AFRC Penalises Auditors over Anti-Money Laundering Failures
Hong Kong’s Accounting and Financial Reporting Council (AFRC) has issued its first-ever disciplinary actions against multiple audit firms for breaching anti-money laundering (AML) and counter-terrorist financing guidelines. The sanctions, announced on March 5, 2026, include public reprimands and fines totaling HK$290,000, highlighting systemic compliance gaps in the accounting profession.
Details of Penalties Imposed
The AFRC sanctioned three entities: Prism Hong Kong Limited (Prism), a public interest entity (PIE) auditor; sole practitioner Wong Ka Chun (Wong); and Danny Ho & Company (DH&C) with practitioner Ho Oi Suen, Danny (Ho). Prism received a HK$150,000 fine, while Wong, DH&C, and Ho each faced HK$70,000 penalties alongside public reprimands.
These measures followed AFRC inspections from 2023 to 2025, marking the regulator’s initial enforcement under the Guidelines on Anti-Money Laundering and Counter-Terrorist Financing for Professional Accountants (AML Guidelines), integrated into the Code of Ethics for Professional Accountants (COE). The fines were reduced due to the firms’ cooperation, admissions of misconduct, and remedial steps, such as Prism’s external AML review.
Violations by Prism Hong Kong
In its 2023 inspection of Prism (then Prism Hong Kong and Shanghai Limited, PIE registration M0607), the AFRC uncovered multiple breaches during new engagement acceptances for specified services. Key failures included not performing mandatory client risk assessments to flag higher money laundering or terrorist financing risks, skipping verification of individuals’ authority to act for clients, and neglecting name checks against the United Nations Security Council’s Sanctions List.
These lapses exposed weaknesses in Prism’s AML implementation despite existing controls, violating professional competence and due care principles under the COE and constituting misconduct under the Accounting and Financial Reporting Council Ordinance (AFRCO, Cap. 588). The AFRC considered the limited frequency, duration, and impact, as well as Prism’s prompt fixes, in setting the penalty.
Shortcomings in Smaller Firms
AFRC’s 2025 reviews of Wong (HKICPA membership A36301) and DH&C (CPA firm registration 1303, Ho’s membership F01227) revealed “serious deficiencies” mirroring Prism’s issues but more foundational. Both sole-practitioner operations lacked basic internal policies, procedures, and controls for AML compliance; failed proper customer due diligence; and omitted adequate Sanctions List checks.
The regulator described these as “systemic failures at the firm level,” signaling a “total lack of awareness and understanding of the AML Guidelines.” Such breaches not only contravened AML rules but also fundamental COE principles, amounting to CPA misconduct. Penalties accounted for the firms’ smaller scale compared to PIEs, alongside their full cooperation.
AFRC Officials’ Statements
AFRC CEO Janey Lai emphasized: “Strict adherence and compliance with the AML Guidelines by practitioners is paramount in safeguarding the integrity of Hong Kong’s financial system. The AFRC remains committed to raising the level of AML compliance by strengthening its regulatory oversight through ongoing inspections and effective enforcement actions.”
Head of Discipline Hester Leung added: “These cases reflect gaps in AML compliance awareness within the accounting profession. The AFRC expects practitioners to take AML obligations seriously and to establish and implement effective AML control systems. If the situation persists, the AFRC will escalate the level of sanctions to send a clear and deterrent message to the profession that such failures are not acceptable.”
Broader Context of AML Guidelines
Hong Kong’s AML Guidelines, issued under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615, AMLO), mandate accountants—defined as HKICPA members and practice units—to conduct customer due diligence, risk assessments, record-keeping, and sanctions screening. Aligned with FATF Recommendations, they require enhanced due diligence for high-risk clients and simplified measures for low-risk ones, with AFRC referencing guidelines in enforcement.
Non-compliance risks criminal prosecution, reputational damage, and regulatory action, as practices could unwittingly facilitate money laundering or terrorist financing. The AFRC’s inspections target both PIE and non-PIE auditors, promoting public interest and financial system integrity.
Regulatory Role and Recent Trends
Established under the AFRCO, the AFRC independently regulates the accounting profession through inspections, investigations, and discipline. Since expanding powers in 2022, it has intensified AML oversight amid rising global financial crime risks.
Recent actions include sanctions on Forvis Mazars and Grant Thornton Hong Kong for audit file archiving violations, signaling broader scrutiny. Joint SFC-AFRC statements have also warned against dubious fund diversions by listed issuers, where auditors face liability for accounting non-compliance. These cases underscore escalating enforcement against AML and compliance lapses in Hong Kong’s financial sector.
Implications for Accounting Profession
The penalties serve as a deterrent, urging firms to bolster AML frameworks, training, and controls. Smaller practices, often sole proprietors, must prioritize foundational policies to avoid systemic failures. As Hong Kong aligns with international standards, sustained AFRC vigilance aims to elevate compliance, protecting the city’s status as a global financial hub.
Industry observers note this as a pivotal moment, with potential for stricter sanctions if gaps persist. Accountants handling specified services—tax, advisory, or audit—are now on heightened notice to integrate robust AML/CFT measures.