Regulated United Europe OÜ
Registration number: 14153440
Anno: 16.11.2016
Phone: +372 56 966 260
Email: [email protected]
Address: Laeva 2, Tallinn, 10111, Estonia
Crypto License in Hong Kong 2026
Obtain the right Hong Kong crypto authorization for your model: SFC VATP, SFO Type 1/7 overlay, or stablecoin issuer analysis. RUE structures the application, compliance stack, and regulator-facing process.
Schedule Free Consultation
Regulator
SFC/HKMA
Timeframe
6-12+ months
Cost
from HKD 4,740
Capital
HKD 5M+
Scope depends on business model, token classification, and whether stablecoins or securities are involved.
Why Hong Kong for a Crypto License
Hong Kong offers one of the clearest crypto regulatory frameworks in Asia, but there is no single universal crypto license. RUE helps founders determine whether they need an AMLO VATP license, an SFO Type 1/7 overlay, a stablecoin issuer license, or a different regulatory path entirely.
As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays.
Regulated United Europe (RUE) supports Hong Kong crypto licensing end-to-end: business-model scoping, Hong Kong company setup, governance design, AML/CFT framework, WINGS filing, external assessment coordination, and post-licensing compliance.
We do not force every project into a VATP narrative. We first determine the correct perimeter, then build the application around the actual legal facts of your model, tokens, custody flows, client geography, and go-live plan.
Clear Statutory Framework
The core licensing perimeter is built around **AMLO Part 5B**, **SFO**, and, for fiat-referenced stablecoins, the **Stablecoin Ordinance**.
Asia Market Credibility
A Hong Kong structure is widely recognized by banks, institutional counterparties, and regional investors as a high-standard regulatory base.
Retail Access with Controls
Unlike older narratives, licensed VATPs may serve retail investors subject to token admission, suitability-style controls, disclosures, and governance safeguards.
Operationally Serious Regime
The SFC expects real deployment, external assessment, custody controls, AML/CFT systems, and local governance substance rather than a paper-only filing.
Hong Kong Crypto license
Package includes (8)
- Preparation of necessary documents for registration of a new company in Hong Kong 2026
- Translation of a certificate of no criminal record through a sworn translator
- Payment of state fees related to company registration
- Payment of notary fees related to company registration
- Preparation of compliance documents for MiCA application
- Preparation of a business plan
- Submission of the necessary documents to SFC/HKMA
- Recruitment of local MLRO/Compliance officer
Timeframe: From 6 months
Comprehensive Requirements for Hong Kong Crypto License
A Hong Kong crypto license is not a single checkbox. In practice, most applicants asking for a hong kong crypto license are assessing whether they need an SFC-licensed VATP under AMLO, whether their activities also trigger SFO Type 1 (dealing in securities) or Type 7 (automated trading services), or whether they fall into a separate lane such as stablecoin issuance under the HKMA regime.
For a centralized exchange or platform operator, the core benchmark in 2026 remains the AMLO Part 5B regime, supported by the Guidelines for Virtual Asset Trading Platform Operators, the SFC Licensing Handbook, and the AML/CFT Guideline for Licensed Corporations and SFC-licensed VASPs. The SFC reviews not only legal documents, but also real operating readiness: custody architecture, governance, financial resources, Travel Rule controls, market surveillance, incident handling, and the quality of your senior personnel.
Below are the core requirements that matter for most Hong Kong VATP applicants. Exact thresholds and filings vary by business model, token classification, and whether your platform touches securities, stablecoins, stored value functionality, or other regulated financial services.
Correct Licensing Perimeter: AMLO VATP, SFO Type 1/7, HKMA, or no license +
The first requirement is legal scoping. A centralized virtual asset trading platform operating in or from Hong Kong will usually assess the AMLO VATP regime first. If the platform lists or deals in security tokens or performs securities-related functions, an SFO overlay may apply, commonly Type 1 and/or Type 7 depending on the structure. If the business issues a fiat-referenced stablecoin, that is a separate lane under the Stablecoin Ordinance (Cap. 656) and the HKMA becomes central.
RUE starts every project with a perimeter memo covering:
- business model mapping;
- token classification;
- custody and settlement flows;
- client geography and active marketing risk;
- whether the model is exchange, brokerage, dealing, custody, wallet, OTC, fund, advisory, or issuer activity.
