Hong Kong
June 4, 2026
16 min read
1. Legal Status & Regulatory Framework
Hong Kong has established one of the most detailed regulatory frameworks for virtual asset trading platforms (VATPs) in Asia, with explicit insurance and compensation arrangement requirements built into the licensing regime. Unlike many jurisdictions where insurance for crypto platforms is voluntary, Hong Kong's SFC mandates specific coverage thresholds as a condition of VATP licensing.
The regulatory framework operates through a dual licensing regime: VATPs must obtain licenses from the Securities and Futures Commission (SFC) under the Securities and Futures Ordinance (SFO) and, where applicable, from the Hong Kong Monetary Authority (HKMA) under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). The SFC's VATP Guidelines, effective 1 June 2023, contain the detailed insurance and compensation requirements.
Sources:
- K&L Gates, "The Dual Licensing Regime for Virtual Asset Trading Platforms in Hong Kong -- Part 3" (5 October 2023): https://www.klgates.com/The-Dual-Licensing-Regime-for-Virtual-Asset-Trading-Platforms-in-Hong-Kong-Part-3-10-5-2023
- O'Melveny, "Hong Kong Launches New Virtual Asset Trading Platform Licensing Regime": https://www.omm.com/insights/alerts-publications/hong-kong-launches-new-virtual-asset-trading-platform-licensing-regime/
Key Regulatory Bodies
| Body | Role |
|---|---|
| Securities and Futures Commission (SFC) | Primary regulator for VATPs; sets insurance/compensation requirements |
| Insurance Authority (IA) | Regulates insurers in Hong Kong; proposes capital rules for insurer crypto investments |
| Hong Kong Monetary Authority (HKMA) | Oversees banks offering digital asset custody; mirrors SFC insurance standards |
Key Legislation & Guidelines
- Securities and Futures Ordinance (SFO) -- Licensing framework for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities
- Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) -- VATP licensing requirements effective 1 June 2023
- SFC VATP Guidelines (Consultation Conclusions, 23 May 2023) -- Detailed requirements including insurance/compensation arrangements, cold storage, and client asset protection
- SFC Circular of 16 January 2025 -- Enhanced regulatory standards following inspections of VATP applicants
2. Mandatory Insurance & Compensation Arrangements
Coverage Thresholds
The SFC requires every licensed VATP to maintain a compensation arrangement covering client virtual assets held in custody. The thresholds are:
| Storage Type | Required Coverage | Notes |
|---|---|---|
| Hot wallets and other online storage | 100% of client virtual assets | Should represent less than 2% of all client assets |
| Cold storage | 50% of client virtual assets | Must hold at least 98% of client assets |
These requirements apply to client virtual assets held by the VATP or by its associated entities.
Acceptable Forms of Compensation
The SFC allows compensation arrangements to comprise any combination of:
- Third-party insurance -- Coverage purchased from external insurers
- Dedicated funds -- Held as demand deposits or time deposits maturing within six months, set aside on trust in segregated accounts with authorized financial institutions
- Reserved virtual assets -- Virtual assets of the VATP or its group companies set aside on trust, held in cold storage by associated entities and segregated from operational and client assets
- Bank guarantees -- Provided by an authorized financial institution in Hong Kong
The SFC must approve whichever arrangement a platform operator selects.
