A compliance review before contracting with the United Kingdom entity

Banking access is the pressure point. A cross-border group moving capital between Hong Kong and the United Kingdom may hold sound commercial intentions and a clean counterparty – but without a documented compliance position, the payment channel is the first thing a correspondent bank will question. That is the trigger our desk sees most often: a transaction ready to sign, a bank asking questions, and a compliance file that does not yet exist.

A compliance review before contracting with a United Kingdom entity is a structured assessment of sanctions exposure, anti-money laundering obligations and counterparty risk, conducted under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (the primary AML instrument in Hong Kong) and with reference to the United Kingdom's own sanctions and financial-crime regime, so that the contracting parties, their banks and their advisers can evidence a clean and documented position before the transaction closes.

This note describes when the review is needed, how we run it, where locally licensed Hong Kong counsel join, what the client must own at the end, and how the Hong Kong–United Kingdom interface shapes each step.

When does a foreign principal actually need this review?

The immediate trigger is usually a bank's information request or a counterparty's onboarding questionnaire. Both ask the same underlying question: who owns the structure, where did the money come from, and does anything about this arrangement engage a sanctions list?

For a principal based in Asia, the Middle East or the CIS contracting with a United Kingdom entity, the question is structurally more complex than it looks. The United Kingdom maintains an autonomous sanctions regime administered by the Office of Financial Sanctions Implementation. That regime operates independently of any other state's measures. Hong Kong, for its part, implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. The two regimes do not mirror each other. A position clean under Hong Kong law may still carry exposure under United Kingdom rules if the ultimate obligor is a designated party, or if funds routing passes through a United Kingdom-regulated institution.

Our desk regularly sees situations where foreign counsel – US or European firms accustomed to advising on their own domestic regimes – have not mapped the Hong Kong leg. That gap matters. It leaves the contracting party unable to answer the bank's questions accurately and creates a file that no compliance officer can sign off.

Specific triggers that bring this to a head:

• A United Kingdom counterparty's legal team or bank requires a written sanctions-and-AML representation before executing the contract.
• A Hong Kong correspondent bank has placed a payment on hold pending source-of-funds documentation.
• The group's group-level compliance function has flagged a new Ultimate Beneficial Owner disclosure requirement in the United Kingdom.
• A prior compliance file was prepared for a different transaction and does not cover the current counterparty or structure.
• The transaction involves a BVI or Cayman holding entity above the operating entity, and the United Kingdom counterparty's advisers want the chain documented end to end.

The window-closing risk is real: once a bank has placed a payment on hold or a counterparty has served a notice requiring a compliance representation by a fixed date, the available time for a methodical review compresses sharply. Acting before that pressure arrives is almost always the better position.

The sequence described below addresses all of these triggers. It is designed to produce a file that is coherent, documented and defensible – for the bank, the counterparty and, if needed, a regulator on either side of the transaction.

The governing instruments on both sides of the transaction

The compliance review must be anchored in the instruments that actually bind the parties. Naming those instruments correctly is itself a deliverable: a compliance file that references the wrong regime, or that treats a United Kingdom statutory instrument as though it were a US regulation, will not satisfy a United Kingdom-regulated bank.

On the Hong Kong side, the primary instrument is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (which imposes customer due diligence, record-keeping and suspicious-transaction reporting obligations on financial institutions and designated non-financial businesses and professions). The United Nations Sanctions Ordinance gives domestic effect in Hong Kong to United Nations Security Council measures. No other state's autonomous sanctions regime has domestic legal force in Hong Kong, a fact that needs to be stated clearly in any document sent to a United Kingdom compliance team that may assume otherwise.

On the United Kingdom side, the relevant instruments are the statutory instruments made under the Sanctions and Anti-Money Laundering Act 2018 (the enabling framework for the United Kingdom's autonomous post-Brexit sanctions regime). The Office of Financial Sanctions Implementation administers financial sanctions; the National Crime Agency handles suspicious-activity reports. The Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations govern the AML obligations of United Kingdom-regulated entities transacting with foreign counterparties.

