MAS-Regulated Calling for Singapore Financial Firms

The MAS Regulatory Landscape for Financial Communications

The Monetary Authority of Singapore (MAS) is Singapore's central bank and integrated financial regulator. MAS regulates all financial institutions operating in Singapore, including banks, insurers, capital markets intermediaries, financial advisers, and payment service providers. Its regulatory approach to telephone communications combines prescriptive rules (Notices and Regulations) with principles-based expectations (Guidelines and Circulars).

Singapore's position as a global financial center — with over 200 banks, 700 capital markets intermediaries, and 250 insurance companies operating in the jurisdiction — makes MAS communication compliance a priority for international financial groups. In 2025, MAS imposed SGD $28.7 million in financial penalties, with communication and record-keeping failures contributing to 41% of enforcement actions.

MAS Notice SFA 04-N16: The Core Recording Obligation

Scope

MAS Notice SFA 04-N16 (Notice on Recording of Communications) applies to holders of Capital Markets Services (CMS) licenses and requires the recording and retention of communications relating to specified activities.

flowchart LR
    CALLER(["Client or Lead"])
    subgraph TEL["Telephony"]
        SIP["Twilio SIP and PSTN"]
    end
    subgraph BRAIN["Financial Services AI<br/>Agent"]
        STT["Streaming STT<br/>Deepgram or Whisper"]
        NLU{"Intent and<br/>Entity Extraction"}
        TOOLS["Tool Calls"]
        TTS["Streaming TTS<br/>ElevenLabs or Rime"]
    end
    subgraph DATA["Live Data Plane"]
        CRM[("CRM and Notes")]
        CAL[("Calendar and<br/>Schedule")]
        KB[("Knowledge Base<br/>and Policies")]
    end
    subgraph OUT["Outcomes"]
        O1(["KYC pre-fill done"])
        O2(["Funding instructions sent"])
        O3(["Compliance officer<br/>escalation"])
    end
    CALLER --> SIP --> STT --> NLU
    NLU -->|Lookup| TOOLS
    TOOLS <--> CRM
    TOOLS <--> CAL
    TOOLS <--> KB
    NLU --> TTS --> SIP --> CALLER
    NLU -->|Resolved| O1
    NLU -->|Schedule| O2
    NLU -->|Escalate| O3
    style CALLER fill:#f1f5f9,stroke:#64748b,color:#0f172a
    style NLU fill:#4f46e5,stroke:#4338ca,color:#fff
    style O1 fill:#059669,stroke:#047857,color:#fff
    style O2 fill:#0ea5e9,stroke:#0369a1,color:#fff
    style O3 fill:#f59e0b,stroke:#d97706,color:#1f2937

Specified activities include:

• Dealing in securities
• Trading in futures contracts
• Leveraged foreign exchange trading
• Advising on corporate finance
• Fund management
• Securities financing
• Providing credit rating services

Recording Requirements

Under Notice SFA 04-N16:

1. All communications (telephone and electronic) relating to specified activities must be recorded
2. Recording must cover both the CMS licensee's representatives and the counterparties
3. Mobile communications used for business purposes must also be recorded — MAS specifically addressed this in a 2023 circular, requiring firms to implement mobile recording solutions or prohibit the use of personal devices for business communications
4. Recording systems must be reliable, with documented business continuity arrangements

Retention Period

• Minimum 5 years from the date of recording
• Recordings must be retained in a format that allows retrieval and playback
• MAS may require retention beyond 5 years in connection with ongoing investigations or enforcement actions

Accessibility Requirements

• Recordings must be retrievable within a reasonable time upon MAS request
• MAS inspection teams typically expect production within 2-3 business days during on-site inspections
• Firms must maintain indexing systems that enable search by date, time, participant, instrument, and account reference

MAS Guidelines on Fair Dealing (FAC-G01)

Impact on Telephone Sales and Advice

MAS Guidelines on Fair Dealing establish five fair dealing outcomes that directly impact telephone communications:

Outcome 1: Customers have confidence that they deal with financial institutions where fair dealing is central to the corporate culture.

• Telephone sales scripts must prioritize customer interests over product pushing
• Compliance monitoring must verify that representatives do not use high-pressure sales tactics

Outcome 2: Financial institutions offer products and services that are suitable for their target customer segments.

