Corporate policyholder onboarding in Hong Kong

For a corporate policyholder, Hong Kong life insurers apply AMLO and the Insurance Authority's GL3. Record the policyholder, insured person, premium payer and beneficiary separately, including any later changes.

Verify the policyholder and its owners

Identify the company taking out the policy and verify it using reliable, independent evidence. Its incorporation record, current extract and constitution help establish the legal entity. The Hong Kong document guide explains local records; an overseas company needs the appropriate records from its registry.

The ownership enquiry follows the corporate policyholder. GL3 paragraphs 4.4.6–4.4.9 cover individuals with more than 25% of shares or voting rights and those with ultimate management control. Identify and take reasonable measures to verify them; if nobody meets the definition, apply the senior-managing-official provision. The policy beneficiary is recorded separately.

A representative arranging the insurance also needs identity and authority checks under paragraph 4.5. A company mandate can explain who may take out cover and which later instructions, such as assignment or surrender, require another approval.

Explain the cover and the money

Ask why the company is taking out the policy, whose life is insured, who will fund the premiums and who will receive the benefit. Record the expected premium amounts and payment arrangements in the proposal.

Identify the premium payer early. The IA's April 2024 circular calls for controls to detect third-party payments, establish the payer's relationship with the policyholder and understand why they are paying. Insurers should generally not accept payments from unrelated third parties. A cashier order therefore needs a traceable purchaser and funding explanation, not just the policy number written on it.

Assess the customer, product, geography and payment risks together. Resolve screening matches and apply the enhanced checks and approvals triggered by the findings. For non-Hong Kong PEP customers or beneficial owners, GL3 paragraph 4.11.11 requires senior-management approval and reasonable measures to establish source of wealth and funds.

Record the beneficiary now; schedule the later checks

When a beneficiary is designated, record their name or sufficient information about the designated class. Under GL3 paragraphs 4.6.1–4.6.4, verification falls due when the beneficiary exercises vested rights or receives the first payout, whichever happens earlier. Identify a corporate beneficiary's beneficial owners and, where the specified high-risk condition applies, take reasonable measures to verify them.

Set that trigger in the policy record. A later beneficiary change should update the designation and pending checks, so the claims team can see whom to verify when payment becomes due.

Complete the review and keep it current

Customer and beneficial-owner verification normally takes place before or during establishment of the relationship. GL3 paragraph 4.9 allows exceptional deferral only with effective risk management, a need to avoid interrupting normal business and prompt completion. Record the decision, required approvals and any permitted outstanding verification before handing over the policy file. Where required CDD cannot be completed, GL3 paragraph 4.15.1 calls for refusal or termination as applicable, and a report to the JFIU where there is relevant knowledge or suspicion.

Update the policy file for ownership, mandate, premium and beneficiary changes. GL3 paragraphs 8.4 and 8.6 require customer records for at least five years after the relationship ends and transaction records for at least five years after completion of the transaction.