Precious Metals Dealer CDD Practice

貴金屬客戶盡職審查：香港交易商的實務起點

對於在香港營運的貴金屬及寶石交易商而言，客戶盡職審查（CDD）並非可選的合規加分項，而是《打擊洗錢及恐怖分子資金籌集條例》（第615章）下的法定責任。自2023年4月1日起，香港海關負責執行貴金屬及寶石交易商註冊制度，任何交易商若有意在業務中進行總額為12萬或以上港元的非現金交易，必須註冊為A類註冊人；若同時進行總額為12萬或以上港元的現金交易及非現金交易，則須註冊為B類註冊人，並須全面遵守打擊洗錢及恐怖分子資金籌集規定，包括客戶盡職審查及備存紀錄的要求。這意味着，CDD的實務深度直接決定交易商能否取得或維持B類註冊資格，因為根據海關的常見問題說明，交易商如未能達到附表2所訂的客戶盡職審查規定，則只可以申請A類註冊，並不能進行任何指明現金交易。

本文旨在為交易商提供一份可操作的CDD實務指南，聚焦於如何將法定要求轉化為日常營運中的具體步驟。我們將從註冊類別的選擇開始，釐清A類與B類在CDD義務上的本質差異，然後逐步拆解客戶盡職審查的核心元素，包括客戶身份識別、實益擁有人核查、風險評估及持續監察。此外，我們會討論如何建立一套符合海關期望的內部管控文件，以及當客戶資料或業務詳情發生變更時，交易商須在一個月內以書面通知海關的合規時限。透過這些實務層面的剖析，交易商可以更清晰地規劃其合規路徑，避免因CDD程序不足而喪失進行現金交易的資格。

Who Should Prioritise Customer Due Diligence for Precious Metals Dealers?

Customer due diligence (CDD) is not a one-size-fits-all obligation. In Hong Kong, the depth of your CDD duties depends on the registration category you hold or seek under the Customs and Excise Department’s regime for dealers in precious metals and stones. If your business only conducts specified transactions—those that are not cash-based—you may apply for the simpler A-class registration. However, if you conduct or intend to conduct specified cash transactions, you must apply for B-class registration. This distinction is fundamental because B-class applicants must satisfy the fit and proper person criteria under sections 53ZUN and 53ZUO of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and demonstrate full compliance with the AML/CTF requirements set out in Schedule 2, including CDD and record-keeping. Dealers who cannot meet these obligations are restricted to A-class registration and are prohibited from conducting any specified cash transactions.

Key Planning Decisions for Your CDD Framework

Before you design your CDD procedures, consider these decisions:

• Determine your registration class early. If you plan to handle cash transactions of HK$120,000 or more, you need B-class registration. This choice dictates the rigour of your CDD programme, as B-class dealers must implement enhanced measures for cash-intensive dealings.
• Assess your current AML infrastructure. Do you already have policies for client identification, beneficial ownership verification, and ongoing monitoring? If not, you must build these from scratch to meet Schedule 2 standards.
• Prepare for the fit and proper test. For B-class applicants, the Customs and Excise Department will assess whether you and your key personnel are suitable. This includes reviewing your compliance history and the integrity of your operations.
• Plan for ongoing obligations. Registration is not a one-off event. You must notify the Customs and Excise Department in writing within one month of any change to the details provided in your application or renewal, as required under section 53ZVA. Your CDD framework must therefore be adaptable to changes in your business structure, ownership, or premises.

By making these decisions early, you can align your CDD practices with the expectations of the Customs and Excise Department and avoid the operational disruption of reworking your compliance framework after an application is submitted.

