Home / Jurisdictions / Hong Kong — SFC VASP

🇭🇰 Hong Kong — Tier-1 Asia

Hong Kong — SFC VASP licence.

The Securities and Futures Commission's VASP regime requires operators to hold a licence before serving retail customers in Hong Kong.

Timeline

10—15 mo

Filing to grant

Min. Capital

HKD 5M

~USD 640K

Year-1 Cost

HKD 3.5—6M

~USD 450K—770K

Regulator

SFC

Securities & Futures Commission

01 — Is this right for you?

A considered route,
not a shortcut.

This jurisdiction rewards operators who treat the application as the start of a supervisory relationship.

A strong fit

When this is the right choice

Institutional exchanges & broker-dealers

Hong Kong's VASP regime is built for operators serving professional investors. The SFC framework integrates cleanly with traditional Type 1 securities permissions and family-office channels.

Asia-Pacific institutional asset managers

Hong Kong is the natural domicile for digital-asset funds serving HK-based and APAC family offices. The fund-management overlay is well-established and increasingly crypto-permitted.

Operators with substantial regulatory budget

SFC expects USD 450K+ in year-one substance plus a Responsible Officer team. Operators who can support this acquire one of the strongest brand signals available to Asian crypto.

A poor fit

When to consider an alternative

Retail-only crypto brands

Hong Kong permits retail crypto but with prescriptive product, custody, and disclosure rules. Retail-focused brands without the cost base for tier-1 substance are better served by Labuan or Lithuania.

Mainland-China-facing operations

Hong Kong does not legalise mainland-China activity. Operators must geofence aggressively and document non-mainland focus. The recent uplift in cross-border enforcement makes this non-trivial.

Bootstrap or pre-revenue operators

SFC review is intolerant of pre-revenue applicants without strong founder track record. Many applicants pre-revenue are asked to defer until commercial traction materialises.

02 — Licence categories

Permissions under
one Act.

Choosing the right tier and scope is the most consequential decision in the application.

Type 1 / VASP — Securities & Crypto

Combined permission for operators dealing in both securities and virtual assets. Mandatory for tokenised securities, security tokens, and dual-permission exchanges.

Type 7 — Automated Trading Service

Permits operating an automated execution venue for virtual assets — exchanges and OTC desks operating principal-risk books. Tighter capital and Responsible Officer expectations.

Type 9 — Asset Management (VA-permitted)

The fund-management permission, with a virtual-asset extension permitting up to 100% portfolio exposure to digital assets for professional-investor funds.

03 — Path to grant

Phases to licence grant.

Substance build-out

Months 1—4

Establish meaningful Hong Kong substance — physical office, resident senior management, and compliance team. Technology infrastructure and AML framework built to SFC expectations.

Application submission

Months 4—5

Application submitted to the SFC with full documentation: business plan, AML/CFT programme, custody arrangements, risk management policies, and key person CVs.

SFC review & RFI

Months 5—12

SFC conducts detailed review and typically issues multiple rounds of requests for information. Cyber resilience assessment and fit-and-proper evaluation of all key persons.

Conditional approval & go-live

Months 12—15

Conditional approval issued. Remaining conditions met — insurance, recovery planning, and operational testing. Full VASP licence granted and operations commence.

04 — Year-one economics

Cost and regulatory
burden.

Year-one spend is dominated by substance — resident director, office, compliance officer, external audit — not the licence fee itself.

Cost item	Amount
SFC application fee	HKD 30,000
Annual licensing fee (per RO)	HKD 5,000
Paid-up capital (locked)	HKD 5,000,000
HK substance — office, ROs, MLRO	HKD 2,500,000—4,500,000 / yr
External audit, custody, insurance	HKD 800,000—1,500,000 / yr
Year-1 total	~HKD 3.5M — 6M

Hong Kong profits tax: 16.5% on first HKD 2M, 8.25% above. No capital gains tax. No GST/VAT on digital assets. Treaty network covers most major OECD partners and key mainland-China-via-CDTA scenarios.

05 — Common questions

What founders
ask before filing.

The questions we get on every diagnostic call. If yours isn't here, raise it in the consultation.

Every SFC-licensed corporation must appoint at least two Responsible Officers (ROs), each registered with the SFC, with substantive industry experience and personal accountability for the licensed activity. ROs must be Hong Kong-resident or available to attend HK on demand. Practically, this is the most binding constraint on application timing — assembling a credible RO pair is often the gating step.

Yes — the licensee must be a Hong Kong-incorporated company, but foreign ownership is unrestricted. Most VASP applicants are foreign-controlled groups with a HK subsidiary purpose-built for the licence. Local substance — office, employees, ROs — must be real, not nominee.

No. Hong Kong VASP licensees are explicitly required to geofence mainland-China users and document the non-mainland focus of their marketing and onboarding. Enforcement actions in 2024—2025 have made this a priority area. Operators cannot rely on reverse-solicitation arguments for mainland-China retail.

Comparable prestige but different operating models. MAS is generally faster post-application (9—12 months versus HK 10—15 months), with lower nominal paid-up capital. HK has the stronger fund-management overlay, the stronger family-office channel, and Chinese-language regulator capacity. The two are increasingly run in parallel by serious institutional operators.

Quarterly and annual reporting to the SFC, statutory annual audit, ongoing fitness-and-properness of ROs and substantial shareholders, AML/CFT reporting to JFIU, prudential capital monitoring, and ongoing notification of changes in business model, product offerings, or key personnel. SFC supervision is active and frequent.

Ready when you are

Tell us where
you want to
operate.

Forty-five minutes with a partner. Jurisdiction memo within seven days. No retainer required to start.

Book a consultation Send us a brief

45 min

First call with a partner.
No retainer required.

Hong Kong — SFC VASP licence.

A considered route,not a shortcut.