Independent Singapore VCC guidance
Direct answer
Treat a new redemption bank account as a separate high-risk instruction, not as an editable field inside the payout request. Preserve the original message, verify the investor and authorised signatory through a trusted route, prove ownership of the destination account, screen for third-party or changed-control concerns, and update the controlled register only after independent approval. Keep redemption calculation and bank-change approval separate. Release proceeds only to an approved account after a second checker confirms the effective record, payment file, sub-fund, investor and exception status.
At a glance
- Separate bank maintenance from redemption processing.
- Verify through trusted contact data rather than reply-channel details.
- Prove account ownership and investigate third-party destinations.
- Require independent record update and payment release.
Who this is for
- Private or restricted VCCs processing investor redemptions or distributions through a transfer agent, administrator or internal team.
Important exclusions
- A universal cooling period, retail-fund rule or substitute for the VCC documents, AML controls and bank mandate that apply to a specific investor.
Recognise the combined instruction as a fraud scenario
The risk rises when bank details arrive with, shortly before or shortly after a redemption request. The attacker may control an investor mailbox, imitate an authorised person, alter an attachment or pressure staff with a settlement deadline. Open two linked cases: one for the redemption and one for standing-data maintenance. Preserve the source message, headers, attachments, channel, time, investor identity, VCC, sub-fund, class, old account reference, proposed account and requested payment date. Do not use the new details merely because the request appears in the same email chain as genuine correspondence.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of Singapore- Bank details changed near a redemption, distribution or other outbound payment.
- Request arrives from a new address, device, domain, representative or communication channel.
- Sender asks staff to avoid the ordinary contact, form, call-back or approval route.
- Destination account name, country, currency or ownership differs from the investor record.
- Documents contain edits, inconsistent fonts, altered metadata or unexplained scans.
- Urgency, secrecy, travel, illness or unavailable approvers are used to bypass control.
Related guidance: VCC redemption request control checklist
Verify identity and authority outside the reply channel
- Freeze the requestPrevent the proposed account from entering the payment master while verification and exception review remain open.
- Use trusted contact dataCall or message through independently maintained investor records, not a number or link supplied in the change request.
- Verify the personApply the approved identity and authentication process for the investor or authorised representative making the instruction.
- Verify authorityConfirm current signatory, power, joint-holder, trustee, corporate or intermediary requirements against controlled records.
- Record the outcomeKeep the verification route, participants, questions, answers, time and unresolved inconsistencies in the case file.
A familiar voice or email history is not enough. The verifier should know which facts may be used without revealing sensitive data to an impostor. For an entity investor, check the approved signatory and any required joint authority. For an intermediary or adviser, confirm whether it may instruct a bank change or only transmit documents. If the authorised person cannot be reached through the existing record, escalate rather than substituting a new contact supplied by the requester. Update contact data and bank data through distinct controlled changes where both have changed.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeProve account ownership and payment suitability
| Evidence question | What to compare | Exception response |
|---|---|---|
| Who owns the account? | Account-holder name against the investor and approved ownership structure | Stop and investigate third-party or nominee use |
| Is the account record credible? | Bank document, date, currency, identifiers and independent bank details | Obtain better evidence or verify with the bank through an approved route |
| Has jurisdiction changed? | Country, branch, payment corridor and investor profile | Reassess sanctions, AML, tax and operational implications |
| Is authority complete? | Required signatories, representatives, trustees or corporate approvals | Keep the change pending until valid authority is evidenced |
| Does the old record explain the change? | Prior account status, closure evidence and earlier instructions | Investigate contradictions before updating standing data |
The evidence standard should match the investor type and risk. A bank statement or bank letter may show the account holder and details, but the operations team still needs to compare the name, entity, beneficial ownership and authority with controlled investor records. A payment to a different person or opaque account should not be rationalised as convenience. Route third-party, offshore, recently opened or unexplained accounts through the VCC's applicable AML and sanctions process. Keep full bank details inside restricted systems and avoid reproducing them in broad approval emails or board packs.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeRelated guidance: refreshing expired investor due diligence
Approve the standing-data change independently
- Request and supporting evidence are stored under a stable case identifier.
