Hong Kong crypto licence 2026: the SFC's virtual asset trading platform rules explained

Do you need a licence to run a crypto exchange in Hong Kong? Yes. Any centralised virtual asset trading platform carrying on business in Hong Kong, or actively marketing its services to Hong Kong investors, must be licensed and regulated by the Securities and Futures Commission, according to the SFC's rules for platform operators. There is no lighter registration route for an exchange that serves the public.

This guide explains how the licence works in 2026: the two ordinances behind it, the capital and custody rules in the SFC's guidelines, the fees and documents, and which platforms already hold a licence. It is a standing reference. For the separate bill that will license crypto dealers, custodians and advisers, see our report on Hong Kong's new crypto licensing bill.

Who needs a Hong Kong crypto licence

The regime sits on two laws. Under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), operating a virtual asset exchange is a licensed "virtual asset service". Under the Securities and Futures Ordinance (Cap. 571), a platform that trades security tokens needs Type 1 (dealing in securities) and Type 7 (providing automated trading services) regulated activities. The AMLO covers non-security tokens; the SFO covers security tokens.

The SFC's advice is to hold both. It says "it would be appropriate" for platforms to apply under both regimes, because a token's classification may change from a non-security token to a security token, or the other way round. Applicants for both regimes can file a single consolidated application online.

The test is location or targeting. A platform does not escape the regime by incorporating offshore if it actively markets to Hong Kong investors. The SFC has not yet published a detailed definition of active marketing, and King & Wood Mallesons noted in January 2026 that the regulator has signalled more guidance on this and related points later in the year.

What the SFC requires: capital, custody and people

The core rulebook is the SFC's Guidelines for Virtual Asset Trading Platform Operators, published in June 2023. Its financial soundness chapter sets three separate tests that a platform must meet at all times:

• Paid-up share capital of not less than HK$5,000,000
• Liquid capital of not less than its required liquid capital, which is the higher of HK$3,000,000 and a basic amount calculated from its business
• Liquid assets held in Hong Kong, such as cash, deposits and treasury bills but not virtual assets, equal to at least 12 months of actual operating expenses on a rolling basis
• A warning to the SFC if liquid capital falls below 120 percent of the required level

Custody rules are where Hong Kong is strictest. Client assets are held through an "Associated Entity", a company that has notified the SFC of that status and holds client assets on the platform's behalf. The guidelines say the platform and its Associated Entity should store 98 percent of client virtual assets in cold storage, except in limited cases the SFC permits, and should minimise transactions out of cold storage.

Losses from custody must be covered. The platform needs an SFC-approved compensation arrangement covering potential loss of 50 percent of client virtual assets in cold storage and 100 percent of those in hot and other storage, which can include third-party insurance. On top of that, the SFC applies fit and proper and competence tests to the company, its shareholders and its responsible officers, the licensed individuals approved to manage and supervise the business.

How to apply, and what it costs

Applications go to the SFC through its WINGS online system. The SFC asks for the application forms, written policies and procedures, documentation showing that a suitable external assessor has been identified, and that assessor's capability statement. The external assessment is a central step: an independent firm reviews whether the platform's systems and controls actually match what it has told the regulator.

The SFC's published fees are modest next to the cost of building a compliant operation. A licensed corporation pays HK$4,740 per regulated activity under the SFO, and a licensed provider pays HK$4,740 for the virtual asset service under the AMLO. Each licensed representative costs HK$1,790 per activity or service, and approval of each responsible officer costs HK$2,950 per activity or service.

How long does it take? The SFC does not publish a fixed processing time. Its own list gives a sense of the pace: the newest licensee, Bixin.com, was licensed on 18 May 2026, while some applicants listed since February 2024 are still waiting. The real cost of a Hong Kong licence is less the fee than the capital, custody, insurance and staffing a platform must carry while the SFC reviews it. Thailand, by comparison, runs a two step process in which the minister grants the licence on the SEC's recommendation, as set out in our Thailand crypto exchange licence guide.

The 13 licensed platforms in 2026

The SFC's list of licensed virtual asset trading platforms, last updated on 16 October 2026, names 13 platforms. In order of licence date they are OSL Exchange (15 December 2020), HashKey Exchange (9 November 2022), HKVAX (3 October 2024), HKbitEX, Accumulus, DFX Labs and EX.IO (all 18 December 2024), PantherTrade and YAX (27 January 2025), Bullish (18 February 2025), BGE (17 June 2025), VDX (13 February 2026) and Bixin.com (18 May 2026).

The same page lists applicants. Crypto.com's Hong Kong entity, Foris DAX HK, is marked as deemed to be licensed, a status that let some applicants keep operating while their files were reviewed; the SFC notes it has not formally licensed deemed applicants. Other applicants include bitV, Nebulas and Bybit's Spark Fintech, which applied on 6 June 2025. Matrixport HK withdrew its application and must close down by 12 January 2027. Platforms that withdrew or had applications returned include OKX, Gate.HK and Huobi HK, part of a wider reshuffle in which global exchanges are choosing which Asian licences to keep, as our report on Binance's licence moves in Asia shows.

The SFC is explicit that the list is not an endorsement: it "does not guarantee the performance or creditworthiness" of any licensed platform. It does, however, say investors should trade only on licensed platforms, and it keeps a separate alert list of suspicious platforms. That list has more than 60 entries, including JPEX, which the SFC added in July 2022. Checking a platform against both lists takes a minute and is the single most useful step before depositing.

Investors are urged to trade virtual assets ONLY on SFC-licensed virtual asset trading platforms.

What changes in 2026 and 2027

The SFC set its direction in September 2025 with the ASPIRe roadmap, five pillars covering access, safeguards, products, infrastructure and relationships. It says it welcomes major international platforms to set up in Hong Kong and wants to "streamline market entry through regulatory clarity". The roadmap also moves custody rules away from fixed ratios toward an outcome based approach, so the 98 percent cold storage rule may become more flexible.

Products are opening up. According to King & Wood Mallesons, the SFC issued a circular on staking services by licensed platforms on 7 April 2025, and licensed platforms can now link to intra-group liquidity through shared order books. The roadmap also explores new token listings and virtual asset derivatives for professional investors only.

The licensing perimeter is also widening. After consultations launched on 27 June 2025, a bill to amend the AMLO and license virtual asset dealers and custodians is expected in the Legislative Council in 2026, King & Wood Mallesons reported in January. The firm said there will be no transitional period for the new regime, so over-the-counter desks and custodians serving Hong Kong clients will need a licence from day one.

Hong Kong has chosen a regime that is expensive to enter and slow to clear, and it is betting that this is what serious institutional money wants. Thirteen licences in almost six years is a small number, but each one carries capital, custody and insurance rules that few markets in Asia match. For a platform weighing the region, the question is not whether the Hong Kong licence is hard to get; it is whether the access it buys is worth the time, and for exchanges targeting regulated capital the answer is increasingly yes.