Anti-Money Laundering Compliance Guide for Hong Kong Trust Practitioners

Hong Kong’s trust industry is facing its most significant compliance overhaul in a decade, driven by the Financial Action Task Force’s (FATF) fourth round of mutual evaluation recommendations, which Hong Kong formally adopted in September 2024. The SFC’s revised Anti-Money Laundering and Counter-Terrorist Financing Guidelines (effective 1 January 2025) now explicitly require trust companies licensed under the Trust Ordinance (Cap. 29) to conduct enhanced due diligence (EDD) on all non-Hong Kong resident settlors and beneficiaries where the trust holds assets exceeding HKD 8 million. This regulatory tightening comes as the HKMA reported 1,247 suspicious transaction reports (STRs) linked to trust structures in 2024, a 34% year-on-year increase from 931 in 2023 (HKMA Annual Report, 2024). For trust practitioners managing cross-border structures—particularly those involving PRC, BVI, or Cayman Islands situs—the compliance burden has shifted from a checklist exercise to a continuous, risk-based obligation. Failure to comply carries penalties under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615) of up to HKD 1 million and seven years’ imprisonment per offence. This guide provides a regulatory roadmap grounded in current Hong Kong law, focusing on the specific requirements for trust practitioners, from client onboarding through ongoing monitoring and annual reporting.

The Regulatory Framework: AMLO and the SFC’s 2025 Guidelines

The primary legislative anchor for anti-money laundering compliance in Hong Kong’s trust sector is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), which applies to all trust companies licensed under the Trust Ordinance (Cap. 29). The SFC’s Guidelines on Anti-Money Laundering and Counter-Financing of Terrorism (the “SFC AML Guidelines”), last revised in December 2024 and effective 1 January 2025, incorporate FATF’s updated recommendations on beneficial ownership transparency and virtual asset exposure. Section 4.2 of the SFC AML Guidelines now mandates that trust practitioners treat any structure where the settlor or beneficiary is a politically exposed person (PEP) from a jurisdiction identified by the FATF as having strategic AML deficiencies as a high-risk client, requiring EDD measures including independent source-of-wealth verification from a licensed accountant or lawyer. The HKMA’s Supervisory Policy Manual (SPM) module AML-1, updated in March 2025, further clarifies that trust companies must maintain a written AML policy approved by their board of directors, reviewed annually, and filed with the HKMA within 30 days of any material change.

Scope of Application: Who Must Comply

All licensed trust companies under the Trust Ordinance (Cap. 29) are classified as “financial institutions” under Schedule 1 of the AMLO. This includes both corporate trustees and individual trustees acting in the course of business. As of 31 December 2024, the HKMA registered 1,023 licensed trust companies, of which 312 reported cross-border trust structures involving PRC assets (HKMA Trust Company Registration Database, 2024). The SFC’s 2025 guidelines explicitly extend to trust companies that also hold Type 9 (asset management) licences under the Securities and Futures Ordinance (Cap. 571), which accounts for 187 entities as of Q1 2025. These dual-licensed firms face additional obligations under the SFC’s Code of Conduct (paragraph 12.1), requiring them to integrate AML checks into their portfolio management systems.

Key Obligations Under the AMLO

The AMLO imposes five core obligations on trust practitioners: customer due diligence (CDD), record-keeping, suspicious transaction reporting, internal controls, and independent audit. Section 5(1) of the AMLO requires CDD to be conducted at the point of establishing a trust relationship, before any asset transfer or distribution. For trusts with a PRC settlor, the HKMA’s circular of 15 February 2025 (ref: B9/1C) specifically requires verification of the settlor’s identity using the PRC National Identity Card (二代身份证) and, where the trust holds real estate in Hong Kong, a land registry search to confirm the source of funds. Record-keeping obligations under Section 20 of the AMLO mandate retention of all CDD records for at least seven years after the termination of the trust relationship, or longer if the trust is subject to ongoing litigation or regulatory investigation.

Client Onboarding and Due Diligence Requirements

The onboarding process for a new trust client is the highest-risk moment for AML compliance, as it represents the point at which illicit funds may enter the structure. The SFC AML Guidelines (Section 5.1) require trust practitioners to classify each client into one of three risk categories—low, standard, or high—based on a documented risk assessment that considers the client’s jurisdiction, occupation, source of wealth, and intended use of the trust. For trusts where the settlor is a corporate entity registered in a jurisdiction identified by the FATF as having weak beneficial ownership transparency—such as the British Virgin Islands (BVI), Seychelles, or Vanuatu—the default classification must be high risk, triggering mandatory EDD.

