Regulations Governing Anti-Money Laundering of Financial Institutions Article 9
Financial institutions shall comply with the following provisions for ongoing monitoring of accounts or transactions:1. A financial institution shall use a database to consolidate basic information and transaction information on all customers for inquiries by the head office and branches for AML/CFT purpose so as to strengthen the institution’s capability of account and transaction monitoring. A financial institution shall also establish internal control procedures for requests and inquiries regarding customer information made by various units and shall exercise care to ensure the confidentiality of the information.2. A financial institution shall establish policies and procedures for account and transaction monitoring based on a risk-based approach and utilize information system to assist in the detection of suspicious ML/TF transactions.3. A financial institution shall review its policies and procedures for account and transaction monitoring based on AML/CFT regulations, nature of customers, business scale and complexity, ML/TF trends and related information gathered from internal and external sources, and its internal risk assessment results, and update those policies and procedures periodically.4. The policies and procedures for account and transaction monitoring of a financial institution shall include at least complete ML/TF monitoring indicators, parameters setting, threshold amounts, alerts and operation procedures of monitoring, the reviewing procedures for monitored cases and reporting standards, and shall be documented.5. Complete ML/TF monitoring indicators mentioned in the preceding subparagraph shall, based on the business nature of a financial institution, include the suspicious indicators published by the relevant associations and the additional ones developed by the financial institution in reference to its ML/TF risk assessment or daily transaction information. With regard to transfer of funds between e-payment accounts, a financial institution should, when carrying out the monitoring, take into consideration all information received on both accounts to determine whether to file a suspicious ML/TF transaction report.6. A financial institution shall document its operation of ongoing account or transaction monitoring and maintain the records in accordance with Article 12.
中文原文 金融機構防制洗錢辦法第9條
金融機構對帳戶或交易之持續監控，應依下列規定辦理：
一、金融機構應逐步以資訊系統整合全公司（社）客戶之基本資料及交易資料，供總（分）公司（社）進行基於防制洗錢及打擊資恐目的之查詢，以強化其帳戶或交易監控能力。
對於各單位調取及查詢客戶之資料，應建立內部控制程序，並注意資料之保密性。
二、金融機構應依據風險基礎方法，建立帳戶或交易監控政策與程序，並利用資訊系統，輔助發現疑似洗錢或資恐交易。
三、金融機構應依據防制洗錢與打擊資恐法令規範、其客戶性質、業務規模及複雜度、內部與外部來源取得之洗錢與資恐相關趨勢與資訊、金融機構內部風險評估結果等，檢討其帳戶或交易監控政策及程序，並定期更新之。
四、金融機構之帳戶或交易監控政策及程序，至少應包括完整之監控型態、參數設定、金額門檻、預警案件與監控作業之執行程序與監控案件之檢視程序及申報標準，並將其書面化。
五、前款完整之監控型態應依其業務性質，納入各同業公會所發布之態樣，並應參照金融機構本身之洗錢及資恐風險評估或日常交易資訊，增列相關之監控態樣。
其中就電子支付帳戶間款項移轉，金融機構監控時應將收受兩端之所有資訊均納入考量，以判定是否申報疑似洗錢或資恐交易。
六、金融機構執行帳戶或交易持續監控之情形應予記錄，並依第十二條規定之期限進行保存。
一、金融機構應逐步以資訊系統整合全公司（社）客戶之基本資料及交易資料，供總（分）公司（社）進行基於防制洗錢及打擊資恐目的之查詢，以強化其帳戶或交易監控能力。
對於各單位調取及查詢客戶之資料，應建立內部控制程序，並注意資料之保密性。
二、金融機構應依據風險基礎方法，建立帳戶或交易監控政策與程序，並利用資訊系統，輔助發現疑似洗錢或資恐交易。
三、金融機構應依據防制洗錢與打擊資恐法令規範、其客戶性質、業務規模及複雜度、內部與外部來源取得之洗錢與資恐相關趨勢與資訊、金融機構內部風險評估結果等，檢討其帳戶或交易監控政策及程序，並定期更新之。
四、金融機構之帳戶或交易監控政策及程序，至少應包括完整之監控型態、參數設定、金額門檻、預警案件與監控作業之執行程序與監控案件之檢視程序及申報標準，並將其書面化。
五、前款完整之監控型態應依其業務性質，納入各同業公會所發布之態樣，並應參照金融機構本身之洗錢及資恐風險評估或日常交易資訊，增列相關之監控態樣。
其中就電子支付帳戶間款項移轉，金融機構監控時應將收受兩端之所有資訊均納入考量，以判定是否申報疑似洗錢或資恐交易。
六、金融機構執行帳戶或交易持續監控之情形應予記錄，並依第十二條規定之期限進行保存。