BVI financial licence applications, BVI FSC, BVI company incorporation, British Virgin Islands, acquisition of licensed companies, RGYS, Mr Tang, Approved Manager FAQs

BVI financial licence applications · Acquisition of licensed companies · Ongoing compliance support

BVI KNOWLEDGE & SERVICES

Approved Manager FAQs · 4/7

BVI PRACTICAL Q&A LIBRARY

This topic contains 343 questions. The answers on this page are prepared based on verified official materials and provide Tang’s recommendations and risk alerts for each question.

Sketch Portrait of Tang Shangyong (Mr Tang)
Tang Shangyong (Mr Tang)Business Manager · Professional Guidance

Proposed by Rengangyongsheng (Hong Kong) Limited / Update 2026-11-02

About the author

The following is general information, not legal or tax advice for a particular case. If a condition, deadline or figure cannot be verified from official sources, do not retain the speculative conclusion in the source draft.

151

Q174: 使用内部资源能降低哪些外部费用?

An internal team can organise materials, prepare initial drafts of the business plan and budget model, maintain an inquiry log and manage routine records, thereby reducing some external work hours. This requires appropriate capability and necessary review. Internal resources do not automatically replace a certified authorised representative or other applicable professional and regulatory arrangements.

Mr Tang’s recommendation

Establish a responsibility checklist for internal owners and external reviewers.

Risk warning:An internal team unfamiliar with BVI requirements may result in omissions in documentation or ongoing filings.

Consult Regulatory Basis
152

Q175: 提前规划申请与审批周期能带来哪些费用优势?

Advance planning can reduce ad hoc revisions, travel and urgent consultant time, and make staged payments easier to arrange. In principle, a complete application must be filed at least seven days before the proposed commencement of business. The limited 30-day operating window from the filing date is conditional and may be extended; neither the seven-day nor the 30-day period guarantees approval. The budget should still provide for the costs of supplementary submissions and waiting.

Mr Tang’s recommendation

Work backwards from the intended opening date to set material preparation, fee payment and filing milestones, allowing time for external dependencies.

Risk warning:Mistaking the operating window for the approval period may lead to operations ceasing upon expiry.

Consult Regulatory Basis
153

Q176: FSC申请费是否为1000美元?

No. The official Approved Manager application fee is 1,200 US dollars, an additional 1,800 US dollars is payable on approval, and the annual renewal fee is 1,800 US dollars. Each applies at a different trigger point and excludes registered-agent, authorized-representative, due-diligence, and company-maintenance costs. Check the current fee schedule before payment.

Mr Tang’s recommendation

Ask for a fee schedule that separately lists the application, approval and annual renewal charges.

Risk warning:Paying a fee of 1,000 US dollars may leave the application fee underpaid.

Consult Regulatory Basis
154

Q177: 年度监管费是多少,何时支付?

The annual renewal regulatory fee for an Approved Manager is US$1,800, not US$1,000. It should be paid before the due date under the applicable renewal rules and FSC payment notice; the specific date should be confirmed against the actual approval status. Filing the regulatory annual return with the FSC by January 31 each year is a separate reporting requirement and should not be confused with the fee payment date.

Mr Tang’s recommendation

Ask the authorised representative to confirm the renewal payment date for this entity and add it to the annual calendar.

Risk warning:Confusing filing and payment deadlines may result in the renewal not being properly completed.

Consult Regulatory Basis
155

Q180: 专业服务费(律师、会计、尽职调查)明细有哪些?

Professional services may include legal characterisation and documentation; due diligence on shareholding and controllers; certified translation; accounting statements; applicable audit and tax work; and support for enquiries and annual compliance. Each item should be quoted according to its actual scope; there is no single standard amount. FSC fees, company government fees and authorised representative services should be listed separately to avoid double counting.

Mr Tang’s recommendation

Prepare a detailed budget based on workstreams, deliverables and fee payment milestones.

Risk warning:Failing to distinguish one-off services from ongoing services may lead to an underestimate of annual maintenance costs.

