Wealth & Private Banking regulatory updates from Hong Kong.
We track 29 Wealth & Private Banking updates from Hong Kong regulators, published by SFC. The archive covers 11 speeches, 11 news items and 4 enforcement actions. Most recent update: September 2026. Coverage runs from 2025 to 2026.
This is a regulatory speech and policy announcement from the SFC outlining a strategic action plan aligned with Hong Kong's Five-Year Plan. It provides regulatory signals on key development areas (RMB ecosystem, mutual market access, market innovation, risk monitoring) and governance priorities, but does not impose...
The content is a news announcement in which the SFC expresses support for the Chief Executive's Five-Year Plan and 2026 Policy Address. It outlines strategic priorities (offshore RMB hub, wealth management, capital markets enhancement) and indicates the SFC Board will consider how to support implementation, but...
This is an informational news release announcing results of the SFC-HKMA joint annual survey on non-exchange-traded investment product sales. It reports market trends (63% YoY growth, record participation, FICC product demand) and product distribution patterns (CIS overtaking structured products, increased...
The SFC circular establishes new mandatory disclosure requirements and introduces a 50% NAV threshold for classifying funds as complex products subject to heightened distribution requirements. This affects fund managers' compliance obligations and investor documentation practices.
The SFC has reprimanded and fined Luk Fook Securities (HK) Limited HK$2.1 million for systemic failures to implement fundamental cybersecurity controls, which left its core infrastructure vulnerable to a ransomware attack and caused a roughly three‑week disruption to client trading services. This action reinforces that cybersecurity requirements for Hong Kong licensed corporations are treated as core conduct and governance obligations, and that basic control failures (firewalls, patching, access management, backups, training) will be sanctioned even in the absence of direct client financial loss.
Key dates
19 September 2022 – 7 October 2022
- Approximate three‑week period during which LFSHK’s systems were restored in phases and clients could not trade via mobile app or internet platform, relying only on account executives to place orders
19 September 2022
- Ransomware attack on LFSHK’s critical IT infrastructure, affecting servers and core trading‑related systems
7 October 2022
- Completion of LFSHK’s system restoration following the ransomware attack
TBD (post‑incident)
- LFSHK conducted internal reviews and appointed an independent reviewer at the SFC’s request to assess the incident and cybersecurity internal controls; exact dates are not specified but occurred after the attack and prior to enforcement
TBD (enforcement publication date)
- SFC issues public disciplinary action reprimanding and fining LFSHK HK$2.1 million for misconduct relating to inadequate cybersecurity controls; the reference number indicates 2026 publication but the precise calendar date is not specified in the excerpt
Suggested considerations
Conduct a comprehensive cybersecurity risk assessment and control gap analysis across all critical systems, including trading platforms, email servers, domain controllers, file servers, and accounting systems.
Implement and regularly review firewall configurations and network monitoring tools to ensure effective protection and detection capabilities for internal and external network traffic.
Upgrade all operating systems and antivirus software to supported, fully patched versions and establish formal patch and vulnerability management procedures with defined timelines and testing steps.
Establish and enforce robust user access management policies, including least‑privilege access, periodic recertification of user and privileged accounts, and logging and monitoring of admin activities.
Implement secure password management solutions and technical controls, eliminating unencrypted storage of credentials and enforcing strong password complexity, rotation, and multi‑factor authentication where applicable.
What changed
- Licensed corporations must ensure that firewall protection and network monitoring are implemented and effective across critical infrastructure, including file servers, domain controllers, email...
Licensed corporations must maintain up‑to‑date operating systems and antivirus software, avoiding end‑of‑life or unpatched environments that materially increase vulnerability to ransomware and other...
Firms must enforce strong user access and privileged account controls, including robust administration of system admin accounts, least‑privilege access models, periodic reviews of access rights, and...
Firms must implement secure password management practices, prohibiting the storage of credentials in unencrypted files and enforcing strong password policies and technical controls for credential...
Remote access must be subject to strict controls, including secure configuration of VPN or other remote access solutions, need‑to‑have access principles, and monitoring for unusual or unauthorized...
