AML/CFT Policy

(Reg.Nr. BC1439870)

⦁ INTRODUCTION

Purpose

This document sets out the principles and standards for compliance and management of risks associated with financial crime in BANQU FINANCE LTD., incorporated in the Canada, FINTRAC registration number:M23014245, Canada.
The purpose of this document is to prevent the BANQU FINANCE LTD. from being used for financial crime to comply with all applicable legal requirements and to ensure that the most appropriate action is taken by BANQU FINANCE LTD. to mitigate the risks associated with financial crime.
This document outlines the applicable legal requirements related to financial crime to which the BANQU FINANCE LTD. must adhere, as well as internal measures which are established by the BANQU FINANCE LTD. to ensure it complies with these legal requirements. This document is referred to as the Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), Counter- Proliferation Financing (CPF) and Sanctions Policy (the Policy) and sets the parameters for the BANQU FINANCE LTD. in relation to the AML, CTF, CPF and sanctions framework.
Scope and application
The Policy applies to all BANQU FINANCE LTD. employees, all units in the BANQU FINANCE LTD
., senior management, foreign correspondents, contractors and third parties with whom BANQU FINANCE LTD. may contract with. The aim of the BANQU FINANCE LTD. is not only to comply with relevant legal requirements, but also to mitigate and reduce the potential risk to the BANQU FINANCE LTD. of our customers using our products, services and delivery channels to launder the proceeds of illegal activity, fund terrorist activity or conduct prohibited financial sanctions activity.
The Policy is updated at least once a year, or more frequently based on international requirements and legislative changes, particularly with the implementation of the Canadian Payments Act, Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) or Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations (PCMLTF Regulations) and associated Regulations or Financial Transactions and Reports Analysis Centre (FINTRAC) Guidance on the Risk- Based Approach and Compliance program requirements.
Definitions
Money laundering is generally defined as engaging in acts designed to conceal or disguise the true origin of criminally derived proceeds so that the unlawful proceeds appear to have derived from

legitimate origins or constitute legitimate assets. Generally, money laundering occurs in three stages:
⦁ Placement: Cash generated from criminal activities is converted into monetary instruments,

such as money orders or traveler’s checks, or deposited into accounts at financial institutions.
⦁ Layering: Funds are transferred or moved into other accounts or other financial institutions to further separate the money from its criminal origin.
⦁ Integration: Funds are reintroduced into the economy and used to purchase legitimate assets or to fund other criminal activities or legitimate businesses.
It also covers money, however acquired, which is used to fund terrorism. Terrorist financing may not involve the proceeds of criminal conduct, but rather an attempt to conceal the origin or intended use of the funds, which will later be used for criminal purposes.
Terrorist financing relates to the raising or holding of funds (directly or indirectly) with the intention that those funds should be used to carry out activities defined as acts of terrorism or with the
intention to dispose those funds to a terrorist group or a separate terrorist.
Proliferation financing refers to the act of providing funds or financial services which are used, in whole or in part, for the manufacture, acquisition, possession, development, export, trans-shipment,
brokering, transport, transfer, stockpiling or use of nuclear, chemical or biological weapons and their means of delivery and related materials (including both technologies and dual use goods used for non-legitimate purposes), in contravention of national laws or, where applicable, international obligations.
Criminal property is the proceeds of criminal conduct. This includes any type of conduct, wherever it takes place, which would constitute a criminal offence if committed in BANQU FINANCE LTD. It includes drug trafficking, terrorist activity, tax evasion, corruption, fraud, forgery, theft, counterfeiting, black mail and extortion. It also includes any other offence that is committed for profit.
Sanctions are political and economic decisions that are part of diplomatic efforts by countries, multilateral or regional organizations against states or organizations either to protect national security interests, or to protect international law, and defend against threats to international peace and security. Sanctions can be:
⦁ Specific, i.e. relate to specific lists of named individuals, legal entities, organizations, vessels etc. (for example the US Department of Treasury refers to some of these entities as Specially Designated Nationals),
⦁ General, i.e. cover all transactions with certain countries or jurisdictions; certain transactions with countries or jurisdictions such as exports, imports or new investment, or

all transactions within a certain area of activity/products (for example arms sales to a particular country).

⦁ Sectoral, i.e. cover certain parties in specific sectors (for example OFAC designates parties on a Sectoral Sanctions Identification List or “SSI List”) but only restrict certain transactions of these designated parties
Terms:
These are terms you should be familiar with:
Terms/Acronyms Definition
Nominated Officer A Nominated Officer (also known as the MLR
officer or AML Compliance Officer) is the focal point within the company for the oversight of all activity related to anti-financial crime issues.
Supporting Officer A person or persons nominated to act on
behalf of the Nominated Officer.
AML Anti-Money Laundering
KYB Know Your Business
KYC Know Your Customer
CDD Customer Due Diligence
EDD Enhanced Due Diligence
PCMLTFA Proceeds of Crime (Money Laundering) and
Terrorist Financing Act
FINTRAC Financial Transactions and Reports Analysis
Centre
PEP Politically Exposed Persons
STR Suspicious Transaction Report
RCMP Royal Canadian Mounted Police
CSIS Canadian Security Intelligence Service
SWIFT Society for Worldwide Interbank Financial
Telecommunications
OFAC Office of Foreign Assets Control
FATF Financial Action Task Force
FinCEN The Financial Crimes Enforcement Network
UBO Ultimate Beneficial Owner
EU The European Union
UN The United Nations
RBA Risk Based Approach
CTF Counter-Terrorism Financing
CPF Counter-Proliferation Financing
CRA Revenue Agency
FCAC Financial Consumer Agency

