Customer Due Diligence for Annuity Products: AML and Know Your Client Requirements

The Hong Kong Insurance Authority (IA) has signalled a material escalation in its enforcement of anti-money laundering (AML) and counter-financing of terrorism (CFT) controls for the long-term insurance sector, with annuity products now under specific scrutiny. The IA’s 2024-25 enforcement priorities, published in its latest annual report, explicitly target the adequacy of “customer due diligence” (CDD) for high-net-worth (HNW) policyholders and those using complex premium payment structures. This shift is not theoretical. In December 2024, the IA imposed a record HKD 19.8 million fine on a major life insurer for systemic failures in its AML controls, including deficiencies in verifying the source of wealth for annuity contract holders. For the 55+ retirement planning demographic, the implications are direct: the purchase of a deferred or immediate annuity now triggers a level of identity, source-of-funds, and beneficial ownership verification that was previously reserved for investment-linked products. This article examines the specific CDD requirements under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615), the IA’s Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (GL-6), and the practical impact on annuity purchase processes in Hong Kong, Singapore, and Taiwan.

The Regulatory Framework: AMLO and GL-6 for Annuity Products

Statutory Basis Under Cap. 615

The primary legal obligation for insurers conducting CDD is set out in the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). Section 5 of the AMLO requires any “financial institution,” which includes licensed insurers under the Insurance Ordinance (Cap. 41), to perform CDD measures when establishing a business relationship. For annuity products, this business relationship is established at the point of application, not at policy issuance. The statutory threshold is clear: CDD must be performed before the insurer accepts any premium payment, including single-premium or first-year regular premiums. The IA’s GL-6, issued under section 133 of the Insurance Ordinance, provides the operational interpretation. Paragraph 4.1 of GL-6 states that the CDD measures must include the identification of the customer, the verification of that identity using reliable, independent source documents, and, critically, the identification of the beneficial owner. For an annuity purchased by a trust or a corporate entity—a common structure for HNW retirees in Hong Kong—the insurer must identify the natural person(s) who ultimately owns or controls the policy.

The 2024-25 Enforcement Shift

The IA’s thematic review of AML controls in 2024 found that 38% of long-term insurers had inadequate procedures for verifying the source of wealth for single-premium annuity contracts exceeding HKD 2 million. This finding is directly relevant to the 55+ demographic, who often use accumulated retirement savings or property sale proceeds for a single-premium annuity purchase. The IA’s enforcement action against the unnamed insurer in December 2024 (IA Press Release, 12 December 2024) cited failures to obtain “adequate evidence of the source of wealth” for three annuity policyholders, each with a premium value between HKD 5 million and HKD 15 million. The penalty of HKD 19.8 million represented 0.13% of the insurer’s total premium income for the relevant period, a ratio the IA stated was “a deterrent benchmark” for the industry.

CDD Requirements for the 55+ Annuity Buyer

Standard vs. Enhanced Due Diligence

For annuity products, the distinction between standard CDD and enhanced due diligence (EDD) depends on the premium amount and the customer’s risk profile. Under GL-6, paragraph 5.1, standard CDD applies to policies with a total premium below HKD 120,000 (or equivalent in foreign currency). For policies above this threshold—which covers virtually all retirement-focused annuity products—the insurer must obtain the customer’s full name, date of birth, nationality, permanent address, and a government-issued photo ID. For the 55+ buyer, the verification of permanent address is a frequent friction point. The IA’s guideline accepts a utility bill, bank statement, or government-issued correspondence dated within the last three months. However, for retirees who have recently relocated or are living in a care facility, a Hong Kong residential address may not be available. In such cases, the insurer must apply a risk-based approach, which may require a personal interview or a letter from a recognised institution (e.g., a hospital or retirement home).

Source of Wealth for Retirement Funds

The most significant CDD requirement for the 55+ annuity buyer is the verification of the source of wealth (SOW) for the premium payment. The IA’s GL-6, paragraph 5.3, requires that for a “high-risk” customer or a transaction above HKD 800,000, the insurer must obtain “adequate evidence” of the source of the funds. For a retiree funding an annuity from the sale of a property, this means providing the sale and purchase agreement, the bank statement showing the deposit of the sale proceeds, and a confirmation of the property’s ownership history. For a pension lump-sum withdrawal, the insurer requires the pension provider’s statement and the tax clearance letter. The IA has made clear that a simple bank statement showing a large balance is insufficient. The source of that balance must be traced. This requirement is not merely administrative; it is a legal obligation under section 5(3) of the AMLO. Failure to comply exposes the insurer to a fine of up to HKD 1 million and imprisonment for up to 7 years for the responsible officer.

Cross-Border Considerations: Hong Kong, Singapore, and Taiwan

Hong Kong: The IA’s Risk-Based Approach

Hong Kong’s IA adopts a risk-based approach that aligns with the Financial Action Task Force (FATF) recommendations. For a Hong Kong resident purchasing a Hong Kong-licensed annuity, the CDD process is standardised. The insurer must complete a “Customer Risk Assessment” form, which scores the customer on factors including occupation, country of residence, and the intended use of the policy. For a 65-year-old retiree with a Hong Kong permanent identity card and a local bank account, the risk score is typically low, and the CDD process can be completed within 3-5 business days. However, for a retiree who is a politically exposed person (PEP) or who holds a passport from a jurisdiction on the FATF’s list of high-risk countries, EDD is mandatory. EDD requires the insurer to obtain additional information, such as the customer’s employment history, the source of their wealth over the past five years, and a letter from a lawyer or accountant confirming the legitimacy of the funds. The IA’s 2024 enforcement data shows that the average time to complete EDD for an annuity application is 21 days, compared to 7 days for standard CDD.

