How to approach sanctions due diligence for Mainland

A cross-border deal with Mainland China exposure rarely presents a single compliance question. It presents several at once: which sanctions regimes apply, which payment channels are available, and whether the counterparty's ownership structure passes the screen at every node. The answer to each question depends on where the parties sit, where the money moves, and which legal systems govern the transaction.

Sanctions due diligence for a deal touching Mainland China requires a multi-regime screen covering United Nations measures, Hong Kong's domestic implementation of those measures, and the unilateral programmes of the counterparty's home jurisdiction – assessed in sequence, because each gate conditions the next. Hong Kong implements United Nations sanctions under the United Nations Sanctions Ordinance (the domestic instrument giving effect to UN Security Council resolutions) and does not give domestic effect to the unilateral measures of other states. That position is factual and material to every cross-border compliance file touching Greater China.

This guide sets out the practical sequence for in-house counsel and deal teams approaching that exercise. It moves from the initial mapping step through counterparty ownership screening, payment-channel review, and documentation, with the decision gates flagged at each stage.

Why does the Hong Kong legal position matter for your deal?

Hong Kong's sanctions posture is the starting point for any deal structured through the territory. The position is unambiguous: Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures introduced by individual states. That distinction is not a technicality. It shapes which restrictions actually bind a Hong Kong-incorporated entity, a Hong Kong-seated transaction, or a payment routed through a Hong Kong correspondent bank.

For an international group with counterparties in Mainland China, the practical consequence is that the compliance analysis splits into at least two tracks. Track one covers the UN-mandated restrictions that apply universally. Track two covers the unilateral programmes – US, EU, UK, and others – that apply to the transaction participants depending on their nexus to those jurisdictions. A common mistake is to run both tracks as a single undifferentiated screen. That approach either over-blocks commercially legitimate transactions or under-identifies the real exposure, depending on which regime the analyst treats as the default.

In our cross-border practice, we regularly see deal teams arrive with a compliance file assembled under a single-jurisdiction framework – typically the US OFAC regime – applied wholesale to a Hong Kong-structured transaction. That framing misses the two-track architecture and, critically, misreads the Hong Kong legal environment. The correction is not difficult, but it requires the analysis to start in the right place.

The governing instrument for Hong Kong's UN-sanctions implementation is the United Nations Sanctions Ordinance. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance (the AML/CTF statute applying to financial institutions and designated non-financial businesses and professions) operates alongside it, imposing customer due diligence and ongoing monitoring obligations that run in parallel with, but are distinct from, the sanctions screen proper.

The cross-border interface between Hong Kong and Mainland China adds a further dimension. The Mainland operates its own export-control and sanctions-adjacent regime, including the Anti-Foreign Sanctions Law (the PRC statute prohibiting compliance with certain foreign unilateral measures that discriminate against Chinese entities). Deal counsel must account for that instrument when advising a counterparty with Mainland operations on how to structure its own compliance obligations. The two systems do not always pull in the same direction, and the tension between them is the structural complexity that makes this exercise consequential.

Step 1: Map the transaction footprint before screening any name

Effective sanctions due diligence begins with transaction mapping, not name-checking. The sequence matters: screening without first defining the perimeter produces a file that is wide in the wrong places and narrow where the real risk sits.

The mapping exercise covers five variables. First, the jurisdictions of incorporation and operation of each deal participant – not just the immediate counterparty, but every entity in the ownership chain to the ultimate beneficial owner. Second, the currency and payment route: which correspondent banks will clear the transaction, and under which domestic legal systems will the funds pass? Third, the subject matter of the deal – is the underlying asset, technology, or service touched by any sector-specific restriction under the applicable regimes? Fourth, the end-use and end-user, particularly where the deal involves any technology or controlled goods with dual-use potential. Fifth, the contractual nexus: which law governs the agreement, and does any governing-law clause bring a non-Hong Kong regime into play by consent?

