Source of Wealth Checks: When Hong Kong Firms Need More Than a Basic Profile

SFC AML guidance does not require a detailed source-of-wealth investigation for every customer. A firm should apply enhanced measures in higher-risk situations, including specified PEP relationships and other cases presenting elevated risk. The level of evidence should be proportionate, help explain the customer’s overall wealth, and inform ongoing monitoring.

Source of wealth is not the same as source of funds

Source of wealth asks how a customer or beneficial owner accumulated their overall assets over time—for example, business ownership, salary, inheritance, or investments. Source of funds asks where the money for a particular transaction or relationship came from. A customer may have substantial overall wealth but send a particular payment from an unexplained third party. Both questions matter, but they answer different things.

Use a risk-based approach

The SFC AML/CFT FAQs state that a firm does not need to establish source of wealth for every customer. It is required in high-risk situations, such as a non-Hong Kong PEP, a high-risk relationship involving a Hong Kong or international-organisation PEP, or another relationship whose nature presents high ML/TF risk. The firm decides depth based on risk and does not need to apply the same procedure to all high-risk customers.

What a basic profile can support

For a non-high-risk client, information such as occupation, business nature, and purpose of the relationship may provide a basic understanding of expected wealth and activity. This lets the firm assess whether account balances and the value and volume of transactions align with the profile. A thin profile can make meaningful monitoring impossible; the firm should obtain enough context to understand expected behavior without demanding irrelevant detail.

Evidence should be proportionate

For higher-risk customers, the firm may seek reliable information about business ownership, employment, asset sales, inherited wealth, or other wealth sources. Evidence can include public records, financial statements, contracts, credible databases, or documents appropriate to the person’s circumstances. SFC guidance cautions against impractical collection of evidence dating back decades when risk does not justify it. The objective is a reasonable understanding, not an unbounded dossier.

PEPs and approval

PEP status does not mean a person is suspected of a crime. It is a risk factor that calls for enhanced CDD and required senior-management approval, depending on the category and applicable AML rules. Firms should understand the customer’s role, geography, ownership, source of wealth, and account activity. Keep the process respectful and confidential, and do not tell a customer that a particular internal risk flag has been assigned.

Use source of wealth after onboarding

The collected profile should actually inform ongoing monitoring. If a client who reports wealth from a private business suddenly moves large sums through unrelated entities or trades inconsistent with known objectives, staff should review the changes. Source-of-wealth information is not a one-time form kept in an archive. Trigger events, ownership changes, major transactions, and adverse information may require updating the relationship picture.

Example: investor with a public profile

A corporate executive opens an account and expects to invest part of their annual compensation. Ordinary profile information may be enough initially. Later, the client begins moving very large amounts from an unrelated offshore company. The firm should identify the source of the specific funds and determine whether the new activity is consistent with the customer’s overall wealth and profile; it should not assume that the client’s job title explains every transfer.

Documentation and privacy

Record the risk rationale, information gathered, evidence relied upon, unresolved gaps, approvals, and how the profile informs expected activity. Limit access to those who need it. If information cannot be verified or the customer refuses to provide material details, escalate to compliance to decide whether the firm can establish or continue the relationship under its policies. Do not fabricate a plausible explanation in the system to close a checklist.

Paper 1 takeaway

Source-of-wealth checks are risk-based, deeper for specified higher-risk relationships, and intended to make the customer’s overall financial profile understandable. They feed ongoing monitoring rather than replace it.

Operational details that strengthen the control

Source-of-wealth enquiries should be designed around the facts that make the customer higher risk. A PEP relationship, complex ownership chain, high-risk jurisdiction, unexplained third-party payments, or activity inconsistent with the stated business may each require different information. The firm should document why the evidence is reliable enough for its conclusion and what gaps remain. Avoid treating a single bank statement as proof of overall wealth if the customer’s funds came through another unexplained entity. Conversely, do not demand every historical record if a reasonable set of current documents and independent checks provides a sound picture. Senior management should review higher-risk relationships at the level required by the AML framework.

How to apply it in a real case

A source-of-wealth review should lead to an expected-activity profile that can be monitored. For example, if wealth comes primarily from a privately held business sale, the firm can record the expected transaction size and likely funding route. Later transfers from unrelated entities can then be compared with that baseline. A profile should not be artificially narrowed to fit every new transaction; material changes call for a review and, where appropriate, updated evidence. Keep the customer’s explanation, the independent checks, the approval, and the resulting monitoring assumptions linked.

A second-line reviewer should be able to understand why the information gathered was enough for the assessed risk. If the file only says “source verified,” it does not show which evidence supported the conclusion.

The customer’s profile should record both the source and the limits of the firm’s understanding. Clear limits help staff know which future transfers require follow-up instead of assuming that all wealth has been explained.

Points to carry into practice

• Check current SFC rules, guidance and firm procedures for the exact requirement.
• Record the facts, escalate uncertainty and protect client interests.