St. Vincent & Grenadines AML Rules | Who Must Comply

AML and KYC Compliance in St. Vincent and the Grenadines: An OverviewCopy link to section

Anti-money laundering and know-your-customer (AML/KYC) rules in St. Vincent and the Grenadines are a binding regime, not an optional standard. They require financial institutions and certain non-financial businesses to verify who their customers are, monitor their dealings, and report suspicious activity to the authorities. The framework rests on the Proceeds of Crime Act 2013, the Anti-Terrorist Financing and Proliferation Act 2015, and supporting regulations supervised by two bodies: the Financial Services Authority and the Financial Intelligence Unit.

For a foreign owner of a company formed here, most of these duties are met through your licensed Registered Agent rather than by you directly. This article explains how the regime is structured, who carries the obligations, and where your own entity fits into the chain. It will be most relevant to non-resident owners of Business Companies, LLCs, trusts, and any firm engaging in regulated activity such as financial services or virtual assets. The jurisdiction is a member of the Caribbean Financial Action Task Force, a regional body of the FATF, and follows the FATF risk-based approach.

The Legal Framework Governing AML and KYC ObligationsCopy link to section

The backbone of the regime is the Proceeds of Crime Act 2013 (POCA), amended by Act No. 18 of 2017. It criminalises money laundering and sets the reporting duties that flow through every regulated business in the country.

Counter-financing of terrorism sits in the Anti-Terrorist Financing and Proliferation Act 2015. Suspicious transaction reports are filed under both this Act and POCA, so the two statutes operate together rather than in isolation.

Operational detail comes from two subsidiary instruments. The Anti-Money Laundering and Terrorist Financing Regulations 2014, amended by S.R.O. No. 25 of 2017, designate the Financial Intelligence Unit as supervisor of non-regulated service providers, while the Anti-Money Laundering and Terrorist Financing Code 2017 spells out due diligence, record-keeping, and reporting requirements in practical terms.

Two further pieces matter for specific sectors. The Virtual Asset Business Act 2022 took effect on 31 May 2025 and pulls crypto-related firms into the AML net, and the Anti-Money Laundering and Terrorist Financing (Administrative Penalties) Regulations 2024 introduced an administrative fines structure overseen by the Financial Services Authority.

SVG

Company Incorporation in St. Vincent and the Grenadines

Set up your company in St. Vincent and the Grenadines with Expanship handling registration end to end.

Learn more

Supervisory Authorities: The Financial Services Authority and the Financial Intelligence UnitCopy link to section

Supervision is split between two regulators, and which one applies depends on what your entity does.

The Financial Services Authority (FSA) oversees non-bank financial institutions and the international financial services sector under the FSA Act No. 33 of 2011, POCA, and the AML Regulations and Code. Its supervision runs through off-site and on-site work on a risk-sensitive basis, guided by a published supervisory framework. The regulator's own materials are available at fsasvg.com.

The Financial Intelligence Unit (SVGFIU) was established in May 2002. It receives and analyses suspicious activity reports, investigates financial crime, and supervises non-regulated service providers and designated non-financial businesses and professions.

The dividing line is clean. The FSA supervises licensed financial institutions; the FIU supervises non-regulated service providers and DNFBPs that fall outside the FSA's licensing net.

A note on timing helps set expectations. The FIU's supervisory department was created in August 2018, on-site supervision began only in March 2022, and administrative fines for AML/CFT failures have been available since 31 March 2023.

Who Must Comply: Companies and Service Providers Subject to AML and KYC RulesCopy link to section

The rules bind those who conduct relevant business, not every registered company by default. The main groups are:

• FSA-regulated financial institutions including licensed international banks, mutual funds, insurance and pension plans, credit unions, building and friendly societies, and money services businesses.
• Virtual Asset Businesses under the Virtual Asset Business Act, which since 31 May 2025 catches all persons providing virtual asset services in or from within the country.
• Non-regulated service providers and DNFBPs supervised by the FIU, such as lawyers, accountants, real estate agents, and dealers in high-value goods. The full statutory list is published on the FIU website.

Non-regulated service providers cannot carry out relevant business without registering first. This is a hard rule under section 155(1) of POCA, and operating unregistered exposes the business to enforcement.

