Source of Funds and Source of Wealth: Documents and Compliance for Banks

The origin of a client's money is the first barrier a wealthy client meets on the way into a bank. After the 2012 revision of the FATF standards and the de-risking wave, when banks closed the accounts of non-residents and opaque structures wholesale, checking where money came from became onboarding routine. The cases of recent years — British unexplained wealth orders, Singapore's MAS penalties of 2025 — have also made it the central subject of supervisory inspections in private banking. The larger the capital and the more complex its history, the thicker the file.

Concept

Source of Funds (SoF) and Source of Wealth (SoW) are two different questions, and the FATF expressly calls them two different concepts. In the FATF guidance on PEPs, source of wealth is the origin of a person's entire body of wealth, meaning total assets, while source of funds is the origin of the particular funds or other assets that are the subject of the relationship with the bank. UK supervision draws the same line: HMRC defines SoF as the origin of the money used in a particular transaction and SoW as the customer's entire wealth and how the customer accrued it.

An example: an entrepreneur sells a stake in a business for €5 million and moves the proceeds into a Swiss private bank. SoF here is the share purchase agreement, the completion statement and the bank statement showing receipt from the buyer. SoW is the whole history behind that money: how the company was built and grew, what its turnover and dividends were, where the capital once put into the business came from. The bank needs both answers — where exactly these €5 million came from, and why the client came to hold an asset of that size at all.

Hence the defining property of the subject: SoF is one segment of the SoW chain. When checking SoF, the bank looks at the movement of money and the basis of the payment; when checking SoW, it asks whether the capital's whole biography is plausible. The FATF sets the yardstick: whether the wealth can reasonably be explained by the person's known sources of income. The client's statement supplies the narrative; third-party documents, tax records, registers and public sources corroborate it in proportion to risk. The general logic of private-client checks is covered in AML/KYC for private clients, and checks on a company and its money in corporate KYC.

When the Bank Asks for SoF and When for SoW

Requirements build up in three steps.

1. Standard CDD. FATF Recommendation 10 requires a firm to understand the purpose and nature of the relationship and to check transactions against what it knows of the customer, their business and risk profile, including, where necessary, the source of funds. The question here usually concerns a specific receipt: a large incoming payment, the initial funding, a departure from the declared profile.
2. Enhanced Due Diligence. For PEPs, clients from high-risk third countries and other higher-risk situations, the rules expressly name establishing both SoF and SoW. Foreign PEPs always; domestic PEPs and PEPs of international organisations where the relationship is higher risk. The PEP regime is covered in a separate article.
3. Private banking and large fortunes. In the United States, the source of funds for a non-US person's private banking account with a deposit of $1 million or more is established by law. In the EU, from 10 July 2027 the AMLR adds specific measures for higher-risk relationships of €5 million or more with a client whose wealth reaches €50 million.

Depth of corroboration follows risk. The client's self-declaration is a legitimate part of the file, but EDD cannot rest on it alone. The FATF warns specifically that knowing which bank the money came from is not enough; substantive information on where the asset came from and on what basis it was acquired is needed. The UK regulator, in FG25/3, asks firms to avoid the opposite distortion too: for lower-risk PEPs, SoW and SoF checks should be less intrusive and rely on information already available.

What Specific Regimes Require

The rulebooks differ in what triggers the duty and what exactly must be established — the whole history of the capital or only the money in one transaction.

The US rule stands out for its monetary threshold and non-US status test; European and UK PEP rules are tied to the person's status. Singapore, Hong Kong, Switzerland and the UAE also have mandatory grounds, so outside the EU, UK and US the matter cannot be reduced to a bank's voluntary policy. Firms supervised by the DFSA or FSRA in the UAE apply those regulators' rules as well. The European reform is covered in the EU AML package.

Singapore: the Supervisory Pendulum

A telling story of recent years is Singapore's. MAS issued circular AMLD 08/2024 of 26 July 2024 on establishing customers' source of wealth. It asks firms in the wealth management sector to establish a customer's SoW before business relations are established and to independently corroborate the customer's information against documentary evidence or public information sources, while keeping the process risk-proportionate: focus on the more material or higher-risk sources and do not apply a one-size-fits-all approach.

On 4 July 2025 MAS imposed composition penalties totalling S$27.45 million on nine financial institutions for AML-related breaches linked to the major money laundering case of August 2023. All nine had failed to detect or adequately follow up on significant discrepancies or red flags that should have cast doubt on some customers' purported SoW, and in some cases significant aspects of SoW were not corroborated at all.

