Due Diligence

Roger Pay
2 hours ago
20 min read

Due Diligence

Conducting cross-border due diligence across Singapore, Hong Kong, Malaysia, South Korea, and Vietnam requires adapting to vastly different regulatory frameworks, transparency levels, and corruption risks. While Singapore and Hong Kong offer highly transparent corporate registries, emerging markets like Vietnam and Malaysia require deeper on-the-ground investigative checks for beneficial ownership and ESG compliance.

Country-by-Country Due Diligence Overview

✅ Singapore
- Transparency Level: Extremely High. Corporate data is centralized and easily searchable via ACRA (Accounting and Corporate Regulatory Authority).
- Key Focus Areas: Strict Anti-Money Laundering (AML) enforcement, beneficial ownership transparency, and clean corporate governance. Public registries minimize hidden-ownership risks.

✅ Hong Kong
- Transparency Level: High. Maintained via the Companies Registry and the Integrated Companies Registry Information System (ICRIS).
- Key Focus Areas: Cross-border capital flow tracing, ties to Mainland China corporate structures, and compliance with local licensing or SFC (Securities and Futures Commission) regulations.

⚠️ Malaysia
- Transparency Level: Moderate. Managed through the SSM (Suruhanjaya Syarikat Malaysia / Companies Commission of Malaysia).
- Key Focus Areas: Politically Exposed Persons (PEPs), local bumiputera equity ownership requirements, government-linked connections, and localized bribery or corruption risks.

⚠️ South Korea
- Transparency Level: High via official courts/registries, but culturally nuanced.
- Key Focus Areas: Complex chaebol (conglomerate) cross-holdings, related-party transactions, stringent personal data privacy laws (PIPA), and rigorous labor/anti-trust regulations via the KFTC.

🔎 Vietnam
- Transparency Level: Developing/Low. Public registry data (National Business Registration Portal) is often basic and lacks deep historical or beneficial ownership visibility.
- Key Focus Areas: On-the-ground asset verification, land-use rights (Red/Pink books), heavy state-owned enterprise (SOE) entanglements, anti-bribery checks (PCPA), and supply-chain ESG/labor tracing.

💡 Core Cross-Border Strategy

Verify Registry Data First: Use official digital portals in Singapore and Hong Kong for rapid screening, but budget for local fixer/legal networks in Vietnam and Malaysia to verify physical assets and operational realities.
Check Sanctions and PEPs: Screen all target directors against international watchlists and regional anti-corruption databases, paying special attention to indirect state links in Malaysia and Vietnam.
Assess Regulatory Shifts: Factor in changing regional mandates, such as enhanced supply-chain and sustainability tracking aligned with global trade standards. [1, 2]

Please tell us:

Which specific country is your primary target for this deal?
What is the industry sector (e.g., tech, manufacturing, finance)?

Once you reply, we will provide a tailored checklist of specific red flags and local data sources for that market.

Tailored checklist of specific red flags and local data sources for Singapore, Hong Kong, Malaysia, South Korea, and Vietnam

🇸🇬 Singapore Due Diligence Checklist

⚠️ Critical Red Flags

Missed AGM & Annual Return Filings: If a company repeatedly fails to file its Annual Return within 7 months of its financial year-end, it points to weak internal financial controls or severe governance instability.
SSIC Mismatches: Material inconsistencies between the company's stated operations and its registered Singapore Standard Industrial Classification (SSIC) code on its official profile can signal regulatory sidestepping or unauthorized, unlicensed business activities.
Frequent Corporate Secretary Changes: Rapid turnover of corporate secretarial firms within a 12-to-24 month window often points to billing disputes, poor compliance adherence, or severe friction over governance disclosures.
Nominee Director Saturation: A local nominee director who simultaneously holds board positions at dozens of unrelated small shell companies increases the risk of hidden cross-jurisdictional liability.

