Hong Kong operates a dual-regulator model for digital assets that distinguishes it from single-regulator jurisdictions like Singapore. The Securities and Futures Commission (SFC) governs virtual asset trading platforms, custody, and dealing services, while the Hong Kong Monetary Authority (HKMA) governs stablecoin issuance and banking-sector digital asset activities. This split creates two parallel licensing tracks that firms must navigate, but also positions Hong Kong as one of the most comprehensively regulated jurisdictions in Asia-Pacific -- with institutional credibility reinforced by the first stablecoin issuer licences (granted 10 April 2026) going to HSBC and the Standard Chartered-led Anchorpoint Financial joint venture.
1. Regulatory Architecture
Hong Kong's digital asset regulation is anchored in a "same business, same risks, same rules" principle, implemented through two regulators and multiple legislative instruments.
SFC -- Securities and Virtual Assets
The SFC is the primary regulator for virtual asset service providers. Its authority flows from two statutes:
Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) (Cap. 615) -- the core licensing vehicle. AMLO was amended effective 1 June 2023 to require licensing of Virtual Asset Trading Platforms (VATPs). As of June 2026, 13 entities held VATP licences (most recently NewBX/Bixin.com, licensed 18 May 2026). The SFC published its ASPIRe roadmap on 19 February 2025, setting out 12 initiatives under five pillars (Access, Safeguards, Products, Infrastructure, Relationships) to expand the regime to dedicated custody licensing, dealing services, and advisory/management services. Legislation amending AMLO to cover VA dealing, custody, advisory and management is targeted for introduction to the Legislative Council in 2026 (custodian consultation conclusions published 24 December 2025; advisory/management conclusions 26 May 2026).
Securities and Futures Ordinance (SFO) -- governs securities-type virtual assets, fund management, and intermediary licensing. SFC-licensed intermediaries dealing in digital assets must comply with SFO conduct requirements.
HKMA -- Stablecoins and Banking
The HKMA regulates stablecoin issuance under the Stablecoins Ordinance (Cap. 656), which took effect on 1 August 2025. The HKMA also supervises bank participation in digital asset services under the Banking Ordinance, including custody offerings by banks and tokenisation initiatives through the EnsembleTX pilot.
Financial Services and Treasury Bureau (FSTB)
The FSTB sets policy direction. Its June 2025 second policy statement confirmed Hong Kong's ambition to be a "trusted, innovative, and globally competitive digital assets hub." The FSTB and SFC jointly published consultation papers on VA dealing and custody licensing on 27 June 2025.
The Key Statutes
| Legislation | Regulator | Scope |
|---|---|---|
| AMLO | SFC | VATP licensing; proposed VA dealing and custody licensing |
| Securities and Futures Ordinance (SFO) | SFC | Securities-type virtual assets, fund management |
| Stablecoins Ordinance (Cap. 656) | HKMA | Fiat-referenced stablecoin issuance, reserves, redemption |
| Banking Ordinance | HKMA | Bank participation in digital asset services |
Key Regulatory Instruments
| Instrument | Applies To | Function |
|---|---|---|
| VATP Guidelines (AMLO) | Licensed VATPs | Custody standards, 98/2 cold/hot ratio (evolving), insurance, AML/CFT |
| SFC Custody Circular (Aug 2025) | Licensed VATPs | HSM requirements, air-gapped environments, smart contract prohibition in cold wallets, 24/7 SOC |
| Stablecoins Ordinance | FRS issuers | 100% reserve backing, segregation, redemption rights, whitepaper |
| HKMA AML/CFT Guideline | Licensed stablecoin issuers | Customer due diligence, Travel Rule monitoring, suspicious transaction reporting |
| AMLO Schedule 2 | All VASPs | AML/CFT obligations, FATF Travel Rule |
The dual-regulator model means a firm seeking to operate both custody and stablecoin issuance must engage with two separate licensing authorities and comply with two distinct sets of conduct requirements. This is more complex than Singapore's single-MAS approach but provides specialised oversight -- the SFC brings securities-regulation expertise to custody, while the HKMA brings banking-supervision expertise to stablecoins.