⦁ REGULATIONS
⦁ Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA)
Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) firm must establish an AML/CTF compliance program. The PCMLTF Regulations set out specific requirements, including:
⦁ the appointment of a person responsible for the compliance program;
⦁ the development and application of compliance policies and procedures that are up to date and approved by a senior officer;
⦁ a program to assess the risk of a money laundering or terrorist financing offence being conducted through the firm, and implementation of measures to mitigate high-risk scenarios;
⦁ an ongoing written compliance training program for employees of the BANQU FINANCE LTD.;
⦁ a review of policies and procedures to test their effectiveness to be conducted every two years by an internal or external auditor;

PCMLTFA and latest redaction of FATF recommendations set out the requirement for relevant businesses to establish and maintain appropriate and risk-sensitive policies and procedures relating to:
⦁ Customer due diligence
⦁ Reporting
⦁ Record keeping
⦁ Internal control
⦁ Risk assessment and management (Risk Based Approach)
⦁ The monitoring and management of compliance, and
⦁ The internal communication of such policies and procedures, in order to prevent activities related to money laundering and terrorist financing and proliferation financing.

These policies and procedures must:
⦁ Identify and scrutinize

⦁ Complex or unusually large transactions
⦁ Unusual patterns of transactions which have no apparent economic or visible lawful purpose
⦁ Any other activity which could be considered to be related to money laundering or terrorist financing or proliferation financing
⦁ Specify the additional measures that will be taken to prevent the use of products and

transactions that favour anonymity for money laundering or terrorist financing

⦁ Determine whether a customer is a politically exposed person (see Annex 5 for definition and further guidance)
⦁ Nominate an individual in the organisation to comply with, and receive disclosures under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and associated Regulations.
⦁ Ensure employees report suspicious activity to the Nominated Officer, and
⦁ Ensure the Nominated Officer considers such internal reports in the light of available information and determines whether they give rise to knowledge or suspicion or reasonable grounds for knowledge or suspicion of money laundering or terrorist financing.

The main principles encompassed by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and associated Regulations can be described as Risk Based Approach (RBA). RBA requires several steps to be taken to determine the most cost-effective and proportionate way to manage and mitigate the money laundering and terrorist financing and proliferation financing and sanctions violation risks faced by the business.
The steps are to:
⦁ Identify the money laundering and terrorist financing and proliferation financing and sanctions violation risks that are relevant to the business
⦁ Assess the risks presented by the particular:
⦁ Customers – types and behavior;
⦁ Products and services;
⦁ Delivery channels, for example, cash over the counter, electronic, wire transfer or cheque;
⦁ Geographical areas of operation, for example, location of business premises, source or destination of customers’ funds;
⦁ Complexity and volume of transactions;
⦁ Design and implement controls to manage and mitigate these assessed risks
⦁ Monitor and improve the effective operation of these controls and
⦁ Record appropriately what has been done, and why

⦁ Financial Action Task Force (FATF)
The Financial Action Task Force (FATF) is an independent inter-governmental body that was founded based upon cooperation between 32 states, the European Commission and the Co- operation Council for the Arab States of the Gulf. The FATF has a prominent role in implementing

international policies related to preventing and combating money laundering and terrorist financing. FATF has provided for international standards on combating money laundering and the financing of

terrorism & proliferation (Recommendations) that are recognized as the global anti- money laundering (AML) and counter-terrorism financing (CFT) standard.
Where can I find more information?

Check out the following website that contain the details of different issues discussed in this document and is likely to be useful during your time with us:

⦁ Financial Transactions and Reports Analysis Centre (FINTRAC): ⦁ https://www.fintrac-⦁ canafe.gc.ca
⦁ The Office of the Superintendent of Financial Institutions (OSFI): ⦁ https://www.osfi-⦁ bsif.gc.ca
⦁ Financial Consumer Agency: https://www.ca/en/financial-consumer-agency.html
⦁ Financial Action Task Force (FATF): ⦁ www.fatf-⦁ gafi.org
⦁ Office of Foreign Assets Control (OFAC): ⦁ www.treasury.gov/ofac
⦁ The Financial Crimes Enforcement Network (FinCEN) advisory list: ⦁ www.fincen.gov

⦁ AML PRINCIPLES
The purpose of the AML/CFT policy of BANQU FINANCE LTD. is to establish the framework of the rules and procedures to be followed by BANQU FINANCE LTD. to ensure that BANQU FINANCE LTD., its resources, its business, its services and/or its employees are not directly or indirectly used or involved in money- laundering or the funding of terrorism and that CARSODON GROUP INC
. complies with all its legal obligations relating to the prevention of money laundering and funding of terrorism at all times.
This policy applies to all business activities of BANQU FINANCE LTDwithin the scope of its relevant financial business. This policy and its procedures are to be followed by all employees of BANQU FINANCE LTD., who will be required to confirm that they have understood and will comply with their obligations under the AML/CFT procedures.
BANQU FINANCE LTD. AML/CFT policy is set up to effectively implement, monitor, maintain and where necessary amend adequate procedures for the attainment of the AML policy’s objectives. The AML policy shall be implemented on the basis of a risk-based approach. In this respect, BANQU FINANCE LTD. shall conduct a risk assessment of its business, which shall be regularly reviewed, on the outcome of which BANQU FINANCE LTD. AML/CFT procedures shall be based and, where necessary, adjusted.
The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) requires businesses to have appropriate systems of internal control and communication in order to prevent activities related to money laundering and terrorist financing. In simple terms this means that businesses must ensure that management controls are put in place that will alert the relevant people in the business to the possibility that criminals may be attempting to use the business to launder money or fund terrorism or fund proliferation or violate sanctions, so as to enable them to take appropriate action to prevent or report it.
Systems of internal control and communication must be capable of identifying unusual or suspicious transactions or customer activity, of identifying transactions and business relationships specified in a direction issued by FINTRAC. BANQU FINANCE LTD. must report suspicious transactions under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and associated Regulations.
The nature and extent of systems and controls that the business needs to put in place will depend on a variety of factors, including the:
⦁ Degree of risk associated with each area of its operation
⦁ Nature, scale and complexity of the business
⦁ Type of products, customers, and activities involved