Essential Local Data Sources

ACRA BizFile+ Portal: Use the entity search to buy the company’s structural Business Profile and verify its Unique Entity Number (UEN), active statutory status, directorship timelines, and paid-up capital histories.
Insolvency Search (Ministry of Law): Run a targeted electronic background check to confirm whether individual directors or the entity are facing active bankruptcy orders or winding-up petitions.
IRAS Tax Registry: Cross-check and confirm the company’s operational Goods and Services Tax (GST) registration status and historical validity to verify commercial legitimacy.

🇭🇰 Hong Kong Due Diligence Checklist

⚠️ Critical Red Flags

Abnormally Low Paid-Up Capital: Companies maintaining a nominal paid-up capital (e.g., HK$1) while claiming multi-million dollar annual commercial volumes are highly characteristic of high-risk shell or front entities.
"Letterbox" Virtual Office Saturation: A registered physical address that resolves exclusively to a virtual mailbox shared by hundreds of unrelated entities in industrial clusters (e.g., Kwun Tong or Kowloon Bay) with zero physical staff footprint.
Unfiled Audit Reports: Under the Hong Kong Companies Ordinance, all live entities must prepare annual audited accounts. An absence of continuous audited filings signals major corporate non-compliance.
Opaque Mainland China Control Structures: Complex multi-tiered layers of offshore holding companies (e.g., BVI or Cayman Islands) obscuring the actual identity of the Ultimate Beneficial Owners (UBOs) in Mainland China.

Essential Local Data Sources

Hong Kong Companies Registry Cyber Search Centre: Retrieve the mandatory Form AR1 (Annual Return) to track real-time share allocations, along with Form ND2A to trace historical director and officer appointment alterations.
Inland Revenue Department (IRD) Business Registration Search: Directly verify whether the target possesses a valid, live Business Registration Certificate (BRC) and confirm its precise physical branch listings.
Hong Kong Judiciary Litigation Search: Check the daily cause lists and historical court registries for active civil actions, debt collection claims, or pending commercial disputes against the entity.

🇲🇾 Malaysia Due Diligence Checklist

⚠️ Critical Red Flags

Bumiputera Equity Non-Compliance: Discrepancies or unverified nominee arrangements concerning statutory local equity thresholds required for restricted licenses, government procurement, or specialized sectors.
Undisclosed Politically Exposed Persons (PEPs): Hidden equity ties, immediate family relationships, or direct board overlaps linking corporate directors to prominent regional political figures or state-level bureaucrats.
Unreported Government Contract Dependency: A revenue baseline reliant entirely on single-source, un-tendered state or provincial contracts that are highly vulnerable to localized political cycles and regime changes.
Stagnant SSM Filing History: Failing to file annual financial statements or updated corporate records with the registrar on time, masked by continuous excuses regarding delayed independent audits.

Essential Local Data Sources

SSM e-Info / MyData Portal (Companies Commission of Malaysia): Obtain official corporate profiles, historical charge documents, share capital breakdowns, and mandatory audited financial balance sheets.
CTOS / Experian Malaysia Credit Bureau: Run commercial credit risk screens to uncover localized banking defaults, trade credit repayment delays, and pending legal actions.
Malaysian Department of Insolvency (MDI): Conduct individual and corporate search parameters to isolate ongoing bankruptcy listings or active winding-up petitions.

🇰🇷 South Korea Due Diligence Checklist

⚠️ Critical Red Flags

Complex Chaebol Related-Party Traps: Opaque cross-shareholding links or off-balance-sheet guarantees connecting the target company to broader, unregulated family-run business groups.
Severe PIPA Non-Compliance Risks: Operating consumer-facing digital workflows or data structures that fail to strictly meet South Korea's highly punitive Personal Information Protection Act (PIPA).
Undisclosed KFTC Anti-Trust Inquiries: Hidden regulatory investigations, historical price-fixing penalties, or pending unfair trade practice complaints lodged with the Korea Fair Trade Commission.
Hidden Labor Union Disputes: Undisclosed, volatile collective bargaining impasses, active wage claims, or systemic labor law non-compliance that could trigger sudden operational disruption.