2. Activity Comparison Table
| Dimension | Crypto Custody | Stablecoin Issuance | RWA / Security Token Platform | DeFi Protocol Operations |
|---|---|---|---|---|
| Primary licence | VASP licence (AMLO); proposed standalone VA Custodian licence (2026) | HKMA stablecoin issuer licence (Stablecoins Ordinance) | SFC Type 1, Type 7, Type 9 licences (SFO); VATP licence (AMLO) for platforms also trading virtual assets | No DeFi-specific licence; SFC applies functional equivalence — VATP or SFC Type 1/7 licence required if activity mirrors regulated service |
| Regulator | SFC | HKMA | SFC | SFC (case-by-case assessment) |
| Primary statute | AMLO (amended 2023); SFO | Stablecoins Ordinance (Cap. 656), effective 1 Aug 2025 | Securities and Futures Ordinance (SFO); Companies (Winding Up and Miscellaneous Provisions) Ordinance (prospectus) | SFO (if securities involved); AMLO (if VATP functions performed) |
| Minimum capital | HK$10M paid-up share capital (~US$1.28M); HK$3M liquid capital (proposed custodian) | HK$25M paid-up share capital (~US$3.2M); HK$3M liquid capital | HK$5M paid-up capital + HK$3M liquid capital (Type 1/7/9) | HKD 5M paid-up capital if VATP licence required; no requirement for purely decentralized protocols |
| Application timeline | Pending -- standalone custody legislation targeted 2026; currently embedded in VATP licence | 36 applications received; first 2 licences granted 10 April 2026 (Anchorpoint Financial / HSBC) | SFC licence: 6--12 months; VATP licence: 12+ months | No dedicated pathway; VATP licence: 6--12 months if applicable |
| Setup cost (est.) | HK$2M - HK$5M (excl. capital) -- legal, compliance infrastructure, HSM procurement, audit | HK$3M - HK$8M (excl. capital) -- legal, reserve management, smart contract audit, whitepaper | HK$3M - HK$8M (excl. capital) -- legal, DLT infrastructure, prospectus, compliance | N/A for decentralized protocols; HK$2M-5M if VATP licence required |
| Annual ongoing cost (est.) | HK$2M - HK$5M -- compliance, insurance (50% cold/100% hot), monthly reporting, SOC, external audit | HK$4M - HK$10M -- reserve management, attestation, AML/CFT monitoring, statutory audit, compliance | HK$3M - HK$7M -- compliance, SFC reporting, audit, AML/CFT monitoring | N/A for decentralized protocols; per VATP requirements if licensed |
| Key technical requirement | 98% cold / 2% hot (evolving to outcome-based); HSM-certified keys; air-gapped signing; no smart contracts in cold wallets; 24/7 SOC | 100% reserve backing at all times; segregated trust arrangements; smart contract audits; whitepaper publication | DLT network due diligence; smart contract risk management; custody per SFC standards; competent staff for tokenization | No DeFi-specific technical standards; SFC assesses functional equivalence; ASPIRe roadmap may introduce DeFi lending/staking standards |
| AML/KYC | AMLO Schedule 2; FATF Travel Rule (all transfers, no de minimis); SFC AML/CFT Guideline | HKMA AML/CFT Guideline; CDD on customers (not non-customer holders); Travel Rule monitoring | AMLO AML/CFT; FATF Travel Rule; SFC AML/CFT Guideline | No DeFi-specific AML guidance; identifiable front-end operators expected to comply with AMLO |
| Passporting | None; no regional mutual recognition | HKD-linked FRS issued outside HK require HKMA licence; no cross-border passporting | None; no regional mutual recognition | None |
| Staffing substance | Wholly-owned subsidiary for client assets; senior management responsible for custody controls; individually licensed staff | HK-incorporated; CE, directors, stablecoin manager, controller must be HK-based and fit-and-proper | SFC-licensed responsible officers; individually licensed representatives; HK-based management | Licensed Representatives and Responsible Officers required if VATP licence applies |
| Insurance / compensation | 50% of cold storage + 100% of hot storage (insurance, bank deposits, or bank guarantees); daily monitoring | No specific insurance mandate; 100% reserve backing with trust segregation provides structural protection | Per SFC requirements for licensed intermediaries | No DeFi-specific insurance requirements |
| Transitional period | None proposed for standalone custody regime | Six months for pre-existing issuers (ended Nov 2025); non-applicants had one month to cease activities | N/A -- existing SFC licensing applies | N/A -- no dedicated DeFi regime |
| Approval selectivity | 13 VATP licences granted (as of June 2026); standalone custody TBD | 36 applications received; only 2 licences granted 10 April 2026 (Anchorpoint Financial Limited FRS01, HSBC FRS02) -- OSL NOT in first batch | 13 VATP licences (as of June 2026); SFC licence approval rate not separately published for tokenized activities | No DeFi-specific approvals; 13 VATP licences total as of June 2026 |
3. Multi-Activity Licensing
Unlike Singapore, where a single MPI licence can authorise multiple DPT service types, Hong Kong's dual-regulator model requires separate licensing tracks for custody and stablecoin issuance.
