Hong Kong Tokenization Regulation: SFC VASP Licensing and Tokenization Circulars
Hong Kong activated mandatory VASP licensing in June 2023 and has since issued the world's most detailed regulatory guidance on tokenizing investment products — including the first retail-accessible tokenized government bond.
Overview
Hong Kong has emerged as one of the most active regulatory developers for tokenized securities, combining a mandatory virtual asset service provider (VASP) licensing regime with a series of detailed tokenization-specific circulars that address product issuance, custody, and secondary market trading. The Securities and Futures Commission (SFC) has taken a leading role in this framework — moving from opt-in licensing in 2019 to a mandatory regime in June 2023 — and has progressively expanded the scope of permitted tokenization activities.
The policy context is significant: Hong Kong’s government has explicitly identified digital assets and tokenization as a strategic priority for maintaining its status as an international financial centre following the disruptions of 2019–2022. The result is a regulatory environment that is simultaneously demanding in its compliance requirements and genuinely facilitative of institutional tokenization.
Primary Regulator: SFC
The Securities and Futures Commission (SFC) is Hong Kong’s integrated capital markets regulator, with statutory authority under the Securities and Futures Ordinance (SFO). The SFC’s jurisdiction covers securities, futures, leveraged foreign exchange, and — since 2023 — virtual assets traded on licensed platforms.
The Hong Kong Monetary Authority (HKMA) has parallel jurisdiction over banks, stablecoins, and payment systems. The two regulators coordinate through the Financial Stability Committee and issue joint guidance on matters that span their respective mandates, including tokenization of money market funds and stablecoins.
VASP Mandatory Licensing Regime
Hong Kong’s mandatory VASP licensing regime took effect on 1 June 2023 under the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022, which inserted a new licensing regime for virtual asset service providers into the AMLO.
Under the regime, any person operating a virtual asset exchange in Hong Kong — or actively marketing such services to Hong Kong investors — must hold a VASP license from the SFC. Critically, this applies regardless of whether the virtual assets traded constitute “securities” under the SFO: even non-security crypto exchanges require VASP licensing.
Capital requirement: HKD 5,000,000 minimum paid-up capital (approximately USD 640,000 at prevailing rates). Additionally, licensed VASPs must maintain liquid capital of at least HKD 3,000,000 at all times.
Insurance/compensation: Licensed VASPs must maintain insurance or a compensation arrangement covering at least 50% of client assets held in cold storage.
Approved individual requirements: All responsible officers and key personnel must be approved by the SFC as “approved persons.” At least two responsible officers must be resident in Hong Kong.
As of mid-2024, 11 entities held VASP licenses or were in the approval process. The SFC maintains a public register of licensed and deemed-licensed VASPs.
Transitional Arrangements
Entities operating virtual asset exchanges in Hong Kong before June 1, 2023 were eligible for “deemed licensed” status, permitting continued operation during the transition period while completing the full licensing application process. The transitional period ended on May 31, 2024. Entities that did not submit a licensing application by that date are prohibited from operating.
Retail Access: Bitcoin and Ether
One of Hong Kong’s most commercially significant regulatory developments is its permission for retail investors to access Bitcoin and Ether through licensed platforms. The SFC published criteria in May 2023 that allow VASP-licensed exchanges to offer spot Bitcoin and Ether trading to retail clients, subject to additional conditions:
- Token eligibility assessment against SFC’s published criteria (large-cap tokens included in major indices, high liquidity)
- Investor education requirements at onboarding
- Appropriateness assessment for retail clients
- Enhanced risk disclosure
- Limits on leverage (no margin trading for retail clients in virtual assets)
This retail access policy differentiates Hong Kong from Singapore, which actively discourages retail crypto participation. It is also a conscious positioning relative to mainland China’s continuing ban on retail crypto trading.
SFC November 2023 Circular: Tokenization of SFC-Authorized Products
The SFC issued its landmark circular on tokenization of SFC-authorized investment products in November 2023. This circular addresses the specific regulatory requirements for tokenizing products that are already authorized under the SFO — UCITS-equivalent funds, unit trusts, and SFC-authorized investment schemes.
Key requirements from the November 2023 circular:
Product structure: Tokenized SFC-authorized products must retain the same underlying structure and investor rights as their traditional counterparts. The token is a representation of ownership interest, not a separate product.
