How to Conduct Customer Due Diligence for a Pre-IPO Company: Verifying Revenue Authenticity and Receivables

The Hong Kong Stock Exchange (HKEX) recorded 70 new listings on the Main Board in 2024, raising a combined HKD 87.5 billion, yet the SFC’s 2024 enforcement report highlighted that 38% of its investigation caseload involved suspected financial misstatements in IPO applications, with revenue fabrication the single largest category. For sponsors, auditors, and Pre-IPO investors evaluating a company targeting a 2025-2026 listing window, customer due diligence (CDD) is no longer a procedural checkbox but the critical defence against a Section 213 SFO (Securities and Futures Ordinance, Cap. 571) enforcement action or an HKEX Listing Decision LD43-3 rejection. The SFC’s revised Code of Conduct for Sponsors (effective 1 January 2024, paragraph 17.6) explicitly requires sponsors to verify the “existence, genuineness, and commercial rationale” of the top 20 customers by revenue, with documented site visits and independent confirmation of transaction terms. This article provides a structured, data-verification methodology for verifying revenue authenticity and assessing the quality of trade receivables in a Pre-IPO context, grounded in the regulatory frameworks of the HKEX Listing Rules (Chapter 9 for equity securities) and the SFC’s Sponsor Regulation Guidelines.

The Three-Layer Verification Framework for Revenue Authenticity

Revenue verification for a Pre-IPO company must proceed through three distinct layers: contractual validity, transactional evidence, and cash-flow traceability. Each layer targets a specific failure mode identified in SFC enforcement actions against sponsors, such as the 2023 reprimand of a sponsor for failing to detect round-tripping transactions in a PRC-based manufacturing applicant (SFC Enforcement Bulletin, November 2023).

Contractual Layer: Master Agreements vs. Purchase Orders

The first verification step is reconciling the master supply agreement (MSA) with individual purchase orders (POs) for the top 10 customers by revenue, which typically account for 60-80% of total revenue in a concentrated B2B model. The sponsor or auditor must confirm that each MSA is signed by an authorised representative of the customer—cross-referencing the signatory’s name against the customer’s board resolution or corporate register filed with the State Administration for Market Regulation (SAMR) in the PRC, or the Companies Registry in Hong Kong. A common red flag is an MSA dated after the first PO, indicating a “backdated” contract to satisfy listing requirements. For a PRC-based target, the sponsor must also verify that the MSA’s governing law clause does not conflict with the PRC Civil Code (Article 469-496) and that any dispute resolution mechanism is enforceable in the customer’s jurisdiction.

Transactional Layer: Invoice, Delivery Note, and Acceptance Certificate

Each revenue transaction recorded in the Pre-IPO company’s trial balance must be supported by a three-document chain: the invoice, the delivery note (signed by the customer’s warehouse or logistics team), and the acceptance certificate (for project-based or customised goods). The acceptance certificate is the most critical document under HKEX Listing Rule 9.12(1)(c), which requires that revenue be recognised only when the “significant risks and rewards of ownership” have been transferred to the buyer. For a software-as-a-service (SaaS) company, this translates to the customer’s signed user acceptance test (UAT) report; for a construction contractor, the interim payment certificate issued by the project engineer. The sponsor must physically inspect a minimum of 15% of transactions by value from the last three financial years, per the SFC’s Sponsor Regulation Guidelines (paragraph 5.3), and photograph the delivery location if the goods are physically identifiable.

Cash-Flow Layer: Bank Statement Traceability and Payment Terms

The final layer traces the cash inflow from the customer to the Pre-IPO company’s bank account, matching the payment reference to the invoice number. For a customer paying in instalments, the sponsor must verify that the payment schedule matches the contractual terms in the MSA and that no “round-tripping” exists—where the Pre-IPO company or its related party provides a loan to the customer, which the customer then uses to pay the invoice. The SFC’s 2022 “Guidance on Anti-Money Laundering and Counter-Financing of Terrorism” (paragraph 4.18) requires sponsors to obtain original bank statements (not copies) for the Pre-IPO company’s top three operating accounts for the entire track record period. Any payment from a customer that originates from a third-party account (e.g., a parent company paying on behalf of a subsidiary) must be supported by a written direction letter signed by both parties.