How Custody and Stablecoins Combine
A firm seeking to operate both activities in Hong Kong must engage two regulators:
- SFC for the custody licence (currently embedded in VATP licensing; standalone regime expected 2026)
- HKMA for the stablecoin issuer licence (Stablecoins Ordinance, operational since August 2025)
There is no single-application path. Each regulator applies its own eligibility criteria, capital requirements, and conduct standards. However, the two regimes are designed to interlock:
- Stablecoin reserve custody must be handled by a licensed bank or an asset custodian acceptable to the HKMA -- meaning an SFC-licensed custodian (or bank) can serve as the reserve custodian for an HKMA-licensed stablecoin issuer
- HKMA-licensed stablecoin issuers are exempt from the proposed standalone SFC custodian licence for their own issuances
- Licensed SFC VATPs may list HKMA-licensed stablecoins without the standard 12-month track record requirement, creating a distribution pathway
Practical Architecture
A group seeking to operate both custody and stablecoin issuance would typically structure as:
- Custody entity -- licensed under SFC (VATP licence now, standalone custodian licence when available), holding client virtual assets in a wholly-owned subsidiary with HSM-secured key management
- Stablecoin issuer -- HK-incorporated entity licensed under HKMA, with reserve assets held in segregated trust by a licensed bank or acceptable custodian
- Optional: bank partnership -- given that HSBC and the Standard Chartered-led Anchorpoint Financial JV received the first two stablecoin licences (10 April 2026), a custody operator could partner with a bank-affiliated stablecoin issuer rather than building its own issuance capability
Cross-Regime Synergies
The interlock creates business opportunities:
- An SFC-licensed custodian can custody reserve assets for HKMA-licensed stablecoin issuers
- A VATP can list HKMA-licensed stablecoins with streamlined onboarding
- The November 2025 SFC circulars permit VATPs to open trust or client accounts with custodians on behalf of clients, enabling deeper integration between custody and stablecoin distribution
Structural Contrast with Singapore
| Feature | Hong Kong | Singapore |
|---|---|---|
| Regulators involved | Two (SFC + HKMA) | One (MAS) |
| Application processes | Separate applications to each regulator | Single MPI application with multiple service categories |
| Capital requirements | HK$10M (custody) + HK$25M (stablecoin) = HK$35M combined (~US$4.5M) | S$250K (custody) + S$1M (stablecoin) = S$1.25M combined (~US$940K) |
| Legal entity structure | Separate entities typical; wholly-owned subsidiary required for VATP custody | Separate entities required for SCS issuer (ringfenced) |
| Stablecoin-custody interlock | Custodian can serve as reserve custodian | DBS serves as primary reserve custodian for SCS issuers |
Hong Kong's combined capital floor (~US$4.5M) is roughly 4.8x Singapore's (~US$940K), reflecting both the higher capital thresholds and the dual-licensing overhead.
4. Banking Access
Banking access in Hong Kong is shaped by the direct participation of the territory's note-issuing banks in the digital asset ecosystem. This is a distinctive structural advantage.
| Bank | Stance | Digital Asset Activity |
|---|---|---|
| HSBC | Active participant | Granted one of Hong Kong's first two stablecoin issuer licences (FRS02, 10 April 2026); launch targeted H2 2026; participant in HKMA EnsembleTX tokenisation pilot |
| Standard Chartered | Active participant | First stablecoin licence granted 10 April 2026 via Anchorpoint Financial Limited JV (FRS01, with Animoca Brands and HKT); HKMA sandbox participant since July 2024; EnsembleTX participant |
| Bank of China (Hong Kong) | Engaged | EnsembleTX pilot participant; infrastructure role in HKD settlement |
What Bank Participation Means
Hong Kong's approach is unusual: the banks themselves are becoming stablecoin issuers, rather than merely serving as banking partners to crypto-native firms. HSBC and the Standard Chartered-led Anchorpoint JV receiving the first stablecoin licences (10 April 2026) means:
- Reserve custody is institutionally embedded -- stablecoin reserves will be held within the banking system rather than in standalone custody arrangements
- Banking access for crypto firms becomes easier -- when the banks are direct participants in the stablecoin ecosystem, they have commercial incentive to serve adjacent crypto businesses
- Institutional credibility is maximised -- HSBC and Standard Chartered are globally systemically important banks, lending weight to any stablecoin they issue
EnsembleTX Pilot
The HKMA's EnsembleTX pilot, running through 2026, uses tokenised deposits for money market fund transactions. Participants include HSBC, Standard Chartered, Bank of China (HK), BlackRock, and Franklin Templeton, with settlement via the HKD Real Time Gross Settlement system. This pilot builds institutional infrastructure that custody operators can leverage.
Bank Custody Guidance
The HKMA has published guidance requiring banks offering digital asset custody to hold 98% of client assets in cold storage with appropriate insurance. SFC-licensed intermediaries and banks must hold client digital assets with SFC-licensed VATPs, banks, or subsidiaries of locally incorporated banks. The HKMA has also signalled that crypto assets on permissionless blockchains could potentially qualify for lower bank capital requirements if issuers demonstrate effective risk management.