Custody: Tokenized product assets must be held by SFC-approved custodians with specific DLT capabilities. The circular requires custodians to demonstrate: private key management procedures, smart contract audit capabilities, fork and airdrop handling policies, and cybersecurity arrangements specific to DLT environments.
Disclosure: Offering documents must clearly describe the tokenization mechanism, risks specific to the DLT infrastructure, procedures for dealing in tokenized units, and arrangements in case of DLT system failure.
Distribution: Tokenized products may only be distributed through licensed intermediaries in Hong Kong.
February 2024 Guidance: Secondary Market Trading
The SFC’s February 2024 guidance extended the tokenization framework to address secondary market trading of tokenized products. This guidance specifies:
- Secondary market platforms for tokenized securities must hold appropriate SFC licenses (Type 1 for dealing, Type 7 for automated trading services) in addition to VASP licensing where applicable
- Settlement finality for tokenized securities on DLT must be equivalent to traditional settlement finality — an SFO-registered DLT mechanism for ensuring irrevocability is required
- Disclosure obligations for secondary market operators include: real-time price transparency, reporting of material corporate actions affecting tokenized interests, and clear procedures for suspended trading
The February 2024 guidance, combined with the November 2023 circular, provides Hong Kong with the most complete published regulatory framework for tokenized investment product secondary markets of any jurisdiction globally.
Tokenized Government Bond: HKSAR Pilot
The Hong Kong government issued a HKD 800 million tokenized green bond in February 2023 — the world’s first government tokenized bond issuable under domestic law, settled on Goldman Sachs’ GS DAP platform. A second issuance of USD 756 million followed in February 2024, the first multi-currency tokenized government bond globally, with tranches in HKD, CNH, EUR, and USD.
These government-issued tokenized bonds are significant as a compliance benchmark: they demonstrate what the SFC and HKMA consider acceptable legal structure, custody arrangements, and disclosure standards for tokenized fixed income in Hong Kong.
AML/KYC Requirements
Licensed VASPs are subject to the AMLO’s detailed AML/CFT requirements, enforced by the SFC for VASP licensees:
- CDD: Full KYC at onboarding; EDD for high-risk customers including PEPs, beneficial owners of legal entities, and customers from high-risk jurisdictions
- Travel Rule: Hong Kong implemented the FATF Travel Rule for VASPs, applicable to virtual asset transfers of HKD 8,000 or above (approximately USD 1,000). Originator and beneficiary data must be transmitted between licensed VASPs
- Ongoing monitoring: Transaction monitoring systems with risk-based thresholds; mandatory investigation of alerts
- JFIU reporting: Suspicious transaction reports filed with the Joint Financial Intelligence Unit
Compliance Checklist: Hong Kong Tokenization Operations
- Apply for VASP license from SFC if operating a virtual asset exchange or actively marketing exchange services to Hong Kong investors; prepare HKD 5M minimum capital
- If tokenizing SFC-authorized products: comply with November 2023 circular requirements on custody, disclosure, and distribution
- Engage SFC-approved custodian with DLT capabilities for custody of tokenized product assets
- For secondary market trading of tokenized securities: obtain Type 1 and/or Type 7 SFC license in addition to VASP license
- Implement FATF Travel Rule above HKD 8,000 threshold
- Establish AML/CFT framework compliant with AMLO: CDD, EDD, ongoing monitoring, JFIU reporting
- Obtain SFC approval for all responsible officers and key personnel as “approved persons”
- For retail-eligible tokens (Bitcoin, Ether): implement appropriateness assessment and enhanced disclosure for retail clients
- Secure insurance or compensation arrangement for cold storage assets (minimum 50% coverage)
- Maintain SFC-required records for seven years; implement data governance program
- Consult HKMA if any activities involve payment services, stablecoins, or banking
Authority References
For APAC licensing comparison including Hong Kong, Singapore, and Japan, see the Licensing Matrix. For analysis of licensed Hong Kong VASP platforms, see Platform Benchmarks. For SFO and AMLO definitions, see the Regulatory Encyclopedia.
Subscribe for full access to compliance intelligence across all 7 analytical lenses, including licensing guides, jurisdiction benchmarks, and enforcement trackers.
Subscribe from $29/month →