Standard CDD vs Enhanced Due Diligence

Standard CDD under Section 5(1) of the AMLO requires the trust practitioner to obtain the full legal name, date of birth, nationality, and residential address of the settlor, each trustee, each beneficiary (whether named or by class), and any protector. For individual clients, a valid passport or Hong Kong Identity Card is the minimum acceptable identification document. For corporate clients, the practitioner must obtain the certificate of incorporation, register of directors, and register of shareholders, all dated within the previous six months. EDD, mandated under Section 5(3) of the AMLO for high-risk clients, adds three additional requirements: (a) independent verification of source of wealth from a licensed accountant or lawyer, covering the preceding 24 months of financial activity; (b) identification of the ultimate beneficial owner (UBO) through a chain of ownership, with supporting documentation for each intermediate entity; and (c) a written explanation of the business rationale for the trust structure, signed by the settlor. As of 1 January 2025, the SFC AML Guidelines (Section 5.2) further require that EDD be completed within 30 days of the initial client meeting, with any failure to complete triggering an automatic STR filing.

Beneficial Ownership Transparency

The FATF’s Recommendation 24, which Hong Kong implemented via the Companies Ordinance (Cap. 622) amendments in 2023, requires all Hong Kong-incorporated entities to maintain a register of significant controllers. For trust structures, the SFC AML Guidelines define the “beneficial owner” as any individual who ultimately owns or controls 25% or more of the trust’s assets, or who exercises effective control over the trust’s decisions—including the settlor, beneficiaries with vested interests, and protectors with veto powers. The HKMA’s guidance of 10 March 2025 (ref: B9/2C) clarifies that for discretionary trusts, the class of beneficiaries must be identified with sufficient specificity to allow the trust practitioner to determine whether any individual beneficiary’s interest exceeds the 25% threshold. Where the trust holds a controlling stake in a Hong Kong-listed company, the trust practitioner must also comply with Part XV of the Securities and Futures Ordinance (Cap. 571), which requires disclosure of interests to the HKEX.

Ongoing Monitoring and Annual Compliance Cycle

AML compliance does not end at onboarding. The AMLO requires trust practitioners to conduct ongoing monitoring of all trust relationships, with the frequency and intensity of monitoring determined by the client’s risk classification. The SFC AML Guidelines (Section 6.1) mandate that low-risk clients be reviewed at least once every 24 months, standard-risk clients every 12 months, and high-risk clients every six months. Each review must include a re-verification of the client’s identity documents, a review of all transactions during the period, and an updated source-of-wealth assessment if the trust has received additional contributions or distributions exceeding HKD 2 million.

Transaction Monitoring and STR Reporting

Trust practitioners must implement systems to monitor all transactions passing through the trust—including contributions, distributions, and investment redemptions—for unusual patterns. The HKMA’s Guidelines on Suspicious Transaction Reporting (revised January 2025) define a “suspicious transaction” as any transaction where the trust practitioner has reasonable grounds to suspect that the property involved is the proceeds of an indictable offence under Hong Kong law, including tax evasion under the Inland Revenue Ordinance (Cap. 112). Section 25A of the AMLO requires that any STR be filed with the Joint Financial Intelligence Unit (JFIU) within 15 business days of the suspicion arising. In 2024, the JFIU received 8,912 STRs from the financial sector, of which 1,247 were linked to trust structures—a 34% increase from 931 in 2023 (HKMA Annual Report, 2024). The most common triggers for trust-related STRs were: (a) unexplained cash contributions exceeding HKD 5 million from a single source; (b) contributions from jurisdictions on the FATF’s high-risk list; and (c) rapid distribution of assets to beneficiaries in multiple jurisdictions within a 12-month period.

Annual AML Compliance Audit

Every licensed trust company must commission an independent AML compliance audit at least once per calendar year, as required by Section 7 of the AMLO. The audit must be conducted by a firm registered with the Hong Kong Institute of Certified Public Accountants (HKICPA) and must cover the trust company’s AML policies, CDD records, STR filing procedures, and staff training records. The audit report must be submitted to the HKMA within 90 days of the end of the trust company’s financial year. As of 2025, the HKMA has the power to conduct on-site inspections without prior notice, and in 2024 conducted 47 such inspections, resulting in 12 enforcement actions including fines totalling HKD 8.3 million (HKMA Enforcement Report, 2024). Common deficiencies identified include incomplete CDD records for beneficiaries in discretionary trusts and failure to update risk classifications after a change in the settlor’s jurisdiction.

