Overview
Hong Kong's crypto framework in 2026 runs on three tracks. The SFC Virtual Asset Trading Platform (VATP) regime under AMLO Part 5B has been live since 1 June 2023 and dual-licenses platforms that trade security tokens under SFO Type 1 (dealing in securities) and Type 7 (automated trading services). The HKMA Stablecoin Issuer regime under the Stablecoins Ordinance (Cap. 656) came into force on 1 August 2025 and has now issued its first two licences. A third regime, for VA dealers (including OTC) and VA custodians, is in consultation under the FSTB/SFC ASPIRE roadmap and is expected to legislate in 2026.
What this means in practice: if you run an exchange in or targeting Hong Kong, VATP is compulsory; if you issue a fiat-referenced stablecoin in Hong Kong or any HKD-referenced stablecoin globally, HKMA authorisation is compulsory; and if you run OTC desks or standalone custody, a new SFC regime is coming this year.
Regulators. SFC and HKMA
The Securities and Futures Commission (SFC) issues VATP licences through its Intermediaries Division under AMLO (Cap. 615) and the Securities and Futures Ordinance (SFO, Cap. 571); see the SFC VATP regime page. Enforcement sits in a dedicated division. The Fintech Unit runs the VATP-related innovation programmes and the swift-licensing process extended to all new applicants since 18 December 2024.
The Hong Kong Monetary Authority (HKMA) is the regulator for fiat-referenced stablecoin issuers, operating under the Stablecoins Ordinance (Cap. 656) and its 29 July 2025 guidelines. HKMA's Banking Department, which also handles authorised institution supervision, runs the stablecoin dossier. For upcoming VA dealer and custodian licences, the SFC will again be the lead regulator.
Track 1. SFC Virtual Asset Trading Platform licence
Any person operating a VA exchange in Hong Kong, or actively marketing such services to the Hong Kong public, must be SFC-licensed under AMLO Part 5B, regardless of whether the tokens traded are securities. If the platform trades tokens that qualify as securities under the SFO, an SFO Type 1 + Type 7 licence is issued in parallel with the AMLO licence. This is the dual-licensing model.
Minimum financial resources
| Metric | Threshold |
|---|---|
| Paid-up share capital | HKD 5,000,000 |
| Liquid capital | HKD 3,000,000 |
| Liquid assets in Hong Kong | ≥ 12 months of actual operating expenses, rolling |
Responsible Officers (ROs)
Minimum two ROs. At least one must ordinarily reside in Hong Kong and at least one must also be a director of the licensee. Under dual licensing the same two individuals can satisfy both AMLO and SFO requirements if dually licensed, there is no need for four distinct ROs.
Ongoing VATP obligations
- Token due diligence and written admission criteria.
- Custody via a wholly-owned subsidiary with ≥98% of client VAs in cold storage.
- Insurance cover for at least 50% of client VAs held in hot storage.
- Retail investor suitability assessment and knowledge tests.
- Proof-of-reserves published on a defined cadence.
- Prohibition on proprietary trading.
- Market-surveillance system and annual independent external assessment (single-phase since 16 January 2025).
Track 2. HKMA Stablecoin Issuer licence
Under the Stablecoins Ordinance (Cap. 656), any person issuing a fiat-referenced stablecoin in Hong Kong, or issuing any HKD-referenced stablecoin globally, requires HKMA authorisation. Marketing an FRS to the Hong Kong public is also in scope.
Financial resources
| Metric | Threshold |
|---|---|
| Paid-up share capital | HKD 25,000,000 |
| Liquid capital | HKD 3,000,000 |
| Excess liquid capital | ≥ 12 months operating expenses |
Core obligations
- 100% reserve backing at all times, held in high-quality liquid assets.
- Full segregation of reserve assets from the issuer's own assets.
- Absolute redemption right at par. T+1 settlement unless HKMA consents to a longer window.
- Hong Kong-incorporated entity or an HKMA-authorised institution, with locally based senior management.
HKMA issued the first two stablecoin-issuer licences on 10 April 2026, to HSBC and Anchorpoint Financial (a Standard Chartered / HKT / Animoca Brands joint venture), out of 36 applications received by 30 September 2025. The first batch covers HKD-referenced and multi-fiat-referenced programmes; no pure USD-referenced or offshore-USD stablecoin has been HKMA-licensed yet.