Monitoring & Compliance
- Daily monitoring: Licensed VATPs must monitor the total value of client virtual assets under custody daily to maintain the compensation threshold
- Shortage notification: Any shortfall in coverage must be reported to the SFC, and prompt remedial measures must be taken
- Adequacy review: Under the January 2025 enhanced standards, VATPs must evaluate their insurance and compensation policies for adequacy, including reviewing exclusions and deductibles
- Selection criteria: VATPs must use verifiable and quantifiable criteria when selecting an insurance company, including a valuation schedule of assets insured, maximum coverage per incident, and overall maximum coverage
Sources:
- K&L Gates (cited above) -- WebFetch confirmed the 50%/100% thresholds and four acceptable forms of compensation
- Charltonslaw, "Hong Kong January 2025 VATP SFC compliance requirements": https://www.charltonslaw.com/hong-kong-january-2025-vatp-sfc-compliance-requirements/
- SFC official page, "Virtual asset trading platform operators": https://www.sfc.hk/en/Rules-and-standards/Virtual-assets/Virtual-asset-trading-platforms-operators
HKMA Parallel Requirements
The HKMA expects banks offering digital asset custody to mirror the SFC standards:
- Hold 98% of client digital assets in cold storage
- Maintain an insurance or compensation arrangement covering 50% of cold storage and 100% of hot and other storage assets
Sources:
- Hong Kong Monetary Authority, Guidance for Banks on Crypto Custody (March 2024): https://www.fintechanddigitalassets.com/2024/03/hong-kong-monetary-authority-issues-guidance-for-banks-on-crypto-custody-and-sale-of-tokenised-products/
3. Insurance Market & Capacity
OSL Record-Setting Placement
In October 2024, OSL Digital Securities (one of Hong Kong's first SFC-licensed VATPs) announced a USD 1 billion digital asset custody insurance programme, the largest such placement globally by a single custodian:
- Lead insurer: Canopius, a Lloyd's of London Syndicate
- Duration: Three-year commitment
- Rating: Exclusively composed of A-rated insurers
- Scope: Covers both hot and cold wallets
- Brokers: Capstone Insurance Brokers (subsidiary of Brown & Brown) and Paragon International Insurance Brokers
- Alignment: Structured to meet SFC compensation arrangement standards
Sources:
- Canopius press release, "OSL Sets Global Records with USD 1 Billion Digital Asset Insurance Coverage in Hong Kong" (8 October 2024): https://www.canopius.com/press-releases/osl-sets-global-records-with-usd-1-billion-digital-asset-insurance-coverage-in-hong-kong/
- OSL Group press release: https://group.osl.com/press-release/osl-sets-global-records-with-usd-1-billion-digital-asset-insurance-coverage-in-hong-kong/
Lloyd's Asia-Pacific Distribution
A Hong Kong-based crypto specialist MGA has been approved as a Lloyd's coverholder to distribute digital assets insurance across Asia-Pacific, rolling out first in Hong Kong, Singapore, Japan, Taiwan, and South Korea, with Southeast Asian expansion planned.
Additionally, crypto insurance firm Evertas became a Lloyd's coverholder to address growing demand for crypto risk coverage in the region.
International Brokers and Capacity
| Provider | Capacity / Product |
|---|---|
| Marsh (Blue Vault) | USD 150M for cold storage risks (consortium with Arch) |
| Marsh DART facility | Up to USD 825M for digital asset custodians |
| Aon Digital Asset Practice | Bespoke solutions for custody, staking, tokenized assets |
| Canopius (Lloyd's) | Lead insurer on OSL's USD 1B programme |
| Arch, Atrium, Beazley | Lloyd's syndicates underwriting crypto risks |
Sources:
- InsuranceAsia News, "Digital Assets": https://insuranceasianews.com/subject/digital-assets/
- Risk & Insurance, "Crypto Insurance Gap Reveals $3.31 Trillion Market Opportunity": https://riskandinsurance.com/crypto-insurance-gap-reveals-3-31-trillion-market-opportunity/
4. Deposit & Investor Protection
Investor Compensation Fund (ICF)
Hong Kong's Investor Compensation Fund, managed by the Investor Compensation Company Limited (HKICC), provides compensation for losses arising from defaults of licensed intermediaries in relation to exchange-traded products. However, virtual assets are not covered by the ICF. The Fund only covers securities or futures contracts listed or traded on the Hong Kong Stock Exchange (HKEx) or Hong Kong Futures Exchange (HKFE).
Deposit Protection Scheme
The Hong Kong Deposit Protection Board (HKDPB) protects bank deposits up to HKD 500,000 per depositor per bank. Crypto assets held on exchanges are not covered as they are not bank deposits.
Client Asset Protection via Licensing
In lieu of deposit insurance, Hong Kong relies on the SFC's mandatory compensation arrangement (50%/100% coverage described above) and the following structural protections:
- 98% cold storage requirement: Minimizes exposure to hot-wallet attacks
- Asset segregation: Client assets must be segregated from VATP proprietary assets
- Trust arrangements: Compensation funds must be held on trust and designated for client protection
- Third-party custodians: The SFC requires VATPs to use associated entities or approved custodians for holding client assets
Sources:
- SFC FAQ, "Investor compensation": https://www.sfc.hk/en/faqs/Investor-compensation
- HKICC, "Introduction of the Investor Compensation Fund": https://www.hkicc.org.hk/investor/fund_intro_e.htm
5. Claims History
As of June 2026, there have been no publicly reported major insurance claims arising from VATP operations in Hong Kong. This reflects the relatively recent establishment of the licensing regime (June 2023) and the small number of licensed platforms operating to date.