Why does this matter for a Hong Kong-side review? Because the United Kingdom-regulated party to the contract will conduct its own customer due diligence. What it cannot do is establish the source of funds, the beneficial ownership of the Hong Kong entity, or the status of the holding structure. That information must come from the Hong Kong side, documented to a standard that satisfies both the United Kingdom firm's compliance team and, if necessary, the United Kingdom's financial intelligence unit.

The Anti-Money Laundering and Counter-Terrorist Financing Ordinance and the regulators' AML guidelines provide the foundation for our analysis of the Hong Kong entity's position. The United Kingdom instruments define the standard of evidence the counterparty and its bank require.

The review also covers the international layer: United Nations consolidated lists, the Financial Action Task Force's country assessments (which inform both jurisdictions' risk ratings), and the Proceeds of Crime Act 2002's application to funds that may pass through a United Kingdom-regulated account. Each of these bears on the transaction in a distinct way, and conflating them produces a compliance file that answers the wrong questions.

The sequence described above sets the legal ground. Your transaction turns on the documents you hold now, the structure already in place, and the specific counterparty's onboarding standard – which is where the review is won or lost. For a preliminary read on your compliance position and the documentation route, email info@lockhartyip.com.

How does the cross-border interface between Hong Kong and the United Kingdom shape the review?

The Hong Kong–United Kingdom interface is the axis around which this entire review turns. It is not simply a matter of "UK rules apply in the UK and HK rules apply in HK." The reality is more exacting: a single transaction can simultaneously engage obligations in both systems, with consequences if either side's compliance is incomplete.

Hong Kong is a common-law jurisdiction with English as an official working language of the courts. The legal tradition is shared with the United Kingdom. That shared tradition makes cross-border cooperation between regulators and financial intelligence units straightforward – and means that a suspicious-transaction report filed in the United Kingdom can trigger a corresponding inquiry in Hong Kong without any treaty process.

Consider the most common fact pattern our desk encounters: a Hong Kong company, owned through a BVI holding entity, contracts with a United Kingdom trading entity. Funds flow from the United Kingdom to the BVI entity's bank account at a Hong Kong-regulated institution. The United Kingdom entity's bank – a UK-regulated firm – will apply its own source-of-funds and beneficial-ownership checks to that outflow. If it cannot satisfy itself on either point, it will suspend the payment. The Hong Kong bank may receive a corresponding information request.

The compliance review addresses both legs simultaneously. We map the beneficial ownership chain from the Hong Kong operating entity through the BVI holding entity to the ultimate individual owners. We document the source of funds in a form that satisfies the United Kingdom bank's anti-money laundering procedures. We confirm whether any party in the chain appears on a United Nations consolidated list. We produce a representation letter or compliance memorandum in a form the United Kingdom side can work with.

The United Kingdom's Sanctions and Anti-Money Laundering Act 2018 regime and Hong Kong's United Nations Sanctions Ordinance sit at different positions in the international sanctions architecture. The review explains that divergence factually, without advocacy, so that both compliance teams understand what each regime requires and what each side has done to satisfy it.

BVI and Cayman holding entities introduce a third system. Those jurisdictions operate their own economic-substance regimes and, in certain circumstances, their own beneficial-ownership registers. The review covers the offshore layer as well, to the extent it is visible from Hong Kong and relevant to the United Kingdom counterparty's questions. For matters requiring formal BVI or Cayman legal input, we coordinate with allied counsel admitted in those jurisdictions.

The cross-border interface also shapes the timing of the review. A United Kingdom-regulated entity will typically want to complete its own customer due diligence before signing. That means the compliance file needs to be ready before – not after – the transaction documents are exchanged. Our desk structures the review to run in parallel with the drafting process, so that the compliance output is available at the point the counterparty needs it.