Then the pendulum swung back: on 25 May 2026 MAS issued Circular AMLD 05/2026 on risk-proportionate SoW establishment: the depth of the check should match the risk. The circular targets steps "disproportionate to MAS' requirements and international standards": firms should corroborate the material or higher-risk SoW rather than every single piece of information, avoid unnecessary requests, such as for long-dated financial or employment records, and avoid repeated rounds of requests without a clear risk-based justification. The same day the MAS Managing Director said that these measures, with the industry's process tips, are expected to bring the median time to open a private banking account to within a month, from about six weeks or longer for complex cases. The lesson for both sides: supervisors hold firms to account for material sources, and the risk sets the volume of evidence.

Hong Kong, Switzerland and the UAE

Hong Kong has travelled a similar path. The HKMA issued Smart Tips for private banking on establishing SoW and SoF on 7 March 2023, and its guidance on combating high-end money laundering of 12 December 2025 calls the establishment and corroboration of SoW and SoF a key preventive control. The typical defect, in the HKMA's view, is overreliance on customer representations without clarifying ambiguities, challenging the reasonableness of the information or obtaining corroborating documents. The regulator separately noted a gap in CDD depth between high-net-worth customers of retail wealth management and private banking customers, and among the typologies it named entry through the retail segment and accounts opened on investment-based citizenship.

In Switzerland, AMLO-FINMA ties additional clarifications to higher risk; the client's explanations, public databases and information from trustworthy persons are used, and the result is tested for plausibility. In the UAE, Resolution 134/2025 has applied since 14 December 2025. Holding a company, a bank account or a residence visa does not answer the question of which activity created the money being transferred. Approval by another bank does not carry over automatically.

The Evidence Chain: From Origin to Present Balance

The bank reconstructs the chain of custody of the money, and each link answers its own question:

1. Wealth generation — the activity that created value: a business, a salary, an appreciated asset, an inheritance.
2. Ownership — the asset or right that produced the money belonged to the client, with no substitution by a connected person.
3. Tax and legal character — the income was declared, taxed where due and lawfully distributed: the dividend approved, the gain assessed, the estate settled for tax.
4. Distribution — the legal event that released value to the client: completion, dividend payment, grant of probate, redemption.
5. Movement — the actual transfer of money between accounts, currencies and institutions.
6. Present balance — the money in the account today is the same money whose origin the first five links describe.

One document rarely covers more than one or two links, and this is where most applicants misjudge the task.

A link without corroboration becomes residual risk, which the bank must assess. A gap that is honestly disclosed and explained is workable: the bank assesses it as residual risk and decides whether it is acceptable. A gap hidden behind a plausible-looking document sinks the file.

Evidence Matrix by Source of Wealth

Below is typical evidence for each source as banks usually accept it; there is no closed regulatory list, and the bank's policy and the risk determine the set. The periods are preparation guides; the depth of history follows the materiality of the source. Where no tax return is filed in the relevant country and situation, that is explained rather than a non-existent document being produced. HMRC gives a similar list: bank statements, documents on the sale of shares and property, pension release and gifts, estate accounts, employment contract and payslips, audited accounts and credible news sources where the wealth is public.

Income and Assets

Events and Special Assets

Crypto-assets are checked more strictly than anything else. The bank traces the path from the fiat on-ramp to the current address and runs the addresses through on-chain analytics tools. The FATF treats source of funds or wealth as a distinct category of red flags and names features that increase anonymity: peer-to-peer exchanges, mixing and tumbling services, anonymity-enhanced coins. Tax reporting in the UK, US and EU is attached; where no return is filed, a tax memo helps. Conversion into fiat is evidenced by exchange statements or those of a licensed OTC desk. From 2027 tax authorities begin exchanging crypto-asset data under the CARF standard, so gaps between what was declared and what was reported will surface faster; CARF gives banks no direct access to that data.

Options and ESOPs break on valuation: the bank treats the money from an actual sale of shares as the source, and a paper value at the last funding round remains an estimate. Loans explain a receipt but shift the question to collateral and repayment: an agreement with a regulated lender evidences the credit, while the origin of the collateral and of the repayment money is checked separately. A loan from a connected person without an agreement or servicing looks like a substituted source.

A gift shifts the chain to the donor: the bank asks for the donor's source of wealth, a dated deed and evidence that the donor could afford it. If the donor is a PEP, the recipient may be drawn into EDD in their own right as a family member or close associate. Name continuity is a quieter version of the same problem: a maiden name in a 2009 share register, a patronymic the bank's system lacks, a Cyrillic name transliterated two ways. The gap is closed with documents: a change-of-name certificate, an apostilled affidavit of identity, a register extract carrying one registration number through a rename, redomiciliation or merger. If the shares were held by a trustee or another holder on instructions, the agreement bears that holder's name, and the beneficial claim needs the trust document behind it — the distinction is covered in beneficial ownership.

