AML Compliance Bangladesh: BFIU Rules & STR Filing Guide

Executive Summary & Statutory Authority

Bangladesh's AML/CFT architecture is a layered statutory-regulatory system anchored by two primary Acts of Parliament, subordinate rules, and a dense body of binding BFIU circulars that carry the force of prudential regulation under Section 23 of the Money Laundering Prevention Act, 2012 ("MLPA 2012"). The Money Laundering Prevention Act, 2012 (Act No. V of 2012), as substantially amended by the Money Laundering Prevention (Amendment) Act, 2015 (Act No. XX of 2015), criminalizes money laundering under Section 4, defines twenty-seven categories of predicate offenses under Section 2(v), and imposes affirmative compliance duties on "Reporting Entities" under Section 25. The Anti-Terrorism Act, 2009 (Act No. XVI of 2009) criminalizes terrorist financing under Sections 7 and 8, and mandates immediate asset freezing of UN-designated persons under Section 15.

Operational compliance obligations are elaborated through the Money Laundering Prevention Rules, 2019 and the Anti-Terrorism Rules, 2013, while day-to-day regulatory expectations for banks, NBFIs, and Designated Non-Financial Businesses and Professions (DNFBPs) are prescribed by BFIU Master Circular No. 26 (KYC/CDD/EDD/Beneficial Ownership), BFIU Circular No. 24 (Trade-Based Money Laundering), and BFIU Circular No. 28 (electronic KYC). Non-compliance exposes both the Reporting Entity and its individual officers — including the Chief Anti-Money Laundering Compliance Officer (CAMLCO) — to severe custodial and pecuniary sanctions, license suspension, and reputational contagion under Bangladesh Bank's supervisory regime. This treatise provides an exhaustive doctrinal and procedural roadmap for financial institutions, corporates, and DNFBPs operating in or transacting with Bangladesh.

Section 1: The Statutory Architecture of Money Laundering Offenses

1.1 The Core Offense Under Section 4, MLPA 2012

Section 4 of the MLPA 2012 criminalizes the act of knowingly acquiring, possessing, using, concealing, transferring, or converting property known — or which there is reasonable ground to believe — represents the proceeds of a predicate offense. The provision also criminalizes abetment, conspiracy, and attempt. Critically, Bangladeshi jurisprudence has embraced a "willful blindness" standard: actual subjective knowledge is not a prerequisite for conviction. A person who deliberately avoids inquiry into the provenance of suspicious funds, or who structures transactions to evade reporting thresholds, may be convicted on the basis that they had "reasonable grounds to believe" the property was tainted.

Penalties under Section 4 are severe: rigorous imprisonment of four to twelve years, coupled with a mandatory fine equal to double the value of the laundered property or BDT 10,00,000, whichever is greater. For corporate bodies, Section 4(3) imposes fines of not less than double the property value or BDT 20,00,000, whichever is greater, with the possibility of cancellation of the entity's registration or incorporation.

1.2 The Twenty-Seven Predicate Offenses (Section 2(v))

The 2015 amendment substantially widened the predicate offense schedule beyond corruption and narcotics to encompass tax fraud, customs duty evasion, counterfeit currency, human trafficking, smuggling of goods and currency, intellectual property theft, environmental crime, and extortion. This expansion is the single most consequential change in Bangladeshi AML law for corporates: a business that maintains parallel accounting books to evade VAT, or that under-declares HS Codes to reduce customs duty, is not merely exposed to administrative tax penalties under the Customs Act, 2023 — it is exposed to substantive money laundering prosecution, carrying asset forfeiture and imprisonment far exceeding ordinary revenue penalties.

1.3 Reporting Entities: Scope Under Section 2(w)

The statutory definition of "Reporting Entity" (RE) is deliberately expansive, encompassing scheduled banks, NBFIs, insurance companies, money changers, stock dealers/brokers, portfolio managers, merchant bankers, microcredit organizations, and money transfer operators, alongside DNFBPs such as real estate developers, dealers in precious metals/stones, trust and company service providers, and lawyers/chartered accountants when handling client funds. Every RE, irrespective of sector, is subject to the same core compliance obligations under Section 25 — CDD, beneficial ownership identification, record retention, and STR/CTR filing — though the intensity of supervisory scrutiny is calibrated by BFIU sectoral risk assessments.

1.4 The Anti-Terrorism Act, 2009: CFT Convergence

Sections 7 and 8 of the ATA 2009 criminalize the provision, collection, or receipt of property intending or knowing that it will be used to finance terrorism, a terrorist act, or a proscribed organization. Section 15 mandates immediate freezing of funds and economic resources belonging to persons or entities designated under UNSCR 1267/1989/2253 (Al-Qaida/ISIL sanctions list) and UNSCR 1373 (domestic terrorism designations). Section 16 imposes direct compliance liability on Reporting Entities that fail to execute freezing directives or fail to file related STRs — with penalties of up to five years' imprisonment or a fine of BDT 10,00,000, or both.

