Vad är ett skalbolag inom penningtvätt och vilka tecken ska man leta efter?

Ett skalbolag saknar reell verksamhet och kan användas för att dölja ägande eller transaktionsflöden. Vanliga tecken är postboxadress, avsaknad av personal, oklar verksamhetsbeskrivning och betalningar som snabbt vidareförs mellan närstående bolag.

När måste skärpt kundkännedom tillämpas för bolag som kan vara skalbolag?

Skärpt kundkännedom ska tillämpas när risknivån är förhöjd och indikatorer för skalbolag förekommer enligt den allmänna riskbedömningen. Det omfattar fördjupad verifiering av identitet, verklig huvudman och affärsmodell samt krav på ytterligare underlag.

Vad är skillnaden mellan ett holdingbolag och ett skalbolag i AML-arbete?

Ett holdingbolag kan ha legitima syften som koncernstyrning och kapitalallokering, medan ett skalbolag typiskt saknar substans och används som fasad. I AML bedöms skillnaden utifrån faktisk funktion och risk, exempelvis om det finns verksamhet, styrning och intäkter eller endast formella strukturer.

Shell company

Read more about what a shell company entails and how the concept is used in anti money laundering.

Glossary
Shell company

Explained – what does ‘shell company’ mean?

A shell company is an entity with no real operations, substance or staff, used as a legal facade. In anti money laundering contexts, shell companies are exploited to conceal true ownership, complicate transaction flows and break audit trails. A lawyer specialised in the Anti-Money Laundering Act can assist in developing processes and procedures for compliance where shell companies form part of the risk indicators. The term itself is not a formal legal definition in Swedish law but appears in risk assessments, supervisory practice and guidance linked to the Anti-Money Laundering Act (2017:630) on measures against money laundering and terrorist financing.

Shell companies typically arise in AML, financial regulation and company law, particularly in know your customer procedures and investigations of the beneficial owner, as well as in connection with reporting obligations to the Swedish Financial Intelligence Unit (Finanspolisen). Firms in high-risk sectors and with international ownership chains encounter the concept more often than others.

When does the shell company question arise?

The issue arises when an obliged entity must assess risks under Chapter 2 of the Anti-Money Laundering Act and conduct customer due diligence under Chapter 3. Indicators may include newly formed entities with no turnover, PO box addresses, nominee directors, or ownership routed through multiple jurisdictions. When establishing a business relationship, for one-off transactions with elevated risk, or during ongoing monitoring, the risk posed by a shell company can become clear.

In practice, this is evident, for example, when identifying the beneficial owner, when transaction monitoring detects layers of intermediary entities, or when the customer’s information cannot be verified against independent sources.

Illustration of businesswoman controlling network of people and properties, symbolising shell companies, hidden ownership structures and beneficial owner transparency in anti-money laundering law.

Points to consider regarding the shell company

When shell company risks are identified, obliged entities need to work systematically with risk management, know your customer and reporting under the Anti-Money Laundering Act. Below are core measures to implement and document in governance.

Ensure an up-to-date enterprise-wide AML risk assessment that explicitly addresses shell companies, complex ownership chains and high risk third countries.
Apply enhanced customer due diligence under Chapter 3 of the Anti-Money Laundering Act when shell company indicators are present. Verify registered address, business description, staffing and beneficial owner against independent sources.
Map ownership chains and control levels. Document ownership via trusts, foundations or nominee directors and identify the ultimate beneficial owner.
Assess the plausibility of the customer’s business model, revenue streams and payment patterns against industry practice. Atypical patterns may indicate layers of shell companies.
Require supporting evidence: articles of association, lease agreements, customer and supplier contracts, payroll lists or other proof of genuine activity.
Monitor transactions post-onboarding. Maintain rules for red flags linked to rapid pass-through payments and frequent cross-border transfers, and calibrate transaction monitoring to reduce false positive alerts.
Establish clear decision pathways to decline a business relationship where risk cannot be reduced to an acceptable level under a risk based approach in AML.
Report suspicion of money laundering to the Financial Intelligence Unit under Chapter 4 of the Anti-Money Laundering Act where there is reasonable cause to believe funds may derive from crime or relate to terrorist financing, following internal suspicious transaction reporting procedures.
Train staff on shell company red flags, including sector-specific examples and emerging methods highlighted by supervisory authorities and the media.
Document all assessments, evidence and decisions for supervision and internal follow-up. Clear traceability strengthens compliance.

This strengthens a risk based approach in AML, improves customer selection and provides robust support for decisions to initiate, continue or decline business relationships.

Shell company

Why is the shell company important in anti money laundering?

Shell companies are central to anti money laundering work because they are often used to layer transactions, frustrate tracing and conceal those who ultimately benefit from the flows. By integrating shell company indicators into the AML framework and the Chapter 2 risk model of the Swedish Anti Money Laundering Act (2017:630), firms can identify high risk customers and relationships in time. Clear procedures for enhanced customer due diligence and decision-making reduce exposure to illicit funds and complex structures.

When customer due diligence under Chapter 3 is combined with ongoing monitoring, a coherent control flow is created. Documentation, transaction monitoring and, where necessary, reporting under Chapter 4 operate together. The result is a better risk based approach in AML, fewer false positive alerts and more targeted measures where risks are greatest.

In a broader trust perspective, effective controls over shell companies demonstrate that the business takes the rules seriously and works methodically with compliance. This facilitates dialogue with supervisory authorities, counterparties and banks and supports sustainable business relationships over time.

A shell company lacks genuine operations and is used to conceal ownership or transaction flows. Common signs are a PO box address, no staff, an unclear business description and payments quickly passed between related entities.

Where the risk level is elevated under the enterprise-wide assessment and shell company indicators are present, enhanced customer due diligence under Chapter 3 must be applied. This includes deeper verification of identity, the beneficial owner and the business model, together with requirements for additional evidence.

Start by mapping the entire ownership chain and identifying the individuals exercising control. Use official registers, corporate documents and certifications, and document all information sources. Where there are obstacles or a lack of transparency, the risk level should be raised and the business relationship may need to be declined.

The aim is often to layer transactions, break traceability and conceal the link between criminal proceeds and recipients. A shell company can:

Insert intermediaries between the sender and the ultimate recipient.
Move funds across jurisdictions at short notice.
Be used with nominee directors to mask control.

The reporting obligation lies with the obliged entity under Chapter 4 of the Anti-Money Laundering Act, and operational handling is performed by the internal function responsible for reporting. Staff must report immediately upon suspicion, and the responsible function assesses whether a notification should be sent to the Financial Intelligence Unit.

A holding company may serve purposes such as group governance and capital allocation, whereas a shell company lacks substance and is used as a facade. The AML assessment is based on function and risk: is there genuine activity, governance and revenue, or only formal structures?