Crypto asset regulation in Hong Kong

Which body regulates crypto-assets and related services?

Currently, there is no specific legislative framework in Hong Kong which regulates crypto-assets and therefore no single regulatory body governs such crypto-assets.  However, a number of financial regulators have issued guidance relating to crypto-assets, including the Securities and Futures Commission (SFC), the Hong Kong Monetary Authority (HKMA) and the Insurance Authority (IA).  

If a crypto-asset has characteristics of a security as defined under the Securities and Futures Ordinance (SFO) then it will be regulated by the SFC as a security in accordance with the SFO and other relevant laws and regulations.  Further, the regime governing the offering/marketing of financial products in Hong Kong will be relevant if a crypto-asset qualifies as a security.  Crypto-assets that are securities may also be subject to laws concerning regulated activities (which attract licensing and authorisation requirements).

Does any law regulate crypto-assets or crypto-asset service providers such as exchanges?

As explained in Q1, the SFO regulates crypto-assets which have characteristics of a security. Financial regulators such as the HKMA and the SFC have also issued additional regulatory guidance to regulated entities concerning activities involving crypto-assets including:

• the SFC’s regulatory statement and associated licensing terms to Hong Kong licensed asset managers in relation to managing and distributing funds that invest in virtual assets ;
• the HKMA’s guidance to authorized institutions (which includes licensed banks) on the regulatory approaches to authorized institutions’ engagement with crypto-assets and crypto-asset service providers ; and
• the HKMA-SFC joint circular on the distribution of virtual asset-related products and virtual asset related dealing and advisory services .

The regulatory regime in relation to the regulation of virtual assets trading platforms (VATP) currently operates on an "opt-in" basis.  A centralised  VATP can "opt-in" to regulation by offering to trade at least one token on its platform which qualifies as a security.  A VATP which opts-in will need to be licensed by the SFC, and once licensed, a VATP will be required to adhere to licensing conditions (including offering its services to professional investors only) as well as other conduct requirements.

On 3 November 2020, the Financial Services and the Treasury Bureau (FSTB) published a consultation paper on its proposals to amend the Anti-Money Laundering and Counter Terrorist Financing Ordinance (AMLO) to bring exchanges which offer crypto-assets that do not qualify as “securities” within the regulatory oversight of the SFC (VASP regime).  The new rules are designed to close the existing regulatory gap and regulate certain providers of non-securities crypto-asset services (also known as virtual assets service providers or VASPs) for the first time. The FSTB published its consultation conclusions on the VASP regime in May 2021 and an amendment bill is expected to be introduced into the Legislative Council in the second quarter of 2022.  The VASP regime will likely come into effect in 2022/2023.

Has a national law or regulation defined "crypto-asset" and/or "cryptocurrency"?

There is no statutory definition of “crypto-asset” or “cryptocurrency” in Hong Kong. However, these terms are often used interchangeably with “virtual assets”.  As regards the definition of “virtual asset”, the current proposal, as outlined in the consultation conclusions on the VASP regime, is to introduce a new defined term of “virtual asset” in the amended AMLO to mean a digital representation of value that (i) is expressed as a unit of account or a store of economic value; (ii) functions (or is intended to function) as a medium of exchange accepted by the public as payment for goods or services or for the discharge of a debt, or for investment purposes; and (iii) can be transferred, stored or traded electronically. The definition is not intended to cover digital representations of fiat currencies (including digital currencies issued by central banks), financial assets already regulated under the SFO as well as certain closed-loop, limited purpose items.

What money laundering regulations, including any due diligence requirements, apply to crypto-assets?