Compliance impact
Non‑compliance with SFC cybersecurity requirements and internal control guidelines can lead to findings of misconduct, public reprimands, and significant financial penalties, even where clients do not suffer direct financial loss. Repeated or severe deficiencies may also result in more intrusive supervisory actions, reputational damage, and potential constraints on business operations, particularly for online or technology‑dependent business models.
SFC survey reporting on Hong Kong's asset and wealth management sector performance in 2025. Content is informational/statistical in nature, highlighting record AUM growth, fund inflows, and regulatory licensing trends. No compliance violations or urgent regulatory actions indicated.
This is an informational speech announcement from the SFC about active stewardship in Hong Kong's asset and wealth management sector. It is regulatory guidance/thought leadership rather than a binding regulatory requirement, making it informational content with null urgency.
The West Kowloon Magistrates’ Court has sentenced Pegasus Entertainment’s former chairman and controlling shareholder, Wong Pak Ming, to five months’ imprisonment and a fine equal to the profits realised by his sister, following conviction for insider dealing under Hong Kong’s Securities and Futures Ordinance (SFO). The case underscores SFC’s readiness to pursue custodial sentences where a connected person misuses inside information, including where trading is carried out through or for relatives funded by the insider, and highlights the evidential weight the courts will place on electronic communications such as WhatsApp messages.
Key dates
31 October 2012
- Pegasus Entertainment Holdings Limited is listed on the Growth Enterprise Market of the Stock Exchange of Hong Kong
09 January 2015
- Pegasus transfers its listing from GEM to the Main Board of the Stock Exchange of Hong Kong
25 August 2017
- Upon receipt of earnest money from a buyer for his controlling stake, Wong begins transferring funds to his sister, who starts buying Pegasus shares on the same day
30 August 2017
- By this date, Wong is sending multiple WhatsApp messages to his sister advising on timing and price of share purchases (continuing through to October 2017)
17 October 2017
- Wong’s sister’s purchase period ends, by which time she has acquired over nine million Pegasus shares, largely funded by Wong
Suggested considerations
Review and update insider dealing and market misconduct policies to explicitly address advising or inducing family members or connected persons to trade on inside information, including where trading is funded by the insider.
Implement or tighten pre‑clearance and restricted‑list procedures for directors, senior management and controlling shareholders, ensuring controls extend to trading through relatives, nominees, family vehicles and related accounts.
Establish or reinforce clear written guidance to all “connected persons” (including family members where appropriate) explaining what constitutes inside information under the SFO, and explicitly prohibiting trading or advice based on such information before disclosure.
Enhance monitoring of employee, director and connected‑person dealings, including periodic attestations requiring disclosure of accounts held by spouses, siblings and close relatives that trade in related listed securities.
Update training programmes for directors, senior executives and licensed representatives to include this case as a recent Hong Kong example of criminal insider dealing, emphasising the risk of imprisonment and confiscatory orders.
What changed
- The case confirms that advising another person to trade, while in possession of non‑public, price‑sensitive information obtained in the capacity of chairman and controlling shareholder, constitutes...
The sentencing outcome reinforces that insider dealing offences in Hong Kong now routinely attract immediate custodial sentences, rather than fines alone, where there is deliberate misuse of inside...
The decision illustrates that trading by close family members funded by the insider, and executed before public announcement of a controlling-stake disposal, will be treated by the SFC and the courts...
The case demonstrates that electronic communications (e.g. WhatsApp messages giving timing and price instructions) will be treated as direct evidence of advising another person to deal and of...
The SFC has signalled, through public statements accompanying the sentencing, that it will continue to pursue criminal prosecutions for insider dealing to “protect investors and uphold confidence in...
Compliance impact
Non‑compliance with Hong Kong’s insider dealing provisions can result in criminal prosecution, immediate custodial sentences, fines equal to or exceeding illicit profits and recovery of SFC investigation costs, as seen in this case. Beyond monetary and liberty risks, individuals and firms face significant reputational damage and potential regulatory action against licensed entities and responsible officers.