The output of this step is a jurisdiction matrix: a structured record of which regimes apply to which participants and at which points in the transaction flow. That matrix is the gating document for the screening steps that follow. Without it, the compliance file has no map and the analyst has no reliable way to distinguish a real hit from a false positive.

For deals touching Mainland China specifically, the mapping step should flag at the outset whether the Mainland counterparty, or any entity in its group, appears on any UN consolidated list or on the lists maintained by other states whose programmes are relevant to the deal's payment channel. It should also flag whether the deal involves any goods, technology, or services subject to Mainland export-control requirements or to the controls maintained by third-country jurisdictions. Both of those inquiries are best run before the formal screening begins, because they determine the depth of the screen required.

Step 2: Run the counterparty ownership screen

Once the transaction footprint is mapped, the second step is a structured ownership screen of the Mainland counterparty and every entity in its chain to the ultimate beneficial owner. The screen has two distinct layers.

The first layer is a list-based check against the UN consolidated sanctions list and any other list that applies to the transaction based on the jurisdiction matrix from step one. The check covers the counterparty entity, its directors and authorised signatories, its direct shareholders, and – where ownership is layered through intermediate holding structures, which is the common pattern for PRC groups with offshore holding entities – every intermediate vehicle to the ultimate beneficial owner. The ownership-and-control test (the standard applied to determine whether a listed person's interest in an unlisted entity is sufficient to make that entity a restricted counterparty) must be applied at each node, not just at the direct-counterparty level.

The second layer is a source-of-funds and source-of-wealth assessment, which is distinct from the list check but equally important for the AML/CTF file. For a Mainland-connected deal, the relevant questions are whether the counterparty's funds can be traced to a legitimate commercial source, whether the ownership structure is consistent with the stated commercial purpose, and whether there are any indicators of layering through the offshore holding chain – BVI, Cayman, or otherwise – that cannot be explained by reference to the group's legitimate business.

The gate at the end of this step is a documented conclusion that either clears the counterparty or escalates the file for enhanced due diligence. That conclusion must be supported by the underlying records, not just the screen output. A bare "no hit" result is not a compliance file; it is a search log. The analysis of what was searched, why, and what the results mean for this specific transaction is the material that protects the deal team and the institution if the position is later questioned.

For guidance on building a source-of-funds file in a comparable cross-border context, see our guide on AML source-of-funds files for cross-border counterparties.

Step 3: Assess the payment channel and correspondent-bank exposure

The payment channel is where sanctions risk becomes operational. A deal that passes the counterparty screen can still be blocked – or exposed to enforcement action – if the payment route passes through a correspondent bank operating under a legal system whose unilateral sanctions apply to the transaction.

This is the centre of gravity for sanctions compliance in any Hong Kong-structured deal with Mainland China exposure. The question is not abstract. It determines whether the transaction actually closes and whether the funds arrive.

The assessment covers three points. First, the currency: USD-denominated payments will, in the ordinary course, pass through a US correspondent, bringing US primary-sanctions restrictions into the clearing chain regardless of where the parties are incorporated. EUR-denominated payments carry an analogous exposure to EU restrictions through the euro clearing system. Hong Kong dollar payments clear through a system that does not import the same nexus, though the clearing bank's own compliance posture remains relevant.

Second, the correspondent bank's own programme: major clearing banks maintain their own sanctions lists and risk-appetite frameworks that may be more restrictive than the applicable legal minimum. A transaction that is legally permissible under the regimes identified in the jurisdiction matrix may nonetheless be declined by the correspondent on a risk-management basis. Anticipating that outcome – and structuring the payment accordingly – is a practical compliance step, not a circumvention exercise.

Third, the contractual payment mechanics: where a deal provides for payment in a currency or through a route that the compliance analysis identifies as carrying unacceptable correspondent-bank exposure, the solution is to restructure the payment mechanism before closing, not after. That restructuring should be documented as a compliance-driven decision, with the analysis set out in the file.

