How to approach responding to a bank's

A bank's source-of-funds request arrives without warning. The relationship manager sends a short message asking for documentation. The timeline given is tight. For a cross-border group with layered holding structures, multiple jurisdictions and a mix of operational and investment income, the instinct is to gather everything and send it all. That instinct is wrong. What the bank needs is a file that answers its compliance question – not a document dump that raises more questions than it resolves.

A source-of-funds request is a formal compliance enquiry under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and its equivalent regimes in the relevant offshore centres. The bank is required to satisfy itself that the funds passing through the account derive from legitimate, documented, identifiable sources. The request is directed at the account holder, but the underlying obligation sits with the bank. Understanding that distinction is the starting point for every well-structured response.

This guide sets out the decision the reader faces, the sequence to follow, the gate at each step, and the common mistake that turns a manageable compliance exercise into a protracted banking dispute. The approach applies wherever the account sits – in Hong Kong, in the BVI, in the Cayman Islands, or across a structure that spans all three – and it works equally for a corporate treasury, a family office, and a fund holding entity.

What is the bank actually asking?

The bank is not investigating you. It is building a compliance record that satisfies its own regulator. In Hong Kong, the applicable rules sit in the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the related guidelines issued by the Hong Kong Monetary Authority and the Securities and Futures Commission. The bank's AML officer must be able to document, in a file that a regulator can read, that the funds credited to the account have a known, plausible, and documented origin.

That is a narrower question than it sounds. The bank is asking about the source of the specific funds in the account – not about your entire group's financial history, not about the beneficial owner's net worth in general, and not about every entity in the corporate chain. The request is bounded. The best responses treat it as bounded. The worst treat it as an invitation to reconstruct the client's entire commercial history.

In our cross-border practice, we regularly see requests that conflate two distinct elements: source of funds (where did the money come from) and source of wealth (how did the beneficial owner accumulate their assets overall). Banks ask for both in different contexts. Know which one has arrived. If the request is ambiguous, a short clarifying question to the relationship manager – sent promptly and in writing – is the right first step. It demonstrates engagement, bounds the scope, and creates a record.

The decision the reader faces first

Before assembling a single document, the account holder faces two sequential decisions. The first is structural: is the request adequately scoped, or has the bank asked for something broader than the regulatory obligation requires? The second is tactical: given the structure of the group, which entities and which income streams are actually in scope?

Getting the scope wrong in either direction is costly. An over-broad response produces a voluminous file that the bank's compliance team cannot assess efficiently, which extends the review cycle and flags the account as complex. An under-scoped response produces a gap that the bank identifies in its second review, which triggers a follow-up request and, in some cases, an escalation to a more senior compliance level.

The decision matrix works as follows. Where the request refers to a specific transaction or a specific credit: respond with documentation scoped to that transaction and that source only. Where the request refers to account activity over a defined period: respond with a summary narrative covering that period, supported by the key source documents. Where the request appears to extend to the beneficial owner's wider wealth position: clarify before responding, and, if the bank confirms that scope, treat the response as a source-of-wealth exercise rather than a transactional one – which requires a different document set and, usually, more time to prepare properly.

The cross-border element matters here. A Hong Kong account held by a BVI or Cayman holding entity, whose ultimate beneficial owner is a natural person or a family trust established in a third jurisdiction, involves at least three legal systems. Each layer has its own documentation standards. What constitutes adequate evidence of corporate income in one system may not be immediately legible to a compliance officer reviewing it through another. Structuring the response to translate across those systems – without adding irrelevant material – is one of the more practical skills this kind of work requires.

Step one: map the source before you touch the documents

The first working step is to map the actual source of funds before gathering any documents. This sounds obvious. In practice, it is regularly skipped. The result is a file assembled in the wrong order, built around documents that were easy to find rather than documents that answer the question.

Draw the money path from its origin to the credited account. For a typical cross-border structure, that path runs: commercial income or asset proceeds generated at the operating level, distributed or loaned upward through the holding chain, converted or transferred across one or more jurisdictions, and then credited to the account in question. Each step in that chain is a potential gap in the documentation sequence.

