13.4 Compliance Framework and Money Laundering Prevention Program (MLPP)

SEC Certification Examination Phase 1 General

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: Corporate Structure & Capital Stock

1.1 Philippine Corporate Formation and Capital Structure 1.2 Common and Preferred Shares 1.3 Stockholder Rights and Corporate Actions 1.4 Corporate Debt and Fixed Income Instruments

2 Chapter 2: Financial Markets and Securities Products

2.1 Money Market and Capital Market Instruments 2.2 Collective Investment Schemes and Funds 2.3 Philippine Stock Exchange (PSE) Structure and Trading 2.4 Real Estate Investment Trusts (REITs) and Asset-Backed Securities

3 Chapter 3: Macroeconomic Principles and Monetary Policy

3.1 Gross Domestic Product, Inflation, and Business Cycles 3.2 Monetary Policy and the Bangko Sentral ng Pilipinas (BSP) 3.3 Fiscal Policy, National Debt, and Foreign Exchange 3.4 Philippine Financial Regulatory Architecture

4 Chapter 4: Financial Mathematics and Valuation Concepts

4.1 Time Value of Money and Interest Calculations 4.2 Bond Valuation and Yield Concepts 4.3 Equity Valuation Metrics and Financial Ratios 4.4 Investment Return, Risk Metrics, and Portfolio Principles

5 Chapter 5: The Securities Regulation Code (SRC) & Securities Registration

5.1 Legislative Framework and SEC Regulatory Powers 5.2 Definition and Scope of Securities 5.3 Mandatory Registration of Securities 5.4 Exempt Securities and Exempt Transactions

6 Chapter 6: Market Intermediaries & Trading Conduct

6.1 Registration of Brokers, Dealers, Associated Persons, and Salesmen 6.2 Duties and Ethical Standards of Market Professionals 6.3 Supervision and Compliance Organization 6.4 Books, Records, and Customer Account Handling

7 Chapter 7: Market Manipulation, Insider Trading & Public Disclosures

7.1 Prohibited Acts and Market Manipulation 7.2 Insider Trading and Unlawful Disclosures 7.3 Tender Offer Rules, Proxy Solicitation, and Periodic Reports

8 Chapter 8: Principles of Corporate Governance & Board Oversight

8.1 Evolution and Governance Framework in the Philippines 8.2 Board Composition, Roles, and Fiduciary Duties 8.3 Independent Directors and Term Limits 8.4 Board Committees and Special Responsibilities

9 Chapter 9: Internal Controls, Disclosure & Shareholder Rights

9.1 Internal Control System and Internal Audit Function 9.2 Related Party Transactions (RPT) Policy and Governance 9.3 Corporate Transparency and Timely Disclosure 9.4 Rights of Shareholders and Stakeholder Engagement

10 Chapter 10: Risk Concepts and Categories

10.1 Risk, Uncertainty, and Objectives 10.2 Financial Risks: Market, Credit, and Liquidity 10.3 Non-Financial Risks: Operational, Strategic, and Reputational

11 Chapter 11: Risk Management Process

11.1 Risk Management: Coordinated Direction and Control 11.2 Risk Identification 11.3 Risk Analysis and Evaluation

12 Chapter 12: Risk Treatment and Hedging

12.1 Risk Treatment, Mitigation, Monitoring, and Review 12.2 Hedging: Purpose and Exposure Identification 12.3 Hedging Strategies and Instruments 12.4 Integrated Risk Scenarios and Review

13 Chapter 13: AML Legal Framework & Institutional Governance

13.1 Anti-Money Laundering Act of 2001 (AMLA) and Amendments 13.2 Anti-Money Laundering Council (AMLC) Powers and Structure 13.3 Money Laundering Offenses and the Three Stages 13.4 Compliance Framework and Money Laundering Prevention Program (MLPP)

14 Chapter 14: Customer Due Diligence, Reporting & Record Keeping

14.1 Customer Due Diligence (CDD) and Know-Your-Customer (KYC) 14.2 Politically Exposed Persons (PEPs) and High-Risk Relationships 14.3 Covered and Suspicious Transaction Reporting 14.4 Record Keeping, Freezing of Assets, and Penalties

13.4 Compliance Framework and Money Laundering Prevention Program (MLPP)

Key Takeaways Explain This Topic AI

SEC-supervised covered persons, such as broker-dealers, investment houses, and investment companies, must adopt a board-approved Money Laundering and Terrorist Financing Prevention Program (MTPP).

