Banking FAQs

For shared group resources, specify the service scope, governance responsibilities, risk segregation, fund flows, data access and outsourcing oversight; group membership does not dispense with evidence of the applicant entity’s own resources. As a practical recommendation, written service agreements and a responsibility matrix can formalise responsibilities. Approval, notification and local resourcing requirements must still be checked against the licence and actual arrangements.

Risk warning:If key functions rely on the group but there is insufficient evidence of oversight, it may be difficult to demonstrate adequate governance.

Overseas business or branch arrangements do not automatically fall outside BVI regulation. A bank application should disclose overseas branches, subsidiaries and group relationships; regimes such as VASP are not excluded merely because customers are overseas. Specific approval, reporting and supervision requirements for an overseas branch must be checked against the relevant licence, while the host country’s licensing requirements must be assessed independently.

Risk warning:Checking only the BVI licence and ignoring the permissions required where a branch is located may breach local regulatory rules.

BVI banking licences are divided into three categories: General Banking, Restricted Class I Banking and Restricted Class II Banking. They should not be summarized as only general and restricted licences. General and restricted licences confer different business permissions. The specific customer, geographic and transaction scope must be verified case by case against the actual activities, the latest applicable documents and the licence conditions.

Risk warning:Treating a restricted licence as an unrestricted banking licence may lead to operations beyond the permitted scope.

The core difference is the scope of authorisation and applicable restrictions, not the name or relative cost. Restricted Banking is also divided into Class I and Class II and should not be treated as a single type of licence. A general licence is likewise subject to FSC supervision and licence conditions; specific business boundaries should be confirmed against the intended client base and the latest applicable documents.

Risk warning:Assuming that the name “General” means all cross-border business is authorised may breach licence conditions.

The minimum paid-up capital for a general banking licence is 200 million US dollars; for Restricted Class I and Class II, it is 100 million US dollars each. These are only entry thresholds. The FSC may require higher capital based on business risks, and licensed banks must continue to meet applicable risk-weighted capital adequacy requirements. The minimum must not be treated as a complete operating budget.

Risk warning:Start-up losses or asset growth may result in insufficient capital resources.

Controllers and senior executives should prepare verifiable identity, ownership and control-chain, résumé, integrity and financial-background information. A uniform number of years of experience cannot substitute for a fitness assessment. Senior management capability should match the bank’s products, risks and management responsibilities. Specific approval documents and personnel requirements should be confirmed against the latest application documents and case-specific conditions.

Risk warning:Concealing background matters or control relationships may affect the application review.

Approval of a banking licence does not automatically provide access to international US dollar settlement channels. Whether the business may be conducted must first be checked against the licence authorisation and customer and territorial restrictions. Correspondent-bank access, systems and compliance arrangements should also be assessed as separate operational-feasibility matters; access to international settlement networks after licensing cannot be promised.

Risk warning:Even after obtaining a licence, it may not be possible to put US dollar settlement channels in place.

Banks may establish FATCA and CRS operating procedures covering “institution classification, account due diligence, information validation and reporting review.” This is a practical recommendation, not a uniform statutory procedure. Reporting status, accounts in scope, registration and filing deadlines must be confirmed case by case under the latest applicable tax documents; a banking licence does not replace tax classification.

Risk warning:Incorrect classification of an institution or account may lead to underreporting or inaccurate reporting.

The available verified information does not support asserting that a BVI or Cayman Islands banking licence is more internationally recognized. In practice, compare the specific scope of authorization, regulatory requirements and the acceptance criteria of target correspondent banks, rather than relying on jurisdictional rankings. The Cayman Islands regime and conditions for cross-border access should be checked separately against the latest documents and feedback from counterparties.

Risk warning:Relying on unverified reputation comparisons may lead to an incorrect assessment of the feasibility of accessing business services.

Private banking may be assessed as a proposed business model, but it is not a standalone exemption label. If repayable deposits are accepted and the firm itself bears lending or investment risk, the business should be assessed for a banking licence. Ancillary investment management, advisory or custody services must also be checked against the relevant authorizations. Capital, local arrangements and AML/CFT capabilities all affect feasibility.

Risk warning:Using the name “private bank” to mask multiple regulated activities may result in licensing requirements being overlooked.

