SEC Compliance

Anti-Money Laundering (AML) Compliance for Lending Companies

By the LendKoPH Team· Jun 22, 2026· 8 min read
Anti-Money Laundering (AML) Compliance for Lending Companies
In short: Lending companies are covered persons under the Anti-Money Laundering Act (RA 9160, as amended). That means you must register with the AMLC, know your customers (KYC), perform customer due diligence, keep records, and report covered and suspicious transactions. It is a compliance program, not a one-time form — confirm current requirements with the AMLC and SEC.

Anti-money laundering rules exist because lending, like any business that moves money, can be misused to disguise the proceeds of crime. Philippine law makes lending companies part of the defense: as covered persons, you are expected to know who your borrowers are, watch for red flags, and report certain transactions. For many small lenders this is the least familiar area of compliance — but the regulators take it seriously, and so should you.

You are a covered person

Under the Anti-Money Laundering Act (RA 9160) and its amendments, financing and lending companies are covered persons supervised for AML purposes. This status brings concrete duties: registering with the Anti-Money Laundering Council (AMLC), adopting a written money-laundering-prevention program, and complying with know-your-customer and reporting obligations. Being unaware of this status is no defense — it attaches to your business by law.

AML basics for lenders
Covered
lending companies are covered persons
AMLC
register and report to the Council
KYC
know your customer
CTR/STR
covered & suspicious transaction reports
AML is an ongoing program with registration, KYC, recordkeeping, and reporting duties.

Know Your Customer and due diligence

The foundation of AML is knowing who you are lending to. Customer due diligence means verifying a borrower's identity with reliable documents, understanding the nature of their business or source of funds, and keeping that information current. Higher-risk situations call for enhanced due diligence. For a lending company, this dovetails with good credit practice — you already want to know your borrower — but AML raises it to a documented, auditable standard.

Core AML obligations
Register with the AMLC as a covered person
Adopt a written money-laundering-prevention program
Verify borrower identity with reliable documents (KYC)
Perform customer due diligence, enhanced for higher-risk cases
Keep customer and transaction records for the required period
Report covered and suspicious transactions to the AMLC
Confirm the current thresholds and procedures directly with the AMLC and SEC.

Covered and suspicious transaction reporting

Two kinds of reports sit at the heart of AML. A Covered Transaction Report (CTR) is filed for transactions above a set threshold amount. A Suspicious Transaction Report (STR) is filed whenever a transaction shows red flags of possible money laundering — regardless of amount — such as activity with no clear economic purpose or that doesn't fit the customer's profile. Both are filed with the AMLC within prescribed timeframes, and the exact thresholds and rules are set by regulation, so check the current figures.

The obligation to file a suspicious transaction report doesn't depend on the amount — it depends on the red flags. A small transaction that makes no economic sense can be reportable.

Recordkeeping and training

AML compliance is sustained by two unglamorous habits: recordkeeping and training. You must retain customer identification and transaction records for the period the law prescribes, so that a transaction can be reconstructed if needed. And your staff — especially those onboarding borrowers and handling cash — need to understand the red flags and the reporting process. A program that exists only on paper fails the moment a real red flag appears.

Building an AML program
1
Register and write your program
Register with the AMLC and adopt a written prevention program.
2
Onboard with KYC
Verify identity and source of funds for every borrower.
3
Monitor and report
Watch for red flags; file CTRs and STRs as required.
4
Keep records and train staff
Retain records for the required period and train your team on red flags.
AML is a continuous cycle, not a one-time registration.

Why AML is good business, not just a rule

It is easy to treat AML as a box-ticking burden imposed from outside, but the discipline it demands overlaps almost entirely with good lending practice. Knowing your customer is exactly what you should do before extending credit anyway — verifying identity, understanding their business, and gauging their capacity to repay are the foundation of sound underwriting. AML simply raises that instinct to a documented, consistent standard. A lender who genuinely knows their borrowers is both more compliant and less likely to be defrauded.

There is also a real reputational and existential stake. Lenders — especially online ones — that ignore AML have been shut down and prosecuted, and being associated with money laundering, even unwittingly, can destroy a business's standing overnight. Conversely, a lender with a credible AML program signals to banks, partners, and regulators that it is a serious, trustworthy institution. In a sector where trust is the whole product, treating AML as an investment in credibility rather than a compliance chore changes how you approach it — and makes the program something you maintain willingly rather than resentfully.

Records that support compliance

Much of AML rests on being able to identify your borrower and reconstruct their transactions — which is really a recordkeeping discipline. Keeping complete borrower information and a clean, retrievable history of every loan and payment is the operational backbone that lets you meet KYC, respond to inquiries, and support any reporting. LendKoPH keeps borrower details and full transaction histories together, giving you the organized records an AML program depends on. For the specific thresholds, forms, and deadlines, always follow the current AMLC and SEC issuances.

Frequently asked questions

Are lending companies covered by AML law?

Yes. Under the Anti-Money Laundering Act (RA 9160, as amended), lending and financing companies are covered persons, with duties to register with the AMLC, perform KYC, keep records, and report certain transactions.

What is the difference between a CTR and an STR?

A Covered Transaction Report (CTR) is filed for transactions above a set threshold. A Suspicious Transaction Report (STR) is filed when a transaction shows red flags of money laundering, regardless of the amount.

What does KYC require of a lending company?

Verifying a borrower’s identity with reliable documents, understanding their business or source of funds, keeping that information current, and applying enhanced due diligence to higher-risk cases.

Where do I find the exact AML thresholds and forms?

From the current AMLC and SEC issuances. Thresholds and procedures are set by regulation and can change, so rely on the latest official rules.

Run your lending business the compliant way

LendKoPH keeps your loans, collections, and BIR & SEC-ready books in one place — free for up to 25 loans.

Start free