5. Total Cost: Multi-Activity Operation
For a firm seeking to operate both custody and stablecoin issuance from Hong Kong:
Year Zero (Setup)
| Component | Custody Entity | Stablecoin Issuer | Combined |
|---|---|---|---|
| Legal advisory | HK$500K - HK$1.2M | HK$800K - HK$2M | HK$1.3M - HK$3.2M |
| Compliance infrastructure | HK$400K - HK$1M | HK$500K - HK$1.5M | HK$900K - HK$2.5M |
| HSM procurement / key management | HK$500K - HK$1.5M | N/A (reserve-focused) | HK$500K - HK$1.5M |
| Smart contract audit | N/A | HK$300K - HK$800K | HK$300K - HK$800K |
| External AML/CFT audit | HK$200K - HK$500K | HK$200K - HK$500K | HK$400K - HK$1M |
| Company incorporation (2 entities) | HK$50K - HK$100K | HK$50K - HK$100K | HK$100K - HK$200K |
| Whitepaper preparation | N/A | HK$200K - HK$500K | HK$200K - HK$500K |
| Total setup (excl. capital) | HK$1.7M - HK$4.3M | HK$2M - HK$5.4M | HK$3.7M - HK$9.7M |
Capital Requirements
| Component | Custody Entity | Stablecoin Issuer | Combined |
|---|---|---|---|
| Minimum paid-up share capital | HK$10M | HK$25M | HK$35M |
| Minimum liquid capital | HK$3M | HK$3M | HK$6M |
| Excess liquid capital (12 months opex) | HK$2M - HK$5M | HK$4M - HK$10M | HK$6M - HK$15M |
| Total locked capital | HK$15M - HK$18M | HK$32M - HK$38M | HK$47M - HK$56M |
Annual Ongoing
| Component | Custody Entity | Stablecoin Issuer | Combined |
|---|---|---|---|
| Insurance / compensation (50% cold + 100% hot) | HK$500K - HK$2M | N/A | HK$500K - HK$2M |
| Statutory audit | HK$200K - HK$500K | HK$300K - HK$800K | HK$500K - HK$1.3M |
| Compliance function | HK$1M - HK$2.5M | HK$1.5M - HK$3M | HK$2.5M - HK$5.5M |
| AML/CFT monitoring | HK$300K - HK$600K | HK$200K - HK$500K | HK$500K - HK$1.1M |
| 24/7 SOC / technology risk | HK$500K - HK$1.5M | HK$300K - HK$800K | HK$800K - HK$2.3M |
| Reserve management / attestation | N/A | HK$500K - HK$1.5M | HK$500K - HK$1.5M |
| Monthly reporting (SFC) | HK$100K - HK$300K | N/A | HK$100K - HK$300K |
| Total annual | HK$2.6M - HK$7.4M | HK$2.8M - HK$6.6M | HK$5.4M - HK$14M |
Total first-year cost for dual operation (setup + capital + first year ongoing): approximately HK$56M - HK$80M (~US$7.2M - US$10.3M).
This is significantly higher than Singapore's equivalent (~S$2.9M - S$4.5M / ~US$2.2M - US$3.4M), driven primarily by Hong Kong's much higher capital requirements (HK$35M combined minimum paid-up capital vs Singapore's S$1.25M) and the insurance/compensation obligations unique to the SFC custody regime.
6. Regulatory Direction
Hong Kong is on an aggressive expansion trajectory -- broadening the regulatory perimeter while deepening technical standards for existing licensees.
Near-Term (2026)
- Standalone custody and dealing legislation: The FSTB and SFC confirmed a 2026 target for introducing the VA custodian and dealer licensing bill into the Legislative Council. The June 2025 consultation has concluded. No transitional period is proposed -- all existing operators must secure a licence at commencement
- First stablecoin licences granted (10 April 2026): The HKMA granted only two licences -- to Anchorpoint Financial Limited (FRS01), the Standard Chartered / HKT / Animoca Brands JV, and HSBC (FRS02) -- from a pool of 36 applications. Crypto exchange OSL, earlier reported as a leading candidate, was NOT in the first batch. Hong Kong missed its informal March 2026 target before the April grant (HKMA press release, 10 April 2026)
- ASPIRe implementation continues: The SFC is progressing through the 12 initiatives, including outcome-based custody standards (Initiative 3), enhanced insurance frameworks (Initiative 4), and regulatory reporting infrastructure (Initiative 9)
Medium-Term (2026-2027)
- EnsembleTX operationalisation: The HKMA's tokenised deposit pilot with HSBC, Standard Chartered, Bank of China (HK), BlackRock, and Franklin Templeton runs through 2026, building infrastructure for tokenised asset custody and settlement
- Bank capital treatment: The HKMA has signalled potential easing of capital requirements for bank-held crypto assets but specific risk weights remain under development
- Expanded VATP products: The November 2025 SFC circulars enabled global liquidity integration, margin financing, staking, and lending -- expanding the revenue opportunities for licensed platforms
Regulatory Timeline
| Date | Development | Direction |
|---|---|---|
| June 2023 | AMLO VATP licensing regime effective | Foundation |
| February 2025 | SFC publishes ASPIRe roadmap (12 initiatives, 5 pillars) | Expansion |
| June 2025 | FSTB second policy statement; joint consultation on VA custody and dealing | Expansion |
| August 2025 | Stablecoins Ordinance takes effect; SFC custody circular issued | Tightening |
| November 2025 | SFC expands VATP products/services; global liquidity integration | Liberalisation |
| November 2025 | 16 charged in JPEX fraud (HK$1.6B); first AMLO crypto prosecution | Enforcement |
| 24 December 2025 | FSTB/SFC publish custody/dealing consultation conclusions (P2025122400265); custodian scope narrowed to private-key safekeeping; expedited licensing pathway added | Forward guidance |
| 1 April 2026 | HKMA confirms no stablecoin licences yet granted, having missed informal March 2026 target | Operationalisation |
| 10 April 2026 | First HKMA stablecoin licences granted -- Anchorpoint Financial Limited (FRS01) and HSBC (FRS02); OSL not in first batch | Operationalisation |
| 20 April 2026 | SFC circulars on tokenisation/secondary trading of SFC-authorised products; Ordinance-licensed stablecoins and tokenised deposits permitted for settlement via VATPs | Liberalisation |
| 26 May 2026 | FSTB/SFC publish VA advisory/management consultation conclusions (P2026052600567); bill for all four regimes reaffirmed for LegCo "within this year" | Forward guidance |
| 2026 (target) | VA dealing, custodian, advisory and management licensing bill introduced to Legislative Council (AMLO amendment) | Codification |
Enforcement Signal
The JPEX prosecution -- HK$1.6 billion alleged fraud, 16 individuals charged, three on Interpol Red Notices, the first time AMLO was applied to a crypto prosecution -- is a powerful enforcement signal. It directly motivated the expansion of the regulatory perimeter to OTC trading and custody services, and demonstrates that Hong Kong will pursue criminal enforcement against unlicensed operators. Operating a virtual asset service without a licence carries up to HK$5 million in fines and seven years' imprisonment.
