Hong Kong Cryptocurrency Regulations 2025 Guide: Rules, Documentation, Common Triggers, and Risk Controls

A comprehensive, practical overview of Hong Kong's evolving virtual asset regulatory landscape in 2025. This guide covers the core licensing regimes, documentation requirements, compliance triggers, and risk controls that businesses and investors need to understand — all grounded in the latest official announcements from the SFC, HKMA, and FSTB.

📅 Published July 2026 • For educational purposes only • Always verify current rules from official sources

🏛️ The 2025 Regulatory Framework

2025 has been a landmark year for cryptocurrency regulation in Hong Kong. The territory has moved decisively from a voluntary, principles-based approach to a comprehensive, mandatory licensing framework covering multiple layers of the virtual asset ecosystem.

The LEAP Framework (Policy Statement 2.0)

In June 2025, the Financial Services and the Treasury Bureau (FSTB) published the Hong Kong Digital Asset Development Policy Statement 2.0, establishing the “LEAP” framework — a unified vision to build a trusted, sustainable digital asset ecosystem deeply integrated with the real economy. The framework focuses on:

The ASPIRe Roadmap

In February 2025, the SFC published its ASPIRe regulatory roadmap, setting out five pillars and 12 key measures to strengthen Hong Kong's virtual asset market.[reference:3] The five pillars are:

🔗 Access

Optimising market access, introducing OTC and custody service regulation[reference:4]

🛡️ Safeguards

Strengthening investor protection and risk management[reference:5]

📦 Products

Expanding product types, exploring derivatives and staking services[reference:6]

🏗️ Infrastructure

Enhancing trading infrastructure and cross-border settlement[reference:7]

🤝 Relationship

Strengthening international regulatory cooperation and industry communication[reference:8]

📌 Key takeaway

Hong Kong is pursuing a “same business, same risks, same rules” philosophy, aligning virtual asset regulation with traditional financial services standards.[reference:9] This creates a predictable environment but also imposes substantial compliance obligations.

📋 Licensing Regimes Overview

As of 2025, Hong Kong operates multiple licensing regimes for virtual asset activities. The regulatory architecture is expanding rapidly, with new regimes in development.

Existing licensing regimes

Proposed licensing regimes (2026 legislation expected)

In December 2025, the FSTB and SFC published consultation conclusions on new licensing regimes for virtual asset dealing services and virtual asset custody services.[reference:13] A further consultation was launched for VA advisory and VA management services, with a submission deadline of January 23, 2026.[reference:14] The target is to introduce legislation to the Legislative Council in 2026, covering all four service provider categories under the AMLO.[reference:15][reference:16]

Service type Regulator Status (2025) Key reference
VA Trading Platform SFC Active (since June 2023) AMLO, SFC VATP指引
Stablecoin Issuer HKMA Active (from Aug 2025) Stablecoins Ordinance (Cap. 656)
VA Dealing SFC Proposed (bill 2026) Aligns with Type 1 regulated activity[reference:17]
VA Custody SFC Proposed (bill 2026) Focus on private key safekeeping[reference:18]
VA Advisory SFC Consultation (closed Jan 2026) Further consultation[reference:19]
VA Management SFC Consultation (closed Jan 2026) Further consultation[reference:20]

Note: Legislative timelines are subject to change. Always verify current status from official SFC, HKMA, and FSTB announcements.

🪙 Stablecoin Rules & Requirements

The Stablecoins Ordinance (Cap. 656) came into effect on August 1, 2025, establishing one of Asia's first comprehensive licensing regimes for fiat-referenced stablecoins.[reference:21][reference:22]

Who needs a licence?

Any person who, in the course of business:

The HKMA has confirmed that as of September 2025, no stablecoin issuer licences had yet been issued.[reference:24] Existing issuers operating before August 1, 2025, were required to submit licence applications by October 31, 2025, with a transitional period extending to January 31, 2026.[reference:25]

Key requirements for licensed issuers

💰 Financial resources

Minimum HK$25 million paid-up share capital, HK$3 million liquid capital, and excess liquid capital equivalent to at least 12 months of operating expenses.[reference:26]

📊 Reserve backing

100% reserve backing at all times, with reserve assets comprising only high-quality, highly liquid assets. Overcollateralisation is expected.[reference:27]

🔄 Redemption rights

Holders have an absolute right to redeem at par value within one business day, without unreasonable fees or conditions.[reference:28]

🔒 AML/CFT compliance

Licensees are regulated as “financial institutions” under Hong Kong's AML/CFT legislation and must follow HKMA-issued AML guidelines.[reference:29][reference:30]

⚠️ Important

Only stablecoins issued by HKMA-licensed entities may be offered to retail investors in Hong Kong.[reference:31] Unlicensed issuance or marketing of stablecoins to the Hong Kong public is an offence.[reference:32]

📄 Documentation & Recordkeeping

Compliance with Hong Kong's regulatory framework requires meticulous documentation across multiple dimensions. Below is a practical overview of the key documentation requirements.