Bank outsourcing arrangements should identify the service provider, responsibilities, risk segregation, data access and oversight boundaries. Outsourcing cannot substitute for the bank’s genuine organizational and management capability. The business plan should identify key outsourcers, shared services and fund flows, and the specific regulatory conditions should be checked against the actual functions and latest applicable documents.

Risk warning:Insufficient oversight after outsourcing key functions may make it difficult for a bank to continue meeting regulatory requirements.

Due diligence on banks handling fund flows should focus on the counterparty’s regulatory status, business scope, flow of funds and money-laundering risks. As a practical recommendation, regulatory and audit materials may be collected, and account purpose, customer contact and escalation arrangements for unusual transactions clarified. Specific legal obligations must be verified case by case according to the actual relationship and latest AML/CFT documents.

Risk warning:Insufficient understanding of correspondent banks and the sources of funds may introduce money-laundering or sanctions risks.

Approval as a BVI bank does not automatically confer eligibility to establish a representative office in Hong Kong. Whether one may be established, which procedures are required, and what activities may be conducted must be checked separately against applicable Hong Kong requirements and the conditions of the BVI licence. A representative office also cannot, solely by virtue of the BVI licence, take deposits or conduct other regulated business locally.

Risk warning:Treating a BVI licence as authorization to operate in Hong Kong may result in unlicensed cross-border business.

A bank’s BVI licence alone does not establish that customer deposits are protected by deposit insurance or a government guarantee. Whether a protection scheme applies, its coverage and the conditions for compensation must be checked against the bank’s actual arrangements and the latest applicable documents. Capital and prudential requirements also do not mean that deposit principal is guaranteed.

Risk warning:Assuming deposits are government-backed may lead to an underestimation of losses caused by bank default.

Minimum capital must be assessed by category: general banking requires minimum paid-up capital of 200 million US dollars; restricted Classes I and II require 100 million US dollars each; general and long-term insurance require 10 million and 20 million US dollars, respectively; and insurance managers and intermediaries each require 2.5 million US dollars. The FSC may require a higher amount. No uniform capital figure can be applied to SIBA, VASP or FMS; other categories must be checked separately.

Risk warning:Meeting only the minimum entry threshold may still be insufficient to cover the risks of ongoing operations.

Banks must continuously satisfy the applicable risk-weighted capital-adequacy requirements, and the FSC may require higher capital based on risk. Leverage, concentration and liquidity should be incorporated into capital planning and stress analysis, but this does not justify inventing a uniform ratio applicable to every licence. The calculation methodology and limits must be confirmed for the relevant regulatory category and individual case.

Risk warning:Business expansion may cause the capital adequacy ratio to fall below applicable requirements.

Group guarantees and related-party transactions should explain their commercial purpose, fund flows, risk segregation and impact on the applicant’s resources. Do not assume that group support automatically counts as available capital. As a practical measure, retain agreements, decision records and conflict-management records. Whether prior approval is required and which limits apply should be verified against the specific licence and transaction.

Risk warning:Risk transmission from related parties may weaken the financial soundness of a licensed institution.

Participation by a group parent cannot replace the governance and responsibilities of the licensed institution itself. Explain the parent’s decision-making authority, related-party fund flows, shared services and data-access boundaries; in a banking structure, group systems or outsourced services do not transfer the licensee’s ultimate responsibility.

Risk warning:A mismatch between the parent company’s actual control and the statements in the application may raise governance and compliance issues.

Remote working does not replace applicable local office, management, and record-keeping requirements. For example, a bank must designate a principal office in the BVI and two locally resident authorized agents approved by the FSC. Requirements for other licences should be checked separately, and remote arrangements must support supervision, access to records, and inspections.

Risk warning:Using only a registered agent's address to support remote operations may fail to meet the local presence requirements for a licence.

For an ultimate-controller structure spanning multiple jurisdictions, clearly show the direct and indirect shareholdings, ultimate controller and commercial purpose at each tier. A bank application should also explain the group’s regulatory status, regulatory sanctions and litigation, among other relevant information, and take account of sanctions and data rules in the jurisdictions concerned. Do not invent a uniform additional-review checklist.

Risk warning:An omission in the chain of control may result in incomplete identification of beneficial owners and disclosures in the application.

