How to approach a source-of-funds file for a Cyprus

Q: Which jurisdiction's law applies to a source-of-funds file for a Cyprus principal at a Hong Kong bank?

Two systems apply simultaneously. The Cyprus entity's legal existence, ownership and governance are governed by the Companies Law of Cyprus. The bank's verification obligations are governed by Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulatory guidelines issued under it. Where assets originate in a third jurisdiction, that jurisdiction's regulatory requirements also bear on the file. A source-of-funds file that addresses only one of these systems will not satisfy enhanced due diligence.

A Cyprus holding company arrives in a Hong Kong bank's onboarding queue. The relationship manager sees a familiar structure – a European-registered entity, often with a Cypriot director and a professional nominee, linked to an operating group based somewhere east of Vienna or west of Beijing. The documents look complete. Yet the file stalls. The compliance team sends a long-form questionnaire. The relationship breaks down before it starts. In our capital-relocation practice, this sequence is one of the most common cross-border friction points we see.

A source-of-funds file for a Cyprus principal at a Hong Kong bank is a structured evidentiary package that traces the origin of assets and income through a Cyprus entity to the underlying beneficial owner, prepared in a format that satisfies the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the Hong Kong Monetary Authority's AML guidelines. The file is not a single document – it is a narrative, supported by layered primary evidence, that answers the compliance officer's implicit question: where did this money actually come from, and is the structure that holds it coherent?

This guide sets out the decision the reader faces, the sequence in order, the gate at each step, the most common structural mistake, and a short checklist before submission. It addresses the Hong Kong regulatory position and the Cyprus corporate law dimension simultaneously, because no useful file can ignore either.

Why does a Cyprus structure create a distinct onboarding challenge in Hong Kong?

Cyprus entities sit in a particular compliance category for Hong Kong banks. The island is an EU member state with a well-developed corporate law and a treaty network that makes it a legitimate holding hub for Eastern European, CIS, Middle Eastern and Asian-origin capital. However, Cyprus also has a documented history of high-risk use cases – shell structures, nominee arrangements and beneficial ownership obscuration – that have drawn sustained attention from the Financial Action Task Force (FATF) (the inter-governmental body that sets global AML standards) and from Hong Kong regulators who track its guidance closely.

The result is a structural tension. A Cyprus company that is commercially substantive, with genuine management and an identifiable group, is a legitimate onboarding candidate. A Cyprus company that is a single-purpose nominee vehicle with no employees, no trading record and no audit trail is not. The compliance officer cannot tell the difference from the face of a certificate of incorporation. The source-of-funds file is what closes that gap.

Hong Kong banks operate under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the Hong Kong Monetary Authority's AML guidelines, which require enhanced due diligence for higher-risk customers. A Cyprus entity – particularly one with a CIS-origin beneficial owner, a professional nominee director and a BVI or Cayman sub-layer – will almost always trigger enhanced due diligence. That is not a rejection. It is an instruction about the depth of evidence required.

The cross-border interface is genuinely dual-system. Cyprus company law and the Companies Law of Cyprus (Cap. 113, as amended) govern the corporate structure side: what the entity actually is, who controls it and how that control is evidenced. Hong Kong AML law governs what the bank must verify and how. A file that answers only one system will satisfy neither.

What decision does the principal face before the file is assembled?

Before a document is gathered, the principal – or the in-house team acting for the principal – must make a structural decision about how the Cyprus entity will be characterised for the Hong Kong bank. There are three practical positions.

The first is to present the Cyprus entity as the account holder in its own right, with the beneficial owner disclosed separately. This is the cleanest route where the Cyprus company has genuine substance: real directors, a management and control record in Cyprus, audited accounts and an identifiable business purpose. The file then traces funds from the operating layer (wherever that sits geographically) through the Cyprus holding entity to the Hong Kong bank account.

The second position applies where the Cyprus entity is a pure holding vehicle with no employees and no physical presence, and where the beneficial owner is a natural person or a family-office structure. Here the bank will almost certainly look through the Cyprus layer and assess the file against the beneficial owner's personal source of wealth. The Cyprus entity becomes the structural context, not the primary subject of the inquiry.

The third position – common in capital-relocation mandates – is the transitional one. The principal is in the process of establishing substance in Hong Kong, the Cyprus entity is being wound down or re-domiciled, and the Hong Kong account is being opened to receive transferred assets. This position requires additional documentation: a restructuring memorandum or at minimum a clear narrative that explains the transition, supported by evidence that the Cyprus entity's assets are legally available for transfer.