Singapore: MAS Notice 626 and the Single Premium Issue

Singapore’s Monetary Authority of Singapore (MAS) Notice 626 on the Prevention of Money Laundering and Countering the Financing of Terrorism imposes a stricter threshold for CDD than Hong Kong. For annuity products, MAS Notice 626, paragraph 6.2, requires CDD for any policy with a single premium exceeding SGD 20,000 (approximately HKD 115,000) or an annual premium exceeding SGD 4,000. For the 55+ buyer, this means that virtually all deferred and immediate annuity products trigger full CDD. The most contentious requirement in Singapore is the verification of the source of wealth for any premium payment exceeding SGD 100,000. The MAS requires that the insurer obtain “documentary evidence” of the source of the funds, including but not limited to a tax return, a property sale document, or a letter from a financial institution. For a retiree using a CPF (Central Provident Fund) lump sum withdrawal, the insurer must obtain the CPF Board’s statement and the withdrawal confirmation. Failure to provide this documentation results in the application being rejected. The MAS’s 2023 enforcement report noted that 12% of annuity applications were rejected or delayed due to incomplete SOW documentation.

Taiwan: FSC Requirements and the Foreign Exchange Control

Taiwan’s Financial Supervisory Commission (FSC) imposes CDD requirements under the Money Laundering Control Act (MLCA). For annuity products, the FSC requires CDD for any single premium exceeding TWD 500,000 (approximately HKD 120,000). The unique feature of Taiwan’s regime is the requirement for a “beneficial ownership declaration” for any policy where the premium payer is not the policyholder. This is common in Taiwan for annuities purchased by a parent for a child’s retirement. The FSC requires the insurer to identify the natural person who ultimately controls the policy, and to obtain a signed declaration from that person. For a cross-border buyer—for example, a Hong Kong resident purchasing a Taiwan-issued annuity—the FSC requires the insurer to verify the buyer’s Hong Kong identity and address using documents issued by the Hong Kong government. The FSC’s 2024 circular on cross-border insurance transactions explicitly states that a Hong Kong identity card and a Hong Kong residential address are acceptable, but a PO Box or a care-of address is not.

Practical Implications for the Annuity Purchase Process

Documentation Checklist for the 55+ Buyer

Based on the IA’s GL-6 and the MAS Notice 626, the following documentation is now standard for an annuity application in Hong Kong or Singapore:

• Proof of identity: A valid passport or national identity card. For Hong Kong, the Hong Kong Permanent Identity Card is accepted. For Singapore, the Singapore NRIC or a foreign passport with a valid work pass.
• Proof of address: A utility bill, bank statement, or government correspondence dated within the last three months. For retirees in a care facility, a letter from the facility on its letterhead is required.
• Source of wealth documentation: For a property sale, the sale and purchase agreement and the bank statement showing the deposit. For a pension lump sum, the pension provider’s statement and the tax clearance letter. For a gift from a family member, a signed gift letter and the donor’s source of wealth documentation.
• Beneficial ownership declaration: For policies held by a trust or a corporate entity, a signed declaration identifying the natural person who controls the policy.

The Time Cost of Compliance

The IA’s 2024 data indicates that the median time from application to policy issuance for a standard annuity in Hong Kong is 14 days, but for applications requiring EDD, the median time extends to 28 days. For Singapore, the MAS’s 2023 data shows a median of 21 days for standard CDD and 35 days for EDD. For Taiwan, the FSC’s 2024 data shows a median of 10 days for standard CDD and 18 days for EDD. For the 55+ buyer who is planning a retirement cash flow, this time cost must be factored into the planning horizon. A single-premium annuity purchase should be initiated at least 30 days before the intended income start date.

Actionable Takeaways for the 55+ Annuity Buyer

1. Initiate the annuity application at least 30 days before the intended income start date to account for the CDD and EDD processes, which the IA’s 2024 data shows average 14-28 days for standard and enhanced cases, respectively.

2. Prepare a complete source-of-wealth documentation pack for any premium payment exceeding HKD 800,000 (Hong Kong) or SGD 100,000 (Singapore), including the sale and purchase agreement for property proceeds, the pension provider’s statement for lump sums, and a signed gift letter for family transfers.

3. Ensure your permanent address is verifiable with a document dated within the last three months, as a care-of address or a PO Box will not satisfy the IA’s GL-6 or the MAS Notice 626 requirements.

4. For cross-border annuity purchases, verify the specific CDD requirements of the target jurisdiction, as Taiwan’s FSC requires a beneficial ownership declaration and a Hong Kong government-issued identity document for non-resident buyers.

5. Maintain a copy of all CDD documents for at least seven years after the policy lapses or is surrendered, as the IA’s enforcement actions can reach back to policies issued in that period.