For most foreign-owned Business Companies and LLCs, the position is lighter than it may first appear. These entities are not themselves licensed by the FSA for AML purposes; their obligation is to ensure their Registered Agent complies, and the Agent carries out the KYC.

That changes if the company performs a regulated activity. A firm conducting forex or virtual asset business, for example, takes on direct AML/CFT obligations and supervision in its own right.

SVG

Ongoing Compliance in St. Vincent and the Grenadines

Keep your St. Vincent and the Grenadines entity compliant with filings, returns, and statutory obligations.

Learn more

Customer Due Diligence and KYC Identity Verification RequirementsCopy link to section

Customer due diligence (CDD) is the core of the regime. A regulated business must identify and verify each customer on a risk-sensitive basis, and the depth of checking rises with the level of risk presented.

Standard CDD, consistent with FATF Recommendations and the AML/CFT Code, covers four things: verifying the customer's identity; identifying the beneficial owner; understanding the nature and purpose of the relationship; and establishing the source of funds or wealth. This information must be retained so that it can be audited.

CDD is triggered at defined moments rather than continuously from scratch:

1. Establishing a new business relationship.
2. Carrying out an occasional transaction at or above the reporting threshold.
3. Suspecting money laundering or terrorist financing.
4. Doubting the reliability of identification data obtained earlier.

Large cash transactions carry a separate reporting duty. A Large Cash Transaction Report (LCTR) goes to the FIU when deposited or transferred funds exceed the jurisdiction's reporting threshold; confirm the current Eastern Caribbean dollar figure with the FIU before relying on a number.

Responsibility is decentralised by design. Each entity must build and apply its own policies and AML/CFT measures, calibrated to the money laundering and terrorist financing risk it actually faces.

Enhanced Due Diligence for High-Risk Customers and Politically Exposed PersonsCopy link to section

Enhanced due diligence (EDD) is the deeper level of checking applied where risk is elevated. It is mandatory for dealings involving Politically Exposed Persons (PEPs), and it is codified in the AML/CFT Code 2017 and the AML Regulations, in line with FATF Recommendations 12 and 19.

In practice, EDD adds three layers to standard checks: senior management sign-off to open or continue the relationship, enhanced verification of identity and source of wealth, and closer, more frequent monitoring.

The categories that trigger it follow the FATF standards the country has adopted:

• PEPs together with their family members and close associates.
• Customers connected to high-risk or non-cooperative jurisdictions.
• Complex or unusually large transactions without an obvious purpose.
• Non-face-to-face business relationships.

The precise PEP definition and the full trigger list sit in the AML/CFT Code 2017. A compliance officer should read those directly rather than work from a summary, since the detail governs day-to-day decisions.

SVG

St. Vincent and the Grenadines Incorporation Pricing

See transparent pricing to incorporate and maintain a company in St. Vincent and the Grenadines.

View pricing

Ongoing Monitoring of Business Relationships and TransactionsCopy link to section

CDD is not a one-off gate. Once a relationship is open, the business must keep watching it, in line with FATF Recommendation 10 and the AML/CFT Code 2017.

Monitoring has three working parts: checking that transactions match what is known about the customer and their risk profile, keeping CDD records current, and flagging and reporting anything unusual or suspicious. Higher-risk customers warrant more frequent review than lower-risk ones.

This duty is anchored in the formal compliance programme that Regulation 20(1) of the AML Regulations requires every institution to maintain. The programme is where transaction-monitoring systems and review cycles are defined.

Virtual asset businesses carry an extra obligation: the Travel Rule. They must collect and monitor sender and receiver information for transfers, mirroring FATF guidance for the crypto sector.

AML Record-Keeping RequirementsCopy link to section

Records are the evidence trail behind every other duty, and the regime expects them to be complete enough to reconstruct any transaction and support a prosecution if one follows.

The categories to keep include CDD and KYC identity documents, full transaction records with supporting papers, suspicious activity report filings and internal investigation notes, and the AML/CFT compliance programme documentation itself.

On retention, the AML/CFT Code 2017 applies a minimum holding period after a relationship or transaction ends, consistent with the FATF standard of five years. Confirm the exact period in the AML/CFT Code rather than assuming, since the figure governs how long files must survive.

