Hong Kong Regulatory Updates

What Changed

• - Licensed corporations must ensure that firewall protection and network monitoring are implemented and effective across critical infrastructure, including file servers, domain controllers, email...
• Licensed corporations must maintain up‑to‑date operating systems and antivirus software, avoiding end‑of‑life or unpatched environments that materially increase vulnerability to ransomware and other...
• Firms must enforce strong user access and privileged account controls, including robust administration of system admin accounts, least‑privilege access models, periodic reviews of access rights, and...
• Firms must implement secure password management practices, prohibiting the storage of credentials in unencrypted files and enforcing strong password policies and technical controls for credential...
• Remote access must be subject to strict controls, including secure configuration of VPN or other remote access solutions, need‑to‑have access principles, and monitoring for unusual or unauthorized...

Suggested Considerations

• Conduct a comprehensive cybersecurity risk assessment and control gap analysis across all critical systems, including trading platforms, email servers, domain controllers, file servers, and accounting systems.
• Implement and regularly review firewall configurations and network monitoring tools to ensure effective protection and detection capabilities for internal and external network traffic.
• Upgrade all operating systems and antivirus software to supported, fully patched versions and establish formal patch and vulnerability management procedures with defined timelines and testing steps.
• Establish and enforce robust user access management policies, including least‑privilege access, periodic recertification of user and privileged accounts, and logging and monitoring of admin activities.
• Implement secure password management solutions and technical controls, eliminating unencrypted storage of credentials and enforcing strong password complexity, rotation, and multi‑factor authentication where applicable.

Key Dates

References

• [1] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [2] fxnewsgroup.com/tag/luk-fook/
• [3] apps.sfc.hk/edistributionWeb/api/circular/list-content/ci...
• [4] charltonslaw.com/legal/newsletters/574/sfc-enforcement-ac...
• [5] davispolk.com/insights/client-update/hong-kong-sfc-calls-...
• [6] apps.sfc.hk/edistributionWeb/gateway/EN/circular/intermed...
• [7] sfc.hk/-/media/EN/files/IS/publications/Cybersecurity-the...
• [8] reuters.com/legal/litigation/hong-kong-securities-regulat...

What Changed

• - Asset managers must maintain and apply documented procedures and controls to identify whether proposed private fund arrangements or transactions are dubious, including where structures are...
• Where a proposed arrangement or transaction is assessed as dubious, asset managers may only proceed once they are satisfied that concerns and red flags have been sufficiently addressed and evidenced.
• Fund managers are expected to exercise independent investment discretion and cannot rely solely on investor‑driven proposals, especially from influential client personnel such as chief investment...
• Asset managers must ensure that all fund investments comply with the fund’s stated investment restrictions and align with its stated investment objectives, with documented controls to verify...
• Firms must implement effective measures to identify, manage, and continuously monitor the risks to which private funds are exposed, including counterparty, concentration, structural, and...

Suggested Considerations

• Review and update private fund governance frameworks to ensure investment approvals require independent investment discretion, documented due diligence, and explicit challenge of investor‑driven proposals, particularly those originating from client senior management.
• Implement or enhance written procedures to identify “dubious arrangements”, including criteria such as unnecessary structural complexity, unclear commercial rationale, additional costs or risks, related‑party exposure, and potential concealment of asset movements or connected transactions.
• Establish a mandatory escalation and approval process for complex or investor‑driven transactions, requiring risk, compliance, and senior management sign‑off before execution and documented reasoning for proceeding.
• Conduct a gap analysis of all existing private funds to confirm that current and past investments comply with the funds’ investment restrictions and stated objectives, and remediate any breaches including client notification and corrective actions where appropriate.
• Strengthen risk management frameworks for private funds by defining key risk types, setting monitoring thresholds, and implementing periodic risk reporting to senior management and the board.

Key Dates

References

• [1] caproasia.com/2023/08/24/hong-kong-sfc-fines-china-indust...
• [2] sfc.hk/en/Regulatory-functions/Enforcement/Disciplinary-p...
• [3] sfc.hk/-/media/EN/files/COM/Reports/Enforcement-Reporter_...

What Changed

• - Firms conducting Type 1, 4 or 7 regulated activities are expected to maintain both pre‑trade and post‑trade surveillance capable of detecting wash trades and other manipulative patterns, rather...
• Pre‑trade interception controls that depend primarily on manual intervention (e.g. dealer intervention after alerts) are deemed inadequate where the controls allow suspicious trades to proceed until...
• Surveillance logic must treat multiple suspicious trades in the same client account on the same day as separate events, rather than aggregating them into one “instance,” to ensure repeated misconduct...
• Trade surveillance tools and procedures must be capable of detecting wash trades across a wide universe of instruments, including both equities and structured products such as warrants.
• SFC has reaffirmed that failure to maintain adequate and effective internal controls to monitor and detect wash trades constitutes a breach of the SFC Code of Conduct and is considered contrary to...

Suggested Considerations

• Review existing trade surveillance frameworks (both pre‑trade and post‑trade) to ensure they can reliably identify wash trades, including same‑account and related‑account trades with no change in beneficial ownership.
• Implement or enhance automated pre‑trade controls that can detect and automatically block or hold suspected wash trades before execution, rather than relying primarily on manual dealer intervention after the fact.
• Re‑design alert logic so that each suspicious wash trade or pair of trades is counted as a separate event, including multiple events in the same client account on the same day, and ensure escalation thresholds reflect this.
• Calibrate surveillance parameters to cover all relevant product types, including Hong Kong‑listed stocks, warrants and other structured products commonly used by clients.
• Document and update internal policies and procedures to explicitly prohibit wash trades, define wash trading typologies, and describe detection, escalation and blocking processes.

