Hong Kong Virtual Asset License Guide 2026: SFC VATP Framework, Types, Fees, and Compliance
Contents
Reviewed by Jim Liu — Australian-based investor with 5 years tracking Hong Kong financial regulation (MPF, IPO subscription, REITs, crypto ETFs) across a 5-site portfolio (LowRiskTradeSmart, OpenAIToolsHub, AlphaGain, SubSaver, LevelWalks). Cross-checked against the SFC public register and AMLO Schedule 3B as of May 2026. Not financial advice. Licensing rules change. Confirm current status on the SFC and HKMA websites before transacting.
TL;DR
- The Hong Kong Virtual Asset Service Provider (VATP) license has been mandatory under AMLO Schedule 3B since 1 June 2023. Operating a VA exchange to Hong Kong retail without it is a criminal offence.
- Minimum financial bar: HK$5 million paid-up share capital, HK$3 million liquid capital, plus 12 months of operating-expense liquidity buffer (per SFC Guidelines for VATP Operators, paragraph 7).
- Two fully licensed VATPs serving retail as of May 2026: HashKey Exchange (HKVAX licence VASP-001) and OSL Exchange (VASP-002), both authorised since August 2023.
- A VATP license is separate from SFO Type 1 / Type 7 / Type 9 — most exchanges need both because they handle security-token instruments alongside non-security virtual assets.
- The deemed-licensing transitional regime closed 1 June 2024. Operators who missed it cannot serve HK customers without going through full first-time application now.
- Verify any platform's status in 60 seconds: SFC public register → "Licensed Virtual Asset Trading Platforms" page. If the operator is not on that list, it is illegal for them to onboard HK retail.
Why Hong Kong Investors Should Read This
This is not a regulatory backwater. The VATP regime has direct effects on retail decisions:
- Hong Kong is one of three jurisdictions worldwide (with the EU's MiCA and Singapore's MAS PSA) where a retail-facing crypto exchange must hold a positive license to operate locally.
- The Hong Kong Bitcoin and Ethereum ETFs you can buy through a regulated broker only execute through licensed VATPs — the license sits underneath your ETF.
- Misunderstanding the boundary between SFC VATP licensing and HKMA stablecoin licensing leads investors to over-trust unlicensed offshore platforms.
Read the HKMA stablecoin regulation guide for the parallel payments-side framework, and the Hong Kong Bitcoin ETF guide for the listed-product layer that sits on top of these licensed exchanges.
What Is a VATP License?
A Virtual Asset Service Provider license is granted by the Securities and Futures Commission (SFC) under Schedule 3B of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). It authorises an entity to operate a centralised virtual asset trading platform that provides services to Hong Kong customers — including retail.
The regime took effect on 1 June 2023. It replaced the earlier opt-in regime that operated through SFO Type 1 and Type 7 licensing for security-token-only platforms, and extended SFC supervision to non-security virtual assets (Bitcoin, Ether and so on) for the first time.
The legal trigger is broad. Per the SFC's published guidance, a person is carrying on a regulated VA service in Hong Kong if any one of the following applies:
| Trigger | What It Catches |
|---|---|
| Active marketing to HK public | Includes paid ads, influencer partnerships, search advertising targeting .hk |
| Onboarding HK residents | Even if servers, staff and corporate seat are entirely offshore |
| Operating a platform in Hong Kong | Physical operations, regardless of customer location |
| Offering custody bundled with trading | Custody-only is covered under a separate Trust or Company Service Provider regime |
The territorial reach is wider than most operators expect. Per SFC enforcement statements, simply having Hong Kong residents who can complete sign-up triggers licensing, regardless of whether the platform's domain is .com or .hk.
VATP vs SFO Type 1 / 7 / 9: How They Stack
The three licenses are not alternatives. They cover different activity slices:
| License | Activity | Statute | Issuer |
|---|---|---|---|
| VATP | Centralised exchange of non-security virtual assets to HK customers | AMLO Schedule 3B | SFC |
| Type 1 | Dealing in securities (includes security tokens) | SFO Part V | SFC |
| Type 7 | Provision of automated trading services for securities | SFO Part V | SFC |
| Type 9 | Asset management (includes managing virtual asset funds) | SFO Part V | SFC |
In practice, a full-service Hong Kong exchange usually holds VATP + Type 1 + Type 7 because most listing pools mix non-security tokens (covered by VATP only) with tokenised securities and ETF-wrapped products (covered by Type 1 / 7). A platform that runs a fund product on top adds Type 9.
The SFC published Joint Circular guidance in October 2023 confirming that a single Hong Kong entity can hold all four classes simultaneously, with a unified compliance manual and one risk officer covering both AMLO and SFO obligations.
Capital and Financial Requirements
Per the SFC Guidelines for Virtual Asset Trading Platform Operators (June 2023 edition, paragraph 7):
- HK$5 million paid-up share capital floor (unchanged since the regime launched).
