Why Choose Hong Kong for Crypto Licensing?
Hong Kong combines a tier-1 global financial centre with a fully operational virtual-asset licensing regime supervised by the Securities and Futures Commission. The SFC has licensed 13 Virtual Asset Trading Platforms as of , the HKMA has licensed two stablecoin issuers, and Policy Statement 2.0 () signalled further expansion through the LEAP framework. The trade-off is cost and timeline: Hong Kong is more expensive and slower than Singapore or the UAE.
Hong Kong’s appeal for crypto businesses sits on five pillars that competing regimes cannot match together. First, tier-1 financial centre status with HKD/USD fiat rails, a deep institutional investor base, and proximity to mainland China and Greater Bay Area capital. Second, a substantive operational regime with 13 SFC-licensed VATPs trading legally as of , including the first listed crypto-native VATP (Bullish, NYSE: BLSH) and the first stablecoin issuers under Cap 656.[1][2] Third, retail access for “eligible large-cap” virtual assets, an option Singapore has actively discouraged.[3] Fourth, a deliberate tokenisation push under Policy Statement 2.0’s LEAP framework, with stamp-duty exemption for tokenised ETFs and a proposed profits-tax exemption for “specified digital assets” in qualifying funds.[4] Fifth, an attractive tax base: 8.25% / 16.5% two-tier profits tax, no capital gains, no VAT, territorial source basis.[5]
For operators targeting Asia-Pacific institutional flow, Hong Kong is the natural Asian counterpart to a European MiCA CASP licence: substantive supervision, branded credibility for banking introductions, and clear forward roadmap. In practice, banking introductions move materially faster for SFC-licensed VATPs than for unlicensed crypto operators. The HKMA’s Access to Banking Services for Corporate Customers circular of has structurally shifted bank risk appetite where regulated counterparties are concerned.[6] What the regime is not is a passport. A Hong Kong licence does not authorise services into the European Union, the United Kingdom, or the United States, and operators with material EU demand need a parallel CASP authorisation in an EU member state.
The most compelling reason to choose Hong Kong over Singapore or Dubai is the combination of substantive retail access and tier-1 banking infrastructure under one regulatory roof. The real constraint is the 12-to-18-month timeline and the HKD 7–15 million first-year operating spend. Neither is negotiable, and applicants who underestimate either tend to stall mid-process.
Regulatory Framework
Hong Kong’s virtual-asset framework rests on four primary statutes plus subordinate guidelines from two regulators. The Securities and Futures Ordinance (SFO, Cap 571) provides the licensing architecture for Type 1 and Type 7 regulated activities applicable to VATPs that trade security tokens. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap 615), as amended by the AMLO (Amendment) Ordinance 2022, added Part 5B creating the dedicated VASP licensing regime, operative since .[7] The Stablecoins Ordinance (Cap 656) commenced and regulates fiat-referenced stablecoin issuance under the HKMA.[8]
Definition: Virtual Asset Trading Platform (VATP) Licence
An SFC-issued authorisation to operate a centralised virtual-asset trading platform in Hong Kong. The licence is granted under the Securities and Futures Ordinance (Cap 571) for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities together with the AMLO Part 5B VASP licence: most platforms hold both because tokens may be classified as securities or non-securities and the classification can evolve. Hong Kong applies the two-tier profits tax (8.25% / 16.5%) on licensee operating profits; capital gains are not taxed.
Regulatory History
Hong Kong’s first crypto licensing framework was a voluntary opt-in regime launched by the SFC in for platforms trading security tokens, which proved too narrow. The Legislative Council passed the AMLO Amendment Ordinance in to create the mandatory VATP regime under AMLO Part 5B, effective .[7] A 12-month deeming arrangement allowed pre-existing platforms to file by and continue operating during review; the window closed . Most large international exchanges (Crypto.com, OKX, HTX, Meex, Gate.io, Bybit’s earlier vehicle) withdrew or had applications returned during deeming. The first new-regime licences were granted from late 2024 onward.
Parallel to the VATP work, the HKMA published a discussion paper on cryptoassets in and ran a public consultation in on the stablecoin regime. The Stablecoins Bill passed LegCo on , was gazetted , and commenced by Commencement Notice gazetted .[9] The HKMA received 36 stablecoin licensing applications by the deadline and granted the first two licences on .[1]
Recent Regulatory Developments
- : SFC released the High-Level Framework for Virtual Asset Perpetual Contracts Offering by Virtual Asset Trading Platforms, opening perpetual contracts on BTC and ETH to professional investors only, with no platform-extended margin credit.[10]
- : HKMA granted the first two stablecoin issuer licences under Cap 656: Anchorpoint Financial Limited (FRS01) and The Hongkong and Shanghai Banking Corporation Limited (FRS02).[1]
- : SFC issued the Shared Order Book circular permitting VATPs to integrate operationally with affiliated overseas VATPs subject to prior approval, plus the Expanded Products & Services circular broadening distribution and custody scope.[11]
- : HKSAR Government published Policy Statement 2.0 on the Development of Digital Assets, introducing the LEAP framework (Legal streamlining, Expanding tokenisation, Advancing use cases, People and partnership).[4]
- : SFC Circular 25EC22 on staking services lifted the previous prohibition, permitting VATPs to offer staking with prior written SFC approval.[12]
- : SFC published the ASPIRe Roadmap (Access, Safeguards, Products, Infrastructure, Relationships): 12 initiatives across five pillars guiding virtual-asset policy through 2027.[13]
Regulatory Overlap
Four overlapping regimes operate alongside the core SFC VATP licence:
- HKMA Stablecoin Issuer (Cap 656). Trigger: issuance of fiat-referenced stablecoins in Hong Kong, or referencing HKD anywhere. Consequence: separate paid-up capital of HKD 25 million and HKMA prudential supervision in addition to (or instead of) SFC VATP licensing.[8]
- C&ED Money Service Operator licence (AMLO Cap 615 Part 4). Trigger: money-changing or remittance, historically including some crypto OTC. Consequence: separate fit-and-proper assessment by Customs and Excise; substantially superseded for crypto by the proposed VA Dealing regime.[14]
- SFC Type 9 (Asset Management) plus Joint Circular 23EC67. Trigger: managing portfolios with a stated VA objective, or ≥10% of gross asset value in virtual assets. Consequence: additional licensing conditions per Appendix 7 of the SFC’s Virtual Asset Fund Management Terms and Conditions.[15]
- Proposed SFC VA Dealing and VA Custodian licences. Trigger: OTC trading or third-party VA custody outside an SFC-licensed VATP. Consequence: bills expected at LegCo during 2026; transition arrangements not yet published.[16]
License Types and Activities Covered
The SFC VATP licence regulates centralised virtual-asset trading platforms. The HKMA Stablecoin Issuer licence regulates issuance of fiat-referenced stablecoins. The C&ED MSO licence and SFC Type 9 are residual regimes that capture activity outside both. In practice, most applicants need the SFC VATP licence as the primary authorisation; stablecoin issuers need the HKMA licence; managers of virtual-asset funds need Type 9 with the Appendix 7 uplift.