Key Dates

References

• [1] sfc.hk/web/files/ER/PDF/14PR93_statement.pdf
• [2] webb-site.com/codocs/SFC041125b.pdf
• [3] webb-site.com/codocs/SFC051024.pdf
• [4] apps.sfc.hk/edistributionWeb/api/news/list-content?refNo=...
• [5] financemagnates.com/forex/regulation/hong-kong-listed-bro...
• [6] prudent.hk/post/sfc-issues-restriction-notice-to-a-broker...
• [7] sfc.hk/-/media/EN/files/LSD/Gazette/GN-2652-of-2025-Eng.p...
• [8] sfc.hk/en/Regulatory-functions/Enforcement/Disciplinary-p...

What Changed

• (Strictly speaking this is an enforcement case rather than a rule change, but it effectively clarifies regulatory expectations and evidences enforcement priorities.)
• Licensed corporations must treat discrepancies between a client’s declared financial profile and purported asset holdings as material red flags, triggering enhanced KYC,...
• Firms must independently verify documents purportedly issued by other brokers, especially when used as proof of holdings for sell orders, and must not rely on such documents at face value when they...
• Licensed corporations are expected to apply risk-based AML/CFT controls to securities sell orders where there is a risk that the client may not beneficially own the assets, or where forged/false...
• Firms must report suspected fraudulent or deceptive conduct by clients to the SFC (and, where applicable, to JFIU) without delay, even where the misconduct appears confined to a single transaction or...

Suggested Considerations

• Review and update client onboarding procedures to ensure that inconsistencies between clients’ declared financial profiles and claimed asset holdings are systematically identified, documented, and escalated for enhanced due diligence before any orders are executed.
• Implement controls requiring independent verification (e.g. direct confirmation or reliable third‑party checks) of statements and documents purportedly issued by other brokers when these are used to evidence holdings for sell orders.
• Update AML/CFT policies and procedures under AMLO and the SFC Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Corporations) to explicitly cover handling of suspected forged documents and false information supplied by clients.
• Establish or reinforce a formal process for promptly reporting suspected fraudulent, deceptive, or market abusive conduct by clients to the SFC, and where appropriate to JFIU, including clear internal thresholds, escalation paths, and record‑keeping.
• Conduct a gap analysis of existing red flag indicators to ensure they cover situations where the size or nature of client holdings is incommensurate with the client’s stated income, net worth, occupation, or overall risk profile.

Key Dates

References

• [1] webb-site.com/codocs/SFC060328.pdf
• [2] kucoin.com/news/flash/hong-kong-sfc-fines-victory-securit...
• [3] sfc.hk/en/Regulatory-functions/Enforcement/Disciplinary-p...
• [4] www1.hkexnews.hk/listedco/listconews/gem/2018/0716/gln201...
• [5] sfc.hk/-/media/EN/files/COM/QR-Reports/202110-12/2eEnforc...
• [6] chinadailyhk.com/hk/article/353041
• [7] sfc.hk/-/media/EN/files/COM/Reports/Enforcement-Reporter_...

What Changed

• - The SFC and CSRC reinforced their commitment to joint enforcement cooperation specifically targeting cross‑boundary crimes and misconduct that affect both Hong Kong and Mainland Chinese markets.
• Both regulators agreed to deepen discussions and coordination around recent major cross‑boundary enforcement cases, indicating more systematic case‑level collaboration and mutual assistance.
• The authorities explicitly prioritised enhancing mechanisms for information exchange, implying more frequent, timely and possibly more granular sharing of regulatory, supervisory and investigative...
• The meeting confirms that cross‑boundary enforcement and investor protection remain strategic enforcement priorities for both the SFC and CSRC, which will likely influence case selection, resource...
• The emphasis on improving enforcement effectiveness and deterrence signals a likely increase in coordinated investigations, simultaneous actions, and potential parallel sanctions in both...

Suggested Considerations

• Review existing cross‑boundary business models, trading flows and client bases to identify areas where misconduct or control failures could trigger coordinated enforcement action by both the SFC and CSRC.
• Update enforcement‑facing compliance risk assessments to reflect heightened cross‑boundary enforcement cooperation, including the possibility of information sharing and parallel investigations by both regulators.
• Enhance incident escalation and regulatory engagement protocols to ensure that potential cross‑boundary issues (e.g. market manipulation, insider dealing, cross‑border fraud) are promptly identified and addressed with both Hong Kong and Mainland regulators where relevant.
• Review and, where necessary, strengthen surveillance and market‑abuse monitoring tools to capture cross‑market patterns (e.g. trading in Hong Kong linked to events or positions in Mainland markets).
• Ensure record‑keeping, trade data, client information and cross‑border communication logs are complete, accurate and retrievable, given the regulators’ focus on improving information exchange.

Key Dates

References

• [1] charltonslaw.com/sfc-and-csrc-hold-high-level-enforcement...
• [2] hk-lawyer.org/content/sfc-and-csrc-sign-memorandum-enhanc...
• [3] hkcgi.org.hk/news-event/news-detail/312288
• [4] icac.org.hk/en/p/press-archive/by-year/index_id_1598.html
• [5] investment-international.com/News/sfc-and-csrc-agree-deep...
• [6] csrc.gov.cn/csrc_en/c102030/c7125023/content.shtml
• [7] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [8] weex.com/news/detail/china-securities-regulatory-commissi...

