Source of Funds and Source of Wealth: Documents and Compliance for Banks

Concept

Source of Funds (SoF) and Source of Wealth (SoW) are two different questions that a bank asks before opening an account, during a large transaction, or during Enhanced Due Diligence. SoF explains specific money in a specific transaction: sale of an apartment, dividend, credit line, business revenue. SoW explains how the client accumulated capital over their lifetime: employment, business, inheritance, investments, liquidity event.

A simple example: an entrepreneur sells a stake in a business for €5 million and moves the proceeds into a Swiss private bank. SoF here is the share purchase agreement, the bank statement showing receipt from the buyer, and the valuation report. SoW is the entire history behind that money: how he built and grew the company, what the turnover and dividends were, and where the capital he once put into the business came from. The bank wants to see both layers — where exactly these €5 million came from, and why the client came to hold an asset of that size at all.

One cannot be substituted for the other. The baseline is set by FATF Recommendation 10: customer due diligence is built on a risk-based approach, and for PEPs, UHNW clients and offshore structures the SoF and SoW check is mandatory as part of Enhanced Due Diligence. Each jurisdiction then adds its own layer — MLR 2017 in the United Kingdom, MAS Notice 626 and the CDSA in Singapore, the AMLO (Cap. 615) in Hong Kong. In the EU a single AML Rulebook applies from 10 July 2027 — Regulation (EU) 2024/1624 (AMLR), directly effective and identical across all 27 member states, with supranational supervision by AMLA in Frankfurt (operating since July 2025). The beneficial owner threshold has been lowered to "25% or more" from the previous "more than 25%" under AMLD6, so more people land in the beneficial ownership registers. A client's statement is only the beginning; for a Tier-1 bank, independent third-party records, tax returns, bank statements, and in complex cases, opinions from external consultants are required.

When Banks Require SoF and SoW

Basic SoF is needed almost always: when opening an account, on the first large receipt, for an atypical transaction, or when entering private banking. Full SoW is required for PEPs, clients from high-risk jurisdictions, UHNW onboarding, multi-tier structures, funds with cryptocurrency history, and sanctions-sensitive profiles.

Documents by Type of Capital

Business Profit

Audited financial statements for 3+ years, incorporation documents, shareholder register, company tax returns, dividend resolutions, contracts with key counterparties, invoices, and statements from the business account. The goal is to show that the profit actually arose in the business, was taxed, and was lawfully distributed to the UBO.

Business Sale

Sale-and-Purchase Agreement (SPA), completion statement, share transfer forms, board minutes, bank statement showing receipt of sale proceeds, tax opinion on the applicable capital gains regime. For a large transaction, a legal opinion in the jurisdiction of the transaction is usually required.

Inheritance

Grant of Probate, Letters of Administration or local equivalent, estate accounts, letter from the administering solicitor, death certificate, and tax clearance under the inheritance / estate tax regime. For the United Kingdom, IHT is taken into account; for the USA, estate tax; Russian inheritance tax in this sense is usually not applicable.

Dividends and Investment Income

Dividend certificates, broker statements, portfolio valuations from a regulated wealth manager, tax returns with capital gains, and annual statements from the custodian bank. The bank checks not only the return, but also the path of money from the issuer or broker to the personal account.

Salary, ESOP, Self-Employed

For an employee: payslips for 6–24 months, employment contract, employer reference, vesting schedules and option exercise records for ESOP / RSU / equity compensation. For self-employed: contracts with clients for 12 months, tax returns, statements from the business account, and professional license, if applicable.

Cryptocurrency

Acquisition history: mining records, exchange purchases from a bank account, payments in crypto for services, founder allocation, wallet history, chain analysis for large amounts. Tax returns in UK / US / EU; for SG / HK / UAE a return may not be required, but a tax memo is useful. Conversion to fiat is confirmed by settlement statements from a licensed OTC desk or exchange statements. See OTC.

Lombard and Credit Line

Loan agreement, drawdown notice, collateral statement, and bank statement showing receipt of loan proceeds. One of the cleanest SoF formats: the source of a specific fiat receipt is a licensed bank.

Where the Same Pack Breaks in a Migration File

A government unit in investment migration asks for the same documents a bank does, but the pack fails at different points. Sale of a business — the buyer turns out to be a connected or opaque structure and the deal price does not reconcile with the valuation. Inheritance — the provider opens a second chain and demands source of wealth for the deceased as well. Dividends — the distribution does not match the company's financial result. Real estate — the property was bought long ago and in cash, so the original source cannot be evidenced. Crypto-assets — purchases off regulated venues, gaps in the chain, address screening that shows a mixer link. Investment portfolio — it is offered as the source when it is only a form of custody. The procedural difference from a bank is the consequence: the refusal is recorded by a state and, in the Caribbean, passed to neighbouring programmes, which closes filing there. Detail in due diligence in investment migration.

