← Back to APAC FINSTAB

⚠️ Am I Operating Illegally?

Hong Kong Crypto Business Compliance Check — Free Instant Assessment

🚨 Operating Without a License is a Criminal Offense

Since June 1, 2023, all Virtual Asset Trading Platforms serving Hong Kong must hold an SFC license.

HKD 5M
Maximum Fine
7 Years
Prison Sentence
HKD 100K/day
Continuing Offense

🔍 Quick Compliance Self-Check

Answer 5 questions to get your preliminary compliance status

Question 1 of 5

Are you operating a crypto trading platform or exchange?

This includes centralized exchanges, DEX interfaces, swap services, or any platform matching buyers/sellers of virtual assets.

Yes, I operate a trading platform
I run an OTC desk only
I only provide custody/wallet services
No, none of the above
Question 2 of 5

Who are your customers?

Select the primary customer base you serve or market to.

Hong Kong retail customers
Hong Kong professional investors only
Global, but I actively market to Hong Kong
No Hong Kong customers, no HK marketing
Question 3 of 5

Do you hold or control customer funds/assets?

This includes holding crypto in wallets, managing private keys, or holding fiat on behalf of customers.

Yes, I custody customer assets
Temporarily during transactions only
No, fully non-custodial
Question 4 of 5

What is your current licensing status?

I hold a valid SFC VASP license
Application submitted, pending approval
Operating under deemed license (transition period)
No license, no application
Question 5 of 5

Where is your business registered?

Hong Kong registered company
Offshore, but with HK office/staff
Offshore, no physical HK presence
🚨
HIGH RISK: Likely Operating Illegally

Based on your answers, your business activities likely require an SFC VASP license that you do not currently hold.

⚠️ Your Risk Factors:

📋 Immediate Actions Required:

  • Cease operations to Hong Kong customers until licensed
  • Seek legal advice immediately about voluntary disclosure
  • Assess license eligibility and begin application process
  • Document compliance efforts to demonstrate good faith
Get Full Compliance Report → View License Requirements
⚠️
MEDIUM RISK: Compliance Unclear

Your situation has some complexity. You may need a license depending on specific conditions.

🔍 Conditions to Verify:

📋 Recommended Actions:

  • Conduct detailed legal review of your specific activities
  • Document your customer base and marketing reach
  • Assess if exemptions apply to your business model
  • Consider preemptive license application if growth is planned
Get Detailed Assessment → Check Exemptions
✅
LOW RISK: Likely Compliant

Based on your answers, your business appears to be operating within compliance requirements.

✓ Your Compliance Factors:

📋 Maintain Compliance:

  • Monitor regulatory changes that may affect your status
  • Document your business model and customer restrictions
  • Re-assess if expanding into new markets or services
Get Compliance Updates

💀 What Happens If You're Caught Operating Illegally?

Violation Penalty
Operating VATP without license HKD 5,000,000 fine + 7 years imprisonment
Continuing offense (per day) Additional HKD 100,000 per day
Marketing unlicensed services to HK public HKD 5,000,000 fine + 7 years imprisonment
AML/CTF violations HKD 1,000,000 fine + 2 years imprisonment

📌 Real Enforcement: SFC Actions in 2025-2026

The SFC has actively pursued unlicensed operators. In 2025 alone:

Being on the SFC Alert List destroys business credibility — banks and partners will immediately cut ties.

❓ Frequently Asked Questions

What if I'm based overseas but have Hong Kong customers?

If you actively market to Hong Kong residents, you need a license regardless of where your company is registered. "Actively marketing" includes: advertising targeting HK, having HK-specific content, accepting HKD, or having significant HK user traffic.

My DEX is fully decentralized. Do I need a license?

If there is any centralized component (frontend, governance token, fee collection, admin keys), the SFC may consider it a VATP requiring licensing. Pure smart contracts without any controlling entity may be exempt, but this is a narrow and frequently misapplied exemption.

I only serve professional investors. Am I exempt?

There are some exemptions for platforms serving only Professional Investors (as defined under SFO). However, you still need to verify PI status properly and may still need Type 1/Type 7 licenses under the SFO rather than AMLO VASP license.

The transition period hasn't ended for me, right?

The transition period for pre-existing operators ended on May 31, 2024. If you did not submit an application by then, you cannot claim deemed license status. Operating now without a license or pending application is illegal.

Can I just block Hong Kong IPs and be safe?

IP blocking alone is not sufficient. The SFC looks at: marketing materials, language targeting, payment methods accepted, actual user base, and overall business intent. A VPN-savvy HK user accessing your platform could still create liability.

What should I do if I'm currently operating without a license?

Seek legal advice immediately. Options may include: voluntary disclosure to SFC (may reduce penalties), ceasing HK operations, pursuing license application, or restructuring business model. Acting in good faith before enforcement is better than after.

🛡️ Don't Risk Your Business

Get a detailed compliance assessment and clear next steps.

Get Full Compliance Report →

Powered by APAC FINSTAB Compliance Preflight API

📚 Related Resources

Disclaimer: This self-assessment tool provides general guidance only and does not constitute legal advice. Compliance requirements depend on specific circumstances. Consult with qualified legal counsel for definitive advice.

© 2026 APAC FINSTAB · Privacy · Terms