Investment Management in Hong Kong

Key dates

2016-06-01

Approximate start of the Relevant Period during which Keptain’s liquid capital was window dressed and deficiencies arose.

2018-03-31

Approximate end of the Relevant Period identified by the SFC.

2026-08-24

SFC revoked Chan’s licence and RO approval and began his 10-year prohibition on re-entering the industry.

2036-08-23

Chan’s 10-year industry ban ends.

Suggested considerations

• Firms should consider reconciling every FRR return to bank statements, cleared funds, and post-period dishonour or reversal information rather than relying solely on month-end account balances.
• Compliance teams may wish to test whether cheques, related-party funding, temporary transfers, overdrafts, unsettled receipts, and other non-cash or conditional items meet the applicable FRR eligibility and valuation requirements before inclusion in liquid capital.
• ROs and managers-in-charge should consider documenting their review and challenge of each FRR return, including explanations for material month-end movements and evidence that reported funds were genuinely available and not temporary window dressing.
• Firms should consider implementing daily or intraday escalation triggers that identify actual or foreseeable breaches of the minimum liquid-capital requirement and the 120% notification threshold.
• Where a deficiency occurs or is reasonably identified, firms should consider assessing and documenting whether notification is required under SFO section 146(1) and FRR Rule 55(1), including the one-business-day outer limit under Rule 55(1).
• Compliance teams may wish to review historical FRR returns and supporting bank evidence for similar patterns, particularly where funds were received from connected companies or were reversed shortly after reporting dates.
• Licensed corporations should consider reminding ROs that signing regulatory returns can create personal fitness-and-properness consequences, including licence revocation and a lengthy industry ban, and should ensure that responsibility cannot be reduced to a nominal or administrative role.

What changed

This is a final enforcement action rather than a change to the underlying rules. The SFC applied Rules 4 and 6 of the Securities and Futures (Financial Resources) Rules, under which Keptain was required to maintain at least HK$3 million in liquid capital at all times. The SFC found that cheques deposited at or around month-end but dishonoured before the returns were submitted should not have been included in the liquid-capital calculations; excluding them would have produced deficiencies ranging from HK$731,000 to HK$3,473,000 over 20 months.

Key dates

19 September 2022 – 7 October 2022

- Approximate three‑week period during which LFSHK’s systems were restored in phases and clients could not trade via mobile app or internet platform, relying only on account executives to place orders

19 September 2022

- Ransomware attack on LFSHK’s critical IT infrastructure, affecting servers and core trading‑related systems

7 October 2022

- Completion of LFSHK’s system restoration following the ransomware attack

TBD (post‑incident)

- LFSHK conducted internal reviews and appointed an independent reviewer at the SFC’s request to assess the incident and cybersecurity internal controls; exact dates are not specified but occurred after the attack and prior to enforcement

TBD (enforcement publication date)

- SFC issues public disciplinary action reprimanding and fining LFSHK HK$2.1 million for misconduct relating to inadequate cybersecurity controls; the reference number indicates 2026 publication but the precise calendar date is not specified in the excerpt

Suggested considerations

• Conduct a comprehensive cybersecurity risk assessment and control gap analysis across all critical systems, including trading platforms, email servers, domain controllers, file servers, and accounting systems.
• Implement and regularly review firewall configurations and network monitoring tools to ensure effective protection and detection capabilities for internal and external network traffic.
• Upgrade all operating systems and antivirus software to supported, fully patched versions and establish formal patch and vulnerability management procedures with defined timelines and testing steps.
• Establish and enforce robust user access management policies, including least‑privilege access, periodic recertification of user and privileged accounts, and logging and monitoring of admin activities.
• Implement secure password management solutions and technical controls, eliminating unencrypted storage of credentials and enforcing strong password complexity, rotation, and multi‑factor authentication where applicable.