Systemic Direction
Hong Kong's strategy is to position as an institutional-grade hub where digital assets are managed, custodied, and issued under supervision equivalent to traditional finance. The involvement of HSBC and the Standard Chartered-led Anchorpoint JV as the first licensed stablecoin issuers (10 April 2026) -- not merely banking partners -- anchors the ecosystem in traditional finance credibility. The dual-regulator model, while more complex than Singapore's single-MAS approach, brings specialised expertise: the SFC's securities-regulation depth for custody and trading, the HKMA's banking-supervision rigour for stablecoins and reserves.
7. RWA / Security Token Platform Licensing
Hong Kong regulates tokenized securities through the Securities and Futures Ordinance (SFO). Intermediaries dealing in, advising on, or providing automated trading services for tokenized securities must hold the relevant SFC licence. The SFC's ASPIRe roadmap (February 2025) includes RWA tokenization as part of its strategic expansion.
7.1 License Details
| Attribute | Detail |
|---|---|
| License name(s) | SFC Type 1 (dealing in securities); SFC Type 7 (providing automated trading services); SFC Type 9 (asset management); VATP licence (AMLO, for platforms also trading virtual assets) |
| Regulatory authority | SFC |
| Legal basis | Securities and Futures Ordinance (SFO) |
7.2 Requirements
| License | Minimum Paid-Up Capital | Minimum Liquid Capital |
|---|---|---|
| Type 1 (dealing in securities) | HKD 5,000,000 | HKD 3,000,000 |
| Type 7 (automated trading services) | HKD 5,000,000 | HKD 3,000,000 |
| Type 9 (asset management, holding client assets) | HKD 5,000,000 | HKD 3,000,000 |
| Type 9 (not holding client assets) | Nil | HKD 100,000 |
Product providers must have competent staff for tokenization operations, conduct due diligence on DLT networks and smart contracts, ensure proper custody of tokenized assets, and maintain systems for managing tokenization-specific risks.
7.3 Application Process
SFC licence applications typically take 6--12 months. Firms must demonstrate fit-and-proper status for all responsible officers and licensed representatives. VATP licensing under AMLO takes 12+ months.
7.4 Ongoing Obligations
- SFC regulatory reporting and transaction reporting
- AMLO AML/CFT compliance; FATF Travel Rule (all VA transfers, no de minimis threshold)
- Ongoing capital adequacy maintenance
- SFC-licensed responsible officers must meet ongoing fit-and-proper requirements
7.5 Passporting
None. No regional mutual recognition scheme exists. Hong Kong-licensed firms must obtain separate authorization in each jurisdiction.
7.6 Banking Access
SFC-licensed intermediaries benefit from established banking relationships in Hong Kong's deep financial services ecosystem. The involvement of HSBC and the Standard Chartered-led Anchorpoint JV as the first licensed stablecoin issuers (10 April 2026) anchors the ecosystem in traditional finance credibility. Licensed VATPs (OSL, HashKey) have demonstrated banking access.
7.7 Key Holders
| Firm | License Type | Activity |
|---|---|---|
| OSL Exchange | SFC Type 1 + Type 7; VATP (AMLO) | Licensed VA trading platform; tokenized securities |
| HashKey Exchange | VATP (AMLO) | Licensed VA trading platform |
| HKVAX | VATP (AMLO) | Licensed VA trading platform |
7.8 Transition
Hong Kong is expanding its regulatory perimeter through the ASPIRe roadmap (12 initiatives, 5 pillars) and planned 2026 legislation for standalone VA custodian and dealer licensing. The November 2025 SFC circulars expanded VATP products to include global liquidity integration, margin financing, staking, and lending. The dual-regulator model (SFC for securities/custody, HKMA for stablecoins) provides specialised expertise for each activity.
See Hong Kong RWA Regulation for full details on SFC licensing for tokenized securities, AMLO VATP requirements, ASPIRe roadmap, and the evolving regulatory framework.
8. DeFi Protocol Licensing
Hong Kong applies a "same business, same risks, same rules" principle to DeFi, assessing activities on a case-by-case basis under existing securities and virtual asset legislation. No DeFi-specific licence exists. Purely decentralized protocols with no identifiable operator remain outside the regulatory perimeter, but the SFC's ASPIRe roadmap signals intent to progressively expand coverage.
