Customer Due Diligence for SG SMEs

What customer due diligence means when you are the buyer in Singapore

Customer due diligence in Singapore is usually described as a bank obligation under the Monetary Authority of Singapore anti-money laundering framework. For an SME buyer, the practical meaning is narrower and more urgent: before money moves, confirm the seller exists, the person signing can bind the business, and the payment story makes sense. That is the whole job, and every document you collect is evidence for that decision rather than paperwork for its own sake.

The size of the register is why this discipline matters. A recent ACRA register snapshot (data.gov.sg, monthly) counted 624,271 live companies within 2,124,508 total entities. In a market with that much entry, exit, and re-entry, a familiar trading name or a polished quotation is not proof of standing. Names get reused, entities get struck off and replaced, and business models pivot faster than websites do. Your check should answer which exact entity you are paying, not merely which brand you like.

You do not need a bank-grade file for every purchase. A proportionate approach works: light checks for small repeat orders with a known supplier, deeper checks when the amount is large, the relationship is new, payment is demanded upfront, or the goods or services are hard to recover once delivered. The rest of this guide follows that ladder, starting with what you can confirm yourself from public records in Singapore and ending with when a paid pack earns its fee.

• Confirm the exact legal entity behind the quote, including its UEN and current status on the register.
• Confirm the person you deal with has a plausible role in that entity and a consistent contact trail.
• Confirm the commercial story holds together: scope, price logic, payment channel, and delivery promise.
• Write down what you checked and what you decided, so a later dispute or audit has a clear record.

The four-step customer due diligence checklist: identify, verify, screen, monitor

Professional guidance frames customer due diligence as four repeating moves: identify who the customer or counterparty is, verify that identity against reliable sources, screen for risk signals, and monitor the relationship over time. An SME buyer can run the same four moves without hiring a compliance team. The trick is to keep each step small enough to finish before the payment deadline, and to escalate only when something does not line up.

Start by asking for the basics in writing: full registered name, UEN, registered address, the name and role of your contact, and the bank account name that will receive payment. Serious sellers answer this in one message. Evasive or shifting answers at this stage are themselves a finding, and they cost you nothing to obtain. Keep the request polite and standard so honest suppliers do not feel accused.

1. Identify. Capture the exact entity, the humans behind it, and the ownership story in plain words. For a company, that means directors and shareholders of record plus the person negotiating with you. For a sole proprietor or partnership, it means the registered owner and anyone authorised to receive money.
2. Verify. Match those claims against the ACRA register and the documents the seller provides. The UEN, entity name, status, incorporation date, officers, and registered address should agree across the quotation, the business profile, and the invoice. Any mismatch needs an explanation before payment, not after.
3. Screen. Look for standing and adverse signals: struck-off history, frequent officer or address churn, GST registration consistency, court or insolvency signals, and negative press or review patterns. One weak signal is context, while several pointing the same way is a pattern worth pricing into your terms.
4. Monitor. Repeat the light checks at renewal, at credit-limit increases, and when payment instructions change. A supplier that was sound last year can change directors, move premises, or start channelling payments through a different entity. Monitoring for an SME is mostly noticing change and asking one calm question about it.

If you want a ready-made sequence for a live deal, the pre-deal counterparty screen follows this same identify, verify, screen, and monitor order, while the quick counterparty check suits a single narrow question such as whether an entity is live. Use the checklist above to decide which depth you need before you spend anything.

What you can check yourself with public records in Singapore

A surprising share of customer due diligence in Singapore is do-it-yourself work on public sources. The ACRA register accessed through ACRA and BizFile remains the anchor: entity status, officers, shareholders, charges, and filing posture all sit there, and the habit of checking the profile before paying prevents the most common failure, which is paying the wrong or defunct entity. Pair the register with the GST registration signal, the struck-off trail, and open-source adverse checks, and you cover most routine SME purchases.

The struck-off population deserves special attention. The same ACRA register snapshot (data.gov.sg, monthly) counted 523,699 struck-off records, which means dead, wound-up, or removed names are a large share of total name history. A seller trading under a name that resembles a struck-off entity is not automatically suspect, since genuine re-incorporations happen, but you should ask which entity holds the contract and confirm that the UEN on the invoice is the live one. The struck-off company data and the company directory help you frame that question precisely.

Two habits separate a useful DIY check from a box-ticking one. First, screenshot or save what you saw with the date, because registers update and a later dispute turns on what was visible when you decided. Second, read across sources instead of within one: a live status plus a matching GST signal plus a stable officer bench is reassuring, while a live status paired with a brand-new officer team, a fresh address, and payment to a personal account is a different story even though the headline status is identical.

• Match the UEN character for character across quote, invoice, contract, and bank payee name.
• Check the profile close to payment day, not only at first contact, for larger or deferred deliveries.
• Treat a request to pay a different entity or account as a new check, not a minor admin change.

When paying for a diligence pack earns its fee

DIY checks carry you far, but they have a ceiling. They confirm what the register says today, not whether the financial story, the ownership chain, or the dispute history supports the commercial risk you are taking. Pay for a pack when the downside of being wrong exceeds the fee by a comfortable margin: a large first order, a long retainer, a deposit you cannot recover, goods built to your specification, or services where failure delays your own delivery to your customer.