What changed

• - Licensed corporations must ensure that firewall protection and network monitoring are implemented and effective across critical infrastructure, including file servers, domain controllers, email...
• Licensed corporations must maintain up‑to‑date operating systems and antivirus software, avoiding end‑of‑life or unpatched environments that materially increase vulnerability to ransomware and other...
• Firms must enforce strong user access and privileged account controls, including robust administration of system admin accounts, least‑privilege access models, periodic reviews of access rights, and...
• Firms must implement secure password management practices, prohibiting the storage of credentials in unencrypted files and enforcing strong password policies and technical controls for credential...
• Remote access must be subject to strict controls, including secure configuration of VPN or other remote access solutions, need‑to‑have access principles, and monitoring for unusual or unauthorized...

Key dates

27 April 2012

- CISIAM became licensed under the Securities and Futures Ordinance to carry on Type 4 (advising on securities) and Type 9 (asset management) regulated activities

03 June 2013

- CISIAM obtained a licence to carry on Type 5 (advising on futures contracts) regulated activity

August 2019

- Start of the period during which CISIAM’s failures as fund manager occurred in relation to the Tahoe Life‑related private fund

September 2020

- End of the period during which CISIAM’s failures in managing the private fund took place

Suggested considerations

• Review and update private fund governance frameworks to ensure investment approvals require independent investment discretion, documented due diligence, and explicit challenge of investor‑driven proposals, particularly those originating from client senior management.
• Implement or enhance written procedures to identify “dubious arrangements”, including criteria such as unnecessary structural complexity, unclear commercial rationale, additional costs or risks, related‑party exposure, and potential concealment of asset movements or connected transactions.
• Establish a mandatory escalation and approval process for complex or investor‑driven transactions, requiring risk, compliance, and senior management sign‑off before execution and documented reasoning for proceeding.
• Conduct a gap analysis of all existing private funds to confirm that current and past investments comply with the funds’ investment restrictions and stated objectives, and remediate any breaches including client notification and corrective actions where appropriate.
• Strengthen risk management frameworks for private funds by defining key risk types, setting monitoring thresholds, and implementing periodic risk reporting to senior management and the board.

What changed

• - Asset managers must maintain and apply documented procedures and controls to identify whether proposed private fund arrangements or transactions are dubious, including where structures are...
• Where a proposed arrangement or transaction is assessed as dubious, asset managers may only proceed once they are satisfied that concerns and red flags have been sufficiently addressed and evidenced.
• Fund managers are expected to exercise independent investment discretion and cannot rely solely on investor‑driven proposals, especially from influential client personnel such as chief investment...
• Asset managers must ensure that all fund investments comply with the fund’s stated investment restrictions and align with its stated investment objectives, with documented controls to verify...
• Firms must implement effective measures to identify, manage, and continuously monitor the risks to which private funds are exposed, including counterparty, concentration, structural, and...

Key dates

13 July 2017 – 18 February 2022

- Period during which Stephen Chiu was MIC of Key Business Line, Operational Control and Review, and Overall Management Oversight at Victory

29 October 2019

- The client opened an account at Victory Securities, declared a financial profile, and expressed intention to sell securities held with another brokerage

Shortly after 29 October 2019

- The client placed two sell orders through Victory and provided statements purportedly issued by other brokerages as proof of his holdings in the relevant shares

1 April 2020 – 18 February 2022 Deadline

- Period during which Stephen Chiu was MIC of Compliance and Anti-Money Laundering and Counter-Terrorist Financing at Victory

1 October 2024

- Stephen Chiu resumed his role as MIC of Overall Management Oversight at Victory

Suggested considerations

• Review and update client onboarding procedures to ensure that inconsistencies between clients’ declared financial profiles and claimed asset holdings are systematically identified, documented, and escalated for enhanced due diligence before any orders are executed.
• Implement controls requiring independent verification (e.g. direct confirmation or reliable third‑party checks) of statements and documents purportedly issued by other brokers when these are used to evidence holdings for sell orders.
• Update AML/CFT policies and procedures under AMLO and the SFC Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Corporations) to explicitly cover handling of suspected forged documents and false information supplied by clients.
• Establish or reinforce a formal process for promptly reporting suspected fraudulent, deceptive, or market abusive conduct by clients to the SFC, and where appropriate to JFIU, including clear internal thresholds, escalation paths, and record‑keeping.
• Conduct a gap analysis of existing red flag indicators to ensure they cover situations where the size or nature of client holdings is incommensurate with the client’s stated income, net worth, occupation, or overall risk profile.