Preparing for Precious Metals Customer Due Diligence: Information to Gather Before You Act

Before you begin any precious metals customer due diligence process, you must first confirm which registration category applies to your business. According to the Customs and Excise Department’s FAQ for dealers in precious metals and stones, if you only conduct specified transactions (those that are not cash-based), you may apply for the simpler A-class registration. If you conduct or intend to conduct specified cash transactions, you must apply for B-class registration. This distinction is not merely administrative—it determines the full scope of your CDD obligations. B-class applicants must pass the fit and proper person criteria under sections 53ZUN and 53ZUO of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and demonstrate compliance with the AML/CTF requirements in Schedule 2, including customer due diligence and record-keeping. If you cannot meet these requirements, you may only apply for A-class registration and cannot conduct any specified cash transactions.

Key Information to Collect Before Starting CDD Implementation

To avoid delays and compliance gaps, gather the following information before you design or update your CDD procedures:

• Business registration details: Confirm that your business holds a valid Business Registration Certificate or a valid licence under the Hawker Regulation (Cap. 132AI), as these are prerequisites for registration.
• Transaction types: Clearly define whether your business will handle cash transactions above the specified threshold. This determines whether you need A-class or B-class registration and the corresponding CDD depth.
• Premises information: Identify all business premises where you operate the precious metals and stones business, as these must be declared to Customs. If any details change after registration, you must notify Customs in writing within one month of the change.
• Ownership and control structure: For B-class applicants, prepare documentation on partners, directors, and ultimate owners, as these individuals will be assessed for fitness and propriety. This may include declarations similar to those used in other regulated sectors, such as the Fit and Proper Person Declaration forms used by money service operators.
• Existing AML/CTF measures: Review any current customer due diligence, record-keeping, and internal control procedures. If you have not yet implemented these, note that the transition period for the registration regime ended on 31 December 2023, and existing dealers who applied during that period were treated as B-class registrants until their application was determined or withdrawn.

By gathering this information upfront, you can streamline your registration application and build a CDD framework that meets the Customs and Excise Department’s expectations from the outset.

Step-by-Step: Conducting Customer Due Diligence for Precious Metals Dealers

Once you have confirmed your registration category, the next step is to translate the statutory requirements into a practical CDD workflow. The Customs and Excise Department (C&ED) expects registered dealers to implement robust procedures that align with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). While the law does not prescribe a single method, a structured approach ensures consistency and auditability.

1. Identify the Customer and Verify Their Identity

Begin by collecting the customer’s full name, date of birth (for individuals), and residential or business address. For corporate clients, obtain the company’s name, registration number, and registered office address. Verification should be based on reliable, independent source documents, such as a valid passport or Hong Kong identity card for individuals, and the Certificate of Incorporation or Business Registration Certificate for companies. The C&ED’s guidance emphasises that verification must occur before or during the transaction, and you should retain copies of the documents used.

2. Identify and Verify Beneficial Owners

For legal entities, you must identify the natural persons who ultimately own or control the client. This involves looking through corporate structures to find individuals holding more than 25% of shares or voting rights, or who otherwise exercise control. Verification can be achieved through shareholder registers, trust deeds, or declarations from the client. The level of verification should be commensurate with the risk posed by the client, but it is a mandatory step for all non-individual clients.

3. Understand the Purpose and Intended Nature of the Business Relationship

You are required to gather information on the purpose of the transaction or business relationship. For precious metals dealers, this might include the type of metal, the expected transaction volume, and the source of funds. This step helps you assess whether the transaction is consistent with the customer’s profile and business activities.

4. Conduct Ongoing Due Diligence

CDD is not a one-off event. You must monitor the business relationship to ensure that transactions remain consistent with your knowledge of the customer and their risk profile. This includes reviewing existing records and updating them when changes occur, such as a change in beneficial ownership or business nature. The C&ED’s supervision framework expects dealers to maintain up-to-date records and to be able to demonstrate that they have applied enhanced due diligence where necessary.

By following these steps, you create a defensible CDD process that meets the expectations of the C&ED and supports your compliance with Cap. 615.

Building a Practical CDD Evidence File for Precious Metals Dealers

Once your CDD workflow is in place, the next practical question is: what documents and records should you actually collect and keep? A well-organised CDD evidence file is not just a regulatory formality—it is the primary way you can demonstrate to the Customs and Excise Department (C&ED) that your due diligence is genuinely risk-based and compliant with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). While the law does not prescribe an exhaustive checklist, the following categories are essential to support your obligations under the registration regime.