The SFC's pre-licensing inspections identified deficiencies in insurance and compensation arrangements among some applicants, leading to the enhanced standards issued in January 2025. However, these were compliance issues, not loss events.
Sources:
- Charltonslaw (cited above) -- reference to SFC inspection findings
6. Licensed VATPs
As of June 2026, 13 VATPs hold SFC licenses in Hong Kong. Each licensed platform must satisfy the mandatory compensation-arrangement thresholds (Section 2) as a condition of its licence. The most recent additions were VDX (Victory Fintech, licensed 13 February 2026 -- the first new licence since June 2025) and NewBX Limited / Bixin.com (licensed 18 May 2026, bringing the total to 13).
| Platform | License Date | Notes |
|---|---|---|
| OSL Exchange (OSL Digital Securities) | 15 December 2020 | First licensed VATP; USD 1B insurance programme |
| HashKey Exchange (Hash Blockchain) | 9 November 2022 | Second licensed VATP |
| HKVAX | 2023 | |
| Bullish | 2024 | First new licensee in 2024 |
| YAX (Tiger Brokers subsidiary) | 2024 | |
| Accumulus GBA Technology | December 2024 | |
| DFX Labs | December 2024 | |
| HKbitEX (Hong Kong Digital Asset EX) | December 2024 | |
| EX.IO (Thousand Whales Technology) | December 2024 | |
| PantherTrade | 2025 | |
| BGE (Hong Kong BGE Limited) | 17 June 2025 | Subsidiary of HKE Holdings |
| VDX (Victory Fintech) | 13 February 2026 | First new licence since June 2025 |
| Bixin.com (NewBX Limited) | 18 May 2026 | 13th licensed VATP; subsidiary of Bixin Group |
In addition, three platforms (Crypto.com, WhaleFin, Matrixport HK) appear on the SFC's deemed-to-be-licensed list. The official, current list is maintained by the SFC: https://www.sfc.hk/en/Welcome-to-the-Fintech-Contact-Point/Virtual-assets/Virtual-asset-trading-platforms-operators/Lists-of-virtual-asset-trading-platforms
Sources:
- SFC official list (cited above) -- WebFetch confirmed 13 licensed platforms including VDX (13/02/2026) and Bixin/NewBX
- CoinDesk, "Hong Kong regulator approves first crypto company license since June" (16 February 2026): https://www.coindesk.com/policy/2026/02/16/hong-kong-regulator-approves-first-crypto-company-license-since-june
- PANews, "SFC grants NewBX a virtual asset trading platform license, bringing the total to 13" (May 2026): https://www.panewslab.com/en/articles/019e4874-5bb5-714d-99d7-ccf3b498eb54
- Fintech Hong Kong, "The Full List of Licensed Crypto Exchanges in Hong Kong (2026)": https://fintechnews.hk/licensed-crypto-exchanges-hong-kong/
7. Insurance Authority -- Insurer Capital Rules for Crypto
In December 2025, the Insurance Authority (IA) proposed amendments to its Risk-based Capital (RBC) framework (draft amendments to the Insurance (Valuation and Capital) Rules) that would allow Hong Kong's authorized insurers to invest in crypto assets. Following the public consultation, the IA published consultation conclusions on 8 May 2026, confirming the digital-asset capital treatment:
- 100% downward stress factor on direct crypto holdings, with no diversification benefit against other risk modules -- effectively requiring insurers to fully back crypto exposures with capital (this is the finalised form of the originally proposed "100% risk charge")
- Look-through approach for stablecoins -- the IA adopted a look-through approach for calculating risk-capital requirements on stablecoins, with a separate overlay charge for counterparty-default exposure; risk treatment is tied to the fiat currency backing each Hong Kong-regulated stablecoin
- Tokenized conventional instruments excluded -- the finalised rules clarified that tokenized versions of conventional financial instruments (e.g. digital representations of bonds and equities) fall outside the crypto-asset definition, resolving prior ambiguity
- Due diligence & stress testing: Independent due diligence, transparent valuation methods, regular audits and stress tests required
- Market size: Hong Kong's insurance sector recorded approximately HKD 635 billion (USD 82 billion) in gross premiums in 2024 across 158 authorized insurers (self-reported figures, attributed to BeInCrypto / Bloomberg reporting of IA data)
- Implementation: A 31 December 2026 implementation date has been set, pending negative vetting by the Legislative Council
Once in force, this framework could expand insurer engagement with the digital asset sector, potentially increasing domestic capacity for crypto insurance products -- though the 100% stress factor makes direct crypto holdings capital-intensive.
