Where a compliance review before contracting with the BVI entity stands now

The question arrives in different forms. A Hong Kong trading group asks whether it can proceed with a payment to a BVI counterparty whose ultimate beneficial owner is opaque. A European fund manager wants to know what its Hong Kong subsidiary must do before signing a service agreement with a BVI holding entity. A family office principal asks whether the compliance file assembled for a prior transaction is good enough for the new contract. In each case, the commercial pressure is the same: the deal is live, the counterparty is in the BVI, and someone needs a clear read on where the compliance obligation sits before the contract is signed.

A compliance review before contracting with a BVI entity (a company incorporated under the BVI Business Companies Act, one of the world's most widely used offshore holding structures) is governed in Hong Kong by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which imposes customer due diligence and source-of-funds obligations on regulated persons and informs the risk-management practice of non-regulated commercial counterparties. The review must address the BVI entity's beneficial ownership, the purpose of the arrangement, the payment channel, and the sanctions position – and it must do so before the contract is executed, not after. The risk that animates this piece is enforcement risk: a stalled payment, a correspondent bank refusal, a regulatory inquiry, or a de-risking event that exposes a gap in the pre-contract file.

This analysis covers what is commercially at stake, how the governing rules bite across the Hong Kong–BVI interface, what a review must cover in practice, and where our desk sees the sharpest risk in the current environment. It draws on the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, the United Nations Sanctions Ordinance, and the compliance expectations that Hong Kong's financial regulators have published for firms operating in this space.

What is actually at stake commercially?

The BVI entity is the most common offshore holding vehicle in Asia-Pacific cross-border transactions, and it sits at the centre of a compliance tension that has intensified materially over the past three years. On one side: a legitimate commercial counterparty incorporated in a well-regulated common-law offshore jurisdiction with a functioning registry and a statutory beneficial-ownership regime. On the other: a structure that, by design, separates the legal entity from the economic owner – and that separation is precisely what compliance reviewers, correspondent banks, and regulators interrogate.

The commercial stakes are not abstract. A contract signed without a completed pre-contract compliance file creates at least three categories of exposure. First, a correspondent bank in Hong Kong – or, more commonly, in a major international clearing centre – may refuse or reverse the associated payment on the basis that the beneficial-owner position is undocumented. This is not a theoretical risk. Our desk regularly sees payment chains stalled at the correspondent-bank layer where the originating compliance file cannot answer the bank's standard beneficial-ownership question for the BVI counterparty.

Second, where the contracting party is a regulated person under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance – a licensed bank, a licensed money-service operator, a securities licensee, a licensed insurer, or an accountant or solicitor in certain prescribed circumstances – the absence of a completed customer due diligence file before the business relationship is established is itself a regulatory breach. The Ordinance does not permit retroactive cure by filing after the fact; the obligation bites at the point of engagement.

Third, the reputational and operational consequence of a de-risking event – where a correspondent or clearing bank exits the relationship because of a perceived compliance gap – can disrupt a payment infrastructure that took years to build. That disruption is difficult and slow to reverse.

How do the governing instruments frame the obligation?

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance is the primary instrument. It applies directly to regulated persons in Hong Kong and sets the standard of care that the financial system expects of all counterparties, whether or not they are themselves regulated. The Ordinance requires customer due diligence measures to be applied before or during the establishment of a business relationship, with enhanced measures where the risk is assessed as higher than standard.

A BVI entity presenting as a counterparty is, by default, a higher-complexity case. The BVI Business Companies Act has a beneficial-ownership registry – the Beneficial Ownership Secure Search System (BOSS, the BVI's centralised, law-enforcement-accessible register of beneficial owners of BVI entities) – but that registry is not public. A commercial counterparty cannot run a self-service search. The practical consequence is that the beneficial-owner disclosure comes from the counterparty itself, or from its registered agent, and the reviewer's task is to assess the credibility and completeness of that disclosure against the available external indicators.

The United Nations Sanctions Ordinance is the second governing instrument. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. The pre-contract review must confirm that neither the BVI entity, nor its beneficial owner, nor the transaction purpose is captured by a UN-mandated designation. This is a binary check, but it must be performed and documented; a well-structured compliance file records the date and the list version searched.

The regulators' AML guidelines – published by the Hong Kong Monetary Authority, the Securities and Futures Commission, and the Insurance Authority – provide the operational standard. They are not the statute, but they define what a regulated person is expected to do, and they set the de facto benchmark for what a sophisticated non-regulated commercial party ought to do if it wants its payments to clear and its file to survive scrutiny.