Consult Regulatory Basis
156

Q181: 首年总成本如何估算?

Estimate first-year costs according to actual payment milestones: FSC application fee of 1,200 US dollars and approval fee of 1,800 US dollars; the annual renewal fee is a separate 1,800 US dollars, and whether it falls within the first-year budget depends on the renewal date. Separately list company government fees, registered agent, authorised representative, legal and accounting costs; do not use a single total price.

Mr Tang’s recommendation

First, ask the service provider for a first-year quotation broken down by payment milestone.

Risk warning:Omitting approval fees or renewal dates may result in an insufficient funds budget.

Consult Regulatory Basis
157

Q182: 年度维护成本包括哪些项目?大概金额?

Annual maintenance includes the FSC renewal fee of 1,800 US dollars, as well as company annual fees, registered agent, authorised representative, accounting, any applicable audit, and AML/CFT maintenance costs. Third-party costs vary with the business, transaction volume and outsourcing arrangements; there is no annual total applicable to all managers.

Mr Tang’s recommendation

Summarise official annual fees and third-party annual quotations in separate columns.

Risk warning:Treating renewal fees as the full cost of maintenance may lead to an underestimate of ongoing expenses.

Consult Regulatory Basis
158

Q183: 与开曼相比,BVI的费用优势在哪里?

It cannot be stated outright that the BVI is cheaper than the Cayman Islands. Official fees for a BVI Approved Manager can be itemised, but total costs also include company maintenance, an authorised representative and professional services. Any comparison should use the same business scope, fund size and service content, and separately verify current requirements and quotations in both jurisdictions.

Mr Tang’s recommendation

Use the same business description to request comparable quotations from service providers in both jurisdictions.

Risk warning:Comparing quotes for different licence scopes may lead to incorrect cost assessments.

Consult Regulatory Basis
159

Q184: 与香港相比,BVI费用有何不同?

Cost differences should be compared according to the actual business and licensing route; tax or operating-cost advantages should not be inferred from the place of incorporation. A BVI budget should include Approved Manager official fees, company maintenance and professional services. Applicable licensing, staffing, office and tax costs in Hong Kong should be checked separately against the latest local documents.

Mr Tang’s recommendation

Prepare a comparison of licensing and operating costs for the same business in the two jurisdictions.

Risk warning:Comparing only the place of incorporation may overlook cross-border tax and licensing costs.

Consult Regulatory Basis
160

Q185: 与新加坡相比,BVI费用及合规差异?

It should not be generalised that Singapore is always more expensive or BVI compliance is lighter. A BVI Approved Manager covers only investment management or advisory activities within its statutory scope and remains subject to governance, filing and AML/CFT obligations. Costs and compliance differences between the two jurisdictions should be compared item by item for the same business model and against the latest applicable documents.

Mr Tang’s recommendation

First list the clients, products and places of operation, then obtain professional quotations in both jurisdictions.

Risk warning:Mistaking streamlined approval for low compliance requirements may distort the budget.

Consult Regulatory Basis
161

Q186: 银行开户和尽职调查属于隐性成本吗?

Bank account opening and due diligence are third-party costs that should be listed separately, not concealed within regulatory fees. The budget may include document certification, translation, bank charges and necessary travel, while allowing for the time required for supplementary submissions. Actual costs depend on the bank’s requirements; Approved Manager approval does not guarantee account opening.

Mr Tang’s recommendation

Before opening an account, request the document checklist and fee schedule from the bank.

Risk warning:Requests for additional information from a bank or refusal to open an account may delay the funding arrangements.

Consult Regulatory Basis
162

Q187: 差旅与办公产生的隐性成本如何估算?

Travel and office expenses can be estimated by headcount, number of trips, locations, and cost per trip, with meeting, temporary venue, and delivery costs listed separately. As a budgeting suggestion, distinguish necessary from optional expenses. A registered address, actual office arrangements, and economic substance are different tests; a fixed travel budget cannot establish compliance.

Mr Tang’s recommendation

Prepare a detailed expense breakdown based on the projected annual travel schedule and office use.