Essential Local Data Sources

DART (Data Analysis, Retrieval and Transfer System): Access the Financial Supervisory Service's comprehensive registry for audited financial reports, public disclosures, and mandatory institutional filings for listed or large-scale Korean firms.
Supreme Court of Korea Internet Registry: Procure official corporate registers (Deungbo) to cross-verify real-time legal statuses, active board memberships, and physical asset lien structures.
KFTC Public Disclosure System: Audit the anti-trust regulator's archives to identify historical corporate penalties, monopoly abuse rulings, or unfair trade restrictions.

🇻🇳 Vietnam Due Diligence Checklist

⚠️ Critical Red Flags

Opaque "Red Book" Land Use Risks: Mismatches, expired tenures, or improper municipal authorizations concerning Land Use Rights Certificates (LURCs), which serve as the primary security for real estate holdings.
Dual-Accounting Records: The systemic maintenance of distinct accounting logs (one tracking internal operational realities, and an alternative configured solely for local tax filings) to mask actual net margins.
Hidden State-Owned Enterprise (SOE) Controls: Opaque joint-venture arrangements where local SOEs retain blocking minority stakes or hidden veto powers over critical operational vectors.
Supply-Chain ESG & PCPA Violations: Supply chains entangled with localized environmental enforcement fines or systematic violations of Vietnam's stringent anti-bribery laws (Penal Code/PCPA).

Essential Local Data Sources

National Business Registration Portal (NBRP): Retrieve official foundational data to check basic corporate status, legal representatives, capital structures, and registered business lines.
General Department of Taxation (GDT) Portal: Cross-reference the target’s active enterprise identification number to screen for public tax defaults, collection freezes, or blacklisted invoice patterns.
Provincial Department of Natural Resources and Environment (DONRE): Access regional registries to directly investigate land titles, verify active industrial construction authorizations, and track local environmental compliance histories.

Quick-Reference Cross-Border Registry Matrix

Country	Primary Corporate Registry	Corporate Data Accessibility	Financial Data Transparency
Singapore	ACRA BizFile+	Immediate / Fully Digital	High (Audited reports available for purchase)
Hong Kong	Companies Registry (ICRIS)	Immediate / Fully Digital	High (Annual audited accounts mandatory)
Malaysia	SSM e-Info / MyData	Immediate / Fully Digital	Moderate (Updates occasionally lag behind filings)
South Korea	Supreme Court Registry / DART	High / Restricted via API	High (Highly standardized via public electronic portals)
Vietnam	NBRP Portal	Moderate / Basic Records	Low (Requires direct on-site financial forensic verification)

If you'd like to dive deeper, let us know:

Is there a specific target entity type you are evaluating (e.g., a private tech startup vs. an asset-heavy manufacturer)?
Would you like us to build a tailored document request checklist for your initial data room review?

Tailored Document Request checklist for Initial data room review

This initial document request list (DRL) is structured specifically for cross-border acquisitions or joint ventures targeting companies in Singapore, Hong Kong, Malaysia, South Korea, and Vietnam. It addresses both standard corporate governance and the specific regulatory nuances of these five jurisdictions.

Section 1: Corporate Governance & Statutory Compliance

Requested Document / Information	Purpose & Specific Country Application
Current Corporate Profiles & Charters• Constitution (SG, MY)• Articles of Association (HK)• Corporate Registry (Deungbo - KR)• ERC & IRC (VN)	To verify the legal existence, capacity, active status, and authorized business activities of the target.
Statutory Registers• Register of Members / Shareholders• Register of Directors & Secretaries• Register of Controllers / Significant Beneficial Owners (SG, HK, MY)	To trace true economic ownership and ensure local residency compliance requirements are fully met.
Board and Shareholder Minutes• Minutes of all AGM and EGM sessions• Written resolutions passed by directors• Board committee reports (last 3–5 years)	To review internal corporate approvals, past asset sales, major debt assumptions, or shareholder disputes.
Local Nominee & Trustee Agreements• Nominee Director arrangements (SG)• Nominee Shareholder / Trust Deeds (HK)• Bumiputera equity compliance structures (MY)	To identify underlying beneficial interests and assess regulatory exposure or restructuring needs.