What Changed

• - The Court of First Instance has granted a worldwide freezing injunction over the assets of Mr Lo Kai Bong, prohibiting him from removing, disposing of, dealing with or diminishing the value of his...
• The Court has concurrently granted a worldwide Chabra injunction over the assets of Major Success Group Limited, a BVI company wholly owned and controlled by Mr Lo, on the basis that its assets may...
• The injunctions apply to assets in Hong Kong and worldwide, significantly expanding enforcement risk beyond Hong Kong-situs assets for controlling shareholders and their offshore structures.
• The Court has ordered that both injunctions remain in effect at least until 26 August 2026, subject to further order, meaning the assets will be frozen through the lead-up to trial.
• The injunctions are explicitly tied to ongoing section 214 SFO proceedings seeking remedies for unfair prejudice and misconduct, including a share repurchase order for independent shareholders of LET...

Suggested Considerations

• Review and map all relationships with controlling shareholders, directors and their offshore vehicles to identify where client assets may be exposed to SFC-driven freezing orders or Chabra relief.
• Update internal litigation and regulatory investigations playbooks to explicitly cover section 214 SFO risks, including the potential for worldwide asset-freezing and receiver appointments even after an issuer is delisted.
• Implement enhanced due diligence on beneficial ownership and control structures, particularly BVI and other offshore vehicles used by controlling shareholders of Hong Kong-listed and recently delisted issuers.
• For banks, broker dealers and custodians, review current accounts, credit exposures, collateral and custody arrangements for clients who are directors, controlling shareholders or their vehicles in Hong Kong issuers, and identify those at heightened risk of SFC enforcement.
• Enhance early-warning triggers in compliance monitoring to escalate promptly when the SFC announces section 214 SFO proceedings or issues press releases suggesting asset preservation measures may be sought.

Key Dates

References

• [1] law1a.nus.edu.sg/cbfl/pdfs/working_papers/CBFL-WP-HY02.pdf
• [2] dlapiper.com/insights/publications/2024/10/section-214-pr...
• [3] elegislation.gov.hk/hk/cap571!en/s214?_lang=en
• [4] sfc.hk/-/media/EN/files/COM/QR-Reports/202104-06/2eEnforc...
• [5] mayerbrown.com/-/media/files/news/2016/07/the-securities-...
• [6] researchblog.law.hku.hk/2019/01/martin-kwan-pcll-on-shoul...
• [7] elegislation.gov.hk/hk/cap571
• [8] charltonslaw.com/legal/compliance/Hong-Kong-SFC-power-to-...

What Changed

• - The SFC will implement the Hong Kong Investor Identification Regime for the Derivatives Market (HKIDR‑DM), extending investor ID requirements from securities (HKIDR‑S) to exchange‑traded...
• HKIDR‑DM will apply to on‑exchange orders for futures contracts, options contracts and stock options executed through the trading system of Hong Kong Futures Exchange Limited (HKFE).
• Licensed corporations and registered institutions which offer brokerage services or conduct proprietary trading in HKFE‑traded derivatives will be required to submit clients’ names and identity...
• The operational model of HKIDR‑DM will be similar to HKIDR‑S, implying the use of unique client identifiers and order‑level tagging across trading, middle office and reporting systems.
• Implementation of HKIDR‑DM is targeted for the second quarter of 2028, subject to successful completion of system testing and market rehearsals.

Suggested Considerations

• Conduct a gap analysis comparing existing HKIDR‑S securities processes with expected HKIDR‑DM derivatives requirements, covering data fields, identifiers, and order tagging for futures and options.
• Identify all business lines and systems that submit or route HKFE on‑exchange futures, options and stock options orders, and map required integration points with the HKIDR‑DM centralised data repository.
• Design and implement or adapt a client identification and coding framework (e.g. investor IDs or broker‑to‑client numbers) for derivatives clients, ensuring consistency across securities and derivatives where clients trade both.
• Review and update client onboarding, KYC and data collection forms to ensure capture of all identity information required under HKIDR‑DM, including for existing derivatives clients.
• Develop and implement data protection and privacy controls to manage personal data submitted under HKIDR‑DM, including access controls, retention policies, and compliance with Hong Kong’s Personal Data (Privacy) Ordinance.

Key Dates

References

• [1] mondaq.com/hongkong/securities/1699178/sfc-consultation-o...
• [2] asifma.org/wp-content/uploads/2022/03/210830-hong-kong-in...
• [3] mondovisione.com/media-and-resources/news/hong-kong-secur...
• [4] help.saxo/hc/en-hk/articles/7129250469021-Hong-Kong-Inves...
• [5] freshfields.com/en/our-thinking/blogs/risk-and-compliance...
• [6] hkex.com.hk/Services/Trading/Securities/Overview/Trading-...
• [7] linkedin.com/posts/securities-and-futures-commission_sfc-...
• [8] apps.sfc.hk/edistributionWeb/api/consultation/openFile?la...

What Changed

• - The case confirms that advising another person to trade, while in possession of non‑public, price‑sensitive information obtained in the capacity of chairman and controlling shareholder, constitutes...
• The sentencing outcome reinforces that insider dealing offences in Hong Kong now routinely attract immediate custodial sentences, rather than fines alone, where there is deliberate misuse of inside...
• The decision illustrates that trading by close family members funded by the insider, and executed before public announcement of a controlling-stake disposal, will be treated by the SFC and the courts...
• The case demonstrates that electronic communications (e.g. WhatsApp messages giving timing and price instructions) will be treated as direct evidence of advising another person to deal and of...
• The SFC has signalled, through public statements accompanying the sentencing, that it will continue to pursue criminal prosecutions for insider dealing to “protect investors and uphold confidence in...

Suggested Considerations

• Review and update insider dealing and market misconduct policies to explicitly address advising or inducing family members or connected persons to trade on inside information, including where trading is funded by the insider.
• Implement or tighten pre‑clearance and restricted‑list procedures for directors, senior management and controlling shareholders, ensuring controls extend to trading through relatives, nominees, family vehicles and related accounts.
• Establish or reinforce clear written guidance to all “connected persons” (including family members where appropriate) explaining what constitutes inside information under the SFO, and explicitly prohibiting trading or advice based on such information before disclosure.
• Enhance monitoring of employee, director and connected‑person dealings, including periodic attestations requiring disclosure of accounts held by spouses, siblings and close relatives that trade in related listed securities.
• Update training programmes for directors, senior executives and licensed representatives to include this case as a recent Hong Kong example of criminal insider dealing, emphasising the risk of imprisonment and confiscatory orders.

