Anti-money laundering/risk control system

Hong Kong Xintong AML/CRM systemeDon TM Transaction MonitoringKYC identity verification systemrisk assessment system

Risk Assessment and Audit

Customized risk management and professional auditing,Build a business defense line。

Institutional Level Compliance System

Assist in establishing a comprehensive global compliance structure,Avoid regulatory risks,Ensure the stable operation of financial services。

Information and articlesContact us

Hong Kong VASP License Application and Ongoing Compliance

Hong Kong virtual asset trading platform is regulated by the Securities and Futures Commission of Hong Kong。Platforms should be based on business models、Whether the traded tokens are securities and applicable laws,Determine whether parallel applications are required under the Anti-Money Laundering Ordinance and the Securities and Futures Ordinance;Cannot put Category 1、Category 7 and VATP licenses are written as a fixed combination that applies to all platforms。

Lin Zixuan
Review and write:Lin Zixuan 💼 Served:international investment bank、Licensed securities trading company、asset management company 🎯 good at:SFC license (Type 1, 4, 9) Application and maintenance、RO/MIC Approval、internal control system、Client Asset Rules (FRR)、KYC/Anti-Money Laundering Policy

What is the Hong Kong VASP license? Which businesses are suitable for

HongkongVASP licenseBelongs to high standard financial regulatory license,Applicable to platform businesses operating in Hong Kong or actively providing virtual asset services to Hong Kong investors。Typical scenarios include:Virtual asset matching transactions、Broker matching、Some custody-related services and supporting customer asset processing procedures。

For organizations planning to settle in Hong Kong,It is recommended to complete the “Business Activity Mapping + Supervision Qualification” first,Avoid using technology as a service、Actually engaged in regulated activities in the name of information services。If you plan at the same timepay、Bank cooperation or cross-border structure,Can be combined Cross-border business compliance and Register an offshore company Do parallel design。

Hong Kong VASP License

Regulatory focus:SFC usually pays more attention to "substantial operations" rather than "surface product naming",Transaction closed loop、capital flow、Wallet control and customer access methods will be scrutinized。
Hong Kong Central Financial Street and International Financial Center
Hong Kong Central Financial and Commercial District。

Application thresholds and key compliance requirements

Corporate Governance and Equity Penetration

The ultimate beneficial owner needs to be clearly disclosed、Control relationships and division of functions within the group,Avoid opaque structures in high-risk jurisdictions。

Responsible Personnel and Suitable Persons

Management needs to have financial compliance、Risk control and operational experience;Key positions (such as RO/MLRO) should have verifiable resume and local responsiveness。

AML/CFT system

Including KYC、Customer Risk Rating、On-chain and off-chain transaction monitoring、Report suspicious transactions、Sanctions screening and record-keeping mechanisms。

Customer asset protection

Hosting architecture、Hot and cold wallet management、Private key permission control、Disaster preparedness and incident response must form an institutionalized evidence chain。

Technology and Internal Control Evidence

System flow chart needs to be submitted、permission matrix、Audit log strategy and outsourcing management framework,To demonstrate sustainable and compliant operations。

Continuous Compliance Mechanism

Training still needs to be maintained after the license is approved、audit、Regular declarations and major event reports,Regulatory burdens throughout the life cycle。

It is recommended to conduct a third-party gap assessment before applying,Clarify the compliance shortcomings that “must be completed first”。Hong Kong Xintong can be combined with Compliance risk assessment、Customized compliance documents and Mock review/regulatory inquiry,Align application materials with actual operational processes。

Application process and estimated timeline

1
Step 1 Regulatory Qualification and Feasibility Assessment

Sort out the business model、Customer type、Asset Classes and Trading Paths,Determine licensing boundaries and structural feasibility。

2
Step 2 Gap analysis and correction plan

Compare regulatory requirements to form a Gap List,Clarify the system、personnel、System and control point reinforcement sequence。

3
Step 3 Preparation of documents and evidence packages

Complete policy manual、risk assessment、flow chart、Job responsibilities、Outsourcing agreements, board resolutions and other materials。

4
Step 4 Formal submission and regulatory communication

Respond to inquiries in a unified manner,Focus on business essence、Supplement and explain the risk control logic and technical details。

5
Step 5 Interviews and simulation exercises

Conduct high-frequency Q&A drills with management,Ensure that “systems” are used in supervisory interviews、system、Personnel" responded unanimously。

6
Step 6 Check before going online after approval

Complete account opening、System joint debugging、Report templates and continuous monitoring mechanism,Ensuring operations can be carried out under prudent conditions。

Cycle reference:Common projects take about 6-12 months from preparation to license result,Complex shareholding structure、Cross-border customer model or system rectification will significantly lengthen the cycle。