Section 2: Institutional Governance — The Three Lines of Defense

2.1 The Central Compliance Unit (CCU) and CAMLCO

Rule 4 of the Money Laundering Prevention Rules, 2019 mandates that every Reporting Entity constitute a Central Compliance Unit (CCU) headed by a Chief Anti-Money Laundering Compliance Officer (CAMLCO), who must hold senior management rank (typically Deputy Managing Director level in banks) and report directly to the Managing Director and the Board. The CAMLCO bears personal statutory exposure under Section 25(1): failure to ensure institutional compliance with reporting duties can result in a fine of BDT 10,000 to BDT 5,00,000, or imprisonment up to one year, or both — independent of any corporate sanction against the institution itself.

2.2 Three Lines of Defense Model

• First Line: Branch-level relationship managers and Branch AML Compliance Officers (BAMLCOs) conduct initial CDD, sanctions screening, and day-to-day transaction monitoring.
• Second Line: The CCU/CAMLCO evaluates escalated alerts, approves EDD for high-risk clients, and files STRs/CTRs via goAML.
• Third Line: Internal Audit conducts independent annual AML/CFT assessments reporting to the Board Audit Committee, supplemented by periodic BFIU special inspections.

2.3 Enterprise-Wide Risk Assessment (EWRA)

BFIU Circular No. 21 mandates that every RE conduct an independent Enterprise-Wide Risk Assessment, evaluating customer risk, product/service risk, geographic risk, and delivery channel risk. The EWRA must be documented, board-approved, and refreshed periodically, forming the evidentiary foundation for the institution's risk-based approach to CDD intensity.

Section 3: Customer Due Diligence, KYC, and Beneficial Ownership

3.1 Standard and Enhanced Due Diligence

BFIU Master Circular No. 26 codifies a tiered due diligence framework:

• Simplified Due Diligence (SDD): Applicable to low-risk, low-value accounts (e.g., government payment accounts, small savings schemes).
• Standard CDD: Applicable to ordinary retail and corporate accounts — identity verification, address verification, source of funds inquiry.
• Enhanced Due Diligence (EDD): Mandatory for high-risk categories — PEPs, non-resident accounts, correspondent banking relationships, cash-intensive businesses, and non-face-to-face onboarding — requiring senior management sign-off and heightened ongoing monitoring.

3.2 Beneficial Ownership: The 20% Rule

Chapter 4 of Master Circular No. 26 requires REs to identify and verify natural persons who ultimately own or control a legal entity:

1. Any natural person holding 20% or more of shares, voting rights, or capital;
2. Where no such person exists, the natural person exercising control through management authority or voting arrangements;
3. Failing identification under either test, the senior managing official (MD/CEO) must be identified as a fallback.

For trusts, REs must identify and verify the Settlor, Trustee(s), Protector, Enforcer, and Beneficiaries (or beneficiary class), alongside any person exercising ultimate effective control. This "look-through" obligation is designed to defeat layered corporate structures and nominee shareholding arrangements frequently used in cross-border laundering schemes.

3.3 Politically Exposed Persons (PEPs)

Onboarding a PEP, Influential Person (IP), or head of an international organization requires prior written CEO/MD approval, independent verification of source of wealth, and enhanced ongoing transaction monitoring. Screening must be conducted against recognized commercial databases (World-Check, Dow Jones, LexisNexis) at onboarding and periodically thereafter.

3.4 Electronic KYC (e-KYC)

BFIU Circular No. 28 and Circular Letter No. 02/2022 establish the e-KYC framework permitting digital onboarding through biometric verification cross-referenced against the Election Commission's NID database (the "Porichoy" gateway). While e-KYC accelerates financial inclusion, REs remain fully liable for any deficiency in the underlying verification chain — digital convenience does not dilute statutory CDD obligations.

Section 4: Transaction Monitoring, CTR, and STR Filing Mechanics

4.1 Cash Transaction Reports (CTR)

Any cash deposit or withdrawal of BDT 10,00,000 or more (or equivalent in foreign currency) in a single day, including structured installments designed to evade the threshold, triggers CTR obligations. CTRs are compiled monthly and must be filed via the goAML portal on or before the 21st day of the following month. Manual filings are prohibited except in BFIU-authorized contingencies.

4.2 Suspicious Transaction Reports (STR/SAR)

Under Section 2(z), an STR is triggered where a transaction:

• Deviates unusually from the customer's established profile without apparent economic or lawful rationale;
• Involves property suspected of derivation from any Section 2(v) predicate offense;
• Is suspected of connection to terrorist financing under the ATA 2009.

