Centralized exchange in Hong Kong
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Hong Kong with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VATP licensees must comply with AMLO Part 5B (Cap 615) AML/CTF obligations, including customer due diligence (CDD), record-keeping, and suspicious transaction reporting to the JFIU.
- Travel Rule applies on withdrawals — threshold: HKD 8,000 (≈ ~$1,025 USD). Originator and beneficiary information must be transmitted for transactions at or above this threshold.
- SFC supervises AML compliance for VATPs; reports of suspicious transactions go to the Joint Financial Intelligence Unit (JFIU).
- Annual compliance audits under AML Ordinance may be required; auditors (e.g., Big 4, mid-tier firms) assess adherence to financial crime prevention.
Key Restrictions
- 98% cold storage requirement — one of the strictest globally — for user assets held in custody.
- Client assets must be held on trust and segregated from the operator's own assets.
- Insurance required against cyber risks and theft; robust private key management mandatory.
- Retail trading allowed only on approved tokens (SFC-approved list of virtual assets).
- Minimum paid-up capital of HKD 5M (~$640K USD) for VATP license; additional HKD 5M if also operating automated trading services (Type 7) for security tokens.
- Application timeline of 12–18 months; the SFC maintains a public register of licensed VATPs and a separate 'deemed-to-be-licensed' applicant list.
Key Risks
- SFC has enforcement power to discipline for misconduct including fines; financial status/solvency and financial integrity are assessed — fraud or missing funds exposure is significant.
- OTC desks are currently unregulated but the SFC has signaled future regulation, creating regulatory ambiguity for operators offering ancillary services.
- Stablecoin regulation (Stablecoins Ordinance) is pending (expected 2025–2026) with HKMA oversight — future compliance burden unknown.
- Travel Rule compliance obligation at HKD 8,000 threshold may be operationally complex to implement on-chain withdrawals.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP: VATP license from SFC mandatory since June 2023. HKD 5M (~$640K USD) minimum paid-up capital. SFC Type 1 (HKD 3M) / Type 7 (HKD 5M) for security tokens. 98% cold storage requirement (one of strictest globally). Retail trading allowed only for approved tokens. 12-18 month application timeline. OSL and HashKey were first licensees.
CUSTODY: Included under VATP license. Client assets on trust, segregated. Insurance required against cyber risks/theft. Robust private key management.
EXCHANGE: VATP license required for all centralized exchanges serving HK public. OTC desks currently unregulated but SFC signaling future regulation. Banks (HSBC, StanChart) directed by HKMA to bank licensed firms.
SFC — VATP licensing (AMLO Part 5B), Type 1/7 for security tokens, enforcement
JFIU — Joint Financial Intelligence Unit — suspicious transaction reports
AMLO Part 5B (Cap 615, amended 2023) (2023) — Mandatory VATP licensing — effective June 1, 2023. All platforms, retail + institutional.
Securities and Futures Ordinance (SFO) (2003) — Type 1/Type 7 licensing for security token dealing and automated trading
The SFC Public Register of licensees (https://www.sfc.hk/en/Regulatory-functions/Intermediaries/Licensing/Register-of-licensed-persons-and-registered-institutions) allows searching all SFC-licensed entities, including VATPs by name or CE number, under SFO/AMLO since 1 June 2023.
A separate "deemed-to-be-licensed" applicant list exists, but these are not licensed.
Compliance Audits: Ensuring adherence to HK laws (e.g., Companies Ordinance, AML regulations, tax laws).
Anti-Money Laundering (AML) Ordinance: Audits may check compliance with financial crime prevention.
Travel Rule adopted — threshold: HKD 8,000
HKMA FATF updates: https://www.hkma.gov.hk/eng/key-functions/banking/anti-money-laundering-and-counter-financing-of-terrorism/fatf-related-statments-update/
Global status trackers confirm implementation: https://www.21analytics.co/blog/fatf-crypto-travel-rule-status-2026/ and Japanese FSA list: https://www.fsa.go.jp/en/news/2025/20250625/01.pdf
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange serving the Hong Kong public must obtain a VATP license from the SFC (mandatory since June 1, 2023 under AMLO Part 5B), maintain HKD 5M minimum paid-up capital, segregate client assets on trust with 98% cold storage and cyber insurance, comply with Travel Rule (HKD 8,000 threshold), and list only SFC-approved tokens for retail trading.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?