SFC Hong Kong: VASP Licensing and Tokenization Framework

Overview

The Securities and Futures Commission (SFC) is Hong Kong’s independent statutory body responsible for regulating the securities and futures markets. The SFC’s digital asset regulatory framework underwent a decisive transformation in 2023: the introduction of mandatory Virtual Asset Service Provider (VASP) licensing under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) from June 2023, followed by the SFC’s November 2023 circular on tokenized investment products that established the compliance framework for tokenized fund shares and digital securities in Hong Kong.

These two developments — combined with the Hong Kong government’s issuance of tokenized green bonds through HSBC Orion in February 2023 (the world’s first government tokenized bond via distributed ledger) — established Hong Kong as the most institutionally active jurisdiction in Asia for regulated tokenized securities, alongside Singapore.

VASP Licensing Under AMLO: Mandatory from June 2023

Prior to June 2023, Hong Kong operated a voluntary opt-in licensing regime for Virtual Asset Trading Platforms (VATPs) under the SFC’s licensing framework — exchanges could apply for a license under the Securities and Futures Ordinance (SFO) if they wished to trade security tokens, but there was no mandatory requirement for exchanges dealing exclusively in non-security virtual assets.

The Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 amended AMLO to create a mandatory licensing requirement: from June 1, 2023, any person carrying on a business of operating a virtual asset exchange in Hong Kong — or actively marketing such services to Hong Kong investors — must hold an SFC VASP license. This shifted the regime from opt-in to mandatory across the entire virtual asset exchange sector.

VASP license requirements under AMLO include:

Eligibility: Applicants must be companies incorporated in Hong Kong or companies incorporated outside Hong Kong but with a registered place of business in Hong Kong. The mandatory local presence requirement (similar to VARA’s requirement in Dubai) ensures SFC has supervisory access.

Fit and proper requirements: Responsible Officers and senior management must be fit and proper under SFC standards — a well-established threshold borrowed from the SFO framework for licensed corporations.

AML/CFT systems: Applicants must implement AML/CFT measures consistent with FATF’s recommendations for VASPs, including customer due diligence, transaction monitoring, and Travel Rule compliance.

Prudential requirements: Minimum paid-up capital (HKD 5 million, approximately USD 640,000), liquid capital requirements, and client asset segregation and insurance requirements.

Retail access conditions: The SFC has set specific conditions for VASP licensees that wish to serve retail (non-professional) investors — including pre-approved token listing standards, client knowledge assessments, and suitability requirements — reflecting concerns about retail investor protection in volatile virtual asset markets.

SFC November 2023 Circular: Tokenized Investment Products

The SFC’s November 2023 circular on tokenization of SFC-authorized investment products established the compliance framework for tokenizing HKMA-regulated investment funds and SFC-authorized collective investment schemes — including UCITS-equivalent funds authorized under the SFO.

The circular addresses the SFC’s expectations in four key areas:

Tokenization arrangement requirements: The SFC distinguishes between primary-layer tokenization (where the blockchain record is the authoritative record of fund interest ownership) and secondary-layer tokenization (where a traditional register remains the primary record and the blockchain token is a secondary representation). The SFC’s initial guidance contemplates secondary-layer tokenization as the preferred model for maintaining regulatory clarity on the authoritative ownership record.

Custody of tokenized assets: The circular sets out requirements for the custody of tokenized fund interests, requiring that custody be conducted by entities with appropriate authorization — SFC-licensed custodians or, for digital assets specifically, SFC VASP-licensed custodians — and that the custody arrangement maintain the segregation of client assets from operator assets.

Transfer and settlement: Tokenized fund interests may be transferred on-chain, subject to compliance with applicable transfer restrictions (investor eligibility, lockup periods, redemption gates) enforced at the token contract level or through the transfer agent’s compliance checks.

Disclosure: Issuers of tokenized investment products must provide prospectus or other disclosure document disclosure of the tokenization arrangement, the associated risks (smart contract risk, key management risk, blockchain operational risk), and the impact on investor rights.

Hong Kong Government Tokenized Green Bonds

The February 2023 HK$1 billion (USD 128 million) tokenized green bond — issued by the Hong Kong government through the Government Bond Programme and settled through HSBC Orion — predated the SFC’s November 2023 circular and was structured by the HKMA and HKSAR Government under existing legal powers. The transaction demonstrated that Hong Kong’s existing legal and regulatory framework could accommodate government bond issuance via distributed ledger, while the subsequent circular sought to extend similar clarity to the private and fund sector.

The bond’s settlement through the CMU (Central Moneymarkets Unit) — the HKMA’s bond settlement system — established that DLT-issued securities can achieve legally recognized settlement finality through integration with the existing monetary authority’s infrastructure, without requiring a separate DLT-specific settlement regime analogous to the EU’s DLT Pilot Regime.

Stablecoin Regulation: HKMA Lead with SFC Coordination

Hong Kong’s stablecoin regulatory framework is led by the HKMA rather than the SFC, reflecting the HKMA’s jurisdiction over payment systems and monetary matters. The HKMA’s stablecoin licensing consultation (2023-2024) proposes a licensing requirement for issuers of fiat-referenced stablecoins in Hong Kong, with requirements covering reserve backing, redemption rights, and AML/CFT compliance analogous to Singapore’s MAS stablecoin framework.

The SFC coordinates with HKMA on stablecoins that are used within virtual asset trading platforms — where the stablecoin’s use as a trading pair or settlement mechanism brings it within the SFC’s VASP licensing perimeter — and on stablecoins that may constitute collective investment schemes if their investment of reserve assets creates a profit-sharing arrangement.

Project Ensemble and Wholesale CBDC

The HKMA’s Project Ensemble — launched in 2024 — is Hong Kong’s exploration of wholesale CBDC (wCBDC) for tokenized asset settlement, directly analogous to the Swiss National Bank’s Project Helvetia and the Banque de France’s wCBDC experiments. Project Ensemble tests the use of a wCBDC issued by the HKMA to settle tokenized securities transactions — including tokenized green bonds and tokenized fund units — on a common DLT infrastructure involving multiple banks.

The Project Ensemble sandbox has attracted participation from HSBC, Hang Seng Bank, Standard Chartered, and other major Hong Kong banks, testing cross-bank tokenized asset settlement using HKMA-issued wCBDC as the interbank settlement currency.

Further Resources

• HSBC Orion — HK Tokenized Bond Platform
• MAS Singapore — Regional Comparator
• Jurisdiction Profiles — Hong Kong
• Investment Product Structures