Hong Kong Virtual Asset Regulation: Navigating the SFC’s Impending AMLO Regime for VA Dealers and Custodians
Updated: 3 days ago
Contents:
Executive Summary
The Financial Services and the Treasury Bureau (FSTB) and the Securities
and Futures Commission (SFC) have published their joint consultation
conclusions, marking a paradigm shift in Hong Kong’s virtual asset (VA)
regulatory landscape. The impending expansion of the Anti-Money
Laundering and Counter-Terrorist Financing Ordinance (AMLO)
introduces stringent new licensing regimes specifically targeting VA dealing
and custody services. Further consultation to regulate VA advisory/
management services have also been closed on 23 January 2026.
With an amendment bill slated for introduction into the Legislative Council this year (2026), the statutory framework is crystallising rapidly. Industry participants currently dealing in or holding client virtual assets must initiate comprehensive compliance and documentation preparations immediately to avoid severe statutory penalties.
Scope of Application: Who Is Captured?
Virtual Asset Dealing:
The regime captures the provision of services relating to the acquisition or disposal
of VAs for or on behalf of another person. This encompasses spot trading, fiat-to-VA conversions, andVA-to-VA transactions (including OTC storefronts and block trading desks).
Virtual Asset Custody:
The regime governs the safekeeping of cryptographic private keys or other means
of controlling client VAs, where such control enables the transfer or disposal of those assets.
Territorial Nexus:
The legislation captures physical premises (including OTC storefronts and ATMs) and digital platforms operating within Hong Kong, as well as offshore entities actively marketing such services to the Hong Kong public.
Statutory Exclusions:
Tokenised securities and financial instruments constituting “securities” or “futures
contracts” under the Securities and Futures Ordinance (SFO) remain subject to the existing SFO regime. HKMA-authorised stablecoin issuers are also excluded, provided they conduct regulated activities within the scope of their prudential supervision.
Core Licensing Requisites: The Statutory Mandates
Corporate Substance and Local Nexus:
Applicants must establish a meaningful corporate presence in Hong Kong (e.g., a Hong Kong-incorporated company). The SFC has indicated a strong regulatory
preference for local incorporation to ensure effective supervision.
Fit and Proper Requirements:
Stringent probity checks will apply. Directors, Responsible Officers (ROs),
and substantial shareholders must satisfy the SFC’s criteria, mandating an absence of any history relating to money laundering, fraud, serious misconduct, or disqualifying insolvency.
Capital Requirements:
Licensees are expected to be subject to prescribed minimum paid-up share capital
and liquid capital thresholds. Proposed requirements include:
Custodians: paid-up capital HK$10 million; liquid capital HK$3 million;
Dealers: paid-up capital HK$5 million; liquid capital up to HK$3 million.
AML/CTF and Transaction Monitoring:
Firms must appoint a designated Compliance Officer and a
Money Laundering Reporting Officer (MLRO). Crucially, the SFC expects robust, risk-based customer due diligence (CDD) measures, strict adherence to the VA "Travel Rule," and ongoing transaction monitoring.
Client Asset Protection:
Licensed VA dealers will generally be required to custody client VAs with an
SFC-licensed VA custodian. Custodians must implement institutional-grade security controls, strict segregation of client assets, and transparent protection arrangements.
Transitional Arrangements & Enforcement Risks
Absence of Automatic Grandfathering:
There will be NO automatic deeming or “grandfathering” of
existing VA dealing or custody providers. Incumbent operators intending to continue their business post-commencement must proactively secure a licence.
Severe Statutory Penalties:
Upon commencement of the amended legislation, conducting a licensable VA
business in Hong Kong without an SFC licence will constitute a criminal offence. Upon conviction, offenders face a maximum fine of HK$5,000,000 and imprisonment for up to 7 years.
AML/CTF Breaches:
Failure to adhere to specified AML/CTF mandates under the AMLO may trigger
fines of up to HK$1,000,000 and imprisonment for up to 2 years, escalating to HK$10 million and 10 years where there is fraud or deception.
Strategic Imperatives for Industry Participants
To mitigate regulatory risk and ensure business continuity, firms should consider the following concrete steps immediately:
Comprehensive Gap Analysis:
Benchmark existing corporate governance, risk management, and IT security frameworks against anticipated AMLO and SFC statutory standards.
Policy Drafting & Enhancement:
The SFC will not accept generic documentation. Firms must develop
bespoke, operationally tailored manuals. For OTC dealers, this requires highly specific AML/CTF Manuals detailing source-of-wealth checks and fiat-to-crypto transaction monitoring. For custodians, the focus must be on rigorous Private Key Management Policies.
Operational and Technical Review:
Conduct rigorous assessments of physical security, operational resilience, Business Contingency Plans (BCP), and wallet infrastructure.
Regulatory Engagement:
Initiate pre-application dialogue with the SFC to ascertain regulatory
expectations, identify potential hurdles, and understand proposed licensing conditions.
Key Contacts
Our firm specializes in navigating the complexities of SFC licensing and drafting the highly tailored compliance architecture required for successful applications. For further information or to discuss how these regulatory developments impact your business, please contact:
Mr. Eddie Lau | Partner Mr. Ian Wen | Consultant
Tel.: +852 2877 3283
Website: ccks.hk
Address: Room 4111, 41st Floor, Hopewell Centre, 183 Queen’s Road East, Hong Kong
Comments