For a structured assessment of the compliance position across the Hong Kong–BVI interface, write to us at info@lockhartyip.com.

What does the cross-border interface actually require?

The Hong Kong–BVI interface creates a specific compliance geometry. The contracting party sits in Hong Kong (or routes a payment through a Hong Kong account). The counterparty is in the BVI. Neither jurisdiction is a sanctions-exporting state in the UN sense, but both are subject to the correspondent banking expectations of the major clearing currencies – USD, EUR, GBP – whose correspondent banks sit in jurisdictions that apply their own unilateral measures. This is the layer that most pre-contract reviews underestimate.

In practical terms, the file that satisfies the Hong Kong Anti-Money Laundering and Counter-Terrorist Financing Ordinance standard is not necessarily the same file that satisfies the correspondent bank's own compliance team in New York, London, or Frankfurt. The correspondent bank operates under its own regulatory regime; it applies its own screening tools; and it will look at the BVI entity's beneficial owner against its own sanctions and adverse-media databases. A pre-contract compliance review that is designed only for Hong Kong regulatory purposes – and does not anticipate what the correspondent will ask – is incomplete for the payment channel.

This does not mean the review must satisfy every possible unilateral measure imposed by every jurisdiction. Hong Kong's position is clear: the city implements UN sanctions and does not give domestic effect to unilateral measures. What it does mean is that a commercially complete review identifies the payment route at the outset, maps which correspondent banks will touch that route, and builds the file to the highest-common-denominator standard that those correspondents will apply. The alternative – assembling a minimal file and discovering at the payment stage that the correspondent refuses – costs far more in time, commercial credibility, and legal fees than the additional diligence would have cost at the contracting stage.

The cross-border dimension also engages the BVI's own corporate-law requirements. A BVI entity must maintain a current register of members and, under the BVI's beneficial-ownership regime, must have its beneficial-owner information available to the BOSS system. A pre-contract review should confirm that the entity is in good standing with the BVI Registry of Corporate Affairs, that its registered agent is current, and that any information provided about its ownership is consistent with what the Registry records. Discrepancies between the counterparty's self-disclosure and the Registry record are a material red flag.

What a pre-contract compliance review must cover: the practical sequence

A compliance review before contracting with a BVI entity has a defined sequence. The order matters. Reviewing documents before establishing the purpose of the arrangement, or screening before verifying the beneficial owner, produces a file that is technically complete but analytically weak – and will not withstand scrutiny by a correspondent bank's compliance team or a regulatory examiner.

The sequence we work through runs as follows.

Step one: entity verification. Confirm good standing with the BVI Registry of Corporate Affairs. Obtain and review the certificate of incorporation, the memorandum and articles of association, the register of members, and (where the entity has issued shares to nominees or holds assets through a nominee structure) the underlying trust deed or nominee agreement. This is the foundation. Everything else rests on knowing that the entity is what it says it is.

Step two: beneficial-owner identification. Identify the ultimate beneficial owner (UBO, the natural person or persons who ultimately own or control the entity, applying the threshold used in the relevant jurisdiction's AML regime) of the BVI entity. The BVI's own threshold for beneficial-ownership disclosure is ownership or control of more than 25 per cent of the shares or voting rights. A pre-contract review should identify every natural person above that threshold, and should also identify the person who exercises effective control if no one crosses the numeric threshold.

Where the UBO is identified as a politically exposed person – a PEP (an individual who holds or has held a prominent public function, and whose position creates an elevated risk of corruption or abuse of power) – enhanced due diligence is mandatory under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance for regulated persons, and is the expected standard for sophisticated commercial counterparties. Enhanced due diligence means more than additional documentation; it means understanding the source of the UBO's funds, the rationale for the BVI structure, and the business purpose of the proposed arrangement.

Step three: sanctions screening. Screen the entity name, all UBOs, all directors, and any known associated parties against the UN consolidated sanctions list. Record the date, the list version, and the result. Where the counterparty has connections to a jurisdiction that is the subject of UN-mandated sectoral measures, a second-layer review of the transaction purpose is warranted.

Step four: adverse-media and reputational check. Run a structured adverse-media review for the entity and its UBOs. This is not a news search; it is a structured review covering regulatory findings, criminal proceedings, civil litigation, and credible adverse reporting in English-language and local-language sources. The result feeds the risk-rating decision.

Step five: payment-channel mapping. Identify the expected payment route. Which bank will originate the payment? Which correspondent will clear it? What currency? What is the intermediary chain? The compliance file must be designed to the expectations of the weakest link in that chain – typically the correspondent bank in the currency's home jurisdiction.