Key Dates

References

• [1] prudent.hk/post/movie-producer-wong-pak-ming-convicted-of...
• [2] timothyloh.com/insights/latest-news/movie-producer-wong-p...
• [3] mondovisione.com/media-and-resources/news/movie-producer-...
• [4] thestandard.com.hk/finance/article/332745/HK-movie-produc...
• [5] scmp.com/news/hong-kong/law-and-crime/article/3354517/hon...
• [6] caproasia.com/2026/05/24/hong-kong-court-convicts-hong-ko...
• [7] sfc.hk/en/SFC-Search/Search?text=Pak&ui_lang=en

What Changed

• - The Clearing Rules will be amended to designate two fixed calendar periods each year—1 March to 31 May and 1 September to 30 November—as calculation periods for determining mandatory clearing...
• The new standard calculation periods will apply from 1 March 2027 onwards, creating a permanent formulaic approach that generates future calculation periods without requiring further legislative...
• The existing approach of periodically updating the list of calculation periods in the Clearing Rules via legislative amendments will be replaced by this once‑and‑for‑all standardisation.
• The Prescribed Days associated with each calculation period will also be aligned with the new standard periods, providing greater clarity on when clearing obligations are triggered and when positions...
• The change is intended to increase certainty for derivative dealers in identifying future calculation periods and to facilitate more effective internal planning and compliance monitoring.

Suggested Considerations

• Map current OTC derivative portfolios and position‑monitoring systems to the new standard calculation periods (1 March–31 May and 1 September–30 November) and update internal calendars and compliance checklists accordingly.
• Review and amend internal policies, procedures, and control frameworks for mandatory clearing, including position‑sizing methodologies, threshold calculations, and record‑keeping requirements, to reflect the permanent calculation‑period structure.
• Coordinate with legal and compliance teams to track the progress of the legislative amendments and ensure that internal implementation timelines align with the expected effective date of 1 March 2027.
• Update trade capture, risk, and reporting systems to flag trades and positions that fall within the new calculation periods and to generate alerts when clearing thresholds are approached or breached.
• Train relevant front‑office, middle‑office, and compliance staff on the new calculation‑period regime, including the timing of Prescribed Days and the implications for trade execution, clearing decisions, and documentation.

Key Dates

References

• [1] hkma.gov.hk/eng/news-and-media/press-releases/2026/01/202...
• [2] hkma.gov.hk/eng/news-and-media/press-releases/2023/08/202...
• [3] hkma.gov.hk/media/eng/doc/key-information/press-release/2...
• [4] info.gov.hk/gia/general/202601/29/P2026012900244.htm
• [5] timothyloh.com/insights/guides/global-benchmark-reforms-h...
• [6] apps.sfc.hk/edistributionWeb/gateway/EN/consultation/doc
• [7] isda.org/2026/03/03/isda-response-to-hkma-sfc-consultatio...
• [8] brdr.hkma.gov.hk/eng/doc-ldg/docId/20260129-1-EN

What Changed

• - The SFC reiterates that licensed corporations must maintain required liquid capital at all times under the Securities and Futures (Financial Resources) Rules (FRR), and any deficit (even if later...
• The enforcement confirms that firms are strictly accountable for the accuracy of financial returns submitted under the FRR, including where preparation and compilation are outsourced to external...
• The SFC clarifies that external service providers involved in financial returns and FRR compliance must be demonstrably competent and possess relevant FRR knowledge and experience, and that licensed...
• The case reinforces that internal staff responsible for FRR reporting must be adequately trained and familiar with FRR requirements, with effective review and challenge processes before submissions...
• The SFC confirms that transferring client money from segregated client accounts to overseas brokers’ accounts requires a valid written direction or standing authority from the client in accordance...

Suggested Considerations

• Review and, where necessary, update internal policies and procedures to ensure continuous compliance with the Securities and Futures (Financial Resources) Rules, including robust controls over capital monitoring and financial return preparation.
• Implement or enhance daily (or more frequent, as appropriate) capital monitoring processes that detect and escalate any actual or potential liquid capital deficits before they arise and ensure timely remedial action.
• Conduct a comprehensive review of all external service providers involved in financial reporting, prudential calculations, and FRR returns to verify and document their competence, relevant experience, and FRR knowledge, and update outsourcing due diligence criteria accordingly.
• Establish or strengthen formal governance and oversight frameworks for outsourced finance functions, including clear accountability, documented review of work performed, periodic quality assessments, and rights of audit.
• Provide targeted FRR training to finance, compliance, and relevant front‑office staff so they understand FRR calculations, common error types, and their responsibilities in reviewing and approving FRR returns before submission.

Key Dates

References

• [1] fxnewsgroup.com/forex-news/regulatory/hk-regulator-impose...
• [2] scmp.com/business/banking-finance/article/2019361/sfc-fin...
• [3] charltonslaw.com/sfc-reprimands-and-fines-hsbc-hk2-5-mill...
• [4] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [5] wealthbriefingasia.com/article.php/Hong-Kong's-SFC-Raps-D...
• [6] fxnewsgroup.com/forex-news/regulatory/hk-watchdog-fines-i...
• [7] sfc.hk/edistributionWeb/gateway/EN/news-and-announcements...
• [8] hkma.gov.hk/eng/news-and-media/press-releases/2025/08/202...

