ECSH33385 - Requirement to report discrepancies in registers and obligations on corporate bodies and trustees

Regulation 30A of The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017) requires supervised businesses to disclose any discrepancies to beneficial owners shown in registers. The business must obtain proof of registration or an excerpt of the register of the company, unregistered company, limited liability partnership, eligible Scottish partnership or trust, or an overseas entity, relating to persons of significant control (PSC) as per the PSC registers and may be obtained from the customer, Companies House, or a third-party provider.

You can find more information in the relevant requirements section, see ECSH63485 and from paragraph 5.3.129A of the Joint Money Laundering Steering Group (JMLSG) guidance.

This regulation was brought into force on 10 January 2020 and updated on 1 April 2023 to include specific details about the information that required reporting. You must ensure you are referring to the version of MLR 2017 in force during the relevant period you are testing.

You should first establish if the business has a business relationship, see ECSH33311 (note, this requirement doesn’t apply to occasional transactions) with any of the 6 types of company described in paragraph 1. Trusts and overseas entities were only brought into scope on 1 April 2023 so you can only expect a business to have included these from this date.  

As part of its customer due diligence (CDD) measures under regulation 28 MLR 2017 a business must take appropriate steps to establish beneficial owners (BOs) . Under regulation 30A MLR 2017, the business must collect an excerpt from the register, for example, from Companies House, showing who the PSC are. If there are discrepancies in this information, the business is obliged to report it Companies House as the registrar, who must take action to correct the discrepancy.

Similarly, HMRC holds the register for trusts, and businesses can ask HMRC to provide information in limited circumstances  – see guidance on GOV.UK for information on when this may be appropriate.

For more information regarding the Trust Registration Service (TRS) and discrepancy reporting, see the TRS manual in the Manuals Hub.


Discrepancies

The discrepancies the business should be checking for are listed under schedule 3AZA MLR 2017 including details such as name, date of birth, and correspondence address.

During your compliance check, you should test the business’s knowledge of this area for example, is the business aware of:

  • The discrepancies which must be reported (under schedule 3AZA).
  • Who discrepancies must be reported to (this is described for each type of entity in ECSH63485).
  • How to report discrepancies (this is described for each type of entity under ECSH63485).
  • You need to understand if, and how, the business is meeting its requirements to report discrepancies. Remember, this is only relevant if the business is in a business relationship with its customer who is one of the entities listed in regulation 30A.

When you review the CDD measures, you should establish whether the business took an excerpt from the register when establishing a business relationship with a new customer. You should then ascertain from the business whether it is aware of any changes with regards to the customer which were not reflected in the information held in the register.

You should consider:

  • Is the business doing sufficient monitoring of these relationships to identify a potential change in beneficial owners which requires reporting?
  • Has the business reported any discrepancies under regulation 30A?
  • Is the business keeping a record of reporting?

 

Breaches

To establish if the business has breached this regulation, you need to understand if the business believes there is a discrepancy but hasn’t reported it. The only exception to reporting discrepancies is where the information may be subject to legal professional privilege.

 

Customer obligations

You must be aware that customers of supervised businesses, where they are a corporate body which is not listed on a regulated market or trustee, are obliged to provide this information and notify the business of changes to the information. You should read regulation 43 and ECSH63770 and regulation 44 and ECSH63775.

You must establish:

  • Is the business aware of this obligation?
  • Does the business notify its relevant customer(s) of this obligation?
  • Is the customer notifying the business of changes?
  • Does this occur within 14 days from the date on which it became aware of the change?

If the business is not aware of this, you must explain that knowing there is an obligation on the corporate body or trustee supports it in carrying out its due diligence measures.

You must check whether the business has identified any instances where there has been a discrepancy which the customer did not tell it about.

As a relevant requirement shown within schedule 6 MLR 2017, HMRC can take supervisory action against trusts and corporate bodies who do not comply with their legal obligations.