oversees.

To do this work it conducts risk assessments, audits, and inspections, testing whether a firm's internal controls actually function. It reports to the Minister every three months on its activity.

The FIA does not act in isolation. Coordination with secondary supervisors, including the Eastern Caribbean Securities Regulatory Commission, the Financial Services Regulatory Authority, the Inland Revenue Department, and the police, runs through the National Anti-Money Laundering Oversight Committee. The official portal is www.slufia.com.

The Act divides obligated businesses into two groups, both set out in Schedule 2. Financial Institutions sit in Part A; Persons Engaged in Other Business Activity sit in Part B.

Part A reaches banks, insurance companies, money service businesses, securities dealers, mutual fund administrators, and virtual asset service providers added through the Virtual Asset Business Act No. 24 of 2022. Both domestic and offshore institutions are caught, including credit unions and trust companies, and the definition expressly takes in providers of international financial services.

Part B captures a wider field of non-financial businesses. Among them:

  • Registered agents and trustees licensed under the Registered Agent and Trustee Licensing Act
  • Trusts licensed under the International Trusts Act
  • Accountants
  • Real estate agents
  • Businesses carrying out lending, factoring, cheque-cashing, or issuing means of payment such as credit cards and travellers' cheques

Since 2023, specified Other Business Activity persons must formally register with the FIA under the Registration of Supervised Entities Act. There is also a look-through duty: when a customer appears to act for someone else, whether as trustee, nominee, or agent, the firm must take reasonable steps to establish the true identity of that other person.

For most foreign owners, the practical point is narrow. A passive holding company is not itself a reporting entity; the obligations bite on the licensed registered agent that administers it, and on any regulated business you actively run.

Ongoing Compliance in St. Lucia

Keep your St. Lucia entity compliant with filings, returns, and statutory obligations.

Customer due diligence is the core of the regime, and the MLPA sets out four steps that every reporting entity must apply. Each customer relationship turns on them.

  1. Identify the customer and verify identity using reliable, independent source documents or data.
  2. Identify the beneficial owner and take reasonable measures to verify that person, including understanding the ownership and control structure of any legal person.
  3. Obtain information on the purpose and intended nature of the business relationship.
  4. Conduct ongoing due diligence and scrutinise transactions throughout the relationship.

The extent of these measures is risk-sensitive. A firm must apply each one, but may scale the depth according to the customer, the relationship, and the transaction type. Verification of both the customer and the beneficial owner must happen before or during the establishment of the relationship.

A nominee is never treated as the beneficial owner. Shares a nominee holds for another person are treated as belonging to that other person, which is why complete ownership disclosure cannot be sidestepped through a nominee arrangement.

Certain events trigger the CDD obligation: establishing a relationship, conducting an occasional transaction above the threshold, harbouring doubt about earlier identification data, or suspecting money laundering or terrorist financing. The one-off transaction threshold is XCD 27,000 for two or more linked transactions.

When CDD cannot be completed

If a firm cannot complete due diligence, it must not open the account, start the relationship, or carry out the transaction, must consider ending any existing relationship, and must weigh filing a suspicious transaction report.

Not every customer warrants the same scrutiny. The Act lets firms calibrate up or down, provided suspicion never enters the picture.

Simplified due diligence is permitted in defined low-risk situations: where the national risk assessment supports it, where adequate system controls exist, or where the customer resides in a FATF-compliant country. It cannot be used where there is any suspicion of money laundering or other criminal conduct.

Enhanced due diligence runs the other way. Where high risk is identified, including the categories flagged by FATF, a firm must apply deeper measures proportionate to that risk, and the FIA may warn entities about weaknesses in other countries' systems. The Regulations require firms to spell out, in writing, when enhanced measures must be triggered.

Risk tiering under FIA guidance
Tier Treatment
Low Normal expected activity; basic measures suffice
Medium Additional scrutiny scaled to the nature of the risk
High Stringent measures; enhanced due diligence with rigorous controls

Politically exposed persons attract special handling. The category covers heads of state, ministers, parliamentarians, mayors, chairpersons of constituency councils, and senior military officers, along with their family members and close associates. For both domestic and foreign PEPs, firms must apply enhanced ongoing monitoring, and the FIA has issued dedicated "Guidance to Reporting Entities on PEPs" dated September 2021.

