Update: responding to a bank's source-of-funds

Banks across Hong Kong are issuing source-of-funds requests with greater frequency, tighter deadlines, and a broader documentary scope than at any point in recent years. For cross-border groups moving capital through the city – whether between the Mainland and an offshore holding centre or along corridors into the Middle East and Central Asia – an incomplete or poorly framed response can result in account suspension, transaction blocking, or a formal suspicious transaction report (STR, a mandatory report filed by a regulated institution when it suspects money laundering or terrorist financing). The window to respond is short and the consequences of mishandling it are not.

Hong Kong banks issue source-of-funds requests under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which requires them to conduct ongoing customer due diligence and to establish the origin of material funds flows. A request is not a suspicion of wrongdoing; it is a compliance mechanism that the bank must complete to maintain the account relationship. However, the response must be structured, documented, and consistent with the account's existing risk profile – or the bank's obligations may require escalation.

This briefing sets out what is driving the current volume of requests, who across the cross-border corridor is most directly affected, and what an effective response looks like.

What has changed and why requests are arriving now

The intensification is structural, not cyclical. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That distinction matters: it means a transaction that is compliant under Hong Kong's sanctions regime may still trigger a bank's internal screening if the counterparty, the jurisdiction, or the payment route appears on a unilateral list maintained elsewhere. Banks operating in Hong Kong with global correspondent networks apply layered screens, and the friction between those screens and the Hong Kong legal position generates a high volume of queries.

At the same time, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance places ongoing customer due diligence obligations on all licensed banks. Where a customer's transaction pattern changes – new jurisdictions, new counterparties, higher volumes, a restructured holding layer – the bank's compliance team is required to re-verify the source of funds. Groups that restructured their holding arrangements in the period from 2022 onwards are now encountering routine re-verification cycles, often without advance notice.

In our cross-border practice, we are also seeing requests triggered by correspondent-bank pressure from institutions in the United States, the European Union, and the United Kingdom. A Hong Kong bank's correspondent may demand assurance on a payment before clearing it. That demand flows downstream to the account-holding customer in the form of a source-of-funds request, with a deadline set by the correspondent's own clearing window – not by the Hong Kong bank's standard review period.

Who is affected across the cross-border corridor

The groups most directly in the path of the current wave are those whose capital flows across more than one legal system. A BVI or Cayman holding entity sitting above a Hong Kong operating company, receiving dividends from a Mainland subsidiary and distributing to shareholders in the UAE or Central Asia, presents exactly the profile that triggers enhanced due diligence. Each layer – the offshore holding centre, the Hong Kong bank account, the Mainland source, the recipient jurisdiction – adds a question the bank must answer.

Family offices that relocated capital to Hong Kong in recent years are similarly exposed. The underlying assets may be well-documented in the jurisdiction of origin. But if that documentation has not been translated into the format a Hong Kong compliance officer can process – certified, translated, and cross-referenced to the account – the bank cannot complete its file, and the account is at risk.

Funds and treasury operations with Greater China portfolio exposure face the same dynamic when distributions or management-fee flows pass through a Hong Kong account. The question is not whether the funds are legitimate. The question is whether the documentation trail is complete, consistent, and formatted to a standard the bank can record and retain.

The immediate action: structure the response before the deadline

A bank's source-of-funds request is time-limited. The typical window is short – often measured in business days rather than weeks – and a partial response does not stop the clock. What it does is give the bank a basis to escalate, freeze, or file. The response must therefore be complete on first delivery.

An effective response addresses three things. First, the legal source: documentation tracing the funds to their origin – corporate accounts, sale proceeds, loan disbursements, dividend resolutions, or inheritance instruments, depending on the nature of the flows. Second, the transaction rationale: a clear commercial explanation for the payment, grounded in the underlying business relationship and consistent with what the bank already holds on file. Third, the control and ownership layer: if the account-holding entity is owned through an offshore holding structure, the beneficial ownership chain must be documented to the natural person, in a format that matches the bank's know-your-customer (KYC, the identity and ownership verification process a bank must complete before and during an account relationship) records.

The sequence matters. A response that leads with the ownership chain before establishing the source of funds is harder for a compliance officer to process. A response that is factually complete but internally inconsistent – because the holding structure was changed after the last KYC update without notifying the bank – will not close the file.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the file is resolved or escalated.

To discuss how the Anti-Money Laundering and Counter-Terrorist Financing Ordinance applies to your cross-border account position, or to prepare a structured response to a request you have received, contact info@lockhartyip.com.

For a broader view of our approach to sanctions and AML advisory work, including the banking-access and payment-channel compliance work we handle across the corridor, and for our published briefing on building a source-of-funds file for a UAE counterparty, see those linked resources. For guidance specific to the bank's own request procedure, see our practice note on responding to a source-of-funds request.

Frequently asked questions

Which jurisdiction's law applies to responding to a bank's source-of-funds request?

The governing instrument is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which applies to the licensed bank in Hong Kong. The bank's obligations – and therefore the standard your response must meet – are set by Hong Kong law and the Monetary Authority's AML guidelines. Where the funds originate in the Mainland, the BVI, the Cayman Islands, or another jurisdiction, the documentation from that jurisdiction must be presented in a form the Hong Kong compliance officer can verify and retain. The applicable standard is the Hong Kong bank's, regardless of where the underlying funds originated.

How does the cross-border element affect responding to a bank's source-of-funds request?

A cross-border structure – a BVI or Cayman holding entity above a Hong Kong account, funds sourced from the Mainland, distributions to a UAE or European recipient – multiplies the documentation points. Each jurisdiction in the chain adds a layer of verification the bank must complete. Documents issued in a foreign jurisdiction must generally be certified, apostilled where the relevant convention applies, and translated where they are not in English or Chinese. Inconsistencies between the documentation from different layers are the most common reason a response fails to close the file. Counsel on our desk regularly assist in mapping the documentation across the chain before the response is submitted.

What documents are needed for responding to a bank's source-of-funds request?

The required documents depend on the nature of the funds, but the core file typically covers: certified corporate documents establishing the legal identity and ownership of the account-holding entity and its beneficial owners; evidence of the transaction generating the funds (sale and purchase agreements, dividend resolutions, loan agreements, or equivalent instruments); bank statements or audited accounts corroborating the flow; and a written explanation of the commercial rationale for the payment. Where the structure involves an offshore holding layer, the beneficial ownership chain from the offshore entity to the natural person must be documented to the standard of the bank's existing KYC file – and must be consistent with it.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

Update: responding to a bank's source-of-funds request

What has changed and why requests are arriving now

Who is affected across the cross-border corridor

The immediate action: structure the response before the deadline

Frequently asked questions

Speak with Lockhart & Yip

Related