A China corporate bank account is not a one-time setup task. The company may have changed its legal representative, an overseas owner's passport may have expired, or the employee receiving bank notices may have left. Those gaps can disrupt a payment even when the underlying transaction is legitimate.
For overseas owners and local finance teams, the practical objective is to keep the bank's customer file and the company's payment controls aligned. Good maintenance reduces avoidable disruption; it cannot guarantee that a bank will process every transaction or prevent a lawful freeze.
TL;DR
- Maintain customer due diligence records throughout the banking relationship, not only at account opening.
- Track corporate changes, identity-document expiry, beneficial-owner information and online-banking authority in one register.
- Identify the exact restriction before responding: a missing KYC document, a transaction review and a judicial freeze require different actions.
Why banks request information after opening
Know your customer, or KYC, is the practical process through which a bank understands and verifies its customer. China's customer due diligence measures under Order 2025 No. 11, effective from 1 January 2026, require ongoing review of customer information and transactions. The intensity and frequency depend on risk; there is no single annual renewal checklist for every corporate customer.
The measures address changes in identity and business information, doubts about existing records, and transactions that no longer fit the known profile. Where identification has expired and is not updated within a reasonable period after necessary notification, without a reasonable explanation, appropriate risk-management measures may follow.
An information request is not, by itself, an accusation of wrongdoing. Confirm what the bank needs and by when. For a company that has not opened its account yet, start with the separate corporate bank account opening guide.
Build one maintenance register
Keep a register for every operating account, including foreign-currency accounts. Store sensitive documents securely rather than placing passport scans or credentials directly into a widely shared spreadsheet.
| Register item | What to record | Who should follow up |
|---|---|---|
| Bank and account | Branch, account purpose, currencies and verified contact channel | Local finance owner |
| Corporate profile | Legal name, registration records, address and business activity | Corporate administration with finance |
| Identity documents | Relevant persons, document type, expiry date and update status | Authorized coordinator |
| Ownership information | Current ownership chart, control explanation and bank requests | Group legal or company secretary |
| Online-banking access | Named users, roles, limits, device custody and backup approval arrangements | Treasury or authorized management |
| Open requests | Bank question, deadline, submitted evidence and unresolved points | One case owner |
Add the last review date and evidence of completion. “Sent to the bank” is not the same as “bank records updated.” Obtain confirmation where available, and record any remaining step.
Changes that should trigger a review
Do not wait for the next routine check when the company changes its legal representative, registered address, ownership, business model or authorized personnel. A foreign parent restructuring can matter even if the China entity's immediate shareholder name remains unchanged.
Check the ownership chain and who ultimately owns or controls the business. Bank KYC and the company's beneficial-owner information filing are related but separate processes. Under the Beneficial Owner Information Management Measures, changes to filed beneficial-owner information, or loss of eligibility for the specified commitment-based exemption, generally require a filing within 30 days. That filing deadline is not a universal bank-update grace period.
Assess filing requirements and any exemption on the entity's actual facts. A receipt from a registration system does not establish that every bank has completed its own review. Send the branch the materials it requires and reconcile any inconsistent names or ownership descriptions.
Staff departures also require immediate attention. Recover security devices through an authorized handover, revoke obsolete access and confirm the bank's records. Do not leave a former employee as the only recipient of alerts or approval requests.
A practical review routine
The following is an internal control schedule to adapt to the company, not a statutory calendar.
- Monitor notices through an owned channel. Use designated company contacts and a backup, so one absence does not hide a bank request.
- Reconcile accounts monthly. Review statements, fees, failed payments and unexplained transactions. Confirm that all accounts appear in the ledger.
- Look ahead at document expiry. Set internal reminders early enough for replacement documents, translation and the bank's verification process. The necessary lead time varies.
- Review access periodically and after personnel changes. Confirm active users, payment limits, dual-approval settings and device custody against approved responsibilities.
- Review the customer profile after business changes. Explain new transaction types, counterparties or expected volumes truthfully, with supporting contracts where requested.
- Close requests with evidence. Keep an indexed submission pack, response history and confirmation of the outcome. Carry unfinished requests into management's action list.
For a small finance team, independent review can sit with an authorized director or headquarters treasury team. An outsourced provider may coordinate records, but should not become the sole holder of banking credentials or the only person able to contact the bank.
What to do when an account function is restricted
First establish what is affected: login, outbound payments, a particular currency or transaction, or funds subject to a legal freeze. Save the exact message and contact the bank through a verified channel.
| Situation | First action |
|---|---|
| Missing or expired customer information | Obtain the current document list and update route; ask how completion will be confirmed |
| A specific payment under review | Identify the transaction question and reconcile the contract, amount, purpose and supporting records |
| User, token or mandate problem | Ask the bank to verify access authority and follow its authorized recovery process |
| Judicial or other legally imposed freeze | Identify the issuing authority and obtain legal advice on the lawful response process |
The 2026 due diligence measures allow risk-proportionate restrictions in relevant circumstances but prohibit unlawful freezing of customer funds. Do not describe every service restriction as a judicial freeze, or assume that a relationship manager can remove a legal order.
If the issue concerns a specific outward payment, use the cross-border payment review checklist. Do not repeatedly change descriptions, split payments or route money through personal accounts to bypass a restriction.
Tell management which payments are affected, what evidence remains outstanding and when the next update is expected. There is no reliable universal restoration time. Ask the bank about the remaining steps before promising payroll or supplier settlement dates.
Five questions for the bank
- What exact account function or transaction is restricted?
- Which information or evidence can the company provide?
- Who may submit it, and are originals or an appointment required?
- How will receipt and completion be confirmed?
- Which contact or formal complaint channel applies if the issue remains unresolved?
Authenticate unexpected requests before sending documents. For example, Bank of Cangzhou's April 2025 customer-information notice describes corporate information updates and warns against requests for passwords or verification codes. Its branch procedures are an example, not a nationwide instruction. Use your own bank's verified channels.
Common mistakes
- Assuming a company-registration update automatically completes bank KYC.
- Waiting until payroll day to replace expired identity records.
- Keeping inactive employees' access or sharing one person's login.
- Giving different ownership or transaction explanations to different bank teams.
- Treating maintenance as a promise that no compliance review or lawful freeze can occur.
Connect account maintenance with finance oversight
Bank maintenance works best alongside statement reconciliation, payment authorization and a visible issue log. Define who coordinates the bank, who approves changes and who reports unresolved risks to headquarters.
ChinaBizPro's financial outsourcing services can support that coordination within an agreed scope. Discuss a bank-maintenance and finance-control review if your China entity lacks a clear owner for these tasks. An initial inquiry should describe the issue without including passwords, security codes or unredacted identity documents.
Frequently asked questions
Must every corporate customer update KYC once a year?
Not under one universal timetable. Banks set review frequency and methods based on risk and applicable requirements. Follow the specific bank's requests and update changes promptly.
Does filing beneficial-owner information replace the bank's checks?
No. Filing through the registration system and responding to the bank's customer due diligence are distinct tasks. Keep the facts consistent and verify completion of both where applicable.
Can an adviser guarantee that an account will be unfrozen?
No. The answer depends on the type of restriction, bank review and any competent authority's legal action. Advisers can help organize records and responses; they cannot promise a bank or authority's decision.