One rule cuts against instinct. If performing due diligence would tip off a customer the firm already suspects, it must not perform the due diligence and must instead file a suspicious transaction report.

St. Lucia Incorporation Pricing

See transparent pricing to incorporate and maintain a company in St. Lucia.

Due diligence is not a one-off gate at onboarding. A reporting entity must keep watching transactions across the life of a relationship, checking that activity stays consistent with what it knows about the customer, the customer's business, and the risk profile, with specific attention to the source of funds.

High-risk relationships demand more. Where enhanced due diligence applies, enhanced ongoing monitoring becomes a separate, standing obligation rather than an occasional review.

Wire transfers carry their own monitoring duties under the MLPR. An ordering institution must retain enough detail to establish accurate originator and beneficiary information for domestic and cross-border transfers, and an intermediary institution must take reasonable measures to spot transfers missing that information and apply risk-based policies for executing, rejecting, or suspending them.

Internally, the compliance function must report up regularly. Compliance reports go to the Board of Directors at least quarterly.

Every reporting entity must retain the records that prove its due diligence and document its transactions. The retention period carried into the regime from the Proceeds of Crime Act framework is seven years, the baseline cited in public sources for both account and transaction records and for wire-transfer data.

The categories to be kept are broad:

  • Identity and verification documents for customers and beneficial owners
  • Transaction records
  • Correspondence relating to business relationships
  • Suspicious transaction reports

Beneficial ownership records must be kept current, with routine reviews for high-risk customers. The FIA's Guidance on Identification and Verification of Beneficial Owners, dated May 2022, sets out the expectations here.

Records are held by the reporting entity and must be accessible to the FIA on demand. For International Business Companies, the registered agent collects and maintains beneficial ownership data, but that information is shielded from publication or general distribution and is released only through formal inquiries by competent authorities.

When a transaction looks suspicious, the firm must report it to the FIA, which then receives, analyses, and disseminates the intelligence. A person who discloses in good faith that money or property may represent proceeds of crime is protected from being sued for breach of confidentiality.

The standard for reporting is deliberately low. If a compliance officer is uncertain whether the details substantiate the suspicion, the report must still be made. The FIA's "Guidance to Reporting Entities on Suspicious Activity Reporting" of May 2023 sets out how this should be done; the FIA website remains the official point of contact for current guidance and forms.

Every Financial Institution and Other Business Activity person must build a working compliance function around a named officer:

  • Designate a Compliance Officer and notify the FIA of that person's identity
  • Appoint an alternate Compliance Officer who holds relevant qualifications and understands the role
  • Ensure the officer and the deputy are never both absent at the same time
  • Maintain internal AML/CFT policies, procedures, and controls
  • Submit compliance reports to the Board at least quarterly

The deputy must be ready to assume full responsibility during any absence of the principal officer. This is not a paper appointment; the role must be genuinely staffed.

For a non-resident owner, the registered agent is where AML/KYC becomes real. The IBC Act requires every International Business Company to appoint a licensed registered agent who must run KYC checks and maintain beneficial ownership records, with these duties anchored in Section 97 of that Act.

Registered agents and trustees licensed under the Registered Agent and Trustee Licensing Act sit squarely within Schedule 2 of the MLPA, so they carry the full set of due diligence, record-keeping, and reporting obligations. Their Code of Conduct bars them from doing business with anyone until they have completed due diligence, obtained proper references, and satisfied themselves about the relationship.

That gatekeeping is backed by financial standing requirements. The RATLA Regulations require a registered agent to hold professional indemnity insurance of US$200,000 and a registered trustee US$500,000, and a licence may be revoked by the Minister under Section 20 on grounds such as insolvency or conviction for a crime of dishonesty.

