Where managing payment-channel and banking-access risk stands now

The correspondent banking network that connects Asian, CIS and Middle Eastern groups to international clearing has narrowed consistently over the past several years. For groups that route capital through Hong Kong – whether as a holding hub, a treasury centre or the payment gateway to and from Mainland China – the question is no longer whether their bank will conduct a periodic review. The question is whether the compliance documentation already on file will survive it.

Managing payment-channel and banking-access risk in Hong Kong means building and maintaining a compliance posture that satisfies simultaneous requirements: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, the United Nations Sanctions Ordinance, the correspondent bank's own policies, and the regulatory guidance issued by the Hong Kong Monetary Authority. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states – a distinction that sits at the centre of cross-border access decisions and one that banks, their compliance teams, and their regulators do not always handle consistently.

This analysis covers the commercial stakes, the governing regime, the cross-border interface where the risk actually bites, and our read on where the pressure points sit today.

What is actually at stake commercially?

Access to a functioning payment channel is, for most international businesses, a precondition to everything else. The holding structure, the transaction, the treasury management – none of it operates if the bank account is frozen, restricted, or closed. That is the commercial stakes, stated plainly.

For groups with Greater China exposure, the payment channel runs through Hong Kong in one form or another. Cross-border renminbi settlement, offshore USD clearing, and intercompany fund movements between a BVI or Cayman holdco and a Mainland operating entity all pass through Hong Kong-licensed institutions. When a bank restricts access – whether by refusing to open an account, imposing enhanced due diligence that is not practically completable, or simply exiting a client relationship – the entire treasury architecture stalls.

The direct cost is the disruption to operating cash flows. The secondary cost, often larger, is the legal and structural work required to re-platform the banking relationship while ongoing business obligations continue to run. In our cross-border practice, we see this secondary cost routinely underestimated by groups who treat banking access as an administrative function rather than a legal-risk item. It is not administrative. It is, at its core, a compliance position that must be built and maintained to a standard that withstands scrutiny from at least two directions simultaneously.

What are those two directions? The bank's own correspondent-banking policies – which reflect, in most cases, the compliance requirements of the USD clearing system or the EUR clearing infrastructure – and the Hong Kong regulatory regime, which operates under its own statutory logic and does not automatically incorporate the extraterritorial reach of unilateral measures. The gap between those two directions is where most payment-channel problems originate.

What is the governing regime and how does it apply?

The primary statutory instrument is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (the AMLO), which imposes customer due diligence, record-keeping, and suspicious-transaction reporting obligations on all authorised institutions in Hong Kong, including all licensed banks. The United Nations Sanctions Ordinance gives effect to sanctions designations adopted by the United Nations Security Council. Together, these instruments define the mandatory compliance floor.

The Hong Kong Monetary Authority issues guidelines under the AMLO that specify the expected standard of customer due diligence for different risk categories, the content and format of source-of-funds documentation, the treatment of politically exposed persons (individuals who hold, or have held, prominent public functions, and whose financial affairs attract enhanced scrutiny), and the requirements for ongoing monitoring of correspondent-banking relationships. Those guidelines are not legislation, but banks treat non-compliance as a regulatory finding. The practical effect is that the guidelines function as binding standards.

The key structural point – one that counsel and in-house teams frequently underweight – is that the AMLO framework is risk-based, not list-based. A bank is not simply checking whether a counterparty appears on a UN designation list. It is conducting a risk assessment that incorporates geography, transaction type, business model, source of funds, and the nature of beneficial ownership. A group whose ultimate beneficial owner holds assets or transacts in a jurisdiction that the bank classifies as elevated-risk may face enhanced due diligence requirements even where no sanctions designation applies and no specific legal prohibition exists.

The distinction matters because many groups approach banking compliance as a list-clearing exercise. They confirm they are not designated. They assume the account is safe. The AMLO framework requires something different: a documented, defensible risk position that addresses the full risk profile, not just the absence of a designation.

The sequence above describes the standard position. Your matter turns on the documents actually on file, the jurisdictions engaged by your group's structure, and the completeness of the risk narrative – which is where most applications stall or relationships deteriorate.

To discuss how the AMLO framework applies to your cross-border banking position, contact info@lockhartyip.com.

How does the cross-border interface bite in practice?

The cross-border interface between Hong Kong and other jurisdictions creates three distinct pressure points, each of which requires separate treatment in a well-constructed compliance file.

The first is the Mainland China interface. A group with Mainland operating entities and a Hong Kong treasury function moves funds across the boundary under the applicable cross-border capital rules. From a sanctions and AML perspective, the bank will want to understand the business rationale for the intercompany flows, the source of the Mainland entity's revenues, and the beneficial ownership chain back to the ultimate principal. Where the Mainland entity is itself subject to any form of Mainland regulatory restriction – including sector-specific investment controls or ongoing enforcement activity – the bank's risk assessment will reflect that. The documentation burden for Mainland-linked flows has increased materially in recent years, and the bank's internal risk-rating system may apply a higher starting risk score to Mainland-connected entities regardless of their individual compliance posture.

