Where an AML and source-of-funds file Mainland

The file was not the problem. The problem was that the file was built for the wrong regulatory audience. Across our cross-border practice, we see compliance teams and general counsel completing customer due diligence on Mainland China counterparties to a standard that satisfies one regulator while leaving them exposed to another. The commercial cost – banking access denied, payment channels closed, correspondent relationships under review – lands without warning and is difficult to reverse.

An AML and source-of-funds file for a Mainland China counterparty must satisfy the Anti-Money Laundering and Counter-Terrorist Financing Ordinance as interpreted by the Hong Kong regulators, while simultaneously addressing the documentation standards that Mainland-side banking institutions and payment channels require. The cross-border interface between these two systems is where the file stands or falls. Neither system is a substitute for the other, and the gap between them is the primary source of regulatory exposure for international groups transacting through Hong Kong.

This analysis examines what is actually at stake, how the governing instruments define the file's minimum content, where the two systems diverge, and where our desk assesses the live risk to sit as of late 2027.

What is commercially at stake when an AML file for a Mainland China counterparty fails?

The commercial question is not whether your business is clean. It is whether your file can prove it, quickly, to a correspondent bank that will not wait for a re-submission cycle.

International groups with Mainland China supply chains, joint-venture partners or receivables flows depend on payment corridors that run through Hong Kong banking institutions. Those institutions operate under correspondent relationships with global clearing banks. When a correspondent flags a Mainland China counterparty for insufficient AML documentation, the Hong Kong correspondent does not typically litigate the point. It derisks. The account is restricted, the payment is held, or the relationship is exited.

The downstream consequences are rarely contained to one transaction. A single flagged counterparty can trigger a file review across an entire counterparty portfolio. Treasury teams lose days and sometimes weeks re-documenting relationships they assumed were stable. Worse, where the original file omitted material that the regulator later classifies as mandatory – ownership documentation, source-of-funds evidence for the corporate chain above the contracting entity, sanctions screening records – the institution itself faces regulatory risk. The file is not a box to be ticked. It is the principal instrument of institutional defence.

In our cross-border practice, we regularly advise groups that reached this point – not because their counterparties were problematic, but because their files were insufficient for the jurisdiction in which the transaction was actually processed.

Which instruments govern the file? The Hong Kong position under the AMLO

The primary governing instrument in Hong Kong is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (the AMLO), which imposes customer due diligence and record-keeping obligations on financial institutions, designated non-financial businesses and professions, and – since the virtual-asset licensing regime commenced on 1 June 2023 – licensed virtual-asset trading platforms.

Under the AMLO, a compliant file for a corporate counterparty includes: verification of legal existence and constitution; identification and verification of beneficial owners above the applicable threshold; understanding of the nature and purpose of the business relationship; and source-of-funds documentation where the risk assessment warrants it. The regulators – principally the Hong Kong Monetary Authority for banking institutions and the Securities and Futures Commission for licensed intermediaries – publish AML guidelines that translate the Ordinance's requirements into operational standards. Those guidelines are not legislation, but non-compliance with them is treated as evidence of a systemic failing in the institution's risk controls.

The file must also reflect a risk-based approach. A low-value, short-term transaction with a large state-owned enterprise may sit at a different risk level than a mid-market private entity with layered ownership through a structure that includes offshore intermediaries. The calibration of that risk assessment, and the evidence that it was carried out competently, is part of what regulators examine.

Hong Kong does not give domestic effect to unilateral sanctions measures of other states. It implements United Nations sanctions through the United Nations Sanctions Ordinance. The AMLO file must reflect UN-list screening; it does not require a compliance team to apply extraterritorial measures of other jurisdictions as a matter of Hong Kong law. That distinction matters when instructing the file's scope – and it is a point that foreign counsel and foreign compliance templates frequently misstate.

How does the Mainland China side of the file differ – and where do the two systems fail to meet?

The Mainland Chinese AML regime is governed by the Anti-Money Laundering Law and the implementing rules of the People's Bank of China. The framework shares several structural features with the AMLO: customer identification, beneficial ownership, ongoing monitoring, and suspicious transaction reporting. However, the evidentiary standards applied in practice, and the documentation that Mainland-side banking institutions actually accept, diverge from the Hong Kong position in ways that create real operational friction.

Consider the ownership chain. A Mainland China operating entity may be wholly or substantially owned through a Hong Kong or offshore holding structure. The AMLO requires the Hong Kong institution to trace and verify beneficial ownership through that structure. The Mainland-side bank, processing the inbound payment, applies its own rules – which may focus on the contracting entity itself, or may require documentation of the Mainland-side entity's state of registration, its actual controllers as registered with the Chinese corporate authorities, and its compliance with Mainland-side enterprise qualification requirements.