The Board of Directors bears ultimate responsibility for AML/CFT compliance, including MTPP approval, adequate resourcing, and oversight of audit and examination findings.

The AML Compliance Officer must be a senior officer with independence from revenue-generating business units and direct access to the Board of Directors.

Independent, risk-based testing of the MTPP must be performed separately from the AMLCO and the activities reviewed, with findings reported to the board or a board committee.

Under SEC MC No. 29, Series of 2020, applicants file a sworn certification instead of the MTPP and submit the MTPP to AMLD-EIPD within 10 days of licensing.

Last updated: October 2026

13.4 Compliance Framework and Money Laundering Prevention Program (MLPP)

In the Philippine capital markets, regulatory compliance is not merely an advisory function; it is an affirmative institutional obligation. The Securities and Exchange Commission (SEC), in coordination with the Anti-Money Laundering Council (AMLC), enforces comprehensive institutional governance rules across all capital market intermediaries. Under SEC Memorandum Circular No. 16, Series of 2018 , as amended (the SEC AML/CFT Guidelines), and SEC Memorandum Circular No. 29, Series of 2020 on MTPP submission and monitoring and the 2018 Implementing Rules and Regulations (IRR) of the AMLA , covered institutions must establish a sound and dynamic internal defense system against financial crime.

Scope of Covered Persons Under SEC Supervision

Under Section 3(a)(3) of AMLA, as amended, and the SEC AML/CFT Guidelines, Covered Persons under SEC supervision include:

Securities dealers, brokers, and salesmen , including trading participants of the PSE.

Investment houses and other persons managing securities or rendering services as investment agent, advisor, or consultant, such as fund managers and investment company advisers.

Mutual funds, closed-end investment companies, common trust funds , and similar persons.

Other SEC-supervised entities administering or dealing in currency, commodities or financial derivatives based on them, valuable objects, cash substitutes, and similar monetary instruments or property.

Financing and lending companies once paid-up capital reaches ₱10 million or foreign equity exceeds 40%; they remain covered even if capital or foreign equity later falls below the threshold, unless the SEC declares otherwise (SEC MC No. 29, Series of 2020, Section 5).

The Money Laundering and Terrorist Financing Prevention Program (MTPP / MLPP)

Every SEC-covered institution is legally mandated to formulate, adopt, and operationalize a comprehensive, written compliance manual known as the Money Laundering and Terrorist Financing Prevention Program (MTPP) , traditionally referred to as the Money Laundering Prevention Program (MLPP) . ┌─────────────────────────────────────────────────────────────────────────────┐

│ CORE COMPONENTS OF AN MTPP / MLPP │
└─────────────────────────────────────────────────────────────────────────────┘

1. Governance & Oversight 2. Risk-Based CDD & KYC
Board approval & ownership • Customer Due Diligence tiers
Independent AMLCO role • Beneficial ownership verification
Adequate compliance resources • PEP screening & enhanced diligence

3. Monitoring & Reporting 4. Internal Controls & Audit
Automated rule-based alerts • Risk-based independent testing
Electronic CTR/STR filings • Findings to board or committee
Five-year record retention • Role-based staff training
Mandatory Minimum Contents of the MTPP

Under the SEC AML/CFT Guidelines and MTPP submission rules, an institutional MTPP must be customized to the firm's specific risk profile, customer base, product offerings, and delivery channels. It must contain:

Detailed Customer Due Diligence (CDD) / Know-Your-Customer (KYC) Guidelines : Clear procedures for verifying natural persons, corporate entities, trusts, and identifying the natural persons who ultimately own or control the customer (beneficial owners).

Risk Assessment Framework : Institutional Enterprise-Wide Risk Assessment (EWRA) methodologies classifying clients into low, normal, and high-risk tiers (e.g., Politically Exposed Persons or PEPs).

