Enforcement and Mitigation of Nominee-Asset Abuse
Nominee enforcement is rarely won by discovering a document entitled “Nominee Agreement.” Modern structures are seldom that careless. A case is built by reconnecting facts deliberately kept apart: asset registration, funding, communications, management instructions, benefit flows, tax reporting and the profile of the ultimate beneficial owner.
The strategic lesson for a company is direct. If authorities build cases by connecting data, mitigation must connect corporate functions. Legal, tax, finance, compliance, the corporate secretary and internal audit cannot manage nominee risk in separate silos.
Enforcement architecture: from anomaly to evidence
An anomaly rarely proves misconduct by itself. A registered owner with limited income may have received a lawful gift. A beneficiary may occupy an asset under a genuine lease. A third-party account may serve a legitimate custodial function. Sound enforcement turns an anomaly into a hypothesis and then tests it against evidence.
The sequence usually moves from identity to money, from money to control, and from control to reporting. Corporate-registry data shows legal owners and beneficial-owner declarations. Financial information shows sources and destinations. Company records reveal voting rights and decision-making. Tax returns show who recognised the asset and income. Messages, instructions and access records can identify the person exercising real authority.
In cross-border structures, AEOI and treaty-based exchanges add further pieces. Domestically, statutory access to financial information and data concerning licences, land, vehicles, population records and transactions can narrow the space for inconsistency. None of those data points should be treated as self-proving. Their value lies in whether they converge into a coherent account.
Separate administrative, civil and criminal responses
Not every finding belongs on the same enforcement track. A reporting inaccuracy or defensible interpretive difference may require an administrative response. A transaction violating ownership restrictions may require cancellation, restructuring or civil litigation. Conduct satisfying the elements of an offence may move into preliminary-evidence examination, investigation and prosecution.
That separation protects the integrity of enforcement. Criminalising a genuine interpretive dispute weakens legal certainty. Treating deliberate falsification as a clerical mistake destroys deterrence. The distinction must return to statutory elements, evidence and mens rea.
Indonesia’s General Tax Provisions and Procedures Law, known as the KUP Law, also contains revenue-recovery mechanisms at specified procedural stages. Article 44B permits termination of an investigation in the interest of state revenue after payment of the relevant loss or amount and prescribed administrative sanctions, before the matter is transferred to court. At a later stage, payment may affect prosecution and sentencing consequences subject to the statute. These mechanisms do not erase historical facts; they are enforcement policies with financial and procedural conditions.
Corporate prevention before a crisis
A company seeking to prevent misuse needs a policy more operational than “do not break the law.” It should require disclosure whenever legal ownership and economic benefit diverge, prohibit personal accounts from receiving business funds, impose approval requirements on arrangements involving nominees or related parties, and prescribe source-of-funds verification.
Vendor onboarding should identify natural-person beneficial owners, operating capability, bank accounts consistent with identity and conflicts of interest. Investment controls should reconcile funding with asset recognition. Dividends, interest, royalties, rent and disposal proceeds should pass through controls capable of identifying the final recipient.
Internal audit cannot stop at sampling invoices. Network-based review is more effective for nominee risk: look for shared bank accounts, addresses, telephone numbers, devices, directors, relatives or instruction-givers across multiple entities. The purpose is not to treat every relationship as suspicious. It is to identify concentrated control that the formal organisation chart does not show.
The process should be risk-based. A dormant minority investment does not require the same depth as a high-value acquisition funded through several related-party accounts. The controls must be proportionate without becoming superficial.
Internal investigation when a red flag appears
Once an indicator emerges, the company should preserve evidence and define the investigation’s scope. The team must be independent of anyone who designed or benefits from the structure. A chronology should be built from original sources; interviews should be tested against documents; money flows should be traced; and reporting or escalation duties should be assessed by competent advisers.
Two extremes should be avoided. An investigation that is too narrow merely confirms that formal documents exist. An investigation with no boundary consumes resources and prolongs uncertainty. A defensible scope follows the hypothesis: identified assets, a defined period, relevant controllers and specified legal or tax risks.
Directors must also manage conflicts. If a controlling shareholder is the suspected hidden beneficiary, the company’s legal interest is not automatically identical to that individual’s interest. Independent commissioners, an audit committee or a special committee may be required so that privilege, investigation instructions and remediation decisions genuinely serve the company.
Evidence preservation deserves early attention. Suspending routine deletion, securing relevant devices, preserving accounting exports and recording chain of custody may be necessary. Preservation should be lawful and proportionate, particularly where employee privacy, banking secrecy, personal data and cross-border transfers are involved. A careless attempt to “collect everything” can create a second compliance problem.
Remediation: change the future, correct the past
Credible remediation has two tracks. The prospective track stops the nominee arrangement, transfers assets through lawful transactions, repairs authority, changes policy and installs controls. The retrospective track quantifies tax and sanctions, updates beneficial-owner information, corrects reports through available mechanisms and protects third-party rights.
They should not be merged by rewriting history. A new agreement operates prospectively; a correction acknowledges an earlier inaccuracy. Backdating and false supporting documents turn a compliance project into potential criminal evidence.
Sequence matters for a high-risk structure. A rushed transfer can trigger tax, breach financing covenants, harm creditors or appear to dissipate assets. A proper plan combines a legal opinion, valuation, tax analysis, corporate approvals, regulator engagement where required and liquidity management. The cleanest legal destination may not be achievable in one step.
Remediation should also identify people and incentives. Removing one nominee while preserving targets, override rights or payment practices that produced the arrangement merely changes the name on the register. Controls need ownership, deadlines, testing and reporting to the board.
The role of directors and commissioners
Directors must ensure that the company possesses usable data and controls; commissioners must test whether management actually uses them. Both should reject assurances that “the nominee structure has been secured by a notarial deed.” A deed proves that statements were made in the relevant formal process. It does not guarantee that their purpose is lawful or that their tax treatment reflects reality.
The most valuable board questions are practical. If the nominee becomes uncooperative tomorrow, does the company retain enforceable rights? If the complete data set is given to the tax authority and regulators, does the tax position change? If the present controller leaves, does the structure retain a business rationale? If the answers depend on personal loyalty or the authorities not discovering the facts, the risk has not been mitigated.
Commissioners should require reporting that connects legal, financial and tax consequences. A green rating from legal cannot offset a red funding trail identified by finance. A corrected beneficial-owner filing cannot, by itself, cure historical tax treatment. A tax settlement may not resolve ownership invalidity or third-party claims.
From documentary compliance to structural integrity
A defensible structure has one defining characteristic: the parties controlling the asset, receiving its benefits, recording it in accounts, reporting it for tax and appearing in beneficial-owner declarations can be explained through one consistent narrative. Rights do not all need to sit in one entity, but every separation needs a legal basis, business purpose and transparent trail.
That is where the line between planning and concealment becomes visible. A company may design an efficient transaction. It may not design a different reality for each authority. Effective Tax Risk Management is not a defence assembled after a nominee structure is exposed. It is a board decision not to build a structure that remains safe only while the truth stays fragmented.
Return to the transparency analysis: Beneficial Ownership, AEOI and Patriot Bonds.
Core regulatory sources: KUP Law consolidated text, Law No. 9 of 2017 on access to financial information, Presidential Regulation No. 13 of 2018, Minister of Law Regulation No. 2 of 2025, and Supreme Court Regulation No. 13 of 2016.
This article is educational and does not replace legal advice, tax advice or a forensic investigation based on specific facts. Remediation decisions must account for third-party rights and applicable reporting duties.