⦁ Diversity of operations, including geographical diversity
⦁ Volume and size of transactions

⦁ Distribution channels.
Therefore, the BANQU FINANCE LTD. has established internal controls procedure. The basis of the internal control process is well-defined authorisations, a segregation of duties, identification of clients, on- going due diligence, reporting suspicions, etc. The BANQU FINANCE LTD. doesn’t have an internal audit unit, however BANQU FINANCE LTD. plans to carry out an auditing not less than once in two years, forming a group of three employees which are working in unrelated departments, unless it is assessed by the BANQU FINANCE LTD. that a longer rotation cycle is appropriate. The decision of the participants of the formed group and the audit is made by the board of the company.

The BANQU FINANCE LTD. regularly monitors changes in and compliance with relevant legislation and other legal requirements in order to mitigate money laundering and terrorism financing and proliferation financing and sanctions violation risks, as well as to make internal control procedures more efficient.

⦁ AML Program
BANQU FINANCE LTD. has put into place the following components for an effective AML/CFT program:
⦁ have an adequate management structure to supervise BANQU FINANCE LTD. operations;
⦁ designation of an MLRO and specification of his/her functions;
⦁ cooperate with the competent authorities as may be necessary;
⦁ monitor the financial transactions of its customers and detect and report any suspicious transactions to FINTRAC (for further details on suspicious transaction reporting, reference is made to the AML Procedure);
⦁ preserve all relevant information in its possession that may be required by the relevant authorities investigating a suspicious activity;
⦁ implementation of necessary KYC/CDD procedures as required;
⦁ Implementation of risk management procedures;
⦁ Implementation of assessment and monitoring procedures of customer risk and payment risk indicators;
⦁ Implementation of employees’ AML training to ensure their awareness of the ML/FT risks, internal procedures as well as employee’s obligations with respect of AML reporting;
⦁ Implementing procedures for periodic re-assessment of BANQU FINANCE LTD. activities and adjustment of policies and procedures as may be required to ensure that they are adequate at all times; and
⦁ Record keeping of audit controls and decision making.

⦁ Policy Approvals, Revisions & Compliance Assurance

This policy and AML procedure and compliance thereto shall become applicable upon their approval by the Board of Directors. The re-assessment of the AML-related business risks, AML Policy and Procedures shall be carried out at least on annual basis or where otherwise required by a change in

applicable legislation or a change in BANQU FINANCE LTD. business. The review shall be driven by MLRO and presented to the Board of Directors on an annual basis.
The AML Policy and Procedures shall be subject to planned and/or ad hoc audits carried out by the Internal Auditor of BANQU FINANCE LTD. or by any other suitably qualified external entity as may be requested by the Board of Directors from time to time. Such audits shall test BANQU FINANCE LTDfor compliance against the requirements of the Act, the AML Regulations and other applicable laws. Should an audit identify a compliance breach and/or any irregularity, these shall be formally reported to the Board of Directors for further investigation and timely rectification of identified non-conformances.

⦁ Risk Based Approach
BANQU FINANCE LTD. shall adopt a risk-based approach (“RBA”) in determining whether to accept or reject customers, and to assess the risks of its business, its customers and transactions as the basis for developing adequate measures and rules to prevent money laundering and funding of terrorism.
A Risk-Based assessment enables a more targeted and focused approach to identifying and assessing risks that BANQU FINANCE LTD. is or may be exposed to by applying resources to where they are most needed. The type of information required must therefore reflect the inherent level of ML/FT risk that each merchant represents.
A robust RBA will therefore reduce the costs incurred as regards to on-going monitoring of client transactions and the procurement of paraphernal KYC documentation.

⦁ Money Laundering Reporting Officer
A Nominated Officer is the person within an organization who is responsible for overseeing all activity related to anti-money laundering matters. In the absence of the Nominated Officer, Supporting Nominated Officers will take his/her place.
BANQU FINANCE LTD. shall appoint and maintain an officer of BANQU FINANCE LTD. to act as BANQU FINANCE LTD. Money Laundering Reporting Officer (‘MLRO’). The MLRO shall be an officer of BANQU FINANCE LTD. with sufficient seniority, education, reputable background, experience and command. BANQU FINANCE LTD. Nominated Officers should remain up-to-date with AML/ATF rules and risks. If
The MLRO’s responsibilities include:
⦁ Receiving disclosures from employees (also known as Suspicious Transaction Report – STR’s);

⦁ Deciding if disclosures should be passed on to the Financial Transactions and Reports Analysis Centre or the Royal Canadian Mounted Police (RCMP) or the Canadian Security Intelligence Service (CSIS).
⦁ Reviewing all new laws and deciding how they impact on the operational process of the company;

⦁ Preparing a written procedures manual and making it available to all staff and other stakeholders;
⦁ Making sure appropriate due diligence is carried out on customers and business partners;
⦁ Receiving internal Suspicious Transaction Report (STR) from staff;
⦁ Maintaining controls and procedures aimed at deterring criminal elements from using BANQU FINANCE LTD. resources;
⦁ Setting up, monitoring, updating AML/CFT procedures, including KYC, record keeping, risk assessment, STR escalation protocols;
⦁ Receiving internal Suspicious Transaction Report (STR) from staff;
⦁ Recording all decisions relating to STRs appropriately;
⦁ Ensuring staff receive anti-financial crime training when they join and that they receive regular refresher training;
⦁ Making decisions about continuing or terminating trading activity with particular customers
⦁ Making sure that all business records are kept for at least five years from the date of the last customer transaction as per FINTRAC regulations.
BANQU FINANCE LTD. shall appoint a Supporting Nominated Officer to assist the MLRO in the fulfilment of his AML/CFT duties. The appointment of the designated employee shall in all cases receive the approval of the MLRO and shall work under his/her direction.
All Employee shall immediately notify the MLRO if he/she suspects or has any reason to suspect that any potentially suspicious activity has occurred or will occur if a transaction is completed. Employees are encouraged to seek the assistance of the MLRO with any questions or concerns they may have with respect to the AML/CFT Policy & Procedures.

