Hong Kong

June 4, 2026

16 min read

Hong Kong has established one of the most detailed regulatory frameworks for virtual asset trading platforms (VATPs) in Asia, with explicit insurance and compensation arrangement requirements built into the licensing regime. Unlike many jurisdictions where insurance for crypto platforms is voluntary, Hong Kong's SFC mandates specific coverage thresholds as a condition of VATP licensing.

The regulatory framework operates through a dual licensing regime: VATPs must obtain licenses from the Securities and Futures Commission (SFC) under the Securities and Futures Ordinance (SFO) and, where applicable, from the Hong Kong Monetary Authority (HKMA) under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). The SFC's VATP Guidelines, effective 1 June 2023, contain the detailed insurance and compensation requirements.

Sources:

Key Regulatory Bodies

BodyRole
Securities and Futures Commission (SFC)Primary regulator for VATPs; sets insurance/compensation requirements
Insurance Authority (IA)Regulates insurers in Hong Kong; proposes capital rules for insurer crypto investments
Hong Kong Monetary Authority (HKMA)Oversees banks offering digital asset custody; mirrors SFC insurance standards

Key Legislation & Guidelines

  • Securities and Futures Ordinance (SFO) -- Licensing framework for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities
  • Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) -- VATP licensing requirements effective 1 June 2023
  • SFC VATP Guidelines (Consultation Conclusions, 23 May 2023) -- Detailed requirements including insurance/compensation arrangements, cold storage, and client asset protection
  • SFC Circular of 16 January 2025 -- Enhanced regulatory standards following inspections of VATP applicants

2. Mandatory Insurance & Compensation Arrangements

Coverage Thresholds

The SFC requires every licensed VATP to maintain a compensation arrangement covering client virtual assets held in custody. The thresholds are:

Storage TypeRequired CoverageNotes
Hot wallets and other online storage100% of client virtual assetsShould represent less than 2% of all client assets
Cold storage50% of client virtual assetsMust hold at least 98% of client assets

These requirements apply to client virtual assets held by the VATP or by its associated entities.

Acceptable Forms of Compensation

The SFC allows compensation arrangements to comprise any combination of:

  1. Third-party insurance -- Coverage purchased from external insurers
  2. Dedicated funds -- Held as demand deposits or time deposits maturing within six months, set aside on trust in segregated accounts with authorized financial institutions
  3. Reserved virtual assets -- Virtual assets of the VATP or its group companies set aside on trust, held in cold storage by associated entities and segregated from operational and client assets
  4. Bank guarantees -- Provided by an authorized financial institution in Hong Kong

The SFC must approve whichever arrangement a platform operator selects.

Monitoring & Compliance

  • Daily monitoring: Licensed VATPs must monitor the total value of client virtual assets under custody daily to maintain the compensation threshold
  • Shortage notification: Any shortfall in coverage must be reported to the SFC, and prompt remedial measures must be taken
  • Adequacy review: Under the January 2025 enhanced standards, VATPs must evaluate their insurance and compensation policies for adequacy, including reviewing exclusions and deductibles
  • Selection criteria: VATPs must use verifiable and quantifiable criteria when selecting an insurance company, including a valuation schedule of assets insured, maximum coverage per incident, and overall maximum coverage

Sources:

HKMA Parallel Requirements

The HKMA expects banks offering digital asset custody to mirror the SFC standards:

  • Hold 98% of client digital assets in cold storage
  • Maintain an insurance or compensation arrangement covering 50% of cold storage and 100% of hot and other storage assets

Sources:

3. Insurance Market & Capacity

OSL Record-Setting Placement

In October 2024, OSL Digital Securities (one of Hong Kong's first SFC-licensed VATPs) announced a USD 1 billion digital asset custody insurance programme, the largest such placement globally by a single custodian:

  • Lead insurer: Canopius, a Lloyd's of London Syndicate
  • Duration: Three-year commitment
  • Rating: Exclusively composed of A-rated insurers
  • Scope: Covers both hot and cold wallets
  • Brokers: Capstone Insurance Brokers (subsidiary of Brown & Brown) and Paragon International Insurance Brokers
  • Alignment: Structured to meet SFC compensation arrangement standards

Sources:

Lloyd's Asia-Pacific Distribution

A Hong Kong-based crypto specialist MGA has been approved as a Lloyd's coverholder to distribute digital assets insurance across Asia-Pacific, rolling out first in Hong Kong,

Singapore,
Japan
, Taiwan, and
South Korea
, with Southeast Asian expansion planned.

