Reading the risk in an AML and source-of-funds file for a Mainland China counterparty

A deal is conditionally agreed. The counterparty is a Mainland Chinese group. The payment moves through Hong Kong. Then the correspondent bank asks for a source-of-funds file – and the question that lands on the transaction team is not a legal question in the narrow sense. It is a commercial question: how much risk sits in this payment chain, and who is holding it?

An AML and source-of-funds file (a documentary package assembled by a financial institution or a counterparty to satisfy anti-money laundering due diligence requirements) for a Mainland China counterparty presents a distinct cross-border challenge: the funds, the entity structure, and the banking channel typically span at least three legal systems, and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance governs the Hong Kong leg while Mainland regulatory standards govern the originating side. The risk is not in any single jurisdiction. It is in the interface between them, and in the sequence of documents that has to satisfy reviewers in both.

This analysis sets out what is commercially at stake, how the governing instruments engage across the boundary, what the comparative read between the two systems reveals, and where our desk thinks the risk is concentrated right now.

What is actually at stake: the banking access question

The centre of gravity in a Mainland-counterparty AML file is not a fine or a prosecution. It is whether the payment moves at all. Correspondent banking networks – the chains through which international payments settle – have become the practical enforcement layer for AML compliance. A bank that declines to process a transfer, or that places a hold pending enhanced due diligence, does not need to prove a legal violation. It acts on a risk assessment, and that assessment looks at the source-of-funds file you provide.

For a cross-border transaction touching Hong Kong and Mainland China, the payment channel almost always runs through a Hong Kong-licensed institution. That institution is subject to the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and to the guidance issued by the Hong Kong Monetary Authority and the Securities and Futures Commission. Its compliance team is reviewing your counterparty's file against those standards. Whether the underlying funds were generated in the Mainland, distributed through an offshore holding entity, and received into a Hong Kong account, the Hong Kong institution applies Hong Kong standards to the full chain.

This is where foreign principals – particularly those whose own AML advisers sit in Europe, the United States, or the Gulf – encounter the structural complexity. Their home standards may differ materially from what a Hong Kong institution requires. The file that satisfied a European compliance team may leave significant gaps when reviewed by a Hong Kong correspondent bank.

What is at stake, then, is transaction completion. And beyond a single transaction: banking access itself. An institution that develops concerns about a client's source-of-funds position does not always raise them file by file. A pattern of incomplete documentation, or a single significant adverse finding, can result in a broader review of the relationship.

How the governing instruments engage across the boundary

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance is the governing instrument on the Hong Kong side. It applies to a defined class of financial institutions and designated non-financial businesses and professions (a category that under the Ordinance includes legal professionals, accountants, trust and company service providers, and estate agents, among others). The Ordinance sets the customer due diligence and record-keeping obligations that Hong Kong-regulated entities must meet when dealing with customers or transactions that present certain risk characteristics.

For a Mainland China counterparty, the Ordinance's risk-based approach places a premium on two things. First, beneficial ownership: who ultimately owns and controls the entity. Second, source of wealth and source of funds: how the wealth was generated, and how the specific funds in the transaction were derived. These are not the same question. A principal who can document a legitimate business history may still face scrutiny if the specific payment cannot be traced cleanly from that business to the transaction account.

The Mainland system approaches AML through a separate and parallel legislative architecture. The People's Bank of China issues customer due diligence and record-keeping requirements under the Mainland's AML law, and the State Administration of Foreign Exchange administers the cross-border capital flow controls under which Mainland-source funds are permitted to leave the Mainland. These controls – the foreign exchange approval and registration mechanisms – are not AML instruments in the technical sense, but they intersect directly with a source-of-funds review. A Hong Kong institution reviewing a Mainland counterparty's file will want to see that the funds were properly permitted to leave the Mainland. That documentation comes from the Mainland system.

The result is a file that must simultaneously satisfy two sets of requirements. The Hong Kong institution's compliance team applies the standards it knows. The documentation that satisfies those standards is issued by Mainland authorities under a different regime. The gap between the two – in format, in the level of detail required, and in the supporting evidence needed – is where most source-of-funds files for Mainland counterparties either succeed or fail.

For this practice, the full statutory and regulatory position is set out at Lockhart & Yip's Sanctions & AML practice page.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. For a structured assessment of your counterparty's source-of-funds position across the Hong Kong and Mainland interface, write to us at info@lockhartyip.com.

How does the holding structure change the analysis?