8.1 Available License Types for DeFi Operations
| License | Authority | Capital | DeFi Relevance |
|---|---|---|---|
| VATP licence (AMLO) | SFC | HKD 5,000,000 paid-up capital | Required if DeFi activity functionally resembles a virtual asset trading platform |
| SFC Type 1 (dealing in securities) | SFC | HKD 5,000,000 | Required if DeFi protocol deals in tokenized securities |
| SFC Type 7 (automated trading services) | SFC | HKD 5,000,000 | Required if DeFi protocol provides automated trading for securities |
| SFC Type 9 (asset management) | SFC | HKD 5,000,000 (nil if not holding client assets) | Required if DeFi protocol manages assets on behalf of clients |
8.2 Application Timeline
- VATP licence: 6--12 months observed for initial cohort; single consolidated application via WINGS portal (streamlined from February 2025)
- SFC Type 1/7/9: 6--12 months
- DeFi-specific: No dedicated application pathway; assessed under existing licensing tracks
8.3 DeFi-Specific Requirements
- Functional equivalence: SFC assesses whether a DeFi activity constitutes a "regulated activity" under SFO or involves operating a VATP under AMLO, regardless of centralized/decentralized infrastructure (SFC ASPIRe roadmap)
- ASPIRe roadmap expansion: SFC evaluating staking and lending/borrowing services for professional investors with risk management safeguards; 2026 legislation targeted for standalone VA custody and dealing
- No capital gains tax: Virtual asset profits for individuals are not subject to capital gains tax, making Hong Kong attractive for DeFi participants
- DAO legal status: DAOs not recognized as legal entities; Mantra Dao Inc v Mullin (2024) established DAOs are not exempt from judicial oversight
- No DeFi AML guidance: SFC has not issued specific guidance on DeFi AML/KYC; identifiable front-end operators expected to comply with AMLO
- Project Ensemble: HKMA's EnsembleTX pilot (launched November 2025) incorporates atomic settlement -- a core DeFi feature -- for tokenized deposits, though not a DeFi protocol per se
8.4 Key Enforcement
- JPEX case (2023--ongoing): HKD 1.6 billion alleged fraud; 80 arrests; first AMLO crypto prosecution. Demonstrates SFC willingness to pursue criminal prosecution for unlicensed activity
- Penalties: Operating without VATP licence: up to HKD 5,000,000 fine and 7 years' imprisonment
8.5 Licensed Platforms with DeFi Relevance
| Platform | Licence | Activity |
|---|---|---|
| OSL Exchange | SFC Type 1 + Type 7; VATP (AMLO) | Licensed VA trading; November 2025 circulars enabled staking and lending |
| HashKey Exchange | VATP (AMLO) | Licensed VA trading; expanding to DeFi-adjacent services |
| HKVAX | VATP (AMLO) | Licensed VA trading |
13 platforms hold full VATP licences as of June 2026 (most recently NewBX/Bixin.com, 18 May 2026).
For comprehensive DeFi regulation analysis, see Hong Kong DeFi Regulation.
Insurance / Risk Transfer Licensing
Overview
Hong Kong has the most explicit mandatory insurance/compensation framework for crypto custody in the Asia-Pacific region. The SFC requires licensed VATPs to maintain a compensation arrangement covering at least 50% of client virtual assets in cold storage and 100% of client virtual assets in hot storage. This requirement can be satisfied through insurance, bank deposits, or bank guarantees. The Insurance Authority (IA) regulates insurers under the Insurance Ordinance (Cap. 41).
Regulatory Authority
| Body | Role |
|---|---|
| SFC | Sets mandatory compensation/insurance requirements for VATPs; defines coverage ratios |
| Insurance Authority (IA) | Authorises and supervises insurers and intermediaries under the Insurance Ordinance |
| HKMA | Regulates stablecoin issuers; no specific insurance mandate for stablecoin reserves |
Insurance Requirements for Crypto Businesses
| Dimension | Detail |
|---|---|
| Mandatory compensation arrangement | SFC requires licensed VATPs to cover 50% of cold storage assets and 100% of hot storage assets through insurance, bank deposits, or bank guarantees |
| Coverage scope | Loss of client virtual assets due to hacking, theft, key compromise, insider fraud, and operational failure |
| Daily monitoring | VATPs must monitor asset-to-coverage ratios daily and maintain compliance at all times |
| Stablecoin issuers | No specific insurance mandate under the Stablecoins Ordinance; 100% reserve backing with trust segregation provides structural protection |
| Deposit protection | The Hong Kong Deposit Protection Board scheme covers bank deposits up to HK$500,000 per depositor per bank; does not extend to virtual asset holdings |
Named Insurance Providers
| Provider | Type | Activity |
|---|---|---|
| AIG Hong Kong | IA-authorised insurer | Commercial insurance including cyber and crime coverage for financial institutions |
| Chubb Insurance Hong Kong | IA-authorised insurer | Commercial insurance for technology and financial services firms |
| Lloyd's (via Hong Kong intermediaries) | International capacity | Specialty digital asset policies placed through licensed Hong Kong brokers |
| Marsh, Aon (Hong Kong offices) | IA-registered intermediaries | Major brokers placing digital asset insurance for VATPs |
Estimated Insurance Costs
| Coverage Type | Estimated Annual Premium | Notes |
|---|---|---|
| Crime / custody (50% cold + 100% hot) | HK$500K-2M+ | The mandatory coverage ratio is the primary cost driver; scales with AUC |
| D&O | HK$100K-500K+ | Driven by personal liability for Licensed Representatives and Responsible Officers |
| Cyber | HK$100K-300K+ | Standard for SFC-licensed intermediaries |
Regulatory Direction
- The SFC's ASPIRe roadmap (Initiative 4) includes enhanced insurance frameworks, potentially moving toward more outcome-based coverage requirements
- The proposed standalone VA custodian licence (2026 legislation) may introduce specific insurance requirements separate from the current VATP framework
- The 50% cold / 100% hot coverage ratio is among the most prescriptive in any major jurisdiction
Cross-Reference
See Hong Kong Digital Asset Insurance for full details on SFC mandatory compensation arrangements, 50/100 coverage ratios, IA insurer licensing, ASPIRe Initiative 4, and insurance cost estimates for VATPs.