The gate at this step is: can you state, in one or two sentences, the source of the specific funds the bank is asking about? If you cannot, the documentation exercise will not fix the problem. The narrative must exist before the documents are assembled. The documents exist to support the narrative, not to substitute for it.

For a Hong Kong account receiving dividends from a mainland Chinese operating entity, the narrative is: "The credited funds represent a dividend declared by [operating entity], funded from its audited retained earnings for [period], transferred to the holding entity in [jurisdiction] and onward to the account." That is the sentence the bank's compliance officer needs to write in their file. Your response should make it easy to write that sentence, not harder.

Step two: build the document set in layers

Once the narrative exists, the document set is built in three layers. The first layer is the source layer: documentation that establishes the origin of the funds at their point of generation. The second layer is the transmission layer: documentation that traces the movement of funds from source to account. The third layer is the entity layer: documentation that establishes the corporate or trust structure through which the funds passed.

The source layer for commercial income typically comprises audited financial statements, board resolutions declaring a dividend or authorising a distribution, and bank records confirming the outgoing transfer from the operating entity. For asset sale proceeds, it is the sale agreement or settlement statement, the conveyance or share-transfer instrument, and the credit advice from the settlement bank. For investment returns, it is the fund statement or custodian record confirming the distribution and its characterisation.

The transmission layer is frequently the weakest part of a cross-border response. Funds that move through two or three accounts en route from source to destination require a corresponding chain of records: SWIFT confirmations, intra-group loan agreements where applicable, and foreign-exchange conversion records where a currency change occurred. A gap at any point in this chain – a missing confirmation, an undocumented intercompany transfer – is exactly what the bank's compliance officer will identify in their review.

The entity layer comprises the constitutional documents and ownership records for each entity in the chain: certificate of incorporation, register of members, register of directors, and the beneficial ownership disclosure required under the relevant jurisdiction's regime. For a Hong Kong company, that includes the Significant Controllers Register (the statutory record of persons with significant control over the company, which has been required for Hong Kong-incorporated companies since 1 March 2018). For BVI and Cayman entities, the equivalent records held with the registered agent and, where applicable, with the relevant registry.

The gate at this step is completeness of the chain. Every gap will be identified. If a document in the chain does not exist – because a transfer was made without contemporaneous records – the practical question is how to document it now, using secondary evidence, in a way that is transparent and does not create a misleading impression. That is a judgment call that requires legal input, not an administrative one.

Step three: draft the covering narrative

The covering narrative is the single most important document in the response. Banks receive hundreds of source-of-funds files. A well-written, clearly structured narrative that states the answer in the first paragraph, identifies the documents in the second, and flags any qualifications in the third will be assessed faster and more favourably than a file of documents with no guide.

The narrative should open with a direct statement of the source: "The funds credited to account [reference] on [date] derive from [mechanism – dividend / sale proceeds / loan repayment / etc.], generated by [entity] in connection with [activity]." It should then identify each supporting document by reference number and explain what it establishes. Where a document is in a language other than English, it should be accompanied by a certified translation or, at minimum, a plain-English summary prepared by the account holder and presented as such.

The narrative should also address, briefly, anything that might look unusual from the outside: a large round number, a timing that coincides with a market event, a transfer from a jurisdiction that the bank's internal risk-rating system treats as elevated. Addressing these points proactively, in a factual and matter-of-fact register, signals competence and good faith. Leaving them unaddressed signals the opposite.

What the narrative should not do: speculate, qualify beyond what the facts require, or offer unsolicited information about matters not in scope. Every sentence in the narrative is a potential follow-up question. Concision is a compliance asset, not a discourtesy.

