Third-party premium, nominee ownership and an unresolved sanctions hit
On 14 April the Seoul branch of a foreign life insurer received an annual premium of USD 410,000, about KRW 550 million, for a ten-year keyman policy on the CEO of a Korean trading company. The premium was wired from a Hong Kong company that is not the policyholder. The payer shares a registered address and a director with the policyholder's customs broker, and the shareholder register shows a nominee company in a jurisdiction with no substance. Screening produced a 0.82 name-similarity hit against an entity designated under UN sanctions relating to DPRK-related proliferation financing; the analytics team calls it a false positive because the incorporation numbers differ. The relationship manager says the policy must be issued this week because the client is 'time-sensitive', and the underwriter has already issued a cover note. The FIU reporting channel is open, but the local CEO asks to wait for 'more certainty'.
1. May the branch accept and retain the premium and issue the policy while the sanctions question is unresolved? Set out the decision tree.
Read the worked answer
Do not proceed while the match is unresolved, and do not issue the policy.
Decision tree:
- Confirmed match or true designated-party nexus: block or freeze the funds, make no transaction, and report under the applicable sanctions and terrorist-financing rules. No policy, no cover note, no refund without clearance.
- Unresolved potential match: the transaction stays suspended until someone with sanctions expertise, independent of the relationship manager, resolves the alert using identifiers beyond name: address, directors, incorporation number, ownership chain, and adverse media.
- Match cleared: do not proceed automatically. The third-party payer is the deeper red flag: the payer is not the policyholder, shares an address and a director with a broker, and the shareholder register shows an unsupported nominee. That requires enhanced due diligence on source of funds, the reason for the payment structure, the beneficial owner, insurable interest and the beneficiary. Approval sits with the AML committee, in writing.
Interim handling: hold the premium in a suspense account with no movement, document every step with time-stamps, and do not quietly cancel the cover note. Issuing it before screening was itself a control failure.
2. What are the reporting obligations, and what are the tipping-off constraints on internal and external communication?
Read the worked answer
Reporting. The trigger for a suspicious transaction report is suspicion, not proof. Once the third-party payment, the nominee ownership and the partial sanctions hit are on file, a report should go to the FIU without delay. A sanctions-related report may run in parallel; if a designation is confirmed, the blocking obligation operates immediately and independently of the report.
Tipping off. Nobody outside a need-to-know group may be told that a report was made or why the policy is delayed: not the relationship manager, not the customer, not the broker. Use a neutral holding line such as 'additional verification is required', and have compliance approve the script.
Supervisory side. Inform the local CEO and the head office financial-crime function in writing, and consider whether a notification to the FSS is required or prudent; frame it as a control event, not a customer dispute.
USD dimension. If the premium cleared through a US correspondent, US sanctions reach the transaction. The branch must screen against both UN and Korean designations and the measures applicable to the clearing currency, and document that dual screen. The CEO's 'more certainty' instruction should be declined in writing with the legal basis recorded.
3. Post-event, what must the compliance officer change, and what evidence should be put before the board to show the AML programme works?
Read the worked answer
Root causes to fix: screening after onboarding rather than before; over-reliance on a similarity score with no ownership or adverse-media view; no third-party-payer rule; a relationship manager incentivised to close; underwriting authority able to produce a cover note without compliance clearance.
Remediation:
- Hard stop: no policy issuance and no cover note until sanctions and customer due diligence clearance is recorded in the workflow.
- A third-party-payer policy: permitted exceptions, mandatory enhanced due diligence, source-of-funds evidence, approval level.
- Alert handling: maker-checker, service-level standards, escalation to a named sanctions officer, resolution templates recording which identifiers were examined.
- Ownership and control screening for corporates, plus adverse media refreshed on a risk-based cycle.
- A 12-month retrospective review of third-party premium payments to see whether this is a one-off.
Board evidence: a paper with the event timeline, the decisions and their rationale, KRIs (open alerts, ageing, EDD backlog, training completion), independent testing results, and the changes made. The test of a working programme is not that alerts never fire, but that they are resolved before the transaction moves.