What changed

• (Strictly speaking this is an enforcement case rather than a rule change, but it effectively clarifies regulatory expectations and evidences enforcement priorities.)
• Licensed corporations must treat discrepancies between a client’s declared financial profile and purported asset holdings as material red flags, triggering enhanced KYC,...
• Firms must independently verify documents purportedly issued by other brokers, especially when used as proof of holdings for sell orders, and must not rely on such documents at face value when they...
• Licensed corporations are expected to apply risk-based AML/CFT controls to securities sell orders where there is a risk that the client may not beneficially own the assets, or where forged/false...
• Firms must report suspected fraudulent or deceptive conduct by clients to the SFC (and, where applicable, to JFIU) without delay, even where the misconduct appears confined to a single transaction or...

Key dates

10 July 2026

– SFC publication date confirming the 17th high‑level enforcement cooperation meeting between the SFC and CSRC in Hong Kong and the focus on cross‑boundary enforcement and enhanced information exchange

Suggested considerations

• Review existing cross‑boundary business models, trading flows and client bases to identify areas where misconduct or control failures could trigger coordinated enforcement action by both the SFC and CSRC.
• Update enforcement‑facing compliance risk assessments to reflect heightened cross‑boundary enforcement cooperation, including the possibility of information sharing and parallel investigations by both regulators.
• Enhance incident escalation and regulatory engagement protocols to ensure that potential cross‑boundary issues (e.g. market manipulation, insider dealing, cross‑border fraud) are promptly identified and addressed with both Hong Kong and Mainland regulators where relevant.
• Review and, where necessary, strengthen surveillance and market‑abuse monitoring tools to capture cross‑market patterns (e.g. trading in Hong Kong linked to events or positions in Mainland markets).
• Ensure record‑keeping, trade data, client information and cross‑border communication logs are complete, accurate and retrievable, given the regulators’ focus on improving information exchange.

What changed

• - The SFC and CSRC reinforced their commitment to joint enforcement cooperation specifically targeting cross‑boundary crimes and misconduct that affect both Hong Kong and Mainland Chinese markets.
• Both regulators agreed to deepen discussions and coordination around recent major cross‑boundary enforcement cases, indicating more systematic case‑level collaboration and mutual assistance.
• The authorities explicitly prioritised enhancing mechanisms for information exchange, implying more frequent, timely and possibly more granular sharing of regulatory, supervisory and investigative...
• The meeting confirms that cross‑boundary enforcement and investor protection remain strategic enforcement priorities for both the SFC and CSRC, which will likely influence case selection, resource...
• The emphasis on improving enforcement effectiveness and deterrence signals a likely increase in coordinated investigations, simultaneous actions, and potential parallel sanctions in both...

Key dates

10 January 1994

- Summit Ascent Holdings Limited is listed on the Main Board of the Stock Exchange of Hong Kong

22 February 2007

- LET Group Holdings Limited is listed on the Main Board of the Stock Exchange of Hong Kong

September 2024

- The SFC commences legal proceedings under section 214 SFO against Mr Lo, LET and Summit Ascent

27 September 2024

- The SFC issues a press release giving further details of the section 214 proceedings against Mr Lo, LET and Summit Ascent

01 September 2025

- The shares of LET and Summit Ascent are delisted from the Main Board of the Stock Exchange of Hong Kong

Suggested considerations

• Review and map all relationships with controlling shareholders, directors and their offshore vehicles to identify where client assets may be exposed to SFC-driven freezing orders or Chabra relief.
• Update internal litigation and regulatory investigations playbooks to explicitly cover section 214 SFO risks, including the potential for worldwide asset-freezing and receiver appointments even after an issuer is delisted.
• Implement enhanced due diligence on beneficial ownership and control structures, particularly BVI and other offshore vehicles used by controlling shareholders of Hong Kong-listed and recently delisted issuers.
• For banks, broker dealers and custodians, review current accounts, credit exposures, collateral and custody arrangements for clients who are directors, controlling shareholders or their vehicles in Hong Kong issuers, and identify those at heightened risk of SFC enforcement.
• Enhance early-warning triggers in compliance monitoring to escalate promptly when the SFC announces section 214 SFO proceedings or issues press releases suggesting asset preservation measures may be sought.

