How Does Transaction Monitoring Work for Fund Managers?

Onboarding checks are conducted at a single point in time to determine who an investor is, but can not demonstrate what an investor does once capital is invested. Effective transaction monitoring for fund managers means reading investor activity, fund flows, redemptions, transfers, counterparties and geographic exposure against expectations, calibrated to the firm’s risk profile within Singapore’s risk-based AML compliance Singapore environment — an environment the 2026 FATF/APG assessment described as needing sharper, more consistently demonstrable risk-based results, after identifying fraud as the country’s most prominent money-laundering threat.

What Is Transaction Monitoring?

In the context of a fund manager, transaction monitoring involves the process of examining fund transactions such as subscriptions, transfers, redemptions, payment to the fund, redemption instructions, geographic exposure, source of funds, known risk factors and other fund transactions to detect any transactions that are inconsistent with the investor’s known profile, his or her expected transactional activity, his or her known investment activity, the purpose for which the transaction was made, the geographic location of the transaction, or known risk factors. It is in parallel with, but separate from, two other controls that it is often confused with. 

Customer Due Diligence

The essence of CDD is to be aware of who the investor is and what risk they pose during the onboarding process and at key points of review: identity, ownership structure, source of wealth, and the purpose of the investor’s relationship. 

Ongoing Monitoring

Ongoing Monitoring: Is the information about the customer and his/her risk factors collected at onboarding accurate and up to date throughout the relationship? (Has anything changed about the customer?)

Transaction Monitoring

Transaction monitoring is more narrowly focused and more operational than changes to an investor’s static profile; it examines transaction activity overall to identify transactions that may be unusual or suspicious.

These three controls aren’t effective when used independently. The baseline is set by CDD, it is continuously monitored to keep the baseline up to date, and transaction monitoring is used to detect activity that does not match the baseline. If a fund manager chooses to construct any one of these without the other two, he or she is building a blind spot. 

Why Does Transaction Monitoring Matter for Fund Managers?

Fund managers find themselves at the heart of a very complex transaction chain. One subscription/redeemed may pass through institutional investors, high-net-worth individuals, corporate structures, cross-border investors, custodians, administrators, brokers and banks before it makes it to the end user — and each layer has a counterparty whose actions must be logical to the next. The complexity is just what makes transaction monitoring a control on its own and not part of onboarding. 

AML Risk

One of the more effective methods of uncovering potential money laundering is through monitoring, including unexplained fund movements, transaction anomalies that do not align with an investor’s profile, unusual third-party payments, complex ownership structures behind a subscription, unusual redemption patterns and activity linked to higher-risk jurisdictions. This is directly related to the overall AML compliance Singapore framework under which fund managers operate and therefore does not require a transaction monitoring system to include individual components of that framework. During its evaluation for FATF/APG in 2026, Singapore’s regime has been rated competent and coordinated, with generally good technical compliance in areas such as customer due diligence and suspicious transaction reporting, but the assessors noted that the regime’s outcomes need to be clearer and more consistent. 

Fraud Risk

Monitoring also has to catch fraud, not just laundering — fraudulent payments, account takeover, suspicious last-minute changes to payment instructions, unusual redemption requests, impersonation of an authorized signatory, or investor behavior that simply doesn’t match the pattern on file. This matters more than it used to: the 2026 FATF/APG assessment identified fraud, particularly scams and cyber-enabled fraud, as Singapore’s single most prominent money-laundering threat, ahead of more traditional predicate offenses.

Unusual Activity

Wonky isn’t necessarily wrong. A transaction may be different from what a person expects because of important and perfectly acceptable factors: a one-off liquidity event, a change in an investor’s circumstances, a large redemption that is understandable. What differentiates the two is investigation – compliance teams must factor in the customer profile, transactions involved, purpose, source of funds, counterparties, jurisdiction, size and frequency of the transactions and determine if it’s unusual activity or suspicious activity. 

Regulatory Expectations

The overall monitoring framework that a fund manager is required to have should be based on their risk profile, and should be proportionate to their business, customers, products, jurisdictions and transaction flows — but not on a specific technology, or a specific alert threshold, as neither would be suitable for every fund’s risk profile. The key factors are the documented policy, the risk-based controls, appropriate escalation, investigation records, suspicious transaction reporting where appropriate, and periodic review of monitoring effectiveness. The structured AML/KYC Support is relevant to firms constructing or updating these controls as transaction monitoring is only as robust as the CDD information it is based on. The MAS AML/CFT Notices prescribe the requirements for regulated fund managers in Singapore, while the FATF Recommendations (which include risk assessment, CDD, record keeping, suspicious transaction reporting and internal controls) establish the international standard from which they are derived. 