Section 2: Financial, Tax, & Asset Verification

Requested Document / Information	Purpose & Specific Country Application
Audited Financial Statements• Full audited accounts (last 3–5 years)• Independent Auditor management letters• Tax computation files and returns	To check for undisclosed liabilities or variances between internal books and official filings (especially critical in VN).
Material Asset Ownership Proofs• Property title deeds and lease agreements• Land Use Rights Certificates (LURCs / Red Books - VN)• Asset charges and encumbrances registry entries	To confirm clean asset ownership and identify any localized restrictions on land tenure or security enforcement.
Banking and Credit Facilities• Corporate loan agreements and line of credit terms• Inter-company loan agreements• Cross-holdings or Chaebol parent guarantees (KR)	To assess debt maturity horizons, evaluate default risks, and uncover hidden structural or parental liabilities.

Section 3: Regulatory, Anti-Corruption, & ESG Compliance

Requested Document / Information	Purpose & Specific Country Application
Licenses, Permits, and Approvals• Industry-specific operating licenses• Foreign investment clearances / approvals• Specialized sector permits	To verify that the entity holds all mandatory local operational permissions to avoid business closure.
Anti-Corruption & AML Policies• Internal anti-bribery policies (PCPA - VN)• Whistleblower reports and logs• Third-party distributor/agent due diligence files	To evaluate exposure to regional anti-corruption laws and check for active compliance violations.
Data Privacy & Cybersecurity Frameworks• PIPA compliance audits and data mapping (KR)• PDPA privacy notices and consent forms (SG, MY)• Cross-border data transfer protocols	To identify regulatory exposure regarding the handling of personal information under strict regional data laws.
Environmental & Supply Chain Records• Environmental impact assessments (EIAs - VN)• Waste disposal and emission permits• Supply chain audit reports and vendor codes	To evaluate environmental liability risks and check for alignment with global ESG import/export criteria.

Section 4: Human Resources & Labor Relations

Requested Document / Information	Purpose & Specific Country Application
Key Employment Contracts• Executive employment agreements• Non-compete and confidentiality clauses• Expatriate work pass approvals (SG, MY)	To determine key-person dependencies, track localization ratios, and review termination liability clauses.
Collective Bargaining & Union Files• Collective Bargaining Agreements (CBAs - KR)• Union correspondence and internal dispute records• Historical labor court claims	To gauge labor relations risk and uncover exposure to wage disputes, strikes, or severance payouts.
Statutory Contribution Proofs• CPF (SG), MPF (HK), EPF/SOCSO (MY) receipts• Four statutory social insurances clearings (VN)• National Pension payment histories (KR)	To ensure the company has fully met all mandatory local social security and employee fund contributions.

Section 5: Commercial Contracts & Material Litigation

Requested Document / Information	Purpose & Specific Country Application
Top Customer & Supplier Contracts• Agreements accounting for >5% of revenues/costs• Joint venture or consortium arrangements• Government/SOE procurement contracts (MY, VN)	To identify change-of-control triggers, assess contract termination risks, and verify key revenue streams.
Intellectual Property (IP) Portfolio• Trademark, patent, and copyright registrations• Software licensing and IT infrastructure contracts• IP assignment agreements from founders/contractors	To confirm the target owns its core tech or brand equity, and check for localized infringement risks.
Litigation and Regulatory Claims• Pending or threatened lawsuits/arbitrations• KFTC anti-trust or price-fixing notices (KR)• Tax authority audit notices or settlement deeds	To map out known legal exposures, evaluate contingent financial risks, and design appropriate indemnity protections.

