How to approach an AML and source-of-funds file for a Mainland China counterparty

When a payment channel stalls or a banking relationship comes under review, the question is rarely whether to build an AML (anti-money laundering) and source-of-funds file – it is how quickly a defensible one can be assembled. For transactions involving a Mainland China counterparty routed through or touching Hong Kong, the compliance file is the difference between a cleared payment and a frozen account. The cost of getting this wrong is not a fine. It is a broken commercial relationship and, in some cases, a blocked account that cannot be unfrozen without court intervention.

An AML and source-of-funds file for a Mainland China counterparty is a structured evidential record assembled under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and associated regulatory guidance. It demonstrates that the identity, ownership, and wealth of the counterparty have been verified to the standard required by Hong Kong's AML regime. Building it correctly, in the right sequence, is a gate-by-gate process with no shortcuts.

This guide sets out the decision the in-house team faces, the steps in the order they must be taken, the gate at each step, and the single mistake that causes most files to fail.

What decision does the file have to answer?

Every AML file for a cross-border counterparty starts with one question: can this institution or enterprise accept funds from, or make payments to, this counterparty through a regulated banking channel? That question has three parts – who the counterparty actually is, where its funds originated, and whether any current prohibition bars the relationship. The file must address all three. An incomplete file that addresses identity but not wealth origin, or that documents control structure but misses a sanctioned beneficial owner, does not meet the standard the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Hong Kong's primary AML statute) and the applicable regulatory guidance impose.

For a Mainland counterparty specifically, the decision is more layered than for most other jurisdictions. The counterparty may be a state-owned enterprise, a privately held group, a variable interest entity structure, or a natural person with holding entities in multiple offshore centres. Each configuration presents a different documentary challenge. The compliance function must identify the configuration before deciding which evidence to seek. Getting the configuration wrong at the outset means the file will be rebuilt – at cost, and often under time pressure.

In our cross-border practice, we regularly see files that were built around the wrong ownership assumption. A group presented as privately held turns out to sit beneath a state-owned holding entity once the full chain is documented. That finding changes the risk rating, the enhanced due-diligence threshold, and the evidence required. Start with the structure, not the documents.

Step one: map the ownership and control structure before requesting any documents

The first gate in an AML file for a Mainland China counterparty is a structural map – a documented working hypothesis of who owns and controls the entity before a single document is requested from the counterparty. This step is internal and takes place entirely on open sources. It sets the scope of everything that follows.

Open-source inputs for a Mainland entity include the enterprise registration record from the national corporate registry system, the National Enterprise Credit Information Publicity System (China's public company-information platform), relevant filings in offshore registries where intermediate holding entities are incorporated, and public regulatory databases covering securities-listed entities. These sources are uneven in their completeness. The corporate registry shows registered shareholders, not necessarily ultimate beneficial owners. Nominee arrangements are common in structures built before domestic reforms. Do not treat the registered shareholder as the end of the chain.

The structural map must identify: the ultimate beneficial owner or owners; any intermediate holding entities and their jurisdictions; state-owned or state-linked entities at any level of the chain; and any politically exposed persons – PEPs (individuals who hold, or have recently held, prominent public functions) – connected to the group. A Mainland enterprise with state investment at any level of the structure is treated differently from a purely private group; the distinction matters for both the risk rating and the type of evidence that satisfies enhanced due diligence.

The gate at step one: the file must produce a documented structural map signed off by the AML officer before step two begins. Moving directly to document collection without this map is the most common mistake we see. It produces a file assembled around the wrong counterparty and an incomplete beneficial-ownership picture.

Step two: risk-rate the counterparty against the applicable regulatory standard

Once the structure is mapped, the counterparty receives a risk rating – typically low, medium, high, or unacceptable – under the institution's own risk-based methodology. The relevant benchmark is the methodology approved under the institution's own AML policy and the published guidance of the applicable regulator, which for most Hong Kong-licensed institutions means the guidance issued by the Hong Kong Monetary Authority or the Securities and Futures Commission, depending on the nature of the regulated activity.