Additionally, crypto insurance firm Evertas became a Lloyd's coverholder to address growing demand for crypto risk coverage in the region.

International Brokers and Capacity

ProviderCapacity / Product
Marsh (Blue Vault)USD 150M for cold storage risks (consortium with Arch)
Marsh DART facilityUp to USD 825M for digital asset custodians
Aon Digital Asset PracticeBespoke solutions for custody, staking, tokenized assets
Canopius (Lloyd's)Lead insurer on OSL's USD 1B programme
Arch, Atrium, BeazleyLloyd's syndicates underwriting crypto risks

Sources:

4. Deposit & Investor Protection

Investor Compensation Fund (ICF)

Hong Kong's Investor Compensation Fund, managed by the Investor Compensation Company Limited (HKICC), provides compensation for losses arising from defaults of licensed intermediaries in relation to exchange-traded products. However, virtual assets are not covered by the ICF. The Fund only covers securities or futures contracts listed or traded on the Hong Kong Stock Exchange (HKEx) or Hong Kong Futures Exchange (HKFE).

Deposit Protection Scheme

The Hong Kong Deposit Protection Board (HKDPB) protects bank deposits up to HKD 500,000 per depositor per bank. Crypto assets held on exchanges are not covered as they are not bank deposits.

Client Asset Protection via Licensing

In lieu of deposit insurance, Hong Kong relies on the SFC's mandatory compensation arrangement (50%/100% coverage described above) and the following structural protections:

  • 98% cold storage requirement: Minimizes exposure to hot-wallet attacks
  • Asset segregation: Client assets must be segregated from VATP proprietary assets
  • Trust arrangements: Compensation funds must be held on trust and designated for client protection
  • Third-party custodians: The SFC requires VATPs to use associated entities or approved custodians for holding client assets

Sources:

5. Claims History

As of June 2026, there have been no publicly reported major insurance claims arising from VATP operations in Hong Kong. This reflects the relatively recent establishment of the licensing regime (June 2023) and the small number of licensed platforms operating to date.

The SFC's pre-licensing inspections identified deficiencies in insurance and compensation arrangements among some applicants, leading to the enhanced standards issued in January 2025. However, these were compliance issues, not loss events.

Sources:

  • Charltonslaw (cited above) -- reference to SFC inspection findings

6. Licensed VATPs

As of June 2026, 13 VATPs hold SFC licenses in Hong Kong. Each licensed platform must satisfy the mandatory compensation-arrangement thresholds (Section 2) as a condition of its licence. The most recent additions were VDX (Victory Fintech, licensed 13 February 2026 -- the first new licence since June 2025) and NewBX Limited / Bixin.com (licensed 18 May 2026, bringing the total to 13).

PlatformLicense DateNotes
OSL Exchange (OSL Digital Securities)15 December 2020First licensed VATP; USD 1B insurance programme
HashKey Exchange (Hash Blockchain)9 November 2022Second licensed VATP
HKVAX2023
Bullish2024First new licensee in 2024
YAX (Tiger Brokers subsidiary)2024
Accumulus GBA TechnologyDecember 2024
DFX LabsDecember 2024
HKbitEX (Hong Kong Digital Asset EX)December 2024
EX.IO (Thousand Whales Technology)December 2024
PantherTrade2025
BGE (Hong Kong BGE Limited)17 June 2025Subsidiary of HKE Holdings
VDX (Victory Fintech)13 February 2026First new licence since June 2025
Bixin.com (NewBX Limited)18 May 202613th licensed VATP; subsidiary of Bixin Group

In addition, three platforms (Crypto.com, WhaleFin, Matrixport HK) appear on the SFC's deemed-to-be-licensed list. The official, current list is maintained by the SFC: https://www.sfc.hk/en/Welcome-to-the-Fintech-Contact-Point/Virtual-assets/Virtual-asset-trading-platforms-operators/Lists-of-virtual-asset-trading-platforms