Choosing the right characterisation before assembling the file avoids the most common single error: presenting a look-through structure in form-one terms, which triggers an immediate follow-up request and can reset the compliance clock by weeks.

The sequence that follows assumes the first or third position. The second position (full look-through to a natural person) follows a similar structure but with a heavier emphasis on personal wealth documentation.

The sequence above describes the standard onboarding position. Your matter turns on the specific Cyprus structure, the beneficial owner's jurisdiction of residence and tax position, and the nature of the funds being transferred – which is where the route is determined. For a structured assessment of your cross-border position, write to us at info@lockhartyip.com.

Step 1 – Establish the legal existence and control chain of the Cyprus entity

The first evidentiary layer establishes that the Cyprus entity exists, is in good standing and is controlled by the disclosed beneficial owner. This seems obvious. In practice, it is where most files are incomplete.

The required documents at this step are: a certificate of good standing (dated within three months of submission), the memorandum and articles of association in an English translation certified by a Cypriot advocate, the register of directors and the register of members. Where nominee directors are used, the bank will require the underlying nominee agreement and a declaration confirming who gives instructions to the nominee – a document that nominees sometimes decline to produce on confidentiality grounds. Agreeing the scope of disclosure with the nominee before the bank asks is essential.

The ownership register must trace to the ultimate beneficial owner, defined under Hong Kong AML rules as any natural person who ultimately owns or controls more than 25% of the voting rights or equity, or who exercises ultimate effective control by other means. If the share register shows a BVI company or a Cayman trust as the Cyprus entity's shareholder, the tracing exercise continues up one more layer. A file that stops at the first offshore entity will not pass enhanced due diligence.

The gate at Step 1 is beneficial ownership disclosure. The file does not move forward until the control chain is closed – meaning every entity in the chain is documented, every natural person at the apex is identified, and the relationship between them is evidenced in primary documents rather than advisory letters.

Step 2 – Document the source of the assets held or to be transferred

This is the substantive core of the file. Source of funds, for a corporate entity, is not the same as source of wealth for a natural person – though the two are connected. For a Cyprus holding entity, the bank needs to understand where the company's assets came from: operating profits from a trading group, a dividend from a subsidiary, proceeds of a real-estate transaction, a capital contribution from the beneficial owner, or some combination.

Each source type carries its own evidentiary requirement. Operating-profit source is best evidenced by audited accounts of the operating entity, accompanied by a structure chart that makes clear how the operating entity relates to the Cyprus holding company. Dividend source requires a board resolution of the paying entity, a bank statement showing the remittance, and – where the paying entity is in the Mainland or another non-obvious jurisdiction – an explanation of how the dividend was lawfully declared and remitted. Capital-contribution source requires evidence of where the shareholder's own funds originated, which brings the inquiry back to the beneficial owner's source of wealth.

A practical point that is often missed: the Hong Kong bank's compliance team is trained to spot gaps in timing. If the Cyprus entity's accounts show a large cash balance with no corresponding income or contribution event in the same period, the follow-up question will arrive quickly. The file should anticipate this by providing a funds-flow narrative – a short prose account of how each material transfer into the Cyprus entity arose – alongside the supporting documents.

Where assets include real property, equity holdings in unlisted companies or other non-liquid items, a current valuation and a clear title narrative are required. The valuation should come from a professional source. Its methodology should be briefly explained.

The gate at Step 2 is completeness of the funds-flow narrative. The narrative must account for every material inflow to the Cyprus entity over the look-back period the bank specifies – typically three to five years for enhanced due diligence customers. Gaps in the narrative are treated as gaps in the file.

Step 3 – Address the management and control position and tax residence

For a principal engaged in capital relocation – moving from a Cyprus base toward a Hong Kong hub – the bank's compliance team will want to understand not just where the assets came from but where the principal is tax-resident and where the Cyprus entity is managed and controlled. This is not idle curiosity. A Cyprus entity managed and controlled outside Cyprus may be resident for tax purposes in another jurisdiction, which creates withholding, reporting and potentially treaty implications that bear on the legitimacy of the structure.

The management and control test (the principle that a company is tax-resident where its central management and control are exercised, not necessarily where it is incorporated) is the relevant concept here. If the beneficial owner is relocating to Hong Kong, and if board meetings of the Cyprus entity are being held in Hong Kong or by Zoom with a Hong Kong-based quorum, the entity may be tax-resident in Hong Kong for purposes of the Inland Revenue Ordinance – with consequences for the foreign-sourced income exemption (FSIE) regime and the entity's filing obligations.