⦁ CUSTOMER DUE DILIGENCE

⦁ Identification and Verification
KYC means obtaining information about a customer over and above the required ID.
The BANQU FINANCE LTD. has implemented a KYC program to ensure all kinds of customers (natural or legal persons or legal structures) are subject to adequate identification, risk rating and monitoring measures. This program has been implemented throughout all BANQU FINANCE LTD. divisions. The purpose of this is to reduce the risk of the BANQU FINANCE LTD. being used for money laundering and financing of terrorism.
Multiple online directories of individual and business information are used to check all customer/client ID details before a full Individual or Business e-account is activated.
For Business clients we also check their details against the public business registers (for example BUSINESS REGISTERS OF THE PROVINCES AND TERRITORIES.
The following “Know Your Customer” procedures will be helpful in identifying prospective face-to- face or non-face-to-face customers who may present money-laundering and financing of terrorism and financing of proliferation risks. The BANQU FINANCE LTD. applies a risk-based approach towards “know your customer” with reference to a customer’s geographic ties, chosen products and
/ or services. A risk- based approach is applied as low, medium or high. This risk-based approach indicates the risk of whether the given customer may use or will use the BANQU FINANCE LTD. services and/or products for financial crime.
In all cases, prior to taking on a new customer or engaging in a transaction with a customer with whom we do not have well-established relationship, the BANQU FINANCE LTD. completes sufficient due diligence to have confidence in the integrity of the customers and the lawfulness of the proposed transaction by following actions:
⦁ Make reasonable efforts to determine the true identity of all customers and the legal and beneficial ownership of all accounts.
⦁ Determine the customer’s citizenship, home and business addresses, occupation or type of
business. Where appropriate, obtain supporting documentation.
⦁ Inquire whether the customer will have the sole interest in the account or whether there will be other persons who will have access to it. Verify the identity of all such persons and engage in any necessary due diligence regarding such other persons.
⦁ If the customer is not an individual;
⦁ Determine the legal status (e.g., corporation, partnership or other form of entity).

⦁ Determine whether the customer is regulated, either in the BANQU FINANCE LTD. or a foreign country. C. Determine all principal persons of the customer, such as officers and directors, or persons
who have a substantial beneficial interest (i.e. own equal or more than 25% share in the

company). As per the PCMLTFA Regulations, BANQU FINANCE LTD. shall ensure that corporate and other legal entities incorporated within their territory are required to obtain and hold adequate, accurate and current information on their beneficial ownership. This includes details of beneficial interests held.
D. Obtain copies of all relevant organizational documents.
⦁ Identify the source of the customer’s funds
⦁ Screen the customer for:
⦁ Global Affairs Canadian sanctions list;
⦁ Account holders from countries listed on the Financial Action Task Force (“FATF”), NCCT list found the FinCEN advisory list;
⦁ Persons with significant holding, that hold over 25% equity or more in a business are now subject to AML/CTF screening;
⦁ Sanctions match;
⦁ Where appropriate, obtain information regarding the frequency with which the customer expects to transfer funds to or from the account, i.e. monthly, quarterly, or the nature of any thirdparty payments to or from the account;
⦁ Where appropriate, obtain and contact reputable references, such as professionals and other members of the financial industry, banks, securities companies, etc.
⦁ Government Officials and Foreign Accounts.
Special procedures apply for accounts for the benefit of politically exposed persons (PEPs), including senior government and political figures, particularly from certain countries, and for accounts opened by or through foreign banks and for clients from countries or industries deemed high risk. BANQU FINANCE LTD. performs enhanced due diligence and on-going due diligence measures proportionate with the risk of the customer. High risk customers will therefore be subject to enhanced due diligence and on-going due diligence. On-going due diligence processes will be applied to all existing customers within a specific period that will be determined by whether they are defined as high, medium or low.
Each new business relationship must be reviewed according to the criteria as set forth under the law. This must be done before the establishment of the relationship or – where necessary for the continued normal conduct of business and provided that the AML/CFT risks are low and verification steps are completed as soon as reasonably practical – during the relationship being established.
In the event that, during an established relationship, doubts arise about the veracity or adequacy of previously obtained data, documents or information or changes have occurred, then the customer due diligence measures as described above are to be repeated.

⦁ Risk Qualifications

BANQU FINANCE LTD. is at liberty to determine the extent of its customer due diligence measures on a risk sensitive basis, depending on the type of customer, business relationship, product or transaction.

Certain types of businesses are more likely to be involved with money laundering and should be considered high risk. The AML Procedure and KYC/Onboarding Policy describes in detail which businesses are not accepted by BANQU FINANCE LTD. (prohibited industries) and which are considered as high risk (restricted industries). The AML Procedure and KYC/Onboarding Policy provides a detailed description of matters relating to identifying and verifying a potential business relation with a merchant.

⦁ Enhanced Due Diligence
Apart from the business, there are circumstances where the risk of money laundering or terrorist financing is higher, such as (but not limited to):

⦁ Country: Countries where merchant is located that are:
⦁ subject to sanctions, embargos or similar measures issued by the United Nations;
⦁ identified by FATF as non-cooperative;
⦁ identified by credible sources as:
⦁ not having adequate anti-money laundering/counter terrorist financing systems;
⦁ funding or supporting terrorist financing or that have designated terrorist organizations operating in that country;
⦁ having significant levels of corruption or other criminal activity;
⦁ having a non-transparent tax environment;
⦁ The ownership structure appears unusual or excessively complex given the nature of the merchant’s business;
⦁ directors or ultimate beneficial owners identified as politically exposed persons; or
⦁ transaction and merchant behavior (Is a risk posed by a merchant’s behavior? What risk is posed by the products the merchant is using? To whom and where are the collected payments settled?).