What Changed

• - The USM regime is targeted to launch on 16 November 2026, and issuers must prepare for securities to be held and transferred without paper certificates from that point onward.
• Issuers will need to review and amend their terms of issue, including articles of association or equivalent constitutional documents, so they are consistent with USM requirements.
• The SFC’s guidance provides key areas of focus and sample provisions to help issuers amend their constitutional documents for paperless securities issuance and transfer.
• Issuers will need to complete amendments by 16 November 2027 or by the date of their first annual general meeting after USM launch, whichever is later.
• Upon implementation of USM, issuers must have an approved securities registrar at all times.

Suggested Considerations

• Issuers must review their articles of association, bylaws, and terms of issue immediately to identify provisions that conflict with uncertificated issuance, electronic transfer, or register-based title evidence.
• Issuers must begin the constitutional amendment process now so shareholder approvals, board resolutions, and any jurisdiction-specific filings can be completed before the applicable deadline.
• Issuers must confirm their ability to appoint and maintain an approved securities registrar at all times once USM is implemented.
• Issuers must assess their registrar, transfer, and corporate action workflows to ensure they can operate in a paperless environment from launch.
• Issuers must coordinate with legal advisers and share registrars to map the transition timetable and identify any issues that could delay implementation.

Key Dates

References

• [1] slaughterandmay.com/insights/new-insights/hong-kong-s-new...
• [2] morganlewis.com/pubs/2026/04/hkex-publishes-listing-rule-...
• [3] sfc.hk/en/Rules-and-standards/Uncertificated-Securities-M...
• [4] charltonslaw.com/hong-kong-uncertificated-securities-mark...
• [5] sfc.hk/en/Rules-and-standards/Uncertificated-Securities-M...
• [6] hkex.com.hk/Services/Settlement-and-Depository/USM?sc_lan...
• [7] law.asia/hong-kong-usm-debut/
• [8] hkcgi.org.hk/files/publication/2599/HKCGI%20Securities%20...

What Changed

• - The Hong Kong Government and SFC have confirmed that dedicated regulatory regimes for VA advisory services and VA management services will be created under the Anti-Money Laundering and...
• The regulatory scope and standards of the VA advisory regime will be aligned with Type 4 “advising on securities” regulated activity under the Securities and Futures Ordinance, applying a “same...
• The regulatory scope and standards of the VA management regime will be aligned with Type 9 “asset management” regulated activity under the Securities and Futures Ordinance, implying broadly...
• The consultation received broad market support across 51 responding stakeholders, and the SFC has treated this as a mandate to proceed to finalisation of the detailed legislative proposals and...
• The new VA advisory and management regimes will sit alongside existing and proposed VA regimes for: VA trading platforms, stablecoin issuers, VA dealing and VA custody, forming an end-to-end...

Suggested Considerations

• Conduct a gap analysis comparing current or planned virtual asset advisory and management activities against Type 4 and Type 9 requirements under the Securities and Futures Ordinance to identify where equivalent capabilities, controls and governance will be required under the new VA regimes.
• Map all group entities and business lines that provide VA-related advice, research, recommendations or portfolio management to clients in or from Hong Kong, and determine which entities will need licensing or authorisation under the forthcoming AMLO-based regimes.
• Initiate early engagement with the SFC (e.g. via pre-application meetings or WINGS enquiries) to clarify how existing licences, business models and cross-border arrangements will be treated under the new VA advisory and management regimes.
• Review and, where necessary, enhance AML/CTF frameworks, including customer due diligence, transaction monitoring, sanctions screening and ongoing review procedures, to ensure they are robust enough for VA-specific risks anticipated under AMLO-based regulation.
• Update internal policies and procedures on suitability, product due diligence, risk disclosure, conflicts of interest and best execution to explicitly cover VA advisory and VA management services in line with standards applied to traditional securities and funds.

Key Dates

References

• [1] gibsondunn.com/wp-content/uploads/2022/04/hong-kong-sfc-p...
• [2] sfc.hk/en/
• [3] wings.sfc.hk
• [4] sfc.hk/TC/
• [5] ecp2.hkex.com.hk/landingsfc
• [6] apps.hkma.gov.hk/eng/index.php?c=search&m=search_by_name

What Changed

• - The conviction reinforces the SFC’s enforcement position that “counselling or procuring” another person to trade, including a close family member, while in possession of inside information...
• The case highlights that use of personal communication channels (e.g., WhatsApp) to direct trading can be decisive evidence in insider dealing prosecutions, increasing expectations that firms monitor...
• The conviction confirms that controlling shareholders and chairpersons of Hong Kong–listed companies are expected to treat negotiations for disposal of control stakes, memoranda of understanding...
• The SFC has publicly quantified the estimated illicit profits (over HK$1 million) earned via the relative’s trading, signalling a continued focus on disgorgement and benefit analysis in enforcement...
• The case continues the SFC’s trend of using criminal prosecution, rather than solely civil Market Misconduct Tribunal proceedings, for insider dealing involving abuse of senior positions and close...

Suggested Considerations

• Review and update insider dealing and market misconduct policies to explicitly cover “counselling or procuring” trading by family members, nominees, and other connected persons, in line with Part XIII and Part XIV of the Securities and Futures Ordinance (Cap. 571).
• Update staff and director training materials to include concrete examples of prohibited conduct, including funding relatives’ accounts and giving trading instructions via messaging apps while in possession of inside information about control transactions, MOUs, or earnest money arrangements.
• Strengthen personal account dealing policies to require pre‑clearance and enhanced scrutiny for trades in securities of issuers where the employee, director, or major shareholder is directly or indirectly involved in control stake negotiations or other price‑sensitive corporate events.
• Implement or enhance procedures to identify and log potential inside information events (such as MOUs for stake sales, receipt of earnest money, or other significant transaction milestones) and to trigger trading blackouts for relevant insiders and their close associates.
• Conduct targeted thematic reviews of recent and ongoing corporate finance mandates and control stake transactions handled by the firm to identify any gaps in information barriers, wall‑crossing procedures, or monitoring of insiders’ and their relatives’ trading activities.