The file should include a clear statement of the Cyprus entity's tax-residence position, supported by a Cypriot tax-residence certificate or its equivalent, and a brief explanation of where board decisions are made and by whom. If the restructuring is mid-stream, the narrative should say so explicitly, with a timeline of the intended transition.

The FSIE regime – the foreign-sourced income exemption applicable under the Inland Revenue Ordinance, amended to require economic substance for certain passive income to qualify for the exemption – is directly relevant where the Cyprus entity is being wound down or its functions transferred to a Hong Kong entity. A file that ignores this dimension leaves the bank unable to assess whether the incoming funds will attract Hong Kong tax treatment, which is a compliance gap the relationship manager cannot overlook.

The gate at Step 3 is internal consistency. The tax-residence position stated in the file must be consistent with the management-and-control evidence, the director documentation, and the board-meeting records. A file that claims Cyprus tax residence while showing all substantive decisions being made in Hong Kong will not survive enhanced due diligence.

Step 4 – Address the cross-border transfer mechanics and regulatory clearances

If assets are to be transferred from Cyprus to Hong Kong, the file should address the transfer mechanics. This step is separate from source of funds, but compliance officers treat it as part of the same inquiry: can the money physically move, and is there any regulatory reason it should not?

For a Cyprus-to-Hong Kong transfer, the relevant considerations are: Cyprus capital controls (none at the time of writing, but the position should be verified); EU regulatory reporting requirements where the Cyprus entity has EU-regulated activities; and the receiving bank's correspondent banking chain, which may impose its own KYC requirements on large inward transfers.

Where the underlying assets originate from the Mainland of China – which is common in structures where a CIS-origin or Asian-origin group used a Cyprus holding layer above a Mainland operating entity – the transfer mechanics become more complex. Mainland capital controls, the State Administration of Foreign Exchange (SAFE) approval requirements for outward transfers and the documentary requirements for cross-boundary remittances all require separate analysis. The source-of-funds file for the Hong Kong bank cannot resolve these questions unilaterally, but it should acknowledge the transfer chain and provide evidence that the upstream remittance was lawfully made.

The gate at Step 4 is regulatory coherence. The file must show that the funds have been or will be transferred through a mechanism that is transparent, documented and consistent with the regulations of each jurisdiction in the chain. A bank that receives funds without understanding the transfer chain has an AML problem. A file that explains the chain in advance does not.

See our Capital Relocation practice for the full spectrum of cross-border structuring work we handle in this corridor.

If an earlier onboarding attempt produced a request for information that was partially answered or produced a stalled result, a second read of the file from a cross-border adviser's perspective can identify the gap and the path forward. To discuss a file that has stalled or an onboarding that has not yet started, contact info@lockhartyip.com.

What is the most common mistake – and how does the structured approach avoid it?

In our cross-border practice, the most common mistake in a Cyprus-to-Hong Kong onboarding file is narrative incoherence. The documents are present but the story they tell does not hold together.

A concrete scenario: a principal moves from Cyprus to Hong Kong in the first quarter of a given year. The Cyprus entity's accounts are prepared on a Cyprus-resident basis through the end of the prior year. The beneficial owner's personal tax residency shifts mid-year. The board minutes show a Cyprus quorum for meetings held before the move and a Hong Kong-based quorum for meetings after it. The funds transferred are a mix of retained profits from the prior year and a capital reduction resolved after the move. The file presents all of this documentation, but in chronological order without a narrative thread.

The compliance officer sees a Cyprus company that looks like it changed its governance structure mid-year, a beneficial owner who is no longer resident in the same jurisdiction as the entity, and a funds transfer that straddles a governance transition. Each of those facts has an innocent explanation. Without a narrative that frames them together, the compliance officer must treat each as a risk indicator.

The structured approach avoids this by separating the file into four named sections – structure, source, management and transfer – and providing an executive summary that states, in plain terms, what the structure is, where the money came from, where control sits today, and what is happening to the assets. The executive summary is not a legal opinion. It is a compliance-oriented narrative that tells the bank what it needs to know in the order it needs to know it.

A second common mistake is failing to anticipate the look-back period. Banks conducting enhanced due diligence will typically request documentation covering the prior three to five years. A file assembled the week before submission often cannot produce audited accounts, bank statements and board minutes for that full period on short notice. The correct approach is to begin the file assembly process three to four months before the intended account opening, using that window to obtain certified documents from Cyprus registries, translation providers and auditors.