Step six: risk assessment and sign-off. Consolidate the findings into a written risk assessment. The assessment should identify the risk category (standard, medium, or high), the basis for that categorisation, the mitigants applied, and the name of the person who reviewed and approved the file. This is the document that a bank compliance officer, a regulatory examiner, or a court will look at if the transaction is subsequently questioned.

A European asset manager came to us in early 2027 with a deal that had stalled at the correspondent-bank layer. Its Hong Kong subsidiary had signed a services contract with a BVI entity whose UBO had not been identified in the pre-contract file. The correspondent's compliance team had returned the payment for additional documentation. We worked through the sequence above, identified the UBO and the supporting documentation, built a payment-channel-focused file, and the payment cleared within one cycle. The pre-contract gap cost the client several weeks and a material commercial delay; the remediation cost was a multiple of what a structured review at the contracting stage would have been.

If an earlier filing, structure, or compliance attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. Write to us at info@lockhartyip.com.

Where does the risk sit now? The current environment

The risk environment for BVI-entity contracting out of Hong Kong has shifted in one important direction: the correspondent-banking scrutiny of offshore-entity payment chains has intensified, not eased, over the past two years. Three factors drive this.

The first is the global rollout of enhanced beneficial-ownership transparency expectations. The Financial Action Task Force's updated recommendations on beneficial ownership – which the BVI has moved to implement, and which Hong Kong's regulators have incorporated into their AML guidelines – have raised the baseline expectation for what a documented counterparty file looks like. A file that would have satisfied a correspondent bank's compliance review in 2021 may not satisfy the same bank's review today.

The second factor is the de-risking behaviour of major correspondent banks in response to their own regulatory environment. This affects BVI-entity payment chains disproportionately, because the BVI's non-public beneficial-ownership register means that the correspondent cannot independently verify the UBO. The counterparty's own disclosure becomes the only evidence, and the correspondent's tolerance for undocumented or incompletely documented disclosure has shortened. Our desk sees this as the single most common cause of payment-chain failure in cross-border transactions where one party is a BVI entity.

The third factor is the interaction between the BVI's standing as a jurisdiction and the broader question of economic substance. The BVI has a economic substance regime (requiring that certain BVI entities demonstrate genuine activity in the BVI in relation to specified income-generating activities). Where a BVI entity is a pure holding vehicle with no staff and no premises – which describes the majority of BVI entities used in cross-border structures – the substance question is a compliance reviewer's flag for a second-order question: what is this entity actually for, and does the proposed arrangement make sense in light of its structure?

This does not mean BVI holding entities are suspect. They are not. The BVI is a well-regulated common-law jurisdiction and the BVI Business Companies Act is a modern corporate statute. What it means is that the compliance reviewer's job is to understand the purpose of the entity and the logic of the arrangement – and to document that understanding in the pre-contract file. An entity that cannot explain its own existence credibly is a risk factor. An entity that can explain it, and can support that explanation with documents, is a manageable counterparty.

A second scenario that illustrates the current risk: a mid-market Hong Kong trading group came to us in autumn 2026 seeking to contract with a BVI entity that was the registered holder of intellectual property generated by an underlying Mainland Chinese operating group. The beneficial owner was identified without difficulty. The complexity arose from the payment structure: royalties denominated in USD, flowing from Hong Kong to the BVI, via a correspondent bank that required a written explanation of the royalty arrangement and the commercial rationale for the offshore IP holding. The pre-contract compliance file had to address not just the BVI entity's beneficial-ownership position but the economic logic of the arrangement as a whole. We prepared a payment-channel-focused file that addressed both layers; the royalty stream cleared without interruption.

What foreign advisers commonly get wrong

The most persistent mistake we see from foreign counsel advising on BVI-entity contracting is the assumption that a compliance review is a box-ticking exercise directed at the counterparty's registration documents. It is not. The documents are the starting point; the analysis is the substance.

A second common error is treating the compliance review as a one-time event rather than a continuing obligation. For regulated persons in Hong Kong, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires ongoing monitoring of a business relationship, not just a pre-contract check. For non-regulated commercial parties, the practical consequence is the same: if the counterparty's beneficial ownership changes, or if adverse information emerges after the contract is signed, the contracting party needs to know and to act on that knowledge. A pre-contract file that is not revisited when material facts change is a compliance file that will not survive scrutiny at the point when it matters most.