The second pressure point is the offshore holding structure. A BVI or Cayman holdco sitting above a Hong Kong operating entity presents a specific documentation challenge: the bank needs to trace beneficial ownership through the offshore vehicle to the natural person who ultimately controls the group. Ultimate beneficial owner (the natural person who ultimately owns or controls a legal entity, typically defined by reference to ownership thresholds and control rights) documentation requirements in Hong Kong align broadly with the Financial Action Task Force recommendations. But the offshore jurisdictions have their own registers and disclosure frameworks, and the completeness and currency of those filings becomes part of the compliance evidence that a Hong Kong bank must evaluate.

The third pressure point – and the most commercially disruptive – is the correspondent-banking dimension. A Hong Kong bank that clears transactions in USD does so through a US-correspondent bank. That correspondent bank operates under a different regulatory regime, including extraterritorial measures that Hong Kong does not adopt domestically. When a US-correspondent bank applies a more restrictive policy than the AMLO framework requires, the Hong Kong bank faces a choice: it can maintain the client relationship and accept the risk of correspondent-bank restrictions, or it can exit the relationship to protect its own clearing access.

In our cross-border practice, we regularly advise on situations where a client's banking problem is not, in substance, a Hong Kong regulatory problem at all. It is a correspondent-banking problem that manifests in Hong Kong because that is where the client's account sits. The legal response to those two problems is different, and conflating them produces compliance documentation that addresses the wrong question.

Where does the comparable risk sit in other key jurisdictions?

The practical question for a group that uses Hong Kong as its payment hub is how the Hong Kong risk environment compares with that of the other jurisdictions in its structure. Two comparisons are most frequently relevant: Singapore, as the other principal common-law financial centre in the region, and a European clearing hub, typically the United Kingdom or Cyprus, for groups with European connections.

Singapore operates a comparable AML framework with its own Monetary Authority of Singapore Act and associated notices, and its own sanctions regime. The risk-based approach is similar in structure, and the documentation expectations are broadly comparable. The material difference for most groups is the geographical footprint of the client base: a group with concentrated Mainland China exposure may find Hong Kong's institutional familiarity with Mainland business models and documentation formats a practical advantage, while a group with Southeast Asian operating entities may find the converse. Neither jurisdiction is inherently safer from a payment-channel perspective. The question is whether the compliance file is calibrated to the specific risk profile of the group, not to the average expectations of the jurisdiction.

For groups with a European clearing dimension, the UK position post-2020 and the Cypriot position within the European Union present their own compliance layers. The UK's Sanctions and Anti-Money Laundering Act and the implementing statutory instruments operate in parallel with, but separately from, the Hong Kong framework. Where a group has a UK-incorporated entity, a UK-resident beneficial owner, or a transaction denominated in sterling, UK AML and sanctions obligations apply regardless of where the payment account sits. The Cypriot framework, as part of the EU AML architecture, similarly creates obligations that travel with the EU-connected entity or transaction. Cross-border groups must map these overlapping obligations structurally, not entity by entity.

A European technology group with a Cayman holding entity, a Hong Kong operating subsidiary, and a Mainland joint-venture counterpart came to us in early 2026 after its primary banking relationship in Hong Kong was flagged for enhanced due diligence. The bank's concerns related to the beneficial ownership documentation for the Cayman vehicle and the source-of-funds narrative for intercompany flows from the Mainland entity. We reviewed the compliance file, identified the gaps in the beneficial-ownership chain documentation and the missing business-rationale evidence for the intercompany payments, and prepared a consolidated compliance package that addressed the AMLO requirements and the bank's correspondent-bank obligations. The enhanced due diligence process completed within one review cycle.

What does the compliance file actually need to contain?

A well-constructed compliance file for a cross-border group using Hong Kong as a payment hub must address several distinct evidential questions, each of which corresponds to a point in the bank's risk assessment process.

Beneficial ownership documentation is the foundation. This means tracing the ownership and control chain from the Hong Kong account-holding entity back to every natural person who meets the applicable ownership or control threshold. Where that chain passes through an offshore vehicle – a BVI or Cayman entity, most commonly – the file must include the register entry or equivalent, the constitutional documents, and any shareholders' agreement or trust instrument that affects control rights. Where a trust structure is involved, the position of the settlor, trustees, and beneficiaries must be documented to the standard the AMLO guidelines require, which in practice means more disclosure than many settlors anticipate.

