Where responding to a bank's source-of-funds request stands now

A source-of-funds request from a correspondent bank or a Hong Kong account-holding institution is not a bureaucratic inconvenience. It is the point at which banking access – and therefore commercial continuity – is decided. For principals with cross-border structures, Mainland China operations, or capital moving through multiple jurisdictions, the quality of the response determines whether the account survives and whether the payment channel stays open.

Responding to a bank's source-of-funds request is governed in Hong Kong principally by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulators' AML guidelines, which impose customer due diligence and ongoing monitoring obligations on licensed institutions. The bank's request is the visible surface of those statutory duties. Since the regime operates on a risk-based model, the adequacy of the client's documentary response is assessed against the institution's own risk appetite and the cross-border profile of the funds – making the content and sequencing of the reply as important as the underlying facts.

This analysis sets out what is genuinely at stake, how the governing regime works across jurisdictions, where the comparative read sharpens, and where our desk sees the enforcement risk sitting today.

What is actually at stake commercially

Account closure, payment suspension, and correspondent-banking de-risking are the real consequences of an inadequate response. They are not rare outcomes. In our cross-border practice, we regularly see mandates where the trigger is a frozen payment rather than a regulatory investigation – the commercial pressure arrives first.

For a group operating across Hong Kong, the Mainland, and an offshore holding centre, the stakes compound quickly. A stalled payment in a USD correspondent channel can block a dividend flow from a BVI vehicle, delay a closing under a Mainland acquisition, or interrupt trade finance supporting an operating subsidiary. The group's legal team may be several steps removed from the entity that received the request, and the document trail is often across multiple jurisdictions and languages.

The bank's request does not sit in isolation. It reflects a risk-scoring decision taken upstream – by the institution's own AML function, by a correspondent's compliance desk, or by an automated transaction-monitoring system that has flagged a pattern. That context matters because the response must address the underlying scoring concern, not merely produce documents.

What does failure look like in practice? An Asian holding group that supplies an incomplete response – a certificate of incorporation without a beneficial-ownership declaration, or bank statements without a narrative linking capital flows to the documented corporate structure – often receives a follow-up request within days, then a notice of enhanced due diligence review, and ultimately a relationship exit letter. Once that letter is issued, recovery of the account at the same institution is uncommon. The cost then is the time and reputational friction of opening elsewhere, and the interruption to the payment channel in the interim.

The governing regime: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulators' AML guidelines

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance is the primary statutory instrument governing the obligations of Hong Kong financial institutions in relation to customer due diligence, beneficial-ownership verification, and source-of-funds scrutiny. The Ordinance imposes risk-based obligations on authorised institutions – banks, licensed intermediaries, licensed money-service operators, and, since June 2023, licensed virtual-asset trading platforms – and charges the relevant regulator with issuing supervisory guidance to operationalise those obligations.

The regulators' AML guidelines – issued by the Hong Kong Monetary Authority for banks and deposit-taking institutions, and by the Securities and Futures Commission for licensed intermediaries – translate the statutory risk-based standard into operational expectations. Those guidelines describe the categories of enhanced due diligence that apply to higher-risk customers, which typically include customers with Mainland China nexus, politically exposed persons, and customers operating through layered holding structures in offshore centres.

The Ordinance does not prescribe the exact documents a client must provide. That is by design. The risk-based model allows institutions to calibrate their requests to the specific profile of the customer and the transaction. What this means in practice is that a source-of-funds request from a Hong Kong bank is shaped by the institution's internal risk policy, its correspondent's requirements, and the profile of the funds themselves. A response that would satisfy a low-risk domestic account may be wholly inadequate for an account holding funds that have transited through a BVI entity, a Cayman fund, or a Mainland operating subsidiary.

On the sanctions side, Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That posture is relevant to source-of-funds work because a principal whose counterparties include entities in jurisdictions subject to unilateral measures from a third state – but not to UN sanctions – will need to frame the compliance narrative accordingly. The bank's correspondent, if it operates in a jurisdiction that applies those unilateral measures, may have independent reasons for the request. Understanding which regime is driving the inquiry is the first analytical step.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. To discuss how the Anti-Money Laundering and Counter-Terrorist Financing Ordinance applies to your cross-border position, contact info@lockhartyip.com.

How the cross-border interface bites: Hong Kong, the Mainland, and offshore structures

The cross-border interface is where source-of-funds responses become genuinely complex. A group with a Hong Kong account-holding entity, a Mainland operating subsidiary generating the profits, and a BVI or Cayman holding vehicle sitting above the Hong Kong entity presents a three-jurisdiction tracing exercise – and the bank expects the client to do the tracing, not the institution.

