Category: Beneficial Ownership
Trust and Company Service Provider
Also known as: TCSP, Trust or Company Service Provider, Trust and company service providers
Simply put
A Trust or Company Service Provider (TCSP) is a business or individual that provides services related to setting up, managing, or administering companies and trusts on behalf of clients. These services can include forming companies, acting as or arranging for a person to act as a director or trustee, and providing registered office or similar addresses. Because these services can be misused to obscure ownership or move funds, TCSPs are generally treated as a regulated sector for anti-money laundering purposes in many jurisdictions.
Formal definition
A Trust and Company Service Provider (TCSP) is a person or entity that, by way of business, provides one or more specified services relating to the formation, management, or administration of companies, trusts, and similar legal arrangements. Typical in-scope services include forming companies or other legal persons; acting as (or arranging for another person to act as) a director, secretary, partner, or trustee; providing a registered office, business address, correspondence, or administrative address; and acting as (or arranging for another to act as) a nominee shareholder. The precise definition and the enumerated list of qualifying services are set out in the applicable national regime rather than by a single universal standard, for example, under the UK Money Laundering Regulations a TCSP is defined by reference to the specific services provided by way of business. The FATF Recommendations identify TCSPs as one of the categories of Designated Non-Financial Businesses and Professions (DNFBPs) and recommend a risk-based approach to their supervision and AML/CFT obligations, but FATF standards are non-binding recommendations that are implemented through domestic law. Whether a particular firm or individual falls within scope depends on the qualifying services, the 'by way of business' test, and the definitions and thresholds of the relevant jurisdiction; exact criteria should be confirmed against the applicable regulation.
Why it matters
TCSPs sit at the point where legal persons and legal arrangements are created and administered, which makes them structurally significant to financial crime risk. The same services that are entirely legitimate, forming companies, providing registered office addresses, and arranging directors, trustees, or nominee shareholders, can also be misused to obscure who ultimately owns or controls an asset, or to insert distance between an individual and the movement of funds. For this reason, the FATF Recommendations identify TCSPs as one category of Designated Non-Financial Businesses and Professions (DNFBPs) and recommend that they be subject to a risk-based approach to AML/CFT supervision and obligations. It is important to note that FATF Recommendations are non-binding standards implemented through domestic law, so the specific obligations a TCSP faces depend on the jurisdiction in which it operates.
Who it's relevant to
TCSP firms and practitioners
Businesses and individuals that form companies, act as or arrange directors, trustees, or nominee shareholders, or provide registered office and similar addresses should assess whether their activities bring them within the definition of a TCSP under their local regime. Where they are in scope, they are generally treated as an obliged entity for AML purposes and subject to the resulting supervisory and compliance requirements. The precise services in scope and any 'by way of business' test should be confirmed against the applicable regulation.
AML compliance officers and MLROs
Compliance staff within TCSPs are responsible for implementing the AML/CFT measures required by their jurisdiction, which are designed to detect, deter, and mitigate the risk that company- and trust-formation services are misused to obscure ownership or move funds. Because the risk profile of TCSP services can be significant, a risk-based approach, consistent with the FATF Recommendations as implemented in domestic law, is central to how these obligations are typically applied.
Supervisors and regulators
Bodies responsible for overseeing DNFBPs are relevant to TCSPs because the FATF Recommendations call for TCSPs to be supervised on a risk-based basis. The identity of the supervisor and the exact obligations vary by jurisdiction, since these standards are implemented through national law rather than a single universal rule.
Financial institutions dealing with TCSP-formed structures
Banks and other institutions that onboard companies, trusts, or arrangements created or administered by TCSPs have an interest in understanding how such structures are formed, given that these services can be used to obscure beneficial ownership. This context can inform their own customer due diligence and ownership-identification measures, though it does not by itself indicate wrongdoing.
Inside TCSP
Definition and role
A Trust and Company Service Provider (TCSP) is a category of obliged entity (or 'designated non-financial business and profession') that provides services related to the formation, administration, and management of companies, trusts, and similar legal arrangements. The FATF Recommendations identify TCSPs as a distinct category subject to AML/CFT obligations, though the precise scope of covered activities is defined by each implementing jurisdiction's law.