Track 3, upcoming VA Dealer and VA Custodian regimes
On 27 June 2025 the FSTB and SFC published joint consultation papers on dedicated regimes for VA dealers (including OTC spot) and VA custodians, under the ASPIRE roadmap (Pillar A). This supersedes the February 2024 FSTB proposal that had placed OTC under Customs & Excise. Legislation is expected in 2026; final capital and scoping thresholds have not been gazetted and should not be assumed. If your business plan touches OTC spot or standalone custody, plan around a 2026 licensing dialogue rather than an existing regime.
High-level application checklist (VATP)
- Incorporate a Hong Kong company via the Hong Kong Companies Registry or register a non-HK company with a permanent place of business in HK.
- Appoint at least two Responsible Officers (one HK-resident, one a director) who pass SFC fit-and-proper and competence tests.
- Appoint a Manager-in-Charge for each core function under the MIC regime.
- Meet paid-up capital (HKD 5M) and liquid capital (HKD 3M) and evidence 12 months of opex liquidity.
- Set up a wholly-owned VA custodian subsidiary with ≥98% cold storage and hot-storage insurance.
- Build a token due-diligence and admission/review committee.
- Implement AML/CFT aligned with AMLO Schedule 2 and the SFC VATP Guidelines, including Travel Rule since 1 June 2023.
- Adopt a cybersecurity framework aligned with SFC expectations; ISO 27001 is market practice.
- Engage an SFC-acceptable external assessor (single consolidated report since January 2025).
- Submit business plan, financial projections, risk-management framework and compliance manual.
- For dual licence: run AMLO plus SFO Type 1 and Type 7 filings in parallel with the same dually-licensed ROs.
- Ongoing: audited accounts, proof-of-reserves, SFC reporting, and FRR-equivalent returns.
Process and timeline
| Stage | VATP | Stablecoin issuer |
|---|---|---|
| Application preparation | 3–6 months | 4–8 months |
| Regulator review | 6–12 months | 9–15 months |
| External assessment (parallel) | single-phase since Jan 2025 | parallel |
| End-to-end | 9–18 months | 12–24 months |
The SFC's public performance pledge is up to 15 weeks per licensing application, but VATP applications routinely run longer due to external-assessment cycles. The swift-licensing process has been extended to all new VATP applicants filing after 18 December 2024, which materially compresses the review for well-prepared files.
Retail investor access and eligible tokens
Retail access is the defining commercial question for a Hong Kong VATP. The SFC VATP Guidelines allow licensed platforms to onboard retail investors only after the token being offered qualifies as an eligible large-cap virtual asset, the token must be included in at least two acceptable investable indices produced by independent index providers with a track record of institutional use. Platform-level due diligence must separately cover the issuer, legal classification, smart-contract and technology risk, supply structure, market-cap stability and any existing regulatory findings. Every admission must be signed off by a token admission and review committee whose composition and terms of reference the SFC expects to inspect.
Retail onboarding layers on top of token eligibility: knowledge assessments, risk-profile questionnaires and position limits calibrated to declared net worth and investment experience. Stablecoins admitted for retail distribution require separate HKMA authorisation under the Stablecoins Ordinance, a VATP cannot unilaterally list an unauthorised stablecoin for retail flows even if it otherwise satisfies the large-cap test. Derivatives on virtual assets for retail distribution remain out of scope under the current VATP regime; the SFC has signalled that any expansion will be consulted on separately. Professional investors under SFO Schedule 1 continue to access a broader product universe with reduced suitability formalities, but AML/CTF, sanctions screening and Travel Rule messaging apply identically across retail and professional segments.
Hong Kong VATP licensee landscape (Jan 2026)
As of January 2026, 11 VATP operators hold full SFC licences, including HashKey Exchange and OSL Exchange as the earliest licensees, joined by HKVAX, HKbitEX, Panthertrade (Hong Kong) Limited and Accumulus GBA Technology among the second wave. A further eight operators are deemed-to-be-licensed and continue to trade while their substantive applications work through review; the SFC publishes both live and deemed lists in its public VATP register. On 3 November 2025, the SFC released two further circulars allowing licensed VATPs to integrate order books with global affiliate VATPs for shared liquidity and to expand the range of services they may offer on-platform.