Consider the typical flow. Profits are generated at the Mainland opco level, distributed upward under a dividend arrangement governed by Mainland foreign-exchange rules and the applicable double-taxation arrangement, received into the Hong Kong account, and then deployed either to service holding-level obligations or to fund the offshore vehicle's investment activity. Each step in that chain is a source-of-funds question. The bank wants to see: where did the funds originate; what were the legitimate business activities that generated them; how were they lawfully transferred from the Mainland; and how did they arrive in the Hong Kong account?

The Mainland foreign-exchange regime adds a layer. Capital account transactions – including upstream dividends and equity transfers – require registration and, in some cases, approval from the State Administration of Foreign Exchange. A clean source-of-funds response for a Mainland-origin payment will typically include the relevant forex registration certificates, the original investment registration documents, and tax-clearance confirmation. Without those documents, the narrative that the funds are legitimate Mainland business income is unsupported.

On the offshore side, the position differs by structure. A BVI holding entity contributes no tax records of its own – it will typically hold shares, receive dividends, and make investments. Its source-of-funds trail leads back to the Hong Kong or Mainland operating level. A bank reviewing a payment from a BVI entity into a Hong Kong account will expect the client to bridge that gap explicitly: the BVI entity exists because of its role in the group structure, and the funds in the BVI entity came from these verified sources below it.

What foreign counsel frequently misread is the correspondent dimension. A European or US correspondent bank reviewing a Hong Kong institution's customer file applies its own jurisdiction's standards to the assessment. Those standards may require beneficial-ownership disclosure at a lower threshold than the Hong Kong statutory standard, or may flag jurisdictions – such as certain offshore centres or Mainland-connected entities – as requiring enhanced due diligence regardless of the Hong Kong bank's own risk rating. A response calibrated to Hong Kong requirements alone may be adequate under the Ordinance but inadequate for the correspondent's compliance desk.

The comparative read: Hong Kong, Singapore, and the offshore centres

Principals with parallel banking relationships across Hong Kong and Singapore – a common configuration for regional treasury functions – encounter the source-of-funds obligation in both jurisdictions. The regimes are analytically similar but operationally distinct.

Singapore's AML framework is built on a broadly equivalent risk-based model, and both jurisdictions apply the Financial Action Task Force recommendations as the baseline international standard. In both systems, the risk-based model means the institution drives the content of the request. The practical divergence emerges in the treatment of Mainland China nexus, in the correspondent-banking relationships each jurisdiction maintains, and in the treatment of offshore holding structures.

Hong Kong banks, operating within the one country, two systems framework, have deeper operational familiarity with Mainland-origin funds than most Singapore counterparts. A Hong Kong institution is more likely to have internal capacity to assess Mainland forex registration documents, to read Chinese-language corporate records, and to contextualise the structure of a Mainland–HK–offshore group. That familiarity does not reduce the evidentiary standard, but it does mean the conversation moves more efficiently when the client's adviser understands what the institution already knows and where the gaps actually sit.

Singapore's correspondent relationships with US and European institutions may mean that a Singapore account is subject to a more demanding review of funds connected to jurisdictions those correspondents treat as higher risk. For a group whose capital originates in the Mainland and whose holding structure passes through offshore centres, the Singapore account may face a more acute correspondent-level challenge than an equivalent Hong Kong account facing the same transaction profile.

Offshore jurisdictions – the BVI, the Cayman Islands – do not themselves impose the source-of-funds obligation on the principal in the same way a banking relationship does. But their economic-substance regimes and the growing expectations of their registries, combined with the increasingly detailed beneficial-ownership disclosure requirements that apply to entities incorporated in those centres, mean that the BVI or Cayman layer can no longer be treated as opaque by design. The group that cannot produce a clean beneficial-ownership declaration for its BVI holding entity will not satisfy a source-of-funds request at any downstream institution.

Decision matrix: situation, instrument, route, timing, risk

The analysis above translates into a practical decision matrix for the principal or in-house counsel managing a live source-of-funds request.

Situation A: A Hong Kong account-holding entity receives a source-of-funds request for an inbound payment from a Mainland subsidiary. The governing instrument is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulator's AML guidelines. The route is a documentary response tracing the Mainland profit origin through forex registration, tax confirmation, and the inter-company dividend chain. Timing is critical: most institutions specify a response window, and failure to meet it triggers escalation to enhanced due diligence or account suspension. The risk is correspondence-level escalation if the Mainland documents are not in English or if the forex registration is incomplete.

