How to approach an AML and source-of-funds file for the United Kingdom counterparty

A Hong Kong-based group entering a commercial relationship with a United Kingdom counterparty faces a documentation problem that sits on both sides of the transaction. The UK side will apply the Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations to the relationship. The Hong Kong side works under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. Two regimes, two sets of expectations, one file.

An AML and source-of-funds file for the United Kingdom counterparty is a structured package of documents and analysis assembled to satisfy the customer-due-diligence and source-of-funds requirements imposed on financial institutions and regulated entities in both Hong Kong and the United Kingdom. The governing instruments are the Anti-Money Laundering and Counter-Terrorist Financing Ordinance in Hong Kong and the UK Money Laundering Regulations on the UK side. The file must be assembled before the commercial relationship begins, not retrospectively.

This guide sets out the decision the reader faces, the sequence of steps in order, the gate at each step, and the common mistakes that cause files to stall or relationships to be declined. It is written for in-house counsel and compliance officers managing a cross-border commercial or banking relationship with a UK counterparty from a Hong Kong base.

What decision does the reader actually face?

The core decision is not whether to comply. That question is settled by statute on both sides. The real decision is how to sequence and package the compliance work so that the file serves both the Hong Kong-side institution and the UK-side institution simultaneously, without creating gaps or inconsistencies that either bank or regulator can use to pause or terminate the relationship.

A group that builds its file sequentially – satisfying the Hong Kong bank first, then attempting to address the UK side with a different document set – typically produces two partial files that do not speak to each other. The UK counterparty's compliance team, operating under the UK Money Laundering Regulations, will ask questions that the Hong Kong-assembled file was never designed to answer. The result is a request for further information, a delay, and sometimes a suspicious-activity filing by the UK institution that the Hong Kong group did not anticipate.

The better approach is to build a single, dual-purpose file from the outset. That means mapping the requirements of both regimes before assembling a single document. This is the decision the reader faces: unilateral compliance or bilateral compliance. The latter is more work at the front end; it is reliably faster overall.

There is also a threshold question: does the relationship involve a sector or transaction type that triggers enhanced due diligence under either regime? UK-side enhanced due diligence applies to, among others, high-risk third-country relationships, politically exposed persons, and complex or unusually large transactions. Hong Kong-side enhanced due diligence applies under broadly comparable triggers. If the relationship crosses either threshold, the file must be built to the enhanced standard from the start. Downgrading later is not straightforward.

How does the governing legal position differ on each side?

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance in Hong Kong imposes customer-due-diligence and record-keeping obligations on financial institutions, designated non-financial businesses, and trust and company service providers. The regulators – primarily the Hong Kong Monetary Authority and the Securities and Futures Commission for their respective sectors – publish detailed AML guidelines that translate the statutory obligations into expected practice. Those guidelines, while not strictly legislation, carry significant weight in supervisory and enforcement contexts.

On the UK side, the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations give effect to the Financial Action Task Force standards in UK domestic law. The Financial Conduct Authority and HM Revenue & Customs each supervise different categories of regulated entity. The Proceeds of Crime Act 2002 sits beneath the Regulations as the primary criminal-law instrument, creating the offences that the compliance file is ultimately designed to avoid triggering.

Both regimes require the same three things in substance: know your customer, know the source of funds, and keep records. The difference is in emphasis and documentation expectation. UK institutions tend to expect a narrative source-of-funds analysis with supporting documents attached. Hong Kong institutions tend to work more through a structured questionnaire. A file that provides both the narrative and the structured data satisfies both expectations without duplication.

One point that causes consistent difficulty at the cross-border interface: the UK regime applies the concept of a "high-risk third country" to jurisdictions assessed as having strategic deficiencies in their AML regimes. Hong Kong is not on that list, and the Financial Action Task Force has consistently assessed Hong Kong favourably. That said, UK-side compliance teams sometimes treat any non-UK, non-EEA counterparty with additional caution in practice, regardless of the formal country-risk classification. The file must be able to address that informal elevated scrutiny as well as the formal requirements.

The sanctions dimension is distinct but cannot be separated from the file entirely. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. UK sanctions, including those implemented through the Sanctions and Anti-Money Laundering Act 2018, may apply to specific counterparties, sectors, or transaction types. The file must confirm sanctions screening on both sides against the applicable lists. Where a UK-side counterparty or an intermediary in the payment chain is subject to UK-specific sanctions that Hong Kong does not replicate, the compliance question is a UK-law matter, not a Hong Kong-law matter. Counsel on our desk regularly advise on how to document this distinction clearly, so that the file does not misstate either side's position.

What is the correct sequence for building the file?

Step one is a regime-mapping exercise. Before assembling any document, identify which regulated entities on each side will review the file, which sector-specific guidelines apply, and whether the enhanced-due-diligence threshold is crossed. This step takes one to three days for a standard commercial counterparty. It shapes every subsequent step.