- Investor identity and instruction authority were verified through a trusted channel.
- Destination account ownership, currency, country and identifiers were independently checked.
- AML, sanctions, conflict and third-party-payment exceptions are cleared or escalated.
- A preparer entered the change and a separate checker compared it with the approved evidence.
- The effective time, prior value, new value, approvers and system audit trail are preserved.
- Investor confirmation is sent through the established contact route without exposing unnecessary account data.
Standing-data approval should occur before the payout file is built. The checker should view the source evidence and the actual system field, not a summary prepared by the same person who entered the change. Restrict who can create, approve and release bank details, and monitor emergency access. Where the process uses an administrator or transfer agent, the VCC and manager should know which system is authoritative and who can override it. Any manual override should be visible in an exception report and receive the same or stronger approval as an ordinary change.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeRelated guidance: reconciling the VCC register of members
Release the redemption only after a fresh control check
- Bank change approved before payout preparationBuild the payment from the newly effective controlled record and complete the normal independent release check.
- Bank change remains pendingDo not copy the proposed details into the payment file; hold or use only the permitted existing-account route under the fund process.
- Identity or ownership mismatchStop processing, protect the account, escalate the case and assess whether attempted fraud or compromise has occurred.
- Redemption itself is disputedKeep the assets, dealing record and payment decision controlled while the authorised governance route resolves the dispute.
- Payment was already misdirectedTrigger the incident, bank recall, evidence preservation, access review and reporting assessment immediately.
The payment checker should compare the legal investor, VCC, sub-fund, class, redemption amount, currency, approved destination, value date and payment reference with the authoritative records. Confirm that the bank-account change is effective and that no later fraud or sanctions alert has reopened the case. Reconcile the released payment to the redemption register and cash ledger. A successful bank submission is not the final control outcome; retain bank status, returned-payment handling and investor confirmation. Review repeated or late bank changes as a pattern, not only as isolated cases.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Accounting and Corporate Regulatory AuthorityRelated guidance: sub-fund cash and payment controls · VCC compliance checklist
Frequently asked questions
Can a bank change and redemption be approved in one email?
They should remain separate controlled decisions even if the investor sends them together. Verify and approve the standing-data change first, then build and release the redemption payment from the authoritative record using an independent checker.
Is a bank statement enough to prove the new account?
It may support account ownership, but it does not by itself prove that the request came from an authorised person or that third-party, sanctions, AML and investor-structure issues are clear. Complete the full verification route.
Should every VCC impose the same cooling period?
No universal period is asserted here. The VCC should follow its governing documents, risk policy, administrator procedure and bank arrangements. The control objective is that verification finishes before release, with high-risk timing treated as an exception.
What if the investor says the old account is closed?
Obtain appropriate evidence, verify the instruction through the trusted contact route and keep payment on hold until the new account is approved. The inability to use the old account does not justify bypassing identity or ownership checks.
Who should approve the final payment?
Use the authority matrix for the VCC and service arrangement. The releaser should be independent of the person who entered the bank change and should compare the payment with the effective investor, sub-fund and approved-account records.
Official sources and further reading
- VCC Features, Eligibility and Requirements (Accounting and Corporate Regulatory Authority)
- Risk Management Practices for Fund Management Companies (Monetary Authority of Singapore)
- Governance and Management of Variable Capital Companies (Monetary Authority of Singapore)
- Operational Resilience for Financial Institutions in Singapore (Monetary Authority of Singapore)
Discuss your fund, family office or trust structure
Contact Raffles Corporate Services about Singapore VCC setup, fund structures, family offices and corporate administration.
- Email: hello@rafflescorporateservices.com
- WhatsApp: +65 8501 7133
- WhatsApp: +65 9018 0072
Where legal assistance is required, we can coordinate an introduction to an associate independent law firm, with your consent. The law firm advises you under a separate engagement. Raffles Corporate Services is not a law firm. Tax, investment management and trustee services, where needed, require appropriately qualified or authorised providers.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.