The Financial Services and the Treasury Bureau (FSTB) and the Securities and Futures Commission (SFC) have concluded their consultation on **new virtual asset (VA) advisory and management regimes**, confirming that these will be legislated under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615) and aligned with existing Type 4 and Type 9 regimes under the Securities and Futures Ordinance.
This materially expands Hong Kong’s VA perimeter: firms providing VA investment advice or VA portfolio management will be brought into a statutory licensing and AML/CTF framework comparable to traditional securities and asset management, with an expected bill to be introduced into LegCo in 2026.
Key dates
19 February 2025
- SFC issues its ASPIRe roadmap, with “Access” identified as one of five pillars and VA regulatory expansion flagged as a strategic priority
27 June 2025
- Consultation papers published on legislative proposals to regulate VA dealing and VA custodian service providers, setting the broader perimeter for VA intermediaries
24 December 2025
- Consultation conclusions issued on legislative proposals to regulate VA dealing and VA custodian service providers, confirming direction for those regimes
24 December 2025
- FSTB and SFC launch further consultation on VA advisory and VA management regimes, which has now concluded
2026 (TBD – bill introduction)
- FSTB and SFC aim to introduce a bill into the Legislative Council to establish VA advisory and VA management regimes under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615)
Suggested considerations
Conduct a gap analysis comparing current or planned virtual asset advisory and management activities against Type 4 and Type 9 requirements under the Securities and Futures Ordinance to identify where equivalent capabilities, controls and governance will be required under the new VA regimes.
Map all group entities and business lines that provide VA-related advice, research, recommendations or portfolio management to clients in or from Hong Kong, and determine which entities will need licensing or authorisation under the forthcoming AMLO-based regimes.
Initiate early engagement with the SFC (e.g. via pre-application meetings or WINGS enquiries) to clarify how existing licences, business models and cross-border arrangements will be treated under the new VA advisory and management regimes.
Review and, where necessary, enhance AML/CTF frameworks, including customer due diligence, transaction monitoring, sanctions screening and ongoing review procedures, to ensure they are robust enough for VA-specific risks anticipated under AMLO-based regulation.
Update internal policies and procedures on suitability, product due diligence, risk disclosure, conflicts of interest and best execution to explicitly cover VA advisory and VA management services in line with standards applied to traditional securities and funds.
What changed
- The Hong Kong Government and SFC have confirmed that dedicated regulatory regimes for VA advisory services and VA management services will be created under the Anti-Money Laundering and...
The regulatory scope and standards of the VA advisory regime will be aligned with Type 4 “advising on securities” regulated activity under the Securities and Futures Ordinance, applying a “same...
The regulatory scope and standards of the VA management regime will be aligned with Type 9 “asset management” regulated activity under the Securities and Futures Ordinance, implying broadly...
The consultation received broad market support across 51 responding stakeholders, and the SFC has treated this as a mandate to proceed to finalisation of the detailed legislative proposals and...
The new VA advisory and management regimes will sit alongside existing and proposed VA regimes for: VA trading platforms, stablecoin issuers, VA dealing and VA custody, forming an end-to-end...
Compliance impact
The impact is high: VA advisory and management activities that were previously in grey or partially covered areas will become explicitly regulated under AMLO, with enforcement, licensing and AML/CTF expectations aligned to traditional financial services.
The Eastern Magistrates’ Court has convicted movie producer and former Pegasus Entertainment Holdings Limited chairman Wong Pak Ming of criminal insider dealing for directing his sister to buy Pegasus shares in 2017 while in possession of undisclosed price‑sensitive information about the sale of his controlling stake. The case underscores that the Securities and Futures Commission (SFC) will actively prosecute “tipping” and trading via connected persons, and that listed-company insiders must treat funding and advising relatives as insider dealing risk events.