The route we run: step by step

The review follows a defined sequence. Each step has a specific output. The client owns all of it at the end.

Step one: intake and scope definition. We take instructions on the transaction structure, the parties, the jurisdictions engaged, the payment route and the nature of the underlying commercial relationship. We identify which sanctions regimes are potentially relevant and which AML obligations fall on each party. We confirm the standard the United Kingdom counterparty requires – typically drawn from its own compliance policy or from its bank's onboarding form.

Step two: ownership and control mapping. We document the beneficial ownership chain from the contracting entity to the ultimate individual beneficial owner or owners. This includes any interposed holding entities in BVI, Cayman or other offshore centres. We identify individuals holding direct or indirect ownership above the relevant threshold and confirm their status against United Nations consolidated lists and, where the transaction requires it, other publicly available designations. This step produces a beneficial ownership memorandum.

Step three: source-of-funds review. We review the documentary record of the funds to be deployed in the transaction. The standard here is set by the United Kingdom counterparty's AML procedures and, where a regulated institution is involved, by the regulators' AML guidelines on both sides. We identify any gap between the documents the client holds and the documents the United Kingdom side will require, and we advise on how to close that gap.

Step four: sanctions clearance. We confirm the applicable sanctions perimeter for the transaction. On the Hong Kong side, that means United Nations-listed measures under the United Nations Sanctions Ordinance. On the United Kingdom side, it means the autonomous sanctions instruments made under the Sanctions and Anti-Money Laundering Act 2018. We identify any designations or country-specific measures that engage the transaction and advise on the compliance position. If a designated party appears anywhere in the structure, we advise on the applicable procedure for the client's own counsel in the relevant jurisdiction.

Step five: the compliance file and representations. We produce the compliance memorandum – a document addressed to the counterparty or its bank, setting out the ownership structure, the source of funds, the sanctions clearance and the governing instruments on each side. We also draft any representation or warranty language the client's advisers require for inclusion in the transaction documents. The file is written to be read by a United Kingdom compliance officer, not only by a Hong Kong lawyer.

Step six: locally licensed counsel coordination. Matters of Hong Kong law – including any formal filing, regulated-activity determination or court process – are handled together with locally licensed Hong Kong firms with whom we work. If the transaction requires a formal opinion on Hong Kong law, that opinion is issued by those firms. We coordinate the instruction and ensure the compliance file is consistent with any Hong Kong-law outputs.

Step seven: delivery and follow-on questions. We deliver the compliance file directly to the client. We are available to respond to follow-on questions from the United Kingdom counterparty's compliance team, either directly or through the client's transaction counsel. If the counterparty's bank raises questions after delivery, we advise on the appropriate response.

The sequence is designed to be completed within the transaction timetable. Our desk is accustomed to working against counterparty deadlines, and the intake call on a typical file produces an initial scope assessment within one business day.

If a prior compliance attempt produced an adverse response from a counterparty or bank – or if an existing file was prepared without reference to the United Kingdom sanctions and AML regime – a second read can identify the gap and the documents still needed. Write to info@lockhartyip.com with a brief description of the position.

What the client must own: documents and decisions

A compliance review is not something that can be outsourced entirely. Certain documents must come from the client, and certain decisions belong to the client alone. Understanding that boundary before the review begins saves time and avoids the most common source of delay.

The documents the client must hold and be prepared to share include: corporate constitutional documents and share registers for every entity in the chain; any register of beneficial ownership filed with a relevant registry; identity documents for all ultimate beneficial owners above the relevant threshold; transaction records evidencing the source of the funds to be deployed; and any prior sanctions clearance or compliance opinion obtained for a related transaction.

Many cross-border groups have these documents but have not organised them in a form that satisfies a United Kingdom compliance team. The beneficial ownership chain documented in a BVI register, for example, may not map directly onto the form a United Kingdom bank's onboarding questionnaire requires. Part of the review involves translating the existing documentation into the format the counterparty's compliance function actually uses.

