Between 2022 and 2024 the HKMA issued four bank AML fines under the same statutory instrument — AMLO s.21: Commerzbank AG Hong Kong HK$6m (2022), an unnamed "Hong Kong bank" HK$16m (Aug 2023), DBS Hong Kong HK$10m (Jul 2024), and Fubon Bank (Hong Kong) HK$4m (Nov 2024). Combined: HK$36m. But the most intriguing is the largest of them — the bank whose name was never disclosed.
1. What each fine was for
DBS (HK$10m, Jul 2024): breach period April 2012–April 2019 — seven years. Triple failure: no continuous monitoring of business relationships, no EDD in high-risk situations, and deficient record-keeping plus ineffective AMLO procedures. The HKMA named its factors openly: seriousness, deterrence, remediation, cooperation, no prior AMLO record.
Unnamed bank (HK$16m, Aug 2023): the HKMA press release called it only "a Hong Kong bank" — a rare anonymised action. Details were never fully published; market speculation centres on sensitive facts still in judicial process.
Commerzbank (HK$6m, 2022): PEP screening and EDD failures.
Fubon (HK$4m, Nov 2024): AMLO contraventions — smallest in scale, heaviest mitigation.
2. Why it is controversial
- The transparency problem of an anonymous fine: HK$16m with no name — the public cannot assess risk, depositors cannot make informed decisions, and market discipline fails. There may be legal reasons (ongoing proceedings, privacy), but it contrasts sharply with the SFC's name-and-publish-full-decision practice.
- Ongoing monitoring is the hardest discipline: DBS's core failure was not onboarding — it was seven years of not watching properly afterwards. Onboarding CDD is easy to standardise; ongoing monitoring needs systems + staff + judgement.
- The "soft cap" of AMLO s.21: all four fines sat within the HK$10m base cap — without provable benefit to trigger the 3× limb, the HKMA's headroom is narrower than the IA's side.
- The five-year lag: DBS remediated in 2019 and was fined in 2024 — investigation plus disciplinary process took five years. "Fixed it" does not mean "over".
3. Legal and regulatory analysis
| Instrument | How it applies | Key provision |
|---|---|---|
| AMLO s.21 | Authorised institutions breaching Schedule 2 requirements | Cap: HK$10m or 3× benefit/loss avoided, whichever higher |
| AMLO Sch.2 s.5 | Core of the DBS case — ongoing monitoring through the relationship | Not one-off CDD — a continuing duty |
| AMLO Sch.2 s.15 | EDD mandatory in high-risk situations | High-risk includes PEPs, complex structures, unusual transactions |
| HKMA AML Guideline | The AML/CFT Guideline for authorised institutions | Operationalises supervisory expectations |
The mitigation formula (as the HKMA states it): seriousness + deterrence − (remediation completeness + cooperation + clean record) = final fine. DBS hit the cap on seven years plus triple failure; Fubon landed at HK$4m on a shorter breach and full cooperation.
RegSir's take
The HKMA's enforcement dialect differs from the SFC's: short press releases, templated announcements, thin decision papers — the market learns far less than from the SFC's itemised findings. The anonymous case offers nothing to learn from at all. But the composite signal across all four fines is clear: ongoing monitoring is now the main battlefield — pristine onboarding does not pass; transaction surveillance, periodic reviews and trigger-based EDD through the relationship are what examiners test.
4. Compliance takeaways
- Ongoing monitoring is not an annual review: trigger-based reviews (abnormal patterns, data changes, adverse news) plus risk-based periodic cycles
- Hard-code the EDD triggers: DBS's lesson — "high-risk" judgement cannot live in frontline intuition; systems must fire automatically
- Record-keeping is the easiest trap: DBS's third limb was records — retrievability for the full five-year retention period
- Remediation ≠ closure: a fine can arrive five years after the fix — document remediation evidence for the disciplinary process that follows
5. Official sources
| Document | Link |
|---|---|
| HKMA press release — DBS disciplinary action (5 Jul 2024) | hkma.gov.hk ↗ |
| GovHK press release — Fubon Bank (HK) disciplinary action (8 Nov 2024) | info.gov.hk ↗ |
| Anti-Money Laundering Ordinance (Cap.615) | elegislation.gov.hk ↗ |
| HKMA — AML/CFT Guideline for authorised institutions | hkma.gov.hk ↗ |