In 2026 the Insurance Authority's enforcement took a new shape: three small-to-mid insurance brokerages fined a combined HK$429,000, three individuals reprimanded, and — for the first time in the IA's history — a criminal prosecution of a licensed insurance broker. Small amounts, big direction: the IA is moving from fining firms to fining people and prosecuting criminally. The corporate shield around intermediaries is cracking.
1. What the three brokerages did wrong
The three firms — ASI-Union Global Assets Management, Macroscopica International Wealth Management, and Bay Union Insurance Brokers — are all small operations, and their failures clustered in the same family:
- PEP screening failure: the same root disease as FWD — politically exposed customers/beneficiaries not identified, or identified without EDD
- Third-party payments not caught: premiums paid by non-policyholders with no interception — the same fault line as FWD's split-cash hole
- At the individual level: three people reprimanded — staff responsible for the control function or the frontline handling
In parallel, the IA's annual report disclosed its first criminal prosecution of a licensed broker — previously the toolkit was administrative fines and licence sanctions only. The gravest breaches (false statements, fraud-type conduct) now go to court.
2. Why small fines still matter
- From institution to individual: enforcement used to stop at the firm — the people inside paid no price. A reprimand now sits on the individual's public record — a career mark.
- Criminal prosecution is a different deterrent: a fine is a cost; a prosecution is liberty. The gravest conduct can no longer be settled as a commercial calculation.
- Small firms get named too: three obscure brokerages — the IA is telling the market that AML duties apply below the bulge bracket.
- Reading it against FWD: on the insurer side, FWD was a systems failure; on the broker side, the same disease at the distribution layer. Every node in the chain is being swept.
3. Legal and regulatory analysis
| Instrument | How it applies | Who it hits |
|---|---|---|
| Insurance Ordinance (Cap.41) + AMLO Sch.2 | CDD / PEP / third-party-payment duties on long-term business — brokers included | Licensed broker companies |
| Licensed Broker Code of Conduct | Professional conduct, due skill, honesty | Firm + individual licensees |
| Criminal prosecution (theft / false statements) | The gravest breaches — false documents, fraud | Courts; imprisonment possible |
Notable is the IA's statistical shape: FY2024-25 saw 8 on-site inspections, 85 concluded investigations and 50 disciplinary actions — the inspection→investigation→sanction conversion rate is high. Being inspected is close to being sanctioned.
RegSir's take
What this round actually changes is the risk equation for intermediaries: small brokerages used to think "worst case, the firm eats a fine or folds" — now names appear on the public record and grave cases go to court. Two practical moves for every insurance intermediary: first, put in writing who owns each compliance function (an accountable name, on paper); second, build the habit that when a third party pays a premium, the handler stops, asks, and escalates. FWD already showed what "part of the process" means: signing that PPD for a client puts you inside it.
4. Compliance takeaways
- Name the accountable owner in writing: every compliance function gets a documented owner — "nobody knew it was me" is not a defence
- Frontline third-party-payment SOP: premium not paid by the policyholder → stop, ask, escalate — three steps written into procedure
- PEP screening needs tooling, not spreadsheets: screening source, refresh cadence, positive-hit workflow — documented end to end
- Criminal-risk awareness: fabricating documents or "helping" customers draft declaration content now has a prosecution precedent — not an internal matter
5. Official sources
| Document | Link |
|---|---|
| IA — enforcement actions and disciplinary announcements | ia.org.hk ↗ |
| IA Annual Report 2024-25 (8 inspections, 85 investigations, 50 sanctions, first prosecution) | ia.org.hk ↗ |
| Insurance Business — broker-layer AML control analysis | insurancebusinessmag.com ↗ |
| Insurance Ordinance (Cap.41) | elegislation.gov.hk ↗ |