Source-of-funds documentation is the second pillar. The HKMA guidelines require that an authorised institution understands the source of the funds that will flow through the account. For a holding-company structure, this means documenting the operating business that generates the revenue, the dividend or intercompany payment mechanism that moves it upward through the structure, and the nature of the funds that will settle through the Hong Kong account. A generic assertion that funds derive from business operations will not satisfy the guidelines. The bank needs the narrative, supported by the underlying documents.

The Significant Controllers Register (the SCR, a register of beneficial owners and controllers that Hong Kong-incorporated companies have been required to maintain since 1 March 2018) is the Hong Kong statutory anchor for beneficial ownership transparency. In practice, however, the bank's compliance team will conduct its own review and will not simply rely on the SCR. The SCR is a starting point, not a conclusion.

Transaction documentation is the third requirement. For ongoing relationships, the bank will periodically review the account's transaction profile against the expected business activity declared at account opening. Where actual transactions deviate from the declared pattern – a new type of counterparty, a new jurisdiction, a new transaction volume – the bank will seek an explanation. Groups that proactively update their account documentation when their business model changes avoid the reactive enhanced-due-diligence process that is more expensive and more disruptive to manage.

What do cross-border groups most commonly get wrong?

In our experience advising groups across Greater China and the principal offshore centres, three errors appear with notable frequency. None of them are errors of bad intent. They are structural oversights that accumulate until the bank relationship becomes untenable.

The first is treating the compliance file as a one-time submission rather than a living document. Banking compliance in Hong Kong is an ongoing obligation, not a threshold that is cleared at account opening. A group whose structure changes – because it adds an entity, completes an acquisition, takes on a new beneficial owner, or enters a new market – must update its compliance documentation to reflect the change. Banks conduct periodic reviews, and a file that accurately described the group at account opening may be materially incomplete three years later.

The second error is maintaining separate compliance files for each banking relationship without a unified beneficial-ownership narrative. A group that holds accounts with multiple Hong Kong-licensed banks may find that each bank has a different, and partly inconsistent, understanding of the group's structure and ownership. When a bank's enhanced-due-diligence process reveals an inconsistency between its own file and information obtained from a third source, the explanation required is substantially more complex and time-consuming than the original documentation would have been.

The third error – the most consequential – is conflating the Hong Kong sanctions position with the compliance requirements of the correspondent bank. A group that has correctly satisfied the HKMA guidelines may still face restrictions because a correspondent bank in the USD clearing chain applies a more restrictive policy. Managing this requires understanding which clearing currencies are involved, which correspondent banks sit in the chain, and what their internal policies require. That analysis must be done before the account is opened or the transaction is structured, not after the restriction arises.

If an earlier filing, structure, or banking relationship produced a restriction or an adverse review result, a second read can identify the specific compliance gap and the documentation steps that remain available.

For a structured assessment of your group's payment-channel compliance position across the relevant jurisdictions, write to us at info@lockhartyip.com.

Is the myth that Hong Kong's neutral sanctions posture removes the correspondent-bank problem accurate?

This is the most persistent misconception we encounter in this area, and it is worth addressing directly.

Hong Kong's sanctions posture is legally clear: the city implements United Nations sanctions through the United Nations Sanctions Ordinance and does not give domestic effect to unilateral measures of other states. That is the position under Hong Kong law. It means that a transaction or entity that is not designated under a UN resolution, and that does not engage a UN-mandated restriction, is not prohibited under Hong Kong law by reason of any unilateral designation alone.

However, the correspondent-bank problem operates independently of Hong Kong law. A US-correspondent bank is not bound by Hong Kong's sanctions posture. It is bound by US law, US regulatory guidance, and its own internal risk policies. When it reviews a transaction or a payment instruction that originates from a Hong Kong bank, it applies its own compliance framework. If that framework leads it to decline the transaction or restrict the correspondent relationship, the Hong Kong bank's legal compliance with the AMLO and the United Nations Sanctions Ordinance does not cure the problem.

The practical implication is that groups managing payment-channel risk in Hong Kong need a two-layer compliance strategy. The first layer addresses the Hong Kong regulatory requirements – AMLO, HKMA guidelines, the UN sanctions list. The second layer maps the group's transaction profile against the correspondent-bank risk appetites of the clearing currencies actually used. Where USD clearing is involved, that means understanding the risk policy of the relevant US-correspondent bank. Where EUR clearing is involved, it means the equivalent analysis for the European correspondent chain.

These two layers do not always produce the same answer. Where they diverge, the group faces a structural decision: adjust the transaction structure to address the correspondent-bank concern while remaining fully compliant with Hong Kong law, document the legal basis for the transaction clearly enough that the correspondent bank can complete its own assessment, or consider whether an alternative clearing route is available. None of these options is a circumvention strategy. All of them are legitimate compliance management tools.