Most Mainland-origin counterparties in cross-border transactions do not present as a Mainland entity paying directly into a Hong Kong account. The more common structure places one or more offshore entities – typically incorporated in the BVI or the Cayman Islands – between the Mainland operating business and the Hong Kong payment channel. From a commercial perspective, this is standard. From a source-of-funds perspective, it adds layers that the reviewing institution must trace.

Each additional layer raises a further question. Where did the funds go when they left the Mainland? What is the purpose of the offshore entity? Does the offshore entity have substance, or is it a holding vehicle with a registered agent and no employees? Who are the ultimate beneficial owners (the individuals who ultimately own or control the entity, applying the relevant ownership and control thresholds under the Ordinance and the guidance issued by the regulators)? Can those individuals be identified, verified, and screened against applicable sanctions lists and politically exposed persons (PEP) registers – that is, registers of individuals who hold, or have held, prominent public positions and whose financial dealings attract enhanced scrutiny?

The holding structure question is therefore not a separate exercise from the source-of-funds question. It is the same exercise conducted at each tier of the chain. A file that produces a clean answer at the Hong Kong-account level but cannot answer the same questions at the BVI-holding-entity level or the Mainland-operating-entity level will not satisfy a thorough compliance review.

In our cross-border practice, we see a consistent pattern: the weakest point in a Mainland-counterparty file is not the funds documentation at the final stage of the chain. It is the beneficial ownership disclosure at the intermediate offshore tier. Either the ownership records are out of date, or the individual identified as the beneficial owner is not the person who controls the entity in practice, or the chain of ownership passes through a trust structure whose settlor and protector arrangements have not been disclosed. Each of these gaps creates a hold or a request for further information from the reviewing institution.

For a practical guide to assembling a beneficial ownership and KYC file for an offshore holding chain, see our briefing on beneficial ownership and KYC for offshore holding chains.

The comparative read: what differs between Hong Kong and Mainland standards

The AML standards applied in Hong Kong and on the Mainland share a common foundation: both systems follow the Financial Action Task Force recommendations, and both have moved substantially towards a risk-based approach in recent years. But the operational differences matter more than the shared framework when you are assembling a file.

The first difference is in how beneficial ownership is defined and evidenced. Hong Kong-regulated institutions apply a threshold – which the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulatory guidance specify – and require documentary evidence to support the identification of every individual above that threshold. The Mainland system has its own threshold and its own documentation requirements, but the format of the evidence that Mainland corporate registries produce does not always map cleanly onto what a Hong Kong compliance team expects to see. The Business Registration Certificate and the Unified Social Credit Code certificate (the Mainland's standard corporate identification documents) are familiar instruments, but they do not, on their own, answer the beneficial ownership question to Hong Kong standards.

The second difference is in how source of wealth is evidenced. For a Mainland counterparty, the typical sources of wealth are operating profits from a PRC business, dividends from a PRC-registered entity, proceeds from a real estate transaction in the Mainland, or proceeds from a Mainland capital markets transaction. Each of these has a different documentation trail. Profits from a PRC entity should be supported by audited financial statements and tax clearance records. Dividends require evidence of the shareholder register and board resolution approving the distribution. Real estate proceeds require the title transfer documents and the settlement statement. A Hong Kong institution may ask for all of these in a specific format, and the Mainland documents that evidence these transactions are often not in that format.

The third difference – and, in our desk's experience, the most commercially significant – is the treatment of funds that have passed through a foreign exchange approval or registration process. When Mainland-source funds are remitted offshore, they typically pass through the State Administration of Foreign Exchange's approval or registration mechanisms. The documentation from that process – the foreign exchange registration certificate, the bank's remittance records, the approval notices – is the primary evidence that the funds were permitted to leave the Mainland. But that documentation is in Mandarin, it uses technical terminology from the Mainland's foreign exchange regime, and it needs to be translated and explained for a reviewer who is applying Hong Kong standards. This is not a translation exercise in the administrative sense. It is an interpretive exercise: matching the Mainland process documentation to the question the Hong Kong institution is actually asking.

What foreign counsel get wrong here is treating this as a document collection exercise. A list of documents is not a file. A file is a coherent narrative – here is the entity, here are its owners, here is the business that generated the wealth, here is the specific transaction that generated the funds in this payment, and here is the documentation that evidences each step. The narrative matters as much as the documents, because the compliance reviewer has to be able to sign off on a conclusion, not just a list of items.

Where the sanctions overlay intersects

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That is the jurisdictional position, and it is a material distinction from the position in the United States or the European Union. A Hong Kong-regulated institution is not legally required to apply US or EU unilateral sanctions. It may, as a matter of its own risk appetite, decline transactions that carry US or EU sanctions exposure – but that is a commercial decision, not a Hong Kong legal obligation.