Key Dates

References

• [1] scmp.com/business/article/3300417/sfc-starts-insider-case...
• [2] fxnewsgroup.com/forex-news/regulatory/hk-regulator-commen...
• [3] english.dotdotnews.com/a/202508/26/AP68ad23a4e4b08d290534...
• [4] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [5] sfc.hk/en/SFC-Search/Search?text=Pak&ui_lang=tc

What Changed

This is an enforcement action, not a new rule, but it reinforces existing requirements under the Fund Manager Code of Conduct (FMCC) and paragraph 12.2 of the Code of Conduct for Persons Licensed by or Registered with the SFC, mandating licensed corporations to implement and enforce staff dealing policies, including prior approvals, monitoring of personal trades (including related accounts), and conflict mitigation.

Suggested Considerations

• Conduct gap analysis: Review staff dealing policies against FMCC and Code of Conduct para. 12.2; ensure prior written approvals, 30-day holding rules, and bans on same-day/same-security trades with managed funds.
• Implement/enhance controls: Deploy automated pre- and post-trade monitoring for personal/related accounts; flag same-day trades, IPO overlaps, and price discrepancies.
• Senior management accountability: ROs/manager-in-charge must actively supervise; document training on conflicts and policy enforcement.
• Audit and remediate: Perform immediate staff account disclosures; test for undisclosed beneficial interests; retain records for SFC inspections.
• Training: Mandatory annual sessions on FMCC compliance, with attestations of no external accounts or conflicts.

Key Dates

References

• [1] fxnewsgroup.com/forex-news/regulatory/hk-watchdog-fines-i...
• [2] charltonslaw.com/sfc-enforcement-actions-in-january-2026-...
• [3] mco.mycomplianceoffice.com/blog/hong-kong-sfc-enforcement...
• [4] jdsupra.com/post/fileServer.aspx?fName=f0908fab-a360-49cb...
• [5] sfc.hk/en/
• [6] freshfields.com/globalassets/imported/documents/hk-reg-tr...
• [7] fstb.gov.hk/fsb/en/topical/doc/prereport09_e.pdf
• [8] mmt.gov.hk/files/MMT%20Mayer%20Report%20(Part%20I).pdf

What Changed

• This is not a regulatory change but rather an enforcement precedent establishing the SFC's expectations regarding:
• Conflict of Interest Disclosure: Licensed representatives must fully disclose all material conflicts of interest to investment committees and fund stakeholders, particularly when recommending...
• Fiduciary Duty Standards: Fund managers and their representatives must ensure fair treatment of fund investors and cannot exploit their position to divert fund assets or loan proceeds to themselves...
• Investment Committee Governance: Investment committees cannot rely solely on recommendations from conflicted parties without independent verification and proper conflict management protocols.
• Connected Party Transactions: Unsecured loans to connected entities require heightened scrutiny, independent approval, and ongoing monitoring to prevent asset diversion.

Suggested Considerations

• *Immediate Actions (0-30 days):
• *Conflict of Interest Audit: Conduct a comprehensive review of all current and recent transactions involving connected parties, including loans, investments, or service arrangements where licensed staff have beneficial interests.
• *Policy Review: Update or strengthen conflict of interest policies to explicitly require:
• Written disclosure of all material conflicts before investment committee meetings
• Independent review and approval of transactions involving conflicted parties

Key Dates

References

• [1] changeflow.com/govping/securities-markets/sfc-announces-n...
• [2] sfc.hk/en/
• [3] charltonslaw.com/legal/newsletters/708/sfc-enforcement-ac...
• [4] charltonslaw.com/sfc-enforcement-actions-in-january-2026-...
• [5] sfc.hk/en/Regulatory-functions/Enforcement/Enforcement-ac...
• [6] deacons.com/2026/01/28/hong-kong-sfc-licensing-and-compli...
• [7] corporatecomplianceinsights.com/state-ofac-sanctions-enfo...
• [8] aoshearman.com/en/insights/cross-border-white-collar-crim...

What Changed

No new regulatory requirements or amendments to the SFO are introduced; this is an enforcement action reaffirming existing prohibitions. It highlights section 300 (securities fraud via false representations enabling illegal short selling) and links to section 170(1) SFO, which criminalizes selling securities without a presently exercisable and unconditional right to vest them in the purchaser (max penalty: HK$100,000 fine, 2 years imprisonment)[https://apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announcements/news/doc?refNo=26PR45]. The District Court venue (vs.

Suggested Considerations

• Review and strengthen pre-trade controls to verify sellers' rights to shares (e.g., locate-and-confirm processes) before executing orders.
• Enhance surveillance systems for red flags like unusual short positions, bonus share mishandling, or premature placing share sales.
• Conduct staff training on SFO sections 170 and 300, including 2003 SFC Guidance Note on Short Selling.
• Audit client representations and internal booking systems; report incidents promptly to SFC as in SFM case.
• Update compliance manuals to reference bail conditions (e.g., travel restrictions) as indicators of high-risk clients[https://apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announcements/news/doc?refNo=26PR45].

Key Dates

References

• [1] solutions-atlantic.com/hong-kong-sfc-illegal-short-sellin...
• [2] tannerdewitt.com/zh-hans/legal-update-sfc-reprimands-and-...
• [3] solutions-atlantic.com/hong-kong-sfc-short-selling-fraud-...
• [4] conventuslaw.com/report/hong-kong-another-reminder-that-t...
• [5] privatebankerinternational.com/news/premature-selling-of-...
• [6] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [7] boasecohencollins.com/zh-hant/%E7%B6%B2%E8%AA%8C/unlawful...
• [8] aoshearman.com/en/insights/cross-border-white-collar-crim...

