How to approach a beneficial-ownership and KYC file

Assembling a beneficial-ownership and KYC file (a consolidated compliance dossier identifying every natural person who ultimately owns or controls an entity, together with the source-of-funds and source-of-wealth evidence required by financial institutions and counterparties) for an offshore holding chain is a structured exercise with a defined sequence, identifiable gates, and predictable failure points. The governing instrument in Hong Kong is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which sets the customer-due-diligence standard that banks, professional intermediaries and regulated entities must meet. Getting the file wrong does not merely delay a transaction – it can close the payment channel entirely.

This guide walks through the decision the in-house team faces, the step-by-step sequence, the gate at each stage, and the common mistake that causes files to be rejected or recycled. The cross-border interface between Hong Kong as the operating or financing hub and the offshore holding layer – typically the British Virgin Islands or the Cayman Islands – is the thread that runs through every step.

What decision does the in-house team actually face?

Before a single document is collected, the team needs to answer one prior question: who is this file for, and what standard does that recipient apply?

A KYC file assembled for a Hong Kong-licensed bank differs in material ways from one prepared for a regulated intermediary in a European jurisdiction, a Cayman administrator, or a Singapore trustee. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance sets the floor for Hong Kong-regulated institutions. But a counterparty bank in the United Kingdom or Germany will overlay its own home-jurisdiction rules, often requiring more granular source-of-wealth narratives and enhanced due diligence where the ultimate beneficial owner (UBO, the natural person at the top of the chain who owns or controls at least 25 per cent of the entity or exercises effective control) is resident in a jurisdiction the receiving institution classifies as higher risk.

The decision, then, is not simply "gather the documents." It is: map the recipient's standard, identify the UBOs under that standard, and sequence the evidence gathering accordingly. In our cross-border practice, the teams that stall earliest are those that start collecting before they have answered this question.

Three options typically present themselves. First, the team builds a single master file to the highest applicable standard and then strips it down for recipients with lighter requirements. Second, the team builds recipient-specific files from the outset – workable when there are only one or two institutions involved, but difficult to maintain across a multi-bank group structure. Third, the team engages external counsel to prepare a base-level file that each institution can supplement with its own questionnaire. The third route is more efficient where the holding chain spans more than two jurisdictions.

How is the holding chain mapped before any document is collected?

The first substantive step is an ownership and control map – a layered diagram showing every entity in the chain from the operating company at the base to the natural-person UBOs at the apex, with jurisdiction, incorporation date, registered agent, and the percentage interest at each layer marked explicitly.

This step sounds obvious. It is routinely skipped or approximated. Banks and regulators do not accept narrative descriptions of structure; they require a precise, dated diagram supported by the constitutional documents of each entity. Where a layer is a trust rather than a company, the diagram must show the settlor, the trustee, and any named beneficiaries or classes of beneficiaries, because the Anti-Money Laundering and Counter-Terrorist Financing Ordinance treats a trust as a distinct customer type and requires separate due diligence on each of those roles.

The gate at this step is completeness. A diagram that shows four layers when the actual chain has six will be identified quickly by any competent compliance officer. Offshore registries – the BVI Registry of Corporate Affairs, the Cayman Islands General Registry – maintain public or semi-public records against which the diagram will be checked. Mismatches cause escalation, not just delay.

For a Hong Kong-incorporated entity sitting beneath an offshore holding layer, the Significant Controllers Register, which every Hong Kong-incorporated company has been required to maintain since 1 March 2018 under the Companies Ordinance (Cap. 622), is both a source of information and a document that the file should include. It evidences that the Hong Kong entity is already tracking its own beneficial-ownership position under domestic law.

Which documents are collected at each layer of the chain?

Once the map is settled, document collection follows the map layer by layer, from the top down. Starting at the operating-company level and working upward is a common error – addressed separately below.

At each corporate layer, the standard package comprises: the certificate of incorporation or equivalent constitutional instrument; the current register of members; the register of directors; evidence of the registered agent and registered office; and any shareholders' agreement or side letter that might affect control. Where the offshore jurisdiction maintains an economic-substance regime – as both the BVI and the Cayman Islands do – evidence of economic substance may also be required, particularly where the entity generates income of the type that triggers the local substance test.