The same pack is also tested in investment migration, where the break points differ: a connected buyer in a business sale, a distribution exceeding the financial result, an old cash purchase of property, crypto bought outside regulated venues. A refusal there is recorded by the state, and a file built for a bank is not accepted automatically.

How the Bank Checks

Checking SoW is analytical work with five tools.

1. Reasonableness. Arithmetic: could the stated income over the stated period physically produce the stated wealth. The FATF frames the yardstick as wealth that can reasonably be explained by known sources of income.
2. Consistency. The tax return, statements, questionnaire and the client's account must agree on dates, amounts and counterparties. A discrepancy at a join raises more questions than an honestly disclosed gap.
3. Public sources. Company and property registers, asset disclosures, credible press. The FATF names these sources expressly.
4. Company reporting and tax returns. Public filings show whether the company could earn and distribute the sums claimed; the tax return is the main reconciliation document for income. In a CRS world a mismatch between the file and the tax profile becomes visible quickly.
5. Professional letters. An auditor's or accountant's letter reconciles accounts, dividend resolutions, returns and personal statements; a lawyer's opinion answers a legal question — the validity of a distribution, a trustee's powers, the tax treatment of a deal.

There is no universal duty to commission an audit, an accountant letter and a legal opinion at once: each document answers its own question and is commissioned for a specific gap.

A Composite Capital, Traced End to End

The client, companies and figures below are fictional and serve only to illustrate how the chain breaks down. Client V. opens a private-banking relationship in Geneva with a balance of €14.2 million. The capital has four strands, and the bank checks each separately.

Strand 1 — business sale (€6.0 million, 2019). V. sold 60% of the fictional Alpina Foods GmbH to a strategic buyer. Evidence: SPA, completion statement, share transfer register, receipt from the buyer and a capital gains return. The bank first reconciles the SPA price with the actual receipt: with an earn-out or escrow the money arrives in tranches, and the completion statement must match the account credits date for date. Structuring a sale is covered in business exit.

Strand 2 — dividends (€2.4 million, 2012–2019). Evidence: dividend resolutions, audited accounts, credits to the personal account. The classic flag is a distribution larger than retained profit. An accountant letter closes the link between company profit and personal capital.

Strand 3 — inheritance (€3.5 million, 2021). Grant of probate, will, estate accounts, tax clearance. A London flat from the estate sold for £1.8 million, and the proceeds were converted into euros: FX conversion is a seam where continuity gets lost, and the bank wants confirmation of rate, date and amount tied to the specific proceeds. The bank then opens a second chain and asks about the father's own capital.

Strand 4 — investment growth (€2.3 million). Annual custodian statements. The trap is a category error: a portfolio is a form of holding. The growth is explained only if the original contribution is itself evidenced by strands 1–3.

The right-hand column shows the shape of the file: documents cluster around movement and present balance, while the links that actually establish legitimacy — generation, ownership, tax character — rest on contracts, corporate resolutions, succession papers and tax records. That is why a whole file can look fully "banked" and still remain unexplained.

Clients From High-Risk and Sanctioned Jurisdictions

The EU High-Risk List

The EU list of high-risk third countries is amended by delegated regulations; the latest, Commission Delegated Regulation (EU) 2026/46 of 3 December 2025, created a separate category for countries whose FATF membership is suspended although the FATF itself has not listed them, and placed Russia in it from 29 January 2026. The current list of 26 jurisdictions is maintained by the European Commission; the mechanics of the lists are covered in the FATF article.

The practical consequence is direct. Under art. 18a of Directive 2015/849, a European bank applies EDD to relationships and transactions involving a high-risk third country: additional information on the customer and beneficial owners and on the nature of the relationship, information on the SoF and SoW of the customer and beneficial owners, on the reasons for transactions, senior management approval and enhanced monitoring. For any link to a listed jurisdiction, what used to be individual bank policy is a mandatory minimum in the EU.

Sanctions Check of the Source

A clean origin of money and the permissibility of service are two different tests. The bank checks whether the funds or their source belong to, or are controlled by, persons subject to asset freezes, including ownership above 50%; the AMLR expressly makes verification of targeted financial sanctions part of CDD.

Outside the EU the US factor operates: E.O. 14114 allows penalties against foreign banks for significant transactions for Russia-related sanctioned persons, so banks in Hong Kong, Singapore and the UAE check sanctions-exposed sources more strictly than their own law requires. The approach is covered in sanctions screening and the sanctions route map.

