A compliance review before contracting with the BVI entity

The instruction arrives quickly: the counterparty is a British Virgin Islands entity. The commercial rationale is clear. The contract is ready. But before execution, a question sits on the table that banking relationships, regulatory exposure and ongoing payment access all depend on answering correctly. Who controls this entity? Where does its money come from? And does the structure pass the threshold that a correspondent bank will accept without additional scrutiny?

A compliance review before contracting with a BVI entity is a structured assessment of the counterparty's beneficial ownership, source of funds and sanctions exposure, conducted under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the United Nations Sanctions Ordinance, with the practical objective of producing a documented compliance file that supports banking access and payment execution across the Hong Kong–BVI corridor.

This page sets out when the review is needed, the route we run, the cross-border mechanics of the Hong Kong–BVI interface, the documents the client must own, and the step that moves the matter forward.

When does a foreign principal need this review?

The trigger is almost always the payment channel. A foreign principal – a trading group, a fund manager, a procurement entity, or a family office – is positioned to contract with a British Virgin Islands business company (a privately held entity incorporated under BVI law, used widely as a holding or trading vehicle). The contract is agreed in principle. But the bank – typically a Hong Kong-licensed institution acting as the principal's settlement bank – requests a counterparty file before releasing funds.

That request is not optional. The bank is managing its own customer-due-diligence obligations. If the file is thin, the bank declines the transaction. If the file is absent, the principal's own account may be flagged for enhanced review. The window between commercial agreement and payment execution is where the compliance work must happen.

Other triggers are structural rather than transactional. A BVI entity appointed as a contractual counterparty for an ongoing supply arrangement, a royalty recipient, or a treasury vehicle requires a file that can be updated and produced on request. A principal with a multi-year relationship with a BVI entity – and no documented compliance review on file – carries accumulating regulatory exposure each time a payment is processed.

In our cross-border practice, the most acute risk we see is not the single large payment. It is the series of routine smaller payments, across months or years, where no review was ever conducted and where the counterparty's beneficial ownership has never been formally established. When a correspondent bank eventually requests the file, there is no file to produce.

What governs the review?

Two instruments set the primary obligations on the Hong Kong side of the transaction. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance imposes customer-due-diligence requirements on regulated institutions – and, by extension, shapes the compliance expectations that those institutions impose on their own customers when transacting with offshore counterparties. The United Nations Sanctions Ordinance implements United Nations sanctions in Hong Kong. Hong Kong does not give domestic effect to unilateral sanctions measures of other states, but the international sanctions picture for a given counterparty or beneficial owner is a material input to the risk assessment regardless of which regime is operative.

On the BVI side, the relevant instrument is the BVI Business Companies Act, which governs the incorporation, ownership and registered-agent obligations of BVI business companies. Beneficial ownership information in the BVI is held in a central registry accessible to the BVI Financial Investigation Agency; it is not publicly searchable in the same way as the Companies Registry in Hong Kong. That gap between public-record availability and actual ownership disclosure is precisely where the compliance review does its work.

The practical standard the review must meet is set not only by statute but by the correspondent-banking relationship. A Hong Kong clearing bank processing a cross-border payment through the US dollar correspondent network will apply the expectations of the US correspondent – which means the effective sanctions exposure includes unilateral US measures, even though those measures are not part of the Hong Kong legal regime. We advise on this interface as a compliance matter only: the objective is to document what the counterparty is and who controls it, so that the payment can proceed on the basis of an accurate and supportable file.

For advice on how the same principles apply when the counterparty sits in another offshore jurisdiction, see our briefing on sanctions due diligence for transactions touching Cyprus and our analysis of sanctions due diligence for deals with a United Kingdom dimension.

The sequence above describes the standard governing position. Your matter turns on the documents in existence, the jurisdictions actually engaged by the beneficial owner, and the correspondent bank's specific requirements – which is where the route is won or lost.

For a structured assessment of your counterparty's compliance position across the Hong Kong–BVI corridor, write to us at info@lockhartyip.com.

How does the cross-border interface between Hong Kong and the BVI actually work?

The Hong Kong–BVI corridor is one of the most heavily used cross-border holding and transactional pathways in the Asia-Pacific region. A BVI entity typically sits above a Hong Kong operating company, holds assets or receivables originating from Mainland China operations, or is used as the contractual counterparty for payments that ultimately settle through a Hong Kong bank account. The two legal systems are both common-law jurisdictions, which simplifies document interpretation, but they do not share a regulatory information exchange in real time.