See also our analysis of sanctions due diligence for transactions touching the Cayman Islands and sanctions due diligence for transactions touching the United Kingdom for the jurisdiction-specific compliance considerations that interact with payment-channel risk.

How does this interact with the virtual-asset and fintech payment infrastructure?

A growing subset of cross-border treasury problems now involves virtual-asset trading platforms (centralised exchanges and related infrastructure licensed or seeking licensing under the AMLO) or payment arrangements that use virtual assets as an intermediate clearing mechanism. The compliance framework for this category has developed materially in recent years.

The virtual-asset trading platform (VATP) licensing regime, which commenced on 1 June 2023 under the AMLO, requires centralised virtual-asset trading platforms operating in Hong Kong to obtain a licence from the Securities and Futures Commission. The regime applies AML and counter-terrorist financing obligations to VATPs, including customer due diligence and the FATF travel rule (the requirement that originator and beneficiary information accompany virtual-asset transfers above a specified threshold). Where a virtual asset also constitutes a "security" or "futures contract" under the Securities and Futures Ordinance, additional licensing obligations apply.

For groups that use virtual assets as part of a cross-border payment arrangement – whether to settle intercompany balances, to manage treasury positions across jurisdictions where traditional correspondent banking is restricted, or to access liquidity in markets where conventional banking infrastructure is limited – the compliance requirements are layered and, in several respects, more demanding than for conventional payment flows. The beneficial-ownership and source-of-funds documentation requirements apply with equal force. The travel-rule obligation adds a separate data-transmission requirement. And the correspondent-bank dimension does not disappear: a VATP that maintains fiat-currency settlement accounts at a licensed bank is subject to that bank's own compliance review in the same way as any other commercial client.

An Asian technology group using a Hong Kong-licensed VATP to settle cross-border receivables with a counterpart in a jurisdiction where conventional correspondent banking was restricted came to our desk in mid-2026. The group had correctly obtained the relevant on-boarding documentation for the VATP but had not addressed the source-of-funds narrative for the fiat-currency conversions, and the VATP's own compliance review had stalled as a result. We prepared the consolidated source-of-funds and beneficial-ownership file, addressed the travel-rule data requirements for the relevant transfers, and resolved the on-boarding position within the applicable review cycle.

Our Sanctions & AML practice page sets out the full scope of compliance advisory services available for cross-border payment structures, including virtual-asset arrangements.

Where does the risk sit now, and where is it heading?

Our desk's current read is that payment-channel and banking-access risk is at or near peak structural difficulty for groups with concentrated Greater China exposure transacting through Hong Kong. The difficulty is not primarily a function of Hong Kong law, which remains coherent, stable and well-administered. It is a function of three external pressures that converge on the Hong Kong payment channel simultaneously.

The first is the continued tightening of correspondent-bank risk policies in the USD clearing system. This trend has been running for over a decade and shows no sign of reversing. The practical effect is that the documentation and narrative standard required to maintain correspondent-bank access has risen, and will continue to rise, independently of any change in Hong Kong law or regulation.

The second is the increased regulatory attention to beneficial-ownership transparency globally, including in the principal offshore holding jurisdictions. BVI and Cayman entities used above Hong Kong operating companies face more disclosure and transparency requirements than they did five years ago. Where the documentation produced from those offshore registries is incomplete or out of date, it creates a gap in the compliance file that a Hong Kong bank's periodic review will identify.

The third is the expansion of the Hong Kong-licensed VATP sector and the fiat-referenced stablecoin issuer framework. As more cross-border payment flows route through virtual-asset infrastructure, the compliance requirements applicable to those flows become more complex. The HKMA is developing a licensing regime for fiat-referenced stablecoin issuers (entities that issue tokens pegged to a fiat currency, such as a USD-denominated stablecoin) in Hong Kong, with a regime that commenced in 2025 – parties should verify the current commencement position before acting. This development adds a further compliance layer to payment arrangements that use stablecoin infrastructure.

Taken together, these three pressures point in the same direction: the standard of compliance documentation required to maintain reliable payment-channel access through Hong Kong will continue to increase. Groups that treat their compliance file as a completed project are, on our current read, taking on an exposure they may not have fully priced.

Related practices

• Sanctions & AML – Cross-border compliance, source-of-funds, and sanctions-neutral contracting
• Holding Structures – Offshore holding architecture and beneficial-ownership compliance across HK and offshore centres
• Tech & Web3 – VATP licensing, AML obligations, and travel-rule compliance for virtual-asset structures

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Sanctions Due Diligence Deal Touching Cayman Islands Cayman 5
• Sanctions Due Diligence Deal Touching United Kingdom Uk 3

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.