Hong Kong · Cryptocurrency License

Hong Kong Cryptocurrency Licence

Virtual-asset permissions are determined by the precise token services provided, including exchange, brokerage, custody, transfer, issuance, dealing and platform operation.

View Application Priorities
Back to Cryptocurrency License
JurisdictionHong Kong

Hong Kong Cryptocurrency Licence

A centralised virtual-asset trading platform carrying on business in Hong Kong or actively marketing to Hong Kong investors must assess the SFC licensing regime. The operating model is expected to address custody, client onboarding, token admission, market surveillance, conflicts, cyber security and financial resources.

CategoryCryptocurrency License
RegulatorSecurities and Futures Commission (SFC)
EngagementPhased, traceable and bilingual

Suitable activities

This route may suit

  • Centralised virtual-asset trading platforms
  • Platforms marketing to Hong Kong investors
  • Institutional or retail platform models within permitted scope

Application priorities

Preparation should cover

  • Define the platform and token-admission perimeter
  • Design custody and client-asset segregation
  • Implement KYC, AML and market-surveillance controls
  • Evidence cyber security, governance and audit readiness

Core evidence

Common application documents

  • Corporate structure, ownership chart and source-of-funds evidence
  • Director, controller and key-person fit-and-proper records
  • Business plan, programme of operations and financial projections
  • AML/CFT, sanctions, risk, complaints and governance policies
  • Technology, cyber security, outsourcing and continuity documentation
  • Local substance, staffing, premises and service-provider arrangements

After approval

Ongoing regulatory obligations

  • Regulatory, prudential and transaction reporting
  • Independent audit, compliance testing and policy review
  • Capital, liquidity or safeguarding monitoring where applicable
  • Renewals, fees and prior notice or approval for material changes

Delivery process

Five stages to a review-ready application

01

Regulatory perimeter

Map products, customers, contractual roles, assets and transaction flows before selecting a licence.

02

Jurisdiction shortlist

Compare market access, substance, people, capital, banking, technology and ongoing obligations.

03

Application architecture

Align the entity, ownership, governance, business plan, policies, systems and financial model.

04

Submission and review

Coordinate filings, interviews, regulator questions, evidence updates and third-party workstreams.

05

Launch and continuity

Complete operating readiness and maintain reporting, audits, renewals, training and change notifications.

Related licences

Compare other jurisdictions

BahrainBahrain Crypto Asset Service Provider Licence British Virgin IslandsBVI VASP Licence BulgariaBulgaria Cryptocurrency Licence

Common questions

Points to confirm before starting

Which jurisdiction is the easiest?

There is no universally easiest jurisdiction. Suitability depends on the exact activity, customers, target markets, owners, available capital, management team, banking and ability to maintain local substance.

Can a company operate after receiving approval in principle?

Usually not unless the regulator expressly grants operating permission. Incorporation, preliminary approval, registration and a full licence are different milestones and must not be treated as equivalent.

Are the capital and approval timelines fixed?

No. Requirements and review periods change by permission scope, risk profile, completeness of evidence and regulatory workload. Current rules should be checked before the project is scoped.

What work continues after licensing?

Common obligations include regulatory reporting, audits, capital or liquidity monitoring, policy reviews, staff training, complaints, AML testing, renewals and advance notice or approval for material changes.

↑TOP