compliance

A Complete Guide to PMLA Compliance for Corporate Entities

Learn what internal controls and KYC reporting companies must implement to prevent money laundering under PMLA 2002.

Alok K Acharya & Associates
3 August 2026·Updated 3 August 20265 min read
Need Professional Assistance?Explore our related service offering

A Complete Guide to PMLA Compliance for Corporate Entities#

Historically, corporate compliance in India was viewed primarily through the lens of the Companies Act or the Income Tax Act. However, in recent years, the Prevention of Money Laundering Act, 2002 (PMLA) has emerged as the most formidable weapon in the hands of the Enforcement Directorate (ED).

A single violation of PMLA can lead to the immediate attachment of corporate assets and non-bailable arrests of directors. It is no longer just a banking regulation; every corporate entity must proactively implement anti-money laundering (AML) controls.

The Scope of PMLA for Corporates#

Money laundering involves disguising the illicit origin of money (the "proceeds of crime") to make it appear legitimate. Under PMLA, "proceeds of crime" is defined extremely broadly. It includes money generated not just from drugs or terrorism, but from everyday corporate crimes like tax evasion, corporate fraud (Section 447 of the Companies Act), or insider trading.

If your company unknowingly receives funds from a vendor who committed tax fraud, your company can be dragged into a PMLA investigation for possessing "proceeds of crime."

Essential Internal Controls & KYC Reporting#

To shield the company and its Directors from PMLA scrutiny, corporates must implement a rigorous AML framework:

  1. Beneficial Ownership (BO) Identification: You cannot just do business with a shell company. You must pierce the corporate veil and identify the Ultimate Beneficial Owner (UBO)—the actual human being who owns more than 10% (for companies) or 15% (for trusts) of the entity you are dealing with.
  2. Enhanced Due Diligence (EDD): For transactions involving Politically Exposed Persons (PEPs) or entities from high-risk jurisdictions (like tax havens), standard KYC is insufficient. EDD requires verifying the actual source of the funds before accepting the contract.
  3. Suspicious Transaction Reports (STR): Certain entities (like NBFCs, real estate agents, and casinos) are defined as "Reporting Entities" under PMLA. They are legally mandated to file an STR with the Financial Intelligence Unit (FIU-IND) within 7 days of identifying a suspicious transaction.

The Burden of Proof#

The most dangerous aspect of PMLA is the reversal of the burden of proof. Under normal criminal law, you are innocent until proven guilty. Under Section 24 of the PMLA, if you are found in possession of the proceeds of crime, you are presumed guilty of money laundering until you can prove your innocence.

Robust, documented KYC policies are the only defense a corporate entity has against this draconian presumption.

Need Help With Your Tax Filing?

The firm can help you file your ITR accurately, review applicable deductions, and ensure compliance. Get started in minutes.

Was this article helpful?

AK

Alok K Acharya & Associates

Chartered Accountants

Chartered Accountants

Related Articles

Need CA help?

Talk to the firm

Get Started