Platform-specific routeVirtual asset trading platform licenceNo passporting

VATP Licence in Hong Kong

Hong Kong VATP is a high-reputation platform route for regulated virtual asset trading platforms. It is not the right first choice for wallet-only, brokerage-only, low-budget or EU passporting projects.

Processing time
From 6 months
Service price
25 500 EUR
Required share capital
Not required
State fee
4 740 HKD
Annual supervision fee
2 740 HKD
Banking difficulty
High
RegulatorSecurities and Futures Commission (SFC)
Market access
No passporting

What is a VATP licence in Hong Kong?

A Hong Kong VATP licence is an SFC route for an operator of a virtual asset trading platform. It is designed for platform businesses that match buyers and sellers, handle token admission, operate market controls and may involve client asset/custody flows; it is not a generic VASP, wallet-only, brokerage-only or EU passporting route.

Best fit: exchange or trading platform operators that need Hong Kong/SFC credibility and can evidence platform controls.

Not enough by itself: applicant status, wallet-only, advisory-only, OTC/brokerage-only or non-platform activity.

Core review topics: licensed status, responsible officers, custody/client assets, token admission, surveillance, cybersecurity and banking readiness.

SFC platform licensing profile

Regulatory authority · Hong Kong

Securities and Futures Commission (SFC)

Hong Kong VATP analysis starts with platform operator scope. SFC content distinguishes licensed VATPs from applicants, so application status and licence status must be handled precisely.

Official regulator website
Regulatory reputation
High

Strong international recognition and established supervision track record.

Setup complexity
High

Reflects documentation depth, governance requirements and expected review friction.

Regulatory risk
Medium

Reflects likelihood of delays, additional information requests or policy uncertainty.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Licensed VATP vs applicant status

The SFC separates licensed virtual asset trading platforms from applicants. Applicant status should never be presented as an issued licence or as confirmation that the platform is compliant.

  • Verify the SFC licensed VATP list before describing any operator as licensed.

  • Application status is not a substitute for platform controls, responsible officers or client asset safeguards.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Platform controls

The core page value is a detailed controls map: custody, client asset segregation, token admission, market surveillance, cybersecurity, conflicts and incident response.

Client asset segregation and custody governance
Owner:—
Evidence:—
Required
Market surveillance, trade monitoring and incident escalation
Owner:—
Evidence:—
Conditional
Cybersecurity, access control and operational resilience evidence
Owner:—
Evidence:—
Recommended
Conflict management across listing, trading and custody functions
Owner:—
Evidence:—
Conditional
Outsourcing and third-party technology risk controls
Owner:—
Evidence:—
Recommended

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Responsible officers and staffing

Local governance and responsible person readiness should be visible before the lead form.

  • Responsible officers with relevant regulated-market and virtual asset experience

    Required

  • Named compliance owner for AML, market integrity and client asset controls

    Required

  • Technology/security owner able to evidence platform resilience

    Required

  • Operations owner for incident response, complaints and client communications

    Required

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Is Hong Kong VATP authorisation right for your project?

Best for

  • Regulated virtual asset trading platform in Asia

Not suitable for

  • Low-budget startups and EU passporting
  • Projects without a prepared banking strategy

Banking difficulty is high for this route. Prepare a banking strategy before committing to the Hong Kong route.

Token admission and product governance

The tokens a platform wants to list are not a minor detail. The content should prompt due diligence, conflicts, market integrity and ongoing monitoring questions.

1Due Diligence
2Approval Gate
3Monitoring
4Delisting / Escalation

Token governance workflow

  • Token due diligence covering issuer, legal status, liquidity, concentration and market integrity risks
    Required
  • Independent listing approval gate with conflict checks and documented decision records
    Required
  • Ongoing monitoring for material token events, volatility, sanctions and technology incidents
    Conditional
  • Delisting and suspension workflow for tokens that no longer satisfy platform standards
    Conditional

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Local substance plan — Hong Kong

A credible local presence can be as important as the filing itself. Regulators, banks and payment providers may all review whether the company has real operating substance.

Local staff

Required

Required

At least one locally-accountable staff member or director is expected.

Physical office

Not required

Not required

Physical office is not a stated requirement for this route.

Audit

Required

Required

External audit is required for ongoing supervision compliance.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Service price (professional fees)Application preparation and professional services.
25 500 EUR EURFixed
State fee
4 740 HKDFrom
Annual supervision feeRecurring annual cost after authorisation.
2 740 HKDFrom
Required share capitalMust be held, not an expenditure.
Not requiredNot applicable
High ongoing cost

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown — Hong Kong

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Cost itemAmount
Service priceApplication preparation and professional services.€25,500
State fee€4,740

Summary

One-off costs
€30,240
Annual (year 1)
€0
Total year 1
€30,240

Adjust to convert to your base currency.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Application process

The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Hong Kong — From 6 months.

Total timelineFrom 6 months

  1. Pre-assessment and scope review

    1–3 weeks

    Define the activity scope, governance model and target markets before formal preparation.

  2. Company setup in Hong Kong

    2–6 weeks

    Establish legal entity, appoint local staff and set up local operating structure.

  3. Documentation and compliance packBottleneck risk

    3–8 weeks

    Prepare AML/CFT policies, governance documents, controls framework and application materials.

  4. Application submission to Securities and Futures Commission

    1–2 weeks

    Submit complete application with all required documentation.

  5. Regulator reviewBottleneck risk

    From 6 months

    Regulator reviews the application. May request clarifications. Incomplete files extend this phase.

    Depends on: File quality and completeness

  6. Authorisation or registration confirmation

    1–4 weeks

    Regulator confirms authorisation or registration. Commence operations.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

What can delay or increase cost

These factors are most likely to affect timelines and budgets for this route.

