Why Hong Kong for Crypto?
Hong Kong's pivot to crypto regulation since 2022 is one of the most significant developments in global crypto policy. After years of restricting crypto access, the HKSAR government launched a complete VASP licensing regime, positioning Hong Kong as Asia's leading regulated crypto hub alongside Singapore.
The regime, fully effective from June 2023, is mandatory for any platform operating a centralised virtual asset exchange serving Hong Kong clients. Unlike earlier opt-in frameworks, all VATPs must obtain SFC authorisation or cease operating. The SFC granted a transitional period for existing platforms operating before June 2023, with a deadline of 29 May 2024 for transitional arrangements.
Key advantages: zero capital gains tax, low territorial profits tax (16.5%), world-class financial infrastructure, proximity to mainland China markets (with important restrictions), and a bilingual (English/Chinese) legal system based on English common law.
From June 2023, SFC-licensed VATPs may serve retail Hong Kong investors — a significant policy shift. Previously, crypto platforms could only access professional investors (HKD 8M+ portfolio). Retail access is subject to enhanced investor protection requirements including suitability assessments and token eligibility criteria.
SFC VATP Licence Requirements
The SFC applies standards broadly equivalent to those for licensed securities brokers, adapted for virtual assets.
Hong Kong Substance
Must be incorporated in Hong Kong or a recognised jurisdiction with a substantive local presence. Board must include HK-resident responsible officers (ROs). No pure shell structures.
Responsible Officers (ROs)
Minimum 2 Responsible Officers — individuals approved by the SFC. ROs must have relevant financial/compliance experience and pass a fit-and-proper assessment. At least 1 must be active day-to-day.
Capital Requirements
HKD 5,000,000 (≈USD 640k) paid-up capital. Liquid assets ≥ 12 months of projected operating expenses at all times. Client assets must be segregated and held with licensed custodians.
AML/CFT Programme
Complete AML/CFT policies compliant with HKMA and SFC guidelines. Travel Rule compliance (VASP-to-VASP transfers). MLRO with minimum 3 years relevant experience required.
Cybersecurity & Custody
At least 98% of client crypto assets in cold storage. Independent cybersecurity audit required annually. Insurance or equivalent financial backing for hot wallet assets.
Token Eligibility
Only tokens meeting SFC criteria may be listed for retail investors (currently limited to large-cap assets on approved indices). All new token listings require SFC pre-approval or compliance with published criteria.
Investor Protection
Suitability assessments for retail clients. Knowledge tests. Risk disclosures in Chinese and English. Cooling-off periods. Restrictions on leverage products for retail.
Business Continuity
Formal BCP/DR plan. Independent annual compliance audit. Regular reporting to SFC including financial returns, client asset reports, and incident notifications within 1 business day.
5 Steps to SFC VATP Approval
Pre-Application Preparation
Engage Hong Kong legal counsel. Incorporate HK entity. Draft full suite of policies (AML, compliance, risk, cybersecurity, custody, token listing). Recruit and prepare Responsible Officers. The SFC expects near-final policies at submission — preparation is the longest phase.
Pre-Submission Meeting with SFC
Optional but strongly recommended. SFC's Licensing Department will review your structure and flag issues before formal submission. Saves significant back-and-forth during formal review.
Formal Application Submission
Submit via SFC's WINGS online system. Include: Form VA, business plan, financial projections, all policy documents, RO CVs and declarations, IT security assessment, and custody arrangements. Application fee: HKD 4,740.
SFC Review & Due Diligence
SFC conducts detailed review including meetings with management, assessment of ROs, IT/cybersecurity audit review, and regulatory reference checks. Expect multiple rounds of questions and policy revisions. Maintain an internal project tracker for SFC queries.
Approval & Licence Issuance
Upon satisfying all conditions, SFC issues the VATP licence. Conditions typically include: completion of independent cybersecurity audit, insurance confirmation, client asset segregation verification, and any outstanding staffing conditions.
Hong Kong VASP Licence Costs (Year 1)
Excludes minimum capital of HKD 5,000,000 (~USD 640k). All figures in HKD unless noted.
| Item | Low Est. | High Est. | Notes |
|---|---|---|---|
| SFC application fee | HKD 4,740 | HKD 4,740 | Non-refundable, paid at submission |
| SFC annual licence fee (VATP) | HKD 127,400 | HKD 127,400 | Payable upon approval, annually thereafter |
| Legal & compliance counsel | HKD 400,000 | HKD 900,000 | Application preparation, policy drafting |
| Responsible Officers (ROs) | HKD 600,000 | HKD 1,500,000 | Annual salary; 2 ROs minimum required |
| Compliance officer salary | HKD 400,000 | HKD 800,000 | MLRO / Head of Compliance |
| IT/cybersecurity audit | HKD 150,000 | HKD 400,000 | Annual independent audit required |
| Office & incorporation | HKD 80,000 | HKD 200,000 | Registered address + substantive office |
| Insurance (hot wallet) | HKD 100,000 | HKD 500,000 | Varies by AUM; can use alternative capital backing |
| Total Year 1 (excl. capital) | ~HKD 1.7M | ~HKD 4.4M | ≈USD 220k–560k |