At the trust layer, the package is different. The trustee provides a certified copy of the trust deed, a letter of wishes if one exists and if the settlor consents to its disclosure, confirmation of the trustee's regulatory status, and the trustee's own KYC on the settlor. Where the trust is a discretionary trust, beneficiaries are not always identified – but the class of beneficiaries must be described with sufficient precision to satisfy the receiving institution.

At the natural-person UBO level, the file requires: certified passport copy; proof of residential address dated within three months; a source-of-wealth narrative; and, increasingly, source-of-funds evidence tracing the specific capital contributed to the holding structure. The source-of-wealth narrative is the most frequently inadequate element in files that our desk reviews. A one-paragraph statement that the UBO "accumulated wealth through business activities" is not sufficient for any Hong Kong-regulated institution and will not satisfy a European correspondent bank.

The gate at the document-collection step is certification. Original or notarised copies are the standard. Apostille is required when the document is issued in a jurisdiction party to the Hague Apostille Convention (the 1961 multilateral treaty under which public documents are authenticated for international use) and the receiving institution is outside that jurisdiction. For BVI and Cayman documents, apostille certification is available and routinely required.

How is the source-of-wealth narrative constructed for a cross-border structure?

The source-of-wealth narrative is the document that financial institutions most frequently send back for revision. It has two distinct components, and conflating them is the single most common error in cross-border offshore files.

The first component is the biographical source of wealth: how did this person accumulate their net worth over their lifetime? This requires a structured narrative – not a list of directorships – covering the principal business activities, the approximate timeline of wealth accumulation, any major liquidity events such as business sales or real-estate disposals, and the jurisdictions in which those activities took place. Where the UBO's principal business activities were in Mainland China, the narrative must account for the fact that a Hong Kong or European receiving institution will apply additional scrutiny to cross-border capital movements involving Mainland-sourced funds.

The second component is the source of funds specific to the structure: what capital was contributed to the holding chain, when, and from what identifiable account or instrument? A wire-transfer record, a dividend payment notice, or a loan agreement showing the flow of funds into the offshore holding entity is the evidentiary backbone of this component. Where funds moved through multiple jurisdictions before reaching the offshore layer, each leg of that movement needs documentation. In our experience, the leg that is most often missing is the movement from a Mainland Chinese account or entity to the offshore vehicle – because that transfer predates the current compliance team's institutional memory or the relevant records are held by a counterparty who is no longer co-operative.

The cross-border interface matters here in a specific way. Hong Kong banks operating under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance will ask questions that a bank in a smaller offshore centre might not. A file that passes a BVI administrator's review may still be rejected by a Hong Kong correspondent bank if the source-of-wealth narrative cannot trace the Mainland-origin funds through a documented transfer mechanism.

The gate at this step is coherence. The narrative must be internally consistent – the timeline of wealth accumulation must align with the documented transfer dates, the jurisdictions named in the narrative must match the jurisdiction of incorporation of the entities in the chain, and the amounts described must be plausible relative to the scale of the stated business activities. Incoherence at this step triggers enhanced due diligence and, in some cases, account refusal.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. To discuss how the Anti-Money Laundering and Counter-Terrorist Financing Ordinance applies to your specific holding structure and the institutions you are approaching, contact us at info@lockhartyip.com.

What is the most common mistake, and how does the sequence avoid it?

The most common mistake is building the file from the operating company upward rather than from the UBO downward. Teams begin with the documents they have easy access to – the Hong Kong operating company's incorporation certificate, its audited accounts, its Significant Controllers Register – and then attempt to layer the offshore holding documentation on top. This approach inverts the logic of beneficial-ownership due diligence.

Regulators and compliance officers care, in the first instance, about who the natural person is and whether that person's funds are clean. The operating company's documents are relevant to the chain, but they do not answer the primary question. A file that opens with forty pages of operating-company documentation and then appends a two-paragraph UBO statement will be returned.

The sequence this guide sets out – map first, then collect top-down from UBO to operating company – keeps the file oriented toward the question the institution is actually asking. It also identifies gaps earlier. If the UBO's source-of-wealth documentation cannot be assembled, that problem is better discovered at step two than after the operating-company package has already been compiled and submitted.