The third error – perhaps the costliest – is designing the compliance file to the Hong Kong regulatory standard without considering the payment-channel standard. As the analysis above sets out, these are not the same thing. A file that satisfies the Ordinance may not satisfy the correspondent bank. The correspondent bank's refusal is not a legal remedy; it is a commercial failure that disrupts the transaction and is difficult to reverse quickly.

Finally, foreign advisers sometimes underestimate the interaction between the pre-contract compliance review and the tax-structuring analysis of the BVI entity. Where the BVI entity is part of a holding structure that has been designed to achieve a particular tax outcome – a common position in Asia-Pacific cross-border groups – the compliance reviewer must understand that structure well enough to explain it to a correspondent bank's compliance team. A structure that looks aggressive or artificial to a lay reviewer will generate questions; a structure that can be explained clearly in the file will not.

Our Sanctions & AML practice works across this interface regularly, and our desk has a specific focus on the payment-channel and banking-access dimension of pre-contract compliance reviews. See also our analysis of sanctions due diligence for deals touching the BVI and our matter note on AML obligations for Hong Kong corporate services providers.

The comparative read: Hong Kong and the BVI in the same frame

Hong Kong and the BVI occupy different positions in the compliance architecture of a cross-border transaction, and understanding the difference is the analytical foundation of a well-constructed pre-contract review.

Hong Kong is the transacting jurisdiction: the forum where the contract is negotiated, where the regulated person is licensed, where the payment originates, and where any enforcement action by a Hong Kong regulator would be brought. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance governs what a regulated person in Hong Kong must do; the Hong Kong courts and the Hong Kong financial regulators enforce those obligations.

The BVI is the counterparty's home jurisdiction: the place where the entity was incorporated, where its corporate records are maintained, and where its beneficial-ownership information is held by the BOSS system. The BVI is a common-law jurisdiction. Its courts are respected, and its statutory and regulatory framework has been significantly modernised over the past decade. But the BVI is not a transacting jurisdiction in the way Hong Kong is. It does not process the payment. Its regulators do not directly supervise the Hong Kong contracting party's compliance obligations. Its enforcement arm is directed at BVI-licensed fiduciaries, not at the offshore entity's counterparties.

The practical consequence is that the compliance obligation runs almost entirely on the Hong Kong side of the interface. The BVI entity has its own obligations – to maintain accurate records, to disclose its beneficial owner to the BOSS system, to cooperate with law-enforcement requests – but those obligations do not substitute for the Hong Kong party's independent pre-contract review. The Hong Kong contracting party cannot discharge its compliance obligation by pointing to the BVI entity's own filings. It must conduct its own review and document its own conclusions.

This is the comparative read that foreign counsel most often miss. The assumption that the BVI's own regulatory regime covers the compliance obligation of the Hong Kong counterparty is incorrect. The two regimes run in parallel, on different axes, and neither substitutes for the other.

Our read: where the risk sits and what to do now

The compliance risk in contracting with a BVI entity from Hong Kong is concentrated in three points. The first is at the beneficial-owner identification stage: incomplete or undocumented UBO information is the single most common reason a pre-contract file fails. The second is at the payment-channel stage: a file designed only for Hong Kong regulatory purposes without regard to the correspondent bank's own requirements will fail at the clearing stage. The third is in the ongoing-monitoring gap: a pre-contract file that is not updated when material facts change becomes a liability, not a protection.

The answer is a structured pre-contract review that runs the six-step sequence described above, that is designed for the payment channel as well as the regulatory standard, and that is built on the assumption that it will be read by a correspondent bank's compliance team as well as by a Hong Kong regulatory examiner. That review takes time. It requires documents from the counterparty. It requires a payment-channel analysis. And it requires a written sign-off that records the reviewer's conclusions and the basis for them.

What is the cost of not doing it? A stalled payment, a correspondent-bank refusal, a regulatory inquiry, or – in the most serious cases – a transaction that cannot be completed because the compliance file cannot be reconstructed after the fact. The commercial disruption of any of these outcomes exceeds, by a considerable margin, the cost of a complete pre-contract review at the outset.

The current environment rewards preparation. Correspondent banks are more exacting, not less. Regulators are more focused on the pre-contract file, not less. The BVI beneficial-ownership regime is more visible to international counterparts than it was three years ago. The direction of travel is clear, and the risk of under-preparation is not diminishing.

Related practices

• Sanctions & AML – pre-contract compliance, counterparty screening, and AML file preparation for cross-border arrangements
• Holding Structures – BVI and offshore holding entity review, beneficial-ownership analysis, and cross-border structuring

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Sanctions Due Diligence Deal Touching Bvi Bvi Analysis
• Aml Obligations Hong Kong Corporate Services Provider Matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.