What changed

• - The Court of First Instance has granted a worldwide freezing injunction over the assets of Mr Lo Kai Bong, prohibiting him from removing, disposing of, dealing with or diminishing the value of his...
• The Court has concurrently granted a worldwide Chabra injunction over the assets of Major Success Group Limited, a BVI company wholly owned and controlled by Mr Lo, on the basis that its assets may...
• The injunctions apply to assets in Hong Kong and worldwide, significantly expanding enforcement risk beyond Hong Kong-situs assets for controlling shareholders and their offshore structures.
• The Court has ordered that both injunctions remain in effect at least until 26 August 2026, subject to further order, meaning the assets will be frozen through the lead-up to trial.
• The injunctions are explicitly tied to ongoing section 214 SFO proceedings seeking remedies for unfair prejudice and misconduct, including a share repurchase order for independent shareholders of LET...

Key dates

22 September 2025

- SFC consultation on HKIDR‑DM published (page last updated on this date)

22 December 2025

- End of three‑month consultation period; last date for submissions to SFC on HKIDR‑DM proposals

Q2 2028

- Target implementation of HKIDR‑DM, concurrent with HKEX’s launch of the Orion Derivatives Platform, subject to completion of system testing and market rehearsals

Suggested considerations

• Conduct a gap analysis comparing existing HKIDR‑S securities processes with expected HKIDR‑DM derivatives requirements, covering data fields, identifiers, and order tagging for futures and options.
• Identify all business lines and systems that submit or route HKFE on‑exchange futures, options and stock options orders, and map required integration points with the HKIDR‑DM centralised data repository.
• Design and implement or adapt a client identification and coding framework (e.g. investor IDs or broker‑to‑client numbers) for derivatives clients, ensuring consistency across securities and derivatives where clients trade both.
• Review and update client onboarding, KYC and data collection forms to ensure capture of all identity information required under HKIDR‑DM, including for existing derivatives clients.
• Develop and implement data protection and privacy controls to manage personal data submitted under HKIDR‑DM, including access controls, retention policies, and compliance with Hong Kong’s Personal Data (Privacy) Ordinance.

What changed

• - The SFC will implement the Hong Kong Investor Identification Regime for the Derivatives Market (HKIDR‑DM), extending investor ID requirements from securities (HKIDR‑S) to exchange‑traded...
• HKIDR‑DM will apply to on‑exchange orders for futures contracts, options contracts and stock options executed through the trading system of Hong Kong Futures Exchange Limited (HKFE).
• Licensed corporations and registered institutions which offer brokerage services or conduct proprietary trading in HKFE‑traded derivatives will be required to submit clients’ names and identity...
• The operational model of HKIDR‑DM will be similar to HKIDR‑S, implying the use of unique client identifiers and order‑level tagging across trading, middle office and reporting systems.
• Implementation of HKIDR‑DM is targeted for the second quarter of 2028, subject to successful completion of system testing and market rehearsals.

Key dates

31 October 2012

- Pegasus Entertainment Holdings Limited is listed on the Growth Enterprise Market of the Stock Exchange of Hong Kong

09 January 2015

- Pegasus transfers its listing from GEM to the Main Board of the Stock Exchange of Hong Kong

25 August 2017

- Upon receipt of earnest money from a buyer for his controlling stake, Wong begins transferring funds to his sister, who starts buying Pegasus shares on the same day

30 August 2017

- By this date, Wong is sending multiple WhatsApp messages to his sister advising on timing and price of share purchases (continuing through to October 2017)

17 October 2017

- Wong’s sister’s purchase period ends, by which time she has acquired over nine million Pegasus shares, largely funded by Wong