What Transactions Should Be Monitored?

The monitoring required should be tailored to the fund manager’s business model, investors, products, jurisdictions and transactions and not based on a retail banking ‘template ‘. 

Transaction Type	What to Watch
Investor transactions	Subscriptions, capital contributions, transfers, changes to payment instructions, unusual payment sources, third-party payments
Fund transfers	Movement between accounts, transfers involving third parties or unusual counterparties, activity inconsistent with expected fund flow
Redemptions	Unusually large or early redemptions, changed redemption instructions, proceeds sent to unrelated third parties, repeated unusual patterns
Unusual payment patterns	Round-number transactions, rapid fund movement, sudden behavior change, related transactions with no clear rationale
Cross-border transactions	Foreign investors, overseas accounts, higher-risk jurisdictions, unusual corridors, complex payment chains

Investor Transactions

Any subscriptions, capital contributions, transfers, and payments received from investors should be checked against the investor’s profile, source of funds, and expected behavior, focusing on changes to payment instructions or payments received from a source that does not match the investor’s profile. 

Fund Transfers

Any transfers between accounts, monies of investors or funds, and transfers involving third parties or counterparties that are not familiar to parties should be accompanied by a clear understanding of the underlying economic purpose, especially if the amounts of the transactions become significant. 

Redemptions

Large redemption requests or unexpectedly large redemption requests, changes in instructions for redemption payment, proceeds sent to an unrelated third party, and repeated unusual redemption patterns should all be investigated — but the absence of any suspicion should not automatically mean that a redemption is reasonable in size given a legitimate investor’s ordinary reason for making a large redemption. 

Unusual Payment Patterns

The following are more indicative of a pattern across transactions and over time, rather than by individual transactions: repeated round-number transactions, speedy fund transfers, unusual transaction frequencies, sudden shifts in behavior, multiple related transactions, and transactions with no clear economic purpose. 

Cross-Border Transactions

Countries, foreign investors, overseas bank accounts, higher-risk countries, and complex international payment chains all require consideration, but not necessarily as a blanket, and should be considered in relation to other risks and not in isolation. Most fund managers are exposed to cross-border funds, rather than the other way around, and the 2026 FATF/APG assessment showed that the country’s status as a major international financial center, a factor that is directly connected to the country’s money-laundering risk environment, is a key consideration. 

What Red Flags Should Fund Managers Watch For?

Red flags are indicators that should be followed up on, but are not an admission of criminal activity. The following table outlines some of the common indicators that may be relevant to fund managers, but which should always be tailored to the risk assessment of the firm and should not be seen as a checklist. 

Red Flag	Why It Matters	Possible Action
Large transaction inconsistent with investor profile	May indicate unexplained activity	Review customer profile and transaction purpose
Sudden change in payment instructions	Could indicate fraud or account compromise	Conduct enhanced verification
Third-party payment with no clear rationale	May obscure source or destination of funds	Investigate relationship and economic purpose
Rapid movement of funds	May indicate layering or unusual fund flow	Review transaction chain
Repeated unusual redemptions	May indicate abnormal behavior	Analyze historical activity and customer profile
Transactions involving higher-risk jurisdictions	May increase ML/TF risk	Apply risk-based enhanced review
Multiple related transactions	May be structured to avoid attention	Review transactions collectively
Activity inconsistent with stated investment purpose	May indicate unexplained behavior	Obtain clarification and supporting evidence
Unusual beneficiary changes	Could indicate fraud or misuse	Verify independently before processing
Complex transactions without clear economic rationale	May indicate attempts to obscure ownership or flow of funds	Escalate for investigation

How Should Compliance Teams Investigate Transaction Monitoring Alerts?

Step 1: Generate or Identify the Alert

The alerts can be generated by automated rules, thresholds or scenarios, and/or manual review; whichever method triggers the alert should go into the same investigation process. 

Step 2: Review Customer Information

Check KYC information, risk rating, beneficial ownership, expected activity, source of funds, and any previous alerts on the same investor.

