An AML and source-of-funds file for the UAE counterparty

The payment stalls. The correspondent bank requests a source-of-funds file for the UAE counterparty. The relationship manager needs it in days. At that point, the question is no longer whether the counterparty is legitimate – it is whether the file, as assembled, will satisfy a compliance team working under anti-money laundering rules it did not write and operating in a jurisdiction it does not always explain to the party requesting the transfer.

An AML and source-of-funds file (a structured package of counterparty due-diligence, wealth-origin and funds-flow documentation) for a UAE-based counterparty is governed, on the Hong Kong side, by the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulators' AML guidelines. The UAE side adds its own Central Bank and financial-intelligence-unit requirements. The file must satisfy both systems simultaneously.

This note covers the trigger that brings this work to a head, the route we run, the documents the client must own, and the cross-border position at the Hong Kong–UAE interface. The closing section sets out the next move.

When does a foreign principal need this file, and what forces it?

The trigger is rarely a surprise – but it always arrives at the wrong moment. A UAE counterparty is introduced to the transaction, a payment is routed through a Hong Kong correspondent, and the bank's compliance team flags the account relationship for enhanced due diligence. Or the counterparty's own bank in the UAE requests documentation of the source of funds before releasing proceeds. In either case, the foreign principal is suddenly responsible for producing a file that reads correctly in two compliance environments at once.

The structural complexity here is not the counterparty's status. Most UAE counterparties in cross-border transactions are legitimate commercial parties, often operating through a freezone entity (a legal form established in one of the UAE's specialist economic zones, which carries its own licensing and ownership-disclosure framework). The complexity is the documentation stack: beneficial ownership evidence gathered under UAE law, wealth-origin narratives that satisfy Hong Kong's risk-based approach, and funds-flow records that trace the payment trail without interruption.

In our cross-border practice, we see two patterns most often. The first is a Hong Kong group entering a trade or investment relationship with a UAE party for the first time, where the group's bank requires the file before approving the payment channel. The second is a UAE-based principal moving funds into a Hong Kong structure – or through a Hong Kong account – where the receiving bank or a regulated intermediary applies enhanced due diligence under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance.

Both patterns share the same problem: the principal owns the relationship but does not own a file. The file has never been assembled in a form that travels across both systems cleanly. That is the work.

The structural-complexity trigger also appears in a third configuration: a group that has operated the relationship for years, the bank changes correspondent arrangements, and the new correspondent applies a fresh enhanced-due-diligence review. The existing documentation is often incomplete, informally held, or assembled for a different jurisdiction's standard. A rebuild is faster and cleaner than a patch.

What the Anti-Money Laundering and Counter-Terrorist Financing Ordinance requires – and what the UAE adds

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance, together with the AML guidelines issued by the Hong Kong Monetary Authority and the Securities and Futures Commission, requires financial institutions to apply customer due diligence (CDD) and, for higher-risk relationships, enhanced due diligence (EDD) to counterparties and the source of funds entering their systems. That obligation is the Hong Kong side of the file.

For a UAE counterparty, the risk-classification question is live. The UAE has made significant progress on its FATF (Financial Action Task Force – the international standard-setting body for AML and counter-terrorist financing) standing in recent years. The current position should be verified before the file is built, because the risk classification assigned to the counterparty's jurisdiction affects the EDD threshold and the depth of documentation required.

On the UAE side, the relevant framework includes the UAE's own AML legislation, the goAML system (the UAE's financial-intelligence-unit reporting and compliance platform), the Central Bank of the UAE's guidelines for licensed financial institutions, and the disclosure requirements applicable to the counterparty's specific legal form – whether a mainland UAE company, a freezone entity, or an offshore registration in a UAE jurisdiction such as the Ras Al Khaimah International Corporate Centre or the Abu Dhabi Global Market.

The intersection point is beneficial ownership. Both the Hong Kong and UAE regimes require identification of the ultimate beneficial owner (UBO) – the natural person or persons who ultimately own or control the counterparty. The definition of UBO, the shareholding threshold that triggers disclosure, and the documentary form of that disclosure differ between the two systems. A file that satisfies one may be incomplete under the other. Building the file to the higher standard in each dimension is the correct approach.

Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. The UAE operates its own sanctions and terrorist-financing designation lists, which must be checked independently. A complete file documents both screening steps.

How does the Hong Kong–UAE cross-border position affect the file structure?

At the Hong Kong–UAE interface, the file is not a single document – it is a structured package calibrated to two sets of compliance requirements, assembled in a sequence that neither creates gaps nor contradicts itself across the two systems.

The first cross-border decision is which system leads. Where the payment channel runs through a Hong Kong licensed bank, the Hong Kong AML standard is the primary obligation and the UAE documentation supports it. Where the UAE bank is the gatekeeper – for example, where a UAE counterparty is receiving funds from a Hong Kong source into a UAE account – the UAE standard leads and the Hong Kong-side narrative supports it. The file structure changes accordingly.

The second cross-border decision concerns legal form. A UAE freezone entity, a UAE mainland limited liability company, and an offshore entity registered in the Abu Dhabi Global Market are distinct legal forms with different disclosure obligations, different licensing frameworks, and different documentary evidence of good standing. Each requires a different primary evidence set. We regularly advise on the translation of freezone licensing documents and corporate registry certificates into a narrative that a Hong Kong compliance team can follow without specialist UAE knowledge.

The third decision is language and format. UAE corporate documents are frequently issued in Arabic, often with an English translation that is adequate for commercial purposes but not formatted to a compliance standard. The file needs to present these documents in a way that a Hong Kong-side reviewer can assess without requiring independent verification. That means accurate translation where needed, clear annotated descriptions of each document's function, and a coherent narrative thread from incorporation to the current beneficial owner.

Where the transaction involves a politically exposed person (PEP – a natural person who holds or has held a prominent public function, or an immediate family member or close associate of such a person), both systems impose further enhanced due diligence. In our cross-border practice, PEP issues in UAE-connected transactions arise more often than clients anticipate, because the UAE's economic base includes a significant number of family groups with governmental or regulatory connections. The file must address this head-on, not sidestep it.

For a structured assessment of your Hong Kong–UAE payment channel and the cross-border AML requirements it engages, write to us at info@lockhartyip.com.

The route we run: step by step

The work begins with a structured intake. We ask the client to share what they have: the counterparty's incorporation documents, any prior due-diligence pack, correspondence from the bank or compliance team, and a description of the transaction or relationship. We do not begin building the file without understanding what the bank or regulator has already asked for – because that defines the gap.

Step one is a gap analysis (a document-by-document review of what exists against what the applicable standard requires). The gap analysis tells the client exactly what is missing, what is present but in the wrong form, and what needs to be supplemented by a narrative explanation. It is the most important step, because it shapes the entire assembly sequence.

Step two is the documentation request. We produce a structured list of items to be obtained from the UAE counterparty, calibrated to the counterparty's legal form and the applicable EDD level. This list covers corporate registry certificates, UBO declarations, identification documents for controlling individuals, source-of-wealth evidence, source-of-funds records for the specific transaction, and any regulatory licences required by the counterparty's business type.

Step three is assembly and narrative. We organise the documents into a logical structure, cross-reference them, and prepare a written narrative that explains the counterparty's ownership chain, the commercial rationale for the relationship, and the flow of funds from origin to destination. The narrative is the part that most self-assembled files lack. A pile of documents is not a file; a file is a coherent, auditable record with a clear explanatory thread.

Step four is review against the applicable Hong Kong AML standard and, where relevant, the UAE standard. We do not sign off on the file as legally compliant – that is the role of the licensed institution. What we produce is a file structured to satisfy the standard, with the gaps identified and addressed and the narrative coherent across both systems.

Step five is submission support. Where the client needs to explain the file to the bank's compliance team, we assist with the covering letter and the framing of the submission. A well-framed submission reduces the number of subsequent information requests, which is the practical objective.

Locally licensed Hong Kong firms join the process where a specific Hong Kong law question arises – for example, where the client's own Hong Kong-licensed structure requires a formal legal opinion on its AML compliance position, or where a regulatory engagement with the Hong Kong Monetary Authority or the Securities and Futures Commission is in prospect. We coordinate that engagement; we do not hold ourselves out as practising Hong Kong law.