Suggested considerations

• Review and update insider dealing and market misconduct policies to explicitly address advising or inducing family members or connected persons to trade on inside information, including where trading is funded by the insider.
• Implement or tighten pre‑clearance and restricted‑list procedures for directors, senior management and controlling shareholders, ensuring controls extend to trading through relatives, nominees, family vehicles and related accounts.
• Establish or reinforce clear written guidance to all “connected persons” (including family members where appropriate) explaining what constitutes inside information under the SFO, and explicitly prohibiting trading or advice based on such information before disclosure.
• Enhance monitoring of employee, director and connected‑person dealings, including periodic attestations requiring disclosure of accounts held by spouses, siblings and close relatives that trade in related listed securities.
• Update training programmes for directors, senior executives and licensed representatives to include this case as a recent Hong Kong example of criminal insider dealing, emphasising the risk of imprisonment and confiscatory orders.

What changed

• - The case confirms that advising another person to trade, while in possession of non‑public, price‑sensitive information obtained in the capacity of chairman and controlling shareholder, constitutes...
• The sentencing outcome reinforces that insider dealing offences in Hong Kong now routinely attract immediate custodial sentences, rather than fines alone, where there is deliberate misuse of inside...
• The decision illustrates that trading by close family members funded by the insider, and executed before public announcement of a controlling-stake disposal, will be treated by the SFC and the courts...
• The case demonstrates that electronic communications (e.g. WhatsApp messages giving timing and price instructions) will be treated as direct evidence of advising another person to deal and of...
• The SFC has signalled, through public statements accompanying the sentencing, that it will continue to pursue criminal prosecutions for insider dealing to “protect investors and uphold confidence in...

Key dates

TBD (est. late 2026)

– SFC and HKMA proceed with the legislative process to introduce the proposed amendments to the Clearing Rules, following the conclusion of the consultation

29 January 2026

– SFC and HKMA issue the joint consultation paper on standardising calculation periods under the Clearing Rules

27 February 2026 Deadline

– Deadline for market participants to submit comments on the proposed amendments to the Clearing Rules

01 March 2027

– Proposed amendments to the Clearing Rules come into effect, designating 1 March to 31 May and 1 September to 30 November each year as standard calculation periods

Suggested considerations

• Map current OTC derivative portfolios and position‑monitoring systems to the new standard calculation periods (1 March–31 May and 1 September–30 November) and update internal calendars and compliance checklists accordingly.
• Review and amend internal policies, procedures, and control frameworks for mandatory clearing, including position‑sizing methodologies, threshold calculations, and record‑keeping requirements, to reflect the permanent calculation‑period structure.
• Coordinate with legal and compliance teams to track the progress of the legislative amendments and ensure that internal implementation timelines align with the expected effective date of 1 March 2027.
• Update trade capture, risk, and reporting systems to flag trades and positions that fall within the new calculation periods and to generate alerts when clearing thresholds are approached or breached.
• Train relevant front‑office, middle‑office, and compliance staff on the new calculation‑period regime, including the timing of Prescribed Days and the implications for trade execution, clearing decisions, and documentation.

What changed

• - The Clearing Rules will be amended to designate two fixed calendar periods each year—1 March to 31 May and 1 September to 30 November—as calculation periods for determining mandatory clearing...
• The new standard calculation periods will apply from 1 March 2027 onwards, creating a permanent formulaic approach that generates future calculation periods without requiring further legislative...
• The existing approach of periodically updating the list of calculation periods in the Clearing Rules via legislative amendments will be replaced by this once‑and‑for‑all standardisation.
• The Prescribed Days associated with each calculation period will also be aligned with the new standard periods, providing greater clarity on when clearing obligations are triggered and when positions...
• The change is intended to increase certainty for derivative dealers in identifying future calculation periods and to facilitate more effective internal planning and compliance monitoring.

