How to approach a compliance review before Mainland

The contract is ready. The commercial terms are agreed. Then someone in the group legal or treasury function asks the question that should have come first: have we actually checked this counterparty against every regime that applies to us? For cross-border transactions touching Mainland China, that question has layers. Hong Kong sits at the centre of the most active trade and investment corridor in the Asia-Pacific, and the compliance calculus here is not the same as in New York or Frankfurt.

A compliance review before contracting with a Mainland China entity is a structured pre-execution process covering sanctions screening, anti-money laundering customer due diligence, source-of-funds verification, and counterparty integrity checks – governed in Hong Kong principally by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (the AML/CTF Ordinance) and the United Nations Sanctions Ordinance, and informed by the specific compliance obligations of the contracting party's own jurisdiction. The review runs before execution, not after the first payment is made.

This guide sets out the review in the sequence that matters: the decision framework first, then the step-by-step process, then the gates at each stage, and finally the checklist a legal or compliance team can apply before signing.

Why the timing of the review is itself a compliance decision

Most compliance failures on cross-border Mainland contracts are not caused by ignorance of the rules. They are caused by sequencing – the review begins after the contract is signed, or after the first payment instruction is issued. By that point, the counterparty relationship already exists, and unwinding it carries its own exposure.

The governing instruments impose obligations that attach at the point of the business relationship, not at the point of a subsequent transaction. Under the AML/CTF Ordinance, a financial institution or regulated entity must complete customer due diligence before establishing a business relationship or conducting a transaction above the relevant threshold. Non-regulated commercial entities are not directly subject to the same statutory obligations, but their banks are. The practical effect is the same: the payment channel will not function if the underlying due diligence is absent.

In our cross-border practice, the single most common reason a Mainland-bound payment stalls is that the Hong Kong-side bank has flagged a gap in the source-of-funds or beneficial-ownership file. That gap existed before the contract was signed. It was simply not identified.

The review therefore starts at term-sheet stage. Not after heads of agreement. Not after the contract. At term sheet.

Step 1: Identify which regimes apply to your contracting entity

The first step is to map the compliance obligations of the entity that will sign the contract – not the obligations of the Mainland counterparty.

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. If your contracting entity is incorporated in Hong Kong, or if the transaction is processed through a Hong Kong account, the operative sanctions regime is the UN framework as applied through the United Nations Sanctions Ordinance. That is the legal position.

However, many groups contracting through Hong Kong have parent entities, investors, or financing lines in the United States, the European Union, or the United Kingdom. Those parents or lenders may be subject to their own states' unilateral measures. Whether those measures technically apply to the Hong Kong subsidiary depends on the specific instrument and the ownership and control tests it uses. This is a jurisdiction-specific legal question, not a general assumption.

The practical step at this stage is to prepare a short entity map: the contracting entity, its ultimate beneficial owner(s), the jurisdiction of incorporation of each entity in the chain, the source of financing for the transaction, and the jurisdiction in which the bank account that will process payments is maintained. Each of those facts determines which rules apply.

A group GC who bypasses this mapping step and applies only the rules of the parent's home jurisdiction to a Hong Kong subsidiary – or, conversely, assumes that the Hong Kong subsidiary is insulated from all foreign measures – is making the most common mistake we see at this stage of a cross-border transaction.

Step 2: Screen the counterparty and its principals against the applicable lists

List screening is the most visible part of compliance due diligence, and it is also the part most frequently done incorrectly.

The minimum screening covers: UN consolidated sanctions lists; any other lists applicable to the contracting entity based on the regime mapping in Step 1; and the Mainland entity's registered name, any known trading names, and the names of its legal representative and key principals.

Several points are specific to Mainland China counterparties. First, the legal representative registered with the relevant Mainland authority is the correct principal to screen, not merely the individual who signs the contract. Second, Mainland entities frequently operate under names that differ from their registered corporate name. Both must be screened. Third, where the Mainland entity is a state-owned enterprise or has a state entity as a direct or indirect shareholder, the applicable ownership and control analysis under the relevant sanctions instrument may produce a different result than a purely private-entity analysis.

Screening is a snapshot. It captures the position on the date run. For longer-term relationships or multi-tranche transactions, screening should be re-run at each material step. A one-time screen before execution, without any trigger-based re-screening protocol, is not a defensible compliance programme.

The output of this step is a documented screening record: the lists checked, the date, the search terms used, and the result. If a potential match appears, the next step is a name-match analysis, not an assumption that the match is a false positive. Document the analysis.

Step 3: Conduct source-of-funds and beneficial ownership verification

This is the step that most directly determines whether the transaction will clear the payment channel. Banks – both in Hong Kong and on the Mainland side – apply their own AML/CTF frameworks to incoming and outgoing payments. Where they cannot satisfy themselves as to the source of funds or the beneficial ownership of the counterparty, they will decline or delay the transaction.

For a Mainland China entity, the beneficial ownership verification has specific characteristics. The Mainland's corporate registry records the registered shareholders, but the ultimate beneficial owner (the natural person who ultimately owns or controls the entity) may sit behind multiple layers of domestic holding companies, partnerships, or nominee arrangements. The verification exercise must trace through those layers.

The documents typically required include: a current business licence issued by the relevant Mainland market supervision authority; a certificate of incorporation or equivalent registration certificate; shareholder registry extracts for each layer up to the ultimate beneficial owner; government-issued identity documents for each natural-person beneficial owner; and, where the entity is state-owned, the relevant state-ownership certificate or equivalent documentation.

Source of funds for the transaction itself – meaning the funds the Mainland entity will use to pay, or the funds your entity will remit to the Mainland – must be documented separately. Bank statements, audited accounts, or a funds-flow memorandum prepared by the entity's finance team are the typical instruments. The level of documentation required is proportionate to the risk rating of the transaction and the counterparty.

In our experience on cross-border instructions of this kind, the source-of-funds file is the single element most commonly requested and least commonly prepared in advance. Preparing it before the first payment instruction is issued, rather than in response to a bank query, avoids the most common cause of payment delay.

Step 4: Assess the specific transaction structure and payment route

The structural analysis at this step focuses on two questions. First, does the transaction structure itself create compliance exposure that the entity-level and counterparty-level checks may not have captured? Second, does the intended payment route pass through any jurisdiction or institution that introduces a separate compliance layer?

Common structural issues on Mainland-touching transactions include: the use of an offshore holding entity (BVI, Cayman, or other) as the contracting party, where that entity's UBO position has not been separately documented; payment routing through a third-country correspondent bank; the involvement of a Mainland-side designated financial institution that is itself on a foreign unilateral-measures list (noting that such a list may not be applicable to the Hong Kong contracting entity, but may be relevant to its foreign investors or lenders); and the use of non-standard payment instruments such as letters of credit issued by institutions with complex ownership structures.

The payment-route analysis should trace the funds from the originating account to the receiving account and identify every institution in the chain. Where a correspondent bank in a third jurisdiction sits in the chain, that institution's own compliance requirements apply to the transaction and may impose obligations on the originating party.

This step connects directly to the centre of gravity of cross-border Mainland compliance work: the payment channel. A transaction that is legally and commercially sound will not complete if the payment route cannot be cleared. Addressing the route at this step – before the contract is signed – avoids the position where a signed contract cannot be performed because no compliant payment mechanism exists.

For a practical illustration: a European technology group contracting through its Hong Kong subsidiary with a Mainland manufacturing entity came to us in late 2026. The transaction had been structured by European counsel without addressing the Hong Kong payment route. The correspondent bank in the chain had an EU compliance team that applied EU restrictive measures to the transaction, notwithstanding that the Hong Kong subsidiary was not subject to those measures. We re-routed the payment and restructured the contractual payment mechanics; the transaction completed without further delay. The issue was structural, not substantive, and it could have been identified in Step 4 had the review been conducted before execution.

Step 5: Document the review and prepare the compliance file

Documentation is not a formality. It is the mechanism by which the compliance review becomes defensible. A review that was conducted but not documented is, for practical purposes, a review that did not happen – at least as far as a bank, a regulator, or a counterparty dispute is concerned.

The compliance file for a Mainland-contracting review should contain, at minimum: the entity map prepared in Step 1; the screening records and any name-match analyses from Step 2; the beneficial ownership and source-of-funds documents gathered in Step 3; the structural and payment-route analysis from Step 4; the legal conclusion on the applicable regimes; and a sign-off record identifying the person who conducted the review, the date, and the result.

Where the review identifies a risk that is not a hard block – meaning the counterparty is not listed, but there are features of the transaction or the counterparty that require ongoing attention – the file should include a risk assessment and a monitoring or re-screening schedule. The existence of an identified risk, documented and addressed, is a materially better position than an undocumented absence of any inquiry.

The file should be maintained for as long as the business relationship continues, and for a period after it ends that is consistent with the applicable record-keeping requirements. Verify the current retention period under the relevant regime before acting.

The sequence above describes the standard position across most cross-border Mainland transactions. Your specific situation turns on the entities engaged, the applicable regimes, and the payment route – which is precisely where the review is won or lost.

For a structured assessment of your compliance position on a Mainland-touching transaction, write to us at info@lockhartyip.com.

The common mistake: treating the compliance review as a formality rather than a gate

The prevalent error is cultural rather than technical. In groups where compliance is treated as a post-signing formality – a box to tick before the first invoice is raised – the review happens too late to influence the structure, the counterparty selection, or the payment route.

The consequence is not merely a delayed payment. A compliance failure on a Mainland-touching transaction can produce: a bank's decision to exit the relationship (which affects all transactions through that account, not only the one in issue); a regulatory inquiry from the Hong Kong Monetary Authority or the relevant Mainland body; exposure for the entity's directors or compliance officers; and, in the most serious cases, reputational and enforcement consequences that extend well beyond the original transaction.

A related mistake is assuming that because Hong Kong does not give domestic effect to unilateral measures, those measures are irrelevant to a Hong Kong-entity transaction. They may be irrelevant to the legal obligations of the Hong Kong entity. They are rarely irrelevant to the practical operation of the payment channel, the risk appetite of the Hong Kong-side bank, or the obligations of any foreign parent or investor in the chain.

The objection we sometimes hear is that conducting a full compliance review before each Mainland contract is disproportionate to the transaction size or the risk profile of the counterparty. This is the wrong framing. The review is scaled to risk. A low-risk, established counterparty with a clean history and a simple payment route requires a lighter-touch review than a new counterparty in a sensitive sector with an opaque ownership structure. The steps are the same; the depth of inquiry at each step varies.

If an earlier compliance filing or payment instruction has produced a bank query or a stalled result, a second read of the position can identify where the gap arose and which steps remain open.

For an assessment of a stalled or queried transaction, contact us at info@lockhartyip.com.

Decision checklist before contracting with a Mainland China entity

The following checklist applies at term-sheet stage. Each item represents a gate. If the answer to any item is "unknown" or "not yet addressed", the review is not complete.

Is the contracting entity mapped? (Jurisdiction of incorporation, UBO, financing source, bank account jurisdiction.)
Which sanctions regime(s) apply to the contracting entity and any foreign parent or investor in the chain?
Has the Mainland counterparty been screened against all applicable lists, including its legal representative and key principals?
Has the beneficial ownership of the Mainland entity been traced to the ultimate natural-person level?
Has the source of funds for the transaction been documented?
Has the payment route been mapped, including any correspondent bank in the chain?
Does the transaction structure introduce any offshore entity (BVI, Cayman, other) whose UBO position has not been separately documented?
Is there a trigger-based re-screening protocol in place for the duration of the relationship?
Has a compliance file been opened, with a documented sign-off?
If any risk was identified but not a hard block, is there a risk assessment and monitoring schedule in the file?

A "yes" to each item means the review is complete. A "not yet" means there is a gap to close before execution.

Related practices

Sanctions & AML – cross-border AML, sanctions compliance and source-of-funds advisory for international groups
Holding Structures – offshore and Hong Kong holding entity design, including beneficial ownership and substance

Frequently asked questions

Which jurisdiction's law applies to a compliance review before contracting with a Mainland China entity?

No single jurisdiction's law governs the review in isolation. The applicable obligations depend on the contracting entity's place of incorporation, the jurisdiction in which the bank account processing payment is maintained, and the ownership structure of any parent or investor. A Hong Kong entity transacting through a Hong Kong account is subject to the AML/CTF Ordinance and the United Nations Sanctions Ordinance. Where a foreign parent or investor is also in the chain, its home jurisdiction's rules may apply separately to that entity. The review maps these layers before any conclusion is drawn.

How does the cross-border element affect a compliance review before contracting with a Mainland China entity?

The cross-border element multiplies the number of regimes in play and introduces the payment-route dimension. A purely domestic contract involves one regulatory environment. A Hong Kong entity contracting with a Mainland China counterparty involves, at minimum, Hong Kong AML and sanctions rules, the Mainland entity's own regulatory position, and the compliance frameworks of every bank in the payment chain. Where the payment route passes through a third country – as is common in cross-border trade finance – the correspondent bank's own obligations apply as well. Each layer must be identified and addressed.

What documents are needed for a compliance review before contracting with a Mainland China entity?

The core documents are: the Mainland entity's current business licence and registration certificate; shareholder registry extracts tracing to the ultimate beneficial owner; government-issued identity documents for each natural-person UBO; and source-of-funds documentation for the transaction. Supplementary documents depend on the entity type: state-owned enterprises require state-ownership certificates; entities in regulated sectors require their relevant operating licences. The contracting entity must also prepare its own entity map and any documentation supporting the applicable regime analysis. All documents should be dated, authenticated where required, and filed in the compliance record.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach a compliance review before contracting with a Mainland China entity