Covered Activities
- SFC Virtual Asset Trading Platform (VATP): primary regime. Centralised order-book or quote-driven trading of virtual assets between users, where the platform takes custody of client virtual assets. The licence captures both security-token activity (Type 1 + Type 7 under the Securities and Futures Ordinance) and non-security activity (AMLO Part 5B VASP licence). Dual licensing is the SFC’s strong preference because token classification can evolve.[17]
- HKMA Stablecoin Issuer Licence. Issuance in Hong Kong of any fiat-referenced stablecoin, plus issuance anywhere of any stablecoin referencing the Hong Kong dollar. Captures both single-currency stablecoins and basket-referenced stablecoins where one component is a fiat currency. Algorithmic or under-collateralised stablecoins are outside the regime and effectively prohibited.[8]
- C&ED Money Service Operator (MSO) Licence. Money-changing and remittance, historically including fiat-to-crypto OTC. Two-year initial licence, no minimum capital. Issued by the Customs and Excise Department Money Service Supervision Bureau. The MSO regime is being substantially superseded for crypto OTC by the proposed VA Dealing regime.[14]
- SFC Type 9 (Asset Management) with Virtual Asset Uplift. Portfolio management of VA-exposed strategies above the 10% gross-asset-value threshold. Requires the standard Type 9 licence plus the modified licensing condition referencing the SFC’s Virtual Asset Fund Management Terms and Conditions.[15]
What Does NOT Require Registration
- Pure peer-to-peer wallet software without custody, matching, or order-routing functionality. The VATP regime requires platform operation; non-custodial software-only providers fall outside.[17]
- Tokenised securities trading. Trading of tokens that legally constitute securities is regulated under the Securities and Futures Ordinance Type 1 and Type 7 regulated activities, not under AMLO Part 5B. The SFC permits VATPs and traditional brokers to trade tokenised securities subject to the standard SFO conditions.[15]
- NFTs that are pure collectibles. Where an NFT functions as a digital collectible without investment characteristics and no security-token features, it is generally outside the VATP perimeter. NFTs marketed as fractional investments fall within the SFC’s collective investment scheme analysis.[17]
- Bank-provided digital-asset services to existing customers under the SFC–HKMA Joint Circular 25EC50 (). Authorised Institutions distributing or providing custody for VA-related products to qualifying clients operate under bank-side supervision rather than a standalone VATP licence.[15]
Activity Restrictions
Retail-eligible tokens. Retail clients on SFC-licensed VATPs can trade only “eligible large-cap virtual assets”: tokens included in at least two acceptable indices from independent providers, with at least one index meeting IOSCO standards.[3] The historical 12-month track-record requirement was removed for professional-investor-only access in the November 2025 Products & Services circular; it remains for retail.[11]
Derivatives. Currently prohibited for retail. The SFC perpetual contracts framework permits PI-only BTC and ETH perpetuals on licensed VATPs, with no platform-extended margin credit and strict pre-trade margin checks.[10]
Stablecoins for retail. Retail access to stablecoins on VATPs is restricted to HKMA-licensed stablecoin issuers. As of , only the two licensed issuers’ stablecoins may be offered to retail; all other stablecoins are professional-investor-only.[1]
Tokenised securities and RWA
Hong Kong treats a tokenised security as a traditional security carried on a distributed ledger, not as a new asset class. The tokenisation wrapper does not change the regulatory character of the underlying instrument, so the Securities and Futures Ordinance (Cap 571) and the prospectus regime apply in full, on a see-through basis. The SFC set this position in its two circulars of , one on intermediaries in tokenised-securities activities and one on tokenisation of SFC-authorised investment products, which superseded its earlier March 2019 “complex product” treatment; the HKMA issued a companion circular on tokenised products on . The practical consequence is that a tokenised bond, note or fund interest is dealt with under the same SFO obligations as its conventional equivalent.
This matters for licence scope. A virtual-asset (VATP) licence does not authorise tokenised securities or most real-world-asset tokens. Those require the relevant existing SFO licences from the SFC, Type 1 for dealing, Type 4 for advising, Type 9 for asset management, and so on, with secondary trading on a licensed VATP additionally engaging the VATP regime. We scope the securities-token route through the SFO permissions, and where the underlying instrument is a fund interest we scope it through the fund licensing route, pairing either with VATP custody or trading permissions only where the operating model needs them.
Requirements
Hong Kong’s VATP requirements split across five layers: capital, substance, governance, custody, and AML/CFT. Each layer carries independent fit-and-proper tests. The combined effect makes Hong Kong one of the most prescriptive virtual-asset regimes globally: more demanding than Singapore on custody, more demanding than the UAE on substance, and broadly comparable to Malta on AML/CFT.
| Requirement | Threshold |
|---|---|
| Paid-up share capital (VATP) | HKD 5 million minimum≈ $640K |
| Liquid capital (VATP) | HKD 3 million minimum (higher per SFC determination)≈ $384K |
| Liquid asset cushion | ≥12 months of operating expenses, virtual assets excluded |
| Paid-up share capital (HKMA Stablecoin Issuer) | HKD 25 million minimum (AIs exempt)≈ $3.2M |
| Reserve backing (Stablecoin) | 100% in HQLA, segregated under trust, monthly attestation |
| Responsible Officers (ROs) | ≥2 licensed ROs, ≥1 ordinarily resident in Hong Kong, ≥1 a director |
| Local incorporation | HK-incorporated, or non-HK company registered under Cap 622 Part 16 |
| Principal place of business | Hong Kong, with HK record-keeping premises |
| Cold storage ratio | ≥98% of client virtual assets in cold storage |
| Custody model | Wholly-owned Associated Entity with TCSP licence |
| Compensation arrangement | 50% of cold-storage client VAs + 100% of hot/other |
| Min. Directors | ≥2 (≥1 RO, ≥1 independent expected by the SFC) |
| Foreign Ownership | No restriction; UBO disclosure and fit-and-proper applies |
| Professional Indemnity Insurance | Risk-based per SFC FRR; typically required as part of compensation arrangement |
Fit-and-Proper Assessment
The SFC’s Fit and Proper Guidelines apply to every director, Responsible Officer, Licensed Representative (LR), Manager-in-Charge of a Core Function (MIC), and ultimate beneficial owner. The assessment examines six dimensions: financial status and solvency, educational and professional qualifications, ability to perform regulated activities competently, honestly and fairly, reputation, character, reliability and financial integrity, fitness of associates and connected persons, and any disciplinary record with overseas regulators.[18] The common mistake is treating the RO licensing as a formality. The SFC actively reviews CPT records, prior employment with regulated firms, and the proposed individual’s substantive role at the applicant, not just paper qualifications.
Local Presence
Hong Kong VATPs must operate from a permanent place of business in Hong Kong with records held locally. The SFC normally approves only HK premises for record-keeping under §130 of the Securities and Futures Ordinance. At least one Responsible Officer must ordinarily reside in Hong Kong; the SFC will challenge applications where the only HK-resident RO is a recently relocated individual without prior HK regulatory track record. Experienced applicants budget for a HKD 800,000 to HKD 1.5 million annual office and substance line item from year one. Bare-shell arrangements rarely survive the SFC’s on-site inspection under the swift licensing process.