The operational protocol requires BAMLCO escalation to the CAMLCO within 24–48 hours of detection, with the CCU filing the STR via goAML within three business days of confirming suspicion. There is no minimum monetary threshold for an STR — a BDT 5,000 transaction can trigger filing if the suspicion indicia are present.

4.3 The Tipping-Off Prohibition

Section 25(1)(d) criminalizes any disclosure — direct or indirect — to a customer or third party that a transaction is under review or that an STR has been filed. This extends to informal conversations, internal memos accessible to non-compliance staff, and even inadvertent behavioral cues (e.g., abruptly restricting account access without explanation). Violation carries imprisonment up to two years, a fine up to BDT 50,000 (administratively enhanced under later circulars up to BDT 50,00,000 for institutional breaches), or both.

4.4 Record Retention

REs must retain KYC documentation, transaction records, and STR/CTR filing evidence for a minimum of five years following account closure or transaction completion, ensuring evidentiary availability for subsequent BFIU inspection or judicial proceedings.

Section 5: Trade-Based Money Laundering (TBML) — Detection and Control

5.1 TBML Typologies

BFIU Circular No. 24 addresses the most sophisticated laundering vector in Bangladesh's trade-dependent economy: over-invoicing (inflating import value to move excess funds abroad), under-invoicing (deflating export value to retain foreign currency offshore), multiple invoicing (issuing several invoices for a single shipment to justify multiple payments), and phantom shipments (invoicing for goods never actually shipped).

5.2 Mandatory Verification Protocols

Before opening a Letter of Credit, REs must:

• Verify unit pricing against international commodity indices and customs valuation databases;
• Cross-check vessel IMO numbers against shipping registries to confirm vessel existence and legitimate routing;
• Authenticate Bills of Entry directly against the National Board of Revenue's ASYCUDA World platform;
• Scrutinize non-standard L/C clauses (unusual tolerance margins, unexplained third-party beneficiaries, or inconsistent country-of-origin declarations).

5.3 Interfacing Statutes

TBML enforcement operates at the intersection of the MLPA 2012, the Foreign Exchange Regulation Act, 1947 (governing unauthorized remittances and hundi networks), and the Customs Act, 2023 (Sections governing mis-declaration of value and quantity). A single mis-declared shipment can simultaneously trigger customs penalty proceedings and an independent MLPA prosecution — the two are not mutually exclusive, and settlement of a customs penalty does not extinguish MLPA liability.

Section 6: Enforcement, Freezing Orders, and Judicial Precedents

6.1 Administrative and Judicial Freezing Powers

Section 23 of the MLPA 2012 empowers the BFIU to issue administrative freezing directives against suspect accounts without prior notice to the account holder. Section 15 of the ATA 2009 mandates immediate freezing of UN-designated terrorist assets. Rule 25–27 of the MLP Rules 2019 govern the procedural mechanics of attachment and provisional seizure pending judicial confirmation before the Special Judge's Court.

6.2 Landmark Judicial Precedents

Giasuddin Al Mamun v. State & Anti-Corruption Commission, 68 DLR (AD) 304 (2016): The Appellate Division held that once the prosecution establishes foundational facts of illicit transfer or disproportionate assets linked to a predicate offense, the statutory presumption under Section 27 shifts the burden to the accused to prove legitimate acquisition on a preponderance of probabilities. The Court confirmed that laundering via offshore accounts constitutes an autonomous offense distinct from the underlying predicate crime.

Morshed Khan v. State & Anti-Corruption Commission, 72 DLR (AD) 259 (2020): The Appellate Division clarified jurisdictional boundaries — the ACC may investigate only predicate offenses within its own statutory schedule (bribery, graft, abuse of office); offenses such as customs evasion fall to the NBR or CID. Prosecuting money laundering absent a viable predicate offense within the prosecuting agency's jurisdiction constitutes abuse of process warranting quashment under Section 561A, CrPC.

Arafat Rahman (Koko) v. State, 63 DLR (2011): Confirmed the extraterritorial reach of the MLPA and the admissibility of foreign financial records obtained via Mutual Legal Assistance without requiring foreign bank officials as witnesses — a critical precedent enabling cross-border asset recovery.

Sonali Bank Limited v. Bangladesh Bank (HCD): Held that BFIU freezing directives under Section 23 are binding statutory commands overriding the banker-customer relationship; banks are prohibited from providing prior notice to affected customers, as doing so would constitute unlawful tipping-off.

6.3 Mutual Legal Assistance and Asset Recovery

The Mutual Legal Assistance in Criminal Matters Act, 2012 provides the formal channel for cross-border evidence gathering, service of process, and enforcement of foreign restraint orders — operationalizing Bangladesh's participation in the Stolen Asset Recovery (StAR) initiative for proceeds concealed abroad.