NFT & Digital Collectibles
| Dimension | Detail |
|---|---|
| Applicable licence(s) | VASP Licence (AMLO Part 5B); SFO Type 1 (Dealing in Securities) and Type 7 (Automated Trading Services) |
| Regulatory authority | Securities and Futures Commission (SFC) |
| Capital requirements | HKD 5,000,000 (~USD 640,000) paid-up share capital (both VASP and SFO licences) |
| Timeline (actual) | Up to 15 weeks (SFC performance pledge for VASP); varies for SFO licences |
| Key requirements | Consolidated WINGS application; minimum 2 SFC-approved Responsible Officers; external assessor report; 98% cold storage; adequate insurance coverage; monthly reporting; annual external audit |
| NFT-specific notes | NFTs meeting the VA definition under AMLO require VASP licence for centralised trading platforms; NFTs classified as securities require SFO Type 1/7 licences; several major exchanges withdrew VASP applications in 2024 due to high compliance investment |
| Cross-reference | Full NFT regulation details |
Payment / Transfer Service Licensing
Overview
Hong Kong regulates crypto payment services through a dual-regulator model: the SFC licenses VATPs under AMLO, while the HKMA licenses stablecoin issuers under the Stablecoins Ordinance (effective 1 August 2025). A separate regime for VA dealers and custodians targeting 2026 legislation is under consultation.
| Dimension | Detail |
|---|---|
| Licence name | SFC VATP licence (AMLO); HKMA Stablecoin Issuer licence (Stablecoins Ordinance); SVF licence (PSSVFO) |
| Enabling statute | Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO); Stablecoins Ordinance (Cap. 656); Payment Systems and Stored Value Facilities Ordinance (PSSVFO) |
| Regulatory authority | SFC (VATPs); HKMA (stablecoin issuers, banking); FSTB (policy) |
| Capital requirement | HKD 5M--10M paid-up share capital + HKD 3M liquid capital (VATP); HKD 25M paid-up share capital (stablecoin issuer) |
| Timeline (actual) | 6--12 months (VATP licence); 36 applications received for stablecoin; first 2 licences granted 10 April 2026 (Anchorpoint Financial Limited, HSBC) |
| Setup cost (excl. capital) | HK$2M -- HK$5M (VATP); HK$3M -- HK$8M (stablecoin issuer) |
| Annual ongoing cost | HK$2M -- HK$5M (VATP); HK$4M -- HK$10M (stablecoin issuer) |
| Passporting | None -- no regional mutual recognition |
| Banking access | Strong -- HSBC and the Standard Chartered-led Anchorpoint JV are the first licensed stablecoin issuers (10 April 2026); OSL, HashKey have demonstrated banking access |
| Key holders | 13 VATPs licensed (as of June 2026): HashKey Exchange, OSL, HKVAX, Bullish, VDX/Victory Fintech, NewBX/Bixin.com (18 May 2026), among others; 77 expressions of interest for stablecoin licences, 36 first-batch applications, 2 licences granted |
| Status | VATP regime operational since June 2023; Stablecoins Ordinance (Cap. 656) effective August 2025; first 2 stablecoin licences granted 10 April 2026; standalone VA custody/dealer legislation targeted 2026 |
Stablecoin framework: HKMA requires 100% reserve backing at all times, segregated trust arrangements, par value redemption rights, and whitepaper publication. HKD-linked stablecoins issued outside HK require HKMA licence.
See Hong Kong Crypto Payment Regulation for full details on VATP licensing, HKMA stablecoin issuer framework, SVF licensing, and ASPIRe roadmap.