The decisions that belong to the client include: whether to proceed with the transaction if a risk flag is identified; whether to restructure the payment route; and whether to seek a formal legal opinion from locally licensed counsel on any Hong Kong-law question the review raises. We advise on each of these points, but the instruction to proceed is always the client's.

One point our desk raises consistently: the compliance file produced for one transaction is not automatically valid for a different counterparty or a different payment route. The United Kingdom counterparty's bank may have a more exacting onboarding standard than the previous counterparty. A file that satisfied one bank's correspondent requirements may not satisfy another's. Where a client intends to transact repeatedly with United Kingdom counterparties, we advise on a standing compliance framework rather than a transaction-by-transaction approach.

This is also the point at which the interaction with other practices becomes relevant. A group holding its assets through a BVI or Cayman entity will want to ensure that the structure itself – its substance, its register of beneficial ownership and its economic-substance filings – is consistent with the compliance position taken in the review. That is a question for the holding-structures practice. See our work on sanctions and AML and the related notes on sanctions-neutral contracting through Hong Kong and sanctions due diligence on a deal touching the BVI.

Common mistakes and the risks they create

Several patterns recur on our desk. Each one produces a predictable problem.

Treating the United Kingdom as equivalent to the United States. The United Kingdom operates a post-Brexit autonomous sanctions regime that is legally distinct from any US measure. A compliance file prepared for a US-regulated counterparty will not cover the United Kingdom's designations or the specific procedures under the Sanctions and Anti-Money Laundering Act 2018. Presenting a US-compliant file to a United Kingdom bank as though it were a complete answer will, in our experience, produce a request for further information that delays the transaction by weeks.

Assuming Hong Kong's non-implementation of unilateral measures is a full answer. It is accurate that Hong Kong does not give domestic effect to unilateral measures of other states. But that answer applies to the Hong Kong leg of the transaction. It does not answer the United Kingdom-regulated bank's obligations under its own domestic regime. The review must address both positions, separately and accurately.

Omitting the holding-entity layer. A compliance file that covers only the Hong Kong operating entity and ignores the BVI holding entity above it will not satisfy a United Kingdom compliance team that has looked at the corporate chain. Beneficial ownership is traced to the ultimate individual, not the first legal entity. A file that stops at the BVI level produces an immediate follow-on question from the counterparty's bank.

Confusing AML and sanctions. The two regimes are distinct. Anti-money laundering obligations are about the provenance and nature of funds. Sanctions obligations are about the status of the parties. A file that addresses one but not the other is incomplete. Our review covers both, with distinct analysis for each, because a United Kingdom compliance officer will look for both.

Waiting until after the contract is signed. A payment can be suspended after execution if the bank has not received the compliance documentation it requires before processing. At that point, the client is in breach of its own payment obligation while simultaneously trying to produce a compliance file under time pressure. The review should precede – or at minimum run in parallel with – the transaction documentation.

Decision matrix: situation, instrument, route, timing, risk

Different transaction configurations call for different review approaches. The matrix below describes the most common situations our desk encounters.

Situation A: A Hong Kong company with individual Hong Kong residents as ultimate beneficial owners contracts directly with a United Kingdom trading entity. Payment flows through a Hong Kong-regulated bank. No offshore holding entity is interposed. The review is straightforward: ownership mapping, source-of-funds documentation, sanctions clearance against United Nations lists and United Kingdom designations, and a compliance memorandum. Timing is typically short. The principal risk is a gap in the source-of-funds record if the funds originate from a jurisdiction with a high Financial Action Task Force risk rating.

Situation B: The Hong Kong operating entity is owned by a BVI holding company, which is in turn owned by individuals resident in a jurisdiction that appears on a Financial Action Task Force monitoring list. The United Kingdom counterparty's bank has an enhanced due diligence policy for transactions involving entities from that jurisdiction. The review requires a more detailed ownership and source-of-funds analysis, coordination with BVI-admitted allied counsel to confirm the register position, and a compliance memorandum drafted to the enhanced due diligence standard. Timing is longer. The principal risk is a gap between the BVI register and the standard of beneficial-ownership disclosure the United Kingdom bank requires.

