Enhanced Due Diligence for Politically Exposed Persons in Hong Kong

A politically exposed person (PEP) is someone entrusted with a prominent public function, along with relevant family members and close associates under the applicable rules. The concern is not that every PEP is corrupt. Public position can create access to public funds or influence, so a financial institution must consider whether the relationship presents elevated money-laundering or terrorist-financing risk.

For an SFC-regulated intermediary, PEP screening is part of customer due diligence. The firm should identify the customer and beneficial owners, understand the purpose and intended nature of the relationship, assess risk, and keep the information current. A screening hit is a prompt to investigate and resolve identity, role, jurisdiction, and timing; it is not by itself proof of wrongdoing or an automatic reason to reject a customer.

Hong Kong PEP categories and risk

Hong Kong’s amended framework distinguishes non-Hong Kong PEPs, Hong Kong PEPs, and PEPs of an international organization. A non-Hong Kong PEP generally presents a higher baseline risk and requires enhanced customer due diligence. For Hong Kong PEPs and international-organization PEPs, enhanced measures are required where the relationship is assessed as high risk. The exact status and required treatment depend on the current statutory definition and the SFC AML/CFT Guideline.

Enhanced measures in practice

Enhanced due diligence is risk-sensitive rather than a single checklist applied identically to every person. Depending on the applicable PEP category and the assessed risk, measures can include obtaining senior-management approval before establishing or continuing the relationship, taking reasonable steps to establish source of wealth and source of funds, and conducting enhanced ongoing monitoring. A firm should record its reasoning, the information reviewed, approvals, unresolved gaps, and the controls chosen.

• Source of wealth asks how the person accumulated their overall wealth; source of funds asks where the money for a particular account or transaction came from.
• The firm should use a proportionate level of evidence. The SFC does not expect identical procedures or decades-old documents in every case; the evidence should fit the risk and what is reasonably available.
• Ongoing monitoring should test whether transactions and account activity remain consistent with the customer profile and the stated purpose of the relationship.
• If risk cannot be managed or required checks cannot be completed, the firm should follow its escalation and relationship-exit procedures and consider any separate suspicious-transaction reporting obligations.

PEP screening is not the same as suspicious-transaction reporting

PEP status triggers risk assessment and, where applicable, enhanced due diligence. It does not automatically establish suspicion or require a suspicious transaction report. Conversely, a person who is not a PEP can still present suspicious activity. Staff should escalate facts that create knowledge or suspicion under the separate reporting framework, without tipping off the customer.

Exam distinctions to remember

• A PEP designation is a risk factor, not an accusation.
• Enhanced due diligence is mandatory for the relevant higher-risk PEP categories; for Hong Kong and international-organization PEPs, the high-risk assessment matters.
• Source of wealth and source of funds answer different questions.
• Senior-management approval, where required, is not a substitute for due diligence or ongoing monitoring.
• A PEP match does not itself equal a suspicious transaction report.

Key takeaway

Identify the PEP category, assess the actual relationship risk, apply the corresponding enhanced measures, and keep a defensible record. Avoid treating PEP status as either automatic misconduct or a reason to skip ordinary monitoring.

PEP status is a risk factor, not an automatic refusal

Hong Kong AML/CFT requirements distinguish domestic, foreign and international-organization PEPs and apply risk-based enhanced measures. A customer or beneficial owner’s PEP status does not by itself prove criminal conduct or require a firm to reject every relationship. The firm should understand the person’s public function, geography, ownership, source of wealth and source of funds, and assess the transaction purpose. Screening should cover relevant family members and close associates where the statutory definition and guidance require it.

Apply enhanced controls and senior approval

Where the rules classify a PEP relationship as high risk, the institution should obtain senior-management approval, establish source of wealth and source of funds, and conduct enhanced ongoing monitoring as applicable. A risk-based assessment should be documented and refreshed when the person’s position, ownership structure or transaction pattern changes. “Source of wealth” concerns how overall wealth was accumulated; “source of funds” concerns the origin of money used in the particular relationship or transaction. A salary document for the current transfer may not explain the customer’s accumulated wealth.

Monitor and distinguish reporting

PEP screening and suspicious-transaction reporting are separate controls. A match calls for verification and risk assessment; it does not automatically establish grounds for an STR. Conversely, absence of a PEP match does not remove the duty to report suspicious activity. Staff should escalate unexplained wealth, opaque intermediaries, inconsistent transaction purpose or attempts to avoid controls to the MLRO. Avoid telling the customer that an STR is being considered or filed. On the exam, state identification, risk assessment, approval, source inquiries, enhanced monitoring and confidentiality.

Practical control and exam application

A PEP file should show the evidence behind a match decision, not just a screening result. Confirm identity and public role, distinguish a false positive from a true match, identify the relevant family or close-associate connection, and record senior approval where required. Source-of-wealth work should be proportionate but capable of explaining how wealth accumulated; source-of-funds checks should trace the actual assets entering the account. Ongoing monitoring then tests whether activity fits the documented profile. Review the relationship when office changes, adverse information appears or transaction behavior shifts.