Jersey -- AML/CFT Compliance Regulatory Overview

Jersey has a robust anti-money laundering (AML) and countering the financing of terrorism (CFT) framework, which aligns with international standards set by the Financial Action Task Force (FATF). This framework has been explicitly extended to cover Virtual Asset Service Providers (VASPs).

Here's a detailed breakdown of the AML/KYC requirements for cryptocurrency/virtual asset service providers in Jersey:

Overseeing Authority

The primary authority responsible for overseeing compliance with AML/CFT requirements in Jersey is the Jersey Financial Services Commission (JFSC).

• JFSC Website: https://www.jfsc.org/

The JFSC issues guidance and handbooks to assist businesses in complying with their obligations.

AML/CFT Legislation

Jersey's AML/CFT framework is primarily underpinned by the following key legislation:

1. The Proceeds of Crime (Jersey) Law 1999 (as amended): This is the principal law creating offences related to money laundering and the financing of terrorism. It defines criminal conduct and the various money laundering offences.
2. The Money Laundering (Jersey) Law 2008 (as amended): This law establishes the preventative measures that financial services businesses (including VASPs) must take to combat money laundering and terrorist financing. It mandates compliance with the requirements set out in the Money Laundering Order.
3. The Money Laundering (Prevention and Detection of Money Laundering) (Jersey) Order 2008 (as amended) (the "ML Order"): This is the core regulatory instrument that specifies the detailed AML/CFT requirements for financial services businesses, including customer due diligence, reporting, record-keeping, and internal controls.
4. The Terrorism (Jersey) Law 2011 (as amended): This law creates offences related to terrorist financing and provides for asset freezing and other measures to combat terrorism.
5. JFSC AML/CFT Handbook: While not primary legislation, the JFSC's AML/CFT Handbook is a critical guidance document that provides practical advice and interpretations of the statutory requirements, demonstrating how businesses should comply. VASPs must refer to the relevant sections of this handbook.

Scope and Definition of VASPs

Jersey generally follows the FATF definition of Virtual Assets (VAs) and Virtual Asset Service Providers (VASPs). VASPs typically include any natural or legal person who, as a business, conducts one or more of the following activities or operations for or on behalf of another natural or legal person:

• Exchange between virtual assets and fiat currencies.
• Exchange between one or more forms of virtual assets.
• Transfer of virtual assets.
• Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
• Participation in and provision of financial services related to an issuer’s offer and/or sale of a virtual asset.

In Jersey, entities engaged in VASP activities are generally considered "financial services businesses" for AML/CFT purposes and are subject to specific registration and regulatory oversight by the JFSC.

Customer Due Diligence (CDD) Requirements

VASPs in Jersey must apply a risk-based approach to CDD, meaning the extent of due diligence should be commensurate with the money laundering and terrorist financing risks identified. Key requirements include:

1. Identification and Verification of the Customer:
   • Obtain reliable independent evidence of the customer's identity (e.g., government-issued photo ID, proof of address).
   • Verify the identity using reliable sources.
   • For legal entities, obtain details of the company's legal status, constitution, and powers.
2. Identification and Verification of Beneficial Ownership:
   • Identify the ultimate beneficial owner (UBO) of the customer, including natural persons who ultimately own or control the customer (typically holding 25% or more of shares or voting rights, or exercising control through other means).
   • Verify the UBO's identity using reliable sources.
3. Understanding the Purpose and Nature of the Business Relationship:
   • Obtain information about the customer's business activities, the source of funds and source of wealth (particularly for high-risk customers or high-value transactions), and the intended purpose and nature of the VASP relationship.
4. Ongoing Monitoring:
   • Continuously scrutinize transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
   • Keep customer information, including identity data, up-to-date and relevant.
   • Review existing customer relationships periodically, especially for high-risk clients.

Enhanced Due Diligence (EDD):

EDD measures are required for situations posing higher ML/TF risks, including:

• Politically Exposed Persons (PEPs): Senior foreign and domestic public officials, their family members, and close associates. Enhanced scrutiny of transactions and source of wealth/funds is mandatory.
• High-Risk Jurisdictions: Customers or transactions involving countries identified by FATF or the JFSC as having inadequate AML/CFT regimes.
• Complex or Opaque Structures: Where the ownership and control structure of a legal entity or arrangement is unusually complex.
• Transactions without Face-to-Face Contact: Where the customer has not been physically present for identification purposes (though the JFSC Handbook provides guidance on robust non-face-to-face verification).
• High-Value or Unusual Transactions: Transactions that are large, complex, unusual, or inconsistent with the customer's known legitimate activities.

Simplified Due Diligence (SDD):

SDD may be applied in limited circumstances where the ML/TF risk is demonstrably low and where specific conditions set out in the ML Order and JFSC Handbook are met (e.g., certain regulated financial institutions or public bodies). However, the applicability of SDD to VASP customers is often limited due to the inherent risks associated with virtual assets.

Suspicious Transaction Reporting (STR)

VASPs have an obligation to report suspicious activity to the relevant authorities:

1. Money Laundering Reporting Officer (MLRO): Every VASP must appoint an MLRO who is responsible for receiving internal disclosures of suspected money laundering or terrorist financing, considering them, and making external reports where appropriate. An MLRO must be suitably qualified and of sufficient seniority.
2. Internal Reporting: Employees are required to report any knowledge or suspicion of money laundering or terrorist financing to the MLRO.
3. External Reporting: If the MLRO forms a suspicion, they must make a Suspicious Activity Report (SAR) to the Joint Financial Crimes Unit (JFCU) in Jersey.
4. Consent Regime ("Defence Against Money Laundering - DAML"): Where a VASP knows or suspects that property is criminal property (proceeds of crime) and wishes to proceed with a transaction that would otherwise be a money laundering offence, they must seek consent from the JFCU. Failure to seek consent or proceeding without it could result in criminal liability.
5. Prohibition on Tipping-Off: It is an offence to "tip-off" a person who is the subject of a SAR or a consent request, or to disclose that a report has been made or that an investigation is being conducted, as this could prejudice an investigation.

Record-Keeping Obligations

VASPs are required to maintain comprehensive records for a specified period:

1. Duration: All records relating to customer identity, business relationships, and transactions must be kept for a minimum period of five years from the date the business relationship ends or the date of the transaction (for occasional transactions).
2. Types of Records: This includes:
   • Copies of documents and information obtained for CDD purposes.
   • Evidence of the customer's identity and beneficial ownership.
   • Records of transactions, including the amount, currency (fiat and virtual), date, and parties involved.
   • Records of internal and external suspicious activity reports, including the MLRO's decision-making process.
   • Records of communications with customers and relevant authorities.
   • Records demonstrating compliance with internal policies and procedures.
3. Accessibility: Records must be readily available to the JFSC upon request.

Other Key Obligations

• Internal Controls and Policies: VASPs must establish and maintain appropriate and risk-sensitive internal controls, policies, and procedures to prevent ML/TF. This includes a comprehensive AML/CFT Business Risk Assessment.
• Training: Employees must receive regular and appropriate AML/CFT training relevant to their roles and responsibilities.
• Independent Audit: Larger VASPs, or those deemed higher risk, may be required to undertake an independent audit of their AML/CFT systems and controls.
• Sanctions Compliance: VASPs must comply with all applicable financial sanctions regimes (e.g., UN, UK, EU where applicable to Jersey).

By adhering to these stringent requirements, VASPs operating in Jersey contribute to the integrity of the jurisdiction's financial system and combat global financial crime. Non-compliance can lead to significant penalties, including fines, reputational damage, and imprisonment for individuals.