Key dates

February 2019

- Start of period during which XHK failed to promptly transfer non‑client money (commissions and interest) out of client segregated accounts, contrary to the CMR

January 2020

- Start of period during which XHK submitted financial returns with accounting errors under the FRR, leading to misstated liquid capital

March 2021

- Start of period in which XHK transferred client money from segregated accounts to overseas brokers’ accounts without written client direction or standing authority, in breach of the CMR

April 2021

- End of period of unauthorised transfers of client money from segregated accounts to overseas brokers’ accounts

June 2021 Deadline

- End of period during which XHK’s FRR financial returns contained accounting errors and its actual required liquid capital was in deficit for four months, with deficits ranging from HK$3.6 million to HK$32.3 million

Suggested considerations

• Review and, where necessary, update internal policies and procedures to ensure continuous compliance with the Securities and Futures (Financial Resources) Rules, including robust controls over capital monitoring and financial return preparation.
• Implement or enhance daily (or more frequent, as appropriate) capital monitoring processes that detect and escalate any actual or potential liquid capital deficits before they arise and ensure timely remedial action.
• Conduct a comprehensive review of all external service providers involved in financial reporting, prudential calculations, and FRR returns to verify and document their competence, relevant experience, and FRR knowledge, and update outsourcing due diligence criteria accordingly.
• Establish or strengthen formal governance and oversight frameworks for outsourced finance functions, including clear accountability, documented review of work performed, periodic quality assessments, and rights of audit.
• Provide targeted FRR training to finance, compliance, and relevant front‑office staff so they understand FRR calculations, common error types, and their responsibilities in reviewing and approving FRR returns before submission.

What changed

• - The SFC reiterates that licensed corporations must maintain required liquid capital at all times under the Securities and Futures (Financial Resources) Rules (FRR), and any deficit (even if later...
• The enforcement confirms that firms are strictly accountable for the accuracy of financial returns submitted under the FRR, including where preparation and compilation are outsourced to external...
• The SFC clarifies that external service providers involved in financial returns and FRR compliance must be demonstrably competent and possess relevant FRR knowledge and experience, and that licensed...
• The case reinforces that internal staff responsible for FRR reporting must be adequately trained and familiar with FRR requirements, with effective review and challenge processes before submissions...
• The SFC confirms that transferring client money from segregated client accounts to overseas brokers’ accounts requires a valid written direction or standing authority from the client in accordance...

Key dates

19 February 2025

- SFC issues its ASPIRe roadmap, with “Access” identified as one of five pillars and VA regulatory expansion flagged as a strategic priority

27 June 2025

- Consultation papers published on legislative proposals to regulate VA dealing and VA custodian service providers, setting the broader perimeter for VA intermediaries

24 December 2025

- Consultation conclusions issued on legislative proposals to regulate VA dealing and VA custodian service providers, confirming direction for those regimes

24 December 2025

- FSTB and SFC launch further consultation on VA advisory and VA management regimes, which has now concluded

2026 (TBD – bill introduction)

- FSTB and SFC aim to introduce a bill into the Legislative Council to establish VA advisory and VA management regimes under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615)

Suggested considerations

• Conduct a gap analysis comparing current or planned virtual asset advisory and management activities against Type 4 and Type 9 requirements under the Securities and Futures Ordinance to identify where equivalent capabilities, controls and governance will be required under the new VA regimes.
• Map all group entities and business lines that provide VA-related advice, research, recommendations or portfolio management to clients in or from Hong Kong, and determine which entities will need licensing or authorisation under the forthcoming AMLO-based regimes.
• Initiate early engagement with the SFC (e.g. via pre-application meetings or WINGS enquiries) to clarify how existing licences, business models and cross-border arrangements will be treated under the new VA advisory and management regimes.
• Review and, where necessary, enhance AML/CTF frameworks, including customer due diligence, transaction monitoring, sanctions screening and ongoing review procedures, to ensure they are robust enough for VA-specific risks anticipated under AMLO-based regulation.
• Update internal policies and procedures on suitability, product due diligence, risk disclosure, conflicts of interest and best execution to explicitly cover VA advisory and VA management services in line with standards applied to traditional securities and funds.