In practice, the covering narrative for a cross-border structure will often need to be reviewed and approved by counsel before submission. The account holder's relationship manager, their company secretary, or their internal compliance function may draft it, but a cross-border file that touches Hong Kong, a mainland Chinese operating entity, and an offshore holding structure involves enough legal-system interfaces that a single mischaracterisation in the narrative can trigger an unnecessary escalation. We have acted on matters where a correction to a single sentence in an initial draft shifted the bank's assessment from a potential suspicious-activity referral to a straightforward file-close. Getting the narrative right before submission is materially less expensive than correcting it after.

The common mistake: conflating the bank's obligation with the client's obligation

The most persistent error in responding to source-of-funds requests is treating the bank's compliance obligation as if it were an adversarial investigation of the account holder. It is not. The bank's obligation is to document what it knows. The account holder's obligation is to assist the bank in meeting that obligation – not to make an admission, not to accept a characterisation, and not to waive any privilege that exists in relation to the underlying funds.

That distinction matters most when the account holder is a corporate entity acting through agents. The entity's directors or authorised signatories may not have direct knowledge of the source of funds at the operating level. They should not guess, and they should not present a narrative that goes beyond what the documents actually establish. If the documentation is incomplete, the honest answer is that the file is being assembled and a further submission will follow within a specified time. Most banks will accept a staged response from a counterparty who communicates proactively and delivers on the stated timeline.

A second common mistake is sending documents without a narrative, on the assumption that the bank's compliance team will draw the correct inferences. They will not. A compliance officer reviewing a source-of-funds file is not familiar with the account holder's business, its holding structure, or the commercial rationale for the transaction in question. The inferences they draw from a document set without explanation will often be different from the inferences that are evident to someone inside the business. The narrative exists to bridge that gap.

A third mistake, specific to cross-border structures, is failing to address the jurisdiction-of-origin element. A bank in Hong Kong receiving funds from a mainland Chinese entity via a BVI intermediary is looking at a fact pattern that its own risk-assessment matrix will flag for review. That is not a problem to be solved by withholding information. It is a fact pattern that the narrative must explain, clearly and completely, so that the compliance officer can reach a well-founded conclusion. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires the bank to understand the nature and purpose of the business relationship and to apply enhanced due diligence in higher-risk situations. The account holder cannot change the bank's risk-matrix. It can, and should, provide the information that allows the matrix to resolve correctly.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. For a structured assessment of your source-of-funds file across the relevant jurisdictions, write to us at info@lockhartyip.com.

How does the Hong Kong regulatory position interact with offshore structures?

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. That is the framework within which Hong Kong-regulated banks conduct their AML and sanctions screening. The practical implication for a cross-border account holder is that the compliance question the Hong Kong bank is asking is calibrated to the UN sanctions list and to the Hong Kong regulator's own risk-appetite guidance – not to the unilateral measures of any third-country regime.

That said, many Hong Kong-licensed banks are subsidiaries or branches of international banking groups whose group-wide compliance programmes apply a wider perimeter. The source-of-funds request arriving from a Hong Kong account may therefore be driven by a group-level compliance trigger that reflects the parent bank's home-jurisdiction standards. Understanding which standard is being applied – the Hong Kong regulatory standard, the group standard, or a combination – is often the first analytical task in structuring the response.

For structures involving BVI or Cayman holding entities, the relevant economic-substance regimes add a further layer. Where the holding entity is claiming a substance-based nexus to a low-tax jurisdiction, the source-of-funds file should be consistent with the entity's substance position. A disconnect between the entity's stated jurisdiction of management and control and the payment flows shown in the file will invite additional questions about the entity's genuine operational profile.

The interaction between the Hong Kong FSIE regime (the foreign-sourced income exemption, which conditions tax exemption on economic substance) and the AML source-of-funds analysis is one that our desk sees regularly in structures that move passive income – dividends, interest, royalties – through Hong Kong holding entities. The substance requirements under the FSIE regime and the documentation expectations under the AML regime are not identical, but they are overlapping. A well-constructed source-of-funds file for a Hong Kong holding entity should be coherent with the entity's substance profile. Inconsistencies create unnecessary risk on both axes.