AML/CFT and Travel Rule
VATPs are subject to the AMLO Schedule 2 customer due diligence regime plus the SFC’s Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Corporations and SFC-licensed Virtual Asset Service Providers) dated . Customer due diligence includes beneficial-owner look-through to natural persons. Ongoing monitoring is risk-based. Suspicious transaction reports go to the Joint Financial Intelligence Unit (JFIU) of the Hong Kong Police Force.[19]
The Travel Rule (FATF Recommendation 16) applies to every transfer regardless of value, with tiered information requirements at the HKD 8,000 (approximately USD 1,000) threshold under SFC AML/CFT Guideline Chapter 12: above HKD 8,000 full originator information (address, identification number or document number, or date and place of birth) must be obtained, held, and submitted; below the threshold, originator and beneficiary name and account number are required. Unhosted (self-hosted) wallet transfers require verification of customer ownership or control through micro-payment tests, message-signing tests, or supporting evidence; sole reliance on customer self-declaration is not acceptable per the SFC’s FAQ Q29.[19]
Application Process
The SFC publishes a service standard of “15 weeks for a licensed corporation application” once a complete application has been filed.[20] Under the SFC’s swift licensing process (introduced for all new VATP applicants submitting after ), the substantive end-to-end process runs 12 to 18 months from start of meaningful preparatory work and covers pre-application engagement, written submissions, SFC on-site inspection and direct engagement, implementation of policies and systems, a single external assessment under HKSAE 3000 / ISAE 3000 tripartite framework with independent penetration test, and full grant.
Application language: English. Submissions go through the SFC’s online WINGS portal as a single consolidated SFO (Type 1 + 7) plus AMLO VASP application.
Pre-application engagement: The SFC’s Fintech Contact Point and dedicated VATP team accept early engagement meetings before formal submission. Use these. Early signalling on structure, custody design, and token-admission methodology surfaces SFC concerns at a stage where they can still be addressed without rework.
Hong Kong Incorporation and Structure
Forming a Hong Kong entity is the first step. See the Hong Kong company formation guide for entity selection (limited company under Cap 622), share-capital deposit, registered office, and business registration. The Associated Entity (wholly-owned subsidiary for custody with a TCSP licence) is incorporated in parallel.
Substance and Responsible Officers
RO competence preparation including continuing professional training, Regulatory Industry Qualification examinations where applicable, and CV documentation. HK-resident RO recruitment if the founding team lacks one. Office lease, IT infrastructure procurement, and bank account opening (Stage 3 of the formation guide).
Written Submissions
Business plan, organisational chart, three-year financial projections, technology architecture documentation, custody design including HSM specifications and key-management procedures, AML/CFT policy and procedures manual, conflicts-of-interest policy, code of ethics, risk-management framework, market-surveillance design, and token-admission methodology. The common mistake is treating these as a template exercise. The SFC reads them as primary evidence of governance maturity.
SFC On-Site Inspection and Direct Engagement
Under the swift licensing process, the SFC engages directly with applicants through on-site inspections of premises, systems, and controls before the external assessment. SFC engagement covers structure, governance, operations, systems, controls, token admission, custody, KYC, AML/CFT, market surveillance, risk management, and cybersecurity. The applicant’s WINGS submission package, including external assessor details, is reviewed during this stage.
SFC Review and Rectification
Written feedback rounds, RO and MIC interviews, structural questions on shareholders or affiliated parties, rectification plan, approval-in-principle. The SFC’s service-standard 15-week clock includes only complete-submission review time; the broader cycle takes longer because the SFC iterates with the applicant.
Single External Assessment and Grant
Once policies, procedures, systems, and controls have been implemented, the external assessor conducts a single external assessment under HKSAE 3000 / ISAE 3000 via a tripartite agreement between the applicant, the external assessor, and the SFC. The assessment covers both design and implementation effectiveness, including an independent penetration test and vulnerability assessment of the live production environment. Satisfactory results must be filed before the SFC grants full licence.
Jagelski & Partners’ specialist compliance partners draft Hong Kong-specific AML/CFT policies, custody procedures, market-surveillance design, and coordinate the single external assessment under the HKSAE 3000 tripartite framework as part of the VATP licensing engagement. The compliance documentation is the most time-intensive component of any Hong Kong VATP application: typically 14 to 22 weeks of specialist work that cannot be shortcut with generic templates. Book a Licensing Assessment →
Required Documents
The SFC’s Licensing Handbook for Virtual Asset Trading Platform Operators (, with subsequent updates) catalogues the documentation expected at filing.[21] The corporate, personal, compliance, and operational documents below are the substantive minimum; case-specific adjustments are common.
Corporate Documents
- Certificate of Incorporation (Cap 622) and Business Registration Certificate for the applicant and Associated Entity.
- Articles of Association and any shareholders’ agreements.
- Corporate organisational chart showing all entities to ultimate beneficial owners (≥10%).
- Group structure chart with control percentages and operational interlinks.
- Audited financial statements for the applicant and group (or audited opening balance sheet for newly incorporated entities).
- Bank certificate evidencing paid-up share capital.
Personal Documents (All Directors, ROs, LRs, MICs, UBOs)
- Passport / HKID; proof of residential address dated within three months.
- Curriculum vitae with continuous employment record (no gaps over 12 weeks).
- Reference letters from prior regulated employers.
- Educational and professional qualifications.
- Police clearance certificates from each jurisdiction of residence over the past five years.
- Self-disclosure on disciplinary history with overseas regulators.
- Financial standing statement and recent personal bank statements.
Compliance Documentation
The SFC expects bespoke, Hong Kong-specific policy documents: generic templates fail under the single external assessment. Jagelski & Partners’ specialist compliance partners draft these documents as part of the licensing engagement, tailored to the applicant’s specific business model, jurisdictional footprint, and risk profile.
Risk-based CDD framework, enhanced due diligence triggers, source-of-funds and source-of-wealth methodology, ongoing monitoring, screening against UN/HKMA/OFAC sanctions lists, Travel Rule implementation including unhosted-wallet handling, suspicious transaction reporting protocol to the JFIU.
Methodology for evaluating new tokens including legal classification analysis (security vs non-security), regulatory due diligence, market integrity assessment, technical security review, index eligibility verification for retail-track tokens, Token Admission and Review Committee terms of reference.
Associated Entity structure, hot/cold wallet segregation methodology, HSM specifications and key-generation ceremony, multi-signature thresholds, geographic key distribution, backup and recovery procedures, customer asset segregation, compensation arrangement structure.
Proprietary trading restrictions, market-making policy, related-party transactions, employee personal account dealing rules, information barriers.
Manipulation typologies covered, surveillance system specification, alert escalation, manual review thresholds, regulatory reporting protocol.
Risk taxonomy, three-lines-of-defence model, risk appetite statement, key risk indicators, escalation matrix.
Aligned with SFC VATP Guidelines Chapter 11 and HKMA TM-G-1 / CYB-1 where applicable, including SDLC controls, change management, access controls, incident response, penetration testing programme, third-party risk management.
RTO and RPO targets, alternate site arrangements, communications protocol, annual testing requirements.
Covered persons, pre-clearance, prohibited trading windows, reporting obligations.
Business Plan and Financial Projections
Three-year revenue model with assumptions on user base, trading volume, fee structure, and operating costs. Sensitivity analysis on adverse scenarios (market crash, regulatory tightening, key staff departure). Capital adequacy projections evidencing the 12-month operating-expense liquid asset cushion at each year-end.