Situation B: A BVI holding entity makes a payment to a Hong Kong account and the institution requests source-of-funds documentation for the BVI entity itself. The instrument and guidelines are the same, but the route requires the principal to bridge the BVI layer back to the verified operating-level source. There is no BVI tax record to produce; the response must rely on group structural documentation, the original investment records, and the downstream verified income. The risk is that the correspondent bank applies a stricter jurisdictional standard to BVI-origin payments, requiring additional beneficial-ownership disclosure or a legal-opinion comfort letter.

Situation C: The request is driven not by the Hong Kong institution's own review but by a USD-correspondent compliance query. The instrument that matters is the correspondent's own jurisdiction's AML regime, not just the Hong Kong Ordinance. The route requires the principal to anticipate the correspondent's standard – which may include OFAC and FATF concerns that the Hong Kong institution is not independently applying – and to produce a response that satisfies both. The risk is that an incomplete correspondent response causes the Hong Kong institution to suspend USD-denominated payments even if the HK-law compliance position is clean.

Situation D: The principal operates across Hong Kong and Singapore, and the request arrives in both jurisdictions simultaneously for the same underlying transaction. The route requires parallel responses calibrated to each institution's risk appetite, the applicable local guidelines, and the correspondent's requirements. The timing risk is that a delayed response in one jurisdiction flags the account in a shared correspondent network before the other institution has reached a decision.

If an earlier filing, structure or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. To assess the cross-border position and map the documentary response across the relevant jurisdictions, contact info@lockhartyip.com.

What our desk sees now: where the enforcement risk sits

The risk concentration has shifted. In earlier cycles, the primary concern was satisfying the account-holding institution itself. Today, the determinative constraint for many cross-border groups is the correspondent-banking layer. A Hong Kong bank that is satisfied with the client's source-of-funds response may still suspend a payment if its USD correspondent flags a concern – and the client has no direct relationship with, or visibility into, the correspondent's review process.

This correspondent-bank dynamic creates an enforcement risk that is structurally different from a direct regulatory action. There is no formal investigation, no notice period, no right of appeal. The payment channel closes because a bank that the client has never contracted with has applied its own risk model to a transaction that passes through its books. Recovery requires the account-holding institution to advocate to its correspondent on the client's behalf – a process that can take weeks and depends entirely on the quality of the documentation the client has already provided.

We see three specific risk concentrations in our cross-border practice at present.

First, incomplete beneficial-ownership disclosure for multi-tier holding structures. The expectation across institutions in Hong Kong and Singapore has moved to near-complete transparency on the ultimate beneficial owner. A structure with more than two holding layers between the operating entity and the individual beneficial owner – particularly where one of those layers is in an offshore jurisdiction – will regularly attract enhanced scrutiny. The response must trace the full chain, with documentary support at each layer.

Second, Mainland-origin funds moving through offshore vehicles before reaching the Hong Kong account. The forex registration and original investment documentation for the Mainland layer is frequently missing from the initial response, because the principal – or the adviser who assembled the response – did not understand that the institution needs to verify the point of origin, not just the last sending account. A payment arriving from a BVI entity funded by Mainland dividends requires both the BVI structural documentation and the Mainland forex clearance to be produced.

Third, the treatment of sanctioned-adjacent jurisdictions. Where a group has commercial relationships with entities in jurisdictions subject to unilateral measures from the US or EU – but not to UN sanctions that Hong Kong implements – the source-of-funds response must be carefully framed to distinguish the legitimate commercial nexus from any connection to sanctioned activity. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states, but the correspondent bank may apply its home jurisdiction's sanctions standards. The response must address that reality head-on.

Micro-scenarios: how the problem presents in practice

A European manufacturing group with a Mainland joint-venture operating subsidiary and a Hong Kong treasury account came to us in early 2026. The institution had placed the account under enhanced due diligence review following a correspondent-level flag on a series of Mainland dividend payments. The client's original response had included group accounts and a corporate diagram but no forex registration certificates and no Chinese-language originals. We worked with the client to produce a structured documentary file – Mainland investment registration, forex approval records for each dividend remittance, group beneficial-ownership disclosure certified by locally licensed Hong Kong counsel – and prepared a narrative that contextualised each payment against the group's verified operating history. The account review was concluded without suspension of the account.