There is no published rule forcing records to sit physically within the country. The operative principle is access: the supervisory authority must be able to obtain the records on request, wherever they are held.

Registered virtual asset businesses face an added layer. They must submit yearly audited financial statements alongside IT and cybersecurity audit reports.

Suspicious Activity Reporting to the Financial Intelligence UnitCopy link to section

Anyone who knows or suspects that a transaction involves the proceeds of crime, money laundering, or terrorist financing must file a Suspicious Activity Report, also called a Suspicious Transaction Report. The report goes to the FIU under both POCA and the Anti-Terrorist Financing and Proliferation Act.

Telling the subject that a report has been made is a separate crime. This "tipping-off" prohibition under POCA applies even where the underlying suspicion turns out to be unfounded.

The penalties for failing to report are real and personal, not just corporate:

Filing is done directly with the FIU through its official channel at svgfiu.com. Confirm the current form and submission method with the unit, as the specific online portal was not verifiable from public sources. Large Cash Transaction Reports remain a distinct filing, triggered by value rather than suspicion.

The Role of the Registered Agent in AML and KYC ComplianceCopy link to section

For a non-resident owner, the Registered Agent is the practical centre of AML compliance. Every international business transaction runs through a Registered Agent and Trustee licensed and regulated by the FSA under the Registered Agent Trustee (Licensing) Act, Chapter 105.

The Agent performs the customer due diligence on the beneficial owner, directors, and shareholders, both at formation and on a continuing basis. Incorporation of a Business Company, LLC, or trust can be completed in one business day, but only after the Agent has finished satisfactory KYC.

You cannot bypass this. A foreign owner cannot self-file at the registry; incorporation, renewals, and amendments must all pass through the licensed Agent, who is itself an FSA-supervised institution with its own compliance programme.

The Agent also holds your KYC and CDD records on the entity's behalf and must produce them to the FSA or the FIU when asked. In effect, the quality of your Agent's compliance function is the quality of your company's.

Penalties and Enforcement for Non-ComplianceCopy link to section

Sanctions span criminal conviction, administrative fines, and corporate measures. The most serious sit in POCA.

Beyond criminal courts, administrative penalties have been available since 31 March 2023, and the Administrative Penalties Regulations 2024 set the tariff structure now administered by the FSA. The published schedule of amounts should be checked at fsasvg.com before estimating any exposure.

The FIU may take enforcement action against non-regulated service providers, and that action must be effective, proportionate, and dissuasive. Carrying on relevant business without the required registration is itself prohibited and grounds for action.

Corporate consequences reach the company directly. Non-compliance with FSA requirements can lead to cancellation of an entity under section 37(1) of the FSA Act, and the regulator holds intervention powers over those it supervises.

Enforcement to date has leaned toward remedial letters, memoranda of understanding, and directives rather than criminal prosecution. That posture is unlikely to hold indefinitely, given the country's CFATF follow-up status and the risk that unaddressed deficiencies invite heightened international scrutiny.

ConclusionCopy link to section

The practical message for a foreign owner is that the AML/KYC burden mostly travels through your Registered Agent, but the legal risk does not disappear because someone else does the work. A weak agent, an unregistered regulated activity, or a missed suspicious-transaction report can expose the entity to fines, cancellation, and in the worst case criminal liability.

Before you incorporate or renew, satisfy yourself that your Agent runs a genuine compliance programme and that any regulated activity your company performs is properly registered and supervised. That single check protects you more than any after-the-fact remedy.

How Expanship Can Help Your Business in St. Vincent and the GrenadinesCopy link to section

Expanship supports foreign owners on AML/KYC by acting through licensed Registered Agents, preparing customer due diligence documentation, and keeping your entity aligned with the FSA and FIU expectations, while also handling the wider compliance load of running a company from abroad.

• Company incorporation for Business Companies, LLCs, and trusts
• Registered Agent and registered office arrangements
• Ongoing compliance and filing management across deadlines
• Accounting and bookkeeping support
• Economic-substance and beneficial-ownership assistance
• Banking introductions for non-resident owners

To discuss your obligations and set up a compliant structure, contact Expanship St. Vincent and the Grenadines.

Frequently Asked QuestionsCopy link to section