Technology and Operational Documentation
Technology architecture diagram covering trading engine, matching, settlement, custody integration, surveillance, KYC/AML systems, and reporting. Network diagram with security zones and access controls. Vendor list with criticality classification. Operational procedures for trading-day operations, end-of-day reconciliation, customer onboarding, deposit and withdrawal processing.
Costs and Pricing
The SFC’s fee schedule under the Securities and Futures (Fees) Rules and AMLO’s Schedule covers application and annual fees.[22] These are the smaller line items. The dominant cost components are legal counsel, external assessors, insurance or compensation arrangement, Hong Kong substance, and the HKD 8 million capital lock-up.
Government / Regulator Fees (HKD)
| Fee | Amount | Note |
|---|---|---|
| SFC application fee (per regulated activity) | ~4,740≈ $607 | Type 1 + Type 7 = ~9,480≈ $1.2K |
| Per-RO licence fee | ~1,790≈ $229 | Two ROs = ~3,580≈ $458 |
| AMLO VASP application fee | ~14,065≈ $1.8K | One-off |
| Annual SFC fee (per RA) | ~4,740≈ $607 | Recurring; Type 1 + 7 = ~9,480≈ $1.2K / year |
| HKMA Stablecoin Issuer application fee | Per HKMA invoice | Not published; case-by-case |
| HKMA annual supervision fee | Per HKMA invoice | Not published; case-by-case |
Total Cost Summary (HKD, first year)
| Line Item | Range |
|---|---|
| Government / SFC fees | 25,000–35,000≈ $3.2K–4.5K |
| Hong Kong company formation (applicant + Associated Entity) | 50,000–100,000≈ $6.4K–13K |
| Legal and regulatory counsel (application) | 1,500,000–3,000,000≈ $192K–384K |
| Compliance documentation (AML manual, token admission, custody procedures, conflicts, market surveillance, cybersecurity, BCP) | 800,000–1,500,000≈ $102K–192K |
| External assessor (single tripartite assessment under HKSAE 3000) | 500,000–1,500,000≈ $64K–192K |
| Independent penetration test + vulnerability assessment | 300,000–800,000≈ $38K–102K |
| Compensation arrangement (insurance / bank guarantee / reserve VAs, annual) | 1,000,000–5,000,000≈ $128K–640K |
| Hong Kong office and substance (annual) | 800,000–1,500,000≈ $102K–192K |
| Technology stack (custody HSM, surveillance, Travel Rule) | 1,000,000–3,000,000≈ $128K–384K |
| Audit, accounting, tax | 300,000–600,000≈ $38K–77K |
| Local representative / agent | 100,000–200,000≈ $13K–26K |
| Paid-up share capital (lock-up) | 5,000,000≈ $640K |
| Liquid capital (lock-up) | 3,000,000≈ $384K |
| Total Year 1 (including capital) | 15,000,000–23,000,000+≈ $1.9M–2.9M+ |
| Annual Ongoing Cost (Year 2+, ex capital) | 4,000,000–10,000,000≈ $512K–1.3M |
For the HKMA Stablecoin Issuer regime, expect HKD 25 million paid-up capital plus HKD 12–25 million Year 1 operating spend on top of (or in place of) the VATP stack. Experienced applicants budget for the HKD 7 to 15 million Year 1 operating spend as a hard floor. Applicants who scope below this consistently stall at the external assessment stage when budget rework forces parallel renegotiation with insurance providers and external counsel.
The compensation arrangement is the single most volatile line item. The SFC’s standard is 50% of cold-storage client VAs plus 100% of hot/other, reduced from the originally consulted 95% standard in the final May 2023 conclusions.[23] Acceptable assets are third-party insurance, bank guarantees, demand or time deposits maturing within six months, or reserve VAs of the same type in cold storage by the Associated Entity. Market-rate insurance premiums vary with platform AUC, custody design, and historical incident record. Operators with HKD 1 billion+ AUC typically face seven-figure annual premiums even with a clean track record.
Timeline
| Stage | Duration | Cumulative |
|---|---|---|
| Hong Kong incorporation + Associated Entity | 1–3 months | 1–3 months |
| Substance, ROs, office, banking | 2–4 months | 3–7 months |
| Written submissions and SFC on-site inspection | 3–6 months | 6–13 months |
| SFC review, on-site inspection, rectification, AIP | 6–9 months | 12–22 months |
| Single external assessment (HKSAE 3000), penetration test, full grant | 2–4 months | 14–26 months |
| Total (substantive engagement to grant) | 12–18 months typical; 24+ months for complex applicants |
Hong Kong’s pace is slower than Singapore’s MAS DPT process or Dubai’s VARA full-licence pathway. As of the SFC has licensed 13 VATPs over a roughly 36-month operational window, averaging fewer than five new licences per year, which constrains throughput even where individual applicants are well-prepared.[2] The pace reflects the depth of the single external assessment under HKSAE 3000 / ISAE 3000 rather than SFC capacity per se. The HKMA Stablecoin track is slower still: 36 applications, two licences granted on , with HKMA Chief Executive Eddie Yue signalling that the overall number of licences “will remain very limited”.[1]
Applicants targeting Year 1 trading should plan substantive engagement to begin no later than 14 months before the intended go-live date.
Taxation
Hong Kong is a low-tax, territorial-source jurisdiction, but the territorial principle is fact-specific for crypto exchanges and operators should not assume offshore-sourced profits qualify automatically. The Inland Revenue Department’s Departmental Interpretation and Practice Notes No. 39 (Revised) dated sets out the framework for digital-asset tax characterisation.[24]
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate Income Tax (two-tier) | 8.25% on first HKD 2m; 16.5% above | Taxable on HK-sourced trading profits per IRD DIPN 39 Revised |
| Capital Gains Tax | None | Long-term capital holdings non-taxable (badges-of-trade analysis applies) |
| Value Added Tax / GST | None | Hong Kong does not impose VAT or GST |
| Withholding Tax: dividends / interest | None | No withholding on outbound payments to non-residents |
| Withholding Tax: royalties | 4.95% / 16.5% | Standard SFO/IRO rates apply to crypto-related royalties |
| Salaries Tax (employee) | Progressive to 17% | Crypto-denominated salaries taxable at market value on accrual |
| Stamp Duty | 0% on virtual assets | Tokenised ETFs listed on HKEX exempt per Policy Statement 2.0 |
The two-tier profits tax sits at HKD 2 million per year, applied per group. Capital gains are not taxed: long-term virtual-asset capital holdings of an investor (rather than a trader) generally fall outside the profits-tax net under standard badges-of-trade analysis.[24]
Crypto Asset Tax Treatment
IRD DIPN 39 (Revised) classifies digital tokens into three categories with different tax treatments. Payment tokens used as means of payment trigger taxable transactions at market value. Security tokens that legally constitute shares yield non-taxable capital receipts on issuance, with subsequent dividends and disposals taxed under standard share rules. Utility tokens issued via ICO are generally taxable revenue receipts because the token is consideration for future services.[24] Crypto-denominated business income is taxable at market value on accrual; trading profits earned through a Hong Kong-sourced trade are taxable.
CRS / CARF Reporting
Hong Kong is a CRS Participating Jurisdiction. The Inland Revenue (Amendment) Bill implementing CARF is expected to be tabled at LegCo during 2026, with first reporting in 2027 consistent with the OECD timetable. Licensed VATPs and stablecoin issuers should expect to fall within the CARF reporting perimeter.