Licensing application documents

Ongoing documentation obligations

📌 Best practice

Maintain documentation in both English and Chinese where possible. Hong Kong regulators accept documents in either language, but bilingual records facilitate smoother interactions with regulatory authorities.

🔔 Common Compliance Triggers

Certain activities or events are more likely to attract regulatory attention or trigger additional compliance obligations. Understanding these triggers helps businesses stay ahead of requirements.

Asset onboarding triggers

Operational triggers

AML/CFT triggers

⚠️ No minimum threshold exemption

Regulators have confirmed that there will be no “minimum threshold” exemption for VA dealing or management activities. Any business operating in Hong Kong, regardless of size, must obtain the appropriate licence.[reference:47]

🛡️ Risk Controls & Best Practices

Effective risk controls are not just a regulatory requirement — they are essential for business sustainability and investor confidence. The SFC and HKMA have issued detailed guidance on expected standards.

Custody risk controls

In August 2025, the SFC issued a circular on robust custody standards for VATPs, covering:[reference:48][reference:49]

AML/CFT risk controls

Checklist: Essential risk controls

  • Licence verification: Confirm that all required licences are in place and up to date
  • Policy documentation: Maintain written AML/CFT, custody, and cybersecurity policies
  • Staff training: Ensure all relevant employees understand their compliance obligations
  • Independent audits: Arrange regular external audits of reserves (for stablecoin issuers) and security systems
  • Incident response plan: Have a documented plan for security breaches, system failures, and regulatory inquiries
  • Record retention: Keep all transaction and compliance records for at least 7 years (or as required by applicable regulations)
  • Regulatory monitoring: Designate a responsible person to track regulatory updates from the SFC, HKMA, and FSTB

🚫 Common Mistakes

  • Assuming the VATP licence covers all activities: A VATP licence does not authorise dealing, custody, advisory, or management services. Each activity may require its own licence or licence modification.
  • Overlooking the stablecoin prohibition: Offering or marketing unlicensed stablecoins to Hong Kong retail investors is illegal. Even promoting a stablecoin without a licence can constitute an offence.[reference:53]
  • Ignoring the “no minimum threshold” rule: There is no size exemption. Even small-scale VA dealing or management activities require a licence if conducted in or from Hong Kong.[reference:54]
  • Failing to segregate client assets: Client virtual assets must be properly segregated from the operator's own assets. The SFC expects client assets to be kept with licensed custodians.[reference:55]
  • Treating tokenised securities as unregulated: Tokenised securities are already regulated under the Securities and Futures Ordinance and are not covered by the VA dealing licence exemptions.[reference:56]
  • Underestimating transition deadlines: Pre-existing stablecoin issuers had until October 31, 2025 to apply for licences. Missing such deadlines can result in enforcement action.[reference:57]
  • Neglecting tax classification: While Hong Kong does not have a specific capital gains tax on crypto, frequent trading may be deemed a business activity subject to profits tax.[reference:58]

🧪 Practical Scenario: Launching a New Token

📋 Scenario: A VATP considering listing a new token in Q3 2025

Background: A licensed VATP in Hong Kong is considering listing a new utility token that has been trading on overseas exchanges for 8 months. The token is not a stablecoin and is not a tokenised security.

Regulatory considerations:

  • Track record requirement: Since the token has less than a 12-month track record, it cannot be offered to retail investors. However, it can be offered to professional investors, provided the VATP conducts reasonable due diligence and makes adequate disclosure.[reference:59]
  • Due diligence: The VATP must conduct thorough due diligence on the token's technology, team, tokenomics, and legal status before admission.[reference:60]
  • Disclosure: For professional investors, the VATP must adequately disclose that the token has less than a 12-month track record.[reference:61]
  • Ongoing monitoring: The VATP must continue to monitor the token's compliance with admission criteria after listing.