Covered services
TCSP activities typically include: forming companies or other legal persons; acting as (or arranging for another to act as) a director, secretary, partner, or similar position; providing a registered office, business address, correspondence, or administrative address for a company or arrangement; acting as (or arranging for another to act as) a trustee of an express trust or performing an equivalent function; and acting as (or arranging for another to act as) a nominee shareholder for another person. The exact list of in-scope services varies by jurisdiction and should be confirmed against the applicable regulation.
AML/CFT obligations
Where a person or firm falls within the TCSP definition under applicable law, they generally become subject to core AML/CFT requirements comparable to other obliged entities. These typically include customer due diligence (CDD), enhanced due diligence (EDD) in higher-risk situations, ongoing monitoring, record-keeping, and the filing of suspicious activity or suspicious transaction reports. The specific obligations, thresholds, and supervisory arrangements depend on the implementing regime.
Beneficial ownership relevance
Because TCSPs are involved in creating and administering legal persons and arrangements, they occupy a position relevant to beneficial ownership transparency. Structures they establish can be used to obscure the distinction between legal ownership and beneficial ownership, which is a recognised money laundering and terrorist financing risk factor. TCSPs are generally expected to identify and verify the beneficial owners of the entities and arrangements they service, subject to jurisdictional requirements.
Supervision and jurisdictional variation
TCSPs are supervised for AML/CFT purposes under the relevant national framework, but the supervisory body and the precise perimeter of regulated activity differ across regimes. In the UK, for example, TCSP activity is addressed under the Money Laundering Regulations. In the EU, relevant obligations flow from the AML Directives and the AML Regulation. Some jurisdictions capture TCSP services within broader professional categories (such as lawyers or accountants) rather than as a standalone sector. Exact scope and supervisor should be confirmed against local law.
Common questions
Answers to the questions practitioners most commonly ask about TCSP.
Is a TCSP the same thing as a company that simply registers businesses, so that only incorporation agents need to worry about these obligations?
No. The term TCSP covers a broader range of activities than company formation alone. Under the FATF Recommendations, which treat TCSPs as a category of designated non-financial businesses and professions (DNFBPs), the definition typically extends to persons or firms that, by way of business, form companies or other legal persons; act as (or arrange for another person to act as) a director, secretary, partner, or similar position; provide a registered office, business address, or accommodation address; act as (or arrange for another person to act as) a trustee of an express trust or a similar function; or act as (or arrange for another person to act as) a nominee shareholder. Whether a particular activity brings a firm within scope depends on how the applicable regime transposes these standards, so the precise boundaries should be confirmed against the relevant national law rather than assumed from the incorporation function alone.
Because TCSPs are not banks, are they exempt from customer due diligence and other AML obligations?
Generally no. Where a firm falls within the definition of a TCSP under the applicable regime, it is typically treated as an obliged entity (or, in FATF terminology, a DNFBP) subject to AML/CFT requirements broadly comparable in nature to those imposed on financial institutions, even though the operational specifics differ. These commonly include customer due diligence, ongoing monitoring, record-keeping, and suspicious activity or suspicious transaction reporting. The exact obligations, thresholds, and supervisory arrangements vary by jurisdiction and should be verified against the instrument that applies locally, such as the EU AML framework, the UK Money Laundering Regulations, or the relevant national implementation of the FATF standards. Not being a bank does not, of itself, place a TCSP outside the AML perimeter.
How does a TCSP identify the beneficial owner when it is asked to provide nominee or trustee services?
When a TCSP acts as a nominee shareholder, trustee, or director, or arranges for others to do so, the beneficial ownership analysis generally focuses on the natural person(s) who ultimately own or control the customer or on whose behalf a transaction is conducted, which is distinct from the legal ownership recorded on the register. In a trust context, due diligence typically requires the TCSP to identify the settlor, the trustee(s), any protector, the beneficiaries or class of beneficiaries, and any other natural person exercising ultimate control. Because nominee arrangements can obscure the underlying controller, TCSPs are generally expected to look through the legal form to the individual behind it. The specific identification and verification requirements depend on the applicable regime and should be confirmed against it.
What customer due diligence measures should a TCSP apply, and when might enhanced due diligence be appropriate?