Key dates
31 October 2012
– Pegasus Entertainment Holdings Limited is listed on the Growth Enterprise Market of the Stock Exchange of Hong Kong
09 January 2015
– Pegasus transfers its listing from GEM to the Main Board
25 August 2017
– Pegasus receives HK$10 million earnest money from a potential buyer of Wong’s controlling stake; on the same day, Wong starts transferring funds to his sister, who begins buying Pegasus shares
30 August 2017
– From this date, Wong sends multiple WhatsApp messages to his sister, advising on timing and price for purchasing Pegasus shares
17 October 2017
– End of the period during which Wong’s sister buys more than nine million Pegasus shares using, in large part, funds transferred by Wong
Suggested considerations
Review and update insider dealing and market misconduct policies to explicitly cover “counselling or procuring” trading by family members, nominees, and other connected persons, in line with Part XIII and Part XIV of the Securities and Futures Ordinance (Cap. 571).
Update staff and director training materials to include concrete examples of prohibited conduct, including funding relatives’ accounts and giving trading instructions via messaging apps while in possession of inside information about control transactions, MOUs, or earnest money arrangements.
Strengthen personal account dealing policies to require pre‑clearance and enhanced scrutiny for trades in securities of issuers where the employee, director, or major shareholder is directly or indirectly involved in control stake negotiations or other price‑sensitive corporate events.
Implement or enhance procedures to identify and log potential inside information events (such as MOUs for stake sales, receipt of earnest money, or other significant transaction milestones) and to trigger trading blackouts for relevant insiders and their close associates.
Conduct targeted thematic reviews of recent and ongoing corporate finance mandates and control stake transactions handled by the firm to identify any gaps in information barriers, wall‑crossing procedures, or monitoring of insiders’ and their relatives’ trading activities.
What changed
- The conviction reinforces the SFC’s enforcement position that “counselling or procuring” another person to trade, including a close family member, while in possession of inside information...
The case highlights that use of personal communication channels (e.g., WhatsApp) to direct trading can be decisive evidence in insider dealing prosecutions, increasing expectations that firms monitor...
The conviction confirms that controlling shareholders and chairpersons of Hong Kong–listed companies are expected to treat negotiations for disposal of control stakes, memoranda of understanding...
The SFC has publicly quantified the estimated illicit profits (over HK$1 million) earned via the relative’s trading, signalling a continued focus on disgorgement and benefit analysis in enforcement...
The case continues the SFC’s trend of using criminal prosecution, rather than solely civil Market Misconduct Tribunal proceedings, for insider dealing involving abuse of senior positions and close...
Compliance impact
The compliance impact is high: failure to prevent or detect insider dealing, including via relatives and informal communication channels, can result in criminal prosecution, imprisonment, fines, reputational damage, and regulatory sanctions for both individuals and firms. Firms that do not strengthen their controls around insider information and connected-person dealing risk heightened SFC scrutiny and potential enforcement.
This is an informational speech by the SFC on aligning talent supply with future market demand for professional accountants in the financial services industry. It is relevant for banking, investment management, and wealth management firms as they rely on professional accountants.
This speech by the SFC on the 40th anniversary of the Hong Kong Investment Funds Association covers topics related to investment management, wealth management, and regulatory oversight of the industry. It is an informational update rather than an urgent regulatory change.
This speech by the SFC discusses the development of a diverse asset management ecosystem and offshore China funds, which is relevant for investment managers and wealth managers. It also touches on ESG and sustainability, which are key topics for the industry.
The SFC has imposed a **lifetime ban and $17.43 million fine** on Lui Pak Tong for orchestrating a scheme where he exploited a fund under his control by directing $22.5 million in unsecured loans to a company he owned, while concealing conflicts of interest and diverting loan proceeds to himself and associates. This enforcement action demonstrates the SFC's aggressive stance on fiduciary breaches, undisclosed conflicts of interest, and self-dealing by licensed representatives, with direct implications for fund governance, investment committee oversight, and compliance with the Code of Conduct.