• Product recommendations made during calls must be appropriate for the customer's risk profile, investment objectives, and financial situation
• Representatives must conduct and document a suitability assessment before recommending products by telephone

Outcome 3: Financial institutions have competent representatives who provide customers with quality advice and appropriate recommendations.

• Representatives must hold relevant qualifications (e.g., CMFAS certification for capital markets, BCP certification for insurance)
• Ongoing competency monitoring must include review of telephone interactions

Outcome 4: Customers receive clear, relevant, and timely information to make informed financial decisions.

• Product features, risks, fees, and terms must be clearly communicated during telephone calls
• Information must be presented in a balanced manner — benefits and risks given equal emphasis
• Complex products require enhanced disclosure during telephone sales

Outcome 5: Financial institutions handle customer complaints in an independent, effective, and prompt manner.

• Complaint calls must be recorded and escalated according to documented procedures
• Complaint resolution timelines must be tracked and reported

Personal Data Protection Act 2012 (PDPA) for Call Recording

Consent Requirements

The PDPA requires organizations to obtain consent before collecting, using, or disclosing personal data, including call recordings:

• Notification obligation: Organizations must inform individuals of the purposes for which their personal data will be collected and used
• Consent obligation: Consent must be obtained before or at the time of collection
• Deemed consent provisions: Since the 2021 PDPA amendments, consent may be deemed in certain business contexts where it is reasonably necessary and the individual has been notified

Practical Implementation for Call Recording

For MAS-regulated firms, the typical approach is:

1. Pre-call notification: Automated announcement stating: "This call is recorded for regulatory compliance, quality assurance, and training purposes. By continuing this call, you consent to the recording."
2. Written notification: Privacy policy and account terms include call recording notification
3. Opt-out limitation: For MAS-mandated recordings, inform the customer that recording is a regulatory requirement and cannot be opted out of for regulated activities — the alternative is to communicate via a channel that does not require recording (e.g., visiting a branch)

PDPA Penalties

The Personal Data Protection Commission (PDPC) can impose financial penalties of up to SGD $1 million per breach. The 2021 amendments introduced a higher penalty tier of 10% of annual turnover for organizations with annual turnover exceeding SGD $10 million.

Notable call recording-related PDPC enforcement:

• A financial advisory firm was fined SGD $120,000 in 2024 for failing to secure call recordings containing customer personal data
• An insurance company received a SGD $85,000 penalty for retaining call recordings beyond the notified purpose and retention period

Do Not Call (DNC) Registry Compliance

Singapore's DNC Registry

The PDPA (Part IX) establishes Singapore's Do Not Call Registry, which financial firms must check before making telemarketing calls:

• No Call Register: Individuals who do not wish to receive telemarketing calls
• No Text Message Register: Individuals who do not wish to receive telemarketing text messages
• No Fax Register: Individuals who do not wish to receive telemarketing faxes

Obligations for Financial Firms

1. Check the DNC Registry within 30 days before each telemarketing call
2. Maintain DNC checking records for at least 3 years
3. Clear existing relationship exception: Firms may contact existing customers about products similar to those they already hold, provided the customer has not opted out
4. Penalties: Up to SGD $1 million per breach (PDPC administrative penalties)

Exemptions for Regulatory Calls

Not all calls from financial institutions are telemarketing calls. The following are typically exempt from DNC requirements:

• Calls relating to existing account servicing
• Calls required by regulation (e.g., margin calls, risk notifications)
• Calls to provide information requested by the customer
• Calls relating to outstanding contractual obligations

AI Voice Agents and MAS Regulatory Expectations

MAS Technology Risk Management Guidelines

MAS's Technology Risk Management (TRM) Guidelines apply to AI voice agents used by financial institutions:

• Section 6.1 (IT Project Management): AI voice agent deployments must follow documented project management, testing, and approval procedures
• Section 9 (IT Service Management): AI voice agents are IT services subject to availability, capacity, and incident management requirements
• Section 11 (Data Protection): Customer data processed by AI voice agents must be protected in accordance with data classification policies

MAS Guidelines on Use of Artificial Intelligence (2024)

