← Regulations / Hong Kong / Operating Models / On-shore VASP

On-shore VASP in Hong Kong

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in Hong Kong with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VATP license holders must comply with AMLO Part 5B (Cap 615) AML/CTF obligations
  • Travel Rule applies — threshold of HKD 8,000 per transaction
  • Suspicious Transaction Reports (STRs) must be filed with JFIU (Joint Financial Intelligence Unit)
  • Customer due diligence (CDD) and ongoing monitoring required under AMLO
  • Compliance audits required under AMLO and Companies Ordinance Cap. 622
  • SFC supervises AML compliance for VATP licensees

Key Restrictions

  • 98% of client crypto assets must be held in cold storage — one of the strictest cold-storage requirements globally
  • Retail trading allowed only for tokens approved by SFC on a whitelist
  • Client assets must be held on trust, segregated, and insured against cyber risks/theft
  • Robust private key management policies required
  • HKD 5M (~$640K USD) minimum paid-up capital for VATP license; separate HKD 3M (Type 1) / HKD 5M (Type 7) for security tokens
  • Must be locally incorporated in Hong Kong

Key Risks

  • SFC enforcement is active — assessments include 'financial status or solvency' and 'financial integrity' with misconduct fines
  • Application timeline is 12-18 months — significant time-to-market risk
  • Stablecoins Ordinance pending (expected 2025-2026) — regulatory landscape evolving
  • OTC desks currently unregulated but SFC has signaled future regulation, creating potential scope creep
  • Deemed-to-be-licensed (DTBL) list exists but these entities are not yet fully licensed — regulatory limbo risk

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 90% confidence

HKMA — licenses fiat-referenced stablecoin issuers under the Stablecoins Ordinance (Cap. 656, in effect 1 August 2025; first two licences 10 April 2026), supervises banks, runs the Fintech Supervisory Sandbox

licensing 85% confidence

FSTB — virtual asset policy (policy statements of October 2022 and 26 June 2025) and legislative proposals, including the VA dealer, custodian, advisory and management licensing bill targeted for 2026

licensing 95% confidence

JFIU — Joint Financial Intelligence Unit — suspicious transaction reports

licensing 90% confidence

AMLO (Cap. 615) Part 5B, inserted by the AMLO (Amendment) Ordinance 2022 (Ord. No. 15 of 2022, gazetted 16 December 2022), introduced mandatory SFC licensing of centralised virtual asset trading platforms from 1 June 2023; licensed platforms may serve both professional and retail investors, subject to SFC token-admission and investor-protection requirements.

licensing 90% confidence

Securities and Futures Ordinance (Cap. 571), in force since 1 April 2003: a virtual asset trading platform offering trading in security tokens needs SFC licences for Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities.

licensing 90% confidence

A VATP licence from the SFC under AMLO Part 5B has been mandatory since 1 June 2023. The SFC VATP Guidelines require paid-up share capital of at least HK$5,000,000 and liquid capital of at least the higher of HK$3,000,000 and the Financial Resources Rules basic amount (paras 6.2-6.3), storage of 98% of client virtual assets in cold storage (para 10.6(c)), and large-cap index tests for retail-tradable tokens (para 7.8). The SFC list shows OSL Exchange (licensed 15/12/2020) and HashKey Exchange (09/11/2022) as the earliest licensed platforms; 13 were licensed on 12 Oct 2026.

licensing 85% confidence

Under the SFC Guidelines for Virtual Asset Trading Platform Operators (June 2023), a licensed platform operator must hold client assets on trust through a wholly owned Associated Entity (para 10.1), store 98% of client virtual assets in cold storage (para 10.6(c)), and keep an SFC-approved compensation arrangement covering 50% of client VAs in cold storage and 100% in hot and other storage (para 10.22). A separate licensing regime for VA custodians outside trading platforms is a proposal (FSTB/SFC conclusions of 24 Dec 2025), not yet law.

licensing 85% confidence

An SFC licence under AMLO Part 5B has been required since 1 June 2023 for any centralised virtual asset exchange carrying on business in Hong Kong or actively marketing to Hong Kong investors. OTC virtual asset dealing has no dedicated licensing regime yet: the FSTB and SFC concluded their VA dealer and custodian consultation on 24 Dec 2025 and target a bill in 2026.

travel-rule 90% confidence

Hong Kong's travel rule for SFC-licensed VASPs applies from 1 June 2023 under AMLO Sch. 2 s.13A; transfers of HK$8,000 or more need fuller originator data and verification, and smaller transfers still need names and account numbers (SFC AML/CFT Guideline paras 12.11.5–12.11.6).

travel-rule 0% confidence

The HKMA FATF travel‑rule updates linked on https://www.hkma.gov.hk/eng/key-functions/banking/anti-money-laundering-and-counter-financing-of-terrorism/fatf-related-statments-update/ no longer reflect the most recent Hong Kong SAR China regulatory stance as of November 2023.

Evidence fact hk.tax not found (may have been renamed).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a locally-incorporated on-shore VASP may operate in Hong Kong under a mandatory VATP license from the SFC (effective June 2023) with HKD 5M capital, 98% cold storage, SFC-approved token whitelist for retail, 12-18 month application timeline, and full AML/Travel Rule obligations (HKD 8,000 threshold).

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?