1. Customer Identification and Verification Records

For every customer, you must obtain and verify their full name, date of birth (for individuals), and residential or business address. For corporate customers, you should collect the certificate of incorporation, business registration certificate, and the company’s constitutional documents. These records form the foundation of your CDD obligations and must be obtained before or during the course of establishing a business relationship. Without these, you cannot properly assess the customer’s risk profile or meet the statutory identification requirements.

2. Beneficial Ownership and Control Structure Documentation

You must identify the natural person(s) who ultimately own or control the customer, especially for corporate entities. This includes obtaining an ownership chart, shareholder registers, and details of directors and significant controllers. The purpose is to understand who you are really dealing with and to detect any hidden layers that could obscure money laundering or terrorist financing risks. This documentation is particularly important for B-class registrants, who are subject to the full CDD requirements under Schedule 2 of the Ordinance.

3. Risk Assessment and Ongoing Monitoring Evidence

Your CDD file should include a documented risk assessment for each customer, based on factors such as the customer’s background, the nature of the transaction, and the source of funds. You should also record the frequency and method of ongoing monitoring, including any alerts or unusual activity reviews. This evidence demonstrates that your approach is dynamic and responsive, not a one-off exercise. The C&ED’s guidance for money service operators—which is analogous to the precious metals regime—emphasises that CDD must be applied on a risk-sensitive basis, and the same principle applies here.

4. Records of Changes and Notifications

Under the registration regime, if any details you provided to the C&ED change—such as your business address or the particulars of your partners or directors—you must notify the department in writing within one month of the change. Internally, you should also keep records of any updates to customer information, such as changes in beneficial ownership or contact details. This ensures your CDD files remain current and accurate, which is a key expectation of any supervisory inspection.

By maintaining a complete and organised evidence file, you not only meet your legal duties but also position your business for smoother inspections and renewals. The C&ED’s online system allows you to submit applications and reports, but the underlying documentation must be ready for review at any time.

Handling Changes and Ongoing Monitoring in Precious Metals Customer Due Diligence

Customer due diligence is not a one-off event; it is a continuous obligation that extends beyond the initial onboarding of a client. For precious metals dealers in Hong Kong, the regulatory framework under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) requires ongoing vigilance. One of the most practical aspects of this is the duty to update the Customs and Excise Department (C&ED) when your own business details change. According to the C&ED’s FAQ for dealers in precious metals and stones, if a registered person’s details provided to the department change, the dealer must notify the C&ED in writing within one month of the change. This requirement applies to both A-class and B-class registrants and underscores the importance of maintaining accurate records not only for clients but also for your own registration profile.

Beyond statutory notifications, effective CDD means establishing a system for ongoing monitoring of your business relationships. This is particularly relevant for B-class registrants who conduct specified cash transactions. The law does not prescribe a single method for monitoring, but a risk-based approach is expected. For example, you should review existing client files periodically, especially for those clients whose transactions approach or exceed the 12萬港元 threshold that triggers registration obligations. If a client’s transaction patterns change—such as a sudden increase in cash purchases—this may signal a need for enhanced due diligence. Similarly, if you become aware of any adverse information about a client, such as involvement in suspicious activities, you should reassess the risk profile and consider whether to file a suspicious transaction report with the authorities.

Another key decision point is how to handle changes in beneficial ownership or control structure of a corporate client. Since CDD requires you to identify and verify the ultimate beneficial owner, any change in this area should prompt a re-verification. While the law does not specify a timeline for such reviews, best practice is to update the client’s profile at least annually or whenever a significant transaction occurs. For A-class registrants, who do not conduct cash transactions, the focus may be more on ensuring that non-cash transactions do not inadvertently involve cash-like instruments that could trigger B-class obligations.