A second matter involved a family office principal based in the UAE with a Hong Kong private-banking relationship and assets held through a Cayman trust structure. The institution's request followed a review of the trust's investment activity and focused on the origin of the settlor's capital – specifically, the source of the funds contributed to the trust when it was established. The challenge was that the settlement had occurred several years earlier and the original business sale documentation was held by counsel in another jurisdiction. We coordinated with allied counsel on the Mainland-China compliance review angle and with the offshore trustee to compile a retrospective source-of-wealth file that met the institution's enhanced due diligence standard. The matter required careful sequencing: the offshore trustee needed to confirm its own records before the private bank would accept the narrative, which meant the response had to be assembled in a defined order rather than produced all at once.

What foreign counsel and in-house teams commonly misread

Three analytical errors recur in source-of-funds matters where the client's own team or a foreign adviser has led the initial response.

The first is treating the request as a document-production exercise rather than a risk-narrative exercise. A bank is not looking for a complete set of corporate records. It is looking for a coherent account of where the funds came from, why the account holder has them, and why the flow is consistent with the stated business purpose. A thick bundle of documents without a clear narrative structure will often produce a follow-up request rather than a clean clearance. The narrative must lead; the documents support it.

Second, underestimating the correspondent dimension. In-house teams frequently direct the source-of-funds response to the relationship manager at the account-holding institution and assume that a positive response from that contact means the matter is resolved. It does not, where the payment is USD-denominated or passes through a correspondent that has its own review underway. The relationship manager's satisfaction is a necessary but not a sufficient condition.

Third, failing to distinguish between the legal standard under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance – which is a risk-based standard applied by the institution – and the commercial standard applied by a risk-averse correspondent. A group may be fully compliant with its Hong Kong legal obligations and still lose a payment channel because a correspondent has applied a stricter commercial risk threshold. The distinction matters for the client's litigation options if the relationship is terminated, but it does not help in the short term.

Our sanctions and AML practice addresses both dimensions: the compliance file for the Hong Kong institution and the cross-border framing that anticipates the correspondent's position. Further context on the compliance approach for cross-border counterparty relationships is available in our Singapore-entity compliance briefing.

Our read and the structural position going forward

The direction of travel is towards greater documentary depth and faster escalation timelines. Institutions are compressing the period between an initial source-of-funds request and an account-exit decision. Where that window was once measured in months, we regularly see response windows of two to three weeks in practice. The principal who is unprepared – who lacks a current beneficial-ownership file, who cannot produce Mainland forex documentation at short notice, who has no coordinated narrative across a multi-layer structure – is at a material disadvantage.

The structural implication is that source-of-funds readiness should be treated as a standing compliance posture, not a reactive exercise. For groups with cross-border structures, that means maintaining a current consolidated beneficial-ownership file, keeping forex and investment registration documents accessible, and ensuring that any change to the group structure – a new holding layer, a change of trustee, a Mainland equity transfer – triggers an immediate update to the compliance file held by the account-holding institution.

For groups operating in the virtual-asset space, the position is sharper. Licensed virtual-asset trading platforms operating under Hong Kong's mandatory licensing regime – which commenced on 1 June 2023 under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance – are themselves subject to the customer due diligence and FATF travel rule obligations. Their banking relationships are under concentrated scrutiny, and a source-of-funds request directed to a platform or to a platform's operating entity will engage the same institutional risk-scoring dynamic as any other cross-border structure.

The common-law system, with English as an official working language of the courts, means that Hong Kong provides a well-tested forum for resolving disputes about account closures and payment suspensions where a legal remedy is available. The Court of First Instance has jurisdiction over contested banking decisions, and the enforceability of correspondent-bank obligations is subject to the same common-law principles that govern other commercial relationships. That option exists, but the cost and duration make the prevention case far stronger than the litigation case. Our desk is clear on that sequencing.

For more on how our sanctions and AML practice approaches compliance positioning across the cross-border payment channel, see our Sanctions & AML practice page.

Related practices

• Sanctions & AML – cross-border AML compliance, sanctions screening, and source-of-funds positioning
• Corporate Counsel – group structure maintenance, beneficial-ownership records, and compliance governance
• Holding Structures – multi-tier holding architecture across Hong Kong, Mainland China, and offshore centres

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Compliance Review Before Contracting Mainland China Entity Mainland 4
• Compliance Review Before Contracting Singapore Entity Singapore Briefing

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.