Why Operators Look at Hong Kong
Hong Kong combines a tier-1 global financial centre with a fully operational virtual-asset licensing regime supervised by the Securities and Futures Commission. The SFC has licensed a small but growing field of Virtual Asset Trading Platforms, the HKMA has granted its first stablecoin issuer licences, and the government’s Policy Statement 2.0 (June 2025) signalled further expansion through the LEAP framework. The trade-off is cost and timeline: Hong Kong is more expensive and slower than Singapore or the UAE.
Hong Kong’s regime is intentionally dual-track and non-portable: the Securities and Futures Commission licenses the trading platform under one regime, the Hong Kong Monetary Authority licenses stablecoin issuance under a separate regime, and neither licence provides any route into European markets — so operators with material EU demand are looking at a separate CASP application in an EU member state on top of the Hong Kong expense and timeline. The payoff only materializes where your core flow is institutional and retail Asia-Pacific, and you can commit to the 12-to-18-month process and the prescribed cold-storage model.
Hong Kong’s appeal rests on a combination that competing regimes struggle to match together: a tier-1 financial centre with HKD and USD fiat rails and a deep institutional investor base; a substantive, operational regime with platforms trading legally and the first stablecoin issuers now licensed under Cap 656; retail access for “eligible large-cap” virtual assets, which Singapore has discouraged; and an attractive tax base of an 8.25% / 16.5% two-tier profits tax, no capital gains tax, no VAT and a territorial source basis. For operators targeting Asia-Pacific flow, it is the natural Asian counterpart to a European MiCA CASP licence.
What the regime is not is a passport. A Hong Kong licence does not authorise services into the European Union, the United Kingdom or the United States. Operators with material EU demand need a parallel CASP authorisation in an EU member state, and US persons cannot be served at all. The real constraint is the 12-to-18-month timeline and the substantial first-year spend; applicants who underestimate either tend to stall mid-process.
Regulatory Framework
Hong Kong’s virtual-asset framework rests on three primary statutes plus subordinate guidelines from two regulators. The Securities and Futures Ordinance (Cap 571) provides the licensing architecture for Type 1 and Type 7 regulated activities applicable to VATPs. The Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap 615), as amended in 2022, added Part 5B creating the dedicated VASP licensing regime, operative since 1 June 2023. The Stablecoins Ordinance (Cap 656) commenced 1 August 2025 and regulates fiat-referenced stablecoin issuance under the HKMA.
Definition: Virtual Asset Trading Platform (VATP) Licence
An SFC-issued authorisation to operate a centralised virtual-asset trading platform in Hong Kong. The licence is granted under the Securities and Futures Ordinance (Cap 571) for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities together with the AMLO Part 5B VASP licence. Most platforms hold both, because a token may be classified as a security or a non-security and the classification can evolve. Hong Kong applies the two-tier profits tax (8.25% / 16.5%) on licensee operating profits; capital gains are not taxed.
Hong Kong’s first crypto framework was a voluntary opt-in regime launched in 2019, which proved too narrow. The Legislative Council created the mandatory VATP regime under AMLO Part 5B with effect from 1 June 2023; a 12-month deeming arrangement let pre-existing platforms continue operating during review, and the first new-regime licences were granted from late 2024. In parallel, the Stablecoins Ordinance commenced in August 2025, with the HKMA granting its first two issuer licences in April 2026.
Overlapping Regimes
- HKMA Stablecoin Issuer (Cap 656). Triggered by issuance of fiat-referenced stablecoins in Hong Kong, or any stablecoin referencing the HKD anywhere. Carries separate paid-up capital of HKD 25 million and HKMA prudential supervision.
- Customs and Excise Money Service Operator licence (AMLO Cap 615 Part 4). Money-changing or remittance, historically including some crypto OTC. Being substantially superseded for crypto by the proposed VA Dealing regime.
- SFC Type 9 (Asset Management). Triggered by managing portfolios with a stated virtual-asset objective, or 10% or more of gross asset value in virtual assets. Adds licensing conditions for the virtual-asset uplift.
- Proposed VA Dealing and VA Custodian licences. For OTC dealing or third-party VA custody outside an SFC-licensed VATP. Bills expected at LegCo during 2026; transition arrangements not yet published.
Licence Types and Activities Covered
The SFC VATP licence regulates centralised virtual-asset trading platforms that take custody of client assets, capturing both security-token activity (Type 1 + Type 7) and non-security activity (AMLO Part 5B). The SFC strongly prefers dual licensing because token classification can change. The HKMA Stablecoin Issuer licence regulates issuance of fiat-referenced stablecoins; algorithmic or under-collateralised stablecoins are outside the regime and effectively prohibited. Managers of virtual-asset funds need a Type 9 licence with the virtual-asset uplift.