This step prevents the most common strategic mistake in Hong Kong: treating every crypto business as if it automatically needed the same license.
Hong Kong Corporate Presence, Office, Governance, and Records +
The applicant should have real Hong Kong substance. In practice, the SFC expects a locally incorporated or properly registered entity, suitable premises, local books and records access, governance arrangements, and senior management capable of supervising the business from Hong Kong. A mere mailbox structure is weak for a serious VATP application.
- Company formation is governed by the Companies Ordinance (Cap. 622) and administered through the Companies Registry.
- The office must support compliance, record retention, regulator access, and operational oversight.
- Board minutes, outsourcing records, vendor oversight, incident logs, and client asset records should be maintained in an inspection-ready format.
- Where cloud infrastructure is used, the applicant should still demonstrate data governance, access control, and retrievability of records for Hong Kong regulatory review.
A practical nuance many applicants miss: the SFC looks beyond incorporation documents and focuses on whether key decisions, escalations, and control ownership are actually anchored in the licensed entity rather than outsourced informally to offshore affiliates.
Responsible Officers, Licensed Representatives, and Fit-and-Proper Assessment +
Hong Kong licensing is personnel-driven. The SFC evaluates the company and the people behind it. For an SFC-licensed structure, you generally need the appropriate licensed individuals, including Responsible Officers (ROs), Licensed Representatives (LRs), executive oversight, and controllers who can pass the fit and proper test.
The regulator assesses:
- integrity and honesty;
- relevant industry competence;
- financial soundness and solvency;
- disciplinary and litigation history;
- time commitment and actual control over the business.
As a rule of thumb, applicants should plan for at least two ROs where the licensing structure requires them, with at least one available in Hong Kong, plus appropriately appointed directors and compliance function holders. The SFC will also review substantial shareholders and ultimate beneficial owners. A strong application includes role descriptions, reporting lines, delegation maps, and evidence that compliance, custody, and incident escalation are owned by named individuals rather than generic departments.
Capital, Liquid Capital, and 12-Month Operating Runway +
Applicants must distinguish paid-up share capital, liquid capital, and actual operating runway. These are not the same concept. In VATP practice, market guidance commonly references HKD 5,000,000 paid-up share capital and, depending on the structure, up to HKD 3,000,000 liquid capital. The SFC also expects the firm to maintain enough excess liquid capital to cover at least 12 months of operating expenses.
Useful formula:
- Excess Liquid Capital Coverage Ratio = Eligible Liquid Assets / 12-month Operating Expenses
Example: if projected annual operating expenses are HKD 18 million, the applicant should be prepared to show eligible liquid assets sufficient to support that runway, not just the minimum regulatory floor. This is where many underfunded applications fail. Official filing fees are small; the real issue is whether the business is capitalized enough to survive licensing, remediation, bank onboarding, cyber controls, and post-launch supervision.
AML/CFT Framework, Travel Rule, STRs, and Sanctions Controls +
A Hong Kong crypto compliance program must be built around AMLO and the SFC AML/CFT guideline, but that is not the whole picture. The duty to file Suspicious Transaction Reports (STRs) to the JFIU also interacts with criminal law under DTROP, OSCO, and UNATMO. Tipping-off and failure-to-disclose risk are real enforcement issues, not academic footnotes.
Your AML stack should include:
- business-wide ML/TF risk assessment;
- CDD and EDD workflows;
- PEP, sanctions, and adverse media screening;
- blockchain analytics and KYT tooling;
- Travel Rule data transmission controls, typically relevant from HKD 8,000 and above;
- alert governance, case management, and STR escalation to the JFIU;
- ongoing monitoring of source of wealth and source of funds for high-risk customers;
- record-keeping and staff training.
A technical nuance often missed by founders: the SFC increasingly expects Travel Rule compliance to be operationalized through interoperable messaging standards and vendor workflows, not handled manually in spreadsheets once volume begins to scale.
Technology, Custody, Cybersecurity, and Client Asset Protection +
The SFC expects institutional-grade custody and technology controls. Market-standard Hong Kong VATP expectations include keeping at least 98% of client virtual assets in cold storage, limiting hot wallet exposure to a maximum of 2%, maintaining compensation or insurance coverage for 100% of hot wallet assets, and at least 50% of cold wallet assets.