A Mainland China counterparty will frequently attract a higher base rating than a counterpart in a lower-risk jurisdiction. Factors that elevate the rating include: state ownership or state-linked control at any level; a beneficial owner who is a PEP or is closely associated with a PEP; a structure that passes through a jurisdiction with a higher-risk rating under current FATF (Financial Action Task Force, the intergovernmental standard-setter for AML and counter-terrorist financing) assessments; involvement in industries subject to sector-specific controls; or a pattern of prior banking difficulties. The risk rating determines the depth of evidence required at step three.

Most files for Mainland counterparties will fall into the high or enhanced due-diligence category. Plan accordingly. A file built to a standard-due-diligence depth that is later re-rated to enhanced will need to be rebuilt. The documentary gap will be visible in any audit or regulatory review.

Step three: collect and verify the documentary evidence in the correct sequence

Document collection for a Mainland China counterparty follows a defined order. Identity evidence comes first; wealth-origin evidence comes second; transaction-specific evidence comes third. Running these in parallel, or beginning with wealth origin before identity is locked, produces a file with gaps that a reviewing bank or regulator will find quickly.

For a Mainland corporate counterparty, the identity evidence layer covers: a certified copy of the business licence and enterprise registration certificate; the registered articles or equivalent constitutional document; a certified corporate structure chart showing the full ownership chain to the ultimate beneficial owner; certified identification for each beneficial owner above the applicable threshold; and, where the entity is state-owned or state-linked, evidence of the government body or fund that holds the interest. Each document requires certification to a standard acceptable in Hong Kong, which typically means a notarised and, for Mainland documents, an apostilled or authenticated copy. The 1961 Hague Convention on the Abolition of the Requirement of Legalisation – the Apostille Convention – does not apply as between the Mainland and Hong Kong; authentication is the correct route for Mainland public documents.

The wealth-origin layer is where most files stall. The counterparty must demonstrate not just that it has funds but where those funds came from in a form that an independent reviewer can trace. Acceptable evidence includes: audited financial statements for the most recent years, covering the period during which the funds subject to the transaction were accumulated; corporate tax filings or equivalent; bank statements from the counterparty's primary banking institution; and, for individual beneficial owners, evidence of the specific transaction, investment, or commercial activity that generated the wealth claimed. For Mainland entities, audited accounts prepared under Chinese Accounting Standards are acceptable but may require explanation of material items for a reviewer unfamiliar with local presentation conventions.

The gate at step three: every document in the file must be assessed against the standard the reviewing institution requires. If a document cannot be authenticated, translated by a certified translator, or traced to an identifiable issuing authority, it fails the gate. Replace it before the file is submitted.

Step four: screen against all applicable sanctions and watchlists

Sanctions screening for a Mainland counterparty in a Hong Kong context operates under a clear and specific principle. Hong Kong implements United Nations sanctions – the measures adopted by the UN Security Council under the UN Charter – and does not give domestic effect to the unilateral measures of other states. This means the applicable screening obligation under Hong Kong law runs to the UN consolidated list, not to the extraterritorial lists of other jurisdictions. The governing instrument is the United Nations Sanctions Ordinance.

However, the commercial reality for institutions with international banking relationships is that their correspondent banks may apply the measures of other jurisdictions when processing payment instructions. A payment that clears under Hong Kong law may still be blocked at the correspondent level if a party to the transaction appears on a list that the correspondent bank's home jurisdiction requires it to screen. The compliance file must address both layers: the legal obligation under Hong Kong law, and the operational risk arising from the correspondent's own screening obligations.

Screen every named party in the structure – not just the counterparty but every beneficial owner, director, and controlling person identified at step one. Re-screen at the time of each material payment, not just at onboarding. Sanctions lists change. A counterparty that was clean at file-opening may not be clean six months later. Maintain a dated record of each screening run and its result.

The gate at step four: a clean screen is not a certification that no risk exists. It is a dated record of the result of a specific search against specific lists on a specific date. Document it as such.

Step five: prepare the narrative and assemble the file

The AML file is not a bundle of documents. It is an evidenced narrative. The compliance officer or in-house counsel responsible for the file must be able to explain, in prose that a reviewer unfamiliar with the transaction can follow, who the counterparty is, where its funds came from, what the transaction is for, and why the risk rating assigned at step two is the correct one given the evidence in the file.

