Hong Kong crypto license 2026 — SFC VASP licence
Hong Kong switched on its VASP regime on 1 June 2023, supervised by the SFC under AML Ordinance Cap. 615. The VATP licence covers centralised exchanges serving Hong Kong investors; where the assets are securities, the SFO Type 1 and Type 7 licences apply in parallel. The bar is investor-protection-heavy.
A regime built quickly, then bedded in
For most of the last decade Hong Kong's crypto position read as a study in restraint — interested, exploratory, but not quite committed. That changed with the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022, which came into force on 1 June 2023. The legislation introduced licensing for Virtual Asset Service Providers, supervised by the Securities and Futures Commission, and codified it inside Hong Kong's existing AML ordinance — Cap. 615.
What that did, in effect, was bring centralised virtual-asset trading platforms inside a real regulatory perimeter — investor protection, custody, AML — in a way Hong Kong had not done before. The regime is now bedded in, and it is not a fast door. The core activity caught is operating a Virtual Asset Trading Platform: a centralised exchange that lets participants buy or sell virtual assets, and a platform serving Hong Kong investors, including retail, needs a VASP licence from the SFC.
The parallel SFO route founders miss
This is the part founders frequently miss. Where the virtual assets traded are securities or futures — a fact-specific question turning on the legal nature of the token, not on labels — SFC licensing under the Securities and Futures Ordinance applies in parallel. In practice that typically means a Type 1 (dealing in securities) and Type 7 (automated trading services) licence, on top of or instead of the VASP licence under Cap. 615.
A platform that picks 'we'll get a VASP licence and that's it' without classifying the assets has scoped against one half of the regime. Counsel that does the classification before drawing up the licensing plan is doing the right work. The diagnostic is simple: classify the virtual assets first, then map the licensing — VASP under Cap. 615 alone, the SFO Type 1/7 in parallel, or both.
Substance, and the EU caveat
The substance test in Hong Kong is the test in every serious jurisdiction. The SFC expects real local presence: management actually based in Hong Kong, compliance leadership in the jurisdiction, and operations that run from there rather than being controlled at distance. A nameplate Hong Kong entity layered over a team in another time zone is exactly the structure that does not get over the line.
A Hong Kong VASP licence authorises activity in and from Hong Kong. It is not an EU authorisation and does not passport into EU member states. A firm whose market is the EU needs a MiCA CASP authorisation in an EU member state; a firm building for Hong Kong or the wider region is in the SFC's territory; and a firm targeting both is, predictably, a two-licence project. The firms in this index with Asia-Pacific experience are listed below.
Hong Kong VASP licensing is the regime introduced by the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 — in force from 1 June 2023 and codified in Cap. 615 — under which the Securities and Futures Commission (SFC) licenses Virtual Asset Service Providers, with Virtual Asset Trading Platform (VATP) licensing covering centralised exchanges that serve Hong Kong investors.
Fast facts
| Parameter | Value |
|---|---|
| Regulator | Securities and Futures Commission (SFC) |
| Legal basis | AML Ordinance Cap. 615 — VASP regime, in force 1 June 2023 |
| Core licence | VATP licence — operating a Virtual Asset Trading Platform serving Hong Kong investors |
| Parallel route | SFO Type 1 and Type 7 licences where the virtual assets are securities or futures |
| Profile | Investor-protection-heavy — custody, segregation, listing policy, conduct, and AML standards are demanding |
| Substance | Real Hong Kong presence — local management, compliance leadership, and operations in the jurisdiction |
| EU passport | None — a Hong Kong VASP licence does not reach the EU market |
Top counsel for Hong Kong CASP work
Firms below are ranked according to the published CLPAI methodology. Featured selections cover firms with documented Hong Kong engagement, regardless of where they are headquartered.
Frequently asked questions about Hong Kong CASP authorisation
Who regulates crypto in Hong Kong?
The Securities and Futures Commission (SFC) regulates virtual-asset service providers under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and, where the assets are securities, under the Securities and Futures Ordinance.
When did the Hong Kong VASP licensing regime start?
On 1 June 2023, when the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 came into force. It introduced SFC licensing for Virtual Asset Service Providers.
What licence does a Hong Kong crypto exchange need?
A Virtual Asset Trading Platform (VATP) licence from the SFC under Cap. 615. Where the virtual assets are securities or futures, the SFC's Type 1 and Type 7 licences under the SFO apply in parallel.
Does a Hong Kong VASP licence reach the EU?
No. Hong Kong is not an EU member state, so a VASP licence does not passport into the EU. A firm serving EU customers needs a MiCA CASP authorisation in an EU member state.
Pitfalls and nuances in Hong Kong
1 Treating the AML route as the only route
Hong Kong runs two regimes in parallel. The VASP licence under Cap. 615 covers virtual assets that are not securities. Where the virtual assets are securities or futures — a fact-specific question — the SFC's Type 1 and Type 7 licences under the Securities and Futures Ordinance apply on top. A platform that picks one regime without checking the asset classification has scoped the file against the wrong rulebook.
2 Reading 'crypto-friendly Hong Kong' as light-touch
Hong Kong opened the door to retail virtual-asset trading inside the VASP regime, and that opening is real. But the trade-off is a demanding investor-protection bar: custody, segregation, listing policy, and AML standards are heavy. Light-touch is not the SFC's posture, and a firm scoping HK as a fast door has misread the regulator.
3 Underestimating substance for a Hong Kong licence
The SFC expects real Hong Kong presence — local management, compliance leadership in Hong Kong, and operations actually running from the jurisdiction. A nameplate Hong Kong entity with a remote team is a recognised structure, and not one that gets a VATP licence over the line.
4 Assuming the Hong Kong licence covers the EU
A VASP licence authorises activity for the Hong Kong market. It does not passport into the EU. A firm with EU customers needs a MiCA CASP authorisation in an EU member state, regardless of the strength of its Hong Kong setup.
Regulator and primary sources
The supervisor of CASP authorisations in Hong Kong is Securities and Futures Commission (SFC). The legal basis is Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 (Cap. 615) — VASP regime, in force from 1 June 2023. Visit www.sfc.hk/en/Welcome-to-the-Fintech-Contact-Point/Virtual-assets for the regulator's official guidance, application forms, and supervisory expectations.