Pillar Two (Global Minimum Tax)
Hong Kong enacted the Inland Revenue (Amendment) (Minimum Tax for Multinational Enterprise Groups) Ordinance in 2025 implementing the OECD Pillar Two GloBE rules for fiscal years starting onward. Pillar Two applies to MNE groups with consolidated annual revenue exceeding EUR 750 million. Standalone Hong Kong-domiciled VASPs below this threshold are not in scope; multinational crypto groups should run a Pillar Two impact assessment.
Ongoing Compliance & Post-Registration
A Hong Kong VATP licence is granted indefinitely subject to ongoing compliance. The SFC supervises through annual returns, financial returns, audited financial statements, periodic on-site inspections, and ad hoc thematic reviews. Material changes to business model, RO composition, custody arrangements, or token offerings require SFC notification or prior approval depending on type.[17]
Annual Reporting Obligations
- Audited annual financial statements filed with the SFC within four months of financial year-end.
- Monthly and annual financial returns under the Securities and Futures (Financial Resources) Rules: liquid capital monitoring, trigger notifications when liquid capital falls below 120% of required level or below 50% of the previous return.
- Annual compliance report by the Manager-in-Charge of Compliance.
- AML/CFT annual report including STR/SAR statistics, sanctions screening exceptions, ongoing-monitoring outputs.
- Annual penetration test and vulnerability assessment with results provided to the SFC.
- Token Admission and Review Committee monthly minutes documented and available on request.
Supervision Fees
Annual SFC fees per regulated activity are payable on the licence anniversary. The licence is not “renewed”: it remains in force indefinitely subject to compliance. Recurring annual costs cover the SFC fees, audit (HKD 300,000–600,000), Hong Kong office and substance (HKD 800,000–1,500,000), compliance officer and AML team (HKD 1,500,000–3,000,000), insurance / compensation arrangement (HKD 1,000,000–5,000,000), and technology platform maintenance.
Regulatory Inspections
The SFC conducts both scheduled annual reviews and unannounced thematic inspections. Recent themes (2024–2025) have included custody control effectiveness, market surveillance, and token admission methodology rigour. The SFC’s Intermediaries Supervision Department directly supervises VATPs.
Advertising and Promotion Rules
VATPs must not advertise virtual-asset services to retail clients in respect of tokens that are not retail-eligible. Marketing materials require pre-approval by the licensed corporation’s compliance function. The SFC has signalled enforcement appetite: multiple actions during 2024 against unlicensed platforms advertising in Hong Kong, with the JPEX matter as the principal precedent.[25]
Enforcement
Operating a VATP without a licence carries up to a HKD 5 million fine and seven years’ imprisonment under AMLO §53ZRD. Stablecoin issuance without a licence carries up to a HKD 5 million fine and seven years’ imprisonment plus a HKD 100,000 daily continuing-offence fine under Cap 656. The JPEX matter ( onward) remains the principal enforcement precedent. As reported following the Hong Kong Police Force briefing of (South China Morning Post, November 2025), the JPEX investigation has resulted in 80 arrests, HKD 228 million in assets seized, and HKD 1.6 billion+ in alleged losses across more than 2,700 self-identified victims.[25]
ICT Risk Management & Operational Resilience
Hong Kong’s technology and cyber rules for VATPs and stablecoin issuers are set out in three layers: SFC VATP Guidelines Chapter 11 for cybersecurity, SFC VATP Guidelines Chapter 10 for custody (which includes prescriptive technology controls), and HKMA SPM modules TM-G-1, TM-G-2, and CYB-1 for stablecoin issuers and bank-side VA activities. The combined effect covers the same functional scope as the EU’s Digital Operational Resilience Act: ICT governance, incident management, resilience testing, ICT third-party risk, and information sharing, delivered through regulator-led guidance rather than horizontal statute.[26]
Applicable Frameworks
- SFC VATP Guidelines Chapter 11 (Cybersecurity). Governance, secure software development lifecycle, change management, access controls, network security, penetration testing, vulnerability assessment, incident response, BCP, third-party risk, audit trails.
- SFC VATP Guidelines Chapter 10 (Custody of Client Assets). Hot/cold wallet segregation, HSM-based key storage, multi-signature thresholds, geographic key distribution, backup and recovery, compensation arrangements.
- HKMA SPM TM-G-1 (General Principles for Technology Risk Management). Applies to AIs and, by HKMA expectation, to licensed stablecoin issuers: governance, risk identification, ICT third-party risk management.
- HKMA SPM TM-G-2 (Business Continuity Planning). RTO/RPO targets, recovery testing, communications protocols.
- HKMA SPM CYB-1 (Cyber Resilience). Incorporates the Cybersecurity Fortification Initiative including C-RAF (Cyber Resilience Assessment Framework) and iCAST (intelligence-led cyber attack simulation testing).
Incident Reporting
VATPs must notify the SFC of material incidents: system disruptions, cyber attacks, client-asset loss events, material control failures, under the standing reporting obligations in the SFC Code of Conduct. Initial notification expected within hours; written follow-up within agreed timeframes. The SFC has signalled lower tolerance for delayed disclosure than for the underlying incident.
Resilience Testing
Annual penetration test and vulnerability assessment by an independent qualified party are an ongoing condition of licence. Test scope must cover the production trading environment, custody infrastructure, key-management systems, and external-facing applications. Adverse findings require remediation with timelines reported to the SFC.
Custody Technology
The SFC VATP Guidelines mandate Hardware Security Module (HSM) storage of private keys with appropriate certification, geographic distribution of key shares, multi-signature controls, and key-generation ceremonies conducted under documented procedures with witnesses. Cold-storage facilities require physical access controls and environmental protections. The Associated Entity model (wholly-owned subsidiary with Trust or Company Service Provider licence) is the only permitted structure: third-party custody is not allowed, re-confirmed by the SFC in the November 2025 Products & Services circular.[11]
Banking
Banking for a Hong Kong-licensed VATP is materially easier than for an unlicensed crypto operator, but harder than for a traditional financial services firm. Onboarding timelines typically run two to six months. The HKMA’s circular Access to Banking Services for Corporate Customers explicitly instructed Authorised Institutions to apply a risk-based approach rather than wholesale de-risking, and the licensed-VATP banking landscape has shifted materially since.[6]
The institutions willing to bank licensed VATPs in Hong Kong fall into three archetypes. The first archetype is HK-licensed retail Authorised Institutions with a documented digital-asset risk appetite. These provide deep HKD and USD rails through FPS and SWIFT, support card issuance and payroll, and integrate with HKEX-listed corporate structures. The second archetype is locally-incorporated virtual banks with a digital-asset programme. These offer rapid onboarding, modern APIs, and digital-asset-native settlement features, with typically lower transaction limits than the major Authorised Institutions. The third archetype is adjacent-jurisdiction EMIs and payment institutions used for non-HKD fiat rails and faster cross-border settlement.
Stablecoin issuers under Cap 656 are themselves Authorised Institutions (in HSBC’s case) or partner with AIs for reserve custody. The reserve must be held under trust with a licensed bank or qualified custodian, segregated from issuer assets, held in HQLA matching the reference currency, and subject to monthly attestation.[8] The reserve banking arrangement is structurally different from the issuer’s operating account banking and is typically handled by global custody divisions of Tier-1 banks.
