Anti-Money Laundering Compliance for Family Trusts: Obligations Under the Hong Kong AMLO

Hong Kong’s legislative push to align with the Financial Action Task Force (FATF) Recommendation 25, which came into full effect with the amended Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615) on 1 June 2023, has fundamentally redefined the compliance landscape for family trusts. The 2025 review cycle by the FATF, scheduled for Hong Kong’s mutual evaluation follow-up report, places trust service providers (TSPs) under heightened scrutiny, particularly regarding beneficial ownership transparency and risk-based due diligence. For family offices and trustees managing assets exceeding USD 10 million, the practical implications are direct: the AMLO now imposes statutory obligations on “relevant persons” who provide trust services, including company secretarial work, nominee shareholding, and the establishment of trusts or similar legal arrangements. The Hong Kong Monetary Authority (HKMA) and the Securities and Futures Commission (SFC) have issued joint guidance in 2024 clarifying that these obligations extend to any entity that, by way of business, arranges for another person to act as a trustee. This means a family office that sets up a BVI trust for a Hong Kong resident settlor must conduct customer due diligence (CDD) on the settlor, the protector, and any beneficiaries with a vested interest, with enhanced measures triggered when the trust involves a politically exposed person (PEP) or a jurisdiction on the FATF grey list.

The AMLO’s Scope of Application to Trust Structures

The AMLO’s definition of a “trust or company service provider” (TCSP) under Schedule 1, Part 1, Section 1 is deliberately broad. It captures any person who, in the course of business, provides any of five specified services: forming legal arrangements, acting as a trustee, providing a registered office, acting as a nominee shareholder, or arranging for another person to act in any of these capacities. For family trusts, this classification is triggered the moment a professional trustee—whether a licensed trust company under the Trustees Ordinance (Cap. 29) or a private trust company (PTC)—receives assets for administration. The 2023 amendments removed the previous exemption for “incidental” trust services, meaning that even a family office that manages a single trust for its founding family must register as a TCSP with the Companies Registry under the Anti-Money Laundering and Counter-Terrorist Financing (Financial Institutions) Ordinance (AMLO-FI, Cap. 615, Part 2). As of 31 December 2024, the Companies Registry reported 12,847 registered TCSPs, of which 1,203 were categorised as “trust services” providers, a 14% increase from 2022, reflecting the tightening net.

The “Relevant Person” Threshold for Trusts

A critical distinction under the AMLO is that not every trust participant is a “relevant person.” The obligation to conduct CDD and file suspicious transaction reports (STRs) applies only to TCSPs that act “by way of business.” The SFC’s 2024 Guidelines on Anti-Money Laundering and Counter-Terrorist Financing (SFC GL-AML-2024, para. 3.2) clarifies that a settlor who appoints a friend as trustee without remuneration is not caught, but a professional trustee charging a fee—even a nominal HKD 1,000 annual fee—falls squarely within the regime. This threshold is particularly relevant for Hong Kong-based family offices that establish PTCs in jurisdictions like Singapore or the Cayman Islands. If the PTC’s administration is conducted from a Hong Kong office, the office itself becomes a TCSP, requiring registration and compliance with the AMLO’s CDD and record-keeping requirements under section 5(1) of the AMLO (Cap. 615). The HKMA’s Supervisory Policy Manual (SPM) Module AML-1, updated in January 2025, explicitly states that “the place of administration, not the place of incorporation, determines the regulatory nexus for TCSP obligations.”

Beneficial Ownership Identification Across Trust Tiers

The AMLO’s CDD requirements under sections 3 and 4 of Schedule 2 mandate that a TCSP identify and verify the beneficial owner of a trust, defined as any individual who ultimately owns or controls 25% or more of the trust’s property or exercises effective control over the trust. For multi-tiered trust structures—common in UHNW estate planning—this creates a cascading obligation. For example, a trust holding a BVI company that owns a Hong Kong property requires the TCSP to look through the BVI entity to the trust’s settlor, protector, and any discretionary beneficiaries who have been appointed to receive more than 25% of the trust’s income. The Companies Registry’s 2023 guidance note (CRGN-AML-2023/1, para. 15) specifies that where a trust is the beneficial owner of a corporate vehicle, the TCSP must obtain a copy of the trust deed or a certified extract identifying the settlor, trustee, protector, and any beneficiaries with a vested interest. Failure to do so triggers a presumption that the trust is high-risk, requiring enhanced due diligence (EDD) under section 6(2) of Schedule 2.