MAS's Principles for the Ethical Use of AI (expanded in 2024) establish expectations for AI systems in financial services:

• Fairness: AI voice agents must not discriminate based on protected characteristics (race, gender, age, language proficiency)
• Ethics and Accountability: Financial institutions remain responsible for decisions made or influenced by AI voice agents — a recommendation made by an AI voice agent is treated identically to a recommendation made by a human representative for regulatory purposes
• Transparency: Customers must be informed when they are interacting with an AI voice agent rather than a human
• Robustness: AI voice systems must be resilient to adversarial inputs and maintain accuracy under diverse conditions (accents, background noise, language switching)

Practical Implications for AI Voice Deployments

Financial institutions deploying AI voice agents in Singapore should:

1. Disclose AI interaction: Clearly inform callers at the start of each interaction that they are speaking with an AI system
2. Provide human escalation: Ensure callers can request transfer to a human agent at any point
3. Record AI interactions: All AI voice agent interactions must be recorded and retained under the same framework as human agent calls
4. Monitor AI recommendations: Suitability and fair dealing requirements apply equally to AI-generated advice
5. Test for bias: Regularly test AI voice agents for discriminatory outcomes across customer demographics

CallSphere's AI voice agent platform is designed with MAS compliance built in, including mandatory AI disclosure announcements, configurable human escalation triggers, complete interaction recording, and bias monitoring dashboards.

MAS Inspection Readiness

What MAS Inspectors Look For

During on-site inspections, MAS examination teams typically:

• Request sample call recordings from specific date ranges, products, or representatives
• Review the call recording system architecture including failover and redundancy arrangements
• Examine compliance monitoring reports showing the volume and outcomes of call reviews
• Check staff training records for evidence of ongoing competency development
• Review complaint handling records including how telephone complaints were recorded and resolved
• Test retrieval capabilities by requesting specific recordings and measuring response time
• Review DNC Registry checking procedures and records

Common Inspection Findings

Based on published MAS enforcement actions and industry feedback, common findings include:

• Gap periods: Recording system outages where calls were not captured
• Mobile communication gaps: Business discussions on personal mobile devices without recording
• Incomplete metadata: Recordings without adequate indexing (missing account references, participant identification)
• Delayed retrieval: Inability to produce requested recordings within the expected timeframe
• Insufficient monitoring coverage: QA programs reviewing less than 5% of total call volume
• Training gaps: Representatives unable to articulate fair dealing obligations or suitability assessment requirements

Frequently Asked Questions

Does MAS require recording of all financial services calls in Singapore?

MAS Notice SFA 04-N16 requires recording of communications relating to specified capital markets activities. For other financial services (banking, insurance, financial advisory), recording requirements are derived from the broader obligation to maintain adequate records and internal controls under the respective MAS Acts and Notices. Best practice for all MAS-regulated entities is to record client-facing calls and retain them for a minimum of 5 years.

Can Singapore financial firms use AI voice agents for customer interactions?

Yes, but with conditions. MAS's AI guidelines require transparency (disclosing the AI nature of the interaction), fairness (non-discriminatory treatment), accountability (the firm remains responsible for AI actions), and robustness (reliable performance). All AI voice interactions must be recorded and retained under the same framework as human interactions, and customers must be able to escalate to human agents.

What are the penalties for non-compliance with MAS calling requirements?

MAS has a range of enforcement tools: reprimands, directions, composition offers (fines), prohibition orders (banning individuals from the industry), and revocation of licenses. Financial penalties under the Securities and Futures Act can reach SGD $1 million per offense for individuals and SGD $2 million for corporations. PDPA violations carry additional penalties of up to SGD $1 million or 10% of annual turnover. In severe cases involving fraud or market manipulation, criminal penalties including imprisonment apply.

How should firms handle calls where the customer switches between English and another language?

Singapore's multilingual environment requires that recording and monitoring systems accommodate language switching. Recordings must capture the full conversation regardless of language. Compliance monitoring programs should include reviewers with relevant language capabilities (Mandarin, Malay, Tamil, and other common languages). AI-powered transcription and analysis tools should support multilingual processing. CallSphere's platform supports 50+ languages with automatic language detection and multilingual transcript generation.