Cross-Border Structures and Jurisdictional Risks

Hong Kong’s position as a gateway for PRC capital means that a significant proportion of trust structures involve cross-border elements. The HKMA’s 2024 survey of licensed trust companies found that 67% of trusts by asset value involved a non-Hong Kong settlor, with PRC nationals accounting for 48% of all settlors (HKMA Trust Industry Survey, 2024). These structures present unique AML challenges, particularly around verifying the source of funds from jurisdictions with less transparent financial systems.

PRC Settlors and the 外汇管制 (Foreign Exchange Control) Challenge

For trusts with PRC settlors, the HKMA’s circular of 15 February 2025 (ref: B9/1C) requires trust practitioners to obtain evidence that the funds transferred into the trust have complied with PRC foreign exchange regulations under the People’s Bank of China (PBOC) Administrative Measures for Individual Foreign Exchange (2016). Specifically, the trust practitioner must obtain a copy of the settlor’s PRC foreign exchange filing (境外投资备案) for any single transfer exceeding USD 50,000, or a written legal opinion from a PRC-licensed law firm confirming that the transfer is exempt from filing requirements. Failure to do so may result in the trust being classified as high risk, with mandatory EDD and quarterly reviews. The SFC AML Guidelines (Section 5.3) further require that for PRC settlors who are also PEPs—defined as officials at the county level or above under PRC law—the trust practitioner must obtain independent verification of the settlor’s source of wealth from a Hong Kong-licensed accountant, covering the preceding five years.

VIE Structures and Beneficial Ownership Complexity

Where a Hong Kong trust holds assets in a PRC variable interest entity (VIE) structure—common in technology and education sectors—the beneficial ownership chain can involve multiple layers of BVI, Cayman, and Hong Kong holding companies. The SFC AML Guidelines (Section 5.4) require the trust practitioner to map the entire ownership chain to the ultimate individual beneficial owner, with supporting documentation for each intermediate entity. For VIE structures, the HKMA’s guidance of 10 March 2025 (ref: B9/2C) clarifies that the “effective control” test applies to the individuals who hold the VIE contractual rights—typically through a series of exclusive call options and voting rights agreements—rather than the shareholders of the onshore PRC operating company. This means that the trust practitioner must identify and verify the identity of the individuals who control the VIE agreements, even if they are not formal shareholders of the trust.

Enforcement Trends and Practical Takeaways

The HKMA’s enforcement trajectory indicates a clear shift toward stricter penalties for AML compliance failures in the trust sector. In 2024, the HKMA imposed fines totalling HKD 8.3 million on trust companies, up from HKD 4.1 million in 2023, with the largest single fine of HKD 2.5 million levied against a mid-sized trust company for failing to conduct EDD on a PRC PEP settlor (HKMA Enforcement Report, 2024). The SFC also brought three criminal prosecutions under the AMLO in 2024, resulting in two convictions with sentences of 18 months’ imprisonment each. These enforcement actions underscore the need for trust practitioners to treat AML compliance as a continuous, board-level priority rather than a periodic administrative task.

Actionable Takeaways for Trust Practitioners

1. Implement a risk-based client classification system that automatically flags any trust involving a non-Hong Kong settlor from a jurisdiction on the FATF’s high-risk list as high risk, triggering mandatory EDD within 30 days.

2. For all trusts with PRC settlors, obtain a written legal opinion from a PRC-licensed law firm confirming compliance with foreign exchange regulations for any single transfer exceeding USD 50,000, and retain this opinion in the CDD file for seven years after trust termination.

3. Conduct annual AML compliance audits using an HKICPA-registered firm, and ensure the audit covers at least 10% of all trust files by random sampling, with 100% coverage of high-risk files.

4. Maintain a written AML policy approved by the board of directors, reviewed annually, and filed with the HKMA within 30 days of any material change, including changes to the trust company’s ownership or key personnel.

5. Train all staff handling client onboarding or transaction monitoring on the SFC’s 2025 AML Guidelines, with a minimum of four hours of CPD training per year, and document all training sessions in a log that is available for HKMA inspection.