Risk warning:Treating the registered address as the entire operational arrangement may result in necessary resource costs being overlooked.

Consult Regulatory Basis
163

Q188: 技术与合规系统的隐性成本有哪些?

Technology and compliance budgets may include KYC screening, monitoring tools, data storage, security, system integration, and outsourced review costs. As a practical suggestion, distinguish one-time deployment from ongoing subscriptions and estimate costs based on customer volumes, transaction volumes, and data requirements; these are not a uniform statutory procurement list.

Mr Tang’s recommendation

Ask the supplier to quote separately for deployment, subscription and manual review costs.

Risk warning:Budgeting only for software subscriptions may omit integration and manual processing costs.

Consult Regulatory Basis
164

Q189: 预算规划有何建议以应对不确定性?

Separate fixed costs, costs that vary with business volume, and one-off expenses, and prepare baseline and downside budgets. Contingency funding should reflect actual uncertainties such as supplemental document requests, banking, systems, and staffing; no uniform percentage should be set. Regular review is a management suggestion, not a uniform statutory frequency.

Mr Tang’s recommendation

Use a one-time delayed-opening scenario to test whether cash will be sufficient.

Risk warning:Budgeting solely on the best-case scenario may result in a shortage of working capital.

Consult Regulatory Basis
165

Q190: 是否可以分期支付FSC或其他费用?

Do not assume that FSC fees may be paid in instalments. Application fees, approval fees and annual renewal fees have their own respective payment triggers and must be paid in accordance with the instructions in force at the time; any instalment arrangement must be expressly confirmed. Fees charged by registered agents, advisers and other third parties may be negotiated under contract, but this does not alter official payment requirements.

Mr Tang’s recommendation

Before payment, obtain separate written payment arrangements for official fees and service fees.

Risk warning:Failure to confirm instalment arrangements may leave an application incomplete or result in late payment.

Consult Regulatory Basis
166

Q191: 各项费用的支付时间点如何安排以避免罚金?

The 1,200 US dollars payable on application, the 1,800 US dollars payable upon approval and the 1,800 US dollars payable for annual renewal should be scheduled separately, with the renewal due date and payment records confirmed. Company annual fees should be managed according to the dates applicable to each entity, and professional fees paid under contract; not all items should be combined into a single “annual review date.”

Mr Tang’s recommendation

Create a calendar listing each due date, responsible person and payment receipt.

Risk warning:Confusing company annual fees with regulatory renewal dates may result in late payment or renewal.

Consult Regulatory Basis
167

Q192: 费用以何种货币支付,如何管理汇率风险?

The official Approved Manager fee schedule is denominated in US dollars. The actual payment currency, channel and bank charges should be confirmed from the payment instructions; acceptance of other currencies should not be assumed. As a budgeting measure, funds may be arranged for US-dollar liabilities and exchange-rate fluctuations estimated. The currency of third-party service fees is governed by the relevant contract.

Mr Tang’s recommendation

Before payment, verify the amount payable in US dollars, receipt requirements and foreign-exchange charges.

Risk warning:Exchange rates or intermediary fees may result in an insufficient amount being received.

Consult Regulatory Basis
168

Q193: 变更牌照或更新文件会产生哪些额外费用?

Updating documents or changing business activities may incur legal review, registered-agent handling, and applicable official application or filing fees; the amount should be confirmed for the specific matter against the fee schedule in effect at the time. Expanding the scope of business may involve more than amending documents and may require following a standard SIBA pathway. Changes to application materials must also be notified as required.

Mr Tang’s recommendation

Before making changes, obtain a list setting out the required approvals, notifications and fees.

Risk warning:Completing formalities after expanding the business first may result in activities exceeding the approved scope.

Consult Regulatory Basis
169

Q194: 若不遵守合规要求会引发财务后果吗?

Yes. Non-compliance may trigger FSC supervision or enforcement and result in remediation, professional-adviser and business-interruption costs; the specific consequences depend on the breach. If Approved Manager status is lost, the FSC must be notified immediately and no new relevant business may be accepted. The exit or transition of existing business should be arranged under the applicable rules.