A second recurring error is using generic group-level KYC that was prepared for a different purpose – say, an initial bank-account opening three years earlier – without updating it. Beneficial-ownership positions change. A restructuring, a transfer of shares, or the death of a key individual can alter the UBO analysis entirely. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires regulated institutions to refresh customer due diligence on a risk-sensitive basis. A file based on outdated information will fail a current review.

A third error, specific to cross-border structures, is failing to account for the UBO's UN-sanctions status at the point of file assembly. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. A compliance file must screen the UBO and each intermediate entity against the current UN consolidated sanctions list. Where the file also travels to a European or United States institution, those institutions will apply their own unilateral measures in addition. Counsel on our desk regularly sees files rejected at a European correspondent bank because a screening step appropriate to that institution's regime was omitted, even though the Hong Kong bank had accepted the file without objection.

The practical takeaway: build the screening step into the file at the UBO level before any submission, and document the screening date and the list version used. If the file is re-submitted months later, repeat the screen.

How does the payment-channel and banking-access dimension shape the file?

The immediate practical consequence of a KYC file is access to the payment channel. A holding chain that cannot pass its bank's beneficial-ownership review cannot send or receive funds – not in Hong Kong, not through a BVI entity with a Hong Kong correspondent relationship, not through any institution that applies the international FATF (Financial Action Task Force, the inter-governmental body that sets global AML standards) standards.

This is the centre of gravity for the exercise. The file is not prepared to satisfy an abstract regulatory obligation. It is prepared so that the holding chain can function commercially – paying dividends, servicing debt, receiving acquisition proceeds, or capitalising subsidiaries across borders. Banking access is the practical outcome; compliance is the mechanism by which that access is maintained.

For a Hong Kong holding entity sitting above or below an offshore layer, the correspondent-banking dimension adds a specific risk. A Hong Kong bank may accept the file, but if it routes payments through a correspondent bank in a jurisdiction with more demanding beneficial-ownership standards, that correspondent may apply a higher threshold to the same transaction. This is sometimes described as the de-risking dynamic – where correspondent banks reduce their exposure to certain customer types or jurisdictions rather than invest in enhanced due diligence. The practical effect is that a file acceptable to one institution may not survive the correspondent chain.

The way to manage this is to identify, at the outset, which correspondent relationships the receiving bank uses for the currency pairs and corridors relevant to the structure. If the structure involves USD payments, the correspondent is typically a US institution that will apply its own standards – which include, for example, screening against US unilateral designations as well as UN sanctions. The file should be built to the highest applicable standard in the chain, not merely to the standard of the first institution approached.

For a structure with a BVI holding company above a Hong Kong operating company, the Sanctions & AML practice at Lockhart & Yip regularly addresses the question of which institution in the chain sets the effective threshold and how the file should be sequenced to meet it.

If an earlier filing, structure or KYC attempt produced an adverse or stalled result, a second read of the file can identify the gap and the steps still available. Write to us at info@lockhartyip.com.

Decision checklist before the file is submitted

Before any submission, the team should be able to answer each of the following questions in the affirmative.

Has the ownership and control map been drawn to show every layer, every jurisdiction, and every natural-person UBO, and does it match the constitutional documents of each entity?

Has the file been built top-down – UBO documentation first, operating-company documentation last – rather than from the bottom of the chain upward?

Does the source-of-wealth narrative cover both the biographical accumulation of wealth and the specific source of funds contributed to the offshore structure, with documentary evidence for each material transfer?

Have all entities and natural persons in the chain been screened against the current UN consolidated sanctions list, and has that screen been documented with the list version and the date of the check?

Where the file will travel to a European, US, or other third-jurisdiction institution – directly or via a correspondent relationship – has the file been reviewed against the standards of that institution's home jurisdiction, including any applicable unilateral measures?

Has the Hong Kong-incorporated entity's Significant Controllers Register been included and verified for currency?

Where an offshore layer is subject to an economic-substance regime, has substance evidence been included or addressed?

Have all certifications, apostilles, and notarisations been completed to the standard required by the receiving institution, and are all address proofs dated within the required window?