The BVI registered agent holds the beneficial ownership register and the corporate records for the BVI entity. Absent a formal disclosure request through the BVI Financial Investigation Agency or equivalent competent-authority channel, those records do not travel automatically. A foreign principal contracting with the BVI entity does not receive the beneficial ownership file simply by virtue of being the counterparty. The file must be requested, and the BVI entity must produce it.

In practice, the principal's leverage is commercial. The BVI entity wants the contract. It wants the payment. It will produce the corporate documents if the commercial relationship depends on it. The compliance review creates the structured request and the analysis framework that converts that commercial leverage into a documented file. Where the BVI entity is reluctant to produce full beneficial ownership information – or where the information it produces is inconsistent with other available records – that reluctance is itself a material risk signal, not merely a logistical inconvenience.

The Mainland China dimension adds further complexity where the beneficial owner of the BVI entity is a Mainland-resident individual or a PRC-incorporated group. Outbound direct investment (ODI, the PRC regulatory approval mechanism for outbound capital) and special-purpose vehicle (SPV, used to describe a BVI entity held by a PRC resident for the purpose of offshore holding or listing structures) filings in the Mainland may provide additional verification data points. In our cross-border practice, we regularly see structures where the BVI entity's corporate records are clean but the Mainland-side capital history is undisclosed. A complete compliance file addresses both.

The payment channel is where the interface becomes concrete. A Hong Kong-licensed bank processing a payment to a BVI entity's account will apply its own anti-money laundering screening at the point of processing. If the principal's compliance file has not pre-empted the questions that screening will raise, the payment is held or declined. The cost of a payment hold – in commercial terms, in relationship terms, and in reputational terms with the bank – is typically far higher than the cost of the compliance review that would have prevented it.

What does the review route look like, step by step?

The review runs in four stages, and the sequence matters. Each stage has a defined output; the outputs combine into the compliance file that the client owns at the end of the engagement.

Stage one: intake and scope definition. We review the proposed contract, the known facts about the BVI entity, and the client's banking relationship. We identify the relevant sanctions lists – United Nations consolidated list, and the lists of other jurisdictions to the extent they bear on the payment channel – and we establish the customer-due-diligence standard the client's bank is likely to apply. The output of stage one is a targeted document request directed to the BVI entity, drafted to cover the minimum necessary information and avoid over-disclosure requests that might cause the counterparty to resist.

Stage two: document receipt and ownership mapping. The BVI entity produces its corporate documents: the certificate of incorporation, the register of members, the register of directors, the beneficial ownership register or equivalent, and where relevant the registered-agent confirmation. We map the ownership chain from the BVI entity upward to the ultimate beneficial owner or owners, noting each intermediate holding layer. Where the chain passes through additional offshore entities – a further BVI layer, a Cayman fund, a UAE holding company – we note the gap and advise on whether additional documentation is needed to close it.

Stage three: sanctions screening and risk assessment. We run the beneficial owner names, associated entities, and jurisdictions of operation against the relevant sanctions lists. We assess the risk level across three dimensions: the identity and public profile of the beneficial owners; the jurisdictions of incorporation and operation of the entity and its principals; and the nature and purpose of the proposed transaction. The output is a risk assessment memorandum that states the screening result, identifies any adverse findings, and sets out the basis on which the transaction is or is not supportable.

Stage four: file assembly and banking narrative. We assemble the compliance file in the format that a Hong Kong bank's compliance team can review and accept. Where the client's bank has specific document requirements, we tailor the file to those requirements. Where the risk assessment identifies a residual issue – for instance, a beneficial owner who is not a sanctions target but is a politically exposed person (PEP, an individual who holds or has held prominent public functions, subject to enhanced due diligence) – we prepare the enhanced-due-diligence narrative that supports the bank's decision to proceed.

Locally licensed Hong Kong firms with whom we work join the process where specific Hong Kong law filings or representations to a Hong Kong regulatory body are required. For the compliance review itself – which is an analytical and documentation exercise grounded in the international AML and sanctions regime – our desk manages the full route.

If an earlier compliance attempt produced an incomplete file, a rejected payment, or an unresolved bank query, a second read can identify the specific gap and the steps still available to address it. Write to us at info@lockhartyip.com to discuss the position.