In such cases extended customer due diligence measures have to be taken. Further reference is made to the KYC/Onboarding policy.

⦁ Simplified Due Diligence
On the other hand, there are also circumstances where the risk of money laundering or terrorist financing may be lower, such as (but not limited to):

⦁ cases where the merchant is a financial institution subject to requirements to combat money laundering and terrorist financing (consistent with the FATF Recommendations) and are supervised;

⦁ cases where the merchant is a public company listed on a stock exchange and subject to disclosure requirements to ensure beneficial ownership transparency;
⦁ country: countries where merchant is located that are:
⦁ identified by credible sources as having effective anti-money laundering/counter terrorist financing systems;
⦁ identified by credible sources as having low level of corruption or other criminal activity.
In such cases, and provided there has been an adequate analysis of the risk, simplified customer due diligence measures may be taken. Note that a lower risk for identification and verification purposes does not automatically mean the same merchant is lower risk for all types of customer due diligence measures, for instance for ongoing monitoring.

⦁ MONITORING

BANQU FINANCE LTD. is to conduct ongoing monitoring of its business relationships. Monitoring of customers shall be maintained on a risk-sensitive basis, and transactions shall be scrutinized to ascertain whether throughout the course of the relationship the transactions undertaken are consistent with BANQU FINANCE LTD. knowledge of the customer’s business and risk profile and the information provided to BANQU FINANCE LTD. in the course of onboarding and carrying out KYC checks. Data and documents are to be kept updated, including identification documentation. Thus, the team shall monitor the transactions and upon discovery of a transaction of suspicious nature, an internal investigation shall be initiated. All BANQU FINANCE LTD. customers are obliged to inform BANQU FINANCE LTD. with regards to any changes within the corporate structure, directors, beneficial owners, registered address.

⦁ Transaction Monitoring & Updating Files
Customer due diligence measures are to be applied by BANQU FINANCE LTD. to existing customers on the basis of materiality and risk. Due diligence on existing relationships are to be conducted at appropriate times, taking into account any previous customer due diligence measures being undertaken and the adequacy of the information obtained then.

BANQU FINANCE LTD. should have policies, controls and procedures in place that enables the effective management and mitigation of the risks that have been identified. BANQU FINANCE LTD. should monitor the implementation of those controls and enhance them, if necessary. When assessing risks, BANQU FINANCE LTD. should consider all the relevant risk factors before determining the level of overall risk and the appropriate level of mitigation to be applied.

The risk assessment referred to above must also include the review and monitoring of the
Money laundering and terrorist financing risks to the business. BANQU FINANCE LTD. must conduct ongoing monitoring of their business relationships with their customers. Ongoing monitoring of business relationships means (i) transaction monitoring and (ii) up-to-date documents and information keeping.

Such review and monitoring, based upon a risk-based approach, will basically entail the monitoring of patterns for example a sudden increase in processing volumes, uncharacteristic transactions not in line with the known activities of merchants and strange peaks. The monitoring criteria, tools and measures are described in the AML procedure.

All personnel involved in monitoring for unusual or suspicious transactions or activities must be diligent in their monitoring activities. Sufficient tools are to be provided that should enable and facilitate monitoring to the fullest extent and that minimize any human failure as much as reasonably possible.

The systems of internal control and communication must be capable in meeting the requirements of identifying unusual or suspicious transactions or activities. BANQU FINANCE LTD. must ensure that appropriate controls are put in place to lessen the risks as identified and prevent the business from being used for money laundering or terrorist financing. Managing and mitigating these risks must at least involve:

Applying ongoing customer due diligence measures to verify the identity of the merchants and any ultimate beneficial owners:

⦁ Obtaining additional information on high risk merchants;
⦁ Conducting ongoing monitoring of transactions and activity of merchants;
⦁ Having systems to identify and scrutinize unusual transactions and activity to determine whether there are reasonable grounds for knowing or suspecting that money laundering or terrorist financing may take place.

Not only should ongoing monitoring reflect the monitoring of the merchant activities and transactions, but BANQU FINANCE LTD. should furthermore implement means of assessing whether its risk mitigation procedures and controls are working effectively and where improvement is required. The relevant procedures need to be kept under regular review.

The reporting of unusual transactions/activity must comply with the Applicable Regulations and must be informed about all unusual transaction/activity.

⦁ POLITICALLY EXPOSED PERSONS

The definition of ’PEP’ is set out below:
⦁ Is or has, at any time in the preceding year, been entrusted with prominent public functions
⦁ Is an immediate family member of such a person
⦁ Is a known associate of such a person
⦁ Is resident outside or within the
⦁ Is or has, at any time in the preceding year, been entrusted with a prominent public function by –
⦁ Any state;
⦁ The European Community; or
⦁ An international body; or
⦁ Please note: An immediate family member or a known close associate of a person referred to in the paragraph immediately above does not necessarily qualify as a PEP without the appropriate risk assessment.

In cases where PEP is identified:
⦁ Senior management approval should always be sought before establishing a business relationship with a PEP
⦁ The source of funds should be established

The business relationship should be subject to enhanced and constant monitoring.

⦁ Establishing the source of funds

It is important that before a business relationship is entered into with a PEP their source of funds is stablished and Company is satisfied that there are no indications that funds that will be used for transactions to be carried out are derived from corruption (i.e. receipt of bribes), fraud or an attempt by the PEP to remove/hide assets from their home country.