In a recent matter – a mid-sized European trading group with a UAE freezone counterparty and a Hong Kong correspondent account (summer 2026) – the bank's compliance team had issued a formal information request that the client had partially answered over several weeks without resolving the inquiry. We rebuilt the file from the gap analysis up, including a fresh UBO declaration and a restructured funds-flow narrative. The bank's inquiry closed within the next review cycle.

The documents and decisions the client must own

The file is the client's document. The adviser assembles and structures it, but the client must be in a position to certify its contents, respond to follow-up questions, and update it as the relationship continues. That means the client must understand what each document says and why it is in the file.

The core document set for a UAE counterparty file typically includes the following categories. First, legal identity: the counterparty's certificate of incorporation or registration, its memorandum and articles of association or equivalent constitutional document, and its current good-standing certificate from the relevant UAE registry. Second, beneficial ownership: a UBO declaration in a form acceptable under the applicable AML standard, supported by identification documents for each natural person identified as a UBO. Third, source of wealth: a written explanation of how the UBO or UBOs accumulated the assets underlying the transaction, supported by corroborating documents such as financial statements, prior transaction records, or professional valuations. Fourth, source of funds: a clear documentary trail of the specific funds entering or leaving the transaction, from the account of origin to the account of destination, with no unexplained gaps. Fifth, business context: a description of the counterparty's business, its regulatory licences where applicable, and the commercial rationale for the transaction.

Three decisions belong to the client, not the adviser. The first is the UBO identification decision: who is the ultimate beneficial owner? This is a factual and legal question, and the client must take responsibility for the answer. Where ownership is complex – for example, where a freezone entity is held through a trust or a family holding structure in a UAE offshore jurisdiction – the analysis requires care and the client must be prepared to explain the full chain. The second is the PEP determination: does any person in the ownership chain hold or have held a prominent public function? The client must make this assessment honestly; an incorrect negative answer creates a significant compliance risk downstream. The third is the completeness certification: the client must be prepared to confirm that the file is complete and accurate as at the date of submission. Advisers can build the file; only the client can certify it.

Where the counterparty is unwilling or unable to provide the required documentation, that is a commercial decision for the client – not a compliance problem that the file can paper over. A file built on incomplete or unverified information provides no protection. In our cross-border practice, we advise clients frankly when the documentation available is insufficient to support the relationship at the applicable compliance level, and we help them understand what that means for the transaction.

If an earlier filing or prior compliance attempt produced a stalled or adverse result, a second read can identify the structural error and the steps still open. For a preliminary assessment of your position, contact info@lockhartyip.com.

Common mistakes and risk points for foreign principals

The most common mistake is treating the AML file as a box-ticking exercise rather than an evidence-based argument. A well-constructed file is a narrative: it tells the story of who the counterparty is, where the money comes from, and why the transaction makes commercial sense. A collection of unorganised documents with no explanatory thread fails almost every compliance review, regardless of how legitimate the underlying relationship is.

The second mistake is underestimating the UAE-side documentation requirement. Many foreign principals assume that a standard due-diligence pack – a certificate of incorporation, a trade licence, and a passport copy – is sufficient. For a freezone entity in a modern UAE jurisdiction with a transparent registry, that may be a reasonable starting point. For a more complex structure, it is not. The gap between what is ordinarily provided and what enhanced due diligence requires is where files stall.

The third mistake is allowing the file to go stale. A source-of-funds file is a point-in-time document. Banks and regulated intermediaries apply periodic review cycles. Where the relationship continues over time, the file must be updated to reflect changes in ownership, structure, or the source of new funds entering the relationship. A file that was adequate at inception may be inadequate two years later.

A fourth risk, specific to the Hong Kong–UAE corridor, is the sanctions screening step. Hong Kong implements United Nations sanctions; the UAE operates its own designation lists. Both must be cleared. A file that documents ownership and source of funds but omits the sanctions-screening record is incomplete. This is not a formal legal issue in every transaction, but it is a compliance gap that experienced reviewers notice.