The critical gap is this: the Hong Kong file traces ownership upward through the structure; the Mainland-side file traces authority downward through the enterprise. Neither is wrong. But a file built only for one audience will leave a gap that the other regulator or correspondent will eventually locate.

A second divergence concerns source of funds. Hong Kong AML standards – and the guidelines issued by the regulators here – require documentation of the origin of the funds used in the transaction where the risk profile or the transaction size warrants it. The standard for what counts as adequate source-of-funds evidence differs between the two systems. Bank statements alone may satisfy one institution while being treated as insufficient by another. Tax filings, audit reports, corporate income verification and, in some cases, evidence from the Mainland's national enterprise credit information system may all be required to close the file to the standard that the correspondent will accept.

We have acted on matters where a group's Hong Kong legal team had prepared what it assessed to be a complete AML file, only for a transaction to stall because the correspondent's compliance team applied a documentation standard that reflected the intersection of both systems – and the file had not been built to that intersection.

What does a Mainland China counterparty file actually need to contain?

A file built for the cross-border interface should address five documentary areas.

Corporate identity and legal standing (the official record of the entity's legal existence, registration status, and authority to contract) must be current and authenticated. For a Mainland China entity, this includes business licence documentation and, where the entity is subject to specific sector licensing, evidence of that licence. The age of the document matters. Regulators and correspondents increasingly require documentary evidence that is no older than a defined period – and where the counterparty is in a rapidly changing sector, earlier documentation may not reflect the current operating status.

Beneficial ownership verification must go through the full corporate chain to the ultimate natural persons in control. Where an intermediate holding entity is incorporated in an offshore centre – a BVI or Cayman company, for example – the file must produce the register of members or equivalent disclosure for that entity, not merely for the Mainland operating company. This is where files most frequently fail. The offshore layer is treated as a gap by the correspondent, even where it is entirely standard as a holding structure.

Source of funds and source of wealth require separate treatment where the risk profile is elevated. Source of funds addresses the specific transaction: where did these particular funds originate? Source of wealth addresses the counterparty's commercial history: how was the business built, and what is the documented basis for the funds it deploys in the relationship? For Mainland China counterparties, source-of-wealth documentation may include audited financial statements, evidence of domestic sales and procurement activity, and, where the beneficial owner is a natural person with direct involvement in the entity, personal asset documentation.

Sanctions screening must be documented against the UN Consolidated List. Where the transaction involves jurisdictions or sectors subject to broader multilateral measures, or where the counterparty's industry sits in a sector of elevated scrutiny, the screening record should reflect the specific lists applied, the date of screening, and any adverse-match resolution.

Ongoing monitoring documentation – the evidence that the relationship is kept under review and that changes in the counterparty's ownership, regulatory status, or risk profile are captured – is increasingly treated by correspondents as a component of the initial file, not a separate process. The file should contain the firm's monitoring protocol and, where the relationship is established, evidence that monitoring has been applied.

The sanctions posture and the payment channel: the compliance-only position

The payment channel between Hong Kong and Mainland China sits at the intersection of two sanctions postures. Hong Kong implements United Nations sanctions. Mainland China does the same, and in addition applies its own blocking measures (domestic instruments that restrict cooperation with extraterritorial sanctions of other states) under its Anti-Foreign Sanctions Law. International groups operating the payment channel must understand that their compliance obligation runs to the UN-based measures applicable in each jurisdiction – not to unilateral extraterritorial measures of states whose law does not govern the transaction.

This is a point of genuine regulatory complexity, and it is frequently misread in both directions. Groups accustomed to US or EU compliance environments apply sanctions standards that exceed the legal requirement in Hong Kong and create operational restrictions that are not legally compelled. Other groups underestimate the UN-based controls that do apply in both systems. Neither error produces a sustainable compliance position.

Our desk's view is straightforward: the file must document compliance with the applicable legal standards in each jurisdiction through which the payment moves. It should not apply a standard drawn from a third jurisdiction's unilateral measures unless that third jurisdiction's law independently governs the transaction. And it must document, in the file itself, the basis on which the applicable standard was determined.

This is the compliance-only framing. The function of the AML and source-of-funds file is to demonstrate that the institution has met its legal obligations, that the counterparty has been identified and its funds traced, and that the transaction does not engage any applicable legal restriction. That is the position that survives regulatory examination. Any departure from it – in either direction – produces a file that either over-restricts a legitimate transaction or under-documents a real risk.

For a structured read on how counterparty screening works across the Greater China supply chain, see our analysis at counterparty screening in the Greater China supply chain.

Where does the risk sit now? Our desk's analytical read for late 2027

Three developments define the risk environment as we assess it from our desk in late 2027.