Ownership opacity is the clearest paid-pack trigger. If the seller is owned through holding companies, has corporate shareholders, recently replaced its board, or routes contracting, invoicing, and payment through different entities, a structured pack that maps officers, shareholders, charges, and filing gaps saves you from assembling fragments across filings. The business profile guide shows what sits inside the underlying documents, and a good pack turns those pages into a readable ownership and standing narrative with page references.

Before you commission anything, define the decision the pack must support. A pack that answers whether to pay a deposit has a different shape from one that answers whether to grant credit terms or sign an exclusive distributorship. Ask for the verdict up front, the evidence behind it, the gaps the provider could not close, and the exact follow-up questions for the seller. If a provider cannot name its sources and its blind spots, the document is decoration rather than diligence. Indicative options and turnaround sit on the pricing page.

• Large or irreversible payments, first-time suppliers, and deals with heavy customisation or exclusivity.
• Cross-border ownership, nominee-style officer patterns, or inconsistent stories about who owns the business.
• Payment to a third party, last-minute bank changes, or pressure to skip written terms.
• Regulated or reputation-sensitive exposure, where your own customer or lender will ask what you checked.

Red flags and how to file your decision so it holds up later

Red flags are rarely dramatic on their own. The pattern that should slow you down is a cluster of small inconsistencies: the quotation carries one entity name while the invoice carries a near-identical variant, the UEN is missing from letterheads, the contact uses only a personal mobile and a free email account, the business address changes between messages, and the bank payee name matches none of the above. Each item has an innocent explanation in isolation, but together they describe a counterparty you cannot identify with confidence, which is precisely what customer due diligence exists to catch.

Consider a fictional example, labelled fictional: a renovation subcontractor quotes under a reassuring trade name, then asks for a deposit to a personal account because the company account is under maintenance. A quick register read shows the quoted entity was struck off and a similarly named live entity appeared weeks ago with different officers. Nothing here proves dishonesty, and account maintenance stories are occasionally true, yet no buyer should pay that deposit without pausing, re-identifying the contracting party, and putting payment terms in writing. That pause is the entire value of the checklist.

Your file does not need legal language, but it needs completeness. Keep the quote and invoice, the profile or register extract with its date, the GST signal you saw, notes of any adverse findings, and a short decision paragraph stating whether you proceeded, proceeded with tighter terms, or walked away. Tighter terms are often the right middle path: smaller tranches, payment on milestone, payee-name matching, and written authority for anyone issuing payment instructions. For GST-sensitive purchases, the GST registration check guide and the supplier GST verification guide show how to record that slice cleanly.

• Names that almost match across documents, missing or shifting UENs, and payee names that match nothing on file.
• Fresh incorporations paired with large upfront demands, or officers and addresses that churn without explanation.
• Resistance to written terms, to verification calls, or to payment into the contracting entity account.
• Document your verdict in one paragraph: what you saw, what worried you, and which term manages it.

Customer due diligence Singapore: frequently asked questions

These answers assume you are an SME buyer rather than a regulated financial institution. Your goal is a defensible commercial decision, not a regulatory filing, so each answer points to the smallest check that resolves the question and the point at which deeper work becomes worthwhile.

• New supplier and money moving soon: start with the UEN and status read, then the officer and GST signals.
• Existing supplier acting differently: treat changed payment instructions or entities as a fresh check.
• Large exposure or opaque ownership: commission a structured pack with named sources and gaps.

What is the minimum customer due diligence an SME should run before paying a new supplier

Confirm the exact registered name and UEN, confirm the entity is live, confirm the contact has a plausible role, and confirm the bank payee name matches the contracting entity. Save dated evidence of each point plus the quote and invoice. That compact file resolves most routine purchases, and anything that fails at this level deserves an explanation before funds move.

How is customer due diligence different from a simple ACRA status check

A status check answers whether an entity is live, while diligence answers whether you should deal with it on the proposed terms. Diligence adds identity matching across documents, officer and ownership reading, GST and adverse signals, and a written verdict with terms that fit the risk. The register is the foundation, but the judgment across sources is the part a status mirror cannot give you.

Which diligence steps can a Singapore SME realistically do without paying

Most of the core routine is do-it-yourself: UEN and status confirmation, officer and address reading on the profile, GST signal checks, struck-off and name-history review, and open-source adverse searches. Paid help earns its fee when ownership is layered, the amount is large or irreversible, documents conflict, or your own customer or lender will ask for a structured file with sources and gaps stated.

What should trigger enhanced checks or tighter payment terms

First-time suppliers with large upfront demands, payment to a different entity or a personal account, last-minute bank changes, newly incorporated entities with thin trails, and clusters of small document mismatches all call for stronger terms. Practical mitigations include smaller tranches, milestone payments, payee-name matching, written payment authority, and a pause until the contracting entity is re-identified cleanly.

How often should an SME refresh diligence on existing customers and suppliers

Refresh the light checks at contract renewal, at credit-limit increases, when payment instructions or contracting entities change, and when you hear about ownership or distress events. You do not need to rebuild the full file each time; a dated re-read of status, officers, and GST signals with a one-paragraph note on what changed is proportionate for most SME relationships.