From 7 Days to 4 Hours: GBA Customer Onboarding for a Major HK Insurer

The Challenge

A major Hong Kong insurance group was experiencing significant friction in onboarding Mainland Chinese customers — a critical and fast-growing segment for GBA-focused product lines.

The existing process required customers to submit physical copies of their Mainland ID card, which were then manually reviewed by compliance staff against internal watchlists and regulatory requirements under the Insurance Authority's AMLO guidelines (Section 4.3 and Circular INS/TEC/10/48). Each case took between 5 and 7 business days. Error rates and re-submission requests were high, creating customer support overhead and dampening conversion rates on digital channels.

The insurer needed a solution that was fully compliant with IA regulations, could support remote (non-face-to-face) onboarding, and required minimal infrastructure changes on their end.

The Solution

Fill Easy integrated two identity layers via a standard API:

• iAM Smart (HK residents):Customers scan a QR code, authorise data sharing through their government-issued iAM Smart app, and verified personal data — name, HKID, date of birth, address — is passed directly to the insurer's system in under 2 minutes.
• SinoConnect / Mainland IDV (GBA customers):Mainland customers tap their 二代身份证 to their phone's NFC reader. The ID card is verified against Ministry of Public Security records in real time, and a government-certified copy of the data — name, ID number, date of birth, address, ethnicity, photo — is returned to the insurer as a digitally signed document.

The integration used Fill Easy's whitelabel GovVerify onboarding widget, deployed on the insurer's agent tablet (POS channel) and customer-facing mobile app. The cross-border data transfer was fully covered under Fill Easy's Standard Contract Filing approved by 广东省互联网信息办公室, satisfying the insurer's DPO and external counsel with no additional legal work required.

Regulatory & Compliance Considerations

The solution was structured to fully satisfy the Insurance Authority's requirements for non-face-to-face (non-F2F) onboarding:

• ✓KYC data sourced directly from government authorities — not self-declared by customers
• ✓iAM Smart integration vetted by the HK Office of the Government Chief Information Officer (OGCIO / DPO)
• ✓Mainland IDV technology assessed and certified by Ministry of Public Security Third Research Institute (TRIMPS)
• ✓Cross-border PII transfer covered by Standard Contract Filing (粤港澳大湾区 No. 202500003)
• ✓Outsourcing framework aligned with IA GL14 for material outsourcing

Outcomes

Following deployment across both agent and direct-to-customer channels:

• —KYC cycle time reduced from 7 business days to under 4 hours for the vast majority of cases
• —Manual compliance review of ID documents eliminated entirely for GovVerify-enrolled customers
• —Zero fraud incidents attributable to identity data since go-live
• —Customer support tickets related to onboarding dropped significantly
• —System passed Insurance Authority inspection with no remediation required

Solutions Used