Under Section 5 of Schedule 2 to the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and the Hong Kong Monetary Authority (HKMA) AML/CFT Guideline, every licensed commercial bank in Hong Kong (including HSBC, Bank of China (Hong Kong), OCBC, Standard Chartered, and Hang Seng Bank) has a continuous statutory duty to conduct Ongoing Customer Due Diligence (ODD / Periodic KYC Review) on corporate account holders—typically every 1 to 3 years or whenever a trigger event occurs:
- 1. Latest Annual Return (Form NAR1): Cross-checked directly against the Companies Registry's ICRIS database to verify that the company remains "Live", has no overdue statutory filings, and that its current directors and shareholders match the bank's authorized signatory mandate and Ultimate Beneficial Owner (UBO) records.
- 2. Valid Business Registration Certificate (BRC): Confirms that the company has fulfilled its annual obligation under the Business Registration Ordinance (Cap. 310) and holds an active 8-digit BRN for the current year.
- 3. Significant Controllers Register (SCR): Verifies natural persons holding more than 25% of issued shares or voting rights under Cap. 622 Part 12 Division 2A (note that many banks apply a stricter internal KYC threshold of 10% or more).
- 4. CPA-Audited Financial Statements & Tax Filings: Because a private company's accounts are not public on the Companies Registry, banks request the latest CPA-audited financial statements (plus representative trade contracts, invoices, and bills of lading) to confirm that account turnover aligns with audited revenue.
1. The 5 Core Cross-Checks Banks Perform During a Periodic KYC Review
When you receive a Periodic Customer Information Update / Ongoing Due Diligence Notice via business internet banking or registered post, the bank's compliance team is not merely collecting files—they have already queried your company's public registry profile on ICRIS and are cross-checking five specific dimensions:
| Verification Dimension | Primary Statutory Document Checked | What the Bank's Compliance Team Cross-Checks |
|---|---|---|
| 1. Legal Existence & Filing Punctuality | Form NAR1 (with 11-digit ICRIS barcode) & CR Profile | Whether the company status is "Live", whether the latest anniversary Form NAR1 has been filed within the 42-day window, and whether any winding-up petitions or striking-off notices exist. |
| 2. Tax & Business Registration Validity | Current Year Business Registration Certificate (BRC) | Whether the 1-year or 3-year BRC is currently within its validity period and whether the nature of business (Branch 000) matches actual account activities. |
| 3. Directors & Authorized Signatories | Form NAR1 Section 10 & Form ND2A / ND2B | Whether the directors listed on the latest Form NAR1 match the bank's account mandate, and whether any director's passport/ID number has changed without updating the bank. |
| 4. Shareholding & Beneficial Ownership (UBO) | Form NAR1 Section 11, Form NSC1, Stamped Transfer & SCR | Whether any share allotment or share transfer has altered the Ultimate Beneficial Owners (UBOs holding ≥25% under Cap. 615, or ≥10% under enhanced bank policy). |
| 5. Financial Scale & Transaction Consistency | CPA-Audited Financial Statements & Form BIR51 | Whether total annual inflows/outflows in the bank account are consistent with the audited revenue, tax return (BIR51), and commercial contracts/shipping documents. |
2. Why Overdue Form NAR1 or Unreported Share Transfers Trigger Account Restrictions
In corporate secretarial practice, two recurring compliance oversights frequently cause delays during bank KYC reviews:
2.1 Overdue Annual Return (Form NAR1) or Expired BRC
Because banks subscribe to automated Companies Registry data feeds, if your company passes the 42nd day after its incorporation anniversary without registering Form NAR1, the bank's compliance system flags the entity as having an overdue statutory filing. If an overdue Form NAR1 remains unfiled for several months, the bank may suspect that the company has been abandoned or is at risk of being struck off under Cap. 622 s.746. Filing Form NAR1 promptly via the CR e-Services Portal (generating an immediate 11-digit barcode, such as 70005515351 for Airwallex (Hong Kong) Limited) resolves this check immediately.
2.2 Updating Form NAR1 Without Updating the Bank Mandate
Many companies transfer shares or appoint a new director during the year, properly file Form ND2A or report the updated shareholding on the next Form NAR1, yet forget to notify their commercial bank within 30 days as required by the bank's terms and conditions. When the bank pulls the new Form NAR1 during its periodic review and discovers an unverified new shareholder or director, it will pause the review and require a formal Mandate & UBO Change Application supported by stamped Instruments of Transfer, updated Significant Controllers Register (SCR), and certified ID/address proofs.
3. Complete Document Preparation Checklist for Corporate Bank KYC Reviews
When responding to a bank's periodic due diligence request, prepare and verify the following documents well before the deadline stated in the bank's notice (typically 30 to 45 days):
Statutory Corporate Filings (CR & IRD)
Download and verify on 86hc.com Company Search the latest registered Annual Return (Form NAR1) bearing its 11-digit ICRIS barcode, the valid Business Registration Certificate (BRC) for the current year, and any Form ND2A / ND2B / NR1 / NSC1 or stamped share transfer documents filed since account opening or the last KYC review.
Internal Statutory Registers & CPA Certified True Copies (CTC)
Ensure the company's internal Register of Members (ROM), Register of Directors (ROD), and Significant Controllers Register (SCR) are fully updated. Where the bank requires certified copies of internal registers, multi-layer corporate shareholding charts, or overseas directors' identification documents, arrange for a Hong Kong Practising CPA, Hong Kong Solicitor, or Chartered Secretary to issue official Certified True Copies (CTC).
CPA-Audited Financial Statements & Genuine Trade Proofs
Provide the latest financial year's Audited Financial Statements and Independent Auditor's Report issued by a Hong Kong Practising CPA, together with 2 to 3 sets of recent end-to-end commercial transaction proofs (signed sales/purchase contracts, commercial invoices, packing lists, customs declarations, or bills of lading) corresponding to major incoming and outgoing wires.
- How to Check a HK Company Annual Report: Form NAR1 vs. Audited Financial Statements vs. HKEX Filings
- How to Fill Out & File HK Annual Return (Form NAR1): Made-Up Date, Cheque Payee & e-Services Guide
- Do HK Private Companies Need an AGM Every Year? Cap. 622 s.612 Written Resolution Exemption & Timelines
- Do Unlimited, Guarantee, Non-HK (Form NN3), Dormant (NDR4) or Deregistering Companies File Form NAR1?
- How to Fix Mistakes or Rejections in HK Annual Return (Form NAR1): 6 Rejection Triggers & Rectification
- What Is HK Company Annual Compliance? 10 Key Differences Between BRC Renewal and Form NAR1 Filing
- How to Read a HK Company Form NAR1 (Annual Return): Section-by-Section Share Capital & Equity Guide
- Overdue HK Form NAR1 Beyond 42 Days: 4-Tier Late Escalation Fees & Magistrates Court Summons Guide
4. Official Statutory & Regulatory References
- Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), Schedule 2 Section 5 (Duty to Continuously Monitor Business Relationships): Statutory mandate requiring financial institutions to periodically review customer documents, data, and information. Hong Kong e-Legislation (Cap. 615).
- Hong Kong Monetary Authority (HKMA) — Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Authorized Institutions): Chapter 4 & Chapter 5 on Customer Due Diligence, Beneficial Ownership verification, and Ongoing Monitoring. HKMA Official Portal.
- Hong Kong Companies Ordinance (Cap. 622), Part 12 Division 2A (Significant Controllers Register, ss. 653A–653ZM) & Section 662 (Annual Return):Hong Kong e-Legislation (Cap. 622).