Current Landscape: 12 Licensed Platforms
Hong Kong has established itself as a serious player in regulated crypto markets. As of March 2026, the Securities and Futures Commission (SFC) has granted full VASP licenses to 12 virtual asset trading platforms—up from just 9 platforms in early 2025.
The most recent addition was VDX, which received its license in February 2026 for both Type 1 (securities trading) and Type 7 (automated trading services) regulated activities. Other notable licensees include OSL, HashKey, and Crypto.com—all household names in the institutional crypto space.
🔑 Key Takeaway
The 12 licensed platforms represent a carefully curated group. The SFC has rejected or pushed back on numerous applications, signaling that meeting baseline requirements is necessary but not sufficient—operational excellence and genuine compliance culture matter.
Understanding the Dual Licensing Regime
Hong Kong operates a unique dual licensing regime for virtual asset trading platforms. This isn't bureaucracy for its own sake—it reflects the hybrid nature of crypto assets, which can function as both securities and non-securities.
The Two Regimes
| Aspect | SFO Regime | AMLO Regime |
|---|---|---|
| Governing Law | Securities and Futures Ordinance | Anti-Money Laundering Ordinance |
| Licenses Required | Type 1 + Type 7 | VASP Registration |
| Coverage | Security tokens | Non-security virtual assets |
| Primary Focus | Investor protection, market conduct | AML/CFT compliance |
| Effective Since | November 2019 (opt-in), June 2023 (mandatory) | June 1, 2023 |
Why Both Are Mandatory
If you want to operate a crypto exchange in Hong Kong serving local customers, you can't pick and choose. The SFC requires platforms dealing with any virtual assets (whether securities or not) to hold both sets of licenses. This ensures:
- Comprehensive regulatory coverage—no asset class falls through the cracks
- Unified supervision—the SFC maintains oversight across the entire operation
- AML/CFT standards—consistent with FATF recommendations
⚠️ Common Misconception
Some operators assume they can avoid the SFO regime by only listing non-security tokens. This is incorrect. The AMLO regime requires VATP operators to also hold SFO licenses, creating a single consolidated regulatory framework.
Key Requirements & Eligibility
Corporate Structure
- Incorporated and registered in Hong Kong
- Physical office presence in Hong Kong
- Local responsible officers (minimum 2 ROs per license type)
- Clear beneficial ownership documentation
- No disqualified persons in management
Financial Requirements
The SFC imposes stringent financial requirements to ensure platforms can withstand operational stresses:
- Paid-up share capital: Minimum HKD 5 million
- Liquid capital: Must exceed required liquid capital at all times (calculated based on operational risk)
- Insurance: Comprehensive coverage for custody, cyber incidents, and professional indemnity
- Financial resources: Sufficient to cover 12 months of operating expenses
Operational Requirements
Beyond capital, the SFC scrutinizes your operational capabilities:
- Custody arrangements: 98% cold storage requirement, segregation of client assets
- Cybersecurity: Multi-signature controls, penetration testing, incident response plans
- AML/CFT program: Transaction monitoring, suspicious activity reporting, travel rule compliance
- Risk management: Documented frameworks covering market, credit, liquidity, and operational risks
- Token admission: Due diligence process for listing new virtual assets
Personnel Requirements
| Role | Requirement | Notes |
|---|---|---|
| Responsible Officers | Minimum 2 per license type | Must pass SFC competency tests |
| Compliance Officer | Dedicated, senior level | Direct reporting to board |
| MLRO | Money Laundering Reporting Officer | Can be combined with Compliance |
| Technical Staff | Adequate for operations | Security, development, operations |
The Application Process
The licensing journey is intensive but well-documented. Here's what to expect:
Phase 1: Pre-Application
- Engage legal counsel and compliance consultants
- Establish Hong Kong corporate entity
- Recruit key personnel (ROs, compliance, MLRO)
- Develop policies and procedures
- Build technology infrastructure
- Engage external assessor for Phase 1 report
Phase 2: Application Submission
Applications are submitted through the SFC's online portal. Key documents include:
- Completed application forms (Type 1, Type 7, AMLO VASP)
- Business plan and financial projections
- Detailed policies and procedures manual
- Technology and cybersecurity documentation
- Phase 1 External Assessment Report (EAR)
- Fit and proper questionnaires for all key personnel
✅ January 2025 Enhancement
Per the SFC's January 16, 2025 circular, a "swift licensing process" is now available to all new VATP applicants. This streamlined approach includes enhanced SFC guidance during the application review phase.