Activity Restrictions
Retail clients on SFC-licensed VATPs can trade only “eligible large-cap virtual assets”: tokens included in at least two acceptable indices from independent providers, with at least one index meeting IOSCO standards. Derivatives are largely restricted to professional investors, with a February 2026 framework permitting professional-investor BTC and ETH perpetual contracts on licensed VATPs and no platform-extended margin credit. Staking is permitted, subject to prior written SFC approval, since April 2025. Retail access to stablecoins is restricted to HKMA-licensed issuers’ stablecoins.
Tokenised Securities and RWA
Hong Kong treats a tokenised security as a traditional security carried on a distributed ledger, not as a new asset class. The tokenisation wrapper does not change the regulatory character of the underlying instrument, so the Securities and Futures Ordinance and the prospectus regime apply in full, on a see-through basis. A VATP licence does not authorise tokenised securities or most real-world-asset tokens; those require the relevant existing SFO licences (Type 1 for dealing, Type 4 for advising, Type 9 for asset management), with secondary trading on a licensed VATP additionally engaging the VATP regime.
Requirements
Hong Kong’s VATP requirements split across five layers: capital, substance, governance, custody and AML/CFT. Each carries an independent fit-and-proper test. The combined effect makes Hong Kong one of the most prescriptive virtual-asset regimes globally: more demanding than Singapore on custody, more demanding than the UAE on substance, and broadly comparable to Malta on AML/CFT.
| Requirement | Threshold |
|---|---|
| Paid-up share capital (VATP) | HKD 5 million minimum |
| Liquid capital (VATP) | HKD 3 million minimum (higher per SFC determination) |
| Liquid asset cushion | ≥12 months of operating expenses, virtual assets excluded |
| Paid-up share capital (HKMA Stablecoin Issuer) | HKD 25 million minimum |
| Responsible Officers | ≥2 licensed ROs, ≥1 ordinarily resident in Hong Kong, ≥1 a director |
| Local incorporation | HK-incorporated, or non-HK company registered under Cap 622 Part 16 |
| Cold storage ratio | ≥98% of client virtual assets in cold storage |
| Custody model | Wholly-owned Associated Entity with TCSP licence |
| Compensation arrangement | 50% of cold-storage client VAs + 100% of hot/other |
| Foreign Ownership | No restriction; UBO disclosure and fit-and-proper applies |
The SFC’s Fit and Proper Guidelines apply to every director, Responsible Officer, Manager-in-Charge and ultimate beneficial owner, examining financial standing, qualifications, competence, reputation and any prior regulatory record. VATPs must operate from a permanent place of business in Hong Kong with records held locally, and at least one Responsible Officer must ordinarily reside in Hong Kong; bare-shell arrangements rarely survive the SFC’s on-site inspection. On AML/CFT, VATPs are subject to the AMLO customer due diligence regime and the SFC’s dedicated AML guideline, including beneficial-owner look-through and FATF Travel Rule obligations.
Application Process
The SFC publishes a service standard of “15 weeks for a licensed corporation application” once a complete application has been filed. Under the SFC’s swift licensing process for new VATP applicants, the substantive end-to-end process runs 12 to 18 months from the start of meaningful preparatory work and covers pre-application engagement, written submissions, an SFC on-site inspection, implementation of policies and systems, a single external assessment under the HKSAE 3000 tripartite framework with an independent penetration test, and full grant.
Submissions go through the SFC’s online WINGS portal as a single consolidated SFO (Type 1 + 7) plus AMLO VASP application, in English. The SFC’s Fintech Contact Point and dedicated VATP team accept early engagement meetings before formal submission, and early signalling on structure, custody design and token-admission methodology surfaces concerns while they can still be addressed without rework. The broad sequence runs from Hong Kong incorporation and parallel setup of the Associated Entity (the wholly-owned custody subsidiary with a TCSP licence), through substance and Responsible Officer readiness, the written submissions, the on-site inspection, a review-and-rectification cycle, and finally the external assessment and penetration test before grant. The compliance documentation is the most time-intensive component and cannot be shortcut with generic templates, which the SFC reads as primary evidence of governance maturity.
Costs
SFC application and annual fees are minor line items. The dominant costs are legal counsel, the external assessor and penetration test, the compensation arrangement, Hong Kong substance, and the HKD 8 million capital lock-up. As a directional guide, total first-year cost typically lands well into seven HKD figures once capital and the compensation arrangement are included, with meaningful recurring annual cost thereafter for substance, audit, supervision and compensation-arrangement renewals.
The compensation arrangement is the single most volatile cost. Acceptable forms include third-party insurance, bank guarantees, qualifying deposits, or reserve virtual assets held in cold storage by the Associated Entity. Premiums vary with assets under custody, custody design and incident history, and larger platforms can face seven-figure annual premiums even with a clean record. We can talk through realistic budgeting for any specific model on a consultation.