Receivables Verification: Aging Analysis and Confirmation Procedures

Trade receivables are the second-most common area of financial misstatement in HKEX IPO applications, after revenue. The HKEX’s 2024 “Report on Financial Statement Review” found that 22% of reviewed applicants had material discrepancies between the disclosed aging of receivables and the underlying customer payment records. The verification methodology must address both the existence of the receivable and its recoverability.

Aging Bucket Integrity and Confirmation Letters

The sponsor must obtain a detailed aging analysis from the Pre-IPO company, broken into buckets of 0-30 days, 31-60 days, 61-90 days, 91-180 days, and over 180 days. This analysis must be reconciled to the general ledger and the sub-ledger for each of the top 20 customers by receivable balance. The sponsor then sends confirmation letters to each of these customers—under HKFRS 15, the customer’s written confirmation of the receivable balance is the strongest audit evidence. The confirmation letter must request the customer to confirm the balance directly to the sponsor’s office, not through the Pre-IPO company. The SFC’s Code of Conduct for Sponsors (paragraph 17.8) mandates that the sponsor follow up on any non-response with a second letter and, if still unanswered, perform alternative procedures including a site visit to the customer’s premises. A response rate below 70% for the top 20 customers is a material red flag that must be disclosed in the sponsor’s due diligence report.

Recoverability Assessment: Days Sales Outstanding (DSO) and Provisioning

The Pre-IPO company’s Days Sales Outstanding (DSO) must be calculated on a monthly basis for the track record period and compared to the contractual payment terms in the MSAs. For example, if the MSA specifies net-60 payment terms but the DSO is consistently above 120 days, the sponsor must assess whether the company has an unstated practice of granting extended credit—which could indicate that the company is “buying” revenue by offering lenient payment terms. Under HKAS 39 (for companies not yet adopting HKFRS 9), the provision for doubtful debts must be calculated using the incurred loss model; for companies adopting HKFRS 9 (mandatory for annual periods beginning on or after 1 January 2018), the expected credit loss (ECL) model applies. The sponsor must verify that the ECL provision rate is consistent with the historical default rate of the customer base and that any improvement in the DSO during the track record period is supported by documentary evidence (e.g., revised payment terms or a change in customer mix). A sudden drop in DSO from 150 days to 60 days in the final financial year, without a corresponding change in the customer portfolio, is a classic indicator of window-dressing.

Cross-Border Customer Verification: PRC, BVI, and Offshore Structures

A significant proportion of Pre-IPO applicants targeting the HKEX Main Board are PRC-based companies with offshore holding structures (Cayman Islands or BVI). Verifying the revenue and receivables of these companies requires navigating the PRC’s State Administration of Foreign Exchange (SAFE) regulations and the cross-border payment infrastructure.

PRC Domestic Customers: SAMR Registration and Tax Records

For a PRC-based Pre-IPO company with domestic customers, the sponsor must verify the customer’s legal existence through the SAMR’s National Enterprise Credit Information Publicity System. The customer’s business licence must be current, and its registered capital must be consistent with the size of the transactions. The sponsor must also obtain the customer’s value-added tax (VAT) invoices for the transactions under review—the PRC’s Golden Tax System generates a unique invoice number that can be verified through the State Taxation Administration’s online portal. A mismatch between the VAT invoice amount and the revenue recorded in the Pre-IPO company’s books is a direct indicator of revenue inflation. Under the PRC’s Administrative Measures for the Issuance of Invoices (Order No. 25 of the State Taxation Administration), any invoice with a “voided” status must be investigated for potential falsification.

Offshore Customers: BVI and Cayman Corporate Records

For customers incorporated in the British Virgin Islands (BVI) or the Cayman Islands, the sponsor must obtain a Certificate of Good Standing from the respective Registrar of Companies and verify the customer’s ultimate beneficial owner (UBO) through the BVI Beneficial Ownership Secure Search System (BOSSs) or the Cayman Islands’ beneficial ownership register. The SFC’s 2023 “Guidance on Conducting Due Diligence on Corporate Customers” (paragraph 3.7) requires the sponsor to identify the UBO of any customer that is a corporate vehicle, particularly if the customer’s registered address is a virtual office or the same as the Pre-IPO company’s registered agent. A customer structured as a BVI business company with a single share held by a nominee service is a high-risk indicator that must be escalated to the SFC under the sponsor’s statutory reporting obligations (SFO, Section 378).