Situation C: The group has a prior compliance file prepared for an unrelated transaction. The United Kingdom counterparty is a regulated financial institution with its own AML obligations under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations. The prior file does not cover that specific counterparty's onboarding standard. The review assesses the delta between the existing file and the counterparty's requirements, produces supplementary documentation, and confirms whether any element of the prior analysis needs to be updated. Timing depends on the delta. The principal risk is assuming the prior file is adequate without checking the counterparty's specific standard.

Situation D: The transaction has already been signed. A payment has been held by the correspondent bank. The review is conducted under time pressure, prioritising the specific questions the bank has raised and producing a targeted response. This is the most constrained situation and produces the highest risk of an incomplete file. The lesson our desk draws, and states clearly to clients in this position, is that the review should have preceded the transaction.

Self-assessment: is a formal review needed before your transaction?

Not every transaction requires a full review. The following questions help a principal or in-house counsel identify whether a formal engagement is warranted.

• Does the contracting party include an entity in a jurisdiction that appears on a Financial Action Task Force monitoring list?
• Is there an offshore holding entity – BVI, Cayman, or otherwise – interposed in the ownership chain?
• Has a bank, on either side of the transaction, already requested source-of-funds or beneficial-ownership documentation?
• Does the United Kingdom counterparty's contract include a sanctions or AML representation?
• Are any of the ultimate beneficial owners nationals of a jurisdiction subject to United Nations Security Council sanctions measures?
• Does the group hold existing compliance documentation that was prepared for a different counterparty or a different payment route?
• Is the total transaction value above the enhanced due diligence threshold applied by the correspondent bank?

If the answer to any of these questions is yes, a formal review is likely warranted. If the answer to more than two is yes, acting before the transaction closes is strongly advisable. A compliance file prepared after the fact addresses a different and more difficult problem.

On the question of timing: a compliance review does not need to hold up the commercial negotiation. The intake and scoping step can run immediately once the commercial terms are broadly agreed, and the review can be completed before the execution date. Our desk is accustomed to that timetable.

The myth of the self-certifying compliance file

A misconception our desk encounters regularly: that an internal declaration from the client's own officers – stating that no designated party is involved and that funds are of legitimate origin – is sufficient for a United Kingdom counterparty's compliance purposes. It is not, and understanding why it is not matters for the transaction timeline.

A United Kingdom-regulated entity cannot discharge its own AML and sanctions obligations by relying on an unverified declaration from the counterparty. Its regulators expect independent, documented verification. That verification must come from a source with access to the relevant registers, the beneficial ownership chain and the source-of-funds record. An officer's certificate from the client entity itself does not meet that standard.

The same point applies to a compliance opinion produced by a firm that advises only on one side of the transaction. A compliance memorandum prepared by United Kingdom counsel, covering only the United Kingdom regime, will leave the Hong Kong and offshore layers unaddressed. A memorandum prepared by Hong Kong counsel addressing only the United Nations sanctions position will not explain the United Kingdom autonomous sanctions perimeter to the counterparty's compliance team. The review that works is one that addresses both sides, in the language each compliance team actually uses.

That is the argument for a cross-border compliance review rather than a jurisdiction-specific opinion. It is also the argument for engaging cross-border counsel with a specific desk for this work rather than instructing generalist advisers on each side separately and hoping the files are consistent.

Related practices

• Holding Structures – structuring BVI and Cayman holding entities above Hong Kong operating companies
• Corporate Counsel – governance, registers and beneficial ownership across jurisdictions

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Sanctions Aml
• Sanctions Neutral Contracting Approach Through Hong Kong Briefing
• Sanctions Due Diligence Deal Touching Bvi Bvi Analysis

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.