Matter note: sanctions due diligence for a deal UAE

A cross-border deal that connects Hong Kong capital with a counterparty or asset in the United Arab Emirates sits at the intersection of two distinct compliance regimes. Neither jurisdiction operates a single, unified sanctions list. Each applies different source obligations, different screening layers, and different expectations from the banking counterparties who ultimately decide whether the payment clears.

Sanctions due diligence for a deal touching the UAE requires screening against the United Nations sanctions lists implemented in Hong Kong under the United Nations Sanctions Ordinance, against the UAE's own domestic sanctions framework administered by the Executive Office for Control and Non-Proliferation, and – because most USD-denominated transactions pass through US correspondent banks – a working understanding of the unilateral measures of other states that Hong Kong does not itself give domestic effect to, but which the payment chain encounters regardless. The governing instrument on the Hong Kong side is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, which sets the customer due diligence and record-keeping standards that apply to regulated institutions and, by extension, shapes the expectations of the banks a cross-border deal must pass through.

This matter note sets out, in anonymised form, how our desk approached this problem for a principal with exactly that exposure. The sequence and the turning point are described. The client-specific facts are not.

The situation and the constraint

The principal was an Asian-headquartered group with a Hong Kong holding entity. It was acquiring a mid-market operating asset in the UAE. The counterparty – the seller – held its interests through a regional holding structure. The transaction was denominated in US dollars, and settlement was to run through Hong Kong correspondent banking channels before reaching the UAE-side accounts.

The constraint was not that the counterparty appeared on any list. A preliminary screening pass had returned no direct hits. The problem was structural. The counterparty's beneficial ownership chain passed through a jurisdiction that regularly features in enhanced-due-diligence guidance issued by the Financial Action Task Force (the FATF, the inter-governmental body that sets global standards for anti-money laundering and countering the financing of terrorism). The correspondent banks through which settlement was to flow had internal risk-appetite limits for that jurisdictional exposure. One bank had already raised an informal query with the client. No transaction had been declined. But the direction of travel was clear.

In our cross-border practice, we see this pattern regularly. A transaction that clears every formal list-screening step can still stall at the level of the payment correspondent. The compliance file was not built for that audience. It was built for the deal lawyers. Those are different documents with different purposes, and conflating them is one of the most consistent errors we observe in cross-border transactions of this kind.

The issue: two regimes, one payment channel

Hong Kong implements United Nations sanctions and does not give domestic effect to the unilateral measures of other states. That is the legal position. The commercial reality is that the US dollar payment channel is controlled by institutions that apply a wider set of measures as a condition of their own regulatory compliance. Any deal settled in US dollars through a US-correspondent-connected bank passes through that filter, regardless of the governing law of the transaction or the domicile of the parties.

This creates what we describe to clients as a two-track compliance question. The first track is the Hong Kong legal obligation: what must be done under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, including customer due diligence, source-of-funds assessment and the record-keeping required to demonstrate that the transaction sits outside any applicable United Nations sanctions designation. The second track is the commercial banking question: what the correspondent bank needs to see in order to proceed without raising a formal query, freezing funds, or filing a suspicious transaction report.

Neither track is optional. A client who treats them as one document – or who builds only for the legal track – will find the payment channel problem arriving at the worst possible moment: after the transaction documents are signed and the settlement date is set.

On this matter, the UAE counterparty added a third dimension. The UAE has its own domestic sanctions regime, and the counterparty's ongoing UAE-side regulatory standing was a relevant factor for the Hong Kong bank processing the inbound receipt. The UAE-side legal position was not within our engagement. We coordinated with allied counsel admitted in that jurisdiction. But the output – a confirmatory legal position on the counterparty's UAE-law standing – fed directly into the Hong Kong compliance file.

The sequence and the turning point

The engagement opened with a structured screening exercise. This was not a single-database pass. It covered the United Nations consolidated sanctions list, the lists maintained under the United Nations Sanctions Ordinance as implemented in Hong Kong, and the FATF grey-list and black-list positions relevant to the jurisdictions in the counterparty's ownership chain. The output was a written screening memorandum, dated and version-controlled, addressed to the file rather than to the client's in-house team alone.

The second step was a beneficial ownership mapping exercise. The counterparty's holding structure had four layers. At the third layer sat an entity incorporated in a jurisdiction that was not on the UN lists but that carried elevated correspondent-banking risk by reason of its FATF-adjacent classification. The entity itself had no designation. Its jurisdiction of incorporation was the issue.

That distinction – between entity risk and jurisdictional risk – was the turning point of the matter. The Hong Kong bank had not declined to proceed. It had asked a question. The question was whether the group could demonstrate that the third-layer entity had an independent commercial purpose and was not a shell inserted to move funds through a lower-scrutiny point. That is a different question from "is this entity on a sanctions list," and it required a different answer.

We prepared a two-part response. The first part was a legal analysis of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance obligations as applied to the transaction, confirming that the due diligence conducted was consistent with the statutory standard and the relevant regulatory guidance. The second part was a structured factual memorandum on the counterparty's third-layer entity: its incorporation date, its commercial history, its function within the wider group, and the documentation available to support each point. That memorandum was prepared for the bank, not for the deal file, and it was written in the register a compliance officer reads rather than the register a deal lawyer writes in.

The bank accepted the file. The query was closed. Settlement proceeded on the agreed date.

For a structured assessment of your cross-border transaction and the compliance file it requires across the relevant jurisdictions, write to us at info@lockhartyip.com.

The qualitative outcome and the transferable lesson

The transaction completed. That is the short version. The longer version is more instructive.