Sources:
- Insurance Business Asia, "Hong Kong closes RBC consultation to push insurers into infrastructure" (May 2026, reporting 8 May 2026 conclusions): https://www.insurancebusinessmag.com/asia/news/breaking-news/hong-kong-closes-rbc-consultation-to-push-insurers-into-infrastructure-574753.aspx
- Insurance Journal, "Hong Kong Plans New Crypto, Infrastructure Rules for Insurers" (22 December 2025): https://www.insurancejournal.com/news/international/2025/12/22/851911.htm
- CoinDesk, "Hong Kong proposes new rules to tap insurance capital into cryptocurrencies" (22 December 2025): https://www.coindesk.com/policy/2025/12/22/hong-kong-proposes-new-rules-to-tap-insurance-capital-into-cryptocurrencies
- BeInCrypto, "Hong Kong's New Crypto Rules Could Tap $82B Insurance Market": https://beincrypto.com/insurers-get-crypto-rules-in-hong-kong/
8. Recent Developments (2024-2026)
- October 2024: OSL secures record USD 1 billion digital asset custody insurance programme led by Canopius (Lloyd's)
- December 2024: SFC licenses four additional VATPs (Accumulus GBA, DFX Labs, HK Digital Asset EX, Thousand Whales)
- January 2025: SFC issues enhanced regulatory standards for VATPs following inspections, including stricter scrutiny of insurance and compensation arrangements
- February 2025: SFC introduces swift licensing process for all new VATP applicants
- April 2025: SFC publishes ASPIRe roadmap for Hong Kong's virtual asset market development
- July 2025: SFC announced plans to expand licensing to cover virtual asset dealers and custodians beyond VATPs
- December 2025: Insurance Authority proposes RBC-framework amendments allowing insurers to invest in crypto (100% downward stress factor)
- 13 February 2026: SFC licenses VDX (Victory Fintech) -- first new VATP licence since June 2025
- 8 May 2026: Insurance Authority publishes RBC consultation conclusions -- confirms 100% downward stress factor (no diversification benefit) for crypto, look-through approach plus counterparty-default overlay for stablecoins, and exclusion of tokenized conventional instruments from the crypto-asset definition; implementation set for 31 December 2026 pending LegCo negative vetting
- 18 May 2026: SFC licenses NewBX Limited (Bixin.com), bringing the total to 13 licensed VATPs
Sources:
- Dentons Hong Kong, "Hong Kong's evolving regulatory regime for virtual assets" (27 January 2025): https://hongkong.dentons.com/en/insights/articles/2025/january/27/hong-kong-evolving-regulatory-regime-for-virtual-assets
- Sidley Austin, "Hong Kong Poised to Expand Licensing Regime to Cover Virtual Asset Dealers and Custodians": https://www.sidley.com/en/insights/newsupdates/2025/07/hong-kong-poised-to-expand-licensing-regime-to-cover-virtual-asset-dealers-and-custodians
- Insurance Business Asia, "Hong Kong closes RBC consultation to push insurers into infrastructure" (8 May 2026 conclusions): https://www.insurancebusinessmag.com/asia/news/breaking-news/hong-kong-closes-rbc-consultation-to-push-insurers-into-infrastructure-574753.aspx
- CoinDesk, "Hong Kong regulator approves first crypto company license since June" (16 February 2026): https://www.coindesk.com/policy/2026/02/16/hong-kong-regulator-approves-first-crypto-company-license-since-june
- PANews, "SFC grants NewBX a virtual asset trading platform license, bringing the total to 13" (May 2026): https://www.panewslab.com/en/articles/019e4874-5bb5-714d-99d7-ccf3b498eb54
9. Assessment
Strengths
- Explicit insurance thresholds: The 50% cold / 100% hot coverage requirement is among the most specific and stringent globally, providing a clear compliance benchmark
- Flexibility in compliance: Allowing a combination of insurance, dedicated funds, bank guarantees, and reserved virtual assets gives VATPs options to meet the requirement
- Regulatory alignment: HKMA mirrors SFC standards for banks offering digital asset custody, creating a level playing field
- Growing insurance capacity: The OSL/Canopius USD 1 billion placement demonstrates that institutional-grade capacity is available in Hong Kong, led by Lloyd's syndicates
- Forward-looking IA rules: The proposed insurer capital framework for crypto could unlock significant domestic insurance capacity
Weaknesses
- No deposit insurance for crypto: Neither the ICF nor the HKDPB covers virtual assets, leaving retail investors dependent on the VATP's compensation arrangement
- Young regime, untested: The VATP licensing regime has been in effect only since June 2023, and no major loss event has tested the compensation arrangements in practice
- Insurance cost burden: The 50%/100% coverage requirement is expensive, particularly for smaller platforms, and may act as a barrier to entry
- Limited domestic underwriters: Most insurance capacity comes from international markets (Lloyd's, London); domestic Hong Kong insurers have limited crypto underwriting experience, though the IA's proposed rules may change this
Key Lessons
Hong Kong's approach of mandating specific coverage percentages tied to storage type (hot vs. cold) provides a useful model for other jurisdictions. The requirement for daily monitoring and SFC approval of arrangements adds enforcement teeth. However, the lack of a public backstop (deposit guarantee) for crypto remains a gap that the compensation arrangement alone may not fully address in a catastrophic loss scenario.