Enhanced Due Diligence Triggers for Family Trusts

The AMLO imposes EDD obligations on TCSPs in three specific scenarios relevant to family trusts: when the trust involves a PEP, when the trust is established in or connected to a jurisdiction on the FATF’s list of high-risk countries, or when the trust’s structure is unusually complex or opaque. For Hong Kong family trusts, the PEP trigger is the most common. The AMLO defines a PEP under section 1 of Schedule 2 as an individual entrusted with a prominent public function in Hong Kong, China, or any foreign state, including their family members and close associates. A 2024 survey by the Hong Kong Trustees’ Association found that 37% of family trusts established in Hong Kong in 2023 involved a settlor or beneficiary with PEP status, up from 22% in 2020, driven by mainland Chinese entrepreneurs listing on the HKEX.

Source of Wealth and Source of Funds Verification

For trusts that trigger EDD, the TCSP must obtain additional information on the source of wealth and source of funds of the settlor and any beneficial owner. The SFC’s 2024 AML Guidelines (para. 5.7) require that this verification be “independent and reliable,” meaning a self-declaration alone is insufficient. Acceptable evidence includes audited financial statements, tax returns, or bank statements showing the accumulation of wealth over time. For a trust funded by a HKEX-listed company’s share sale, the TCSP should obtain the listing prospectus, the sale confirmation from the stock exchange, and the bank transfer records. The HKMA’s 2024 circular on “Enhanced Due Diligence for Complex Trust Structures” (HKMA B1/15C/2024) further stipulates that where the trust’s assets include cryptocurrency or digital assets, the TCSP must verify the blockchain transaction trail and obtain a certified valuation from a licensed digital asset custodian. This is particularly pertinent given that Hong Kong’s Virtual Asset Trading Platform licensing regime under the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 came into full effect on 1 June 2023, requiring TCSPs to treat crypto assets as high-risk unless they originate from a licensed platform.

Ongoing Monitoring and Periodic Review

The AMLO requires TCSPs to conduct ongoing monitoring of the business relationship with the trust, including periodic reviews of the CDD information. Section 9 of Schedule 2 mandates that for trusts classified as high-risk, the review must occur at least every 12 months, or sooner if there is a material change in the trust’s structure or beneficial ownership. The HKMA’s SPM Module AML-1 (para. 6.3) recommends that TCSPs establish a risk-based schedule: low-risk trusts (e.g., a simple trust with a single settlor and one beneficiary who is a family member) may be reviewed every 24 months, while high-risk trusts (e.g., a trust with a PEP settlor and assets in multiple jurisdictions) require annual review. The review must include a reassessment of the trust’s risk rating, an update of the beneficial ownership register, and a check against the latest sanctions lists published by the United Nations Security Council and the Hong Kong Monetary Authority. As of the first quarter of 2025, the HKMA’s sanctions list includes 15 individuals and 23 entities connected to Russia and Belarus, requiring TCSPs to screen all trust parties against these lists.

Record-Keeping and Suspicious Transaction Reporting

The AMLO imposes strict record-keeping obligations on TCSPs under sections 5 and 6 of Schedule 2. All CDD records, including copies of identification documents, trust deeds, and beneficial ownership registers, must be retained for at least five years after the termination of the business relationship or the date of the occasional transaction. For family trusts that span multiple generations, this means records must be maintained for the lifetime of the trust plus five years, potentially exceeding 50 years. The Companies Registry’s 2023 guidance (CRGN-AML-2023/1, para. 22) permits electronic storage, provided the records are readily accessible and reproducible in Hong Kong. A TCSP that fails to maintain these records faces a maximum fine of HKD 100,000 and imprisonment for six months on summary conviction, per section 5(3) of the AMLO.

Suspicious Transaction Reporting Obligations

Under section 12 of the AMLO, a TCSP must file an STR with the Joint Financial Intelligence Unit (JFIU) if it knows or suspects that any property is proceeds of crime or terrorist financing. The threshold for suspicion is low: the SFC’s 2024 Guidelines (para. 9.2) define it as “a reasonable suspicion based on specific facts, not a mere hunch.” For family trusts, common triggers include: a settlor who is unable to provide a credible source of wealth despite repeated requests; a trust that receives a large, unexplained cash deposit (e.g., HKD 5 million in cash from an unknown source); or a beneficiary who insists on transferring assets to a jurisdiction on the FATF grey list without a legitimate commercial reason. The JFIU’s 2024 annual report noted that STRs from TCSPs increased by 28% year-on-year to 1,742, with 34% of these involving trust structures. A TCSP that fails to file an STR when required commits a criminal offence under section 12(3), punishable by a fine of up to HKD 500,000 and imprisonment for three months.