On the stablecoin side, HKMA issued the first two Stablecoins Ordinance licences on 10 April 2026, to HSBC and to Anchorpoint Financial Limited, a joint venture of Standard Chartered Bank (HK), HKT and Animoca Brands, from 36 applications received by 30 September 2025. The first batch targets HKD-referenced and multi-fiat-referenced programmes; no purely USD-referenced or offshore-USD stablecoin has yet been HKMA-authorised. For applicants entering the market now, the realistic benchmark is that HKMA is approving institutional issuers with a Hong Kong nexus, substantial reserve infrastructure and clear redemption plumbing, rather than opportunistic retail-facing issuers.
Taxation
- Corporate profits tax: two-tier, 8.25% on the first HKD 2,000,000 of assessable profits, 16.5% above. Territorial principle applies.
- No VAT, no GST, no capital gains tax on VAs.
- No stamp duty on virtual assets (they are not Hong Kong stock).
- Gains from genuine long-term investment in VAs are generally non-taxable; trading income falls inside the ordinary profits-tax base. The Inland Revenue Department's DIPN 39 (revised) sets out the IRD view.
Benefits of a Hong Kong crypto licence
Hong Kong is the only APAC jurisdiction that combines a mature international financial centre, a common-law judiciary, an ecosystem of tier-one banks willing to serve licensed VATPs, and a regulator that has been granting VA-specific licences since 2023 with published guidelines, fee schedules and enforcement precedent. For applicants whose commercial plan depends on institutional counterparties, the signal value of an SFC VATP licence, or a Cap. 656 stablecoin licence, is meaningfully above that of a registration-only regime. Substance in Hong Kong is compatible with a Cayman or BVI parent holding structure and with the IRD DIPN 39 territorial-source tax approach, which keeps overall effective tax low on non-HK-sourced profits.
Beyond signalling, three concrete benefits matter operationally. First, the swift-licensing process extended to all new VATP applicants filing after 18 December 2024 materially compresses review for well-prepared files. Second, the single-phase external assessment introduced on 16 January 2025 removes the previous two-report cycle and reduces consultant spend. Third, the dual-licensing model lets the same two dually-licensed Responsible Officers satisfy AMLO and SFO Type 1 / Type 7 simultaneously, avoiding the four-RO overhead that some applicants still plan for. Stablecoin issuers also benefit from proximity to HKMA-authorised banks and the existing CHATS settlement infrastructure for HKD reserves.
Common rejection triggers
From 2023 SFC enforcement notices and consultation feedback, the recurring failure modes are predictable. Insufficient HK-resident Responsible Officer capacity, particularly where a single RO tries to carry both AMLO and SFO obligations without the requisite industry experience, is the most common reason a file stalls before substantive review. Custody insurance ratios below 50% for hot-storage client VAs, or cover with unacceptable claims-paying terms, have triggered conditions and resubmissions. Token admission frameworks that rely on third-party listing feeds without internal sign-off by a documented committee are routinely challenged.
Other frequent issues: weak market-surveillance tooling that cannot demonstrate pre-trade and post-trade abuse detection; proof-of-reserves methodologies lacking third-party attestation cadence; cybersecurity programmes that are not ISO 27001-aligned or lack penetration-test history; AML/CFT policies that do not explicitly operationalise the Travel Rule messaging mandate in force since 1 June 2023; and business plans whose 12-month liquidity projections do not reconcile with the liquid-assets-in-Hong-Kong requirement. For stablecoin issuers, common HKMA concerns include reserve-composition drift from the T+1 redemption profile, redemption-right language that qualifies the par obligation, and senior-management residency that does not meet the Hong Kong substance expectation.
FAQ
Is crypto exchange legal in Hong Kong?
Yes. Operating a virtual-asset exchange in Hong Kong, or actively marketing such services to the Hong Kong public, is lawful but requires an SFC VATP licence under AMLO Part 5B, and, where the tokens traded qualify as securities, SFO Type 1 and Type 7 licences in parallel. Unlicensed operation is a criminal offence under AMLO.
How much does a Hong Kong crypto licence cost?