Mr Tang’s recommendation

If a gap is identified, promptly compile the facts and consult a professional adviser to determine remediation steps.

Risk warning:Continuing to accept new business after losing eligibility will increase regulatory risk.

Consult Regulatory Basis
170

Q195: 需要购买专业责任保险(PI)吗,费用大概多少?

Whether professional indemnity insurance must be purchased should be verified case by case against the actual activities, approval conditions and latest applicable materials; it should not be generalized that all Approved Managers must, or need not, obtain coverage. For budgeting, obtain quotations based on service scope, indemnity limits, deductibles and exclusions, without retaining a uniform premium range.

Mr Tang’s recommendation

Have an insurance broker assess coverage gaps in the client contracts and service scope.

Risk warning:Policy exclusions may leave losses from key professional negligence without insurance coverage.

Consult Regulatory Basis
171

Q196: 外部审计与会计费用应如何预算?

Accounting and applicable audit fees should be quoted based on transaction volume, asset types, valuation complexity and record quality; a uniform amount should not be used. Approved Manager financial statements are generally due within six months after the financial year-end. Audit requirements should be confirmed based on the entity’s circumstances and the latest applicable documents.

Mr Tang’s recommendation

Before the year-end, provide the firm with transaction samples and confirm the scope of services and delivery date.

Risk warning:Incomplete records may increase costs and delay the filing of financial statements.

Consult Regulatory Basis
172

Q197: KYC/AML持续监控的持续成本有哪些?

Ongoing costs may include customer and beneficial-owner verification, screening subscriptions, information updates, monitoring, manual review, reporting and record maintenance. Expenditure varies with customer risk and business complexity. An Approved Manager is an FSC AML return filer; an exemption from specific CO requirements does not mean exemption from AML/CFT obligations.

Mr Tang’s recommendation

Estimate tool costs and staff hours by client risk tier.

Risk warning:Relying solely on automated screening may miss anomalies that require human judgment.

Consult Regulatory Basis
173

Q198: 员工培训与合规人员成本如何纳入预算?

The budget may include training, personnel compensation or outsourcing fees, and substitute resources; allocate resources according to role responsibilities and actual risks. A corporate Approved Manager must maintain two directors, one of whom is a natural person, and continuously appoint an FSC-certified authorised representative. A CO exemption does not imply that compliance resources or an MLRO arrangement are unnecessary.

Mr Tang’s recommendation

First, prepare a job responsibilities table, then allocate a budget for each ongoing responsibility.

Risk warning:Confusing an authorised representative with a registered agent may result in statutory appointment costs being overlooked.

Consult Regulatory Basis
174

Q199: 预算表应包含哪些关键项目?

The budget should separately itemise FSC application, approval and renewal fees; company government fees; registered-agent, authorised-representative, legal and accounting fees; and any applicable audit fees. It should also include banking, KYC, technology, personnel, insurance and contingency expenses. For each item, state whether it is one-off or recurring, its payment timing and the basis for the quotation, to avoid duplicate charges.

Mr Tang’s recommendation

Add two columns to each budget item: due date and quotation validity period.

Risk warning:Combining fees under incorrect categories may result in duplicate payments or budget omissions.

Consult Regulatory Basis
175

Q200: 有哪些合法方式可以节省成本但不影响合规?

Costs may be reduced through standardized information, less duplicate data entry, comparison of supplier quotations and reasonable outsourcing; these are operational recommendations, not compliance guarantees. Outsourcing arrangements should preserve allocation of responsibilities, oversight and access to information. Directors’ or general partners’ responsibilities are not transferred by outsourcing, and necessary authorized representative and AML/CFT resources should not be reduced.

Mr Tang’s recommendation

First, trial an improvement to one repetitive process and check the effectiveness of the controls.

Risk warning:Excessive outsourcing without adequate oversight may create compliance blind spots.