Jagelski & Partners’ banking partner network covers 90+ institutions across Hong Kong, the wider Asia-Pacific region, and Europe: corporate accounts, multi-currency IBANs, dedicated USD and HKD rails, and crypto-fiat settlement infrastructure. A licence without banking access is a certificate on the wall.
Learn about our Banking serviceFATF Status & International Standing
Hong Kong is an FATF member and is not subject to FATF enhanced monitoring as of . The most recent FATF Mutual Evaluation Report was published in 2019, with follow-up reporting in 2023 confirming continued compliance.[27] Hong Kong sits in the top tier of jurisdictions on Recommendation 15 (virtual assets) implementation, having moved early on Travel Rule enforcement and VATP licensing.
EU Market Access
Hong Kong VATPs cannot lawfully provide services to EU clients without authorisation as a Crypto-Asset Service Provider (CASP) under the EU Markets in Crypto-Assets Regulation (MiCA). MiCA Article 61 contains a narrow “reverse solicitation” exemption for services initiated at the EU client’s exclusive initiative; ESMA’s Guidelines published (applicable from ) interpret this narrowly: no active marketing, no advertising, no promotional content of any kind directed at EU prospects, and the exemption is product-specific rather than relationship-wide.
For operators with material EU demand, the practical path is parallel CASP authorisation in an EU member state. Malta, Estonia, Ireland, or Lithuania are common choices depending on substance and timeline preferences. For incidental, genuinely unsolicited EU contacts only, the reverse solicitation pathway is narrow and case-specific. See the reverse solicitation under MiCA Article 61 guide for the boundary conditions and compliance considerations.
Asia-Pacific Standing
Hong Kong sits in the Asia-Pacific Group on Money Laundering (APG): the FATF-style regional body covering APAC jurisdictions, and chairs working groups on virtual-asset implementation. Hong Kong’s IOSCO membership, signatory status to the IOSCO Multilateral Memorandum of Understanding, and Mutual Recognition of Funds arrangements with mainland China, Switzerland, Thailand, and others provide additional cross-border infrastructure.
Advantages and Limitations
Hong Kong’s strengths and weaknesses both flow from the prescriptive nature of the regime. Operators trade higher upfront cost and longer timeline for substantive credibility, broad retail access, and tier-1 banking infrastructure.
- Substantive retail access. Retail clients can trade eligible large-cap virtual assets on licensed VATPs subject to disclosure, suitability, and exposure limits: broader retail scope than Singapore’s MAS regime.[3]
- Tier-1 financial centre status. Deep HKD and USD rails, full SWIFT and FPS access, IOSCO and APG membership, Mutual Recognition of Funds with mainland China and other jurisdictions. Banking introductions move materially faster for licensed VATPs.[6]
- Clear tokenisation roadmap. Policy Statement 2.0 () and the LEAP framework provide forward visibility on tokenised ETF stamp-duty exemption, tokenised bond issuance, and the proposed profits-tax exemption for specified digital assets in qualifying funds.[4]
- Attractive tax base. Two-tier profits tax (8.25% / 16.5%), no capital gains tax, no VAT/GST, territorial source basis, no withholding on outbound dividends or interest to non-residents.[24]
- Expanding product scope. Staking permitted since ; PI-only BTC and ETH perpetual contracts permitted from ; expanded custody for tokenised securities and stablecoins from .[10][11]
- Operating regime track record. 13 SFC-licensed VATPs as of with a deliberate quarterly expansion cadence: the regime is proven, not theoretical.[2]
- No EU passporting. A Hong Kong licence does not authorise services into the EU. Mitigation: Operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for isolated genuinely unsolicited contacts only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
- Long timeline. 12 to 18 months substantive engagement is typical; 24+ months for complex applicants. Mitigation: Begin pre-application engagement with the SFC’s Fintech Contact Point 14+ months before intended go-live; appoint the external assessor early under the tripartite framework so engagement-readiness aligns with SFC on-site inspection.
- High cost. HKD 7 to 15 million Year 1 operating spend plus HKD 8 million capital lock-up. Mitigation: Phase technology investment, negotiate compensation arrangement terms once SFC inspection feedback has been received, prioritise the substance build that the regulator weighs heavily.
- Prescriptive custody. The 98% cold storage threshold plus Associated Entity TCSP plus 50% / 100% compensation arrangement is more demanding than Singapore, the UAE, or Malta. Mitigation: Design custody architecture in Stage 3, late-stage custody redesigns are the most common cause of rework under the external assessment.
- No US client access. A Hong Kong licence does not authorise services to US persons. Mitigation: Operate geo-blocking and IP-jurisdiction screening from launch; do not rely on customer self-declaration alone for US-resident screening.
- Limited stablecoin issuer licensing. Only two HKMA stablecoin issuer licences granted as of from 36 applications. Mitigation: For non-stablecoin business models the VATP licence is the primary path; would-be stablecoin issuers should expect long sandbox participation prior to formal application.
How Hong Kong Compares
Hong Kong’s natural Asia-Pacific peers are Singapore (MAS Payment Services Act DPT regime), Australia (AUSTRAC DCE registration and the proposed Digital Asset Platform regime), and the UAE (VARA in Dubai, FSRA in ADGM). Malta (CASP under MiCA) is the cross-tier reference for operators weighing an EU-passportable alternative against APAC presence.
| Factor | Hong Kong | Singapore | Australia | UAE |
|---|---|---|---|---|
| Licence Type | SFC VATP (Type 1 + 7 + AMLO Part 5B) | MAS Major Payment Institution DPT licence | AUSTRAC DCE registration + ASIC AFSL for derivatives | VARA Dubai or FSRA ADGM activity-specific |
| Regulator | SFC (HKMA for stablecoins) | Monetary Authority of Singapore | AUSTRAC + ASIC + APRA | VARA (Dubai) / FSRA (ADGM) |
| Timeline | 12–18 months | 12 months+ | 3–6 months DCE; AFSL 12+ months | 4–12 months (VARA) |
| Min. Capital | HKD 8m total (5m paid-up + 3m liquid)≈ $1M | SGD 250,000 (MPI)≈ $192K | None for DCE; AFSL varies | AED 1.5m exchange without VARA custody≈ $408K |
| Total Year 1 Cost | HKD 7m–15m≈ $896K–1.9M | SGD 1.5m–3m≈ $1.2M–2.3M | AUD 200k–800k≈ $130K–520K | AED 1.5m–10m≈ $410K–2.7M |
| Corporate Tax | 16.5% / 8.25% two-tier | 17% standard | 30% (25% base-rate) | 9% federal CT |
| Local Presence | ≥2 ROs, ≥1 HK-resident | ≥1 SG-resident exec director | AU-incorporated company | Dubai or ADGM presence + senior management |
| EU Passporting | No | No | No | No |
| FATF Status | Member, no listings | Member, no listings | Member, no listings | Not a FATF member; MENAFATF-assessed; off grey list |
| Best For | Established exchanges targeting APAC retail and institutional flow with substantive banking needs | Institutional-only DPT operators preferring lighter retail oversight | Domestic AU operators and Asia-Pacific entry via AU subsidiary | Crypto-native operators prioritising speed and lower upfront cost |
Compare every crypto jurisdiction side by side →
Hong Kong sits as the mid-range cost option among major Asia-Pacific regulated regimes: well above Singapore’s MPI capital requirement and the UAE’s typical first-year operating spend, but below the HKMA Stablecoin Issuer regime’s HKD 25 million paid-up capital benchmark. The differentiated value is substantive retail access combined with tier-1 banking infrastructure under one regulatory roof. For institutional-only operators content with Singapore’s de-emphasis of retail, MAS is materially cheaper and faster. For operators prioritising speed and crypto-native banking, the UAE wins on both axes.