Execution Checklist for the Virtual Data Room (VDR)

Enforce Folder Cleanliness: Structure the VDR folders exactly to match Sections 1 through 5 above to simplify multi-disciplinary reviews.
Apply Jurisdictional Tags: If evaluating multiple entities across these regions simultaneously, mandate prefixing every file name with the country code (e.g., [SG]_Constitution.pdf, [VN]_LURC_Hanoi.pdf).
Establish Strict VDR Permissions: Restrict download and printing privileges for sensitive PIPA/PDPA files (Section 4) and UBO records (Section 1) to a tightly controlled clean-team to remain compliant with data protection laws during due diligence.

If you'd like, let us know:

What is the estimated transaction value or deal size?
Are you executing this as a share purchase (buying the legal entities) or an asset purchase (buying specific assets/contracts)?

We can refine the checklist further to prioritize high-impact areas based on your transaction structure.

Share Purchase

Since you are executing this as a share purchase, you are inheriting the target companies' entire historical liabilities—including hidden tax defaults, undisclosed litigation, and past regulatory non-compliance [🇸🇬].

Below is the modified, high-priority due diligence checklist and structural focus areas tailored specifically to handle the structural risks of a share purchase across these five jurisdictions.

Crucial Share-Purchase Data Room Additions

Because you are buying the shares, you must add these specific items to your data room request immediately:

Share Certificate Ledgers: Copies of all canceled and current physical share certificates (especially critical for older entities in HK and MY to verify clean chain of title).
Historical Tax Clearance Certificates: Official "no objection" or tax clearance letters from local authorities (IRAS in SG, IRD in HK, IRBM in MY, NTS in KR, GDT in VN) for all open tax years.
Change-of-Control Registers: A schedule of all material commercial contracts, bank facilities, and operating licenses that contain "Change of Control" triggers requiring counterparty notification or consent upon a share sale.
Historical Board Approvals for Past Share Transfers: Minutes approving every share transfer or issuance since inception to prevent minority shareholder freeze-out claims.

High-Risk Forensic Focus by Country (Share Purchase Lens)

🇸🇬 Singapore: Capital & Regulatory Continuity

The Share Risk: Check if the target has human-centric liabilities tied to its Employment Pass (EP) quotas. In Singapore, a change in corporate ownership can trigger a reassessment of Ministry of Manpower (MOM) dependency ratios.
Data Room Priority: Request the target's current MOM EP/S-Pass quota balance statement alongside the central ACRA electronic share register. Verify that any statutory financial assistance rules (if applicable to public or specific company types under the Companies Act) were not violated during past share buybacks.

🇭🇰 Hong Kong: Stamp Duty & Hidden Chinese Liens

The Share Risk: Transferring shares in a Hong Kong company incurs a contract note stamp duty (currently 0.1% per note, totaling 0.2% on the value of the stock transfer). You must ensure past transfers paid this correctly, or you inherit penalty liabilities.
Data Room Priority: Request all past stamped Instrument of Transfers and Contract Notes. Crucially, screen the target for onshore Mainland China guarantees where the HK entity's shares may have been quietly pledged as offshore collateral (Neibaowaidai arrangements) without clear local filings.

🇲🇾 Malaysia: Bumiputera Carve-Outs & Board Approvals

The Share Risk: If the target company holds specific government licenses or operates in regulated sectors (like wholesale/retail trade, oil & gas, or telecom), a share purchase by a foreign buyer can automatically breach Bumiputera (local Malay) equity ownership thresholds, invalidating their licenses.
Data Room Priority: Request all Form 24 / Section 78 (Return of Allotment of Shares) and Form 32A / Section 105 (Transfer of Shares) documents. Audit the exact licensing conditions issued by the Ministry of Investment, Trade and Industry (MITI) or relevant boards to ensure a foreign share takeover is legally permitted.

