Suspicious Transaction Reporting and Tipping-Off in Hong Kong

A Hong Kong financial institution that knows or suspects property represents proceeds of crime or terrorist property must disclose that suspicion to the Joint Financial Intelligence Unit as soon as it is reasonable to do so. Staff escalate internally under AML procedures, preserve the basis for suspicion, and avoid tipping off the client. An STR is not a finding of guilt and does not replace other controls.

Suspicion is a reporting trigger

Under Hong Kong’s relevant ordinances, a person who knows or suspects that property represents proceeds of crime or terrorist property has a statutory disclosure duty. The SFC AML/CFT Guideline explains the reporting framework for licensed corporations and associated entities. Staff should recognize that a report may be required even when the person cannot identify the precise underlying offence or prove criminal conduct.

What staff should do with a red flag

Frontline staff should promptly submit the facts through the firm’s internal escalation route to the money laundering reporting officer (MLRO) or designated AML team. Provide objective details: transaction amount, dates, parties, stated purpose, account history, unusual pattern, and documents reviewed. Do not decide alone that a transaction is criminal or that no report is needed because the client has a plausible explanation. The MLRO evaluates the information against the full relationship and applicable policy.

The MLRO and JFIU

The MLRO reviews internal disclosures and decides whether the firm has grounds to file an STR with the JFIU using the current reporting channel. The report should explain the facts that gave rise to suspicion. The firm should maintain records of the internal review, rationale, and any external filing according to policy and legal requirements. Staff should cooperate with follow-up requests without disclosing protected information to the customer.

Do not tip off

Tipping off means alerting a customer or another person in a way that could prejudice an investigation or disclosure. Do not tell the client that an STR has been or may be filed, that law enforcement is reviewing them, or that a transaction was held specifically because of a suspicious-activity report. Continue ordinary customer interactions using neutral, approved language and consult the MLRO before requesting information if the request could reveal the suspicion.

The report is not a verdict

An STR is a confidential disclosure of suspicion, not a public accusation or conclusion that the customer committed a crime. Filing does not automatically mean the relationship must end or every transaction must be frozen. The firm follows the applicable consent or no-consent process, risk controls, and law-enforcement instructions. Staff should not promise the customer that funds can be moved or that the relationship will continue.

A practical example

A client sells a modest portfolio, then asks for the proceeds to be sent to an unrelated third party in another jurisdiction through an unusual payment route. Staff document the instruction and alert the MLRO. The MLRO considers the client profile, source of funds, stated relationship, and transaction context. If suspicion forms, the firm files with JFIU as soon as reasonable and protects confidentiality. The payment decision follows separate controls and legal advice.

Urgent customer instructions

A suspicious instruction can be time-sensitive. Staff should not delay internal escalation until every document is obtained. The MLRO can determine whether a report is needed before the transaction, whether further enquiries are appropriate, and whether legal or law-enforcement consent is relevant. If a client asks why a transaction is delayed, use approved neutral wording and avoid references to an STR or suspicion.

Records and staff training

Firms need staff training that makes indicators recognizable in the business they conduct. Internal reporting should be accessible, confidential, and protected from retaliation. Preserve the source documents and decision history, limit access to need-to-know personnel, and record the timing of escalation. A clear record helps the firm show what it knew, when it knew it, and how it responded.

Paper 1 takeaway

Recognize the statutory duty, escalate suspicions to the MLRO, disclose to JFIU as soon as reasonably practicable when required, and never tip off. A suspicion is not proof of guilt.

Operational details that strengthen the control

The internal disclosure should be factual rather than conclusory. Include what happened, what is unusual, the customer’s explanation, the documents available, and why the activity does or does not fit the account profile. The employee need not investigate beyond their role or confront the client to establish a crime. The MLRO determines whether the total information meets the suspicion threshold and what further steps are appropriate. Keep the disclosure confidential and use approved secure channels. A failure to report internally because a colleague believes the client is reputable can be a serious control failure: reputation does not eliminate the duty to assess the transaction.

How to apply it in a real case

An STR does not remove the need to make a separate decision about whether to continue a transaction or relationship. A firm may have contractual, legal, sanctions, fraud, or client-asset obligations that determine the immediate operational action. The MLRO and legal/compliance teams should coordinate those steps. Frontline staff should not promise that the transaction will proceed because a report was filed, and should not disclose a reporting decision when explaining a delay. Keep the language neutral and consistent across teams.

If a customer asks why a transaction is delayed, staff should use a pre-approved explanation such as a routine verification review. They should not invent a reason or hint at law-enforcement involvement.

If the client’s explanation resolves the concern, retain the basis for that conclusion. Closing an alert without documenting the facts makes later review difficult and can hide inconsistent decision-making.

Points to carry into practice

• Check current SFC rules, guidance and firm procedures for the exact requirement.
• Record the facts, escalate uncertainty and protect client interests.