For a Mainland China counterparty, the practical consequence is this. If the counterparty or a connected party appears on a United Nations sanctions list, that is a hard stop under Hong Kong law. If the counterparty appears on a US or EU unilateral sanctions list but not on a United Nations list, the Hong Kong position is different. The Hong Kong institution must make its own commercial risk assessment. Many Hong Kong institutions that maintain correspondent relationships with US dollar clearing banks will apply US sanctions standards as a matter of their own risk management, because the correspondent bank relationship requires it. But this is not a uniform position, and it creates a tiered analysis that a cross-border adviser working on a Mainland-counterparty file must conduct explicitly.

The Significant Controllers Register requirement – the obligation under the Companies Ordinance (Cap. 622) requiring Hong Kong-incorporated companies to maintain a register of their significant controllers, in force since 1 March 2018 – adds a further layer for Hong Kong entities in the chain. If the counterparty's Hong Kong entity is a party to the transaction, the SCR records are a document that can be reviewed as part of a beneficial ownership check. An SCR that is incomplete or out of date is itself a red flag for a compliance reviewer.

The interaction between the AML file and the sanctions screen is not sequential. The screen runs in parallel with the file assembly, and an adverse screen result at any point changes the risk profile of the file as a whole. A counterparty that passes the source-of-funds review but generates a potential match on a screening list needs a separate disposition process before the file can close. That process – the reasonable grounds assessment that the Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires – is a substantive exercise, not a formality.

A micro-scenario: where the file failed and why

A European group was acquiring a minority interest in a Mainland-connected technology business (autumn 2026). The Mainland counterparty's ultimate beneficial owner was a PRC national who held his interest through a BVI holding entity and had, some years previously, served in a provincial government advisory role. The file assembled by the counterparty's Hong Kong solicitors listed the relevant documents. It did not address the PEP question explicitly. It did not connect the foreign exchange registration documentation to the specific dividend flow that constituted the source of funds for the counterparty's equity contribution.

The Hong Kong correspondent bank placed the payment on hold. The hold extended for six weeks while the counterparty's team assembled supplementary documentation. By the time the payment cleared, a related regulatory filing in the Mainland had lapsed and had to be renewed. The transaction completed, but at additional cost and at a risk of non-completion that the parties had not priced.

We were instructed on the supplementary documentation exercise. The actual gap was not in the underlying facts – the source of funds was clean – but in the narrative structure of the file. The PEP classification required an enhanced due diligence memorandum that set out the nature and dates of the advisory role, the absence of any adverse screening result, and the reasons why the role did not give rise to an elevated risk conclusion on the facts. The foreign exchange documentation required a cover note that translated and contextualised each item in terms of the question the Hong Kong institution was asking. These are not complex documents. They are missing documents, and their absence cost six weeks.

The second micro-scenario is instructive from a different angle. A Gulf-based family office was receiving a distribution from a Mainland joint venture (early 2027). The Mainland joint-venture partner's source-of-funds documentation was strong. The gap was at the Gulf-side: the family office's own source-of-wealth documentation did not satisfy the Hong Kong institution's requirements for the receiving party, because the institution was conducting enhanced due diligence on the entire transaction, not just one side. The file has to work in both directions when the transaction is subject to enhanced scrutiny.

If an earlier filing, structure or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. To discuss how the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the cross-border interface apply to your position, contact info@lockhartyip.com.

The decision matrix: which situations carry which risks

The risk profile of a Mainland-counterparty AML file is not uniform. It varies by the type of counterparty, the structure of the payment chain, the nature of the transaction, and the identity of the reviewing institution. The following analysis maps the main situations.

Where the counterparty is a Mainland state-owned enterprise or a subsidiary of one, the beneficial ownership question resolves relatively cleanly – the state is the ultimate owner, and that is documentable. The source-of-funds question is more complex, because the revenue streams of a large state entity are diverse and the documentation of any particular dividend or distribution requires a paper trail through multiple internal approval stages. The risk here is not in the ownership question but in the traceability of the specific funds.

Where the counterparty is a privately-held Mainland group with a BVI or Cayman holding entity, the beneficial ownership question is the primary risk. The offshore entity's register of members may not reflect the current ownership position if transfers have occurred without updating the registered records. The individual identified as the beneficial owner requires verification, and if that individual has any public-sector connection – past or present – a PEP analysis is required. The source-of-funds question is secondary but follows the same logic: the dividend or distribution flow must be traced from the Mainland operating entity through the offshore structure to the payment account.