For operators weighing Hong Kong against an EU CASP alternative under MiCA, the trade-off is APAC institutional access (Hong Kong) versus EU-wide passporting (Malta and other EU member states). Many groups end up holding both: Hong Kong for APAC, an EU CASP for European market access. Singapore’s regime is described in the Singapore crypto licensing guide; the UAE’s regime in the Dubai crypto licensing guide.
When Hong Kong Is the Right Choice
Choose Hong Kong if:
- The business model requires substantive retail access in Asia-Pacific with tier-1 banking and credibility for institutional partnerships.
- Long-term commitment to the market justifies the 12-to-18-month timeline and HKD 7–15 million Year 1 spend.
- Stablecoin issuance referencing HKD is in scope: the HKMA Stablecoin regime is the only path.
- Tokenisation and RWA strategies are central: Policy Statement 2.0’s roadmap provides explicit support.
Consider alternatives if:
- The business model is institutional-only and Singapore’s lighter retail framework is acceptable: see Singapore.
- Speed to market and lower upfront cost are paramount: see Dubai (VARA full-licence 4–12 months).
- EU market access is the primary requirement: see Malta for MiCA passporting.
- Domestic Australia is the focus: see Australia for the AUSTRAC + ASIC path.
Hong Kong Company Formation
Limited company under Cap 622, share-capital deposit, registered office, business registration, and Associated Entity setup for VATP custody.
Open a Crypto Business Account
Banking introductions through 90+ specialist institutions for licensed VATPs and stablecoin issuers across Hong Kong and APAC.
Malta MiCA CASP Licence
For operators needing EU passporting in parallel with Hong Kong APAC presence: MiCA CASP authorisation with EU-wide market access.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Hong Kong Applications
The SFC’s stated expectations on VATP applicants emphasise substantive operational readiness rather than paper compliance. Most stalled applications fail during SFC on-site inspection or at the single external assessment stage: the substantive validation rounds rather than the document submission itself.
- Treating compliance documentation as a template exercise. The SFC and the external assessor both read the AML/CFT manual, token admission policy, custody procedures, and conflicts policy as primary evidence of governance maturity. Generic templates with Hong Kong references stitched in fail consistently. Build the documents around the actual business model and the specific token universe the applicant intends to trade.
- Underestimating Responsible Officer substance. Two ROs licensed by the SFC, one HK-resident, one a director: and the HK-resident RO must demonstrate substantive Hong Kong regulatory track record, not just current address. The SFC will challenge applications where the HK-resident RO is a recently relocated individual without prior Hong Kong regulated-firm experience.
- Late custody redesign. Custody architecture (Associated Entity TCSP, 98% cold storage, HSM specifications, key-management ceremony, compensation arrangement structure) drives the external assessor’s work. Applicants who design custody late, after the application is in flight, trigger rework cycles that add three to six months to the timeline.
- Insufficient compensation arrangement scoping. The 50% cold + 100% hot compensation requirement is a hard rule. Operators with HKD 1 billion+ AUC find market-rate insurance pricing exceeds their original budget. Quote compensation arrangement coverage in parallel with external assessor engagement, not after.
- Token admission methodology gaps for retail-track applications. Retail-eligibility requires inclusion in ≥2 acceptable indices from independent providers, ≥1 IOSCO-compliant. Many applicants name an index without verifying that the provider is independent of both the VATP and the token issuer: an external assessment finding that delays approval-in-principle.
- Ignoring the 12-month operating-expense liquid asset cushion. The HKD 3 million liquid capital minimum is the floor; the SFC additionally expects sufficient liquid assets (virtual assets excluded) to cover 12 months of operating expenses. Applicants who size capital to the minimum without modelling Year 1 operating burn rate fail the FRR review.
Frequently Asked Questions
Yes. Retail clients on SFC-licensed VATPs can trade “eligible large-cap virtual assets”: tokens included in at least two acceptable indices from independent providers, with at least one index meeting IOSCO standards. Onboarding requires knowledge assessment, risk profiling, suitability testing, and exposure limits per the SFC’s Consultation Conclusions of . Retail access in Hong Kong is materially broader than Singapore’s MAS framework, which de-emphasises retail crypto activity. Stablecoins offered to retail must be issued by HKMA-licensed issuers under Cap 656.
The applicant entity must be incorporated in Hong Kong (or a non-Hong Kong company registered under Cap 622 Part 16) with a principal place of business in Hong Kong. At least two Responsible Officers must be SFC-licensed; at least one must ordinarily reside in Hong Kong and at least one must be a director. Beneficial owners need not reside in Hong Kong but must pass the SFC’s fit-and-proper test covering financial standing, reputation, prior regulatory record, and competence.
No. A virtual-asset (VATP) licence does not authorise tokenised securities or most real-world-asset tokens. Hong Kong applies a see-through approach: a tokenised security is a traditional security with a tokenisation wrapper, so the Securities and Futures Ordinance (Cap 571) and the prospectus regime apply in full. The SFC set this position in its two circulars of , superseding the earlier March 2019 “complex product” treatment, and the HKMA issued a companion circular on tokenised products on . Those activities require the relevant existing SFO licences from the SFC, Type 1 for dealing, Type 4 for advising, Type 9 for asset management, with secondary trading on a licensed VATP additionally engaging the VATP regime. We scope the securities-token route through the SFO permissions and the fund route through fund licensing.
Twelve to eighteen months from start of substantive pre-application work to full grant is typical. The SFC publishes a service standard of “15 weeks for a licensed corporation application” once a complete submission has been filed, but under the swift licensing process () the SFC’s on-site inspection, rectification, implementation, single external assessment under HKSAE 3000 tripartite framework, and independent penetration test extend the calendar significantly. Complex applicants run 24+ months. Plan substantive engagement to begin no later than 14 months before intended go-live.
An SFC VATP licence (Securities and Futures Ordinance Type 1 + Type 7 plus AMLO Part 5B) authorises operation of a centralised virtual-asset trading platform. An HKMA Stablecoin Issuer licence (Stablecoins Ordinance Cap 656) authorises issuance of fiat-referenced stablecoins, including HKD-referenced stablecoins issued anywhere. The regulators, capital requirements (HKD 5m+3m vs HKD 25m), governance frameworks, and application processes are all different. An entity carrying out both activities needs both licences.
Realistic Year 1 cost is HKD 15 to 23 million including the HKD 8 million capital lock-up (HKD 5m paid-up + HKD 3m liquid), or HKD 7 to 15 million in operating spend ex capital. The dominant line items are legal counsel (HKD 1.5–3m), compliance documentation (HKD 800k–1.5m), single external assessment under HKSAE 3000 tripartite framework (HKD 500k–1.5m), independent penetration test (HKD 300k–800k), compensation arrangement (HKD 1–5m+ annually), and Hong Kong office and substance (HKD 800k–1.5m annually). SFC application fees themselves are minor at around HKD 25,000–35,000 total.