Verification Levels

Where Banks Decline

Documentary Reasons

• Payment purpose does not match substance.
• Round-number receipts without a commercial pattern.
• Tax return does not match declared income.
• Documents show P2P or unregulated OTC instead of the declared regulated source.

Profile Reasons

• Active business in Russia, Belarus, Iran, DPRK, Syria, Cuba or Venezuela without structural separation.
• Hidden PEP connection found through adverse media check.
• Mixed wallet history for crypto, flagged by Chainalysis / TRM Labs.
• UBO chain leads to a sanctions-sensitive sector.

When a refusal traces back to the sanctions perimeter rather than to the paperwork, the order in which to untangle it — designations, screening, country status — is set out in the map of the sanctions cluster.

Activity Category: Reputational Risk as a Ground for Refusal

Alongside the documents sits a ground that has nothing to do with them — the category of the client's activity itself. Until 2025 US banks declined service by reference to "reputational risk", and that category formed part of the supervisory toolkit: it allowed an account to be closed without alleging a sanctions or AML problem and without any defect in the SoF pack. Adult content, gambling, crypto, firearms and cannabis in states where it is lawful were the standard addressees.

On 23 June 2025 the Board of Governors of the Federal Reserve announced that reputational risk would no longer be a component of examination programmes in its supervision of banks: references to reputation are being removed from supervisory materials, including examination manuals, and replaced by discussion of specific financial risks. On 7 August 2025 Executive Order 14331, "Guaranteeing Fair Banking for All Americans", was signed — published 12 August 2025, 90 FR 38925. It requires federal banking regulators to strip reputation risk and equivalent concepts out of guidance and examination materials within 180 days, to review practices and take remedial action within 120 days, and requires the SBA to secure reinstatement of clients unlawfully denied service. Those deadlines expired in the first quarter of 2026.

Two caveats, both practical. The order is aimed at debanking on political and religious grounds and at refusal of service for lawful business activities a provider disfavours for political reasons; it contains no provision directed at adult content or any other high-risk sector. And it does not repeal card scheme rules for high-risk merchant categories: the payment layer is governed by the contract with the scheme and the acquirer, not by supervisory guidance, so loss of card acceptance remains possible for an entirely lawful business. Outside the United States the reputational risk category survives in supervisory practice intact.

For the SoF pack the consequence is a single one: a client in a sensitive category should press for a concrete ground of refusal rather than accept a generic formula, and should document the financial and compliance layer specifically — the platform or marketplace agreement, payout statements, copies of seller reports, tax returns. Subscription platforms and the shape of their payouts are unpacked in OnlyFans taxes; the requirements for the personal account itself are in personal accounts.

How a Package Is Built

1. Pre-engagement assessment — biography, capital, flow, and desired banks.
2. Document collection and mapping by capital type.
3. Gap analysis — which documents are missing or contradict each other.
4. External opinions — legal opinion, accountant letter, notarial certifications.
5. Pre-approval engagement with the bank's relationship manager.
6. Formal submission and compliance Q&A.
7. Post-activation monitoring in the first 6 months.

Timeline: standard Tier-1 onboarding runs 8–12 weeks; 3–5 weeks under the reliance principle.

How Requirements Have Changed

Before 2012 a bank largely relied on the client’s word. The 2012 FATF revision entrenched the risk-based approach and made the source-of-wealth check mandatory for higher-risk clients. Then came the de-risking wave of 2014–2018: under the pressure of multi-billion fines, banks closed accounts wholesale rather than untangle complex structures. The pendulum has since swung towards formalisation — documentary requirements are increasingly fixed in single rulebooks and depend less on the judgement of an individual compliance officer.

By 2027 the picture becomes tougher and more uniform. The AMLR standardises documentary requirements across the EU, so a package assembled for a bank in Luxembourg will also work in Frankfurt. In parallel the OECD’s Crypto-Asset Reporting Framework (CARF) comes online: providers start collecting data from 1 January 2026, and automatic exchange on crypto-assets begins in 2027, much as CRS has long worked. A crypto origin of capital is now checked by the bank not only against on-chain analytics but against tax-authority data. For a Russian tax resident it is doubly hard: the suspension of tax treaties and sanctions sensitivity mean that even impeccably clean money needs a thicker package and explanations prepared in advance.