One point deserves emphasis. Where a reporting entity relies on its registered agent to perform due diligence, ultimate responsibility for that identification and verification stays with the reporting entity itself.

What this means in practice

Supply your registered agent with complete, accurate KYC documentation at onboarding, and update it promptly whenever ownership, control, or activity changes; delay there is the most common cause of friction for a foreign-owned company.

Money laundering itself draws heavy criminal sanction. The 2023 amendments to the Act set graduated fines and custodial terms that the CFATF assesses as dissuasive and proportionate.

Penalties for the money laundering offence (MLPA s.28, as amended 2023)
Route Fine Imprisonment
Summary conviction XCD 500,000 to XCD 5 million 5 to 15 years
Conviction on indictment XCD 1 million to XCD 10 million

Failures of due diligence and record-keeping are handled differently. On application by the Director of the FIA or the Director of Public Prosecutions, a court may issue a mandatory injunction compelling a firm that has breached its obligations without reasonable cause to come into compliance.

The Act also reaches assets directly. It allows searches of institutions and premises, freezing orders, and forfeiture where justified. On the operational side, an ordering institution must not execute a wire transfer that fails the originator and beneficiary requirements.

For licensed businesses, the sharpest consequence is loss of licence. A registered agent that fails to maintain AML/KYC standards risks revocation under RATLA, which would force the IBC it administers to find a replacement agent. No public schedule of civil fines below the criminal threshold exists; technical breaches are met through supervisory action, injunctions, and licence measures. The penalty figures here trace to the CFATF follow-up report.

The practical weight of AML/KYC for a foreign owner falls less on the company than on the people around it: the licensed registered agent who must verify you, and the regulated firms you do business with. Your real exposure is documentary, not procedural, and it is resolved by giving accurate beneficial ownership information up front and refreshing it when things change.

Weigh one thing before you incorporate or restructure: confirm that your registered agent runs a credible compliance function and holds the required insurance, because their licence standing protects your entity's continuity. A weak agent is a risk you inherit.

Expanship supports foreign owners through the AML and KYC steps that a St. Lucian entity touches, assembling and maintaining the beneficial ownership and due diligence documentation your registered agent and regulators require, and managing the flow of information when a request arrives. The same team handles the wider obligations of running a foreign-owned company in the jurisdiction.

  • Company formation and entity setup
  • Licensed registered agent and registered office
  • Ongoing compliance and filing management
  • Accounting and bookkeeping
  • Economic-substance and beneficial-ownership support
  • Banking introductions

To discuss your structure and obligations, contact Expanship St. Lucia.

Usually not directly. Reporting duties fall on Financial Institutions and Persons Engaged in Other Business Activity under Schedule 2 of the MLPA, which for most non-resident structures means the licensed registered agent rather than a passive holding company. If your entity actively carries on a regulated business such as lending or money services, it becomes a reporting entity in its own right.

The agent must identify and verify you and every beneficial owner using independent documents, understand the ownership and control structure, and establish the purpose of the relationship. Expect to supply identity documents, proof of address, and a clear account of source of funds, with deeper information requested where the relationship is rated high risk.

The retention baseline carried into the regime is seven years, covering customer due diligence documents, transaction records, correspondence, and wire-transfer data. Beneficial ownership records must also be kept current, with routine reviews for high-risk customers.

No. The registered agent collects and maintains the data, but it is restricted from publication or general distribution and is released only through formal inquiries by competent authorities. Disclosure to those authorities must be possible in a timely manner under the FATF standards the jurisdiction follows.

The Minister may revoke a registered agent's licence under Section 20 of RATLA for grounds such as insolvency or conviction for a crime of dishonesty, including failures to maintain AML standards. Because the IBC Act requires every International Business Company to have a licensed agent, a revocation forces the company to appoint a replacement, which is why the agent's standing matters to your entity's continuity.

Enhanced measures apply where high risk is identified, including the categories flagged by FATF, and where a customer, transaction, or applicant presents elevated risk. If you, an owner, or a close associate qualify as a politically exposed person, enhanced ongoing monitoring of the relationship is required regardless of country.