On-shore VASP in Hong Kong
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Hong Kong with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VATP license holders must comply with AMLO Part 5B (Cap 615) AML/CTF obligations
- Travel Rule applies — threshold of HKD 8,000 per transaction
- Suspicious Transaction Reports (STRs) must be filed with JFIU (Joint Financial Intelligence Unit)
- Customer due diligence (CDD) and ongoing monitoring required under AMLO
- Compliance audits required under AMLO and Companies Ordinance Cap. 622
- SFC supervises AML compliance for VATP licensees
Key Restrictions
- 98% of client crypto assets must be held in cold storage — one of the strictest cold-storage requirements globally
- Retail trading allowed only for tokens approved by SFC on a whitelist
- Client assets must be held on trust, segregated, and insured against cyber risks/theft
- Robust private key management policies required
- HKD 5M (~$640K USD) minimum paid-up capital for VATP license; separate HKD 3M (Type 1) / HKD 5M (Type 7) for security tokens
- Must be locally incorporated in Hong Kong
Key Risks
- SFC enforcement is active — assessments include 'financial status or solvency' and 'financial integrity' with misconduct fines
- Application timeline is 12-18 months — significant time-to-market risk
- Stablecoins Ordinance pending (expected 2025-2026) — regulatory landscape evolving
- OTC desks currently unregulated but SFC has signaled future regulation, creating potential scope creep
- Deemed-to-be-licensed (DTBL) list exists but these entities are not yet fully licensed — regulatory limbo risk
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SFC — VATP licensing (AMLO Part 5B), Type 1/7 for security tokens, enforcement
HKMA — Stablecoin regulation (Stablecoins Ordinance expected 2025-2026), banking, Fintech Supervisory Sandbox
FSTB — Financial services policy, legislative proposals for virtual assets
JFIU — Joint Financial Intelligence Unit — suspicious transaction reports
AMLO Part 5B (Cap 615, amended 2023) (2023) — Mandatory VATP licensing — effective June 1, 2023. All platforms, retail + institutional.
Securities and Futures Ordinance (SFO) (2003) — Type 1/Type 7 licensing for security token dealing and automated trading
VASP: VATP license from SFC mandatory since June 2023. HKD 5M (~$640K USD) minimum paid-up capital. SFC Type 1 (HKD 3M) / Type 7 (HKD 5M) for security tokens. 98% cold storage requirement (one of strictest globally). Retail trading allowed only for approved tokens. 12-18 month application timeline. OSL and HashKey were first licensees.
CUSTODY: Included under VATP license. Client assets on trust, segregated. Insurance required against cyber risks/theft. Robust private key management.
EXCHANGE: VATP license required for all centralized exchanges serving HK public. OTC desks currently unregulated but SFC signaling future regulation. Banks (HSBC, StanChart) directed by HKMA to bank licensed firms.
Travel Rule adopted — threshold: HKD 8,000
HKMA FATF updates: https://www.hkma.gov.hk/eng/key-functions/banking/anti-money-laundering-and-counter-financing-of-terrorism/fatf-related-statments-update/
Evidence fact hk.tax not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a locally-incorporated on-shore VASP may operate in Hong Kong under a mandatory VATP license from the SFC (effective June 2023) with HKD 5M capital, 98% cold storage, SFC-approved token whitelist for retail, 12-18 month application timeline, and full AML/Travel Rule obligations (HKD 8,000 threshold).
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?