The source of the PEP’s funds may be established by asking the individual concerned a series of questions to determine from where they receive their money. These questions could include confirmation of the main source income (i.e. salary), any business interest or investments from which funds are/will be received.

⦁ Making a decision to transact with the PEP

In order to satisfy itself, below are areas on which questions can be asked of the PEP to determine whether a business relationship should be established- information from this can be presented to

Senior Management of BANQU FINANCE LTD. them to make an informed decision:
⦁ What is the position and the duties of the PEP- (please note that a less ‘senior’ PEP is less of a risk than heads of states, MP’s, members of the Judiciary, Ambassadors)
⦁ Are there any family members/close associates that are PEP’s also?
⦁ Identify the customer and the beneficial owner of the account.
⦁ Know the customer’s country of residence.
⦁ Know the objective of opening the account and the volume and nature of the activity expected for the account.
⦁ Obtain information on the occupation and the other income sources.
⦁ Obtain information about the direct family members or associates who have the power to conduct transactions on the account

⦁ IDENTIFICATION OF SUSPICIOUS ACTIVITY

Having identified a customer and conducted the necessary due diligence, we will be in a good position to spot anything unusual with the customers, their actions, inactions or transactions.

Look out for any suspicious actions or activity at every dealing stage with the customer. For example, this can be an unusual remittance abroad or a transaction amount that is not in normal line of activity.

The following list provides several types of behavior or activity that may be suspicious. The list is not exhaustive and not conclusive. Rather employees who have contact with customers, intermediaries or counterparties should use the list as a guide for inquiry and follow up:
⦁ The customer wishes to engage in transactions that lack business sense or are inconsistent with the client’s stated business/strategy.
⦁ The customer exhibits unusual concern for secrecy, particularly with respect to his identity, type of business or dealings with companies.
⦁ Upon request, the customer refuses to identify or fails to indicate a legitimate source for his funds.
⦁ The customer exhibits an unusual lack of concern regarding risks, commissions, or other transaction costs.
⦁ The customer appears to operate as an agent for an undisclosed principal but is reluctant to provide information regarding the principal.
⦁ The customer has difficulty describing the nature of his business. The customer lacks general knowledge of his industry.
⦁ For no apparent reason the customer has multiple accounts under a single name or multiple names, with a large number of inter-account or third-party transfers.
⦁ The customer is from, or has accounts in, a country identified as a haven for money laundering.
⦁ The customer, or a person publicly or known to be associated with the customer, has a questionable background including prior criminal convictions.
⦁ The customer account has unexplained or sudden extensive activity, especially in accounts that had little or no previous activity.
⦁ The customer account shows numerous currencies or cash transactions aggregating to significant sums. This is however not relevant as BANQU FINANCE LTD. does not have any cash transactions.
⦁ The customer account has a large number of wire transfers to unrelated third parties.
⦁ The customer account has wire transfers to or from a bank-secrecy haven country or country identified as a money laundering risk.
⦁ The customer account has unusual transactions or transactions that are disproportionate to the customer’s known business.

Also, FINTRAC has issued the following guidelines on suspicious transactions with more specific
ML/TF indicators related to MSB:
⦁ Customer requests a transaction at a foreign exchange rate that exceeds the posted rate.
⦁ Customer wants to pay transaction fees that exceed the posted fees.
⦁ Customer exchanges currency and requests the largest possible denomination bills in a foreign currency.
⦁ Customer knows little about address and contact details for payee, is reluctant to disclose this information, or requests a bearer instrument.
⦁ Customer wants a cheque issued in the same currency to replace the one being cashed.
⦁ Customer wants cash converted to a cheque and you are not normally involved in issuing cheques.
⦁ Customer wants to exchange cash for numerous postal money orders in small amounts for numerous other parties.
⦁ Customer enters into transactions with counter parties in locations that are unusual for the customer.
⦁ Customer instructs that funds are to be picked up by a third party on behalf of the payee.
⦁ Customer makes large purchases of traveller’s cheques not consistent with known travel plans.
⦁ Customer makes purchases of money orders in large volumes.
⦁ Customer requests numerous cheques in small amounts and various names, which total the amount of the exchange.
⦁ Customer requests that a cheque or money order be made out to the bearer.
⦁ Customer requests that a large amount of foreign currency be exchanged to another foreign currency.
⦁ Customer purchases a large volume of money orders and changes payment type to avoid reporting requirements;
⦁ If you identify suspicious activity, contact the Nominated Officer who is responsible for issuing a Suspicious Transaction Report through the FINTRAC online system. The Nominated Officer should also notify senior management.

Note: DO NOT raise any concerns with the customer or use words to suggest you are not happy with anything that may tip them off.

⦁ REPORTING PROCEDURE

Anti-money laundering processes require a team approach. Money laundering issues are complex. The Nominated Officer of BANQU FINANCE LTD. should not attempt to shift through them alone and if the officer becomes aware of any suspicious circumstances, or have any questions, the officer should promptly consult with the Nominated Officer and Compliance Team of BANQU FINANCE LTD.
Suspicious Transaction reports – internal company process
In the situation that an employee (for this purpose, collectively, staff members) has suspicions about a customer and/or transaction, he must ensure that the company Nominated Officer is notified about his suspicions as soon as possible.

The STR should contain as a minimum the following information:
⦁ Details and identification data of all parties to the transaction
⦁ The owner of the monies in question
⦁ How the identity of the client was verified
⦁ A full description of the transaction
⦁ Reason for suspicion and supporting evidence
⦁ Details of any assets which are subject to international sanctions
If in doubt, the staff member should call the Nominated Officer to discuss the reasons for their suspicion – however, they should be careful not to do this whilst the customer is standing in front of them or via any communication exchanged with the customer (they may ‘tip off’ the customer otherwise, see below).