Step 3: Review Transaction History

Review past transactions, frequency, amounts, counterparties, geographic exposure and look for patterns that are occurring across the account. 

Step 4: Determine the Context

Ensure a proper explanation is provided, that the transaction fits with the investor’s profile, that supporting documentation exists, and that there has been a material change in behavior. 

Step 5: Escalate Where Appropriate

When a case is deemed to be serious and requires attention by compliance management, the MLRO, senior management, or the appropriate internal committee, it must be passed on accordingly, as documented in the firm’s escalation path. 

Step 6: Document the Decision

Document the reasons, whether the alert was closed or not – no reasons written is as much a governance issue as well as missing an escalation. 

Step 7: Consider Suspicious Transaction Reporting

If there is reasonable cause to suspect any such transactions, the firms are expected to comply with the appropriate Singapore suspicious transaction reporting requirements. Not all alerts fall into this category, and it should be a case-by-case determination, not a blanket rule — this article is not a legal opinion on when a report is necessary. 

Manual vs Automated Transaction Monitoring

Most fund managers don’t stick to either one or the other, but use a mix of both instead. Automating doesn’t eliminate compliance responsibilities; it just makes them more manageable on a day-to-day basis. 

Factor	Manual Monitoring	Automated Monitoring
Scalability	Limited	Higher
Large transaction volumes	Difficult	More suitable
Rule consistency	Depends on reviewer	More consistent
Complex pattern detection	Limited	Stronger potential
Investigation	Human-led	Technology-assisted
Cost	Lower initially	Higher implementation cost
False positives	Can be inconsistent	Requires tuning
Human judgement	Strong	Still required

Automated systems can aid with rule-based monitoring, alerting on thresholds, detecting patterns, assigning scores, triggering cases, and creating audit trails and reporting — but they won’t eliminate the need for a compliance staff member to interpret what an alert represents and determine if the activity is actually suspicious. 

How Can Fund Managers Improve Transaction Monitoring Controls?

Start With a Risk Assessment

Monitoring scenarios should be tailored based on the firm’s risk exposure, not a template created for the industry. Monitoring scenarios need to be customized based on investor types, fund structuring, jurisdictions, products, transaction volume, counterparties, and delivery channels, rather than a template created for the industry. This is where the wider aspects of Risk Management in the firm have the most direct linkage with transaction monitoring. 

Define Clear Monitoring Rules

Rules can be created based on transaction size, frequency, geography, unusual changes, or relationships between transactions. Thresholds are not intended to be viewed as a strict, universal regulatory requirement, but should instead be based on the firm’s own risk profile. 

Calibrate Alerts

Too many false positives cause compliance teams to become overwhelmed and cause a drop in attention to the alerts that are important. The challenge of monitoring is to ensure that it fits the right balance of risk sensitivity with alert volume and the team’s ability to investigate what makes the cut. 

Integrate KYC and Transaction Data

An alert is much more useful if it can be evaluated in the context of KYC information, beneficial ownership, risk ratings, source of funds, and prior activity; a quick view of a transaction without that context is where real problems are going to be lost. 

Strengthen Case Management

The ownership of alerts, time limits in which investigations should be completed, the documentation of escalation procedures, consistency in documentation procedures, approval processes and management reporting are all factors that, in practice, determine whether a monitoring program is working. 

Test and Review Controls

There is no permanent monitoring rules. Periodic review should ascertain that important risks are indeed being identified, that false positive results are not too high, that new typologies have been identified, and that thresholds are still relevant – a Compliance Audit is often the most structured method to test this. The monitoring program is part of a wider fund manager compliance program, and getting this review cycle right is at the heart of it. 

What Should a Fund Manager’s Transaction Monitoring Framework Include?

The practical solution must be proportionate to the size of the firm, its complexity, risk profile and its transaction volume – but the following checklist should cover core components most fund managers should be addressing. 

Control Area	What to Include
Risk assessment	Investor, product, geographic and transaction risks
Monitoring scenarios	Relevant transaction patterns and red flags
Thresholds	Risk-based alert parameters
Data sources	KYC, transaction and customer information
Alert management	Review, investigation and closure procedures
Escalation	Clear internal escalation paths
Reporting	Suspicious transaction reporting process
Documentation	Investigation rationale and decisions
Testing	Periodic effectiveness testing
Governance	Compliance ownership and management oversight
Training	Staff understanding of monitoring and escalation
Review	Periodic recalibration of scenarios and controls

How Does Transaction Monitoring Fit Into Fund Manager Compliance?