What changed

• - The Hong Kong Government and SFC have confirmed that dedicated regulatory regimes for VA advisory services and VA management services will be created under the Anti-Money Laundering and...
• The regulatory scope and standards of the VA advisory regime will be aligned with Type 4 “advising on securities” regulated activity under the Securities and Futures Ordinance, applying a “same...
• The regulatory scope and standards of the VA management regime will be aligned with Type 9 “asset management” regulated activity under the Securities and Futures Ordinance, implying broadly...
• The consultation received broad market support across 51 responding stakeholders, and the SFC has treated this as a mandate to proceed to finalisation of the detailed legislative proposals and...
• The new VA advisory and management regimes will sit alongside existing and proposed VA regimes for: VA trading platforms, stablecoin issuers, VA dealing and VA custody, forming an end-to-end...

Key dates

31 October 2012

– Pegasus Entertainment Holdings Limited is listed on the Growth Enterprise Market of the Stock Exchange of Hong Kong

09 January 2015

– Pegasus transfers its listing from GEM to the Main Board

25 August 2017

– Pegasus receives HK$10 million earnest money from a potential buyer of Wong’s controlling stake; on the same day, Wong starts transferring funds to his sister, who begins buying Pegasus shares

30 August 2017

– From this date, Wong sends multiple WhatsApp messages to his sister, advising on timing and price for purchasing Pegasus shares

17 October 2017

– End of the period during which Wong’s sister buys more than nine million Pegasus shares using, in large part, funds transferred by Wong

Suggested considerations

• Review and update insider dealing and market misconduct policies to explicitly cover “counselling or procuring” trading by family members, nominees, and other connected persons, in line with Part XIII and Part XIV of the Securities and Futures Ordinance (Cap. 571).
• Update staff and director training materials to include concrete examples of prohibited conduct, including funding relatives’ accounts and giving trading instructions via messaging apps while in possession of inside information about control transactions, MOUs, or earnest money arrangements.
• Strengthen personal account dealing policies to require pre‑clearance and enhanced scrutiny for trades in securities of issuers where the employee, director, or major shareholder is directly or indirectly involved in control stake negotiations or other price‑sensitive corporate events.
• Implement or enhance procedures to identify and log potential inside information events (such as MOUs for stake sales, receipt of earnest money, or other significant transaction milestones) and to trigger trading blackouts for relevant insiders and their close associates.
• Conduct targeted thematic reviews of recent and ongoing corporate finance mandates and control stake transactions handled by the firm to identify any gaps in information barriers, wall‑crossing procedures, or monitoring of insiders’ and their relatives’ trading activities.

What changed

• - The conviction reinforces the SFC’s enforcement position that “counselling or procuring” another person to trade, including a close family member, while in possession of inside information...
• The case highlights that use of personal communication channels (e.g., WhatsApp) to direct trading can be decisive evidence in insider dealing prosecutions, increasing expectations that firms monitor...
• The conviction confirms that controlling shareholders and chairpersons of Hong Kong–listed companies are expected to treat negotiations for disposal of control stakes, memoranda of understanding...
• The SFC has publicly quantified the estimated illicit profits (over HK$1 million) earned via the relative’s trading, signalling a continued focus on disgorgement and benefit analysis in enforcement...
• The case continues the SFC’s trend of using criminal prosecution, rather than solely civil Market Misconduct Tribunal proceedings, for insider dealing involving abuse of senior positions and close...

Key dates

January 2016

March 2021; Period of staff personal trading breaches investigated by SFC

Prior to 2021

Impression's staff dealing policies not implemented/enforced

Since 2021

Impression implemented remedial post-trade monitoring

2 April 2026

1 December 2026; Mr. Liu Shan's 8-month industry ban (ends ~8 months later)

8 April 2026

SFC public announcement of sanctions (today's date marks proximity to ban start)

Suggested considerations

• Conduct gap analysis: Review staff dealing policies against FMCC and Code of Conduct para. 12.2; ensure prior written approvals, 30-day holding rules, and bans on same-day/same-security trades with managed funds.
• Implement/enhance controls: Deploy automated pre- and post-trade monitoring for personal/related accounts; flag same-day trades, IPO overlaps, and price discrepancies.
• Senior management accountability: ROs/manager-in-charge must actively supervise; document training on conflicts and policy enforcement.
• Audit and remediate: Perform immediate staff account disclosures; test for undisclosed beneficial interests; retain records for SFC inspections.
• Training: Mandatory annual sessions on FMCC compliance, with attestations of no external accounts or conflicts.