It should not be generalized that all regulated institutions must separately submit the same AML audit report. Independent testing within the AML/CFT framework, regulatory AML returns, and financial audits should be treated as distinct matters. Whether a report must be submitted, which form applies, and the deadline must be confirmed against the licence, regulatory notices, and case-specific conditions.

Risk warning:Treating a financial audit as an AML test may result in anti-money laundering control deficiencies being overlooked.

Establish an AML/CFT system proportionate to business risk, including customer and UBO identification and verification, ongoing monitoring, PEP and sanctions screening, enhanced due diligence, escalation and reporting of suspicious activity, recordkeeping, training, independent testing and board oversight. Specific applicable requirements should be confirmed by industry and against the latest documents.

Risk warning:Policies without implemented controls may not effectively identify suspicious activity.

PEP customers should be subject to risk-based screening, due diligence and ongoing monitoring; they should not be automatically accepted or rejected solely because of the label. In practice, first verify identity and associations, assess the risk and conduct appropriate enhanced due diligence; if suspicious indicators are found, escalate the matter to the MLRO under the applicable procedures.

Risk warning:Directly disregarding a PEP screening hit may result in a high-risk client not being identified.

Customer risk ratings should not be assigned a uniform review cycle that has not been verified. Set periodic reviews based on customer, product, geographic and transaction risks, and trigger reassessment when material information or transaction patterns change. This is risk-management guidance; confirm any specific minimum frequency under the applicable AML documents and regulatory conditions.

Risk warning:Reviewing only on a fixed calendar schedule may delay the identification of an increase in customer risk.

Distinguish source of funds from source of wealth: the former explains where the funds for the current transaction came from, while the latter explains how the client accumulated their wealth. Obtain supporting documents in light of information about the client and beneficial owner, the transaction purpose and the risk; verify that the explanation is consistent with the flow of funds. Apply enhanced due diligence in high-risk cases. Specific evidentiary requirements are determined by the applicable AML rules.

Risk warning:Relying solely on customer declarations may fail to detect irregularities in the source of funds.

AML outsourcing should not be described as a uniform mandatory requirement for all institutions. An institution may consider professional support in light of its business risks and internal capabilities, but using a third party for KYC, screening or monitoring systems does not transfer the licensee’s ultimate responsibility. The service scope, human review, audit rights, data flows and business-continuity arrangements should be specified.

Risk warning:Over-reliance on service providers may result in a lack of accountability and oversight.

A sanctions screening and alert-handling mechanism should be established in proportion to the risks associated with clients, jurisdictions and transaction channels, but all institutions should not be assigned a uniform “real-time” screening frequency. When using a third-party system, specify responsibility for list updates, manual review and escalation. Applicable lists and specific screening times must be confirmed against the latest AML documents and business conditions.

Risk warning:Delays in list updates may result in sanctions risks being missed.

First confirm which authority issued the list in question, its legal nature and its current status; do not conflate different blacklists or grey lists. As a risk-management recommendation, assess how changes to the list affect customer geographic risk, enhanced due diligence and counterparty requirements, and record the basis for any adjustments. The list’s label alone does not establish that a BVI licence has ceased to be valid.

Risk warning:Misreading the list may result in unnecessary client offboarding or the omission of high-risk business.

AML training should be linked to actual roles and risks and should include board oversight. We recommend covering CDD, beneficial-owner identification, sanctions alerts and internal escalation of suspicious activity; test understanding through scenario exercises and retain attendance and remediation records. Confirm specific statutory training requirements against applicable documents; do not invent a uniform number of training sessions.

Risk warning:Attendance records alone, without competency assessments, may leave employees unable to identify anomalies.

It should not be asserted categorically that the FSC will or will not communicate with foreign regulators. This should be checked against the licence category, the group’s regulated status and the requirements of the individual case. Applicants may prepare information on foreign licences, audit reports, regulatory sanctions and litigation, and explain shared services, fund flows and risk segregation to support cross-border background reviews.

Risk warning:Incomplete disclosure of overseas regulatory records may affect background checks.

A local BVI bank account opened in advance should not be treated as a uniform application condition for every licence. Account requirements should be checked against the actual business, evidence of capital, client-money arrangements and licensing conditions. As a practical matter, account-opening documents and funds flows may be planned early, but the bank’s decision to open an account and the FSC’s licensing decision are independent.

Risk warning:Treating successful account opening as permission to conduct financial business may lead to unlicensed operations.