Is the source-of-wealth narrative internally coherent – timeline, jurisdictions, amounts, and transfer records all consistent with each other?

If any of these questions cannot be answered affirmatively before submission, the gap should be resolved first. A file submitted with a known deficiency will be returned, and the return itself creates a record of the deficiency that may colour the subsequent review.

For further context on sanctions due diligence in a cross-border deal setting, see our briefing on sanctions due diligence for deals touching the United Kingdom. For supply-chain counterparty screening, the approach is set out in our guide on counterparty screening in Greater China supply chains.

A practical scenario: Mainland-origin UBO, BVI holdco, Hong Kong opco

An industrial group approached us in early 2027 with a stalled bank-account application for its Hong Kong operating company. The structure was: a Mainland Chinese natural person as the sole UBO, owning through a BVI holding company (incorporated several years earlier), which in turn held the Hong Kong operating entity.

The file submitted to the Hong Kong bank had been assembled by the operating company's local accountant. It was built from the bottom up: Hong Kong incorporation certificate, business registration, Significant Controllers Register, and a one-page UBO declaration. The BVI holding company's own constitutional documents were incomplete – the register of members had not been updated to reflect a share transfer that had taken place two years prior. The source-of-wealth narrative for the UBO described "profits from manufacturing operations" without identifying the Mainland entity that generated those profits or documenting the cross-border transfer mechanism by which funds had been capitalised into the BVI vehicle.

The bank's compliance team escalated the file for enhanced due diligence. The enhanced review identified the register-of-members discrepancy, the absent transfer documentation, and the inadequate source-of-wealth narrative. The application was suspended, not rejected – but the suspension extended the timeline significantly.

We rebuilt the file top-down. The UBO's source-of-wealth narrative was reconstructed with the assistance of the Mainland operating entity's audited accounts and the cross-border transfer records held by the Mainland bank. The BVI register of members was updated through the registered agent, with a certified copy of the updated register provided to the Hong Kong bank. A UN sanctions screen was documented. The file was resubmitted. The account was opened within one review cycle.

The lesson is not that the situation was unusual. It is the pattern our desk sees most frequently in structures involving Mainland-origin capital held through an offshore layer.

Related practices

Sanctions & AML – counterparty screening, AML compliance files, and sanctions-neutral contracting for cross-border groups
Holding Structures – offshore holding chain design, BVI and Cayman entity management, and substance planning

Frequently asked questions

Do I need a Hong Kong adviser for a beneficial-ownership and KYC file for an offshore holding chain?

You need an adviser who understands the standard applied by the Hong Kong-regulated institution receiving the file – which is set by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance – and who can also assess the additional requirements of any overseas correspondent bank in the payment chain. Where the offshore layer involves BVI or Cayman entities, co-ordination with the relevant offshore registered agent is also required. A Hong Kong international-law desk with cross-border AML experience is well-placed to hold that co-ordination role and to identify gaps before the file is submitted.

How long does a beneficial-ownership and KYC file for an offshore holding chain usually take?

The timeline depends on how many layers the chain has, where the UBO is resident, and how readily source-of-wealth documentation can be assembled. A clean two-layer structure with a co-operative UBO and complete records can be assembled in a matter of weeks. A multi-layer structure with Mainland-origin funds, a trust layer, or a historical share transfer that was not properly documented can take considerably longer – particularly where documents must be apostilled or where overseas entities need to update their registers before certified copies can be obtained. Parties should verify the current position with the receiving institution before acting on any timeline estimate.

How does the cross-border element affect a beneficial-ownership and KYC file for an offshore holding chain?

The cross-border element affects the file in three ways. First, the applicable standard is the highest standard in the chain, not merely the standard of the first institution approached – a file accepted in Hong Kong may still fail at a European or US correspondent bank. Second, source-of-funds documentation must trace capital across each jurisdictional leg, including any cross-border transfer from a Mainland Chinese account or entity to the offshore vehicle. Third, sanctions screening must be conducted against the UN consolidated list as a baseline, with additional screening against the unilateral measures of any third-country institution in the payment chain. In our cross-border practice, these three dimensions together explain most of the KYC failures we are asked to remedy.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach a beneficial-ownership and KYC file for an offshore holding chain