Sources:

7. Insurance Authority -- Insurer Capital Rules for Crypto

In December 2025, the Insurance Authority (IA) proposed amendments to its Risk-based Capital (RBC) framework (draft amendments to the Insurance (Valuation and Capital) Rules) that would allow Hong Kong's authorized insurers to invest in crypto assets. Following the public consultation, the IA published consultation conclusions on 8 May 2026, confirming the digital-asset capital treatment:

  • 100% downward stress factor on direct crypto holdings, with no diversification benefit against other risk modules -- effectively requiring insurers to fully back crypto exposures with capital (this is the finalised form of the originally proposed "100% risk charge")
  • Look-through approach for stablecoins -- the IA adopted a look-through approach for calculating risk-capital requirements on stablecoins, with a separate overlay charge for counterparty-default exposure; risk treatment is tied to the fiat currency backing each Hong Kong-regulated stablecoin
  • Tokenized conventional instruments excluded -- the finalised rules clarified that tokenized versions of conventional financial instruments (e.g. digital representations of bonds and equities) fall outside the crypto-asset definition, resolving prior ambiguity
  • Due diligence & stress testing: Independent due diligence, transparent valuation methods, regular audits and stress tests required
  • Market size: Hong Kong's insurance sector recorded approximately HKD 635 billion (USD 82 billion) in gross premiums in 2024 across 158 authorized insurers (self-reported figures, attributed to BeInCrypto / Bloomberg reporting of IA data)
  • Implementation: A 31 December 2026 implementation date has been set, pending negative vetting by the Legislative Council

Once in force, this framework could expand insurer engagement with the digital asset sector, potentially increasing domestic capacity for crypto insurance products -- though the 100% stress factor makes direct crypto holdings capital-intensive.

Sources:

8. Recent Developments (2024-2026)

  • October 2024: OSL secures record USD 1 billion digital asset custody insurance programme led by Canopius (Lloyd's)
  • December 2024: SFC licenses four additional VATPs (Accumulus GBA, DFX Labs, HK Digital Asset EX, Thousand Whales)
  • January 2025: SFC issues enhanced regulatory standards for VATPs following inspections, including stricter scrutiny of insurance and compensation arrangements
  • February 2025: SFC introduces swift licensing process for all new VATP applicants
  • April 2025: SFC publishes ASPIRe roadmap for Hong Kong's virtual asset market development
  • July 2025: SFC announced plans to expand licensing to cover virtual asset dealers and custodians beyond VATPs
  • December 2025: Insurance Authority proposes RBC-framework amendments allowing insurers to invest in crypto (100% downward stress factor)
  • 13 February 2026: SFC licenses VDX (Victory Fintech) -- first new VATP licence since June 2025
  • 8 May 2026: Insurance Authority publishes RBC consultation conclusions -- confirms 100% downward stress factor (no diversification benefit) for crypto, look-through approach plus counterparty-default overlay for stablecoins, and exclusion of tokenized conventional instruments from the crypto-asset definition; implementation set for 31 December 2026 pending LegCo negative vetting
  • 18 May 2026: SFC licenses NewBX Limited (Bixin.com), bringing the total to 13 licensed VATPs

Sources:

9. Assessment

Strengths

  • Explicit insurance thresholds: The 50% cold / 100% hot coverage requirement is among the most specific and stringent globally, providing a clear compliance benchmark
  • Flexibility in compliance: Allowing a combination of insurance, dedicated funds, bank guarantees, and reserved virtual assets gives VATPs options to meet the requirement
  • Regulatory alignment: HKMA mirrors SFC standards for banks offering digital asset custody, creating a level playing field
  • Growing insurance capacity: The OSL/Canopius USD 1 billion placement demonstrates that institutional-grade capacity is available in Hong Kong, led by Lloyd's syndicates
  • Forward-looking IA rules: The proposed insurer capital framework for crypto could unlock significant domestic insurance capacity

