How to approach counterparty screening for a Greater China supply chain
Counterparty screening for a Greater China supply chain. A practical guide for in-house counsel. The Hong Kong angle in focus. Write to info@lockhartyip.com.
A payment rejected by a correspondent bank. A shipment held pending compliance review. A financing window closed because a counterparty flag appeared too late. For in-house counsel and compliance officers managing a Greater China supply chain, these are not hypothetical outcomes. They are the operational cost of running a screening programme that lags behind the risk.
Counterparty screening for a Greater China supply chain is a structured due-diligence process governed primarily by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance, which together define Hong Kong's mandatory compliance obligations for entities transacting through the city. The process runs in a defined sequence – identification, list screening, enhanced due diligence where indicators arise, and documented sign-off – and the gate at each step determines whether the payment channel and banking relationship remain available. Skipping or compressing any gate is the single most common cause of account termination and regulatory exposure.
This guide sets out the sequence in the order a practitioner works through it, identifies the gate that must be cleared at each stage, flags the error that most frequently derails in-house teams, and closes with a decision checklist. The cross-border interface throughout is Hong Kong as the hub: the jurisdiction through which Greater China supply-chain payments route, contracts are governed, and compliance files are held.
What decision does the reader actually face?
The core decision is not whether to screen. Every group with a Hong Kong banking relationship, a Hong Kong entity in the supply chain, or a payment routed through Hong Kong is already within the compliance perimeter of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance. The real decision is how to design and operate a screening programme that satisfies the obligations those instruments impose – and that holds up to scrutiny from both a Hong Kong correspondent bank and, separately, from regulators in the counterparty's home jurisdiction.
Three options sit on the table. The first is a minimal-compliance approach: run counterparty names against published UN sanctions lists, retain a record, and rely on the group's bank to flag anything else. This is the approach that routinely fails at the correspondent-bank stage. Banks conducting their own know-your-customer (KYC, the suite of customer identification, verification and ongoing monitoring obligations under the Ordinance) checks look through the Hong Kong entity to the underlying supply chain. A thin file at the Hong Kong level does not satisfy a correspondent doing its own review.
The second option is a proportionate-risk approach: calibrate the depth of screening to the assessed risk profile of each counterparty type – first-tier suppliers, sub-tier manufacturers, logistics intermediaries, payment agents – and document that calibration decision. This is the approach the Ordinance supports and that regulators in practice expect.
The third option is a full enhanced-due-diligence approach applied uniformly. It provides the strongest file, but at a resource cost that most supply-chain programmes cannot sustain across large counterparty populations. It is, however, the correct starting point for any counterparty that triggers a risk indicator – and the guide to what constitutes a trigger is the second step in the sequence below.
In our cross-border practice, the instruction to choose option one is most often given by a treasury or procurement function, not a legal one. Counsel's task is to translate the legal exposure into the operational case for option two as the baseline.
The sequence that follows assumes option two as the working standard, with the enhancement gate that moves a counterparty into option-three territory.
Step 1 – Identify the counterparty and map the ownership chain
Before any list is checked, the counterparty must be fully identified: legal name in the relevant language and in romanised form, jurisdiction of incorporation, registered address, ultimate beneficial owner, and the identity of any intermediate holding entities. For a Greater China supply chain, this step carries specific complexity.
A Mainland Chinese operating entity will typically appear in the Hong Kong payment chain as the offshore vehicle through which it contracts – often a BVI or Hong Kong company. The compliance file must capture both layers. A screen run against only the offshore name misses any designations or adverse findings against the underlying Mainland entity, and correspondent banks know this. They look at beneficial ownership.
Beneficial ownership identification in a Greater China context means working with the Mainland entity's business registration, any available equity structure filings, and where the group is listed or regulated, any public disclosure. The Significant Controllers Register requirement under the Companies Ordinance (Cap. 622) – in force since 1 March 2018 – means that Hong Kong-incorporated entities in the chain are required to maintain a register of persons with significant control. Requesting access to that register, or requesting a declaration of equivalent content from non-HK entities, is a practical identification step that also creates a record of the enquiry.
The gate at Step 1: you cannot run a meaningful screen without a verified legal name and a documented ownership chain. A screen against a trading name or an unverified romanisation is not a screen for compliance purposes.
Step 2 – Run the sanctions and watch-list check
With the counterparty fully identified, the next step is the list check. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. The primary list to screen against for Hong Kong compliance purposes is therefore the UN consolidated sanctions list maintained under the United Nations Sanctions Ordinance. Any entity or individual on that list is prohibited.
However, the compliance file must also address the reality of correspondent-bank expectations. Most correspondent banks operating in the Hong Kong payment system have their own screening obligations in their home jurisdictions, which may include unilateral regimes. A counterparty that is clean against the UN list but flagged under a unilateral regime applied by a correspondent bank's home regulator will still cause the payment to fail. The compliance work at this step is therefore two-layered: satisfy Hong Kong's legal obligations, and build a file that anticipates the correspondent's own screening output.