Key dates
25 July 2017 – 31 August 2020
Period during which Lui held licenses for Types 1, 4, and 9 regulated activities
September 2017 – June 2020
Period during which the misconduct occurred (five unsecured loans totalling $22.5 million extended to Lui's controlled company)
31 July 2024
Thunder Capital Limited's (later renamed Yupei Fortune Capital Limited) SFC licence was revoked
24 March 2026
SFC announcement of lifetime ban and $17.43 million fine
Suggested considerations
*Immediate Actions (0-30 days):
*Conflict of Interest Audit: Conduct a comprehensive review of all current and recent transactions involving connected parties, including loans, investments, or service arrangements where licensed staff have beneficial interests.
*Policy Review: Update or strengthen conflict of interest policies to explicitly require:
Written disclosure of all material conflicts before investment committee meetings
Independent review and approval of transactions involving conflicted parties
What changed
This is not a regulatory change but rather an enforcement precedent establishing the SFC's expectations regarding:
Conflict of Interest Disclosure: Licensed representatives must fully disclose all material conflicts of interest to investment committees and fund stakeholders, particularly when recommending...
Fiduciary Duty Standards: Fund managers and their representatives must ensure fair treatment of fund investors and cannot exploit their position to divert fund assets or loan proceeds to themselves...
Investment Committee Governance: Investment committees cannot rely solely on recommendations from conflicted parties without independent verification and proper conflict management protocols.
Connected Party Transactions: Unsecured loans to connected entities require heightened scrutiny, independent approval, and ongoing monitoring to prevent asset diversion.
This speech by the SFC appears to be focused on governance and conduct issues for investment management and wealth management firms. The content is informational in nature, not an urgent regulatory update.
This speech by Julia Leung from the SFC covers topics related to investor and financial education, which are relevant for investment management firms, wealth managers, and the broader financial industry.
This speech by Kelvin Wong from the SFC covers topics related to investor and financial education, which are relevant for banking, investment management, and wealth management firms.
This speech by Julia Leung of the SFC covers topics related to the resilience and development of Asia-Pacific capital markets, which would be relevant for banks, asset managers, and wealth managers operating in the region.
This speech by the SFC covers topics relevant to the financial services industry, including prudential requirements, operational resilience, and technology/cyber issues. It is informational in nature rather than an urgent regulatory update.
This regulatory update from the SFC involves serious misconduct by a former licensed representative, including unauthorized trading, fabrication of client documents, and deception.
This regulatory update from the SFC relates to breaches of the Takeovers Code by a group of companies, including a bank and wealth manager, in relation to their dealings in the shares of a listed company.
This regulatory update from the SFC warns the public about impersonation scams involving fraudsters claiming to represent the SFC. This poses a high risk to consumers and financial firms, as the scammers are attempting to obtain personal and financial information through deceptive means.
This speech by Kelvin Wong at the Hong Kong Chartered Governance Institute's Annual Reception 2026 is likely to cover topics relevant to banking, investment management, and wealth management firms, particularly around consumer protection, licensing, and governance. As it is an informational speech, the urgency is low.
This regulatory update from the SFC warns the public about a suspicious AI-themed investment product, which indicates potential consumer protection and authorization issues. The involvement of fintech firms and wealth managers suggests the need for close regulatory oversight in this area.
This regulatory update from the SFC involves the disqualification of a former executive director of a listed company, which is relevant for banking, investment management, and wealth management firms in terms of conduct, authorization, and governance requirements.
This regulatory update from the SFC involves the freezing of assets belonging to suspected traders of Wan Cheng shares, which indicates potential market abuse and financial crime. This is relevant for banks, broker-dealers, and wealth managers that may be involved in trading or managing these types of assets.
This regulatory update from the SFC appears to be informational in nature, welcoming a process review panel report. It likely covers topics related to consumer protection, reporting and disclosure requirements, as well as authorization and licensing for firms in the banking, investment management, and wealth...
This regulatory update from the SFC relates to brokers and the return of misappropriated funds to affected parties, which impacts banking, investment management, and wealth management firms. It covers consumer protection, prudential requirements, and licensing/authorization topics.
This regulatory update relates to a former executive of a financial firm being jailed for false trading, which falls under the sectors of banking, capital markets, and wealth management.