What Changed

• This is an enforcement decision, not a new rule or circular introducing regulatory changes. It reinforces existing requirements under the Securities and Futures Ordinance (SFO), particularly:
• Prohibitions on matched trades (defined as coordinated buy-sell transactions at non-market prices creating false trading appearances, per Note 2 in the publication), which can distort price formation...
• Staff dealing policies mandating full disclosure of personal accounts, beneficial ownership, and trading activities; concealment via false declarations breaches fitness and properness standards for...
• Accountability for responsible officers (ROs) in Type 1 (dealing in securities) and Type 2 (dealing in futures contracts) activities, where proprietary trading must not favor personal interests over...

Suggested Considerations

• Conduct immediate staff dealing audits: Review disclosures for accuracy, verify beneficial ownership in spouse/associate accounts, and cross-check against trading records (https://apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announcements/news/doc?refNo=26PR44).
• Enhance trading surveillance: Implement real-time monitoring for matched trades (e.g., coordinated patterns outside bid-ask spreads in derivatives like Hang Seng Index options); flag proprietary vs. personal account interactions.
• Update internal policies: Strengthen RO oversight, mandatory training on SFO market misconduct rules, and escalation protocols for false declarations.
• Firm-wide attestation: Require annual (or more frequent) certifications of no undisclosed accounts; integrate with pre-trade controls.
• Risk assess proprietary trading: Segregate duties to prevent self-dealing; report suspicious patterns to SFC promptly.

Key Dates

References

• [1] changeflow.com/govping/securities-markets/sfc-announces-n...
• [2] sfc.hk/en/
• [3] charltonslaw.com/hong-kong-law/market-misconduct-under-th...
• [4] sfc.hk/en/News-and-announcements/News/Enforcement-news
• [5] sfc.hk/edistributionWeb/gateway/EN/news-and-announcements...
• [6] sfipc.org.tw/en/News.aspx?n=7621&sms=12374
• [7] thinkadvisor.com/2026/03/17/inside-the-2026-enforcement-m...
• [8] www1.hkexnews.hk/listedco/listconews/sehk/2025/0618/20250...

What Changed

This is an enforcement outcome rather than new regulatory changes; it reaffirms existing prohibitions under section 295 SFO against false trading, defined as creating a false or misleading appearance of active trading or market activity in securities. No new rules or amendments are introduced, but the case highlights SFC scrutiny on specific manipulative techniques: scaffolding (placing and cancelling orders at increasing prices to simulate demand) and wash trading (self-matched trades across accounts to inflate...

Suggested Considerations

• Implement or upgrade trade surveillance systems to detect scaffolding (rapid order placement/cancellation at escalating prices) and wash trades (high-frequency self-trades across accounts), with automated alerts for review.
• Conduct staff training on market abuse red flags under SFO section 295, including real-time monitoring obligations per SFC's Code of Conduct.
• Review client account structures for multi-account trading patterns; flag and report suspicious activity via SFC's market surveillance channels.
• Update internal policies to mandate profit disgorgement and cost recovery in investigations, aligning with court precedents.
• Perform gap analysis on compliance programs against SFC enforcement trends, documenting controls for audit trails.[https://apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announcements/news/doc?refNo=26PR25]

Key Dates

References

• [1] wikifx.com/en/newsdetail/202601227034443805.html
• [2] timothyloh.com/insights/latest-news/retail-trader-convict...
• [3] sfc.hk/en/News-and-announcements/News/Enforcement-news
• [4] aoshearman.com/en/insights/cross-border-white-collar-crim...
• [5] caproasia.com/2026/01/22/hong-kong-court-convicts-individ...
• [6] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [7] wkprime.com/securitiesRegulatory/index

What Changed

• This is an enforcement action, not a new rule change, but it reinforces and exemplifies existing obligations under the Securities and Futures Ordinance (SFO), Fund Manager Code of Conduct (FMCC), and...
• Mandatory conflict management and disclosure: Firms must identify, manage, and disclose conflicts, e.g., loans from the manager or directors to funds.
• Asset reconciliation and valuation: Monthly reconciliations, regular valuations, and independent audits of fund financials are required.
• KYC/suitability assessments: Adequate systems/controls for client due diligence and suitability, even for professional investors (no blanket exemptions).
• AML/CTF compliance: Records must demonstrate ongoing adherence; misrepresentations to investors on exemptions are prohibited.

Suggested Considerations

• Conduct gap analysis: Review private fund operations against five failure areas (conflicts, reconciliations/valuations/audits, KYC/suitability, AML/CTF records, investor representations) using FMCC and 9 Oct 2024 circular.
• Enhance systems/controls: Implement monthly asset reconciliations, independent audits, automated KYC/suitability tools, and conflict registers; ensure AML/CTF records are audit-ready.
• Senior management oversight: ROs/MICs to document personal accountability; train on self-reporting breaches (Code of Conduct para 12.5).
• Investor communications: Cease any claims of suitability exemptions for professional investors; update disclosures.
• Remediation evidence: Like Kylin, document post-review fixes to mitigate sanctions.

Key Dates

References

• [1] ifec.org.hk/web/en/investment/investment-products/funds/h...
• [2] charltonslaw.com/our-work/corporate-finance-and-capital-m...
• [3] sfc.hk/en/Regulatory-functions/Products/Open-ended-fund-c...
• [4] pwchk.com/en/asset-management/establishing-an-sfc-may2024...
• [5] sidley.com/en/insights/newsupdates/2024/10/hong-kong-regu...
• [6] skadden.com/insights/publications/2025/06/insights-june-2...
• [7] sfc.hk/en/Rules-and-standards/Codes-and-guidelines/Codes/...
• [8] iclg.com/practice-areas/public-investment-funds-laws-and-...