Foreign Documents

Official documents for a bank in another country are usually legalised by apostille: the Hague Convention has applied to Singapore since 16 September 2021 and to China since 7 November 2023. The UAE is not a party, so consular legalisation is needed there. A certified translation is added to the apostille. Transliteration is a recurring pain: one spelling in the passport, another in an older company register extract, a third in the bank's system; the gap is closed with a document on the identity of the person. Transit through banks in third countries does not break the chain: the bank needs the original source of income and a tax trail in the country where it arose.

Opacity and Origin: Lessons From Unexplained Wealth Orders

A court may demand the same chain. An unexplained wealth order under the Proceeds of Crime Act 2002 requires property worth more than £50,000 (s.362B(2)(b)), reasonable grounds for suspecting that the respondent's known lawful income would have been insufficient to obtain it or that it was obtained through unlawful conduct, and either a respondent who is a PEP or reasonable grounds for suspecting that the respondent or a connected person is involved in serious crime.

In National Crime Agency v Hajiyeva the order stood over a London house bought in 2009 for £11.5 million through a BVI company: the respondent's husband chaired the International Bank of Azerbaijan, in which the state held not less than 50.2%. PEP status, the Court of Appeal held, turns on the status of the person entrusted with functions (para. 25), and the chairman of a state-owned enterprise falls within it (para. 29). In National Crime Agency v Baker three orders were discharged: the agency's premise about who funded the purchases was "probably mistaken" (para. 75), and Lang J held that complex offshore structures or trusts are not, without more, a ground for believing they were set up for wrongful purposes (para. 97). Structure does not prove origin; a vague account of capital testifies against itself.

Where Banks Decline

Documentary reasons: the payment reference does not match the substance of the transaction; round-number receipts without a commercial pattern; the tax return does not match the stated income; P2P or unregulated OTC in place of the stated regulated source. Profile reasons: an active business in Russia, Belarus, Iran, the DPRK, Syria, Cuba or Venezuela without structural separation; a hidden PEP link found through adverse media; a crypto history with flagged addresses; a UBO chain leading into a sanctions-sensitive sector.

Silence is a third outcome. If a UK bank has requested a DAML for a specific act, the POCA timings apply: seven working days starting with the first working day after disclosure, then, if consent is refused, a 31-day moratorium that may be extended by up to 186 days in total (s.336A); s.333A limits disclosure to the client. If the blockage sits with a correspondent, the payment chain has to be examined — it is described in correspondent banking.

A separate ground for refusal is the category of activity. On 23 June 2025 the Federal Reserve removed reputational risk from its examination programmes, and Executive Order 14331 of 7 August 2025 (90 FR 38925) required federal regulators to remove reputational risk from guidance within 180 days and review debanking practices within 120 days, and the SBA to secure the reinstatement of clients unlawfully refused. The order targets political and religious debanking and does not override card scheme rules; outside the United States reputational risk remains a supervisory category. A client in a sensitive sector does well to press for a specific ground of refusal and to cover the financial side with documents: the platform agreement, payout statements, tax returns — see OnlyFans taxes and personal accounts.

Common Mistakes

Most refusals come from avoidable assembly errors.

• Portfolio as source. A balance with a manager or broker is presented as the origin, though it is a form of holding.
• Statements instead of bases. A stack of statements proves movement but leaves generation and tax character unanswered.
• A story without arithmetic. The stated salary over ten years could not have produced the stated wealth, and nobody explained the gap.
• Figures that do not match. The amount in the questionnaire, the tax return and the SPA differ because different people assembled the pack at different times.
• Silence about a gap. An uncorroborated link is hidden; the bank later finds it itself, and the whole file comes into question.
• Assembling on request. The pack is put together mid-onboarding after compliance's first question, and each round lengthens the process.

How a Pack Is Built

1. Initial assessment — biography, capital, flows, target banks and their requirements.
2. Mapping of sources — which strands are material and which links of each strand must be closed.
3. Document collection under the matrix above, with translations and apostilles where needed.
4. Gap analysis — what is missing, what conflicts, what can be closed with a benchmark or public sources.
5. External letters for a specific gap — accountant letter, legal opinion.
6. Preliminary discussion with the relationship manager, then formal submission and compliance Q&A.
7. Post-activation monitoring — the first transactions should match the declared profile.

Timing depends on risk, completeness of evidence and structure; there is no universal timeline. The FATF standards were updated in 2025 with an emphasis on proportionality and simplified measures for lower risk.