Hong Kong has recently announced a new regulatory licensing regime for the crypto sector. What do you need to do to stay compliant? Let’s clear things up.
On May 21st, 2021, the Hong Kong Financial Services and the Treasury Bureau (FSTB) issued their consultation conclusions on the introduction of a new regulatory framework for virtual asset service providers (VASP).
Under the proposed rules, Hong Kong will introduce a new licensing regime for crypto businesses. Accordingly, crypto firms operating in Hong Kong should understand the new regulatory landscape and how their compliance obligations may change.
The Securities and Futures Commission (SFC) introduced the current regulatory framework in 2019. This document outlined the risks associated with virtual assets and introduced a licensing regime for certain types of virtual assets falling under Hong Kong’s Securities and Futures Ordinance. This includes stocks, bonds, futures contracts, and funds (and services related to these products).
According to the SFC Framework, Hong Kong now only regulates businesses that deal with virtual currencies that are “securities” or “futures contracts”. As a result, platforms that trade in non-security virtual assets—such as Bitcoin—fall outside the regulatory scope.
To address the limitations of the 2019 Regulatory Framework, Hong Kong authorities recently proposed a new licensing regime for all VASPs.
In November 2020, the Hong Kong Financial Services and the Treasury Bureau (FSTB) began a consultation period on a proposed regulatory framework for crypto businesses. The consultation period ran until 31st January 2021 and led to the approval of the proposed framework.
The new regulations require all VASPs in Hong Kong to obtain an SFC license. Those who are not licensed will be prohibited from actively marketing to the local public. To get the license, businesses must pass the SFC’s fit-and-proper test and comply with many regulatory requirements (which we explain below).
The new regulation affects “any person seeking to engage in the business of operating a virtual asset exchange in Hong Kong”. In other words, it covers anyone who is involved in the following business activities:
Crypto trading platforms that enable trading in financial products (securities and futures contracts) don’t fall under the new licensing regime since they’re already regulated under the SFO.
Note that the new licensing regime extends to all crypto exchanges registered in Hong Kong under the Companies Ordinance (Cap. 622). These include exchanges based outside HK that actively market to Hong Kong’s citizens.
Under the proposed regime, crypto businesses must obtain a license from the SFC, Hong Kong’s securities and futures regulator. Here are three main requirements for getting the license.
This means that crypto businesses must critically review their existing policies, procedures, and internal controls in order to get the license.
Under the new regulation, crypto businesses can only provide their services to certain types of customers and must follow a wide range of regulatory requirements. Now, crypto businesses must:
Violating these rules bears serious consequences for businesses. Let’s go over the exact sanctions.
If businesses operate without a license or otherwise violate AML rules, they can be fined as much as $5,000,000 in fines, while senior management can face imprisonment for up to seven years. Here’s a breakdown of the exact sanctions businesses can face:
Conducting business without a license: a fine of $5,000,000 and imprisonment for up to seven years. In case of a continuing offense, an additional fine of $100,000 for each day the offense continues;
Provision of false, deceptive, or misleading statements about a business’s compliance status when filing a license application: a fine of $1,000,000 and imprisonment for up to two years;
Non-compliance with AML/CTF requirements: a fine of $1,000,000 and imprisonment for up to two years;
Fraudulent or reckless misrepresentation to induce another person to acquire or dispose of virtual currencies: a fine of $1,000,000 and imprisonment for up to two years.
The SFC will be given broad powers to supervise AML/CTF and regulatory compliance by licensed VASPs. This will include powers to impose sanctions.
It’s expected that the new licensing regime for VASPs will be introduced in the 2021-22 legislative sessions, which runs from October 2021 until the summer recess in July 2022.
When to start preparing: Since the requirements are already approved, businesses should start preparing now. Although there will be a 180-day transition period, businesses should use this time wisely, as it may take time and resources to design and implement new requirements.
What to do: We recommend starting by reviewing your existing AML/CTF policies and controls to identify potential gaps with the requirements. Then, introduce the missing elements and stay updated on future SFC guidelines.
We’ll continue to track all the changes and will update this article on an ongoing basis. Stay tuned so you don’t miss any important news.