The timing for submitting the internal STR is important. The law states that an individual working in the regulated sector should make a report as soon as he or she becomes suspicious. This may mean either before the transaction takes place or immediately afterwards.

Where a staff member becomes aware that a customer wants to carry out a transaction which is suspicious and the timing for the transaction allows it, the staff member must ensure that ‘consent’ is given before processing the transaction. ‘Consent’ means that the company has sought and obtained approval from the FINTRAC to process the transaction. Further information on ‘seeking consent’ is provided below.

However, staff may decide that there would be a danger that if they were to seek consent for a particular transaction (i.e. in advance of the transaction taking place) that there might be a danger that the customer would be ‘tipped off’. See below for more information on ‘tipping off’.

All staff members will have fully discharged their duties, and will have the full protection of the law, once a report of their suspicions has been made to the company Nominated Officer.

Once the Nominated Officer receives the internal STR from the staff member, the Nominated Officer has two options:
⦁ Report the STR on to FINTRAC or RCMP or CSIS.(see procedure below);
⦁ File an internal note indicating why, on the basis of review of the circumstances around the transaction, it is judged not necessary to make a report to FINTRAC or RCMP or CSIS;

The Nominated Officer should complete the Nominated Officer STR Resolution form (see appendix for sample) in the event he decides not to make a report to FINTRAC or RCMP or CSIS.

⦁ Tipping Off
Any staff member needs to make a judgement as to whether any delay to the transaction (‘consent request’) would have the effect of ‘tipping off’ the customer. It is a criminal offence under section
333 of the Proceeds of Crime Act 2002, to do or say anything that might either ‘tip off’ another person
that a disclosure has been made or in any way prejudice an investigation. This means that businesses must not tell a customer:
⦁ that a transaction was/is being delayed because consent from FINTRAC or RCMP or CSIS
has been requested;
⦁ that details of their transactions or activities will be/have been reported to FINTRAC or RCMP or CSIS;
⦁ that they are being investigated by law enforcement.
In situations where delaying a transaction may inadvertently lead to ‘tipping off’, it will make sense to process the transaction and then ensure that a STR is submitted to the Nominated Officer as soon as possible after. The staff member will have the protection of the law as soon as a STR has been submitted to the Nominated Officer.

If in doubt about whether to proceed with a transaction, the staff member should immediately contact the Nominated Officer for advice.

Documentation
Supporting documentation is a cornerstone of our anti-money laundering and counter terrorism financing procedures.Unrecorded steps are soon forgotten. Records assist in tracking relevant information and in demonstrating that the company/individual has conducted our business responsibly and with integrity.

All interviews, searches and activities undertaken to verify integrity of transactions and persons must be documented and stored for reference by BANQU FINANCE LTD., OFSI and FINTRAC if and when required.All records must be kept for a minimum of five years after the business relationship with the customer ends.

⦁ RECORD KEEPING

BANQU FINANCE LTD. must be able to demonstrate its compliance with the Applicable Regulations, by means of keeping evidence and records of due diligence checks made and information held on merchants and transactions. The following records are to be kept:

⦁ All documents obtained for the purpose of identifying the merchant and the ultimate beneficial owners;
⦁ Verification evidence on the identification documents obtained and the resolution of any discrepancy in the identifying information;
⦁ Supporting records in respect of the business relationships;
⦁ Results of credit analysis or any other analysis undertaken;
⦁ Transaction data must be maintained in a form that can easily be compiled for an audit trail and which establishes the right transaction profile of the merchant;
⦁ All other information related to money laundering matters.

Records are to be kept for at least five years, beginning either on the date on which (i) the business relationship ends for all customer identification/due diligence records and (ii) the transaction is completed for all transaction records.

⦁ Record Sharing
BANQU FINANCE LTD. will share AML information (customer identification, due diligence and transaction records and other relevant information) with the FIU, law enforcement authorities and other financial institutions, if it is requested to do so. BANQU FINANCE LTD. will maintain procedures to protect on one hand the security of requests from such authorities, but on the other hand not unnecessarily jeopardize the confidentiality rights of the merchants.

BANQU FINANCE LTD. will share information about those suspected of terrorist financing and money laundering with other financial institutions for the purposes of identifying and reporting activities that may involve terrorist acts or money laundering activities and to determine whether to establish or maintain a business relationship or engage in a transaction. Furthermore, upon request, BANQU FINANCE LTD. may be required to submit periodical reports on its policies, procedures and other information, in a format as required by the FIU.

⦁ STAFF AWARENESS AND TRAINING
The MLRO shall make sure that initial and on-going training is provided to employees, at least annually, to ensure that all relevant staff is aware of the regulatory obligations of BANQU FINANCE LTD. under the Applicable Regulations, their personal responsibilities and how to recognize and handle suspicious transactions.

Compliance team including any other customer-facing and/or transaction- facing employees whose duties include the handling of relevant financial business or activity as defined under the Applicable Regulations shall receive more detailed training about BANQU FINANCE LTD. AML procedures with respect to identifying clients, monitoring, record-keeping, remaining vigilant at all times, and reporting any unusual/suspicious transactions. Training logs will be maintained.

BANQU FINANCE LTD. maintains an on-going employee training program so that the staff is adequately trained in KYC procedures and that the staff is aware of different possible patterns and techniques of money laundering which may occur in their everyday business. Training requirements should have a different focus for new staff, front-line staff, compliance staff or staff dealing with new customers/Merchants. New staff is educated in the importance of KYC policies and the basic requirements at the Company. Training is given to all staff members upon commencement of taking on the position in the BANQU FINANCE LTDand on regular occasions afterwards (at least once a year).