The myth that this work is primarily about the counterparty's reputation rather than the documentary record deserves direct attention. Compliance teams at licensed institutions are not assessing whether they trust the counterparty in a commercial sense. They are assessing whether the file, as presented, allows the institution to meet its own regulatory obligations. A counterparty that is commercially well-regarded but poorly documented will fail the review. The file is the answer, not the relationship.

Decision map: situation, instrument, route, timing, risk

The route through this work is not the same for every situation. The configuration of the counterparty, the payment channel, and the applicable compliance threshold determines the sequence.

Where the Hong Kong bank has issued a formal information request with a deadline, the route is a gap analysis immediately, a structured documentation request to the UAE counterparty within the first forty-eight hours, and a completed file ready for submission before the bank's deadline. The risk is timeline: if the counterparty is slow to provide documentation, the deadline may pass before the file is complete. Managing the counterparty's response speed is part of the work.

Where no formal request has been issued but the client wants to build the file proactively – for example, before entering a new relationship or before routing a significant payment – the route is the same sequence but without the time pressure. The advantage of proactive assembly is that it can be done correctly, without compression, and it establishes a baseline that can be updated as the relationship develops. The governing instrument on the Hong Kong side remains the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the applicable AML guidelines.

Where the transaction is a UAE-side payment into a Hong Kong structure – for example, a UAE family office funding a Hong Kong investment vehicle – the Hong Kong-side institution is the primary compliance gatekeeper. The UAE-side documentation must be assembled to the Hong Kong standard, which means the gap analysis is calibrated to what a Hong Kong licensed institution's compliance team will require, not to what the UAE side regards as sufficient.

Where the relationship involves a PEP, the file requires a separate enhanced due-diligence layer covering the source of the PEP's wealth, the nature of the public function held or formerly held, and the commercial rationale for the relationship. This is not a separate file – it is an additional section within the main file, built to the higher standard the PEP designation imposes. The risk is that the PEP layer is under-documented or treated as a formality. In our cross-border practice, that is the single most common cause of a formal refusal by a Hong Kong licensed institution.

Self-assessment: is your file ready?

Before engaging external counsel on a source-of-funds file, a principal can run a quick internal assessment. The questions below are not exhaustive, but they identify the most common gaps in the files we review on engagement.

• Can you name the ultimate beneficial owner of the UAE counterparty with certainty, and do you hold identification documents for that person?
• Do you have the counterparty's current certificate of incorporation or registration, and is it dated within the last twelve months or accompanied by a good-standing certificate?
• Can you trace the specific funds entering this transaction from the account of origin to the point of payment, without an unexplained gap?
• Have you assessed whether any person in the counterparty's ownership chain is a politically exposed person under the applicable definition?
• Have you screened the counterparty and its UBOs against the UN sanctions list and the UAE's own designation list?
• Is the file assembled as a coherent package with a written narrative, or as a collection of documents without explanation?
• If the file was assembled more than twelve months ago, has it been reviewed and updated to reflect the current position?

If the answer to any of these questions is uncertain, the file is not ready. The cost of a gap is not the cost of filling it – it is the cost of the stalled payment, the delayed transaction, or the compliance inquiry that follows.

For an AML and source-of-funds matter at the Hong Kong–UAE interface, our desk can review the counterparty and source-of-funds position, prepare the compliance file, and document the contracting approach. To discuss your position, write to us at info@lockhartyip.com.

This work sits at the intersection of our Sanctions & AML practice and the broader cross-border compliance position. For groups managing internal AML policy across an Asian structure, our analysis of internal sanctions and AML policy for an Asian group is the relevant companion note. For the equivalent analysis at the Cayman Islands interface, see our AML and source-of-funds file for the Cayman Islands counterparty.

Related practices

• Sanctions & AML – AML compliance, sanctions screening, counterparty due diligence for cross-border groups
• Holding Structures – structuring holding entities across Hong Kong, BVI, Cayman and the UAE

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Internal Sanctions Aml Policy Asia Group
• Aml Source Funds File Cayman Islands Counterparty Cayman

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.