How to approach an AML and source-of-funds file BVI

A cross-border payment stalls. The correspondent bank flags the BVI counterparty. The transaction team asks compliance for a source-of-funds file – and no one is certain where to start. This scenario arrives on our desk regularly, and the answer is almost always the same: the file fails not because the underlying funds are suspect, but because the documentation sequence was assembled in the wrong order.

An anti-money laundering (AML) and source-of-funds file for a British Virgin Islands counterparty is a structured documentary record demonstrating that the counterparty is who it claims to be, that its ultimate beneficial owner is identifiable and sanctioned-person-free, and that the funds entering the transaction derive from a legitimate, traceable commercial or investment source. The governing instruments are the Anti-Money Laundering and Counter-Terrorist Financing Ordinance in Hong Kong and the BVI's own Anti-Money Laundering and Terrorist Financing Code (the BVI AML Code) issued by the BVI Financial Investigation Agency and Financial Services Commission. Where the payment channel runs through a Hong Kong bank, the Hong Kong Monetary Authority's AML guidelines set the practical compliance standard the bank will apply, regardless of where the counterparty is incorporated.

This guide sets out the decision the in-house team faces, the correct sequence of steps, the gate at each stage, the most common mistake, and a closing checklist – in that order.

Why does a BVI counterparty trigger heightened scrutiny in Hong Kong?

The BVI is a legitimate and widely used offshore holding jurisdiction. It is not on a United Nations sanctions list, and Hong Kong does not apply unilateral country-based restrictions. The structural complexity arises for a different reason: a BVI business company has no public beneficial-ownership register accessible to a counterparty or its bank. The legal owner on the register may be a nominee or a further offshore entity. That opacity is the source of the compliance burden – and it is structural, not reputational.

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral sanctions measures of other states. The AML file for the BVI counterparty is therefore a compliance exercise, not a sanctions evasion check against any one country's list. The bank's concern is straightforward: know your customer (KYC) obligations require it to identify every natural person who ultimately owns or controls the counterparty above a material threshold, verify that no such person appears on a UN sanctions list or is a politically exposed person (PEP) requiring enhanced due diligence, and satisfy itself that the funds do not represent the proceeds of crime.

That is the framework. The practical difficulty is that a BVI company will typically have neither audited accounts filed publicly nor a shareholder register available for inspection. The compliance team must therefore build the chain of ownership from private documents – and the quality of that chain determines whether the bank accepts the file or returns it.

Step 1 – Map the ownership chain before requesting any documents

Begin with a structure diagram, drawn from whatever information the counterparty's counsel or representative has already provided, before making any formal document request. This preliminary map serves two purposes. First, it identifies the number of layers between the BVI entity and the ultimate natural-person beneficial owner. Second, it reveals whether any intermediate holding entity sits in a jurisdiction whose AML regime is rated deficient by the Financial Action Task Force (FATF) – the intergovernmental standard-setter for AML policy.

A BVI holding company owned by a Cayman fund, which in turn is managed by a Hong Kong-licensed fund manager, presents a different document set from a BVI company owned by a single natural person resident in a jurisdiction with limited public records. Mapping first prevents the common mistake of requesting the wrong document tier and then having to return to the counterparty multiple times.

At this stage, the gate is simple: can the counterparty provide a plausible account of the ownership chain in a short narrative? If the counterparty declines to identify the beneficial owner at all, the file cannot proceed. That is not a legal determination – it is a commercial one. Our cross-border practice sees deals stall at exactly this gate when the counterparty's representative confuses confidentiality with non-disclosure.

Step 2 – Assemble the corporate identity layer

The corporate identity layer covers the BVI entity itself. The core documents are: a certificate of incorporation or good-standing certificate issued by the BVI Registry of Corporate Affairs; the memorandum and articles of association; the register of directors (a private document in the BVI, but disclosable to a counterparty for compliance purposes); and – where nominee directors are used – a disclosure of the ultimate instructing principal behind the nomineeships.