Cross-Border Payment Verification: SAFE Filing and SWIFT Messages

For PRC-based Pre-IPO companies that export goods or services to offshore customers, the sponsor must verify that each cross-border payment is supported by a SAFE filing (for amounts exceeding USD 50,000 per transaction) and a SWIFT MT103 message showing the remitting bank, the beneficiary bank, and the payment reference. The SWIFT message must be obtained directly from the Pre-IPO company’s bank, not from the company itself. Under the PRC’s Foreign Trade Law (Article 15), any export revenue that remains uncollected for more than 180 days must be reported to SAFE, and the sponsor must confirm that the Pre-IPO company has filed the necessary “export proceeds delayed payment” notifications. A pattern of payments arriving from a jurisdiction that is not the customer’s country of incorporation (e.g., a BVI customer paying from a Hong Kong bank account) requires a written explanation and supporting evidence of the commercial rationale.

Red Flag Indicators and Escalation Procedures

The SFC’s Sponsor Regulation Guidelines (paragraph 6.2) require sponsors to establish a formal red flag escalation process. The following indicators, if identified during CDD, must be documented in the sponsor’s due diligence report and, in certain cases, reported to the SFC under Section 378 of the SFO.

Circular Transactions and Round-Tripping

A circular transaction is one where the Pre-IPO company’s funds flow to a related party, which then uses the funds to purchase the company’s goods, creating artificial revenue. The sponsor must trace the ultimate source of funds for each payment from the top 10 customers. If a customer’s payment originates from a bank account that is linked to the Pre-IPO company’s directors, shareholders, or their family members, the transaction must be treated as a related-party transaction under HKEX Listing Rule 14A. The sponsor must also check for “mirror invoices”—invoices where the customer’s purchase order number matches the Pre-IPO company’s internal reference number, indicating that the documents were generated by the same party.

Customers with No Operational Substance

A customer that has no physical premises, no employees listed on the Mandatory Provident Fund (MPF) or Social Security records, and no independent website or telephone number is a high-risk entity. The sponsor must conduct a physical site visit to the customer’s registered address and photograph the premises. If the address is a residential apartment or a shared office space with no signage indicating the customer’s name, the sponsor must escalate the finding to the SFC under paragraph 4.3 of the Sponsor Regulation Guidelines. The HKEX’s Listing Decision LD43-3 (2019) rejected an applicant where 40% of its revenue came from customers that could not be physically located, and the sponsor had failed to conduct adequate site visits.

Unusually High or Low Gross Margins by Customer

The sponsor must calculate the gross margin for each of the top 20 customers and compare it to the Pre-IPO company’s overall gross margin. A customer with a gross margin that is more than 20 percentage points above or below the company average must be investigated. A high-margin customer may indicate that the company is inflating prices to a related party; a low-margin customer may indicate that the company is “buying” revenue by selling at cost or a loss. Under HKAS 18 (revenue recognition), any transaction that does not have a commercial substance—where the margin is zero or negative—must be assessed for potential derecognition.

Actionable Takeaways for Sponsors and Pre-IPO Investors

1. Verify the top 10 customers’ contractual and transactional evidence through the three-layer framework (MSA, delivery note, bank statement) before relying on any management representation, as the SFC’s Sponsor Regulation Guidelines (paragraph 5.3) require independent confirmation of at least 15% of transaction value by the sponsor’s own staff.

2. Send confirmation letters to the top 20 customers by receivable balance and achieve a minimum 70% direct response rate; any shortfall must be documented with alternative procedures, including physical site visits and SWIFT payment traceability, to satisfy HKEX Listing Rule 9.12(1)(c) on revenue recognition.

3. Calculate the monthly DSO for the entire track record period and reconcile it to the contractual payment terms; a DSO exceeding net-90 terms without documented credit approval from the customer’s board is a material weakness that must be disclosed in the sponsor’s due diligence report.

4. For cross-border customers, obtain the SWIFT MT103 message directly from the Pre-IPO company’s bank and verify the SAFE filing for any PRC-based export transaction exceeding USD 50,000; a payment from a jurisdiction different from the customer’s incorporation requires a written commercial rationale.

5. Escalate any customer with no operational substance—defined as no physical premises, no employees, and no independent communication channel—to the SFC under Section 378 of the SFO, as failure to do so exposes the sponsor to enforcement action under the Code of Conduct for Sponsors (paragraph 17.6).