Dual AML Oversight: Navigating TCSP Obligations Between SECP and FBR

The Regulatory Split for TCSPs

In Pakistan, entities classified as Trust and Company Service Providers (TCSPs) occupy a critical juncture in the Anti-Money Laundering (AML) and Countering Financing of Terrorism (CFT) framework. Practitioners often conflate these obligations with general Designated Non-Financial Businesses and Professions (DNFBP) requirements. However, the dual oversight by the Securities and Exchange Commission of Pakistan (SECP) and the Federal Board of Revenue (FBR) creates distinct, mandatory compliance paths that businesses cannot afford to overlook.

SECP vs. FBR: Delineating Authority

Under the Anti-Money Laundering Act, 2010, the SECP acts as the primary regulator for corporate entities and specific service providers falling under its licensing regime. Conversely, the FBR, through the Directorate General of Designated Non-Financial Businesses and Professions (DG-DNFBP), exercises oversight for professionals—such as accountants and lawyers—when they act as TCSPs (e.g., forming companies, providing registered addresses, or acting as nominee shareholders).

If your firm engages in the formation of companies or provides administrative services to other businesses, your compliance obligations extend beyond simple corporate legal services. You must adhere to the AML/CFT Regulations issued by the SECP for licensed entities and the specific DNFBP regulations mandated by the FBR for independent professionals.

Key Compliance Obligations

Regardless of whether you are a registered company or an independent practitioner, your AML framework must include:

• Risk Assessment: Documented identification of ML/TF risks specific to your client base and service offerings.
• KYC and CDD: Stringent Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures. This includes verifying the Ultimate Beneficial Ownership (UBO), a requirement strictly enforced under the Companies Act, 2017.
• Reporting: Mandatory filing of Suspicious Transaction Reports (STRs) and Currency Transaction Reports (CTRs) through the Financial Monitoring Unit (FMU) portal.
• Record Keeping: Maintaining transaction records and identity documentation for a minimum of five years post-business relationship termination.

Operational Risks of Non-Compliance

The consequences of failing to satisfy both SECP and FBR oversight are severe. Beyond financial penalties, businesses face:

• License Revocation: SECP retains the power to suspend or revoke registrations for material AML failures.
• Regulatory Prosecution: Persistent non-compliance can trigger proceedings under the AML Act, leading to criminal liability for directors or partners.
• Operational Freeze: FBR may restrict the issuance of NTNs or block the operational status of businesses that fail to demonstrate DNFBP compliance.

Practical Implementation Checklist

To ensure your firm is protected, conduct a bi-annual internal audit using this framework:

1. Entity Verification: Confirm if your current business license aligns with your activities (e.g., acting as an agent for company registration in Pakistan requires specific AML internal controls).
2. UBO Filing: Ensure your SECP eService filings regarding beneficial ownership are current.
3. FMU Portal Access: Verify your firm's registration with the FMU for electronic filing.
4. Employee Training: Documented AML/CFT training sessions are a standard requirement during regulatory inspections.

Seeking Professional Guidance

Navigating the intersection of SECP oversight and FBR-driven DNFBP regulations requires precise technical knowledge. Whether you are managing corporate matters consultation or setting up a new professional firm, a proactive compliance strategy is your best defense against regulatory audit risk. If you are uncertain about your current status, we recommend seeking expert legal advice to conduct a comprehensive gap analysis.