A certificate of good standing is not a mere formality. It confirms the company has paid its annual government fees and is legally subsisting. A BVI company that has been struck off and subsequently restored will show a gap in its good-standing history, which the bank's compliance team will query. Obtain a certificate dated within three months of the transaction.

Where the BVI entity has a registered agent – as required under BVI law – the registered agent's details should be confirmed in the file. The registered agent holds the statutory registers. A reputable registered agent in Road Town, Tortola is itself a trust signal for the compliance reviewer. If the registered agent is unknown or uncontactable, that is a red flag requiring investigation before the file moves forward.

The gate at Step 2 is subsistence and identity: does a real, validly incorporated, currently subsisting BVI entity exist, and do the corporate documents confirm it? If the documents are inconsistent – for example, a director named in the articles does not appear on the register provided – the discrepancy must be resolved before moving to beneficial ownership.

Step 3 – Establish and verify the ultimate beneficial owner

This is the central task of the file. The ultimate beneficial owner (UBO) is the natural person who ultimately owns or controls the BVI entity. The relevant threshold in most institutional AML frameworks is ownership or control of 25% or more, though some banks apply a lower threshold of 10% for higher-risk structures. Confirm the applicable threshold with the bank before building this section of the file – different institutions apply different internal policies, and a file assembled to the 25% standard may be returned if the bank applies 10%.

For a simple structure – one natural person owning 100% of the BVI entity directly – the UBO documents are: a certified copy of a government-issued identity document (passport or national identity card); a recent proof of address (utility bill, bank statement, or similar from within the past three months); and, where the individual is a PEP or has a public-interest role, a source-of-wealth narrative supported by documentary evidence.

For a layered structure – a BVI company owned by another offshore entity, held further by a discretionary trust – the file must trace every intermediate layer to the natural person. That means replicating the corporate identity exercise for each intermediate holding entity, and identifying the settlor, protector, and potential beneficiaries of any trust in the chain. Discretionary trusts present a particular complication: the beneficiaries have no vested interest, but a bank may still require disclosure of the class of beneficiaries and the identity of any person who can direct the trustee.

The gate at Step 3 is identification and verification: is every natural person with material ownership or control identified, and is each identification verified by reliable documentary evidence? This is where most files stall. The counterparty provides identification documents in a language other than English or Chinese without a certified translation, or the passport copy is unsigned, or the proof of address is dated more than three months before submission. Each deficiency sends the file back. Build a checklist of the exact document specification before requesting documents from the counterparty.

Step 4 – Build the source-of-funds narrative

Source-of-funds documentation answers a different question from identity verification. Identity answers: who is this person? Source-of-funds answers: where did the specific money entering this transaction originate? The two questions require separate documentary tracks, and conflating them is one of the most common errors our desk sees in internally assembled compliance files.

The source-of-funds narrative must trace the transaction funds from their origin to the BVI entity's account. If the funds represent the proceeds of a business sale, the file should contain – at minimum – a summary sale-and-purchase agreement or completion statement, confirmation of the bank account from which the proceeds were paid, and evidence that the paying entity was the beneficial owner's business (corporate documents, audited accounts, or management accounts for the relevant period).

If the funds represent investment returns – dividends from an operating subsidiary, for example – the file should contain the relevant dividend resolution, the audited accounts of the subsidiary, and confirmation of the wire transfers from the operating company to the BVI holding entity. The chain must be unbroken: a transfer from Account A to Account B to Account C, with the BVI entity at the end, requires documentary evidence at each transfer step.

For funds of mixed origin – business income accumulated over several years, combined with an inheritance and a property sale – the narrative should apportion the funds clearly and support each component with separate documentary evidence. A narrative that says "accumulated business income from the manufacturing sector" without further support will not satisfy a bank's compliance team at the enhanced-due-diligence stage.