We regularly advise deal teams at this step, where the payment-channel question is often identified late – after the commercial terms are fixed – and the options narrow. Raising the channel question at the term-sheet stage, as part of the transaction-footprint mapping, avoids that outcome. For a broader treatment of sanctions-neutral contracting through Hong Kong, see our guide on sanctions-neutral contracting approaches.

Step 4: Screen the deal terms and the subject matter

The counterparty screen and the payment-channel review address who and how. The subject-matter screen addresses what. For deals touching Mainland China, this step carries particular weight where the underlying transaction involves technology, intellectual property, software, or controlled goods that may be subject to export-control regimes in addition to sanctions restrictions.

The subject-matter screen is a separate analytical exercise from the entity screen. Its purpose is to determine whether the good, technology, or service at the heart of the transaction is restricted under any applicable regime, and whether any end-use or end-user condition applies. Where the deal involves a transfer of technology or know-how, the screen should also address whether the relevant items are controlled under the export-control frameworks of the jurisdictions identified in the jurisdiction matrix, including the Mainland's own export-control statute.

A common error at this step is to rely on the counterparty's own classification of the goods or technology. Self-classification by the seller or licensor is not a compliance position. The deal team's file must contain an independent assessment, or a documented conclusion that external classification advice has been obtained and reviewed.

The gate at the end of this step is a confirmed subject-matter position: either the transaction subject matter is unrestricted, or the restrictions identified have been addressed by the deal structure, the contractual conditions, or an applicable licence. That conclusion is the third pillar of the compliance file, alongside the counterparty screen and the payment-channel assessment.

What do foreign counsel most often get wrong at this stage?

The most common error in sanctions due diligence for Mainland-connected deals is conflating the applicable regime with the most familiar regime. Deal teams trained in a US or EU compliance environment instinctively apply OFAC or EU sanctions logic as the default, and then treat the Hong Kong legal position as a variant of that default rather than as a distinct starting point.

The consequence is a compliance file that is built around a nexus the transaction may not actually have. A Hong Kong-structured deal between non-US, non-EU parties, denominated and cleared in a non-US, non-EU currency, with a subject matter that is not controlled under US or EU export-control regimes, does not carry primary US or EU sanctions exposure for the parties. Secondary-sanctions risk for third-country financial institutions is a separate question and should be addressed separately, not folded into the primary analysis.

The second common error is treating the Mainland counterparty as a monolith. Large PRC groups typically have complex, multi-layer holding structures with offshore entities in the BVI or Cayman Islands, onshore operating companies, and subsidiary vehicles that may carry different ownership profiles and different risk characteristics. Screening the top-level entity and stopping there is not adequate. The ownership-and-control analysis must go to the beneficial-owner level and must document the chain.

The third error is timing. Sanctions due diligence that begins after the commercial terms are agreed is due diligence that has already lost its most important function: shaping the deal structure. The payment-channel question, the subject-matter classification, and the counterparty ownership analysis all have structural implications. They should inform the term sheet, not be appended to it as a post-signing formality.

Step 5: Assemble and hold the compliance file

A sanctions due-diligence exercise is only as strong as the record it produces. The compliance file is the document that demonstrates, at the time of the transaction and at any later point of review, that the deal team applied a rigorous and proportionate process to the identified risks.

The file should contain, at minimum: the jurisdiction matrix from step one; the counterparty ownership chart, with the source of each ownership record and the date of the search; the list-check results for each screened entity, including the lists searched, the search date, and the analyst's interpretation of each result; the payment-channel assessment and any restructuring decision; the subject-matter classification; any escalation decisions and their rationale; and the overall compliance conclusion, signed off by the appropriate level of authority within the deal team or institution.

The file should be held for a period consistent with the record-keeping requirements applicable to the institutions and jurisdictions involved. For regulated financial institutions in Hong Kong, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance specifies minimum record-keeping periods for customer due diligence and transaction records. Parties should verify the current position before acting.

Equally important is the question of ongoing monitoring. Sanctions lists change. A counterparty that was clear at signing may appear on a list after closing. The compliance file should record the monitoring arrangement – frequency, method, and responsibility – so that any post-closing change can be identified and addressed promptly.