Consult Regulatory Basis
176

Q201: BVI注册管理人应如何制定AML政策以符合法规要求?

An executable AML/CFT policy should be established for the actual investment-management business, covering risk assessment, customer due diligence, ongoing monitoring, escalation of suspicious activity, training and records. Board oversight and periodic review are recommended. An exemption from specific compliance requirements applicable to an Approved Manager does not mean exemption from AML/CFT obligations.

Mr Tang’s recommendation

First, prepare a comparison of policies and operating procedures based on actual customers and fund flows.

Risk warning:Using only generic templates may fail to identify money-laundering risks in actual business operations.

Consult Regulatory Basis
177

Q202: 建立KYC程序时哪些步骤必不可少?

KYC procedures should focus on identifying and verifying the customer and ultimate controller, the purpose of the business relationship, risk classification and ongoing updates, while retaining information sources and review records. It is advisable to specify how to handle insufficient documents, reliance on third parties and unusual circumstances. Specific verification standards should be checked against applicable AML/CFT documents.

Mr Tang’s recommendation

Prepare a client onboarding verification checklist, specifying the person responsible for each step and the reviewer.

Risk warning:Failure to verify the ultimate beneficial owner may allow high-risk clients to bypass onboarding checks.

Consult Regulatory Basis
178

Q203: 客户尽职调查(CDD)应包含哪些要素?

CDD should cover the identity and control chain of the customer and beneficial owner, the nature of the business, the purpose of establishing the relationship and risk-proportionate verification of the source of funds. Assess risk in light of the information and transaction context and update the assessment continuously; the same evidence documents should not be required of every customer.

Mr Tang’s recommendation

Select an existing customer file and check whether the identity, ownership and control chain, and source of funds corroborate one another.

Risk warning:Contradictions between materials that are not investigated may lead to an underestimation of client risk.

Consult Regulatory Basis
179

Q204: 何时需对客户实施加强尽职调查(EDD)?

Where customer risk is higher, assess and apply enhanced due diligence, for example in cases involving PEPs, high-risk jurisdictions, complex structures that are difficult to explain or unusual transactions. Measures may include additional evidence of source of funds, higher-level approval and enhanced monitoring. Specific triggers should be determined under the applicable rules and risk assessment.

Mr Tang’s recommendation

Create a list of EDD triggers and specify supplementary verification measures for each trigger.

Risk warning:Treating a complex structure as inherently low-risk may lead to overlooking hidden controllers or source-of-funds issues.

Consult Regulatory Basis
180

Q205: 可疑交易报告(SAR)应如何提交及时限?

If unusual or suspicious activity is identified, it should be reported to the MLRO under internal procedures. The MLRO should investigate and assess whether an SAR must be submitted to the FIA, and retain the basis for that assessment. Not every unusual event should be treated as requiring an external report, and an unverified fixed deadline should not be applied; the method and timing of submission must follow the latest applicable requirements.

Mr Tang’s recommendation

Verify the current FIA reporting requirements and clearly document the process for escalating matters from internal review to external reporting.

Risk warning:Putting an internal report on hold may delay an external report required by law.

Consult Regulatory Basis
181

Q206: MLRO的主要职责有哪些?

The MLRO’s core responsibilities are to receive internal suspicious activity reports, investigate and assess them, and decide whether to report to the FIA. The MLRO should have the necessary authority, resources and confidentiality arrangements. Policy maintenance, training and independent review may be allocated separately; all compliance functions should not automatically be assigned to the MLRO, and the arrangement should not be omitted because of a particular exemption.

Mr Tang’s recommendation

Prepare a job description for the MLRO, specifying reporting authority and a substitute arrangement in the event of absence.

Risk warning:A nominal appointment of an MLRO without investigative authority may prevent suspicious activities from being effectively escalated.

Consult Regulatory Basis
182

Q207: 记录保存五年要求如何执行?