The AMLO is the principal legislation stipulating customer due diligence (CDD) and record-keeping requirements and applies to specified financial institutions registered or licensed in Hong Kong (as well as designated non-financial businesses and professions in Hong Kong).  The AMLO does not specifically address requirements as they relate to crypto-assets but the SFC has published licensing conditions applicable to VATPs which include additional AML/CTF guidance and requirements for VATP operators.  For example, the licensing conditions specify that a VATP is required to obtain additional customer information to help determine the client’s business and risk profile and conduct ongoing due diligence on the business relationship including, wherever relevant, an IP address with an associated time stamp, geo-location data, device identifiers, virtual asset wallet addresses, and transaction hashes.  The SFC also expects a VATP to use appropriate technology and third party services (where appropriate) to identify situations which warrant enhanced CDD e.g. transactions involving tainted wallet addresses such as “darknet”; transactions involving virtual assets with a higher risk or greater anonymity; and transactions involving the use of proxies or any unverifiable or high risk IP geographical locations.

While the VASP regime is not yet in operation, licensed VASPs will also be required to comply with AML/CTF requirements under Schedule 2 to the AMLO which includes CDD and record-keeping requirements.  In addition, the SFC will be empowered to supervise the AML/CTF conduct of licensed VASPs and enforce other regulatory requirements in accordance with the AMLO stipulations.

Certain providers of ancillary services may also already be covered under existing regimes requiring CDD measures to be carried out.  For example, custody providers that operate under a trust model may require licensing as a trust company service provider and therefore subject the CDD requirements under AMLO.

What rules apply to the promotion of crypto-assets?

There is no specific legislation governing the promotion of crypto-assets in Hong Kong. As mentioned in Q1 above, the regime governing the offering/marketing of financial products in Hong Kong will only be relevant if a crypto-asset qualifies as a security.  Please note that the SFC has also issued a warning statement to investors in 2019 regarding virtual assets futures contracts. Given the risks associated with these types of contracts, the SFC has stated that it would not likely grant a licence to any persons intending to carry on a business in such futures contracts. In a similar vein, any offering or marketing of financial products involving crypto-derivatives to retail investors are also unlikely to be approved by the SFC (although per the HKMA-SFC joint circular, the “professional investors only” restriction is not imposed for the distribution of a limited suite products by intermediaries e.g. virtual assets-related derivative products that are traded on regulated exchanges specified by the SFC, or exchange-traded virtual assets derivative funds that are authorised or approved for offering to retail investors by the respective regulator in a designated jurisdiction).
  
It is also worth noting that when the proposed VASP regime takes effect, it will prohibit any person from actively marketing a regulated virtual assets activity (or services associated with a virtual assets exchange) to the Hong Kong public, unless licensed by the SFC.

Do different crypto-asset rules apply to wholesale and retail markets, for example, on the sale of derivatives?

As mentioned in Q1, there is no specific legislation framework which regulates crypto-assets.  Given the risks associated with crypto-assets, there are rules under various regimes which prohibit the relevant licensees from targeting or offering crypto-asset products to retail investors.  For example, under the proposed VASP regime, a virtual asset exchange can only provide services to professional investors (i.e. institutional investors or those that meet specified asset threshold tests).  The SFC-HKMA joint circular also specifies that, except for a limited suite of products, virtual assets-related products which are considered complex products should only be offered to professional investors (e.g. an overseas virtual assets non-derivative ETF would very likely be considered a complex product and should only be offered to professional investors).

Does any existing or proposed national law impose requirements on issuers of stablecoin?

If a stablecoin fulfils the meaning of a stored-value facility (SVF) in Hong Kong in accordance with the Payment Systems and Stored Value Facilities Ordinance (PSSVFO), it will be subject to a mandatory licensing regime administered by the HKMA.  In other words, the issuer of the stablecoin will need to comply with the PSSVFO and other requirements, including guidelines, practice notes and supervisory requirements, issued by the HKMA.  However, the definition of an SVF under the PSSVFO may not cover certain types of stablecoins.  The HKMA has therefore recently published a Discussion Paper on Crypto-assets and Stablecoins (Stablecoins Paper) in which it outlines its views on how to expand Hong Kong’s regulatory framework for stablecoins.  A few of the key messages are outlined below.

Payment related stablecoins

Asset-linked stablecoins

Regulatory requirements