Consider the payment corridor. If the BVI counterparty is making a payment through a Hong Kong correspondent bank, the bank is applying the Hong Kong Monetary Authority's AML guidelines to the transaction in real time. Those guidelines adopt a risk-based approach: the higher the risk rating assigned to the transaction – by reference to jurisdiction, sector, transaction size, and counterparty type – the greater the level of supporting documentation required. A BVI holding company with a single natural-person UBO from a jurisdiction with limited AML infrastructure, making a payment above a material threshold, will attract enhanced due diligence as a matter of the bank's own policy. The file should anticipate that rating, not respond to it after the fact.

The gate at Step 4 is completeness and traceability: can a compliance reviewer follow the specific funds, step by step, from a legitimate origin to the BVI entity's account? Gaps in the chain are the single most common reason a source-of-funds file is rejected.

Step 5 – Run the sanctions and PEP screen

Once the UBO is identified and the source-of-funds narrative is assembled, run a sanctions and PEP screen against every natural person in the file. In Hong Kong, the operative sanctions lists are those maintained under United Nations Security Council resolutions and given effect by the United Nations Sanctions Ordinance. Screens against unilateral lists of other jurisdictions are a matter of the bank's own policy and the transactional context – particularly where the payment corridor or the underlying contract involves a counterparty in a jurisdiction that applies such lists.

The screen covers the UBO, any intermediate corporate directors, and any named trustee or protector if a trust is in the chain. Document the screen: record the databases queried, the date of the query, the search terms used, and the result. A screen conducted but not documented is, for compliance purposes, a screen not conducted.

A PEP hit requires a more detailed review. A PEP is not automatically an unacceptable counterparty – it is a counterparty requiring enhanced due diligence. The enhanced file for a PEP includes a source-of-wealth narrative (not merely source-of-funds: the broader question of how the individual accumulated their net worth), a review of publicly available information about the individual's official role and tenure, and a senior management sign-off on the decision to proceed.

The gate at Step 5 is clearance: no match on a UN sanctions list, and – if a PEP is identified – a documented enhanced-due-diligence file with senior management approval. If a UN sanctions match is confirmed, the transaction must stop. This is not a compliance judgment call; it is a legal requirement.

What foreign counsel and in-house teams most often get wrong

The most common error is treating the AML file as a task for the counterparty to complete independently, then submitting whatever the counterparty provides. An AML file is assembled by the party doing due diligence – with the counterparty as a supplier of documents, not the author of the file. The distinction matters because the compliance obligation sits on the party conducting the transaction, not on the BVI entity itself.

A related mistake is assuming that a BVI company holding a Certificate of Incumbency – a notarised statement of directors, shareholders, and registered office – discharges the UBO requirement. It does not. A Certificate of Incumbency identifies the registered shareholder; it does not identify the natural person behind a nominee arrangement. Where nominee shareholders are used, a separate declaration of trust or nominee agreement identifying the beneficial owner is required.

A third error is assembling the file to a standard calibrated to the counterparty's home jurisdiction rather than to the standard of the Hong Kong correspondent bank. An AML file acceptable to a bank in a jurisdiction with a lighter-touch AML regime may not satisfy the Hong Kong Monetary Authority's guidelines. When the payment corridor runs through Hong Kong, the Hong Kong standard governs.

Finally, some teams conflate source of funds (the origin of the specific transaction funds) with source of wealth (the origin of the individual's total net worth). Banks request both for high-risk files. For a standard risk-rated transaction, source-of-funds documentation is typically sufficient. For enhanced due diligence – triggered by PEP status, high-risk jurisdiction, or transaction size above the bank's internal threshold – source of wealth will also be required. Preparing only one of the two, when the bank needs both, results in a return and delay.

In our cross-border practice, we have seen files assembled entirely correctly on paper fail because the document certification was defective: a photocopy certified by a person who was not a solicitor, notary, or authorised professional, or a certification that lacked a date and a statement of the certifier's capacity. Specify the certification standard in the document request, not after the documents arrive.

