Hong Kong AML operations guide · Free control checklist
AML screening software for Hong Kong lenders
AML screening is not a red or green result returned after submitting a name. An effective process handles name variants, false positives, PEP and sanctions data, customer risk, ongoing rescreening, escalation, written decisions and traceable records.
Core definitions
Put similar concepts in the right place
Each component solves a different problem. Complete lending operations depend on clear data and workflow hand-offs.
| Item | What it does in practice |
|---|---|
| 01PEP screening | Compare applicable PEP information and show possible relationships, source evidence and the reason further due diligence may be needed. |
| 02Sanctions and watchlists | Screen names and aliases against approved sources while retaining list version, search time and match details. |
| 03Match case management | Give staff similarity, birth data, nationality and other identifiers to distinguish a true match, false positive or insufficient data. |
| 04Ongoing rescreening | Rescreen existing borrowers under the lender’s risk policy and create queues for new matches, completed reviews and escalations. |
Workflow
Eight control points in an AML screening workflow
- 01
Prepare identity data
Standardise names, aliases, birth data, nationality and company relationships while retaining original values.
- 02
Screen the required sources
Query PEP, sanctions, terrorist and other approved watchlist sources under the lender’s policy.
- 03
Retain explainable results
Record source, list version, similarity, matched fields and fields that did not match.
- 04
Assign the match case
Route by risk, product, company and deadline to the designated compliance or operations role.
- 05
Record the human decision
Capture the reason for clearing, requesting data, applying enhanced review, restricting or escalating.
- 06
Manage higher-risk relationships
Attach management approval, source-of-funds or wealth evidence and enhanced-monitoring measures to the customer.
- 07
Rescreen and monitor
Repeat screening by risk and trigger event, connecting each result to earlier decisions.
- 08
Protect reporting boundaries
Keep internal escalation, MLRO assessment and suspicious-transaction reporting under the lender’s access controls.
Printable worksheet
Free: 14-point AML screening control checklist
Use this for a vendor demonstration and the internal operating design. Confirm individual duties against current official guidance and professional advice.
Practical evaluation
Decision records matter more than the number of matches
False positives are inevitable
Common names and incomplete data create false positives. A good process gives staff evidence, supplemental data and earlier decisions—not a goal of zero matches.
Screening is not transaction monitoring
List screening, customer risk assessment, ongoing due diligence and transaction monitoring connect to each other but answer different questions.
Software does not make the regulatory judgement
A system can route, restrict access and retain evidence. The lender remains responsible for risk treatment, STR decisions and avoiding tipping off.
Frequently asked questions
Quick answers
Is AML screening performed only at application?
No. The Companies Registry AML/CFT guideline covers ongoing monitoring. Lenders should update customer information, rescreen and review activity according to risk and trigger events.
Does a PEP match always mean rejection?
Not necessarily. PEP risk is handled under applicable requirements and a risk-based approach, potentially including verification, management approval, source-of-funds or wealth work and enhanced monitoring.
Will Covenant Desk submit an STR for the lender?
No. Covenant Desk can retain internal escalation and evidence, but suspicion assessment and reporting to the JFIU remain under the lender’s designated people and systems.
Primary sources
Official sources and editorial note
This guide reflects official material available on the review date. Requirements can change; each institution should check the latest licence conditions and obtain legal or compliance advice. This page is not legal advice. Read our editorial and corrections policy.
Next step
Connect AML matches, reviews, rescreening and escalation to Customer 360.
Try Covenant Desk to see PEP, sanctions and watchlist results enter controlled queues and remain attached to the borrower record.
Covenant Desk is lending operations software. It does not provide loans, issue credit reports or replace the lender’s final credit decision.