Statutory Document Checklist

Natural Persons

• [ ] Smart National Identity Card (verified via Election Commission/e-KYC API)
• [ ] Machine Readable Passport / e-Passport (mandatory for foreign nationals)
• [ ] e-TIN Certificate (verified against NBR database)
• [ ] Utility bill within 90 days (residential address proof)
• [ ] Trade license or employer certification (income/profession proof)
• [ ] Documented source of wealth/funds (bank statements, tax returns, sale deeds)

Corporate Entities

• [ ] Certified Memorandum & Articles of Association (RJSC-certified)
• [ ] Certificate of Incorporation
• [ ] Form XII (Directors' particulars) and Form IX (Directors' consent)
• [ ] Form 117/Annual Return (shareholding structure)
• [ ] Current Trade License and BIN/VAT Registration Certificate
• [ ] Board Resolution authorizing account opening and signatories
• [ ] Beneficial Ownership Declaration Form (≥20% equity holders with individual NIDs/passports/utility bills)
• [ ] Individual KYC for all authorized signatories

Trade/TBML Documentation

• [ ] Import Registration Certificate (IRC) / Export Registration Certificate (ERC)
• [ ] Proforma Invoice with HS Codes and unit pricing
• [ ] Letter of Credit application and terms
• [ ] Bill of Entry (ASYCUDA-verified)
• [ ] Bill of Lading/Airway Bill with vessel IMO verification
• [ ] Certificate of Origin and Marine Insurance Certificate
• [ ] Pre-Shipment Inspection report (where applicable)
• [ ] EXP/IMP forms via Bangladesh Bank Online Monitoring System

Regulatory Fees, Timelines & Penalty Matrix

Common Legal Traps & Compliance Pitfalls

1. Treating Predicate Offense Expansion as Immaterial to Ordinary Corporates. Many businesses assume MLPA exposure is confined to banks and financial crime specialists. In reality, the 2015 amendment's expansion of Section 2(v) predicate offenses to include tax fraud and customs evasion means routine under-invoicing or dual bookkeeping exposes corporate directors to money laundering prosecution — not merely revenue penalties. Mitigation: Senior counsel conducts parallel MLPA risk audits alongside tax compliance reviews, ensuring transfer pricing and customs documentation withstand predicate-offense scrutiny.

2. Inadvertent Tipping-Off Through Operational Friction. Freezing an account or restricting services following an internal red flag, without a scripted, legally-vetted customer communication protocol, frequently results in inadvertent tipping-off — e.g., a relationship manager candidly explaining to a client why their account was frozen. Mitigation: Institutions must maintain pre-approved, legally sanitized communication scripts and restrict STR-related information strictly to CCU personnel on a need-to-know basis.

3. Superficial Beneficial Ownership Verification in Layered Structures. REs often stop verification at the first corporate layer, failing to look through nominee shareholders, offshore holding companies, or trust arrangements to the ultimate natural person, violating the "look-through" mandate of Master Circular No. 26. Mitigation: Deploy documented ownership-chain mapping with independent verification at each layer, escalating to EDD whenever ownership cannot be resolved beyond a corporate entity.

4. Assuming Customs/Tax Settlement Extinguishes MLPA Liability. Corporates frequently settle customs mis-declaration penalties under the Customs Act, 2023, believing this resolves all legal exposure. Because money laundering is an autonomous offense (per Giasuddin Al Mamun), a completed customs settlement does not bar a subsequent, independent MLPA prosecution for the same underlying transaction. Mitigation: Counsel must treat customs/tax settlements and MLPA exposure as legally severable tracks requiring independent risk ass

Frequently Asked Questions

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://www.bb.org.bd/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">Bangladesh Bank (Central Bank) &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">GFET Guidelines, Foreign Exchange Circulars & Authorized Dealer Regulations</p>
</div>

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://www.bfiu.org.bd/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">Bangladesh Financial Intelligence Unit (BFIU) &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">Anti-Money Laundering (AML) & Combating Financing of Terrorism (CFT) Directives</p>
</div>

<div style="margin-bottom:12px; padding-bottom:12px; border-bottom:1px solid #1E293B;">
  <a href="https://btrc.gov.bd/" target="_blank" rel="noopener noreferrer" style="color:#C5A059; font-weight:600; font-size:14px; text-decoration:underline;">Bangladesh Telecommunication Regulatory Commission (BTRC) &nearr;</a>
  <p style="color:#94A3B8; font-size:12px; margin:4px 0 0 0; line-height:1.4;">Payment System Operator (PSO) & Telecommunications Licensing</p>
</div>