Step two is the entity and beneficial-ownership layer. Obtain certified copies of the constitutional documents – certificate of incorporation, articles of association or equivalent, register of members. Map the ownership chain to the level of ultimate beneficial owner or, where control is exercised other than through ownership, to the level of the controller. In the UK context, the relevant register is the Persons with Significant Control register maintained by Companies House. Any discrepancy between the PSC register position and the actual control position must be addressed in the narrative, not ignored.

Step three is the individual identity layer. Each ultimate beneficial owner and each director who is a signatory to the commercial relationship requires identification: a certified copy of a government-issued photo-ID document and proof of current residential address. Certified means certified by a regulated professional in a jurisdiction with adequate AML standards. A photocopy made by the counterparty itself does not satisfy the certification requirement under either regime.

Step four is the source-of-funds and source-of-wealth narrative. This is the step that most files handle inadequately. The requirement is not to produce a document asserting that funds are clean. The requirement is to produce a document that traces the origin of the specific funds involved in the commercial relationship, supported by contemporaneous evidence. For a trading relationship, that means company accounts, bank statements, and audited financials showing that the counterparty's working capital or payment capacity derives from identified, legitimate commercial activity. For a capital-contribution or investment relationship, the trail must go back further: to the event that generated the wealth, whether a business sale, an inheritance, a property transaction, or accumulated retained earnings.

Step five is sanctions screening. Run the names of all entities and individuals in the beneficial-ownership chain against the UN consolidated sanctions list, the UK Office of Financial Sanctions Implementation consolidated list, and the Hong Kong sanctions lists published under the United Nations Sanctions Ordinance. Document the search, the date, and the result. If a name generates a potential match, it must be escalated and resolved before the file is considered complete. A file that cannot show a clean screening result, or that does not show the screening was done at all, will not pass either institution's review.

Step six is ongoing monitoring. Both regimes require that customer-due-diligence is not a once-only exercise. The file must document the monitoring mechanism: how often the relationship will be reviewed, what triggers an ad hoc re-review, and where the record will be kept. For a UK counterparty, the trigger list should include material changes to the PSC register, changes in directors, significant changes in transaction volume or pattern, and any adverse-media event touching the counterparty or its owners.

What are the common mistakes – and how does a correctly sequenced file avoid them?

The most common mistake is treating the source-of-funds step as a formality. It is not. Institutions on both sides have become significantly more demanding about source-of-funds documentation in recent years. A file that contains the identity layer but offers only a general statement about the counterparty's business activities at the source-of-funds layer will be returned with a request for further information. That request starts a clock; a relationship that cannot close the information gap in reasonable time may be declined.

The second common mistake is certifying documents in a jurisdiction that the reviewing institution regards as having inadequate AML standards. A certification by a professional in a jurisdiction on the FATF grey list or black list – the lists of jurisdictions with strategic AML deficiencies – will not be accepted at face value. The file should use certifications from Hong Kong-admitted or UK-admitted professionals, or from professionals in jurisdictions with equivalent regulatory standing.

The third mistake is building the file around the Hong Kong institution's questionnaire and assuming that the UK side will accept the same structured data. The UK side expects a narrative. The narrative does not need to be long, but it must connect the dots between the documents. An annexe list attached to a blank cover letter is not a narrative. In our cross-border practice, we have seen files that contained all the necessary underlying documents but failed to progress because no one had written the paragraph that explained what the documents showed.

The fourth mistake is treating sanctions screening as a one-time event. Both regimes contemplate ongoing monitoring. If a counterparty's owner is designated after the file is assembled, the institution has an obligation to act. A file that was correct on day one but has not been reviewed in two years is not a compliant file. It is a liability.

The fifth mistake is misidentifying the beneficial owner. The PSC register in the UK is a public record, but it reflects disclosed positions. Control can be exercised through arrangements that are not reflected in the register. A file that stops at the registered position without asking whether the registered position reflects the actual control structure is not a complete file. The question to ask is: who would benefit if the relationship generates a financial return? The answer to that question, and the documentation that supports it, is the beneficial-ownership layer of the file.

A correctly sequenced file avoids all five mistakes by starting with the regime map, building the document set to the dual-regime standard, and producing a narrative that explains what the documents show rather than leaving the institution to draw its own conclusions.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. For a structured assessment of your AML and source-of-funds position across Hong Kong and the United Kingdom, write to us at info@lockhartyip.com.

How does the payment channel interact with the file?

The payment channel is where the compliance file either works or fails in practice. A file that satisfies the KYC and source-of-funds requirements of the relationship but does not address the correspondent-banking chain will encounter problems when the first payment moves.

Correspondent banks – the institutions that process cross-border payments between the Hong Kong-side bank and the UK-side bank – conduct their own screening. They look at the payment instruction, the parties named in the instruction, and any reference to underlying transactions. If the payment instruction does not align with the commercial description of the relationship that the file supports, the correspondent bank may reject the payment or place it on hold pending further information.

