Centralized exchange in Hong Kong
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Hong Kong with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VATP licensees must comply with AMLO Part 5B (Cap 615) AML/CTF obligations, including customer due diligence (CDD), record-keeping, and suspicious transaction reporting to the JFIU.
- Travel Rule applies on withdrawals — threshold: HKD 8,000 (≈ ~$1,025 USD). Originator and beneficiary information must be transmitted for transactions at or above this threshold.
- SFC supervises AML compliance for VATPs; reports of suspicious transactions go to the Joint Financial Intelligence Unit (JFIU).
- Annual compliance audits under AML Ordinance may be required; auditors (e.g., Big 4, mid-tier firms) assess adherence to financial crime prevention.
Key Restrictions
- 98% cold storage requirement — one of the strictest globally — for user assets held in custody.
- Client assets must be held on trust and segregated from the operator's own assets.
- Insurance required against cyber risks and theft; robust private key management mandatory.
- Retail trading allowed only on approved tokens (SFC-approved list of virtual assets).
- Minimum paid-up capital of HKD 5M (~$640K USD) for VATP license; additional HKD 5M if also operating automated trading services (Type 7) for security tokens.
- Application timeline of 12–18 months; the SFC maintains a public register of licensed VATPs and a separate 'deemed-to-be-licensed' applicant list.
Key Risks
- SFC has enforcement power to discipline for misconduct including fines; financial status/solvency and financial integrity are assessed — fraud or missing funds exposure is significant.
- OTC desks are currently unregulated but the SFC has signaled future regulation, creating regulatory ambiguity for operators offering ancillary services.
- Stablecoin regulation (Stablecoins Ordinance) is pending (expected 2025–2026) with HKMA oversight — future compliance burden unknown.
- Travel Rule compliance obligation at HKD 8,000 threshold may be operationally complex to implement on-chain withdrawals.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
A VATP licence from the SFC under AMLO Part 5B has been mandatory since 1 June 2023. The SFC VATP Guidelines require paid-up share capital of at least HK$5,000,000 and liquid capital of at least the higher of HK$3,000,000 and the Financial Resources Rules basic amount (paras 6.2-6.3), storage of 98% of client virtual assets in cold storage (para 10.6(c)), and large-cap index tests for retail-tradable tokens (para 7.8). The SFC list shows OSL Exchange (licensed 15/12/2020) and HashKey Exchange (09/11/2022) as the earliest licensed platforms; 13 were licensed on 12 Oct 2026.
Under the SFC Guidelines for Virtual Asset Trading Platform Operators (June 2023), a licensed platform operator must hold client assets on trust through a wholly owned Associated Entity (para 10.1), store 98% of client virtual assets in cold storage (para 10.6(c)), and keep an SFC-approved compensation arrangement covering 50% of client VAs in cold storage and 100% in hot and other storage (para 10.22). A separate licensing regime for VA custodians outside trading platforms is a proposal (FSTB/SFC conclusions of 24 Dec 2025), not yet law.
An SFC licence under AMLO Part 5B has been required since 1 June 2023 for any centralised virtual asset exchange carrying on business in Hong Kong or actively marketing to Hong Kong investors. OTC virtual asset dealing has no dedicated licensing regime yet: the FSTB and SFC concluded their VA dealer and custodian consultation on 24 Dec 2025 and target a bill in 2026.
SFC — licenses VA trading platforms under AMLO Part 5B (13 licensed as of 12 October 2026) and SFO Types 1/7 for security tokens; supervision and enforcement
JFIU — Joint Financial Intelligence Unit — suspicious transaction reports
AMLO (Cap. 615) Part 5B, inserted by the AMLO (Amendment) Ordinance 2022 (Ord. No. 15 of 2022, gazetted 16 December 2022), introduced mandatory SFC licensing of centralised virtual asset trading platforms from 1 June 2023; licensed platforms may serve both professional and retail investors, subject to SFC token-admission and investor-protection requirements.
Securities and Futures Ordinance (Cap. 571), in force since 1 April 2003: a virtual asset trading platform offering trading in security tokens needs SFC licences for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities.
The SFC's public register of licensed persons and registered institutions lists all SFO licensees and registered institutions since 1 April 2003 and all AMLO licensees (licensed individuals and licensed providers) since the VASP regime commenced on 1 June 2023, searchable by name or CE number.
The SFC's List of virtual asset trading platform applicants (last updated 12 Oct 2026) includes applicants deemed to be licensed from 1 June 2024 under Schedule 3G to the AMLO (Cap. 615); the SFC states that deemed-to-be-licensed applicants are NOT formally licensed. On 12 Oct 2026 the list named 5 applicants, 2 of them deemed (Foris DAX HK / Crypto.com and Whalefin Markets / WhaleFin).
Compliance Audits: Ensuring adherence to HK laws (e.g., Companies Ordinance, AML regulations, tax laws).
Anti-Money Laundering (AML) Ordinance: Audits may check compliance with financial crime prevention.
Hong Kong's travel rule for SFC-licensed VASPs applies from 1 June 2023 under AMLO Sch. 2 s.13A; transfers of HK$8,000 or more need fuller originator data and verification, and smaller transfers still need names and account numbers (SFC AML/CFT Guideline paras 12.11.5–12.11.6).
The HKMA FATF travel‑rule updates linked on https://www.hkma.gov.hk/eng/key-functions/banking/anti-money-laundering-and-counter-financing-of-terrorism/fatf-related-statments-update/ no longer reflect the most recent Hong Kong SAR China regulatory stance as of November 2023.
Global status trackers confirm implementation: https://www.21analytics.co/blog/fatf-crypto-travel-rule-status-2026/ and Japanese FSA list: https://www.fsa.go.jp/en/news/2025/20250625/01.pdf
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange serving the Hong Kong public must obtain a VATP license from the SFC (mandatory since June 1, 2023 under AMLO Part 5B), maintain HKD 5M minimum paid-up capital, segregate client assets on trust with 98% cold storage and cyber insurance, comply with Travel Rule (HKD 8,000 threshold), and list only SFC-approved tokens for retail trading.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?