Where the transaction involves a Mainland counterparty that is itself a financial institution or a regulated entity, the enhanced-due-diligence threshold may apply automatically under the reviewing institution's own policies. This does not mean the transaction cannot proceed. It means the standard file will not be sufficient, and a more detailed package – including the counterparty's own AML compliance documentation and its regulatory status – will be required.

Where the funds originate from a real estate transaction in the Mainland, the documentation trail is specific and predictable: the title transfer records, the identity of the parties to the transfer, the settlement statement, and the evidence that the proceeds were properly remitted through the foreign exchange channel. A file missing any of these elements will attract questions, and a hold, while the gaps are filled.

The payment channel risk runs throughout. For detailed analysis of how to manage that risk in practice, see our briefing on managing payment channel and banking access risk.

Our read: where the risk sits now

The risk in a Mainland-counterparty AML file has not increased because the law has changed. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance is not new, and neither is the risk-based approach to customer due diligence. The risk has increased because the enforcement layer has tightened. Correspondent banks are applying more granular review standards. Compliance teams at Hong Kong institutions have more analytical resource than they did five years ago. And the consequences of an adverse finding – a hold, a referral, a relationship review – have become more commercially significant as cross-border transaction volumes through Hong Kong have grown.

The structural complexity trigger for this analysis is accurate. The risk does not lie in any single document or any single gap. It lies in the architecture of the file as a whole: whether it tells a coherent, evidenced story that a compliance reviewer can close. Files that were adequate two years ago may not be adequate today, because the reviewing institution's own standards have moved.

Our desk sees three categories of file that consistently create problems. The first is the file assembled by counsel who understand the underlying transaction but have not built a Hong Kong-standard source-of-funds file before. The structure of the file – the sequencing, the narrative, the connection between the documents – is wrong, even if the underlying documents exist. The second is the file that is strong on the counterparty's side and weak on the client's own side. Enhanced due diligence is bilateral. The third is the file that was complete when assembled but has not been updated as the transaction has extended in time, the ownership structure has changed, or the individual identified as the beneficial owner has taken on a new public role that triggers a PEP classification.

The forward risk is concentrated in two areas. First, the interaction between the AML file and the broader cross-border enforcement environment: as the Foreign States Immunity Law (in force in the PRC from 1 January 2024) creates new questions about enforcement against state-connected counterparties, the identification of state connections in a beneficial ownership review becomes more consequential. Second, the continued development of the virtual-assets sector: transactions that route through virtual-asset channels are subject to the virtual asset trading platform (VATP) licensing regime under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which commenced on 1 June 2023. Where a Mainland counterparty's funds have at any point passed through a virtual-asset platform, the source-of-funds analysis must address the virtual-asset leg explicitly.

The position on stablecoin-related payment channels is developing. The Hong Kong Monetary Authority has commenced a licensing regime for fiat-referenced stablecoin issuers; the precise perimeter and commencement date should be verified before any transaction that touches that channel.

What an objection-handler looks like in practice: the myth of the clean corporate

A frequent assumption among foreign principals dealing with well-established Mainland groups is that a large, reputable counterparty with a long operating history and an internationally recognised auditor does not require a detailed source-of-funds file. The counterparty's profile, the assumption runs, is itself the answer.

This assumption is wrong, and it is wrong in a specific way. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance's risk-based approach requires the reviewing institution to form its own assessment of the risk presented by the specific transaction. The counterparty's general reputation is a relevant factor in that assessment. It is not a substitute for the assessment. An institution that relies on a counterparty's size or reputation rather than conducting its own customer due diligence is not complying with the Ordinance; it is substituting a heuristic for a requirement.

The practical consequence is that a Mainland group that is one of the most well-known enterprises in its sector still requires a source-of-funds file that traces the specific funds in the specific transaction. The file for a large group may be easier to assemble – there is more public information available, audited accounts are accessible, and the foreign exchange documentation is likely to be more complete – but the exercise must be done. What the size and reputation of the counterparty actually buys is a lower residual risk rating once the file is complete, not an exemption from the exercise.

In our cross-border practice, we regularly advise on the structure and assembly of source-of-funds files where a previous assumption of this kind has produced a hold or a request for enhanced due diligence. The pattern is consistent: the file was not prepared because the counterparty seemed unproblematic. When the institution's compliance team reviewed the transaction, the absence of a file was itself the red flag.

Related practices

• Sanctions & AML – cross-border AML compliance, source-of-funds structuring, and sanctions-neutral contracting
• Holding Structures – review and design of BVI, Cayman, and Hong Kong holding architectures for cross-border groups

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Beneficial Ownership Kyc File Offshore Holding Chain Briefing
• Managing Payment Channel Banking Access Risk Briefing

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.