Phase 3: Approval-in-Principle
If the SFC is satisfied with your initial submission, you'll receive an Approval-in-Principle (AIP). This is not the final license—it's a conditional green light to:
- Complete system development and testing
- Conduct the Phase 2 External Assessment
- Finalize operational readiness
Phase 4: Final Approval
After submitting the Phase 2 EAR and addressing any SFC queries, you'll receive the final license. You can then commence operations—but ongoing compliance obligations kick in immediately.
Cost Breakdown: What to Budget
Let's be realistic about the investment required:
🚨 Hidden Costs
Many applicants underestimate ongoing compliance costs. Budget an additional HKD 5-10 million annually for compliance staff, technology maintenance, external audits, and regulatory reporting.
Realistic Timeline Expectations
Total expected timeline: 12-18 months from start of preparation to license grant. Complex applications or those requiring significant remediation may take longer.
2026 Regulatory Updates
Swift Licensing Process
In January 2025, the SFC introduced a "swift licensing process" for all new VATP applicants. Key features:
- Enhanced regulatory guidance during application review
- Clearer expectations on documentation standards
- More structured feedback loops
- Dedicated case officers for each application
Expanded Product Offerings
Licensed VATPs can now offer a broader range of products, subject to SFC approval:
- Staking services (with specific risk disclosures)
- Virtual asset derivatives (for professional investors)
- Access to overseas liquidity pools (with safeguards)
Type 4 License Expansion
Some firms are pursuing Type 4 (Advising on Securities) license uplifts to provide Virtual Asset Advisory Services. In February 2026, Alchemy Pay and HTF Securities announced successful Type 4 upgrades for VA advisory.
Upcoming: VA Dealing & Custodian Regimes
Hong Kong is expanding its regulatory perimeter. Following consultations published in June 2025, new licensing regimes are coming for:
VA Dealing Service Providers
This covers entities that deal in virtual assets on behalf of clients but don't operate a trading platform. Key points:
- Separate licensing category under AMLO
- Licensed VA dealers can execute on non-SFC-licensed overseas exchanges (subject to safeguards)
- Narrows licensing triggers to avoid overlap with SFO derivatives regime
VA Custodian Service Providers
Standalone custody providers will need their own license. This addresses the current gap where custody is only regulated as part of VATP operations.
📅 Expected Timeline
Consultation conclusions were published in late 2025. Legislative amendments and detailed rules are expected throughout 2026, with the new regimes likely operational by late 2026 or early 2027.
Strategic Considerations
Why Hong Kong?
Despite the high barriers, Hong Kong offers compelling advantages:
- Legitimacy: SFC license is globally recognized, opening doors with institutional clients
- Market access: Gateway to Greater China and broader APAC markets
- Regulatory clarity: Clear rules beat regulatory uncertainty
- Talent pool: Deep bench of financial services professionals
- First-mover advantage: Limited licenses mean less competition
Alternative Strategies
Not every firm needs a full VATP license. Consider:
- Partnership: White-label solutions with licensed platforms
- VA dealing license: Lower barrier for non-platform services (coming soon)
- Custody-only: Specialized custody license (coming soon)
- Professional investor focus: Different requirements apply
Common Pitfalls
- Underestimating compliance culture: The SFC assesses not just policies but genuine commitment
- Inadequate RO candidates: Finding qualified Responsible Officers is harder than expected
- Technology shortcuts: Security and resilience requirements are non-negotiable
- Insufficient capital buffer: Minimum requirements are minimums, not targets
- Ignoring ongoing obligations: Getting the license is the beginning, not the end
Need Help Navigating VASP Licensing?
Our research team tracks Hong Kong's evolving virtual asset regime in real-time. Get our regulatory intelligence updates.
Contact APAC FINSTAB →Conclusion
Obtaining a Hong Kong VASP license is a significant undertaking—but for the right operators, it's a strategic investment in legitimacy, market access, and long-term positioning. With 12 platforms now licensed and the regulatory framework maturing, Hong Kong has proven it's serious about becoming a global hub for regulated virtual asset activity.
The upcoming VA dealing and custodian regimes will create additional pathways for participation, potentially lowering barriers for specialized service providers. Whether you pursue a full VATP license or wait for these alternative routes depends on your business model, timeline, and risk appetite.
One thing is clear: the window for first-mover advantage is narrowing. As more platforms achieve licensing, competitive dynamics will intensify. The best time to start your licensing journey was yesterday. The second-best time is today.