The principal had engaged deal counsel and had a competent legal file. What it did not have was a compliance file built for the payment correspondent. When the bank's question arrived, it was treated initially as a legal problem. It was not. It was a banking-access problem that required a compliance answer in a compliance format. The delay in reframing that question cost a portion of the available settlement window.

The transferable lesson is this: in any cross-border transaction where a USD-denominated payment channel is involved, the compliance file and the legal file serve different audiences and must be built separately, from the outset, with both audiences in mind. Retrofitting a compliance file after a bank query has been raised is possible. It is also slower, more expensive, and less likely to produce a clean result than building it at the start of the due diligence process.

A second lesson concerns the UAE specifically. The UAE has made significant progress in its FATF standing in recent years, and its domestic sanctions and AML infrastructure has developed accordingly. But the residual complexity – jurisdictions adjacent to the UAE, ownership chains that pass through the wider Gulf region, and counterparties with historical exposure to elevated-risk periods – means that blanket assumptions about the UAE's current standing do not translate automatically to every counterparty. Each ownership chain must be assessed on its own facts.

A third observation: the coordination between the Hong Kong compliance file and the UAE-side legal position was not a formality. It was essential. The bank needed to see a coherent account of the counterparty's legal standing across both jurisdictions. A gap between the two – a Hong Kong file that assumed a UAE-side fact without evidencing it – would have reopened the query. Cross-border compliance work is only as strong as its weakest jurisdictional leg.

If an earlier filing, structure, or compliance attempt produced an adverse or stalled result, a second read can identify where the file fell short and the routes still open. Write to us at info@lockhartyip.com.

Our broader approach to sanctions and AML compliance across Hong Kong and the principal cross-border corridors is described at our Sanctions & AML practice page. For a related briefing on CIS-connected transactions and the screening questions that arise in that corridor, see our briefing on sanctions due diligence for a deal touching the CIS. For a related matter note on source-of-funds work involving a UAE counterparty, see our matter note on the AML source-of-funds file for a UAE counterparty.

What foreign counsel routinely underestimate

We include this section because the matter above is not unusual. It represents a pattern our desk sees across transactions involving the UAE, the wider Gulf region, and any corridor where US dollar settlement runs alongside a cross-border ownership chain.

Foreign counsel – including experienced international practices – tend to approach sanctions due diligence as a list-screening exercise. The list-screening step is necessary. It is not sufficient. The gap between "not on a list" and "acceptable to the payment correspondent" is where most compliance failures originate. It is also where most delays occur in transactions that are, legally, entirely clean.

A second consistent error is the treatment of the UAE as a single compliance environment. In practice, the UAE's domestic framework, the free-zone-specific rules, and the legacy perception of the region in correspondent banking risk matrices do not always align. A counterparty incorporated in a UAE free zone carries a different risk profile, in correspondent-banking terms, than one incorporated under UAE onshore company law. Neither profile is the same as the theoretical position that a competent legal adviser might advise on the basis of the law alone.

The Hong Kong dimension adds a further layer. Hong Kong implements United Nations sanctions and does not give domestic effect to the unilateral measures of other states. That position is clear and consistent. It does not, however, insulate a Hong Kong party from the commercial consequences of the US dollar payment channel. A Hong Kong principal structuring a transaction through a Hong Kong holding entity with a UAE counterparty must build its compliance file with that channel in mind, not only with the Hong Kong legal obligation in view.

The practical consequence is that a deal team operating from a Hong Kong base needs to hold two frameworks simultaneously: the Anti-Money Laundering and Counter-Terrorist Financing Ordinance standard, which governs what the Hong Kong law requires; and the correspondent banking standard, which governs what the payment will require. Those frameworks are not inconsistent. They are simply different, and the compliance file must speak to both.

Related practices

Sanctions & AML – cross-border compliance, screening, and counterparty due diligence
M&A & Transactions – cross-border deal structuring and transaction execution through Hong Kong

Frequently asked questions

How long does sanctions due diligence for a deal touching the UAE usually take?

The timeline depends on the complexity of the counterparty's ownership chain and the number of jurisdictions engaged. A straightforward screening exercise with a clean beneficial ownership structure can be completed within a matter of days. Where enhanced due diligence is required – because of jurisdictional risk, ownership-chain depth, or a bank query already in play – the process typically runs over several weeks. Building the compliance file in parallel with deal due diligence, rather than after a bank query has been raised, is the most effective way to manage the timeline. Parties should verify the current position with their advisers at the outset.

How does the cross-border element affect sanctions due diligence for a deal touching the UAE?

The cross-border element – particularly the Hong Kong to UAE corridor – introduces at least two compliance frameworks that must be addressed simultaneously. Hong Kong implements United Nations sanctions under the United Nations Sanctions Ordinance and sets customer due diligence standards under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. The UAE operates its own domestic sanctions framework. In addition, US dollar-denominated settlement introduces the standards of the correspondent banking channel, which reflects a wider set of measures than Hong Kong itself applies. Each leg of the transaction requires analysis in its own right, and a gap between the jurisdictional positions is a common source of delay.

What documents are needed for sanctions due diligence for a deal touching the UAE?

A complete sanctions due diligence file for a UAE-connected transaction typically requires: beneficial ownership documentation tracing the counterparty to its ultimate natural-person owners; constitutional documents for each entity in the ownership chain; source-of-funds and source-of-wealth documentation appropriate to the transaction value; evidence of the counterparty's UAE-law standing and regulatory position where relevant; and a written screening record covering the applicable United Nations lists. Where a bank query has been raised or is anticipated, a structured factual memorandum addressing the specific concern – written for a compliance audience – is usually required in addition to the legal file. The precise documents needed turn on the specific facts.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

Matter note: sanctions due diligence for a deal touching the UAE