This is not a request to comply with unilateral measures. It is a factual statement about the payment channel: if the route to settlement runs through a correspondent that applies a broader screen, that screen will run regardless of Hong Kong's domestic position. Understanding where payments route – and therefore which correspondents are in the chain – is part of mapping the banking-access risk. That mapping is a compliance task, not a workaround.
The watch-list check also covers adverse-media screening and, where the counterparty is a financial institution, any relevant regulatory or enforcement history. A Mainland-regulated financial intermediary may carry a record with the People's Bank of China or a provincial regulator. That record is material to the risk assessment even if it does not appear on a sanctions list.
The gate at Step 2: a counterparty that generates a match or a credible hit at this stage moves immediately to enhanced due diligence. A counterparty that generates a clean result at this stage moves to Step 3 for risk scoring. A match that is not investigated and not documented is worse than no screen at all – it evidences awareness without response.
The sequence above describes the standard position. Your matter turns on the specific counterparties identified, the payment routes in use, and the documented risk calibration – which is where the file is won or lost at a compliance review.
For a structured assessment of your supply-chain screening programme and the payment channels engaged, write to us at info@lockhartyip.com.
Step 3 – Score the risk and decide the due-diligence level
Not every counterparty in a Greater China supply chain carries the same risk profile, and a well-designed programme says so explicitly. Risk scoring at this step sets the documented basis for the due-diligence level applied. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance supports a risk-based approach: higher-risk counterparties require enhanced measures; lower-risk counterparties may qualify for simplified measures where the Ordinance permits.
For a Greater China supply chain, the principal risk factors at this step are: the counterparty's industry sector (whether it touches controlled goods, dual-use technology, or sectors subject to sector-specific restrictions); the counterparty's geographic exposure within the Mainland (certain industries and regions carry higher inherent risk); the nature of the transaction (goods, services, or financial flows with a less obvious commercial rationale attract more scrutiny); and the payment structure (multi-leg payments, payment agents, or settlement through a jurisdiction not otherwise connected to the transaction are all indicators).
A mid-tier Mainland manufacturer producing consumer goods, transacting directly with the Hong Kong entity, with a straightforward payment structure and a clean list check, may sit in the standard due-diligence band. A trading intermediary with layered ownership, transacting across multiple jurisdictions, in a sector with dual-use potential, sits in the enhanced band. The scoring decision must be documented. "We checked and it looked fine" is not a documented risk calibration.
The gate at Step 3: a counterparty scored at enhanced risk requires the file described at Step 4. A counterparty scored at standard risk proceeds to ongoing monitoring at Step 5. The scoring methodology itself – what factors are used, what weights apply, who approves the output – should be written down and reviewed annually. In our cross-border practice, this methodology document is usually the first thing a correspondent bank's compliance team requests when they query a relationship.
Step 4 – Conduct and document enhanced due diligence where required
Enhanced due diligence for a Greater China counterparty goes beyond the list check and the ownership mapping. It addresses source of funds, source of wealth (for individual beneficial owners), the purpose of the transaction, and the business rationale for the payment structure.
For a supply-chain context, the enhanced file typically includes: verified constitutional documents for each entity in the ownership chain; evidence of the counterparty's legitimate business operations in the Mainland (business licence, tax registration, physical premises evidence where practicable); a declaration or verified statement on ultimate beneficial ownership; bank statements or equivalent financial records establishing the counterparty as a functioning commercial entity; and, where the transaction value warrants it, an independent verification of the counterparty's regulatory standing with the relevant Mainland authority.
What foreign principals often underestimate here is the translation and certification burden. Mainland corporate documents are in Simplified Chinese. A compliance file held for a Hong Kong bank needs those documents to be available in a form the bank's compliance team can assess. Certified translation is not always required, but a file that contains untranslated source documents without any English summary is routinely returned for supplementation – which delays the payment and the relationship.
The cross-border legal interface at this step is material. The Mainland's own data-protection and data-localisation regime may limit what a Mainland counterparty can provide in documentary form to an offshore entity. Counsel advising on the enhanced-due-diligence request needs to understand both the Hong Kong compliance expectation and the Mainland legal constraint on the counterparty's ability to respond. A request that a Mainland entity cannot legally fulfil is not a compliance solution – it is an operational impasse that requires a different approach.
The gate at Step 4: the file must be complete enough to answer the questions a compliance reviewer will ask. The test applied in practice by correspondent banks is whether a reasonable compliance officer, reviewing the file without prior knowledge of the relationship, would be satisfied that the due-diligence obligation has been met. If there are gaps, they must be addressed or the limitation must be documented with a risk-accepted notation and senior sign-off.
What do in-house teams most frequently get wrong?
The single most common error in Greater China supply-chain screening programmes is treating the initial screen as a one-time event. A counterparty checked at onboarding and never revisited is a known blind spot. Sanctions lists are updated continuously. Adverse media emerges over time. Beneficial ownership changes. Payment structures evolve.
The Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires ongoing monitoring of business relationships, not point-in-time checks. "Ongoing monitoring" means periodic refresh of the screen, event-triggered re-screening (when a new transaction type arises, when a payment structure changes, when adverse information appears), and a mechanism for the compliance function to escalate what it finds.