Applicants should be ready to document:
- segregation of client assets from house assets;
- MPC or multi-signature approval logic;
- HSM-backed key management and key ceremony procedures;
- privileged access management and maker-checker workflows;
- daily reconciliation and exception handling;
- penetration testing, vulnerability management, and patch governance;
- incident response, breach escalation, and forensic readiness;
- business continuity and disaster recovery.
A strong application does not merely say “we use cold wallets.” It shows who can move assets, under what approvals, with what logs, how quickly anomalies are detected, and how client entitlements are reconstructed after a systems incident.
Business Plan, Token Admission Governance, and Market Surveillance +
The SFC reviews whether the business is governable. That means your business plan must connect revenue logic, client segments, token universe, market abuse controls, outsourcing, conflicts management, and financial sustainability. A token listing committee with documented admission criteria is no longer optional in a serious VATP file.
The application should cover:
- service scope and customer segmentation;
- token admission and review methodology;
- market surveillance rules for wash trading, spoofing, layering, and abnormal activity;
- conflicts of interest and proprietary trading restrictions;
- complaints handling and client disclosures;
- outsourcing register and critical vendor oversight;
- financial projections for at least 3 years;
- wind-down planning.
An information-gain point that many pages miss: token admission is not only a legal classification issue. It is also a governance issue involving liquidity, concentration risk, protocol security, market integrity, and whether the token can be supported operationally under your custody and surveillance stack.
External Assessment, WINGS Filing, and Regulator Readiness +
In 2026, a Hong Kong VATP application is not a paper-only exercise. The filing is made through the WINGS platform, and the modern process expects real deployment and an external assessment of controls. The external assessor is typically a CPA (practising) engaged under a direct assurance model, often aligned with HKSAE 3000 / ISAE 3000 logic.
Applicants should be ready for:
- WINGS account creation and filing bundle preparation;
- WINGS Mail correspondence with the SFC;
- tripartite documentation where required;
- assessment of both control design and operating effectiveness;
- remediation cycles before go-live;
- evidence packs, screenshots, logs, reconciliations, and walkthroughs.
This is one of the biggest practical gaps between theory and reality. Many founders budget for legal drafting but not for evidence production, control testing, and remediation. In Hong Kong, operational proof is often the decisive factor.
Jurisdiction Comparison
Compare Hong Kong with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Taxation of Crypto Businesses in Hong Kong
Hong Kong is tax-efficient, but it is not a zero-tax fantasy. The correct analysis starts with the Inland Revenue Ordinance (Cap. 112), the territorial source principle, and the Inland Revenue Department (IRD) guidance including DIPN 39 on digital assets. The most common mistake in crypto marketing is to confuse no capital gains tax with no profits tax. These are different concepts.
How Hong Kong Profits Tax Works for Crypto Companies
For corporations, Hong Kong generally applies a two-tier profits tax system:
- 8.25% on the first HKD 2,000,000 of assessable profits;
- 16.5% on profits above HKD 2,000,000.
For unincorporated businesses, the two-tier rates are generally:
- 7.5% on the first HKD 2,000,000;
- 15% above that threshold.
Whether crypto-related gains are taxed as trading profits depends on the facts. The IRD looks at the classic badges of trade: frequency, intention, financing, holding period, organization, and the surrounding commercial context. If your Hong Kong company runs an exchange, brokerage, custody, treasury, or market-making business, profits are usually examined as business income rather than passive capital appreciation.
No Capital Gains Tax Does Not Mean No Tax
Hong Kong does not generally impose a standalone capital gains tax. However, if the gains arise from a profit-making business or a trading operation, the IRD may still tax them as profits. This distinction matters for exchanges, proprietary trading desks, token issuers, and treasury-heavy fintech groups.
Offshore Profits Claims Are Fact-Specific
Some founders assume that booking activity through a Hong Kong company automatically produces offshore treatment. That is incorrect. Source analysis is highly fact-dependent and turns on where profit-generating operations are carried out, where contracts are negotiated and executed, where management and control sit, how client relationships are run, and where the real commercial activities occur. A licensed VATP with Hong Kong management, Hong Kong compliance, and Hong Kong operational decision-making should not assume an easy offshore claim.
Indirect Taxes and Ongoing Cost Reality
Hong Kong does not levy VAT in the European sense, which is one reason the jurisdiction remains attractive for digital asset businesses. But founders should budget for ongoing costs beyond tax: annual audit, accounting, payroll, office, compliance staffing, cyber tooling, blockchain analytics, insurance, and external assurance. RUE coordinates tax structuring together with accounting support so the licensing model and the tax model do not contradict each other.