A third mistake is treating the nominee director relationship as a confidential matter that cannot be disclosed. Professional nominees in Cyprus operate under the Companies Law of Cyprus and AML regulations that require them to maintain know-your-customer files on their principals. A Hong Kong bank doing enhanced due diligence has the right, and the obligation, to ask for evidence of who gives instructions to the nominee. A file that refuses to answer this question, or that answers it only by assertion, will not proceed.

Decision checklist before submission

The following checklist applies to any Cyprus entity being onboarded at a Hong Kong bank under enhanced due diligence. It is not exhaustive, and individual banks may require additional items. Parties should verify the bank's current requirements before submission.

Certificate of good standing for the Cyprus entity, dated within three months of submission.
Memorandum and articles of association in certified English translation.
Register of directors and register of members, both current and for the look-back period.
Nominee director agreement and disclosure of instruction authority, if applicable.
Beneficial ownership declaration tracing to every natural person holding more than 25% or exercising ultimate effective control.
Audited accounts of the Cyprus entity for the look-back period specified by the bank.
Audited accounts or financial statements of the material operating entities in the group.
Funds-flow narrative covering every material inflow to the Cyprus entity over the look-back period.
Source documentation for each material inflow: board resolutions, bank statements, sale agreements, contribution agreements as applicable.
Cyprus tax-residence certificate or equivalent, current.
Board-meeting records for the look-back period, noting the location and participants of each meeting.
A clear statement of the management-and-control position and how it is expected to change (if the relocation is in progress).
Transfer mechanics documentation: remittance instructions, correspondent bank details, and any regulatory clearances required in the originating jurisdiction.
Executive summary of no more than two pages, structured as: entity overview, source of funds, management and control, transfer mechanics, and intended use of the account.

Each item on this list should be verified against the specific requirements of the receiving bank before submission. Banks vary in their look-back periods, their translation requirements and their approach to nominee structures.

For a structured review of your source-of-funds file before it is submitted, or to map the relocation route from Cyprus to Hong Kong for a group or family-office principal, reach us at info@lockhartyip.com.

See also our analysis of relocating a fund or investment platform to Hong Kong and the related matter note on that mandate, which address the upstream structural steps that typically precede a bank onboarding.

Frequently asked questions

Do I need a Hong Kong adviser for a source-of-funds file for a Cyprus principal at a Hong Kong bank?

A cross-border adviser with knowledge of both the Hong Kong AML regulatory position and the Cyprus corporate law dimension is necessary to prepare a file that holds together under enhanced due diligence. The Hong Kong bank applies the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the Hong Kong Monetary Authority's AML guidelines; the Cyprus entity's structure is governed by Cyprus company law; and the source of funds will often involve a third jurisdiction – the Mainland, a CIS state or a Middle Eastern market. A Cyprus adviser working alone cannot address the Hong Kong regulatory expectations. A Hong Kong adviser working alone cannot interpret the Cyprus documentary requirements. The two need to be coordinated, which is precisely where cross-border counsel adds the most value.

Which jurisdiction's law applies to a source-of-funds file for a Cyprus principal at a Hong Kong bank?

Two systems apply simultaneously, and neither can be ignored. The Cyprus entity's legal existence, ownership and governance are governed by the Companies Law of Cyprus. The bank's verification obligations – what it must ask for, what it must assess and what it must record – are governed by Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulatory guidelines issued under it. Where assets originate in a third jurisdiction, that jurisdiction's regulatory requirements (for example, Mainland capital-control rules for outward transfers) also bear on the file. A source-of-funds file that addresses only one of these systems will not satisfy enhanced due diligence.

What documents are needed for a source-of-funds file for a Cyprus principal at a Hong Kong bank?

The core documentary package includes: a certificate of good standing for the Cyprus entity, the memorandum and articles of association in certified English translation, the registers of directors and members, a beneficial ownership declaration tracing to all natural-person controllers, audited accounts and a funds-flow narrative for the look-back period, board-meeting records, a Cyprus tax-residence certificate, and documentation of the transfer mechanics. Where nominee directors are used, the bank will require evidence of who gives instructions to the nominee. An executive summary framing all of this material is not formally required but is consistently the document that determines whether the file is reviewed efficiently or queued for follow-up.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach a source-of-funds file for a Cyprus principal at a Hong Kong bank