Transaction monitoring is more effective when it is part of a broader series of investor onboarding, KYC/CDD, risk assessment, transaction monitoring, alert investigation, escalation, reporting, and continuous monitoring, and is then looped back into the risk assessment process at the beginning. The results of transaction monitoring should regularly feed into customer risk ratings, inform enhanced due diligence requirements, drive improvements to existing monitoring and provide input into compliance reviews, the training and control of the fund manager — in other words, the loop should be broken to act as a true part of a fund manager compliance and not just a disconnected set of checks.

How Can Singapore Fund Managers Strengthen AML Compliance?

Effective AML compliance Singapore requires more than a written policy sitting in a compliance manual. A stronger framework demonstrates risk-based controls, appropriate CDD, ongoing monitoring, suspicious transaction escalation, record-keeping, governance, staff awareness, and periodic control testing in practice, not just on paper.

During the 2026 FATF/APG evaluation, Singapore’s AML/CFT framework was deemed competent and coordinated, and real progress – such as an improvement in overall follow-up status – was observed, but it was also evident that the system must deliver more focused outcomes that are consistently and clearly demonstrated in the future. For individual fund managers, it is not so much a call for more policy documentation, but a call to consider the application of existing controls and whether they are tested and evidenced in day-to-day practice. The information contained in this article is not intended to be legal or regulatory advice and should not be relied upon as such by any firm in their particular situation. 

Common Transaction Monitoring Mistakes

Treating Every Alert as Suspicious

An alert is a “call to action,” not a statement of guilt; otherwise, the entire team would be slowed, and ordinary activity would be considered a crime. 

Using Static Rules Forever

Patterns of risk shift over time as the investor base, products, and typologies shift — scenarios created years ago and never revisited are often lacking what matters today. 

Ignoring Customer Context

The size of the transaction isn’t necessarily a red flag — the same size can be completely normal for one investor, and very unusual for another. 

Excessive False Positives

Too much low-priority information gets in the way of the compliance function, and it can be difficult to distinguish the alerts that truly need to be escalated. 

Poor Documentation

An alert that has been closed without capturing the reason represents a governance and audit deficiency, which will likely come back at a later stage – and at an inopportune moment. 

Monitoring Transactions Without KYC Context

The activity of transactions is not meaningful unless it is contrasted with the known facts about the customer: Transactions are monitored only in part, if at all. 

Relying Entirely on Technology

Automated systems are great at recognizing patterns, but it is important to have human judgment to understand context and escalation decisions. 

When Should Fund Managers Review Their Transaction Monitoring Framework?

Periodic review must not be mutually exclusive, but must be in addition to event-driven review. 

Review Trigger	Why It Matters
Business model changes	Existing scenarios may no longer reflect how the firm actually operates
New fund products launched	New products often carry different transaction and counterparty risks
Investor profile changes	A shifting investor base changes what “expected activity” looks like
New jurisdictions entered	Geographic risk exposure changes with new markets
Transaction volumes increase significantly	Scale can outpace existing rule capacity and investigation resourcing
New payment channels introduced	Each new channel is a potential monitoring gap until scenarios are built for it
Regulatory expectations change	Frameworks should keep pace with evolving MAS and FATF guidance
New typologies emerge	Criminal methods evolve faster than static rule sets
Internal audit identifies weaknesses	Findings should feed directly back into the monitoring framework
Excessive false positives occur	Persistent over-alerting usually signals rules need recalibration

Conclusion

Effective transaction monitoring for fund managers is not simply about generating alerts. Risk assessment, customer context, transaction monitoring, alert investigation, escalation, reporting and continuous review are not individual steps, but one continuous cycle that is tightly linked.

It is safer for Singapore fund managers to have a risk-based monitoring system and one that is well-documented, properly calibrated and integrated into the wider fund manager monitoring regime than one that is limited and operates separately. Firms that are reviewing either the current state of their AML/CFT controls or are seeking AML/CFT Ongoing Support for controls, risk management, compliance reviews or staff training may be interested in comparing existing controls with the practices above.