Establish a retention schedule by information category, covering CDD, transactions, internal reports and disposition records, and ensure that records are searchable, backed up and access-controlled. The five-year rule and its starting point under another licence must not be applied directly to an Approved Manager. Confirm the applicable AML/CFT documents for the specific minimum period, starting point and circumstances requiring extended retention.

Mr Tang’s recommendation

First determine the applicable retention period for each category of records, then configure system archiving and deletion permissions.

Risk warning:Deleting materials too early may make it impossible to respond to a regulatory investigation or reconstruct transaction processes.

Consult Regulatory Basis
183

Q208: AML培训应包含哪些要点与频率?

Training should cover client and BO verification, EDD, identification of PEPs and sanctions, escalation of suspicious activity and confidentiality requirements, with case exercises tailored to employees’ roles. It is advisable to provide onboarding training and periodic refresher training, with additional training when the business or its risks change. An annual frequency may be adopted as a management arrangement, but should not be promoted as a uniform statutory requirement.

Mr Tang’s recommendation

Prepare a training plan by role and use a short test to confirm that employees understand the escalation process.

Risk warning:If employees are unfamiliar with reporting procedures, they may fail to report anomalies identified during customer due diligence.

Consult Regulatory Basis
184

Q209: 向FIA报告义务包括哪些内容?

The focus of reporting to the FIA is on suspicious activity that is legally reportable, together with relevant facts, background and supporting information. Staff who identify unusual activity should first escalate it to the MLRO, who will investigate and determine whether there is an external reporting obligation. Subsequent cooperation and confidentiality should follow applicable requirements; it is not appropriate to treat every unusual event or an automatic freezing measure as a legal obligation.

Mr Tang’s recommendation

Prepare an internal reporting template that clearly records unusual facts, transaction background and supporting documents.

Risk warning:Reports that state conclusions without facts may hinder effective investigations.

Consult Regulatory Basis
185

Q210: 如何进行制裁筛查以满足合规要求?

Sanctions screening should be proportionate to the risk posed by clients, controllers, transaction counterparties and business locations. It is advisable to screen at onboarding and on an ongoing basis, retaining the list version, match review and basis for disposition. Commercial databases may assist identification but do not replace applicable sanctions requirements; whether to use automation should be determined by business scale and risk.

Mr Tang’s recommendation

Conduct a sample check of one screening hit to confirm that list updates, manual review, and escalation records are complete.

Risk warning:If list updates lag, persons subject to applicable sanctions restrictions may not be identified.

Consult Regulatory Basis
186

Q211: 如何识别政治公众人物(PEP)及其关联人?

PEPs and their close relatives and associates may be identified using customer declarations, reliable public information and screening tools, with verification of their positions and relationships. Results should be risk-assessed and enhanced due diligence conducted in accordance with applicable rules, including attention to source of funds and ongoing changes. The applicable scope of PEPs cannot be determined solely by database labels.

Mr Tang’s recommendation

Add questions about positions held and related-party relationships to the client questionnaire, and establish a manual verification step.

Risk warning:Relying solely on name matching may fail to identify persons associated with PEPs.

Consult Regulatory Basis
187

Q212: 企业应如何开展风险评估(RWRA)?

An enterprise risk assessment should identify money laundering, terrorist financing and proliferation financing risks relating to customers, products, geography, delivery channels and funds flows, and then assess controls and residual risks. It is advisable to document the basis for the assessment and update it when the business changes. Quantitative scoring is optional; all institutions are not required to adopt a single uniform model.

Mr Tang’s recommendation

Build a risk matrix from the existing business activity list, mapping each item to the corresponding controls and responsible person.

Risk warning:If the scoring model is disconnected from actual business operations, resources may be allocated to the wrong risk priorities.

Consult Regulatory Basis
188

Q213: 交易监控系统应覆盖哪些功能?

Transaction monitoring should be able to identify activities inconsistent with the customer’s background, investment purpose or expected fund flows, and support alert review, internal escalation and traceable records. It is advisable to set risk rules and test their effectiveness regularly. Real-time alerts, visualisation and automation are optional features and should not be presented as a uniform statutory configuration for all Approved Managers.