The practical implication is that the file must be consistent with the payment instructions that will actually be used. If the commercial contract describes a service fee, the payment instruction should describe a service fee. If the beneficial-ownership structure involves an intermediate holding entity, the payment instruction should identify the entity that is actually sending and receiving funds. Inconsistencies between the commercial documents, the AML file, and the payment instructions are a leading cause of correspondent-banking rejections and, in more serious cases, suspicious-activity filings.

The FATF travel rule – applied to Hong Kong through the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and to the UK through the Money Laundering Regulations – requires that certain information about the originator and beneficiary of a payment travels with the payment. For virtual-asset transfers, the travel rule applies to virtual-asset trading platforms licensed under the Hong Kong regime. For conventional banking, the requirements apply through the payment-messaging standards that correspondent banks use. The file should confirm that the information required to be transmitted with each payment is available and will be transmitted.

Our desk sees a recurring pattern in which a well-constructed AML file at the entity level is not reflected in the payment-channel documentation. The two layers need to be aligned, and the alignment needs to be documented before the first payment moves, not after the first rejection.

If an earlier filing, structure or enforcement attempt produced an adverse or stalled result, a second read can identify the strategic error and the routes still open. To discuss how the payment-channel position applies to your cross-border arrangement between Hong Kong and the United Kingdom, contact info@lockhartyip.com.

What does a practical decision checklist look like?

A decision checklist for an AML and source-of-funds file for the United Kingdom counterparty should answer each of the following questions before the file is submitted to any institution.

First: has the regime-mapping step been completed? The checklist should confirm which regulated entities on each side will review the file, which sector guidelines apply in each jurisdiction, and whether the enhanced-due-diligence threshold is crossed on either side.

Second: is the beneficial-ownership chain documented to the level of the ultimate beneficial owner? The checklist should confirm that the chain goes beyond the registered position and addresses actual control.

Third: are the identity documents for each UBO and signing director certified by an acceptable professional in a jurisdiction with adequate AML standards?

Fourth: does the source-of-funds narrative trace the origin of the specific funds in the relationship, with contemporaneous supporting documents attached?

Fifth: has sanctions screening been conducted against the UN consolidated list, the UK Office of Financial Sanctions Implementation list, and the relevant Hong Kong lists, with the search date and result documented?

Sixth: is the monitoring mechanism documented, including the review frequency and the event triggers for an ad hoc review?

Seventh: are the commercial documents, the AML file, and the anticipated payment instructions consistent with each other?

Eighth: is there a narrative that connects the documents and explains what they show, rather than leaving the reviewing institution to draw its own conclusions?

A file that can answer all eight questions affirmatively is in a materially better position than the majority of files that institutions on both sides receive. That is not a guarantee of acceptance; the reviewing institution retains its own discretion. It is, however, a description of what a complete file looks like and what an incomplete file is missing.

For cross-border relationships between Hong Kong and the United Kingdom, the related analysis on our sanctions and AML practice is available at our Sanctions & AML practice page. Readers managing AML considerations in offshore-holding contexts may also find our guide on sanctions due diligence for transactions touching the BVI and our analysis of managing payment-channel and banking-access risk directly relevant.

What do foreign advisers most commonly misread about the Hong Kong side of this file?

UK-based advisers assisting their client on the Hong Kong interface regularly underestimate the weight that Hong Kong institutions and regulators place on the AML guidelines issued by the Hong Kong Monetary Authority and the Securities and Futures Commission. These guidelines are not soft guidance. They set out in operational detail what institutions are expected to do, and supervisory reviews assess compliance against them. A file built to UK standards alone will typically be missing the structured elements that Hong Kong-side institutions expect.

The second consistent misreading is on sanctions. UK advisers sometimes assume that a Hong Kong-side institution will screen against UK-specific sanctions lists as a matter of course. It will not, because Hong Kong does not give domestic effect to UK unilateral sanctions. The Hong Kong institution will screen against UN lists and the lists implemented under the United Nations Sanctions Ordinance. If UK sanctions are relevant to the relationship, the file must address that separately, as a UK-law matter, rather than assuming that the Hong Kong-side screening covers it.

The third misreading is on the Significant Controllers Register. Hong Kong-incorporated companies are required to maintain a Significant Controllers Register, a requirement in force since 1 March 2018. This register is maintained internally, not filed publicly, but a regulated institution conducting due diligence on a Hong Kong-incorporated entity may ask for access to it. Foreign advisers who are unfamiliar with the SCR requirement sometimes fail to flag it when preparing the beneficial-ownership layer of the file, producing a gap that the Hong Kong-side institution then needs to close through a further-information request.

We regularly advise UK-based in-house teams and their local counsel on the Hong Kong-side requirements, working alongside locally licensed Hong Kong firms on any matters of Hong Kong law that the file engages.

Related practices

Related practices

• Sanctions & AML – cross-border AML compliance, sanctions screening and source-of-funds analysis
• Corporate Counsel – entity governance, beneficial-ownership documentation and SCR compliance

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.