For matters at the intersection of AML compliance and the full sanctions picture, see our Sanctions & AML practice overview and our analysis of building a source-of-funds file for a Cyprus counterparty.

The decision checklist before submission

Before the file is submitted, a structured review against the following points will identify the most common gaps.

Is the scope of the request clearly understood – source of funds, source of wealth, or both? If ambiguous, has it been confirmed in writing with the bank?
Does a single clear narrative exist, in plain English, that identifies the source of the specific funds in question?
Is the document set complete from the point of origin to the credited account, with no unexplained gaps in the transmission chain?
Does the entity layer include current constitutional documents and beneficial ownership records for every entity in the chain?
Are there any non-English documents? If so, are they accompanied by certified translations or clearly flagged summaries?
Does the narrative address, factually and proactively, any element of the fact pattern that the bank's compliance matrix is likely to flag – jurisdiction of origin, transfer routing, transaction size or timing?
Is the file free of speculation, unsolicited commentary, and information not in scope?
If the file is incomplete, has a clear timeline for the supplementary submission been communicated to the bank in writing?
Has the covering narrative been reviewed by counsel, particularly where the structure spans Hong Kong, a mainland Chinese entity, and one or more offshore jurisdictions?

A file that passes this checklist will, in the large majority of cases, be sufficient for the bank to close its review and document the account relationship satisfactorily. The cases that require further engagement are typically those where the underlying facts are genuinely complex – a mixed-source fund, a structure with historical gaps, or a payment channel that attracted a sanctions-adjacent flag – and those require a different process: not a faster document submission, but a structured legal analysis before any submission is made.

If an earlier response produced a stalled or escalated result, a second read of the file can identify the strategic gap and the routes still open. For a preliminary assessment of your position, email info@lockhartyip.com.

For guidance on structuring the due-diligence file for a transaction with an offshore counterparty, see our practical guide on sanctions due diligence for a deal touching the Cayman Islands.

Related practices

Sanctions & AML – compliance advice on AML, sanctions screening and source-of-funds across Hong Kong and principal offshore centres
Holding Structures – cross-border structuring through Hong Kong, BVI, Cayman and other holding centres for international groups

Frequently asked questions

Which jurisdiction's law applies to responding to a bank's source-of-funds request?

The governing law is the law of the jurisdiction where the bank account is held and where the bank is regulated. For a Hong Kong account, that is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the guidelines issued by the Hong Kong Monetary Authority or the Securities and Futures Commission, depending on the institution. Where funds originate in another jurisdiction – Mainland China, BVI, Cayman – the documentation standards of that jurisdiction are relevant to the source layer of the file, but the bank's compliance question is assessed under Hong Kong law. A cross-border structure requires the response to bridge those standards, not to choose between them.

What are the main risks in responding to a bank's source-of-funds request?

The principal risks are four. First, an over-broad or disorganised response extends the review cycle and may flag the account as complex. Second, an under-scoped response produces a gap that triggers escalation. Third, a narrative that goes beyond what the documents support creates a misleading impression, which is a more serious problem than a gap. Fourth, for cross-border structures, inconsistency between the source-of-funds file and the entity's substance or tax position creates dual exposure – both to the bank's compliance team and to the relevant tax authority. Addressing all four risks requires mapping the source clearly before a single document is submitted.

Do I need a Hong Kong adviser for responding to a bank's source-of-funds request?

For a straightforward account with a single, well-documented source and no cross-border complexity, the account holder's internal team can ordinarily handle the response. Where the structure spans Hong Kong and one or more other jurisdictions – particularly where an offshore holding entity, a mainland Chinese operating entity, or a trust is in the chain – legal input before submission is material. The cost of a corrected narrative after an adverse bank assessment is substantially higher than the cost of review before submission. International and cross-border counsel can review the narrative, identify gaps in the document chain, and advise on the characterisation of cross-border payment flows under the applicable AML regime.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach responding to a bank's source-of-funds request