Hong Kong SFC VASP (VATP) dual license application fee

Legal funds、Official expenses and project budget must be stated separately。The table below summarizes the core financial and operational requirements for VATP applications.:

project regulatory requirements
Paid-up share capital Not less than HK$5,000,000 at any time。
Liquid capital Maintain no less than "required liquid capital";The amount is the higher of HK$3,000,000 and the basic amount defined in the Guidelines。
12Monthly operating expenses Maintain beneficial ownership by the applicant in Hong Kong、Assets with sufficient liquidity,An amount equal to at least 12 months of actual operating expenses on a rolling basis;Virtual assets do not count towards this requirement。
external evaluation Engage an external assessment agency once relevant systems and controls are in place。Evaluate、system、law、office、Manpower and insurance belong to the project budget,Not additional authorized capital or unified bank margin。

The page no longer lists the HK$4 million bank guarantee that has no official basis.、HK$10 million in paid-in capital or fixed total budget for some businesses。Category 1、Whether VATP licenses under Category 7 and AMLO can be applied for in parallel?,Judgments should be made on an item-by-item basis based on the platform’s business and the nature of the tokens.。

budget caliber:Hong Kong projects use HKD uniformly;If parallel applications are involved for overseas licenses,Please model currencies separately by jurisdiction,Avoid exchange rate and tax errors。

Preparation for ongoing compliance and regulatory inspections after licensing

Getting a license is not the end。Hong Kong supervision puts more emphasis on "Continuously verifiable compliance”,include:Customer due diligence update、Suspicious transaction identification and reporting、Sanctions list screening、Outsourcing service provider governance、Incident reporting、Staff training and annual audit。It is recommended to establish a three-tier mechanism of "monthly monitoring + quarterly review + annual audit"。

For institutions that need to simultaneously optimize bank cooperation,Can be referenced How to open a bank account after holding an MSO (Money Services Operator) license in Hong Kong practical ideas;For risk control and penalty risks,Can follow Hong Kong Customs issues KYC and record keeping violations 32.8 10,000 HKD fine regulatory signals。


Clear reporting points after licensing

  • Monthly business activity reports are due within two weeks of the end of each calendar month。
  • The first independent annual compliance review report should be submitted within 18 months of approval;Subsequent reports are usually submitted within 4 months of the financial year end。
  • Maintain two responsible personnel,At least one of them shall be an executive director,and ensure that at least one responsible person ordinarily resident in Hong Kong oversees the business。

Information basis and last verification date:2026August。SFC VATP Licensing Handbook;SFC VATP regulatory information。

Regulatory Inquiry Plan

Default high-frequency inquiry library,Ensure legal affairs、Compliance、Technical and operational answers are consistent,Shorten repair time。

Data trace closed loop

Critical control points should all have timestamps、Responsible person and audit log,Support spot checks and traceability。

Cross-department training mechanism

Embed compliance requirements into products、customer service、Operational process,Reduce the "system has、"Weak execution" gap。

Software code on computer screen
Software code and system verification。

Frequently Asked Questions about Hong Kong Virtual Asset Trading Platform (VASP) License(FAQ)

Not all platforms hold the same combination。If the platform is involved in activities under both the Securities and Futures Ordinance and the Anti-Money Laundering Ordinance,,It is usually necessary to apply for corresponding permits in parallel;Whether Category 1 is involved、VATP license under Class 7 and AMLO,It should be judged on an item-by-item basis based on business functions and whether the tokens being traded are securities.。

The minimum paid-up share capital is HK$5 million;Liquid capital must be maintained at the higher of HK$3 million or the basic amount defined in the guidelines。At the same time, sufficient liquid assets must be maintained in Hong Kong,Cover at least 12 months of actual operating expenses on a rolling basis,Virtual assets do not count towards this liquid asset requirement。

At least two approved responsible persons are required,At least one of them shall be an executive director,and at least one of them is usually resident in Hong Kong。The executive director and the Hong Kong resident do not have to be the same person;Must have real supervisory authority and be qualified、experience、qualifications、Examination or applicable exemption requirements,You cannot write a fixed three years of encryption experience into a unified standard。 SeeSFC VATP Licensing Manual。

In principle, client assets are held in trust by related entities,The affiliated entity shall not engage in business other than receiving or holding platform customer assets.。cold storage、Private key location、Compensation arrangements and custody structures should be implemented in accordance with the latest VATP terms and actual system architecture,A single generalization cannot be used as a substitute for complete requirements。

The authorized share capital should be、Liquid capital and Hong Kong rolling 12-month operating liquidity requirements,with official application fee、Evaluate、personnel、IT、Legal and ongoing operating expenses separate。Official information does not support the conclusion that all projects cost tens of millions of dollars or that offices in Central must be rented.。 SeeSFC VATP Licensing Manual。

cannot。Need to prepare application first、policy、people and systems,Cooperate with regulatory inquiries and external assessments;Formal permission is subject to fulfillment of all conditions。I have checked that the manual does not list 15 weeks or 12 to 18 months as the commitment period for each project.。 SeeSFC VATP Licensing Manual。