What documents and decisions does the client own?

The compliance review produces outputs that belong to the client and must be maintained by the client. This is a structural point, not an administrative one. A compliance file that sits with an adviser and cannot be produced by the client when a bank requests it is not a compliance file – it is a liability.

The documents the client must own and be able to produce on request are: the complete corporate documentation of the BVI entity (certificate of incorporation, register of members, register of directors, beneficial ownership information); the sanctions screening record for each beneficial owner and associated entity, dated at the time of the review; the risk assessment memorandum; and the banking narrative prepared for the client's institution. Where the BVI entity produces a register of persons with significant control (or equivalent beneficial ownership disclosure under BVI law), the certified copy of that register forms part of the file.

The decisions the client must own are equally important. The risk assessment memorandum will identify any residual risk. The client – not its advisers – must make the decision to proceed, to request additional information, or to decline the transaction. That decision should be documented in writing, with the date and the basis recorded. Where a payment is subsequently questioned – by a bank compliance officer, by a regulator, or in the context of a dispute – the documented decision is the client's primary protection.

For ongoing relationships with BVI counterparties, the file must be refreshed. Beneficial ownership changes. Sanctions lists change. A file that was accurate when prepared may be materially inadequate twelve or eighteen months later. In our practice, we regularly assist clients in establishing a refresh protocol that triggers a file update whenever a defined event occurs – a change in the BVI entity's directors or members, a significant increase in the transaction value, or a public development affecting a beneficial owner or associated jurisdiction.

A micro-scenario illustrates the point. A European trading group with a long-standing supply arrangement involving a BVI counterparty came to us in spring 2026. Payments had been processing without difficulty for several years. A correspondent bank change triggered a new review, and the bank requested a current beneficial ownership file. The file the group held was four years old. The beneficial owner had changed intermediately. We rebuilt the file from current BVI corporate records, ran the updated screening, and produced a bank-ready package. The payment cycle resumed within one banking cycle. The gap in the file, left unaddressed, would have resulted in a sustained payment block and potential account review.

What are the common mistakes foreign principals make?

The most common mistake is treating the compliance review as a one-time event tied to the contract execution date. The review is not a box ticked at signing. It is the opening entry in a compliance record that must be maintained for the life of the commercial relationship.

The second common mistake is relying on the BVI entity's own representations without independent verification. A certificate of incumbency from the registered agent confirms the directors and members of record at the date of issue. It does not confirm the identity of the beneficial owner behind the member of record, and it does not confirm that the beneficial owner is not a sanctions target. Those verifications require a separate screening step that the BVI entity itself cannot provide.

The third mistake – and the one we see most acutely in the Hong Kong–BVI corridor – is misunderstanding which sanctions regime governs the payment. A principal operating through a Hong Kong bank account may assume that only United Nations sanctions apply, because Hong Kong does not give domestic effect to unilateral measures. That assumption is correct as a matter of Hong Kong law. But if the payment processes through a US dollar correspondent bank, the correspondent applies US sanctions measures. The practical effect is that the payment is screened against a broader list than the principal anticipated. A compliance file built only to the United Nations list standard may be insufficient for the payment to clear.

A second micro-scenario: a Middle Eastern principal with a procurement mandate was contracting with a BVI entity whose registered member was another BVI entity. The first-level file was complete. The second-level beneficial owner – a national of a jurisdiction subject to US sectoral measures – had not been identified because the ownership mapping stopped at the first corporate layer. We extended the mapping, identified the issue, and advised the client on the documentation approach that addressed the correspondent bank's concern without restructuring the commercial arrangement.

The objection we sometimes hear is that the BVI is a well-regulated jurisdiction with robust anti-money laundering standards and that a formal compliance review is therefore unnecessary. That position misunderstands the purpose of the review. The BVI's regulatory standards govern what the BVI registered agent and BVI authorities know about the entity. They do not govern what the principal's bank knows, or what the principal can demonstrate when its payment is questioned. The review is not about the BVI's standards. It is about the principal's documented position.

How does the review interact with the principal's existing AML programme?

Foreign principals with an existing AML compliance programme – particularly those operating in regulated sectors in their home jurisdiction – will often have counterparty-screening procedures already in place. The compliance review we run is designed to integrate with, not duplicate, those procedures. The output of our review is a structured file in a format that a compliance officer can plug directly into the principal's existing record-keeping system.