A related error is keeping the compliance file in a form that cannot be presented to a bank or regulator quickly. Files held across multiple systems, in multiple languages, without a clear ownership-chain diagram and a dated sign-off record, take time to assemble under pressure. The correspondent bank that calls with a query at 10:00 a.m. expects a substantive response within hours, not days. A file that cannot be assembled quickly is functionally the same as no file.
The third error – one that is specific to Greater China supply chains – is conflating the offshore holding entity with the underlying Mainland counterparty for screening purposes. The Hong Kong or BVI vehicle at the top of the chain is not the entity taking credit risk in the supply chain. The Mainland operating entity is. Screening must run against both.
If an earlier screening programme, a stalled account review, or an adverse correspondent-bank finding has put your supply-chain payments in a difficult position, a second read of the file can identify where the gap is and what is still available.
Contact info@lockhartyip.com to discuss the position.
Step 5 – Establish ongoing monitoring and a review trigger
A screening programme that has no mechanism for ongoing review is a programme that degrades from its initial standard over time. Step 5 is the design of that mechanism, and it is the step most often omitted in programmes built in response to a specific incident rather than as a standing system.
For a Greater China supply chain, a proportionate ongoing-monitoring regime has three components. The first is periodic re-screening: all counterparties in the active supply chain are re-run against the UN consolidated sanctions list and relevant watch lists at a defined interval. The interval should be proportionate to the risk score established at Step 3. Higher-risk counterparties warrant more frequent re-screening.
The second component is event-triggered review. The triggers should include: a change in the counterparty's beneficial ownership or corporate structure; a change in the payment structure or the introduction of a new payment intermediary; adverse media coverage relating to the counterparty or a key individual; a query or request for information from the group's bank; and any indication that the counterparty has moved into a higher-risk sector or geographic exposure. The trigger list should be written down and assigned to a named function within the compliance programme.
The third component is escalation. A re-screen that produces a hit or an event review that raises a concern must have a defined path to a decision-maker with authority to act – whether that means enhanced investigation, suspension of the relationship, or a formal referral under the Ordinance's reporting obligations. A compliance function that identifies a concern but has no escalation path has discharged its monitoring obligation incompletely.
In our cross-border practice, the monitoring mechanism is the element of a supply-chain screening programme that regulators and correspondent banks most often query when they conduct a thematic review of a relationship. A programme that screens well at onboarding but has no documented ongoing-monitoring regime is visible as a gap.
Decision checklist before contracting with a new Greater China counterparty
The checklist below does not replace legal advice. It is a practical reference for the sequence described in this guide.
- Is the counterparty fully identified? Legal name in the original language, romanised form, jurisdiction, registered address, and a documented ownership chain to the ultimate beneficial owner.
- Has the Significant Controllers Register (for Hong Kong entities) or an equivalent ownership declaration (for non-HK entities) been obtained and retained on file?
- Has the counterparty been screened against the UN consolidated sanctions list under the United Nations Sanctions Ordinance? Has the screen been documented with a date and the version of the list used?
- Has the payment route been mapped? Are the correspondents in the chain identified? Has the compliance file been built to a standard consistent with those correspondents' own due-diligence expectations?
- Has an adverse-media check been run? Has any adverse regulatory or enforcement history been investigated and assessed?
- Has a risk score been assigned and documented? Does the score reflect the counterparty's industry sector, geographic exposure, transaction type, and payment structure?
- If the risk score requires enhanced due diligence: is the enhanced file complete? Has it been reviewed and signed off at the appropriate level?
- Is the counterparty in the ongoing-monitoring schedule? Have the event triggers and the escalation path been confirmed?
- Is the file in a format that can be presented to a bank compliance team or regulator within a short window? Is there a dated sign-off record?
A checklist that produces a "no" at any point is a file with a gap. The gap should be resolved before contracting, or the risk-accepted position should be documented at senior level before proceeding.
For guidance on mapping the compliance requirements for your specific counterparty and payment structure, see our broader Sanctions & AML practice.
For an illustration of how source-of-funds and ownership-chain issues arise in practice in an offshore context, the matter note at AML source-of-funds file: Cayman Islands counterparty is instructive.
Counsel and compliance officers reviewing cross-border contracting for entities in the UAE corridor may also find the guide at Compliance review before contracting with a UAE entity useful for comparison.
Related practices
- Sanctions & AML – counterparty screening, AML compliance, sanctions-neutral contracting, and source-of-funds advisory across Greater China and offshore centres
- Corporate Counsel – ongoing corporate governance, beneficial ownership, and Significant Controllers Register compliance for Hong Kong entities
Frequently asked questions
What does the route look like for counterparty screening for a Greater China supply chain?
How long does counterparty screening for a Greater China supply chain usually take?
What documents are needed for counterparty screening for a Greater China supply chain?
Speak with Lockhart & Yip
For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →
Related
- Sanctions Aml
- Aml Source Funds File Cayman Islands Counterparty Cayman 2
- Compliance Review Before Contracting Uae Entity Uae Guide
This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.