A TCSP is typically expected to apply customer due diligence (CDD) on a risk-sensitive basis, which generally includes identifying and verifying the customer, identifying the beneficial owner, understanding the purpose and intended nature of the business relationship, and conducting ongoing monitoring. Enhanced due diligence (EDD) may be required where higher-risk factors are present, for example involvement of a politically exposed person, connections to higher-risk jurisdictions, unusually complex or opaque ownership structures, or other indicators identified through the firm's risk assessment. These measures are intended to detect, deter, and manage financial crime risk rather than to guarantee its prevention. The trigger conditions and the precise content of standard, simplified, and enhanced measures vary by jurisdiction and should be confirmed against the applicable regulation.
How should a TCSP handle a suspicion of money laundering arising from a client engagement?
Where a TCSP forms a suspicion, or has reasonable grounds to suspect, that funds or property are linked to money laundering or another predicate offence, it is generally required to report through the mechanism prescribed by its jurisdiction, whether that is described as a suspicious activity report (SAR), a suspicious transaction report (STR), or an equivalent, and to file it with the designated financial intelligence unit or competent authority. Many regimes also impose restrictions on disclosing that such a report has been made, commonly referred to as tipping-off prohibitions. It is important to note that making a report reflects a suspicion for regulatory purposes and does not, of itself, establish that any offence has been committed. The precise reporting channel, timing, and protections available should be confirmed against the applicable law.
What record-keeping practices are generally expected of a TCSP?
TCSPs are typically expected to retain records of the CDD information and documents obtained on customers and beneficial owners, together with records of the services provided and, where relevant, supporting transaction and relationship documentation. Such records are generally intended to be sufficient to reconstruct engagements and to support supervisory review or a competent authority's inquiries. Retention periods and the precise scope of records to be kept vary between regimes, and specific durations should be confirmed against the applicable regulation rather than assumed. Record-keeping is an operational control that supports, but does not by itself constitute, an effective AML program.
Common misconceptions
A TCSP and a law firm or accountancy practice are entirely separate regulatory categories.
TCSP is defined by the activity performed, not solely by the type of firm. In many jurisdictions, lawyers, accountants, and other professionals who provide company formation, trustee, nominee, or registered-office services fall within TCSP-type obligations when carrying out those specific activities. Whether such services are regulated as a standalone TCSP sector or captured within another professional category depends on the jurisdiction.
Because TCSPs handle legal ownership arrangements, identifying the legal owner satisfies their due diligence obligations.
Legal ownership and beneficial ownership are distinct concepts. TCSPs are generally expected not only to establish who legally owns or controls an entity but also to identify and verify the natural persons who are the beneficial owners. Structures TCSPs administer can be misused precisely to separate legal from beneficial ownership, so verifying only legal ownership does not meet the typical CDD expectation.
TCSPs are subject to a single, uniform set of global obligations.
The FATF Recommendations set international standards but are not binding law; obligations arise from each jurisdiction's implementing legislation. The scope of covered services, applicable thresholds, the responsible supervisor, and enforcement all vary between regimes, so a TCSP's precise duties must be assessed under the law of the jurisdiction in which it operates.
Best practices
Determine whether your firm's activities fall within the TCSP definition under the specific law of each jurisdiction in which you operate, rather than assuming a uniform global perimeter, and confirm the responsible supervisor and exact scope of covered services against the applicable regulation.
Apply risk-based CDD that identifies and verifies the beneficial owners, not merely the legal owners, of every company or arrangement you form or administer, applying enhanced due diligence where higher-risk factors are present.
Conduct ongoing monitoring of client relationships and the entities you service, rather than treating due diligence as a one-time formation exercise, so that changes in ownership, control, or activity can be reviewed.
Maintain accurate and retrievable records of formation, administration, nominee, and trustee arrangements to support beneficial ownership transparency and to meet record-keeping obligations under the applicable regime.
Establish clear internal procedures for identifying and reporting suspicious activity through the required suspicious activity or suspicious transaction reporting channel, recognising that filing a report reflects suspicion and does not itself establish wrongdoing.
Treat controls over nominee shareholder, nominee director, and complex structuring services as measures to detect, deter, and mitigate misuse of legal persons and arrangements, without assuming that any single control eliminates financial crime risk.