Corporate Profits Tax
Two-tier rate for Hong Kong corporations
8.25% / 16.5%
Corporate Profits Tax
Two-tier rate for Hong Kong corporations
For corporations, the first HKD 2,000,000 of assessable profits is generally taxed at 8.25%, and profits above that threshold at 16.5%. This is the core rate framework relevant to many Hong Kong crypto companies, including licensed VATPs and related service entities.
Unincorporated Profits Tax
Two-tier rate for non-corporate businesses
7.5% / 15%
Unincorporated Profits Tax
Two-tier rate for non-corporate businesses
For unincorporated businesses, the first HKD 2,000,000 is generally taxed at 7.5%, with profits above that taxed at 15%. Most serious crypto operations use a corporate vehicle, but this distinction still matters for structuring analysis.
Capital Gains Tax
No standalone capital gains tax regime
0%*
Capital Gains Tax
No standalone capital gains tax regime
Hong Kong generally does not impose a standalone capital gains tax. However, gains can still be taxed as trading or business profits if the facts indicate a profit-making operation. The asterisk matters: 0% capital gains tax does not equal 0% tax overall.
Offshore Profits Claim
Possible, but not automatic
Case-by-case
Offshore Profits Claim
Possible, but not automatic
Offshore treatment depends on where the profit-generating operations are carried out. The IRD will examine substance, management, contracting, execution, and operational reality. A licensed Hong Kong crypto business should not rely on offshore treatment without a defensible factual basis and tax advice.
VAT / GST
Hong Kong does not operate an EU-style VAT system
N/A
VAT / GST
Hong Kong does not operate an EU-style VAT system
Hong Kong does not charge VAT in the way EU jurisdictions do. This can simplify pricing and invoicing for crypto businesses, but cross-border supplies, foreign tax exposure, and transfer pricing still require analysis in group structures.
Annual Audit & Accounting
Mandatory corporate compliance costs
Project-based
Annual Audit & Accounting
Mandatory corporate compliance costs
Hong Kong companies typically require annual financial reporting, accounting, and audit support. Licensed entities should also budget for regulator-facing reporting, control evidence preparation, and specialist bookkeeping capable of handling digital asset reconciliations. RUE can align licensing with ongoing accounting support.
Compliance Tooling & AML Operations
A recurring cost center, not a one-off setup item
Project-based
Compliance Tooling & AML Operations
A recurring cost center, not a one-off setup item
Expect ongoing spend on KYC vendors, sanctions screening, blockchain analytics, Travel Rule solutions, cyber monitoring, log retention, and outsourced compliance support where appropriate. These costs are usually more material than official filing fees.
Banking & Payment Infrastructure
Operational cost linked to risk profile
Variable
Banking & Payment Infrastructure
Operational cost linked to risk profile
Banking for crypto businesses in Hong Kong remains selective. Licensed or well-structured applicants generally have better prospects, but onboarding, transaction monitoring, reserve account structures, and payment rails all create recurring cost. RUE also supports crypto business bank account opening.
Compliance & Ongoing Obligations
A Hong Kong crypto license is the start of supervision, not the end of the project. Licensed entities must maintain continuous operational, AML/CFT, custody, reporting, and governance compliance.
Reporting & Regulatory Notifications
- Annual fees and regulator filings maintained on time
- Financial returns, audited accounts, and books kept inspection-ready
- Material changes in ownership, management, systems, or scope notified to the SFC
- Major incidents, breaches, and operational disruptions escalated promptly
- Token admission and delisting decisions documented and governed
AML/CFT & Financial Crime Controls
- CDD, EDD, sanctions screening, and ongoing monitoring maintained
- Travel Rule controls applied for relevant virtual asset transfers
- Suspicious Transaction Reports filed to the JFIU where required
- Staff trained on tipping-off risk and escalation procedures
- Periodic AML risk assessment and control testing performed
Custody, Security, and Client Asset Protection
- Client assets segregated from house assets at all times
- Cold and hot wallet allocation maintained within approved limits
- Insurance or compensation arrangements kept adequate
- Daily reconciliations, access logs, and exception handling preserved
- Penetration testing, vulnerability management, and incident response updated
Governance & Annual Maintenance
- Board oversight, committee minutes, and delegated authority maps kept current
- Policies updated for legal changes, new products, and outsourcing arrangements
- Fit-and-proper status of controllers and senior staff monitored continuously
- Independent reviews, audits, and remediation tracked to closure
- Wind-down readiness and business continuity planning maintained
RUE handles compliance for you. Our team provides ongoing compliance support, including AML officer services, regulatory reporting, and policy updates. We ensure your license stays in good standing year after year.