Screening and Onboarding Controls : Screening against UN Security Council sanctions lists, domestic AMLC freeze lists, and targeted financial sanctions databases.

Transaction Monitoring and Alert Handling : Clear thresholds and behavioral triggers for detecting suspicious trading (such as wash sales, unusual volume spikes, or rapid redemptions).

Reporting Mechanisms : Protocols ensuring that Covered Transaction Reports (CTRs) are filed within five (5) working days, and Suspicious Transaction Reports (STRs) are filed within the prescribed regulatory window.

Record Retention Rules : Policies guaranteeing that all KYC files, account records, and trading data are preserved for at least five (5) years from the transaction date or account closure.

Mandatory Board Approval and Biennial Updating

Formal Board Approval : The MTPP must be formally approved by the Board of Directors (or highest governing body in non-corporate entities) and documented in the official corporate minutes.

Periodic Updating : The MTPP is not a static document. It must be reviewed and updated at least once every two (2) years , or sooner whenever there are material changes in AML/CFT legislation, SEC rules, or emerging institutional risk typologies.

Board of Directors and Senior Management Governance

A central tenet of the SEC AML/CFT governance regime is that compliance begins at the highest corporate echelon.

Ultimate Responsibility of the Board of Directors

Under Philippine law, the Board of Directors bears ultimate responsibility for the firm's AML compliance. The Board cannot contract away or delegate this legal accountability. Specific board duties include:

Setting an uncompromising "Tone at the Top" that prioritizes ethical conduct and legal compliance over commercial trading revenues.

Ensuring the MTPP is fully implemented, resourced, and enforced throughout all branches and divisions.

Allocating sufficient financial, technological, and human capital to the compliance department.

Periodically reviewing AML management information reports, audit findings, and regulatory examination results.

Role of Senior Management

Senior Management is tasked with the operational execution of board policies:

Overseeing the day-to-day administration of the MTPP across front-office, operations, and IT units.

Ensuring that high-risk client relationships (such as foreign PEPs or high-net-worth accounts from higher-risk jurisdictions) receive prior written approval from senior management before onboarding.

Establishing escalation protocols for handling compliance breaches and transaction alerts.

The Anti-Money Laundering Compliance Officer (AMLCO)

Every covered institution must formally appoint a designated Anti-Money Laundering Compliance Officer (AMLCO) . Smaller broker-dealers often combine the AML role with the general compliance function, while larger institutions may keep a dedicated AML officer; either way, the designated officer needs the authority and independence described below. ┌─────────────────────────────────────────────────────────────────────────────┐

│ THE STATUTORY ROLE OF THE AMLCO │
└─────────────────────────────────────────────────────────────────────────────┘

DIRECT ACCESS LINE ORGANIZATIONAL INDEPENDENCE
┌────────────────────────┐ ┌────────────────────────┐
│ Board of Directors │ │ Complete separation │
│ & Audit Committee │ │ from revenue units │
└───────────▲────────────┘ └───────────▲────────────┘
│ │
└────────────────────┬────────────────────┘
│
┌──────────────┴──────────────┐
│ AML Compliance Officer │
│ (AMLCO) │
└──────────────┬──────────────┘
│
┌───────────────────────┼───────────────────────┐
▼ ▼ ▼
MTPP Implementation Transaction Surveillance AMLC / SEC Liaison
& EWRA Risk Assessment & Timely CTR / STR Filings & Examination Support
Key Qualifications and Governance Safeguards

Senior Management Stature : The AMLCO must be a senior officer possessing sufficient authority, seniority, and standing within the corporate hierarchy to challenge business decisions and enforce compliance.

Direct Reporting Lines : The AMLCO must have direct, unrestricted access to the Board of Directors and the Board Audit/Risk Committee, bypassing intermediate commercial managers.

Freedom from Conflicts of Interest : To preserve objectivity, the AMLCO should not hold trading, sales, or other revenue-generating positions whose activities the AMLCO must monitor. Combining those roles undermines the independence the AML/CFT framework requires.

Core Functions :

Monitoring day-to-day compliance with the MTPP, AMLA, and SEC circulars.