First, correspondent banking standards for Mainland China counterparties have tightened over the past two years. The trend is not new, but its pace has accelerated. Correspondents operating global clearing networks are applying enhanced documentation requirements at the file level, not merely at the transaction level. Groups that built their AML files to the minimum statutory standard in 2022 or 2023 are finding that those files no longer satisfy the practical requirements of the correspondent relationship – even where the underlying statutory obligation has not changed.

Second, the interaction between the Mainland-side beneficial ownership registration requirements and the Hong Kong AML verification obligation has become more operationally important. Mainland China corporate registration records are increasingly accessible as a verification source, and correspondents are beginning to use them – which means that discrepancies between what is filed with the Mainland authorities and what the AML file asserts about the ownership chain are now detectable in a way they were not previously. The file must be consistent with the public record, and where it departs from it, the departure must be explained.

Third, the scope of the AMLO has expanded. The inclusion of virtual-asset trading platforms within the mandatory licensing and AML obligation regime – with the VATP licensing regime commencing 1 June 2023 – means that groups transacting through digital payment rails or virtual-asset intermediaries that are licensed in Hong Kong face AMLO-standard documentation requirements on those rails. For groups with Mainland China counterparties that use virtual-asset settlement as part of their payment structure, the intersection of the AMLO, the stablecoin regime being developed by the Hong Kong Monetary Authority, and the Mainland-side rules on cross-border virtual-asset activity represents a new and unsettled documentation question.

The dominant risk, across all three developments, is the same: the gap between the file that was adequate at the time it was built and the file that will satisfy the correspondent or regulator at the time it is examined. That gap is not hypothetical. It is the most common structural failure we encounter in cross-border AML matters involving Mainland China counterparties.

What foreign counsel and compliance teams consistently get wrong

The file is assembled to satisfy the home jurisdiction. That is the first and most common error. A European group with a Mainland China joint-venture partner builds its AML file to the standards of its home-country AML supervisor. Those standards may be thorough. They are not calibrated to the cross-border interface between the Hong Kong regulatory environment and the Mainland-side requirements. The file arrives at the Hong Kong correspondent and fails on the first pass because the ownership documentation stops at the BVI holding entity and does not go further.

The second error is treating source-of-funds documentation as a one-time exercise. In a cross-border relationship where the payment flows are ongoing, the source-of-funds file must be maintained. An initial file that was adequate for the opening of the relationship will not automatically cover subsequent transactions where the amounts, the parties, or the corporate structure have changed. The regulator's expectation – and increasingly the correspondent's expectation – is that the file reflects the relationship as it currently stands, not as it stood when the account was opened.

The third error concerns the sanctions screening record. Groups apply screening but do not document it in a way that can be reproduced and reviewed. The compliance value of a screening that cannot be demonstrated is limited. The file should contain the screening record: the list applied, the date, the result, and – where there was a potential adverse match – the resolution. That record is what the correspondent and the regulator will look at if the transaction is later questioned.

A fourth error, and one we see with increasing frequency, is the assumption that the Mainland-side entity's relationship with a major state-owned bank constitutes adequate indirect AML verification. It does not. The Hong Kong institution has an independent verification obligation. The fact that the counterparty banks with a well-regarded institution on the Mainland does not discharge the Hong Kong-side AML requirement.

For a practical reference on the export-control dimension that frequently intersects with Mainland China counterparty files, see our matter note at export control and dual-use risk review.

Two cross-border scenarios: how the file performed

A European technology group with a Hong Kong procurement entity and a Mainland China component supplier came to us in early 2027. Their AML file for the Mainland supplier had been prepared by their European compliance team to EU AML standards. The file identified the supplier's Mainland-side beneficial owners correctly but stopped at the Hong Kong intermediate holding company owned by those individuals. The beneficial ownership chain above the Hong Kong intermediary – a British Virgin Islands company held by a family trust – was not documented. The Hong Kong correspondent flagged the gap and suspended the payment pending re-documentation. We rebuilt the file to include the BVI entity's register of members, the trust's disclosure of the relevant beneficial interest, and updated source-of-funds evidence for the specific transaction value. The payment moved in the following cycle.

A second matter, from autumn 2026, involved an Asian financial institution with a Mainland China counterparty in a mid-market acquisition financing. The counterparty's source-of-funds documentation was extensive by domestic standards – audited accounts, bank statements, tax filings. The file nonetheless failed the correspondent's review because the source of the specific tranche of funds used in the transaction could not be traced to a documented commercial event. The link between the counterparty's general financial position and the specific funds was not made. We worked with the counterparty's advisers to produce a documented transaction trail connecting the source of the acquisition funds to a documented asset realisation on the Mainland. The file was accepted. The transaction closed.