Outcome: The VATP may proceed with listing for professional investors only, subject to completing the required due diligence and disclosure. A separate application would be needed if the VATP later wishes to offer the token to retail investors after the 12-month track record is satisfied.

Risk Warning

Important disclaimer

This guide is for educational and informational purposes only and does not constitute legal, financial, or regulatory advice. Hong Kong's virtual asset regulations are complex and evolving. The information provided here is based on publicly available materials as of July 2026 and may not reflect the most current legal or regulatory position.

You are solely responsible for ensuring compliance with all applicable laws and regulations. Before taking any action, you should consult with qualified legal counsel and refer to official sources including the SFC (sfc.hk), HKMA (hkma.gov.hk), and FSTB (fstb.gov.hk) for the latest rules, circulars, and consultation conclusions.

Non-compliance with Hong Kong's virtual asset regulations can result in significant penalties, including fines and imprisonment.

Frequently Asked Questions

What are the key cryptocurrency regulations in Hong Kong for 2025?

The key regulations include: the Stablecoins Ordinance (Cap. 656) effective August 1, 2025, establishing an HKMA licensing regime for fiat-referenced stablecoin issuers; the SFC's ASPIRe roadmap (February 2025) with 12 measures across five pillars; expanded licensing for VATPs to offer broader products and shared liquidity (November 2025); and proposed new licensing regimes for VA dealing, custody, advisory, and management services, with legislation expected in 2026.

Do I need a licence to operate a cryptocurrency business in Hong Kong?

Yes. Operating a virtual asset trading platform in Hong Kong or actively marketing to Hong Kong investors requires an SFC licence under the Anti-Money Laundering Ordinance. Additionally, issuing fiat-referenced stablecoins requires an HKMA licence under the Stablecoins Ordinance. Proposed regimes will soon also require licences for VA dealing, custody, advisory, and management services.

What is the Stablecoins Ordinance and when did it take effect?

The Stablecoins Ordinance (Cap. 656) took effect on August 1, 2025. It establishes a licensing regime for fiat-referenced stablecoin issuers, administered by the Hong Kong Monetary Authority (HKMA). Issuers must maintain HK$25 million paid-up capital, 100% reserve backing, and meet strict AML/CFT requirements. Only HKMA-licensed stablecoins may be offered to retail investors.

What documentation do I need to comply with Hong Kong crypto regulations?

Required documentation includes: licensing applications filed through the SFC's WINGS platform (for VATPs) or the HKMA's stablecoin licensing process; external assessment reports; cybersecurity stress test results; AML/CFT policies and procedures; independent reserve audits (for stablecoin issuers); and ongoing transaction monitoring records. The SFC has streamlined the VATP licensing process with a single external assessment replacing the previous two-stage model.

What are the common compliance triggers for crypto businesses in Hong Kong?

Common triggers include: onboarding new virtual assets onto a trading platform (due diligence and admission requirements apply); offering stablecoins to retail investors (must be HKMA-licensed); cross-border order book integration with overseas platforms (requires FATF-member jurisdiction licensing); providing custody services for assets not traded on the platform; and any suspicious transaction patterns that may indicate money laundering or terrorist financing.

How does Hong Kong regulate crypto custody services?

As of 2025, custody services are primarily provided by SFC-licensed VATPs and their wholly-owned subsidiaries, or by banks meeting HKMA requirements. The SFC issued detailed custody standards in August 2025 covering senior management responsibilities, cold wallet infrastructure, third-party wallet solutions, and real-time threat monitoring. A standalone licensing regime for VA custodian service providers is being developed, with legislation expected in 2026.

What are the AML/CFT requirements for crypto businesses in Hong Kong?

Crypto businesses must comply with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). Key requirements include: customer due diligence and KYC procedures; ongoing transaction monitoring; suspicious transaction reporting; Travel Rule compliance for cross-border transfers; and deployment of blockchain analytics tools to screen wallet addresses. The SFC and HKMA have issued specific AML/CFT guidelines for VATPs and licensed stablecoin issuers.

How can I verify the latest regulatory updates in Hong Kong?

Regularly check official sources: the SFC website (sfc.hk) for circulars and licensing updates; the HKMA website (hkma.gov.hk) for stablecoin regulations; the FSTB website for consultation papers and legislative proposals; and the Government Gazette for newly enacted ordinances. The SFC's ASPIRe roadmap provides a forward-looking framework, and consultation conclusions are published with implementation timelines.