Should follow the enhanced process in 2025。Handbook requires relevant systems and controls after deployment,Direct attestation by a qualified external valuation expert and signed by a certified public accountant,At the Securities and Futures Commission、Executed under a tripartite arrangement between the applicant and experts;There should no longer be a default of the old two-stage approach or that it can only be undertaken by the Big Four。 SeeSFC VATP Licensing Manual。

Retail customer access、Can be included in virtual assets、Stablecoins and product restrictions must be based on the latest rules of SFC and HKMA、Token due diligence and platform approval conditions will be judged item by item.。Do not blanketly describe a class of assets as permanently prohibited,Nor may you provide unapproved derivatives or leverage services。

Stablecoin related activities、Tokens that can be included and retail transaction restrictions must be determined on a case-by-case basis based on the latest SFC and HKMA systems and platform license conditions.,The outdated absolute statement “stablecoins are banned” should not continue to be used。derivatives、Whether futures or leverage services are available,It still needs to be judged based on the nature of the product and the corresponding regulatory license.。

Operating a centralized virtual asset trading platform in Hong Kong or actively promoting it to Hong Kong investors may trigger SFC licensing requirements。Cannot be ignored on the grounds that the server or company is overseas;The consequences of violating the law must be judged according to the specific activities and the provisions of SFO or AMLO.。 SeeSecurities Regulatory Commission Licensing Instructions for Virtual Asset Trading Platform。

A single ratio cannot be accepted as the current uniform rule for all platforms and hosting arrangements。Must follow the latest VATP guidelines、Approval conditions and customer asset structure check and compensation arrangements、Coverage、Exclusions and deficiencies,and remain consistent with the actual insurance or other coverage documents。 SeeSFC VATP Licensing Manual。

cannot。Applicable AML guidelines should be followed、Institutional roles of both parties to the transfer、Judgment of required information and verification rules,The threshold does not mean that there is no customer due diligence or information obligation below this amount.。Policies and systems must match actual transfer patterns。 SeeSFC VATP Licensing Manual。

Must be submitted via SFC’s WINGS electronic system,You can also use the "Comprehensive Application Form" to apply for SFO Category 1/7 and VASP licenses under AMLO at the same time,However, the material preparation must be prepared in both directions。

Mainly due to insufficient qualifications of the responsible officer (RO)、Weak compliance framework、External evaluation report is not up to standard、Financial resources do not meet minimum requirements、KYC/customer protection measures are ineffective、or the business plan is not feasible。

Ongoing obligations include financial resources、audit accounts、Annual fees and declarations、CPT and eligibility requirements。Equity and licensing matters that require prior approval should be distinguished、Changes in persons and addresses that need to be notified,It cannot be generally assumed that all new tokens and all changes require the same approval。 SeeSFC VATP Licensing Manual。

Related entities defined in the manual must be established in Hong Kong、A wholly-owned subsidiary of the platform、Hold TCSP license,and notify the China Securities Regulatory Commission of related identities as required.;Its business should be limited to receiving or holding platform client assets,Cannot be regarded as an ordinary group company that can be mixed。 SeeSFC VATP Licensing Manual。

Arrangements for keeping electronic regulatory records only in data centers,The relevant data center must be approved by the Securities and Futures Commission,Whether located in Hong Kong or overseas。Outsourced service providers or group data centers should check record access and retention requirements,Cannot be automatically exempted from approval by cloud hosting。 SeeSFC VATP Licensing Manual。

Management structure subject to board approval,The MIC must identify the core functions for which it is responsible。After being licensed, notification of MIC appointment or change of designated information is usually required within seven business days.,Update organizational chart when applicable。 SeeSFC VATP Licensing Manual。

As of the time of checking the information of the China Securities Regulatory Commission,The company’s application fee for each SFO regulated activity and AMLO virtual asset service is HK$4,740 each.;Representative application fee is HK$1,790 per item,The approval fee for becoming an RO is HKD 2,950 per item。Dual licenses must be calculated based on each application project,Expert and consultant fees are additional。 SeeSecurities Regulatory Commission Licensing Instructions for Virtual Asset Trading Platform。

You can’t just close the website。Notification via WINGS should be made as soon as possible and at the latest seven business days before the intended cessation,Arrange for the return of client funds and assets,and apply for corresponding cancellation;After suspension, audited accounts and other information must be submitted within four months according to the manual.。 SeeSFC VATP Licensing Manual。

Contact
Agent
Gold License-Compliance Consultant8:00 AM – 11:00 PM
QR
13417046218
Scan the QR code to add WeChat
Hong Kong and Chinese team · Senior financial compliance experts