In both cases, the underlying commercial relationship was legitimate. The files failed on documentation, not substance. That is the pattern our desk consistently sees.

The objection handler: three things principals assume that are not accurate

"Our counterparty is state-owned." A state-owned enterprise origin does not remove the AML file requirement. The AMLO obligation applies to the Hong Kong institution regardless of the counterparty's ownership. The risk calibration may differ, but the file obligation does not disappear. In practice, state-owned enterprise counterparties sometimes present additional ownership-chain complexity, not less – particularly where the enterprise operates through multiple layers of subsidiaries, some of which may be incorporated in offshore centres.

"We have been transacting with this counterparty for years without a problem." A long-standing relationship does not mean the file is adequate. It may mean the file has not yet been examined closely. Correspondent bank requirements and regulatory expectations have tightened. A file that was adequate in 2021 may not satisfy the standard applied in 2027. The risk is not in the past relationship; it is in the next transaction when the file is reviewed.

"The transaction is small." The AMLO's obligations do not scale proportionally to transaction size in the way that principals sometimes assume. The risk-based approach does calibrate the depth of due diligence to the risk profile of the relationship and the transaction. But even a modest transaction with a counterparty whose file contains a material gap on beneficial ownership or source of funds creates the same file deficiency – and potentially the same regulatory consequence – as a large one.

Our full advisory position on this practice area is set out at our Sanctions & AML practice page.

The sequence above describes the standard analytical position. Your file turns on the specific counterparty, the specific payment channel engaged, and the order in which the documentation is assembled – which is where a cross-border AML file is either accepted or returned.

If an earlier file submission produced an adverse result or a stalled payment, a second read can identify the documentation gap and the routes still open. Write to us at info@lockhartyip.com to discuss your position.

Related practices

Sanctions & AML – cross-border compliance, counterparty screening, and sanctions-neutral contracting
Corporate Counsel – ongoing governance, entity management, and cross-border compliance coordination

Frequently asked questions: AML and source-of-funds files for Mainland China counterparties

What is the first step in an AML and source-of-funds file for a Mainland China counterparty?

The first step is a risk assessment of the specific counterparty and the transaction, conducted against the standards of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the relevant regulatory guidelines. That assessment determines the required depth of due diligence – which, for a Mainland China corporate counterparty, will generally require full beneficial ownership verification through the corporate chain, including any offshore intermediate entities, and a documented source-of-funds position for the transaction. Getting the risk calibration right at the outset determines the scope of the file and the standard it must meet.

Do I need a Hong Kong adviser for an AML and source-of-funds file for a Mainland China counterparty?

Where the transaction is processed through Hong Kong – whether through a Hong Kong banking institution, a Hong Kong payment channel, or a Hong Kong-incorporated entity as the contracting party – the file must meet the standards set by the Hong Kong regulatory regime and, in practice, the documentation expectations of the correspondent banks that clear the payment. An adviser familiar with the intersection of the Hong Kong AMLO regime and the Mainland-side documentation environment is better placed to build a file that satisfies both audiences than one operating only from a home-jurisdiction compliance template. The cross-border interface is where most failures occur.

How does the cross-border element affect an AML and source-of-funds file for a Mainland China counterparty?

The cross-border element creates two distinct documentation audiences – the Hong Kong institution and the Mainland-side banking or payment infrastructure – each with its own regulatory standard and its own evidentiary expectations. The Hong Kong file traces beneficial ownership upward through the corporate structure to the ultimate natural persons in control. The Mainland-side file addresses the counterparty's domestic regulatory standing and operational authority. A file built only for one system will contain a gap that the other system's correspondent or regulator will identify. The practical solution is to build the file to the intersection of both standards from the outset.

About Lockhart & Yip

Lockhart & Yip is an independent international and cross-border counsel based in Hong Kong. We advise international groups, founders, family offices and their advisers on AML compliance, source-of-funds documentation, sanctions-neutral contracting, and counterparty risk management across Greater China and the principal offshore centres, working alongside locally licensed firms on matters of Hong Kong law. Our desk is built around the cross-border interface between Hong Kong and Mainland China – the payment channel, the correspondent relationship, and the regulatory file that underpins both. We also advise on disputes and arbitration, holding structures, and private wealth matters where the compliance dimension intersects. Our approach relies on the neutrality of the Hong Kong forum and close coordination with allied counsel in the relevant jurisdictions. To discuss your position, write to info@lockhartyip.com.

Lockhart & Yip advises on international and foreign law. We do not practise the law of Hong Kong; matters of Hong Kong law are handled together with locally licensed firms. This publication is general information, not legal advice. For advice on your situation, contact info@lockhartyip.com.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

Where an AML and source-of-funds file for a Mainland China counterparty stands now