Decision checklist

Before submitting the file to the bank or the institutional counterparty, run through the following points in sequence.

Is the BVI entity subsisting and in good standing, confirmed by a certificate dated within three months?
Are the corporate documents internally consistent – do directors, shareholders, and registered office across all documents match?
Has the full ownership chain been traced to a natural person, with corporate identity documents for each intermediate layer?
Is the UBO identified by a government-issued identity document, and is proof of address current within three months?
Where nominees are used, is there a declaration of trust or nominee agreement identifying the beneficial principal?
Is the source-of-funds narrative complete and unbroken, from the origin event to the BVI entity's account?
Are all document certifications dated, signed, and accompanied by a statement of the certifier's capacity and professional standing?
Has a documented sanctions and PEP screen been run against every natural person in the file, with the database, date, and result recorded?
If a PEP has been identified, has enhanced due diligence been completed and has senior management sign-off been obtained?
Is the file calibrated to the standard required by the Hong Kong correspondent bank, not merely to a general AML baseline?

The sequence described in this guide applies to the standard case. Individual transactions may present additional complexity – a multi-layered trust chain, a UBO subject to a court order in a third jurisdiction, or a payment corridor that passes through a bank in a jurisdiction subject to FATF heightened monitoring. Those situations require individual analysis. The checklist confirms whether the standard file is complete; it does not substitute for a judgment on the particular facts.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. For a structured assessment of your BVI counterparty file across the Hong Kong and offshore compliance positions, write to us at info@lockhartyip.com.

For broader context on how this work connects to counterparty screening in transaction settings, our UAE sanctions due diligence matter illustrates the approach in a parallel corridor. The overlapping BVI dimension is addressed directly in our sanctions due diligence guide for BVI-touching deals. For the full scope of our sanctions and AML practice, visit our Sanctions & AML practice page.

If an earlier filing, structure, or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. Email info@lockhartyip.com to discuss.

Related practices

Sanctions & AML – cross-border AML compliance, counterparty screening, and sanctions-neutral contracting
Holding Structures – offshore holding entity review, BVI and Cayman structuring, ownership chain analysis

Frequently asked questions

Which jurisdiction's law applies to an AML and source-of-funds file for the BVI counterparty?

The applicable legal standard depends on where the compliance obligation falls. Where the payment channel runs through a Hong Kong institution, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the Hong Kong Monetary Authority's AML guidelines govern the bank's due diligence obligations. The BVI entity is itself subject to the BVI AML Code for its own institutional relationships. In practice, a file that satisfies the Hong Kong standard will typically satisfy both, but the two regimes have different document-certification and beneficial-ownership threshold requirements – a detail that matters when the file is assembled.

How long does an AML and source-of-funds file for the BVI counterparty usually take?

Timing depends almost entirely on how quickly the counterparty can produce complete, correctly certified documents. A simple structure – one UBO, no nominee arrangements, a clean source-of-funds chain – can be compiled in one to two weeks if the counterparty is cooperative and the documents are properly certified from the outset. A layered structure involving multiple intermediate entities, a trust, or a UBO who requires enhanced due diligence can take considerably longer. The principal delay in our experience is not analysis but document deficiency: a file assembled once, correctly, is faster than a file returned twice for remediation.

What documents are needed for an AML and source-of-funds file for the BVI counterparty?

The core document set covers three tiers. First, corporate identity: a good-standing certificate, memorandum and articles, and the register of directors. Second, beneficial ownership: a certified identity document and current proof of address for every natural-person UBO, plus a nominee declaration where applicable. Third, source of funds: documentary evidence tracing the specific transaction funds from their origin to the BVI entity's account – sale documents, dividend resolutions, audited accounts, and wire-transfer confirmations as appropriate. The exact specification should be agreed with the receiving institution before the request is sent to the counterparty.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach an AML and source-of-funds file for the BVI counterparty