SFC application and annual fees are charged per regulated activity under the Schedule of Licensing Fees; budget for fees across AMLO VATP plus SFO Type 1 and Type 7 where applicable. The material cost, however, is not the SFC fee, it is paid-up capital (HKD 5,000,000 for VATP, HKD 25,000,000 for a stablecoin issuer), 12 months of opex liquidity in Hong Kong, custody-insurance premiums, ISO-grade cybersecurity build-out, external-assessor fees and in-house RO / MIC / MLRO compensation. Most applicants plan a multi-million-HKD programme over 9–18 months.
Do I need a Hong Kong VATP licence to serve only foreign clients from HK?
Yes, if any part of the operation is “carried on in Hong Kong” under AMLO Part 5B, or if the service is actively marketed to the Hong Kong public, a VATP licence is required regardless of client geography. Pure foreign-client servicing run from a HK office typically does not fall outside the regime.
Is dual licensing mandatory or only if I list security tokens?
Dual licensing (AMLO VATP plus SFO Type 1 + Type 7) is triggered if the platform lists any token that qualifies as a security under the SFO. If all listed tokens are non-security, the VATP licence alone is sufficient, but most platforms prepare for dual filing because the token perimeter can change.
How do the first HKMA stablecoin licensees compare?
Both HSBC and the Standard Chartered / HKT / Animoca-led Anchorpoint Financial JV received licences on 10 April 2026. The first batch focuses on HKD-referenced and multi-fiat-referenced programmes. No purely USD-referenced stablecoin has been HKMA-authorised yet, the regime's capture by design prioritises HKD-reference and HK-linked FRS.
Can I use the Cayman / BVI parent + HK operating sub structure?
Yes, and it remains the dominant model. The licensed entity is the Hong Kong operating company; capital, ROs and substance sit there. IRD DIPN 39 and the territorial-source principle support tax planning, subject to transfer-pricing substance.
Is the OTC regime already live?
Not yet. OTC spot is expected to fall under a new SFC-led VA Dealer regime legislating in 2026. The February 2024 FSTB proposal that had placed OTC under Customs & Excise was superseded in June 2025.
How does sub-custody and insurance work for a VATP?
Client virtual assets must be held through a wholly-owned custodian subsidiary, with at least 98% in cold storage and insurance covering at least 50% of client VAs in hot storage and 50% in cold storage. Cover must be acceptable to the SFC and continuously in force. See also custody licence.
Which tokens can be listed for retail on a Hong Kong VATP?
Only “eligible large-cap virtual assets”, tokens included in at least two acceptable investable indices from independent providers, plus internal token due diligence and sign-off by a token admission and review committee. Stablecoins require separate HKMA authorisation before retail distribution.
How does retail vs professional investor onboarding differ?
Retail clients require knowledge assessments, risk profiling and position limits, and are restricted to large-cap listed tokens. Professional investors under SFO Schedule 1 access a broader product set with reduced suitability formalities, but AML/CTF and travel-rule obligations apply identically.
What compliance team does the SFC expect for a VATP?
Two Responsible Officers (one HK-resident, one a director), a Manager-in-Charge for each core function, a dedicated MLRO and senior leads for risk, cybersecurity, token due diligence and market surveillance. ROs must pass fit-and-proper and Enhanced Competency Framework tests. Recruiting HK-resident ROs is the most common bottleneck, see our Hong Kong practice lead.
What ongoing reporting does a licensed VATP file with the SFC?
Monthly FRR-equivalent returns, periodic proof-of-reserves attestations, annual audited accounts and an annual independent assessment of systems and controls. Material incidents, token de-listings and key-personnel changes must be notified promptly, plus AMLO Schedule 2 filings and travel-rule messaging.
What is the difference between the HKMA stablecoin regime and the SFC VATP regime?
HKMA licenses the issuance of fiat-referenced stablecoins under the Stablecoins Ordinance (HKD 25,000,000 paid-up capital, 100% reserves, par redemption). The SFC VATP regime licenses the trading venue under AMLO Part 5B plus SFO Type 1 / Type 7 where tokens are securities (HKD 5,000,000 paid-up capital). An issuer that also operates a venue needs both, see our stablecoin issuer track.