Staff members who deal directly with the customers are trained to verify the identity of new customers, to exercise due diligence in handling accounts of existing customers on an on-going basis and to detect patterns of suspicious activity. Training also covers the general duties arising from applicable external (legal and regulatory), internal requirements and the resulting individual duties which must be adhered to in everyday business as well as typologies to recognize money laundering or financial crime activities or sanctions violation typologies.

Regular refresher training is provided to ensure that employees are reminded of their responsibilities and are kept informed of new developments. It is crucial that all relevant staff fully understand the need for and implement KYC policies consistently. A culture within services that promotes such understanding is the key to a successful implementation.

Training covers the following issues:
⦁ The law relating to financial crime;
⦁ Risks associated with the financial crime threat to the company (see, for example, www.egmontgroup.org);
⦁ Identity and responsibilities of the Nominated Officer;
⦁ Internal policies and procedures put in place;
⦁ Customer Due Diligence/Enhanced due diligence monitoring measures;
⦁ Suspicious activity – what to look out for;

⦁ How to submit an internal Suspicious Transaction Report to the Nominated Officer;
⦁ Record-keeping requirements;
⦁ Possible sanctions violation – what to look out for;
The Nominated Officer will keep a log of all training which is provided to staff members. All staff will be required to sign the training log where required to confirm that they have received training.
The Nominated Officer will circulate to all staff other material to heighten awareness of anti-financial crime issues. This must be placed on the company notice board which should be available in all company’s locations.
The Nominated Officer shall be responsible to include information in respect of his/her education and training program(s) attended during the year in his/her Annual Report.

⦁ Role of the Employee

In the situation that an employee has suspicions about a customer and/or transaction, he must ensure that the company Nominated Officer is notified about his suspicions as soon as possible. Staff should use the internal ‘Suspicious Transaction Report Form’ (see appendix for example). The STR should contain as a minimum the following information:
⦁ Date/time of transaction
⦁ Amount
⦁ Customer name/customer ID information (e.g. passport number, etc)
⦁ Transaction number
⦁ Reason for suspicion of transaction
If in doubt, the staff member should call the Nominated Officer to discuss the reasons for their suspicion– however, they should be careful not to do this whilst the customer is standing in front of them (they may ‘tip off’ the customer otherwise, see below). The timing for submitting the internal STR is important. The law states that an individual working in the regulated sector (i.e. EMI or API) should make a report as soon as he or she becomes suspicious. This may mean either before the transaction takes place or immediately afterwards. However, staff may decide that there would be a danger that if they were to seek consent for a particular transaction (i.e. in advance of the transaction taking place) that there might be a danger that the customer would be ‘tipped off’. See below for more information on ‘tipping off’.
All staff members will have fully discharged their duties, and will have the full protection of the law, once a report of their suspicions has been made to the company Nominated Officer.
Once the Nominated Officer receives the internal STR from the staff member, the Nominated Officer has two options:
⦁ Report the STR on to FINTRAC or RCMP or CSIS.
⦁ File an internal note indicating why, on the basis of review of the circumstances around the transaction, it is judged not necessary to make a report to FINTRAC or RCMP or CSIS. The Nominated Officer should complete the Nominated Officer STR Resolution form in the event he decides not to make a report.

ANNEX 1 – Risk Appetite
⦁ Prohibited Businesses, Activities

The company has set itself the prohibition of the list of goods and services (industry):
⦁ Banknotes sales;
⦁ Drugs and the use of a drug or drug-like substance;
⦁ Arms and ammunition;
⦁ Jewelry, precious metals;
⦁ Reinsurance and insurance services;
⦁ Binary Options;
⦁ Multi-level marketing (MLM);
⦁ Antiques and art trade;
⦁ Pharmacies and pharmaceutical activity, pharmaceutical, proprietary medicinal products and pharmaceutical trade;
⦁ The sale of tobacco products;
⦁ Illegal / piracy audio or video recordings;
⦁ Infringing goods (counterfeit goods);
⦁ Sexual services, Adult;
⦁ Financial pyramid;
⦁ Debt collection services;
⦁ Accept assets that are known or suspected to be the proceeds of criminal activity;
⦁ Enter into/maintain business relationships with individuals or entities known or suspected to be a terrorist or a criminal organisation or member of such or listed on sanction lists;
⦁ Maintain anonymous accounts, accounts for shell banks or pay-through accounts.

⦁ Prohibited Countries

In accordance with the international regulatory obligations, as well as its high-quality level standards, BANQU FINANCE LTD. is not operating or have any kind of business relationships with persons, or process incoming/outgoing transactions related to Prohibited Countries. This list is fixed by BANQU FINANCE LTD. and is subject to regular change.

Afghanistan Albania Barbados Botswana Burkina Faso Burma Burundi Cambodia
Cayman Islands

Central African Republic Crimea
Cuba
Democratic People’s Republic of Korea (DPRK) Democratic Republic of the Congo Ghana
Haiti Iran Iraq Jamaica
Lebanon Libya Mali Mauritius Morocco Myanmar Nicaragua Pakistan Palestine Panama
Philippines Senegal Somalia South Sudan Sudan
Syria
The Bahamas Trinidad and Tobago Uganda
Venezuela Yemen Zimbabwe

ANNEX 2 – Internal Suspicious Transaction Report Format

SAR Nr:……./………..

Particulars Remarks
Date:
ID of the customer:
Name/address of Customer:
Telephone no of Customer:
Nature of suspicious activity:
Give full detail of suspicion: [Include detail of
transactions and identity checks.]
Attach any relevant documents: 1. Transaction
receipts 2. Proof of ID and Address 3. Sanctions list checks
Name of the Reporting Officer:
Signature by Reporting Officer:
Refer to FINTRAC: [To be completed by
Nominated Officer]
Do not refer to FINTRAC: Reason for decision:
Details
Signature by Nominated Officer:
Date referred to Nominated Officer Decision: