How to approach a compliance review before UK

Q: What are the main risks in a compliance review before contracting with the United Kingdom entity?

Three risks are most commonly encountered: stopping the sanctions screen at the entity level without tracing the ownership chain; treating the PSC register as a verified source of beneficial ownership without checking currency and accuracy; and failing to map the payment route before signing. A USD payment through a US correspondent will be subject to US OFAC screening regardless of the bilateral jurisdiction pair, and a compliance file that does not address that screen will not prevent a payment freeze.

A contract with a United Kingdom counterparty looks straightforward on its face. The United Kingdom has a mature legal system, transparent company registers, and well-established banking infrastructure. Yet for a Hong Kong group entering that relationship, the compliance picture is more layered than the headline suggests. The two jurisdictions operate distinct sanctions regimes, apply different thresholds for customer due diligence, and route payments through financial institutions that run their own screening logic independently of what either regulator formally requires.

A compliance review before contracting with a United Kingdom entity requires a structured sequence: sanctions screening under both the United Nations Sanctions Ordinance and the applicable United Kingdom autonomous measures, a source-of-funds and beneficial-ownership check against the United Kingdom's Companies House register and the relevant watchlists, and a payment-channel assessment to confirm the correspondent-banking route will not trigger a block or a request for additional information. The governing instruments in Hong Kong are the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance. The review should be completed before heads of terms are signed, not after.

This guide sets out the sequence step by step, identifies the gate that must be cleared at each stage, and flags the single most common mistake that causes a review to stall or – worse – to be treated as incomplete by a correspondent bank after the contract is already in place.

What decision does the reader actually face?

The question is not whether to do a compliance review. For any institution or adviser subject to Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance, the review is not optional. The real decision is how to scope it correctly for a United Kingdom counterparty so that it is proportionate, documented, and defensible – and so that it does not generate delays once the commercial relationship is live.

Three options are commonly considered. The first is a light-touch name-screen only, treating the United Kingdom as a low-risk jurisdiction and relying on that designation to reduce the diligence burden. The second is a full know-your-counterparty exercise mirroring what the party would do for a higher-risk jurisdiction. The third – and the one most practitioners on our desk recommend in cross-border commercial relationships – is a scoped, risk-based review calibrated to the specific United Kingdom entity, the nature of the transaction, and the payment channel through which settlement will flow.

The choice matters because a light-touch screen that misses a sanctions-designated director, a politically exposed person in the ultimate beneficial ownership chain, or a payment route that triggers a correspondent bank's own controls will not be cured by the fact that the United Kingdom is generally regarded as a lower-risk jurisdiction. The regulators' AML guidelines in Hong Kong are explicit: risk classification is entity-level and transaction-level, not jurisdiction-level alone.

Step one – sanctions screening: which regimes apply and what is the gate?

The first gate is a dual-regime sanctions check: Hong Kong's United Nations Sanctions Ordinance on one side, and the United Kingdom's own autonomous sanctions measures on the other.

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That means a Hong Kong entity contracting with a United Kingdom counterparty is not required by Hong Kong law to screen against United Kingdom autonomous sanctions lists – but it is required to screen against all applicable UN consolidated lists. The United Kingdom counterparty, by contrast, is required to comply with the United Kingdom's autonomous regime, which may be broader in some sectors and narrower in others than the UN lists.

Why does this matter for the Hong Kong side? Because the payment will almost certainly pass through a correspondent banking network in which one or more institutions are subject to United Kingdom or United States rules. Those institutions will apply their own screening. If the Hong Kong party's compliance file does not address the broader watchlist position of the United Kingdom entity – including directors, ultimate beneficial owners, and any group affiliates – the correspondent bank may freeze the payment and ask for a compliance memorandum that the Hong Kong party is then unprepared to provide.

The gate at step one: confirm that neither the United Kingdom entity nor any person in its disclosed ownership and control chain appears on the UN consolidated lists. Note the screening date. Document the methodology and the list version used. If a match arises – even a partial or potential match – the review must pause until the match is resolved before any contract or payment instruction proceeds.

Step two – beneficial ownership: Companies House, PSC register, and the verification gap

The United Kingdom operates a public register of persons with significant control, known as the PSC register (persons with significant control – the United Kingdom's statutory disclosure mechanism for beneficial owners). The PSC register is held at Companies House and is publicly accessible. It requires disclosure of individuals who hold more than 25% of shares or voting rights, or who otherwise exercise significant influence or control.

This is a meaningful starting point. It is not the endpoint.

The PSC register records what the United Kingdom entity has self-disclosed. It does not independently verify those disclosures. In our cross-border practice, we regularly see PSC filings that are out of date, that record an intermediate holding company rather than the natural person at the top of the chain, or that reflect a structure that has been reorganised since the last Companies House filing. Each of those situations requires the Hong Kong party to go further: to request constitutional documents, a corporate structure chart, and – where the risk profile warrants it – evidence of beneficial ownership from the entity itself.

The gate at step two: the beneficial owner at the natural-person level is identified, their identity is verified against a reliable source, and no individual in the chain is a politically exposed person without documented enhanced due diligence on record. Where an intermediate holding entity sits in the chain – a BVI or Cayman Islands vehicle above the United Kingdom operating company, for example – the chain must be traced to the natural person. The PSC register entry alone is not sufficient to close this gate.

For groups whose counterparty has a holding structure that passes through an offshore centre, this step intersects directly with the source-of-funds work described at step three. A BVI vehicle in the ownership chain that has no disclosed substance or filing history will prompt questions from a correspondent bank regardless of what the Companies House register says.

Step three – source of funds and the payment channel assessment

Banking access and the payment channel are the centre of gravity for this review. A contract can be signed and a beneficial-ownership chain can be verified without incident. The point of failure in Hong Kong / United Kingdom cross-border commercial relationships is almost always the payment leg.

The source-of-funds question has two dimensions. The first is commercial: where does the money flowing under this contract come from, and can the United Kingdom entity demonstrate that it originates in legitimate business activity? The second is operational: which correspondent-banking route will carry the payment, and what additional information will that route require before the funds move?

In practice, a payment denominated in GBP from Hong Kong to the United Kingdom will typically clear through the United Kingdom's domestic payment infrastructure. A payment in USD – even between a Hong Kong payer and a United Kingdom payee – will clear through a US correspondent, which applies US OFAC screening in addition to the screens already run by the Hong Kong and United Kingdom banks. That matters because the US OFAC list, unlike the UN consolidated list, reflects US autonomous designations. A United Kingdom entity with a director or affiliate that appears on OFAC's list will create a correspondent-bank block even if the UN list is clear.

The gate at step three: the party has identified the settlement currency and the likely payment route; assessed which correspondent banks are on the chain and what their screening universe includes; confirmed that the source-of-funds narrative for the transaction is documented and can be produced to a bank's compliance desk on request; and satisfied itself that the United Kingdom counterparty's own AML documentation is current and consistent with the PSC register picture. If any of these sub-gates is open, the payment instruction should not issue.

We have acted on matters where a Hong Kong group's first payment under a new contract was frozen at the correspondent-bank stage because the compliance file prepared before signing did not anticipate the USD correspondent's OFAC screen. Reconstructing that file under time pressure, after a payment freeze, is considerably more difficult than building it correctly before the contract is executed.

For a worked example of how a source-of-funds file is constructed in a comparable cross-border context, see our matter note on AML source-of-funds file: Singapore counterparty. The methodological steps transfer directly to the United Kingdom counterparty context.

Step four – enhanced due diligence triggers: when the standard review is not enough

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulators' AML guidelines both identify circumstances in which enhanced due diligence is required. For a United Kingdom counterparty, the most common triggers in a commercial contracting context are these.

A politically exposed person (PEP – an individual who holds or has recently held a prominent public function, or a close associate or family member of such a person) in the ownership or management chain requires enhanced due diligence regardless of the jurisdiction. The United Kingdom has an active political class and a significant number of PEPs in senior commercial roles. The PSC register does not flag PEP status; the Hong Kong party must run that check independently using a recognised watchlist provider or by manual review against publicly available information.

Unusual or opaque ownership structures also trigger enhancement. A United Kingdom trading company held through a multi-layer offshore structure – with no apparent commercial rationale for the layers – warrants additional questions about the purpose of the structure and the identity of the ultimate controller. That is true even where each layer is individually compliant with its home-jurisdiction disclosure rules.

High-value or complex transactions – where the amounts or the contractual mechanisms are disproportionate to the apparent business of the United Kingdom entity – are a third trigger. Enhanced due diligence in this context means documenting the rationale for the transaction from the United Kingdom entity's perspective, not just from the Hong Kong party's own position.

The gate at step four: the review file contains a written risk assessment that identifies which, if any, enhanced triggers apply, documents the steps taken in response, and records who in the Hong Kong party's organisation approved the counterparty as acceptable on the enhanced basis. If the review is conducted by external counsel, that assessment should be communicated to the internal decision-maker before contract execution.

The most common mistake – and how to avoid it

The most frequent error we see is treating the compliance review as a pre-contract formality that produces a file for the internal record – but not a file that anticipates what a correspondent bank will ask for when the first payment instruction arrives.

The result is a two-stage problem. At stage one, the internal review passes. The contract is signed. At stage two, the bank's compliance desk asks for the source-of-funds narrative, the beneficial ownership chart traced to the natural person, and confirmation of the sanctions position as at the date of the payment instruction – not as at the date of the contract. The Hong Kong party scrambles to produce documentation it should have gathered three months earlier. In the interim, the payment is delayed or frozen.

The fix is simple to describe and requires discipline in execution: scope the review from the outset to answer the questions the correspondent bank will ask, not only the questions the internal compliance checklist poses. That means building the source-of-funds file in a form that can be extracted and sent to a bank's compliance desk without further work. It means dating the sanctions screen at a point that can be refreshed quickly before each material payment. And it means documenting the ownership chain in a format – typically a certified chart with source documents at each level – that a bank's operations team can process without further correspondence.

For the broader sanctions and AML context in which this review sits, see our practice page on Sanctions & AML and our step-by-step guide on sanctions due diligence for a deal touching the United Kingdom.

A micro-scenario: where the sequence made the difference

A mid-sized Asian trading group was negotiating a distribution agreement with a United Kingdom entity that was itself majority-owned by a Central Asian holding company. The internal compliance team ran a name screen of the United Kingdom company against the UN consolidated list. It came back clear.

The ownership review, conducted as part of a scoped compliance exercise at our desk's recommendation, identified that one of the directors of the Central Asian holding company appeared on a watchlist maintained by a major US bank for OFAC-adjacent risk – not a formal OFAC designation, but a flag that the US correspondent's automated screening system would have treated as a potential match.

The group paused the agreement. The United Kingdom counterparty provided written confirmation that the director in question had resigned from the Central Asian entity some months earlier. That confirmation, together with updated Companies House filings, was used to close the enhanced-diligence file before signing. The first USD payment under the agreement cleared the US correspondent without delay.

Had the review stopped at the name-screen stage, the payment would have been frozen and the relationship would have opened under adverse conditions.

Decision checklist before signing

The following checklist is not a substitute for legal advice on the specific facts. It is a gate-by-gate summary of the steps above.

Sanctions screen completed – UN consolidated list checked as at a documented date; no match or potential match outstanding; methodology and list version recorded.
Beneficial ownership traced – natural-person beneficial owner identified; PSC register entry reviewed and verified against supporting documents; any intermediate offshore vehicle traced to natural person.
PEP check run – ownership and management chain checked against a recognised PEP list; any PEP connection documented with enhanced due diligence on file.
Source-of-funds narrative documented – origin of the counterparty's funds described in writing; consistent with the business activity disclosed in the Companies House filing.
Payment route assessed – settlement currency identified; correspondent-banking chain and applicable screening universe mapped; USD route OFAC implications addressed where USD is involved.
Enhanced due diligence applied where triggered – written risk assessment completed; internal sign-off recorded; external counsel assessment communicated to decision-maker if applicable.
File ready for bank production – the compliance file is in a format that can be sent to a correspondent bank's compliance desk without further processing.

Each gate is binary: open or closed. A contract should not proceed while any gate remains open. If commercial pressure requires execution before a gate is closed, that decision and its rationale must be documented by a senior officer of the Hong Kong party, with a defined timeline for closure.

The sequence above describes the standard position. Your matter turns on the specific documents, the jurisdictions engaged by your counterparty's ownership structure, and the payment channel your bank will actually use – which is where the review is won or lost.

To discuss how the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance apply to your specific United Kingdom counterparty position, contact info@lockhartyip.com.

If an earlier review produced incomplete documentation or a payment has already been flagged by a correspondent bank, a second-look assessment can identify the gaps and the steps still available. Write to info@lockhartyip.com.

Related practices

Sanctions & AML – sanctions screening, AML due diligence, and compliance file preparation for cross-border relationships
Corporate Counsel – cross-border contracting, governance, and entity-level compliance support

Frequently asked questions

How does the cross-border element affect a compliance review before contracting with the United Kingdom entity?

The cross-border element introduces at least two parallel compliance obligations: Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance apply on the Hong Kong side, while the United Kingdom entity is subject to its own autonomous sanctions regime and AML rules. The critical practical consequence is that the payment channel – typically a USD or GBP correspondent-banking route – adds a third screening layer, applied by the correspondent bank independently of both parties. A review scoped only to one jurisdiction will miss that third layer and risk a payment freeze. The review must address all three.

What documents are needed for a compliance review before contracting with the United Kingdom entity?

The core document set comprises: a current Companies House filing for the United Kingdom entity including the PSC register entry; constitutional documents (articles of association or equivalent); a corporate structure chart showing the ownership chain to the natural-person level; identity documents for ultimate beneficial owners and, where applicable, senior managers; source-of-funds documentation consistent with the entity's stated business; and the entity's most recent AML or know-your-customer certification if it is itself subject to regulated-sector rules in the United Kingdom. Where the ownership chain includes an offshore holding entity, the equivalent formation and ownership documents for that vehicle are also required.

What are the main risks in a compliance review before contracting with the United Kingdom entity?

Three risks are most commonly encountered in our cross-border practice. First, stopping the sanctions screen at the entity level without tracing the ownership chain: a designated individual can sit above a clean entity. Second, treating the PSC register as a verified source of beneficial ownership without checking whether the filing is current and accurate. Third, failing to map the payment route before the contract is signed: a USD payment through a US correspondent will be subject to US OFAC screening regardless of the bilateral jurisdiction pair, and a compliance file that does not address that screen will not prevent a payment freeze. Each risk is manageable if the review is scoped correctly from the outset.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach a compliance review before contracting with the United Kingdom entity