In practice, many dealers find it helpful to integrate CDD monitoring into their existing transaction review processes. For instance, you might set up alerts for transactions that approach the 12萬港元 threshold, or for clients whose cumulative transactions over a period exceed a certain level. This proactive approach not only helps you stay compliant but also protects your business from being used for money laundering or terrorist financing. Remember, the C&ED conducts compliance inspections, and having a well-documented monitoring trail will demonstrate your commitment to the regulatory framework.

Finally, it is crucial to document all monitoring activities and decisions. This includes notes on why a particular client was flagged for enhanced due diligence, what steps you took, and the outcome. Such records serve as evidence of your compliance efforts and can be invaluable during an inspection. By treating CDD as a dynamic process, you not only meet legal requirements but also build a more resilient and trustworthy business.

Common Pitfalls and Practical Controls in Precious Metals Customer Due Diligence

Even with a well-designed CDD workflow, precious metals dealers in Hong Kong can stumble on recurring pitfalls. One of the most common is treating CDD as a one-time onboarding formality rather than a continuous obligation. The Customs and Excise Department (C&ED) expects registered dealers to maintain ongoing vigilance, especially when client circumstances or business details change. For instance, if a registered dealer’s own particulars—such as business premises or ownership—change, the dealer must notify the C&ED in writing within one month of the change, as stipulated under section 53ZVA of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). Failing to update such details can undermine the integrity of your CDD records and raise regulatory concerns.

Another frequent mistake is neglecting to tailor CDD measures to the specific risks of cash-intensive transactions. Under the registration regime, dealers who conduct specified cash transactions of HK$120,000 or more must register as B-class and comply with full AML/CFT requirements, including CDD. A common error is applying the same simplified CDD approach to all clients regardless of transaction type or amount. This can lead to gaps in identifying higher-risk customers or unusual transaction patterns. To mitigate this, dealers should implement risk-based controls that escalate due diligence for cash transactions, politically exposed persons, or clients from high-risk jurisdictions.

Practical controls that can help include: establishing clear internal policies that distinguish A-class and B-class obligations; conducting periodic reviews of existing client files to ensure information is current; and documenting the rationale for any risk assessments or exemptions. Dealers should also ensure that staff are trained to recognise red flags and know when to escalate concerns. By embedding these controls into daily operations, dealers can not only meet statutory expectations but also build a resilient compliance culture that supports long-term business integrity.

Finally, as a practical next step, dealers should leverage the C&ED’s self-assessment tool, which takes approximately 5 to 10 minutes to complete. This tool helps participants determine whether they need to apply for A-class or B-class registration and assesses their readiness. Regularly revisiting this self-assessment can help dealers stay aligned with regulatory expectations and identify areas for improvement in their CDD framework.

Conclusion: Embedding Precious Metals Customer Due Diligence as a Business Habit

For precious metals dealers in Hong Kong, customer due diligence is not a static checklist but a dynamic discipline that must be woven into daily operations. The distinction between A-class and B-class registration under the Customs and Excise Department’s regime is a clear reminder that the depth of your CDD obligations directly reflects the nature of your transactions. If you handle specified cash transactions, B-class registration demands full compliance with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), including robust CDD and record-keeping. As the C&ED FAQ notes, a dealer that fails to meet these requirements may only apply for A-class registration and cannot conduct specified cash transactions. This practical consequence underscores why CDD should be treated as a strategic priority, not an administrative afterthought.

Building a compliant framework involves more than collecting identification documents. It requires a risk-based approach that includes identifying customers and beneficial owners, understanding the purpose of transactions, and maintaining ongoing monitoring. Equally important is the duty to notify the C&ED of any changes to your registration details within one month, as stipulated under section 53ZVA. By embedding these practices into your standard operating procedures, you not only satisfy regulatory expectations but also protect your business from being misused for financial crime.

Ultimately, the goal is to create a culture where CDD is second nature. Whether you are a small bullion trader or a large gemstone dealer, the principles remain the same: know your customer, assess risk, and keep accurate records. By doing so, you position your firm to operate with integrity and resilience in Hong Kong’s precious metals market.