Mr Tang’s recommendation

Test the monitoring rules against historical transactions and check whether alerts can enter the manual review process.

Risk warning:A backlog of alerts with no one handling them may render the monitoring system ineffective in practice.

Consult Regulatory Basis
189

Q214: 合规审计应如何组织与频率?

A compliance review should be conducted by capable personnel independent of the work being examined, and should cover implementation of policies, client samples, monitoring, reporting processes and remediation. External professionals may participate, but external audit or an annual review should not be presented as a uniform requirement. Scope and frequency should be determined in light of applicable documents, business risk and changes.

Mr Tang’s recommendation

Establish a risk-based review plan and assign a person responsible for remediation of any issues identified.

Risk warning:If reviewers check their own work, they may be unable to identify control deficiencies objectively.

Consult Regulatory Basis
190

Q215: 对公司客户如何核查实益拥有人(BO)?

For corporate customers, identify and verify the ultimate beneficial owners by tracing through registration documents, the register of members, constitutional documents and control arrangements, and record the shareholding and control chain. Do not rely solely on nominee shareholders or a single ownership percentage. Customer CDD identification requirements and BVI company BO-register obligations must be applied separately.

Mr Tang’s recommendation

Map the customer control chain and attach verifiable documents for each key link.

Risk warning:Ignoring voting rights or delegated control arrangements may result in the actual controllers not being identified.

Consult Regulatory Basis
191

Q216: 对信托与基金客户的CDD要点有哪些?

For trust clients, verify the settlor, trustee, beneficiaries or beneficiary classes, and other actual control arrangements, and review the trust documents. For fund clients, also identify the sponsor, directors or general partner, controllers and relevant BOs, and check subscriptions, management arrangements and source of funds. The scope of verification must be determined according to the structure and applicable rules.

Mr Tang’s recommendation

Prepare separate CDD checklists for trusts and funds; do not substitute a single company checklist for both.

Risk warning:Checking only the trustee or fund manager may overlook other persons who actually exercise control.

Consult Regulatory Basis
192

Q217: 是否可采用电子身份验证,需满足哪些条件?

Electronic identity verification may be used as a proposed verification tool, but whether it satisfies CDD requirements must be assessed under applicable rules, data reliability and customer risk. Evaluate source authenticity, impersonation detection, log retention and data security, and provide for supplementary manual verification if checks fail or risk is high. A system’s successful result should not be treated as completion of due diligence.

Mr Tang’s recommendation

First conduct reliability testing on the proposed tools and record the circumstances that trigger manual verification.

Risk warning:Electronic verification may fail to detect identity fraud, potentially resulting in the erroneous acceptance of a client.

Consult Regulatory Basis
193

Q218: 依赖受监管第三方进行CDD有哪些合规要求?

Before relying on third-party CDD, confirm that the applicable rules permit the arrangement and assess the third party’s regulatory status, verification quality and ability to provide records. It is advisable to set out arrangements for provision and updating of information and oversight in writing. The fact that a third party is regulated does not mean it can automatically be relied upon, and its services cannot be treated as a substitute for this institution’s compliance responsibilities.

Mr Tang’s recommendation

First test whether a complete verification file can be obtained in a timely manner, then decide the extent of reliance.

Risk warning:If underlying verification documents cannot be obtained, it may not be possible to demonstrate that customer due diligence was effectively completed.

Consult Regulatory Basis
194

Q219: 对高风险客户如何加强持续监控频率与措施?

For high-risk customers, additional information updates and transaction reviews may be introduced, targeted alerts set up and approval levels raised for significant matters. Frequencies and thresholds should be determined by risk, not uniformly lowered. Unusual activity should be reviewed promptly; matters meeting internal suspicious-activity escalation criteria should be referred to the MLRO to assess whether to report to the FIA.

Mr Tang’s recommendation

Prepare a one-page monitoring plan for each high-risk customer, stating the matters to monitor and the triggers for review.

Risk warning:Mechanically increasing alerts without analysing the context may obscure genuinely suspicious activity that warrants escalation.