Where the principal's home-jurisdiction AML programme requires a specific due-diligence standard – for instance, the Financial Action Task Force (FATF, the international standard-setter for anti-money laundering and counter-terrorist financing measures) recommended standard for PEPs or for wire-transfer documentation – we build to that standard. The review is not a Hong Kong-specific exercise. It is an international compliance exercise that takes Hong Kong as the settlement forum and the BVI as the counterparty jurisdiction.

The Lockhart & Yip Sanctions & AML practice advises on the full range of cross-border AML and sanctions compliance questions, from counterparty screening to sanctions-neutral contracting and source-of-funds documentation. For principals with exposure to multiple offshore centres or multiple payment corridors, the individual counterparty review is one component of a broader compliance architecture.

The interaction with the principal's own governance structure is a practical question the review must address. Who within the principal's organisation makes the decision to proceed? Who signs off on the risk assessment? Who holds the file? These are not administrative questions. They are the questions a regulator or a bank compliance team will ask if the transaction is ever reviewed. The review route we run includes a governance note that identifies the decision owner and the record-keeping obligation.

Decision matrix: situation, instrument, route, timing, risk

Situation A: the principal is contracting with a BVI entity for the first time, the transaction value is material, and the principal's bank has not yet requested a file. The governing instrument is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (for the bank's obligations) and the United Nations Sanctions Ordinance (for the screening standard). The route is the four-stage review described above. The timing is before contract execution – a file produced after signing but before payment provides some protection, but the stronger position is a file completed before commitment. The risk of not acting is a payment hold at the point of execution and a disclosure to the bank's compliance team of a transaction that proceeded without a counterparty file.

Situation B: the principal has an ongoing relationship with a BVI entity, payments have been processing, and a new bank or a new correspondent has requested documentation. The governing instrument is the same. The route is a file rebuild: current corporate documents from the BVI registered agent, updated beneficial ownership mapping, current sanctions screening. The timing is as short as the BVI registered agent can turn around the updated corporate documents – typically measured in business days for a cooperative counterparty. The risk of not acting is a sustained payment block affecting the entire commercial relationship, not merely the single payment in question.

Situation C: the beneficial ownership chain of the BVI entity is complex – multiple layers, multiple jurisdictions, one or more PEP connections – and the bank has indicated it will require enhanced due diligence before approving the payment. The governing instrument remains the same, but the practical standard is higher. The route includes the enhanced-due-diligence narrative and, where relevant, source-of-wealth documentation for the ultimate beneficial owner. The timing depends on the depth of the chain and the cooperation of the counterparty. The risk is that an incomplete enhanced-due-diligence package generates a longer hold than a clear initial file, because the bank's compliance team has flagged the account and is unlikely to release the hold on the basis of a partial file.

Self-assessment checklist before engaging

The following questions identify whether a formal compliance review is required before contracting with a BVI entity. A "no" answer to any of the first four, or a "yes" to either of the last two, indicates that the review should proceed before contract execution.

• Do you have a current, dated beneficial ownership file for the BVI entity, including all intermediate layers in the ownership chain?
• Has the beneficial ownership file been screened against United Nations sanctions lists and, where the payment will process through a US dollar correspondent, against relevant US measures?
• Is the screening record dated within the last twelve months and since the last known change to the entity's directors or members?
• Is the file in a format that your bank's compliance team can review and accept without further elaboration from you?
• Has the BVI entity declined, delayed, or qualified its response to a beneficial ownership documentation request?
• Is any beneficial owner of the BVI entity a national of, or resident in, a jurisdiction subject to multilateral or wide-ranging sectoral measures?

The checklist is a starting point, not a substitute for the review. The assessment of what the file must contain, and what risk the file must address, depends on the specific facts of the transaction, the payment corridor, and the bank relationship. Parties should verify the current position before acting on any of the above against their specific circumstances.

Related practices

• Sanctions & AML – cross-border counterparty screening, AML compliance files and sanctions-neutral contracting
• Holding Structures – BVI, Cayman and offshore holding entity design and review for Asia-based groups
• Corporate Counsel – ongoing governance and document management for cross-border operating and holding entities

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Sanctions Due Diligence Deal Touching Cyprus Cyprus Briefing
• Sanctions Due Diligence Deal Touching United Kingdom Uk 3

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.