Most owner-managed businesses in Pakistan assume anti-money-laundering rules are a banking problem. They are not, and have not been for some years.

The framework reaches designated non-financial businesses and professions, and it reaches every company through beneficial ownership and record-keeping obligations. The first many businesses hear of it is when a bank freezes an account or the registrar issues a notice.

Who is caught

Beyond banks and financial institutions, obligations extend to categories of designated non-financial businesses and professions — which in Pakistan include real estate agents, dealers in precious metals and stones, and certain professional service providers, with regulators designated for each sector.

Separately, and applying much more widely, companies registered with the SECP carry obligations around identifying and recording ultimate beneficial owners.

If you are unsure whether your sector is designated, that is itself worth establishing. "We assumed it did not apply to us" is not a defence, and the cost of finding out is small.

Beneficial ownership: the obligation most companies miss

Companies are required to obtain, maintain and report information on their ultimate beneficial owners — the natural persons who ultimately own or control the company, looked at through intermediate holding structures rather than stopping at the first corporate shareholder.

Two practical points.

Nominee arrangements. Shares held by one person "for" another are common in Pakistan and are precisely what these rules are designed to surface. If your register does not reflect the real position, that needs advice, not silence.

Keep it current. The obligation is ongoing, not a one-off filing. Changes must be recorded and reported.

Non-compliance carries penalties and — more disruptive in practice — it obstructs banking, because institutions increasingly require the beneficial ownership position to be documented before they will onboard or continue a relationship.

What proportionate compliance looks like

An SME does not need a bank's compliance department. It needs a programme proportionate to its risk, and — critically — evidence that it has one.

A written policy. Short, specific to your business, and actually followed. A downloaded template nobody has read is worse than none, because it establishes the standard you failed to meet.

Customer due diligence. Identify who you are dealing with, verify it, and keep the records: identity documents, corporate documents, and for companies, the beneficial owners.

Enhanced diligence for higher-risk relationships — politically exposed persons, complex ownership structures, high-risk jurisdictions, and transactions that do not fit the customer's profile.

Ongoing monitoring, so that the file reflects the relationship as it is now rather than as it was at onboarding.

Record keeping for the required retention period. Records are what demonstrate compliance; without them you cannot prove you did what you did.

A responsible person, named, who owns this.

Reporting. Where a transaction gives rise to suspicion, the framework requires reporting to the Financial Monitoring Unit — and imposes a prohibition on tipping off the customer. This is the obligation most easily breached by a well-meaning person explaining to a client why a payment is delayed.

Training, recorded. The record matters as much as the training.

Cash, and why it is the core exposure

Much legitimate Pakistani business is conducted in cash, and this is where honest businesses run into difficulty.

Cash-based trading makes source of funds hard to evidence, and it is the primary reason accounts of genuine businesses are frozen — not because anything improper occurred, but because nobody can demonstrate that it did not. See what to do when your bank account is frozen.

Moving receipts through banking channels is the single most effective step a smaller business can take. It supports the AML position, the tax position, and the evidential position in any commercial dispute.

Why this matters commercially

Beyond penalties, the consequences that actually bite are commercial:

  • Banking access. Losing or being unable to open accounts is existential
  • Counterparties. Larger customers, particularly with foreign parents, now conduct diligence on their suppliers
  • Investment and sale. Beneficial ownership and AML records are examined in any diligence exercise, and gaps depress value or stall transactions — see going into business with a Pakistani partner
  • Cross-border payments, where correspondent banks apply their own standards

Practical first steps

Establish whether your sector is designated and who your regulator is. File and maintain the beneficial ownership position accurately, including any nominee arrangements. Write a short policy that reflects what you actually do. Start keeping identity and diligence records on customers and significant suppliers. Name someone responsible. And move receipts into banking channels.

None of that is expensive. Doing none of it is.

How the firm can help

We advise on the scope of AML obligations for a particular business, prepare proportionate policies and diligence procedures, and deal with beneficial ownership determination and filing — including where nominee or informal holding arrangements need to be regularised.

We also act where something has gone wrong: regulatory inquiries, frozen accounts, and investigations. See regulatory and compliance.

If you are unsure whether any of this applies to your business, contact the firm — establishing that is a short conversation, and it is considerably cheaper than a notice.