Consult Regulatory Basis
195

Q220: 报送SAR时如何保证保密与防止打草惊蛇?

Information relating to SARs should be subject to need-to-know access controls, with appropriate records of internal escalation, external reporting and subsequent communications. Avoid disclosing information to customers or unrelated third parties where this could amount to tipping off. The precise prohibitions and circumstances in which disclosure is lawful must be confirmed against applicable requirements; it cannot be promised that disclosure will never occur.

Mr Tang’s recommendation

Restrict access to SAR files and prepare a reviewed response process for customer inquiries.

Risk warning:When explaining the reason for a review to a client, an employee may inadvertently disclose information about a suspicious activity report.

Consult Regulatory Basis
196

Q221: 内部可疑活动报告流程应如何设计?

Internal procedures should enable employees to report unusual circumstances to the MLRO promptly and preserve relevant facts, transaction details and customer records. We recommend establishing written reporting channels, receipt registration and escalation mechanisms, with the MLRO investigating and recording the decision on whether to report to the FIA. Internal handling timelines should be set according to risk; do not invent a uniform statutory deadline.

Mr Tang’s recommendation

First, prepare an internal reporting form specifying the recipients and the designated substitutes for any unavailable recipients.

Risk warning:If a report remains with general compliance staff, MLRO assessment may be delayed.

Consult Regulatory Basis
197

Q222: 向FIA报送后机构应如何配合调查?

After filing, retain the report, relevant records and evidence of communications, and have designated personnel handle lawful FIA requests. Verify the authority, scope and response requirements of each request, and record the materials provided and the persons who accessed them. Any freeze or other measure must be handled under the actual effective instruction; filing a report does not itself automatically trigger a freeze.

Mr Tang’s recommendation

Maintain an investigation request register, with a designated contact person to coordinate follow-up.

Risk warning:Restricting customer assets without verifying instructions may result in improper handling.

Consult Regulatory Basis
198

Q223: 在数据保护法下如何处理AML信息披露冲突?

First confirm the legal basis for disclosure, the receiving authority and the scope of information, then address the interaction between AML information and privacy requirements. Restrict internal access, use secure transmission and record the reasons for disclosure. Any specific conflict with data-protection requirements must be checked case by case against the applicable instruments; AML needs should not be treated as unlimited authorisation to disclose.

Mr Tang’s recommendation

For each external disclosure, record its basis, scope and approval.

Risk warning:Disclosure beyond the permitted scope may infringe clients' data rights.

Consult Regulatory Basis
199

Q224: 如何构建风险分类与评分模型供日常使用?

Risk classifications can be developed by customer, product, geography and delivery channel, with corresponding weights, thresholds and controls. As a practical recommendation, retain the reasons for scores and any manual adjustments, and test the model against actual anomalies. Quantitative scores do not replace professional judgement and are not a uniform statutory scoring formula.

Mr Tang’s recommendation

First, use an existing customer sample to test whether the scoring aligns with actual risk.

Risk warning:Mechanical reliance on an overall score may obscure a significant individual risk.

Consult Regulatory Basis
200

Q225: 若匹配到受制裁个人或实体应采取哪些步骤?

After a sanctions-list match, promptly review the identity and basis for the match and escalate it to the responsible personnel. Whether to stop a transaction, freeze assets or report to a relevant authority must be determined under the actually applicable sanctions rules and instructions. Not every system hit is a true match or automatically subject to the same reporting route.

Mr Tang’s recommendation

Develop an operational procedure for manual review and escalation of screening matches.

Risk warning:Incorrectly freezing assets without review may improperly restrict client assets.

Consult Regulatory Basis

For Other Questions, Please UseMaster Index of All Questions。Current page 4/7 · Up to 50 questions per page.

LET'S TALK ABOUT YOUR BVI PROJECT

Choose the right path, starting with a professional consultation.

Discuss your business, personnel, funds, and target timeline with Tang Shangyong (Mr Tang) to map out your next steps in the BVI.

Book a Project Assessment