Hong Kong is more expensive principally because of the prescriptive custody and compensation arrangement requirements. The 98% cold-storage threshold, Associated Entity TCSP requirement, 50%/100% compensation arrangement, single external assessment under HKSAE 3000 tripartite framework, and independent penetration test together drive HKD 4–8 million of additional first-year spend versus Singapore’s MAS MPI process or Dubai’s VARA full-licence pathway. The trade-off is substantive retail access, tier-1 banking infrastructure, and the SFC’s stronger international credibility for institutional partnerships.
Materially easier than for unlicensed crypto operators, but not trivial. Onboarding typically runs two to six months for licensed VATPs and deemed-licensed applicants. The HKMA’s circular instructed Authorised Institutions to apply a risk-based approach to corporate banking rather than wholesale de-risking, and the licensed-VATP banking landscape has shifted materially since. Acceptance still varies by business model, expected transaction volumes, settlement currencies, and customer geography. Jagelski & Partners’ banking partner network supports the introduction process.
Yes, since the SFC’s Circular on Staking Services (, ref 25EC22), subject to prior written SFC approval. VATPs must conduct third-party due diligence, manage validator and slashing risks, disclose protocols and fees, and obtain modified licensing conditions before launching staking services. Lending and other yield-generating products remain restricted. The September 2025 SFC–HKMA Supplemental Joint Circular further refined the position for intermediaries.
Only in materially restricted circumstances. EU clients cannot lawfully be solicited or served by a Hong Kong VATP without authorisation as a Crypto-Asset Service Provider under MiCA. MiCA Article 61 permits reverse solicitation only where the EU client initiated the service at their own exclusive initiative; ESMA’s Guidelines published (applicable from ) interpret this narrowly: no active marketing, advertising, or solicitation of any kind, and the exemption is product-specific rather than relationship-wide. Operators with material EU demand should obtain CASP authorisation in an EU member state.
No. A Hong Kong VATP licence is Hong Kong-specific. Operations outside Hong Kong require separate licensing in the relevant jurisdiction. The SFC Shared Order Book circular of permits operational integration with affiliated overseas VATPs subject to prior approval and unified surveillance, but this is not a regulatory passport; it remains a single-licence model.
Limited. Of 36 applications received by the deadline, the HKMA granted only two licences on : to Anchorpoint Financial (a Standard Chartered Hong Kong, HKT, and Animoca Brands consortium) and HSBC. HKMA Chief Executive Eddie Yue stated in his April 2026 inSight commentary that further grants “will remain very limited”. Operators considering an HKMA Stablecoin Issuer application should expect long sandbox participation and substantive demonstration of risk management capability before formal application succeeds.
Following 2024–2025 consultations by the FSTB and the SFC, two new SFC-administered licensing regimes are expected to be tabled at LegCo during 2026: one for over-the-counter virtual-asset dealing (capturing crypto OTC currently outside the VATP perimeter) and one for third-party virtual-asset custodians (capturing custody services provided outside an SFC-licensed VATP’s Associated Entity model). Transitional arrangements have not yet been published. Operators currently relying on the C&ED MSO regime for crypto OTC should plan for migration to the new VA Dealing regime once enacted.
Start your Hong Kong VATP application
We run the whole process end-to-end, from licence scoping to banking. Book a free assessment and we'll map your route to approval.
Not ready to book? Ask Emma first. She answers now, and if it needs a human she takes your details so the consultation starts ahead.
References
Show all references
- Hong Kong Monetary Authority, Register of Licensees under the Stablecoins Ordinance (Cap. 656), hkma.gov.hk, accessed .
- Securities and Futures Commission of Hong Kong, Lists of virtual asset trading platforms, sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, Consultation Conclusions on the Proposed Regulatory Requirements for Virtual Asset Trading Platform Operators Licensed by the Securities and Futures Commission, , sfc.hk, accessed .
- Financial Services and the Treasury Bureau, Policy Statement 2.0 on the Development of Digital Assets in Hong Kong, , info.gov.hk, accessed .
- Inland Revenue Department of Hong Kong, A Brief Guide to Taxes Administered by the Inland Revenue Department, ird.gov.hk, accessed .
- Hong Kong Monetary Authority, Access to Banking Services for Corporate Customers, , hkma.gov.hk, accessed .
- Hong Kong e-Legislation, Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022, Cap. 615, elegislation.gov.hk, accessed .
- Hong Kong e-Legislation, Stablecoins Ordinance, Cap. 656, elegislation.gov.hk, accessed .
- Hong Kong Government, Stablecoins Ordinance to commence operation on August 1, 2025, , info.gov.hk, accessed .
- Securities and Futures Commission of Hong Kong, A high-level framework for virtual asset perpetual contracts offering by virtual asset trading platforms, , sfc.hk, accessed .
- Davis Polk & Wardwell LLP, Hong Kong permits virtual asset exchanges to access global liquidity and expand product offering, , davispolk.com, accessed .
- Securities and Futures Commission of Hong Kong, Circular on Staking Services Provided by SFC-licensed Virtual Asset Trading Platforms, , ref 25EC22, sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, ASPIRe Regulatory Roadmap for Virtual Asset Markets, , ref 25PR20, sfc.hk, accessed .
- Customs and Excise Department, Money Service Operators Licensing Office: Licensee List, data.gov.hk, accessed .
- Securities and Futures Commission of Hong Kong and Hong Kong Monetary Authority, Joint Circular on Intermediaries’ Virtual Asset-related Activities, ref 23EC67 (, superseding the 20 October 2023 circular; supplemental ref 25EC50 dated ), sfc.hk, accessed .
- Financial Services and the Treasury Bureau and Securities and Futures Commission of Hong Kong, Public Consultation on the Legislative Proposals to Regulate Virtual Asset Dealing Services and Virtual Asset Custodian Services in Hong Kong, , fstb.gov.hk, accessed .
- Securities and Futures Commission of Hong Kong, Guidelines for Virtual Asset Trading Platform Operators (, with subsequent amendments), sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, Fit and Proper Guidelines, sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Corporations and SFC-licensed Virtual Asset Service Providers), , sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, Application Procedures for Licensed Corporations, sfc.hk, accessed .
- Securities and Futures Commission of Hong Kong, Licensing Handbook for Virtual Asset Trading Platform Operators, , sfc.hk, accessed .
- Hong Kong e-Legislation, Securities and Futures (Fees) Rules, Cap 571AF, elegislation.gov.hk, accessed .
- Clifford Chance, Securities and Futures Commission finalises new regulatory requirements for VATP operators, 2023, cliffordchance.com, accessed .
- Inland Revenue Department of Hong Kong, Departmental Interpretation and Practice Notes No. 39 (Revised): Profits Tax: Digital Economy, Electronic Commerce and Digital Assets, , ird.gov.hk, accessed .
- Hong Kong Free Press, 16 charged in JPEX crypto fraud case: over 2 years since initial arrests, , hongkongfp.com, accessed .
- Hong Kong Monetary Authority, Supervisory Policy Manual: Banking Regulatory Document Repository, hkma.gov.hk, accessed .
- Financial Action Task Force, Hong Kong, China: Mutual Evaluation Reports, fatf-gafi.org, accessed .