🇰🇷 South Korea: Secondary Tax Liability & Labor Continuity

The Share Risk: Under South Korean tax law, if you become an "oligopolistic shareholder" (owning more than 50% of the shares and exercising dominant control), you can be held secondarily liable for the company's unpaid corporate taxes. Furthermore, employee collective bargaining rights automatically transfer with the corporate entity.
Data Room Priority: Request a complete history of corporate tax assessment notices from the National Tax Service (NTS). Ensure your due diligence team calculates total accrued, unpaid severance liabilities (Toejikgeum) under the Labor Standards Act, as these liabilities remain inside the entity you are buying.

🇻🇳 Vietnam: Foreign Investment Approvals (M&A Clearance)

The Share Risk: A foreigner buying shares in a Vietnamese company frequently requires formal M&A Approval (M&A Clearance) from the local Department of Planning and Investment (DPI) before the share transfer can be legally registered, especially if the company operates in conditional sectors or owns strategic land.
Data Room Priority: Request the original Investment Registration Certificate (IRC) and Enterprise Registration Certificate (ERC). Ensure your legal team builds a pre-closing condition requiring the seller to obtain the DPI’s written M&A approval; otherwise, your share ownership will not be legally recognized by the Vietnamese state.

Recommended Share Purchase Indemnity Protections

Given that you are absorbing the entity's history, ensure your legal team integrates these protections into the Share Purchase Agreement (SPA) based on your data room findings:

Fundamental Share Warranties: The seller must warrant they are the sole legal and beneficial owner of the shares, and the shares are free from all liens, options, or third-party encumbrances.
Tax Indemnity Deed: A standalone, robust indemnity covering any tax liabilities relating to the pre-closing period, regardless of whether they were disclosed in the data room.
Look-Back Periods: Align your warranty look-back timelines with local statutory limitation periods (e.g., up to 5 years for tax audits in Vietnam and Malaysia; up to 6 years for breach of contract claims in Singapore and Hong Kong).

If you're ready to proceed, let me know:

Is the target company a holding company (owning subsidiaries across these regions) or are you buying five separate independent entities?
Are there any known disputes or dynamic regulatory challenges currently facing the target that you have already spotted?

Navigating Pan-Asian M&A: How Bestar Asia Mitigates Share Purchase Risks Across 5 Key Markets

Executing a cross-border share purchase across Singapore, Hong Kong, Malaysia, South Korea, and Vietnam demands a meticulous approach to compliance [🇸🇬]. Because a share purchase inherits all historical tax defaults, hidden regulatory liabilities, and complex regional corporate governance, relying on standard templates can lead to costly post-transaction legal disputes [🇸🇬].

Partnering with an experienced regional corporate services firm like Bestar Asia provides the local expertise and strategic oversight required to safely execute transactions across these distinct Asian jurisdictions.

The Complexities of Multi-Jurisdictional Share Purchases

Managing cross-border corporate acquisitions in Asia involves navigating diverse legal and tax frameworks. The regional landscape ranges from highly digitized registries to restrictive regulatory markets that require localized clearances before share transfers are legally recognized.

[Target Entity Acquisition]

│

├─► Singapore ──► ACRA Registry Verification & MOM Quota Audits

├─► Hong Kong ──► Stamp Duty Compliance & Cross-Border Lien Checks

├─► Malaysia ──► Bumiputera Equity Safeguards & SSM Profiling

├─► S. Korea ──► Secondary Tax Liabilities & KFTC Anti-Trust Checks

└─► Vietnam ──► DPI M&A Clearance & LURC Title Verifications

🇸🇬 Singapore: Capital Continuity and Compliance

Singapore provides a highly transparent, fully digital environment via the Accounting and Corporate Regulatory Authority (ACRA) BizFile+ Portal. However, share acquisitions require careful attention to localized workforce restrictions and strict compliance standards.

⚠️ Critical Red Flags in Singapore

Unfiled Annual Returns: Companies failing to file financial returns within 7 months of year-end indicate weak compliance or financial stress.
MOM Quota Constraints: Drastic ownership shifts can trigger a reassessment of Ministry of Manpower (MOM) Employment Pass (EP) and S-Pass dependency ratios.