- HK$3 million in liquid capital at all times.
- 12 months of operating expenses held as excess liquid capital — calculated on a rolling forward-looking basis.
- Reserve assets must be held with a licensed bank in Hong Kong, segregated from operator's own funds.
- Insurance or compensation arrangements covering 50% of client virtual assets in hot wallets and 80% of client virtual assets in cold storage.
- Independent audit annually, with the audit report filed with the SFC within four months of financial year end.
The insurance requirement is the line item that surprises most applicants. Per market consultation in 2024, two of the three withdrawn deemed-licensing applicants cited the insurance procurement difficulty as the deciding factor.
Application Process and Timeline
The SFC publishes target turnaround times for first-time applications, but the practical timeline runs longer:
- Pre-submission engagement — informal meetings with the SFC's Fintech Unit, typically 1–3 months.
- Formal application — Form A submission with full application pack (compliance manual, custody arrangements, key personnel CVs, business plan).
- Substantive review — 6 to 12 months in practice for greenfield applicants; faster if the applicant already holds Type 1 / Type 7 with a clean record.
- Conditions and approval-in-principle — SFC typically issues a list of pre-launch conditions before final approval.
- Final license grant — license number issued in the VASP-XXX series.
Per SFC public statements, total elapsed time from first-meeting to grant has run 18 to 24 months for the operators licensed so far. The two operators that received their licenses in August 2023 had been in the SFC opt-in regime since 2021 — they had a head start of nearly two years.
Fees
The SFC's fee schedule for VATP applicants (as of May 2026, per the SFC's gazetted fee schedule):
- Application fee: HK$23,070 per applicant (one-time, non-refundable).
- Annual licence fee: HK$15,380 for each responsible officer slot.
- Variation fee: HK$4,800 for material changes (e.g., adding a new token to the supported list, changing custody arrangements).
- Late filing surcharge: HK$1,000 per day after the prescribed deadline.
These fees are trivial compared with the compliance build cost. Per industry consultations published in 2024 and 2025, the typical greenfield VATP applicant spent HK$30 to HK$80 million on the compliance, technology and capital stack before opening to customers.
Licensed Operators (Public Register Cross-Check)
The SFC maintains a public "List of Licensed Virtual Asset Trading Platforms" on its website. As of the May 2026 snapshot used for this guide, the fully licensed operators serving retail were:
| Operator | License Number | Status | Notes |
|---|---|---|---|
| HashKey Exchange (HKVAX) | VASP-001 | Active | Retail trading from Aug 2023 |
| OSL Digital Securities | VASP-002 | Active | Retail trading from Aug 2023 |
A larger group sits in the deemed-licensing applicant bucket from the 2023–24 transitional regime. Some of those applications were withdrawn during 2024 and 2025 after the SFC issued return-of-funds directions, including widely reported withdrawals by global platforms that decided the HK retail market was not worth the build cost.
How to verify in 60 seconds:
- Open the SFC website (sfc.hk).
- Navigate to "Regulatory Functions" → "Intermediaries" → "Licensed Persons and Registered Institutions".
- Filter for "Licensed Virtual Asset Trading Platforms".
- If the operator's exact legal name is not on that list, it is not licensed.
The trap is that some operators advertise to HK with "registered" or "in licensing" status. Per the SFC's repeated public warnings, only the fully granted VATP license allows retail onboarding. Anything less is a violation.
What Retail Investors Should Actually Check
Before funding any virtual asset exchange that markets to Hong Kong, walk through this checklist:
- License number visible. Licensed operators always publish their VASP-XXX number in their Hong Kong terms of service.
- Cross-check the SFC register. Match the exact legal entity name to the SFC's published list.
- Confirm custody segregation. Licensed operators disclose their custodian bank in their fee schedule or T&Cs. If you cannot find it, ask compliance directly.
- Read the insurance disclosure. The hot-wallet 50% and cold-storage 80% lines are mandatory. Their absence is a red flag.
- Check the supported-token list. Only tokens approved by the SFC for retail trading can appear. Per current SFC policy, this includes Bitcoin, Ether and a short list of large-cap tokens. Any token outside this list cannot be offered to retail.
- Confirm withdrawal procedure. Licensed operators must process withdrawals within the timeframe stated in their disclosure. Stalled withdrawals are typically the first signal of trouble.
This is the same checklist used by experienced HK investors who switched from offshore platforms to licensed VATPs in 2023–24.
How VATP Connects to HK Crypto ETFs
The Hong Kong spot Bitcoin and Ether ETFs launched in April 2024 execute their underlying purchases through licensed VATPs. The chain is: ETF asset manager → licensed prime broker (typically OSL or HashKey) → on-exchange execution.