High setup complexity
High

Setup complexity is rated high for Hong Kong. Company setup, governance and documentation take longer than average.

Likely impactAdd 4–8 weeks to the preparation phase.
MitigationStart company setup and governance planning immediately after scope confirmation.
Banking difficulty
High

Banking difficulty is rated high. Opening accounts for crypto businesses in Hong Kong requires extensive documentation.

Likely impactBanking can delay or block operations for 3–6 months after authorisation.
MitigationIdentify and pre-qualify banking partners before submitting the application.
High maintenance cost
Medium

Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.

Likely impactRecurring annual cost significantly above the one-time service price.
MitigationModel annual compliance costs before committing to this route.
Application completeness
Medium

Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.

Likely impactEach regulator query adds 2–6 weeks to the review phase.
MitigationUse a structured compliance pack. Review file completeness before submission.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Banking and fiat rails

Banking readiness is a major execution risk. Flow-of-funds, custody, client asset and AML materials should be prepared before making banking assumptions.

Banking difficulty
High

Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.

Medium PSP availability
Medium

Reflects availability of payment service providers willing to onboard crypto-licensed entities.

A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.

Preparation checklist

  • Business model and transaction flow description
  • AML/KYC and sanctions controls
  • Expected fiat currencies and payment corridors
  • Source of funds and source of wealth documentation
  • Custody, token and counterparty policies where relevant

Business model fit — Hong Kong

Assess how well this route covers your planned activities.

Fit score

Good fit
1/6
Partial fit
2/6
Poor fit
3/6

Hong Kong may not cover your primary activities

Consider an alternative route that better matches your activity profile.

Compliance documentation

Most crypto licensing routes require a documented compliance framework before submission, not only after approval.

  • Required
    AML/CFT policy and risk assessmentDocument your customer risk model and control framework.
  • Required
    Customer due diligence (CDD) procedures
  • Required
    Enhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
  • Required
    Transaction monitoring system and rules
  • Required
    Sanctions screening procedures
  • Required
    Suspicious activity reporting (SAR) process
  • Required
    MLRO / Compliance officer appointmentLocal accountability may be required.
  • Recommended
    Board-approved governance charter
  • Conditional
    Outsourcing policy and monitoringRequired if functions are outsourced.
  • Required
    ICT / cybersecurity policy
  • Required
    Complaints handling procedure
  • Required
    Annual external audit engagementRequired for ongoing supervision compliance.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Documents to prepare

Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.

0 / 10 required
Required
Recommended
Depends on scope

Corporate documents

AML and compliance

Operational

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Risk assessment

Main risk dimensions for the Hong Kong route.

Banking difficulty
High

Route risk rating — banking difficulty: High. Authorisation does not guarantee bank account opening.

Mitigation: Start banking outreach and compliance preparation before the application.

Setup complexity
High

Route risk rating — setup complexity: High.

Maintenance cost
High

Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.

Regulatory reputation
High

Route risk rating — regulatory reputation: Very high.

Regulatory risk
Medium

Route risk rating — regulatory risk: Medium. Weak compliance, vague scope or insufficient controls increase review risk.

Mitigation: Prepare an evidence-based compliance file before submission.

This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.

Hong Kong VATP vs alternatives

Current

Hong Kong

VATP

Price
25 500 EUR
Timeline
From 6 months
Passporting
No passporting
Banking
High
Reputation
Very high

Dubai (VASP)

VASP

Price
22 300 EUR
Timeline
From 6 months
Passporting
No passporting
Banking
Medium
Reputation
High

+ Broader activity scope, better PSP access

− Lower regulatory reputation than Hong Kong

View route

Malta (MiCA)

MICA

Price
20 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium
Reputation
High

+ EU/EEA passporting for European expansion

− Not suitable for Asia-Pacific focus

View route

Panama

GENERAL

Price
13 500 EUR
Timeline
From 3 months
Passporting
No passporting
Banking
High
Reputation
Low

+ Lowest cost option

− No dedicated licence, high banking risk

View route

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

VATP platform readiness score

Use readiness scoring to separate a platform-ready SFC file from an early concept: licensing status, governance, token admission, custody, surveillance, cybersecurity and banking evidence all need to be prepared before relying on the VATP route.

AML/CFT framework

Documented AML/CFT policies, risk assessment, compliance officer.

Governance structure

Board, management, accountability chain defined.

Banking preparation

Banking strategy and identified partners.

Local substance plan

Local staff and presence in Hong Kong.

Platform readiness

Assess criteria on the left to see your readiness score.

Frequently asked questions

Yes. This route is framed around virtual asset trading platform operators, not every crypto activity.

No. The SFC distinguishes licensed platforms from applicants and warns that applicants are not necessarily licensed or compliant.

Trading platforms involve fiat rails, client assets, token admission, custody and AML risk, all of which increase onboarding scrutiny.

Review VASP, MiCA/CASP, Digital Asset Business or a feasibility route depending on target market and services.

The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.

Your dedicated specialists

  • Enrico Kärvinen

    Enrico

  • Rein Tammik

    Rein

  • Jurata Žukaitė

    Jurata

  • Andrej Kazlauskas

    Andrej

  • Marta Värna

    Marta

  • Katrin Lepik

    Katrin

  • Inga Stankavičiūtė

    Inga

Request a Hong Kong VATP assessment

Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.

Leave open if you want a country comparison.
Select every activity you plan to offer. The licence route may change if you include custody, exchange, trading platform or fiat flows.
Include service fees, regulator fees, share capital, local office or staff, audit and ongoing compliance.

By submitting this form, you agree to be contacted about your crypto licensing request. Do not include passwords, private keys or confidential customer data.