Tipping-Off Prohibitions and Confidentiality

A related obligation under section 13 of the AMLO is the prohibition on “tipping-off”—disclosing to any person that an STR has been or will be filed, or that an investigation is underway. For family offices managing multiple trusts, this creates a tension with the duty of confidentiality owed to the settlor. The HKMA’s 2024 guidance (HKMA B1/15C/2024, para. 18) clarifies that a TCSP may inform its own legal counsel or external auditor of the STR filing, but must not inform the settlor, the trustee, or any beneficiary. A breach of the tipping-off prohibition is a criminal offence under section 13(2), carrying a maximum penalty of HKD 1 million and imprisonment for three years. In practice, this means that a family office that suspects its founding family’s trust of money laundering must file the STR without alerting the family, a step that can strain the relationship but is legally non-negotiable.

Practical Compliance Framework for Family Trusts

Given the breadth of the AMLO’s requirements, a family trust’s compliance framework must be embedded in its governance structure from inception. The most effective approach is a risk-based compliance manual tailored to the trust’s specific profile, approved by the board of the trustee or the family office’s compliance committee. This manual should include a CDD checklist that maps each trust participant (settlor, protector, beneficiaries, and any enforcers for non-charitable purpose trusts) to the AMLO’s identification requirements, with a clear escalation pathway for EDD triggers. The HKMA’s 2025 thematic review of TCSPs found that 62% of deficiencies in AML compliance stemmed from inadequate CDD documentation, particularly for trusts with multiple layers of ownership.

Technology and Outsourcing Solutions

The AMLO does not prohibit outsourcing of AML compliance functions, but section 7 of Schedule 2 requires the TCSP to remain responsible for compliance regardless of the outsourcing arrangement. For family trusts, this is relevant when the trustee engages a third-party AML software provider for sanctions screening or transaction monitoring. The SFC’s 2024 Guidelines (para. 11.3) require that the TCSP conduct due diligence on the service provider, including a review of its data security protocols and its ability to handle Hong Kong-specific sanctions lists. A growing number of Hong Kong-based family offices are adopting automated CDD platforms that integrate with the Companies Registry’s Integrated Company Registry Information System (ICRIS) and the HKMA’s sanctions database, reducing manual errors. However, the HKMA’s 2024 circular cautions that automation does not replace the need for human judgment, particularly in assessing the reasonableness of source-of-wealth explanations for complex trust structures.

Cross-Border Considerations and Information Sharing

For family trusts with assets or beneficiaries in multiple jurisdictions, the AMLO’s information-sharing provisions under section 17 allow TCSPs to share CDD information with foreign affiliates, provided the recipient is subject to equivalent AML/CFT requirements. This is particularly relevant for Hong Kong-based trustees of trusts that hold assets in Singapore, the Cayman Islands, or the United Kingdom. The FATF’s 2024 guidance on beneficial ownership transparency encourages jurisdictions to implement mechanisms for cross-border information exchange, and Hong Kong has entered into 42 bilateral agreements for this purpose as of January 2025. A trustee that needs to verify the identity of a beneficiary resident in a jurisdiction without a formal agreement must rely on the beneficiary’s self-certification, supported by a notarised copy of their passport and a recent utility bill, with the original documents held in Hong Kong.

Actionable Takeaways for Family Trust Practitioners

1. Register as a TCSP with the Companies Registry before providing any trust services for remuneration, even if the trust is a single-family PTC, as the 2023 amendments eliminated the incidental-services exemption.
2. Conduct CDD on every trust participant who holds a 25% or greater interest or effective control, and document the source of wealth for all settlors and protectors with independent evidence, not self-declarations.
3. File an STR with the JFIU within 15 business days of forming a suspicion, and maintain a written record of the decision-making process, including the specific facts that triggered the suspicion, to demonstrate compliance with section 12 of the AMLO.
4. Review the trust’s risk rating annually for high-risk structures and at least every 24 months for low-risk trusts, updating the beneficial ownership register and screening against the HKMA’s sanctions list each time.
5. Retain all CDD and transaction records for five years after the trust’s termination, using an electronic system that allows immediate retrieval in Hong Kong, and ensure that any outsourcing arrangement preserves the TCSP’s full compliance responsibility under section 7 of Schedule 2.