Decision checklist: where does your deal sit?

The following questions form the practical decision gate for a deal team approaching sanctions due diligence for a Mainland-connected transaction. They are not a substitute for legal analysis, but they orient the inquiry and identify where the depth of the screen needs to increase.

Jurisdiction and structure. Are any deal participants incorporated in, or operating under, a jurisdiction whose unilateral sanctions are relevant to the transaction? Does the deal structure route economic benefits or control through an entity in such a jurisdiction?

Payment channel. What is the currency of payment, and which correspondent-bank network will clear it? Is the clearing route consistent with the compliance position established by the counterparty screen?

Ownership chain. Has the counterparty's ownership been traced to the ultimate beneficial owner at each node? Has the ownership-and-control test been applied at each intermediate vehicle? Is the source-of-funds position documented?

Subject matter. Is the transaction subject matter restricted or controlled under any applicable regime? Has the classification been independently verified, rather than accepted from the counterparty?

PRC anti-sanctions law. Does the counterparty or any Mainland entity in the group have obligations under the PRC Anti-Foreign Sanctions Law that might conflict with compliance steps required under another regime? Has that tension been identified and addressed in the deal structure?

Record. Is the compliance file complete, dated, and held at the appropriate level of authority? Does it document not just the results but the methodology?

A "no" answer to any of these questions identifies a gap in the current compliance position. Each gap should be addressed before the transaction closes.

The sequence above describes the standard position. Your matter turns on the specific documents, the jurisdictions actually engaged, and the order of steps – which is where the compliance position is won or lost.

For a structured assessment of the sanctions due-diligence position across the relevant jurisdictions, write to us at info@lockhartyip.com.

For more on how we approach sanctions and AML work for cross-border transactions, see our Sanctions & AML practice page.

Related practices

Sanctions & AML – cross-border compliance, counterparty screening and payment-channel review
M&A & Transactions – deal structuring and cross-border transaction execution through Hong Kong

If an earlier compliance exercise produced an incomplete or inconclusive result, a second read of the file can identify the gap and the steps still available before closing.

To discuss how the sanctions due-diligence sequence applies to your cross-border position, contact info@lockhartyip.com.

Frequently asked questions

What does the route look like for sanctions due diligence for a deal touching Mainland China?

Sanctions due diligence for a Mainland-connected deal runs in five sequential steps: transaction-footprint mapping to define which regimes apply; counterparty ownership screening to the ultimate beneficial owner; payment-channel assessment to identify correspondent-bank exposure; subject-matter classification to address any controlled goods or technology; and compliance-file assembly with documented conclusions at each stage. Each step gates the next. Skipping the mapping stage, or conflating the UN-sanctions position with a unilateral programme, produces a file that addresses the wrong risk.

Which jurisdiction's law applies to sanctions due diligence for a deal touching Mainland China?

Multiple regimes apply simultaneously, and the applicable law is not determined by the governing-law clause in the commercial agreement. Hong Kong law applies to the extent the transaction is structured through Hong Kong: this means UN sanctions as implemented by the United Nations Sanctions Ordinance and the obligations under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. Unilateral programmes – US, EU, UK, and others – apply to the extent any deal participant has the relevant nexus to those jurisdictions. The Mainland's own Anti-Foreign Sanctions Law applies to counterparties with Mainland operations. Each regime must be identified through the jurisdiction matrix and assessed on its own terms.

What documents are needed for sanctions due diligence for a deal touching Mainland China?

The core documents are the counterparty's corporate ownership records to the ultimate beneficial owner level, identity documents for each beneficial owner and authorised signatory, source-of-funds evidence tracing the counterparty's funds to a legitimate commercial origin, the classification record for any controlled goods or technology, and the deal's payment-mechanics documentation showing the currency and clearing route. The compliance file must also contain the list-search records, the methodology note, and the analyst's interpretation of each result. For regulated institutions, the record-keeping period is set by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance; parties should verify the current position.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach sanctions due diligence for a deal touching Mainland China