9. For Full Details
- Hong Kong Crypto Payment Regulation -- VATP licensing, HKMA stablecoin issuer framework, SVF licensing, ASPIRe roadmap
- Hong Kong Custody Regulations -- SFC ASPIRe roadmap, VATP custody standards, proposed standalone custodian licence, HSM/air-gapped key management requirements, 98/2 storage ratio evolution, insurance and compensation framework
- Hong Kong Stablecoin Regulations -- HKMA licensing regime, Stablecoins Ordinance (Cap. 656), 100% reserve backing, par value redemption rights, HKMA sandbox participants, first licence batch granted 10 April 2026 (Anchorpoint Financial Limited FRS01, HSBC FRS02)
- Hong Kong DeFi Regulation -- SFC functional equivalence approach, VATP licensing for DeFi-adjacent activities, ASPIRe roadmap DeFi expansion, no capital gains tax, DAO liability, Project Ensemble, JPEX enforcement
- Hong Kong RWA Regulation -- SFC Type 1/7/9 licensing for tokenized securities, AMLO VATP framework, ASPIRe roadmap, capital requirements, DLT due diligence standards
- Hong Kong Digital Asset Insurance -- SFC mandatory 50% cold / 100% hot compensation arrangement, IA oversight, ASPIRe Initiative 4, insurance cost estimates
- Hong Kong NFT & Digital Collectibles -- VASP licence for VA-classified NFTs, SFO Type 1/7 for security NFTs, SFC supervision, HKD 5M capital
10. Recent Licensing Developments (since 2026-03-20)
| Date | Development | Primary Source |
|---|---|---|
| 1 April 2026 | HKMA confirmed it had granted no stablecoin issuer licences, having missed an informal March 2026 target signalled at Consensus Hong Kong | CoinDesk (1 April 2026) |
| 10 April 2026 | HKMA granted the first two stablecoin issuer licences under the Stablecoins Ordinance (Cap. 656) -- Anchorpoint Financial Limited (FRS01), the Standard Chartered (HK) / HKT / Animoca Brands JV, and The Hongkong and Shanghai Banking Corporation Limited (HSBC, FRS02). Both HKD-referenced; launches targeted mid-to-H2 2026. From 36 first-batch applications. OSL was NOT in the first batch | HKMA press release (10 April 2026); HKMA Register of Licensed Stablecoin Issuers |
| 20 April 2026 | SFC issued circulars on tokenisation and secondary trading of SFC-authorised investment products, permitting Ordinance-licensed stablecoins and tokenised deposits for round-the-clock settlement via SFC-licensed VATPs | SFC Circular refNo 25EC57 |
| 18 May 2026 | SFC granted the 13th VATP licence to NewBX Limited (Bixin.com) (Type 1 + Type 7 under SFO plus VATP under AMLO), per the SFC's official List of Licensed VATPs | SFC List of Licensed VATPs |
| 26 May 2026 | FSTB/SFC published consultation conclusions on VA advisory and management licensing (P2026052600567), aligning with SFO Type 4 / Type 9; bill for all four regimes (dealing, custodian, advisory, management) reaffirmed as targeted for LegCo introduction "within this year" (2026) | FSTB/SFC press release P2026052600567 (26 May 2026) |
<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->
Verification Notes
This license-map file was reconciled against the refreshed deep-research source-domain files for Hong Kong (crypto-custody, stablecoin-regulations, crypto-payment-regulation, nft-digital-collectibles — all modified 2026-06-04) and verified against primary regulator sources on 4 June 2026 (standard version 2026-06-04). Corrections applied under the Correction Protocol:
-
Stablecoins Ordinance chapter number — CORRECTED. The file previously cited "Stablecoins Ordinance (Cap. 636)" throughout. The correct chapter is Cap. 656, confirmed via the refreshed stablecoin source file (which cites Hong Kong e-Legislation https://www.elegislation.gov.hk/hk/cap656 and the HKMA Register of Licensees). All occurrences corrected.
-
First stablecoin licences — CORRECTED. The file previously stated the first HKMA stablecoin issuer licences were "expected March 2026" and would go to "HSBC, Standard Chartered, and OSL." Verified against the HKMA primary press release (10 April 2026): the HKMA granted exactly two licences on 10 April 2026 — Anchorpoint Financial Limited (FRS01) (the Standard Chartered/HKT/Animoca JV) and HSBC (FRS02). OSL was NOT in the first batch. Hong Kong missed its informal March 2026 target (CoinDesk, 1 April 2026). All forward-looking "expected March 2026" language replaced with the confirmed grant event. Corrected in the intro, Sections 2, 3, 4, 6, 7.6, and the Payment section.
-
VATP licence count — CORRECTED. The file variously stated 9, 10, 11, and 12 VATP licences. Per the refreshed payment source file (citing the SFC's official List of Licensed VATPs), 13 VATPs held licences as of June 2026, the 13th being NewBX/Bixin.com (18 May 2026). All counts updated to 13.
-
AMLO chapter number — ADDED. AMLO identified as Cap. 615 (per the refreshed nft-digital-collectibles source file) where the statute is first introduced.
-
Custodian/advisory legislative status — UPDATED. Added the 24 December 2025 custody/dealing consultation conclusions (private-key scope narrowing, expedited licensing pathway) and 26 May 2026 advisory/management conclusions (P2026052600567); the AMLO-amendment bill remains targeted for 2026 LegCo introduction but had not been introduced as of 4 June 2026.
-
Cross-domain wikilink prefix — NORMALIZED. All cross-domain wikilinks updated to use the
deep-research/path prefix per the license-map linking standard.
Items NOT independently re-verified in this pass
- Cost/timeline figures (setup, ongoing, capital-lock estimates in Sections 2, 5, and the Insurance/Payment sections) are self-reported / estimated ranges and are flagged as such ("est.") in the tables; they were not re-verified against primary regulator fee schedules (the SFC and HKMA do not publish standard application/licence fees for these regimes — NO PUBLISHED FEE SCHEDULE FOUND).
- The Singapore comparison figures (Section 3, capital comparison) were not re-verified against Singapore source files in this Hong Kong-focused pass.
- Insurance provider names and premium estimates (Insurance section) retain their prior verification basis; not re-verified in this pass.
- No public enforcement action under the Stablecoins Ordinance had been identified as of 4 June 2026 (NO DATA FOUND); the JPEX prosecution (AMLO) figures retain their prior verification basis from the crypto-custody source file.