Contact us for compliance support →
Short answer: what license do you actually need in Hong Kong?
Short answer: AMLO VATP, SFO Type 1/7, stablecoin issuer, or no license?
If you operate a centralized crypto exchange in or from Hong Kong, you likely need an SFC VATP license under AMLO Part 5B. If your platform deals in security tokens or performs securities-related functions, you may also need an SFO Type 1 and/or Type 7 overlay.
If you issue a fiat-referenced stablecoin, the relevant lane is the HKMA regime under the Stablecoin Ordinance, not the standard VATP framework alone. Issuer regulation and exchange regulation are not the same thing.
If you run OTC activity, brokerage, software-only infrastructure, a non-custodial wallet, or a DeFi frontend, the answer is fact-specific. Some models fall outside the current AMLO VATP perimeter, while others may still trigger separate financial services, AML, payments, or active-marketing issues.
- Centralized exchange: usually AMLO VATP first, plus possible SFO overlay
- Security-token platform: usually AMLO + SFO analysis
- Stablecoin issuer: usually HKMA / Stablecoin Ordinance
- Non-custodial software model: may be outside direct licensing, but requires perimeter review
RUE starts with a licensing decision tree, not a generic sales answer. That is the only reliable way to avoid over-licensing, under-licensing, or filing under the wrong legal basis.
📝 Check Your Eligibility
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Step 1 of 5
What type of crypto services will you provide?
Exchange (fiat ↔ crypto)
Custody & Wallet Services
Transfer & Payment Services
Advisory / Portfolio Management
Multiple / All of the Above
Step 2 of 5
What is your target market?
European Union only
EU + Global markets
Global (non-EU priority)
Step 3 of 5
Do you already have a registered company in the EU?
Yes, in this jurisdiction
Yes, in another EU country
No, I need to register one
Step 4 of 5
What is your available budget range?
Under €20,000
€20,000 – €50,000
€50,000 – €100,000
Over €100,000
Step 5 of 5
When do you plan to launch?
As soon as possible (1–3 months)
Within 6 months
Within a year
Just exploring options
This Jurisdiction Is a Great Fit!
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
Step-by-Step Licensing Process
Step 1
Scope the Model
RUE starts with a licensing perimeter review: exchange, brokerage, custody, stablecoin, token classification, active marketing, and whether AMLO, SFO, HKMA, or another regime applies. Typical scoping phase: 1-3 weeks.
Step 2
Set Up the Entity
Incorporate or register the Hong Kong entity, establish governance, office arrangements, books and records structure, and ownership transparency. Typical company setup and corporate readiness: 2-4 weeks.
Step 3
Build Compliance Stack
Prepare AML/CFT framework, Travel Rule controls, custody model, market surveillance, token admission governance, outsourcing controls, complaints handling, and financial resources planning. Typical preparation: 4-8+ weeks.
Step 4
Prepare Personnel
Map Responsible Officers, Licensed Representatives, directors, MLRO/compliance ownership, and fit-and-proper evidence. This includes CVs, role descriptions, reporting lines, and regulator-facing questionnaires.
Step 5
File via WINGS
Submit the application through the SFC WINGS platform, organize the filing bundle, and manage WINGS Mail correspondence. Official review benchmarks are not the same as the full project duration.
Step 6
Deploy Before Testing
The applicant should have systems actually deployed before external assessment. Hong Kong is no longer a paper-only licensing exercise; evidence of operating controls matters.
Step 7
External Assessment
Coordinate the external assessor, assurance work, walkthroughs, evidence packs, and remediation. Expect testing of both control design and operating effectiveness under a direct assurance approach.
Step 8
Decision and Go-Live
After SFC review, satisfy any conditions, finalize banking and operational controls, and launch under the approved perimeter. Real-world end-to-end timeline for a serious VATP project is often 6-12+ months depending on readiness.
Frequently Asked Questions
Main Services
Terms of Cooperation
Regulated United Europe
