Crypto-funded debit card in Hong Kong
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Hong Kong with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- HKMA-regulated Money Service Operator (MSO) licence required for the fiat-transfer and remittance components of the card program (AMLO).
- VATP license (SFC, AMLO Part 5B) required if the operator facilitates crypto-to-fiat conversion in-house (i.e., operates a platform where users trade crypto for fiat). Minimum paid-up capital HKD 5M.
- If a fiat-referenced stablecoin is used to fund the card, the stablecoin issuer must be licensed under the Stablecoins Ordinance (Cap. 656, effective August 1, 2025) by HKMA.
- CDD/KYC obligations under AMLO Schedule 2 — identity verification of cardholders, beneficial ownership checks, ongoing transaction monitoring.
- Suspicious transaction reports (STRs) to JFIU — no de minimis threshold; all suspicious transactions must be reported.
- Travel Rule compliance required for crypto transfers associated with card top-ups (under AMLO Part 5B guidelines).
- Record-keeping: transaction records and identification data retained for 6 years (AMLO requirements).
- Annual AML compliance audit likely required under AMLO for licensed entities.
Key Restrictions
- Crypto-to-fiat conversion cannot be offered without either a VATP license (SFC) or a partnership with a licensed VATP; the off-ramp function is regulated.
- No public, unlicensed issuance of stablecoins to fund the card — stablecoin issuers must be HKMA-licensed under the Stablecoins Ordinance (Cap. 656) by Aug 2025.
- If the card is a stored-value facility (SVF), an SVF licence from HKMA may be required depending on the multi-purpose nature of the stored value (SVF Ordinance, Cap. 584).
- Partner-bank or BIN-sponsor arrangement is practically required — HKMA has directed banks to bank licensed VASPs, but unlicensed crypto businesses face de-risking.
- Only SFC-approved tokens may be used for retail-facing crypto services — retail trading restricted to approved tokens on licensed platforms.
- 98% cold storage requirement for any VATP-licensed entity holding client crypto assets.
Key Risks
- Regulatory fragmentation — the card program may fall under SFC (VATP), HKMA (e-money/SVF/stablecoin), and Customs & Excise (MSO) simultaneously, creating multi-regulator compliance burden.
- BIN sponsorship and banking partner risk — HK banks remain cautious even with HKMA guidance; program may be treated as high-risk by acquirers.
- Stablecoin regulation is pending (2025-2026) — if the card uses stablecoins, legal treatment may shift mid-operation.
- Tax ambiguity — while crypto-to-fiat conversion may be a 'trade' subject to profits tax (16.5%), the IRD DIPN No. 39 guidance may not fully cover debit card structures.
- If the off-ramp is treated as a money-changing service (MSO), MSO licensing from HKMA via Customs & Excise applies, adding another licensing layer.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SFC — VATP licensing (AMLO Part 5B), Type 1/7 for security tokens, enforcement
HKMA — Stablecoin regulation (Stablecoins Ordinance expected 2025-2026), banking, Fintech Supervisory Sandbox
FSTB — Financial services policy, legislative proposals for virtual assets
JFIU — Joint Financial Intelligence Unit — suspicious transaction reports
AMLO Part 5B (Cap 615, amended 2023) (2023) — Mandatory VATP licensing — effective June 1, 2023. All platforms, retail + institutional.
VASP: VATP license from SFC mandatory since June 2023. HKD 5M (~$640K USD) minimum paid-up capital. SFC Type 1 (HKD 3M) / Type 7 (HKD 5M) for security tokens. 98% cold storage requirement (one of strictest globally). Retail trading allowed only for approved tokens. 12-18 month application timeline. OSL and HashKey were first licensees.
CUSTODY: Included under VATP license. Client assets on trust, segregated. Insurance required against cyber risks/theft. Robust private key management.
EXCHANGE: VATP license required for all centralized exchanges serving HK public. OTC desks currently unregulated but SFC signaling future regulation. Banks (HSBC, StanChart) directed by HKMA to bank licensed firms.
Hong Kong Monetary Authority (HKMA): Regulates fiat-referenced stablecoin (FRS) issuers under the Stablecoins Ordinance (Cap. 656, effective August 1, 2025); licenses required for issuing FRS in Hong Kong or pegged to HKD globally, including marketing restrictions.
Securities and Futures Commission (SFC): Oversees VATPs, licensing under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615, amended 2022), and Securities and Futures Ordinance (SFO, Cap. 571); requires licenses for VATPs operating in or marketing to Hong Kong since June 1, 2023.
Evidence fact hk.tax not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program in Hong Kong requires a SFC VATP license (or a licensed VATP partner) for the crypto-off-ramp, likely an MSO licence for fiat transfer, and potentially an SVF licence (HKMA) for stored value; stablecoin funding adds HKMA Stablecoins Ordinance licensing; a local entity and bank/BIN-sponsor partnership are essential, creating a multi-licence, multi-regulator compliance burden.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?