This is why the Hong Kong Bitcoin ETF allocation guide treats the VATP license layer as a structural feature. The ETF wrap inherits whatever protection the VATP license provides — segregation, insurance, audit. That is the regulatory reason these products exist in Hong Kong before they exist in many comparable jurisdictions.
HK vs Singapore vs EU MiCA Comparison
The three jurisdictions chose different regulatory tones:
| Dimension | Hong Kong (SFC VATP) | Singapore (MAS PSA) | EU MiCA |
|---|---|---|---|
| Effective date | 1 Jun 2023 | Phased since 2020 | 30 Dec 2024 |
| Retail allowed | Yes, but restricted token list | Yes, with risk disclosures | Yes, with conduct rules |
| Capital floor | HK$5M | S$250K (DPT) to S$1.5M (e-money) | EUR 150K (CASP) |
| Insurance mandate | 50% hot / 80% cold | Risk-based | Risk-based |
| Token coverage | Non-securities only (securities go to Type 1/7) | All digital payment tokens | All crypto-assets ex CBDC |
| Custody scope | Bundled with trading | Separate DPT licence | CASP class 4 |
| Total licensed (May 2026) | 2 fully retail-licensed | ~15 MPI under PSA | 40+ CASP authorisations |
The Hong Kong regime is the strictest of the three by capital and insurance bar. That is also why the licensed operator count is the smallest — and why some global platforms have walked away.
FAQ
Q: Do I need a VATP licence to invest in crypto in Hong Kong? A: No. Retail investors do not need a licence to hold or trade virtual assets. The licence applies to the operator of the trading platform. As a customer, you should ensure the platform you use is licensed.
Q: Is a VATP licence the same thing as the HKMA stablecoin licence? A: No. VATP licensing (under SFC) covers exchanges that trade non-security virtual assets. HKMA stablecoin licensing (under the Stablecoins Ordinance, effective 1 Aug 2025) covers issuers of fiat-referenced stablecoins. Most large operators end up needing both because they trade stablecoins on the exchange and may also wish to issue one.
Q: How long does the application take? A: Per SFC public statements, 18 to 24 months elapsed time has been typical for greenfield applicants. Operators already holding SFO Type 1 / Type 7 licenses with clean records have moved faster.
Q: What does "deemed licensing" mean? A: It was a transitional regime that ran from 1 June 2023 to 1 June 2024, allowing pre-existing operators to continue trading while their applications were assessed. It is now closed. New applicants must go through the standard process.
Q: Can offshore platforms continue to serve HK customers? A: Only if they have either (a) a VATP licence or (b) demonstrably do not market to or onboard HK residents. The SFC has issued multiple enforcement warnings and prosecuted unlicensed solicitation cases.
Q: How much capital do I need to apply? A: HK$5 million paid-up share capital and HK$3 million liquid capital are the statutory minima. In practice, total build cost runs HK$30 to HK$80 million before launch when you include technology, custody, insurance and compliance personnel.
Q: Are decentralised exchanges (DEXs) caught? A: The SFC has indicated it considers a "centralised arranger" test. Pure peer-to-peer DEXs without a controlling operator are not caught. DEXs with a front-end that markets to HK retail likely are. The SFC has reserved guidance for case-by-case determinations.
Q: Where can I check whether a specific platform is licensed? A: SFC public register, "List of Licensed Virtual Asset Trading Platforms" page. Cross-check the exact legal entity name. The retail-licensed list as of May 2026 contains only HashKey Exchange (VASP-001) and OSL Digital Securities (VASP-002).
Methodology
Data sources for this guide:
- AMLO Schedule 3B — the statutory basis for the VATP licensing regime, as enacted by the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 and effective 1 June 2023.
- SFC Guidelines for Virtual Asset Trading Platform Operators (June 2023 edition) — capital, custody, insurance and conduct rules.
- SFC public register — "List of Licensed Virtual Asset Trading Platforms" page, accessed for the May 2026 snapshot used in this guide.
- SFC fee schedule — the gazetted fees applicable to VATP applicants and licensees, as referenced in the Securities and Futures (Fees) Rules.
- HKMA Stablecoins Ordinance (effective 1 Aug 2025) — for the boundary between VATP licensing and stablecoin licensing.
- Cross-checked against Joint SFC–HKMA circulars and public consultation summaries issued between June 2023 and May 2026.
No estimated numbers. Where the regulator has not published a figure, this guide says so explicitly.
Affiliate Disclosure
LowRiskTradeSmart maintains affiliate relationships with selected licensed brokers and exchanges. This guide does not link to any VATP operator's sign-up flow and earns no commission from any of the licensed operators discussed above. Any future commercial relationships will be disclosed at the point of link.
Not Financial Advice
This guide provides regulatory and general information. It is not investment advice, not a recommendation to use any specific platform, and not a substitute for professional tax or legal counsel. Licensing rules and operator status change. Verify current status on the SFC and HKMA websites before transacting. Past licensing approvals do not guarantee future operator solvency.