Taxation
Hong Kong is a low-tax, territorial-source jurisdiction, but the territorial principle is fact-specific for crypto operators and offshore-sourced profits do not qualify automatically. The Inland Revenue Department’s practice notes set out the framework for digital-asset tax characterisation.
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate Income Tax (two-tier) | 8.25% on first HKD 2m; 16.5% above | Taxable on HK-sourced trading profits |
| Capital Gains Tax | None | Long-term capital holdings non-taxable (badges-of-trade analysis applies) |
| Value Added Tax / GST | None | Hong Kong does not impose VAT or GST |
| Withholding Tax: dividends / interest | None | No withholding on outbound payments to non-residents |
| Salaries Tax (employee) | Progressive to 17% | Crypto-denominated salaries taxable at market value on accrual |
| Stamp Duty | 0% on virtual assets | Tokenised ETFs listed on HKEX exempt per Policy Statement 2.0 |
The Inland Revenue Department classifies digital tokens by function: payment tokens trigger taxable transactions at market value, security tokens are treated under standard share rules, and utility tokens issued via ICO are generally taxable revenue receipts. Hong Kong is a CRS participating jurisdiction and is expected to bring CARF reporting into force, and multinational groups above the EUR 750 million threshold should run a Pillar Two (global minimum tax) impact assessment.
Banking
Banking for a Hong Kong-licensed VATP is materially easier than for an unlicensed crypto operator, but harder than for a traditional financial services firm, with onboarding typically running two to six months. The HKMA’s April 2023 circular on access to banking services instructed Authorised Institutions to apply a risk-based approach rather than wholesale de-risking, and the licensed-VATP banking landscape has shifted accordingly.
In practice, banking for licensed VATPs tends to come from HK-licensed credit institutions with a defined digital-asset risk appetite, locally-incorporated virtual banks with a digital-asset programme, and adjacent-jurisdiction EMIs for non-HKD rails. Stablecoin issuers must hold reserves with a licensed bank or qualified custodian under trust, segregated and in high-quality liquid assets matching the reference currency. Banking and payments is a supporting part of what we do rather than the headline; where we deliver a licensing engagement, we help arrange suitable banking through the controlled network we work with directly.
Advantages and Limitations
Hong Kong’s strengths and weaknesses both flow from the prescriptive nature of the regime. Operators trade higher upfront cost and a longer timeline for substantive credibility, broad retail access and tier-1 banking infrastructure.
- Substantive retail access. Retail clients can trade eligible large-cap virtual assets on licensed VATPs subject to disclosure, suitability and exposure limits: broader retail scope than Singapore’s MAS regime.
- Tier-1 financial centre status. Deep HKD and USD rails, full SWIFT and FPS access, and IOSCO and APG membership. Banking moves materially faster for licensed VATPs.
- Clear tokenisation roadmap. Policy Statement 2.0 and the LEAP framework provide forward visibility on tokenised ETFs, tokenised bond issuance and proposed tax relief for specified digital assets in qualifying funds.
- Attractive tax base. Two-tier profits tax, no capital gains tax, no VAT/GST, territorial source basis, and no withholding on outbound dividends or interest to non-residents.
- × No EU passporting. A Hong Kong licence does not authorise services into the EU. Operators targeting EU clients need a separate CASP authorisation in an EU member state.
- × Long timeline. 12 to 18 months substantive engagement is typical; 24+ months for complex applicants.
- × High cost. A substantial first-year operating spend on top of the HKD 8 million capital lock-up.
- × Prescriptive custody. The 98% cold-storage threshold, the Associated Entity TCSP model and the 50%/100% compensation arrangement are more demanding than Singapore, the UAE or Malta.
- × No US client access. A Hong Kong licence does not authorise services to US persons; geo-blocking and IP-jurisdiction screening are required from launch.
How Hong Kong Compares
Hong Kong’s natural Asia-Pacific peers are Singapore (the MAS Payment Services Act regime), Australia (AUSTRAC registration and the proposed digital-asset platform regime), and the UAE (VARA in Dubai, FSRA in ADGM). Malta (CASP under MiCA) is the cross-tier reference for operators weighing an EU-passportable alternative against APAC presence.