<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->
Verification Notes
| Claim | Verification Method | Status |
|---|---|---|
| 50% cold / 100% hot coverage requirement | WebFetch of K&L Gates article; WebSearch confirmed | Verified |
| Four acceptable forms of compensation | WebFetch of K&L Gates article confirmed | Verified |
| 98% cold storage requirement | WebSearch; multiple sources confirmed | Verified |
| OSL USD 1B insurance, Canopius lead, Oct 2024 | WebFetch of Canopius press release confirmed | Verified (unchanged 2026-06-04) |
| 13 licensed VATPs as of June 2026 | WebFetch of SFC official list + PANews + CoinDesk confirmed | Verified (updated 2026-06-04) |
| IA RBC amendments / 100% stress factor | WebSearch + WebFetch of Insurance Business Asia confirmed | Verified (updated 2026-06-04) |
| HKD 635B gross premiums, 158 authorized insurers | WebSearch; BeInCrypto / Bloomberg (self-reported, flagged) | Verified as reported |
| ICF does not cover virtual assets | WebSearch; SFC FAQ confirmed | Verified |
| HKMA mirrors SFC insurance standards for banks | WebSearch; FINTECHANDDIGITALASSETS confirmed | Verified |
| SFC January 2025 enhanced standards circular | WebSearch; Charltonslaw, Dentons confirmed | Verified |
Corrections applied 2026-06-04 (Correction Protocol)
- VATP count corrected from "12 as of February 2026" to "13 as of June 2026" (Sections 6, 8). The SFC official list now shows 13 licensed platforms. VDX (Victory Fintech) was licensed 13 February 2026 (first new licence since June 2025) and NewBX Limited / Bixin.com on 18 May 2026 (13th). Section 6's platform table was also corrected to use the SFC's official entity names (OSL Exchange, HashKey Exchange, HKbitEX, EX.IO) and to add BGE (17 June 2025) and PantherTrade, replacing the vaguer "Additional platforms" placeholder row. Sources: SFC list (WebFetch), CoinDesk 16 Feb 2026, PANews May 2026.
- IA crypto capital rules updated from "proposal / Feb-April 2026 consultation pending legislative submissions" to "consultation conclusions published 8 May 2026" (Sections 7, 8). The finalised treatment is a 100% downward stress factor with no diversification benefit (not merely a "100% risk charge"), a look-through approach plus counterparty-default overlay for stablecoins (refining the earlier "favorable treatment" description), exclusion of tokenized conventional instruments from the crypto-asset definition, and a 31 December 2026 implementation date pending LegCo negative vetting. Source: Insurance Business Asia (8 May 2026 conclusions, WebFetch).
Not verified / flagged
- Market-capacity figures (Marsh Blue Vault USD 150M, Marsh DART up to USD 825M, OSL USD 1B, Risk & Insurance USD 3.31T "market opportunity") are self-reported broker/insurer/press figures, attributed inline; not independently confirmed against primary filings. Flagged as self-reported.
- HKD 635B / USD 82B gross-premium and 158-insurer figures are media-reported (BeInCrypto/Bloomberg) restatements of IA data, not fetched from a primary IA publication. Flagged as self-reported.
Original research conducted 20 March 2026. Refresh and re-verification conducted 4 June 2026; all cited URLs accessed on the refresh date. Verification standard version: 2026-06-04.