Weaknesses

  • No deposit insurance for crypto: Neither the ICF nor the HKDPB covers virtual assets, leaving retail investors dependent on the VATP's compensation arrangement
  • Young regime, untested: The VATP licensing regime has been in effect only since June 2023, and no major loss event has tested the compensation arrangements in practice
  • Insurance cost burden: The 50%/100% coverage requirement is expensive, particularly for smaller platforms, and may act as a barrier to entry
  • Limited domestic underwriters: Most insurance capacity comes from international markets (Lloyd's, London); domestic Hong Kong insurers have limited crypto underwriting experience, though the IA's proposed rules may change this

Key Lessons

Hong Kong's approach of mandating specific coverage percentages tied to storage type (hot vs. cold) provides a useful model for other jurisdictions. The requirement for daily monitoring and SFC approval of arrangements adds enforcement teeth. However, the lack of a public backstop (deposit guarantee) for crypto remains a gap that the compensation arrangement alone may not fully address in a catastrophic loss scenario.


<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->

Verification Notes

ClaimVerification MethodStatus
50% cold / 100% hot coverage requirementWebFetch of K&L Gates article; WebSearch confirmedVerified
Four acceptable forms of compensationWebFetch of K&L Gates article confirmedVerified
98% cold storage requirementWebSearch; multiple sources confirmedVerified
OSL USD 1B insurance, Canopius lead, Oct 2024WebFetch of Canopius press release confirmedVerified (unchanged 2026-06-04)
13 licensed VATPs as of June 2026WebFetch of SFC official list + PANews + CoinDesk confirmedVerified (updated 2026-06-04)
IA RBC amendments / 100% stress factorWebSearch + WebFetch of Insurance Business Asia confirmedVerified (updated 2026-06-04)
HKD 635B gross premiums, 158 authorized insurersWebSearch; BeInCrypto / Bloomberg (self-reported, flagged)Verified as reported
ICF does not cover virtual assetsWebSearch; SFC FAQ confirmedVerified
HKMA mirrors SFC insurance standards for banksWebSearch; FINTECHANDDIGITALASSETS confirmedVerified
SFC January 2025 enhanced standards circularWebSearch; Charltonslaw, Dentons confirmedVerified

Corrections applied 2026-06-04 (Correction Protocol)

  1. VATP count corrected from "12 as of February 2026" to "13 as of June 2026" (Sections 6, 8). The SFC official list now shows 13 licensed platforms. VDX (Victory Fintech) was licensed 13 February 2026 (first new licence since June 2025) and NewBX Limited / Bixin.com on 18 May 2026 (13th). Section 6's platform table was also corrected to use the SFC's official entity names (OSL Exchange, HashKey Exchange, HKbitEX, EX.IO) and to add BGE (17 June 2025) and PantherTrade, replacing the vaguer "Additional platforms" placeholder row. Sources: SFC list (WebFetch), CoinDesk 16 Feb 2026, PANews May 2026.
  2. IA crypto capital rules updated from "proposal / Feb-April 2026 consultation pending legislative submissions" to "consultation conclusions published 8 May 2026" (Sections 7, 8). The finalised treatment is a 100% downward stress factor with no diversification benefit (not merely a "100% risk charge"), a look-through approach plus counterparty-default overlay for stablecoins (refining the earlier "favorable treatment" description), exclusion of tokenized conventional instruments from the crypto-asset definition, and a 31 December 2026 implementation date pending LegCo negative vetting. Source: Insurance Business Asia (8 May 2026 conclusions, WebFetch).

Not verified / flagged

  • Market-capacity figures (Marsh Blue Vault USD 150M, Marsh DART up to USD 825M, OSL USD 1B, Risk & Insurance USD 3.31T "market opportunity") are self-reported broker/insurer/press figures, attributed inline; not independently confirmed against primary filings. Flagged as self-reported.
  • HKD 635B / USD 82B gross-premium and 158-insurer figures are media-reported (BeInCrypto/Bloomberg) restatements of IA data, not fetched from a primary IA publication. Flagged as self-reported.

Original research conducted 20 March 2026. Refresh and re-verification conducted 4 June 2026; all cited URLs accessed on the refresh date. Verification standard version: 2026-06-04.