What changed

This is an enforcement action, not a new rule, but it reinforces existing requirements under the Fund Manager Code of Conduct (FMCC) and paragraph 12.2 of the Code of Conduct for Persons Licensed by or Registered with the SFC, mandating licensed corporations to implement and enforce staff dealing policies, including prior approvals, monitoring of personal trades (including related accounts), and conflict mitigation.

Key dates

25 July 2017 – 31 August 2020

Period during which Lui held licenses for Types 1, 4, and 9 regulated activities

September 2017 – June 2020

Period during which the misconduct occurred (five unsecured loans totalling $22.5 million extended to Lui's controlled company)

31 July 2024

Thunder Capital Limited's (later renamed Yupei Fortune Capital Limited) SFC licence was revoked

24 March 2026

SFC announcement of lifetime ban and $17.43 million fine

Suggested considerations

• *Immediate Actions (0-30 days):
• *Conflict of Interest Audit: Conduct a comprehensive review of all current and recent transactions involving connected parties, including loans, investments, or service arrangements where licensed staff have beneficial interests.
• *Policy Review: Update or strengthen conflict of interest policies to explicitly require:
• Written disclosure of all material conflicts before investment committee meetings
• Independent review and approval of transactions involving conflicted parties

What changed

• This is not a regulatory change but rather an enforcement precedent establishing the SFC's expectations regarding:
• Conflict of Interest Disclosure: Licensed representatives must fully disclose all material conflicts of interest to investment committees and fund stakeholders, particularly when recommending...
• Fiduciary Duty Standards: Fund managers and their representatives must ensure fair treatment of fund investors and cannot exploit their position to divert fund assets or loan proceeds to themselves...
• Investment Committee Governance: Investment committees cannot rely solely on recommendations from conflicted parties without independent verification and proper conflict management protocols.
• Connected Party Transactions: Unsecured loans to connected entities require heightened scrutiny, independent approval, and ongoing monitoring to prevent asset diversion.

Key dates

August 2018

July 2021; Period of Kylin's violations

Late 2020

SFC limited review prompted Kylin's remedial measures

31 December 2023

Kylin ceased regulated activities

9 October 2024

SFC circular on private fund deficiencies (immediate reference for remediation)

22 January 2025

SFC revoked Kylin's Type 9 license (following application)

Suggested considerations

• Conduct gap analysis: Review private fund operations against five failure areas (conflicts, reconciliations/valuations/audits, KYC/suitability, AML/CTF records, investor representations) using FMCC and 9 Oct 2024 circular.
• Enhance systems/controls: Implement monthly asset reconciliations, independent audits, automated KYC/suitability tools, and conflict registers; ensure AML/CTF records are audit-ready.
• Senior management oversight: ROs/MICs to document personal accountability; train on self-reporting breaches (Code of Conduct para 12.5).
• Investor communications: Cease any claims of suitability exemptions for professional investors; update disclosures.
• Remediation evidence: Like Kylin, document post-review fixes to mitigate sanctions.

What changed

• This is an enforcement action, not a new rule change, but it reinforces and exemplifies existing obligations under the Securities and Futures Ordinance (SFO), Fund Manager Code of Conduct (FMCC), and...
• Mandatory conflict management and disclosure: Firms must identify, manage, and disclose conflicts, e.g., loans from the manager or directors to funds.
• Asset reconciliation and valuation: Monthly reconciliations, regular valuations, and independent audits of fund financials are required.
• KYC/suitability assessments: Adequate systems/controls for client due diligence and suitability, even for professional investors (no blanket exemptions).
• AML/CTF compliance: Records must demonstrate ongoing adherence; misrepresentations to investors on exemptions are prohibited.