The narrative covers: the counterparty's business purpose and how it generates its primary revenue; the commercial rationale for the specific transaction; the origin of the specific funds being moved; the risk rating and the reasoning behind it; and the enhanced due-diligence steps taken if the rating is high. For a Mainland counterparty where the wealth origin involves a complex chain of transactions – a dividend flow from a Mainland operating company through a BVI or Cayman intermediate holding entity to a Hong Kong account, for example – trace the full chain in the narrative and cross-reference each step to a document in the bundle.

A practical point our desk returns to repeatedly: the narrative must be written by a person who has read the documents, not assembled from templates. A templated narrative that does not engage with the specific structure of the counterparty will be identified as such by an experienced reviewer. If the file is to survive scrutiny, the narrative must be specific.

The common mistake: treating the file as a box-ticking exercise

The single mistake that causes most AML files for Mainland counterparties to fail is treating the file as a documentation exercise rather than an evidential one. The difference matters. A documentation exercise produces a checklist of items collected. An evidential exercise produces a file that could persuade an independent reviewer that the risk conclusion is correct on the facts.

Files built as documentation exercises tend to share the same failure modes. Documents are collected without being read or assessed. Gaps in the ownership chain are papered over with a statement from the counterparty rather than independent verification. The wealth-origin section relies on the counterparty's own explanation without corroborating documents. The narrative, where one exists, is generic.

A reviewer – whether a bank compliance officer, a regulator, or counsel in enforcement proceedings – will test the file against the specific structure and the specific claim about wealth origin. If the file cannot survive that test, it does not protect the institution that relied on it.

The myth we encounter most often from in-house teams new to this area is that a Mainland counterparty's status as a listed company or a state-owned enterprise resolves the AML question. It does not. Listed entities still require beneficial-ownership verification to the extent that major shareholders are individuals. State-owned enterprises still require identification of the relevant government body and, where applicable, the controlling official. Size and public profile reduce some risks but do not eliminate the compliance obligation.

The sequence above describes the standard position. Your matter turns on the specific documents, the ownership configuration engaged, and whether the file can answer the questions a reviewing bank or regulator will ask – which is where the route is won or lost. For a structured assessment of your counterparty's AML and source-of-funds position across the Hong Kong and Mainland interface, write to us at info@lockhartyip.com.

Decision checklist before submitting the file

Before a file for a Mainland China counterparty is submitted to a bank, a compliance function, or any reviewing body, work through the following sequence. Each item is a gate. An incomplete item means the file is not ready.

• Has the full ownership chain been traced to the ultimate beneficial owner or owners, independently verified against open sources, and documented in a signed structural map?
• Has the correct risk rating been applied under the institution's own AML methodology, and does the depth of evidence in the file match that rating?
• Has every document been certified, authenticated, and translated to the required standard – noting that Mainland public documents require authentication, not apostille, for use in Hong Kong?
• Does the wealth-origin section trace the specific funds subject to the transaction to an identifiable commercial source, supported by third-party documentary evidence?
• Have all named parties – counterparty, beneficial owners, directors, controlling persons – been screened against the UN consolidated list, with dated records of each search?
• Has the correspondent-banking risk been assessed, and has the file addressed the screening obligations that correspondent banks in relevant jurisdictions may apply?
• Does the narrative explain the structure, the commercial rationale, and the risk conclusion in specific terms that an independent reviewer can follow without knowing the transaction?
• Has the file been reviewed by a person who has read the documents, not by a person working from a template?

If any item is incomplete, the file is not ready. Submitting an incomplete file does not start the clock running in your favour. It starts it running against you.

If an earlier compliance attempt produced an adverse or stalled result – a bank declining to process, a compliance query that went unanswered, a relationship placed under review – a fresh read of the file can identify the gap and the steps still available. Contact us at info@lockhartyip.com to discuss the position.

For further background on how this practice sits within our broader sanctions and AML work, see our Sanctions & AML practice overview. For a comparison of the file-building process for an offshore entity, see our guide on compliance review before contracting with a Cyprus entity. The specific considerations that apply where the counterparty is a BVI entity are addressed in our note on an AML and source-of-funds file for a BVI counterparty.

Related practices

• Sanctions & AML – compliance files, counterparty screening, and payment-channel risk
• Holding Structures – ownership chain analysis and cross-border entity configuration

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Compliance Review Before Contracting Cyprus Entity Cyprus Guide
• Aml Source Funds File Bvi Counterparty Bvi

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.