| Factor | Hong Kong | Singapore | UAE |
|---|---|---|---|
| Licence Type | SFC VATP (Type 1 + 7 + AMLO Part 5B) | MAS Major Payment Institution licence | VARA (Dubai) or FSRA (ADGM) activity-specific |
| Regulator | SFC (HKMA for stablecoins) | Monetary Authority of Singapore | VARA / FSRA |
| Timeline | 12–18 months | 12 months+ | 4–12 months (VARA) |
| Corporate Tax | 16.5% / 8.25% two-tier | 17% standard | 9% federal CT |
| EU Passporting | No | No | No |
| Best For | Established exchanges targeting APAC retail and institutional flow | Institutional-only operators preferring lighter retail oversight | Crypto-native operators prioritising speed and lower upfront cost |
For institutional-only operators content with Singapore’s de-emphasis of retail, MAS is cheaper and faster; for operators prioritising speed and lower upfront cost, the UAE wins on both axes; and where EU market access is the priority, an EU CASP under MiCA is the better fit, with many groups holding both a Hong Kong licence for APAC and an EU CASP for Europe. Tomberg & Partners delivers crypto licensing directly in several of the EU and European jurisdictions where we file, so if your real need is European market access we can act for you rather than simply point you elsewhere. Choose Hong Kong where the model requires substantive APAC retail access with tier-1 banking, long-term commitment justifies the timeline and spend, or HKD-referenced stablecoin issuance is in scope.
Frequently Asked Questions
Can a Hong Kong VATP licence serve retail customers?
Yes. Retail clients on SFC-licensed VATPs can trade “eligible large-cap virtual assets”: tokens included in at least two acceptable indices from independent providers, with at least one index meeting IOSCO standards. Onboarding requires knowledge assessment, risk profiling, suitability testing and exposure limits. Retail access in Hong Kong is materially broader than Singapore’s MAS framework. Stablecoins offered to retail must be issued by HKMA-licensed issuers under Cap 656.
Do you need to be a Hong Kong resident to apply?
The applicant entity must be incorporated in Hong Kong (or a non-Hong Kong company registered under Cap 622 Part 16) with a principal place of business in Hong Kong. At least two Responsible Officers must be SFC-licensed; at least one must ordinarily reside in Hong Kong and at least one must be a director. Beneficial owners need not reside in Hong Kong but must pass the SFC’s fit-and-proper test.
Does the Hong Kong crypto licence cover tokenised securities or RWA?
No. A virtual-asset (VATP) licence does not authorise tokenised securities or most real-world-asset tokens. Hong Kong applies a see-through approach: a tokenised security is a traditional security with a tokenisation wrapper, so the Securities and Futures Ordinance and the prospectus regime apply in full. Those activities require the relevant existing SFO licences (Type 1 for dealing, Type 4 for advising, Type 9 for asset management), with secondary trading on a licensed VATP additionally engaging the VATP regime.
How long does SFC VATP licensing take?
Twelve to eighteen months from the start of substantive pre-application work to full grant is typical. The SFC publishes a service standard of 15 weeks for a licensed corporation application once a complete submission has been filed, but the on-site inspection, rectification, implementation, single external assessment and independent penetration test extend the calendar significantly. Complex applicants run 24 months or more.
What is the difference between an SFC VATP and an HKMA Stablecoin licence?
An SFC VATP licence (Securities and Futures Ordinance Type 1 plus Type 7, plus AMLO Part 5B) authorises operation of a centralised virtual-asset trading platform. An HKMA Stablecoin Issuer licence (Stablecoins Ordinance Cap 656) authorises issuance of fiat-referenced stablecoins, including HKD-referenced stablecoins issued anywhere. The regulators, capital requirements (HKD 5m plus 3m versus HKD 25m), governance frameworks and processes all differ. An entity carrying out both activities needs both licences.
Can a Hong Kong VATP serve EU clients?
Only in materially restricted circumstances. EU clients cannot lawfully be solicited or served by a Hong Kong VATP without authorisation as a Crypto-Asset Service Provider under MiCA. MiCA Article 61 permits reverse solicitation only where the EU client initiated the service at their own exclusive initiative, and ESMA interprets this narrowly: no active marketing, advertising or solicitation of any kind, with the exemption product-specific rather than relationship-wide. Operators with material EU demand should obtain CASP authorisation in an EU member state.
Can a Hong Kong VATP licence be passported elsewhere?
No. A Hong Kong VATP licence is Hong Kong-specific. Operations outside Hong Kong require separate licensing in the relevant jurisdiction. The SFC permits limited operational integration with affiliated overseas VATPs subject to prior approval and unified surveillance, but this is not a regulatory passport; it remains a single-licence model.
Talk to us about Hong Kong
We will give you a straight answer on whether Hong Kong fits your business, and where it does not, we deliver crypto licensing and company formation in the jurisdictions we serve, end to end and accountable for the outcome.
Banking & Payments
A company and a licence still need a bank account
Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.
Related Pages
- Crypto Licensing: the VASP, CASP and MiCA jurisdictions we deliver in directly
- Company Formation: formation across our European and offshore network
- Malta MiCA CASP: an EU-passportable alternative for European market access
- Banking: supporting banking and payments for licensed operators