Overseeing transaction surveillance systems and ensuring the confidentiality and timeliness of CTR and STR transmissions to the AMLC.

Serving as the institutional liaison officer with the AMLC and the SEC during compliance audits and regulatory inspections.

Coordinating enterprise-wide money laundering risk assessments.

Independent Internal Audit Oversight

Independent testing is the third-line check on whether the MTPP works in practice. The audit or review function must be independent of the AMLCO and the activities being tested. Its program should be risk-based and sufficiently frequent to assess the institution's exposure, material changes, prior findings, and control performance.

Testing should cover governance and board oversight, customer identification and beneficial ownership, risk rating and enhanced due diligence, transaction-monitoring alerts, CTR and STR filing controls, sanctions and targeted-financial-sanctions screening, record retention, training, and remediation of earlier findings. Results and unresolved deficiencies should be reported to the board or the appropriate board committee and tracked to closure.

The governing point is independence and effective periodic testing , not a fabricated universal calendar frequency. The AMLCO administers and monitors the program but must not give independent assurance over the AMLCO's own work.

Mandatory Employee Training Programs

Covered persons must provide effective, role-appropriate AML/CFT training to responsible directors, officers, and personnel. New personnel need instruction before they perform relevant duties, and continuing training should reflect job exposure, regulatory change, emerging typologies, terrorism and proliferation-financing risks, sanctions obligations, red flags, reporting, and the tipping-off prohibition. The institution documents participation and assesses whether personnel can apply the controls in practice.

Governance Roles Comparison Matrix

Governance Organ Primary AML Role Key Responsibilities Reporting Line

Board of Directors Ultimate Oversight Approves MTPP; allocates budget; sets Tone at the Top Shareholders / Regulators

Senior Management Operational Execution Approves high-risk clients; implements board policies Board of Directors

AMLCO Compliance Oversight Daily MTPP administration; surveillance; files CTR/STR Direct to Board / Audit Comm.

Internal Audit Independent Assurance Risk-based periodic testing of governance, controls, files, reporting, and remediation Directly to Board / appropriate Board Committee

All Staff First-Line Execution Onboarding KYC; identifying red flags; no tipping off Department Heads / AMLCO
Practical Exam Traps and Regulatory Pitfalls

Trap 1: Who Bears Ultimate Legal Responsibility. Exam questions frequently ask whether the AMLCO, the external auditor, or the Board bears ultimate legal responsibility for AML compliance. The Board of Directors bears ultimate legal responsibility. The AMLCO executes the program, but the Board is accountable.

Trap 2: AMLCO Concurrently Running Trading Operations. Look out for scenarios where a small brokerage assigns the AMLCO to also handle proprietary trading or sales to cut overhead. This is a serious independence failure: the AMLCO must be independent of the commercial business lines it monitors.

Trap 3: Audit Independence. The AMLCO monitors the program but cannot provide independent assurance over the AMLCO’s own work. Independent, risk-based testing must reach the board or the appropriate board committee.

Trap 4: MTPP Review Cycle. Memorize the updating threshold: the MTPP must be formally updated at least once every two (2) years (biennially), not every three or five years.

Trap 5: Training Is Role-Specific. Training must reach responsible directors, officers, and personnel and should reflect each role’s exposure; a generic attendance sheet is not evidence that staff can identify and escalate red flags.

Application-stage sworn certification (SEC MC No. 29, Series of 2020)

SEC Memorandum Circular No. 29, Series of 2020 changed the application-stage filing method , not the obligation to maintain a working program. An applicant for registration or a secondary license no longer attaches the MTPP. Instead, it submits a Sworn Certification , signed by its Compliance Officer, Corporate Secretary, or Resident Agent, that the MTPP has been prepared, noted, and approved by its Board of Directors (or by the country, regional, or area head for a local branch of a foreign covered person). A copy must be stamped received by the Anti-Money Laundering Division of the Enforcement and Investor Protection Department (AMLD-EIPD) before the application is accepted. The certification includes an undertaking to submit hard and soft copies of the MTPP to AMLD-EIPD within ten (10) days from receipt of the Certificate of Registration or secondary license. Therefore, “certification instead of attachment” must never be mistaken for “no MTPP required.”