What Changed

• This is not a regulatory change but rather an enforcement precedent establishing that:
• "Scaffolding" strategy is prosecutable: Repeatedly placing and cancelling trading orders at progressively higher prices constitutes false trading under section 295 of the Securities and Futures...
• Wash trading across multiple accounts is actionable: Using various securities accounts to simultaneously act as both buyer and seller of shares violates false trading prohibitions.
• Price impact + market deception = criminal liability: The SFC successfully prosecuted based on demonstrating that trading activities artificially impacted share prices and misled market participants...

Suggested Considerations

• *For brokers and licensed intermediaries:
• *Enhance surveillance systems to detect scaffolding patterns (repeated placement and cancellation of orders at progressively higher prices)
• *Monitor cross-account trading to identify wash trading where the same beneficial owner trades with themselves across multiple accounts
• *Implement controls to flag suspicious trading activity that artificially impacts share prices without genuine economic purpose
• *Document compliance procedures for detecting and reporting false trading under section 295 of the Securities and Futures Ordinance

Key Dates

References

• [1] fxnewsgroup.com/forex-news/retail-forex/hk-retail-trader-...
• [2] fxnewsgroup.com/category/forex-news/retail-forex/
• [3] sfc.hk/en/News-and-announcements/News/Enforcement-news
• [4] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [5] caproasia.com/2026/01/22/hong-kong-court-convicts-individ...
• [6] mas.gov.sg/regulation/enforcement/enforcement-actions?row...
• [7] wikifx.com/en/newsdetail/202601227034443805.html
• [8] caproasia.com/2025/12/05/hong-kong-court-convicts-previou...

What Changed

The SFC has successfully prosecuted a case of false trading under section 295 of the Securities and Futures Ordinance, which constitutes an offence.

Suggested Considerations

• Implement or review existing controls to detect and prevent false trading, including monitoring for suspicious trading patterns such as 'scaffolding' and wash trades
• Provide training to trading staff on the risks and consequences of false trading

Key Dates

Related Regulations

What Changed

This is an enforcement action, not a new rule change, but it reinforces existing SFC circulars requiring VA products (including unauthorised funds and exchange-traded VA derivatives) to be offered exclusively to professional investors (PIs). Key requirements reiterated include: conducting VA-specific product due diligence; assessing client knowledge of VA investments; providing sufficient VA-specific information and warnings; and implementing platform controls to restrict retail access to complex products.

Suggested Considerations

• Conduct immediate VA product due diligence using SFC-specific procedures, not just group-wide protocols, to identify unauthorised VA funds and derivatives.
• Implement client knowledge assessments for VA investments before transactions, especially for retail clients.
• Provide VA-specific warnings and information on platforms and ensure retail access is blocked for PI-only products.
• Review and enhance online platform controls for suitability checks on complex products; audit historical VA trades for compliance gaps.
• Update internal policies to align with SFC circulars on VA distribution, including staff training on breaches like those at SCMHK.

Key Dates

References

• [1] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [2] structuredretailproducts.com/insights/82184/scmhk-hit-wit...
• [3] rootdata.com/news/493972
• [4] binance.com/en/square/post/01-07-2026-hong-kong-regulator...
• [5] financemagnates.com/forex/saxo-hong-kong-offered-wrong-cr...
• [6] hoganlovells.com/en/publications/no-shortcuts-online-sfc-...
• [7] jdsupra.com/topics/regulatory-oversight/online-platforms/...

What Changed

• - VA Dealer Regime: Introduces licensing for VA dealing activities (e.g., VA conversions, broker-dealer services at physical outlets or otherwise), excluding tokenized securities/derivatives...
• VA Custodian Regime: Targets entities safeguarding private keys or enabling unilateral VA transfers (e.g., capturing staking providers but exempting non-custodial wallets or delegating top-layer...
• Exemptions Under Consideration: Aligns partially with Type 1 exemptions, including principal/intra-group transactions, VA use as payment for goods/services, chaperone via SFC-regulated dealers, VA...
• Further Consultations: New regimes for VA advisory (aligned with Type 4) and asset management (aligned with Type 9), without deeming provisions for pre-existing entities; VA managers may face custody...

Suggested Considerations

• Pre-Application Engagement: Contact SFC immediately for discussions on VA custodian licensing, especially for existing VATPs/banks holding keys.
• License Applications: Prepare applications for VA dealer/custodian licenses once regimes commence; appoint responsible officers/managers-in-charge meeting fit-and-proper criteria, implement cold wallet infrastructure, private key controls, insurance, audits, and business continuity plans.
• Custody Segregation: Existing intermediaries/VA dealers must transition client VA custody to SFC-licensed VA custodians; cease use of non-compliant overseas providers.
• Compliance Mapping: Review operations against Type 1/Type 13 financial resources, core function authorizations, and exemptions; assess staking/MPC services for custody capture.
• Monitor Further Consults: Track incoming VA advisory/management regimes and adjust for no deeming provisions.

References

• [1] tannerdewitt.com/aspire-looking-back-and-ahead-on-the-reg...
• [2] slaughterandmay.com/insights/new-insights/hong-kong-proce...
• [3] gibsondunn.com/hong-kong-concludes-consultations-on-regul...
• [4] reedsmith.com/articles/fstb-and-sfc-consult-on-proposed-l...
• [5] sidley.com/en/insights/newsupdates/2026/01/hong-kong-to-f...
• [6] fstb.gov.hk/fsb/en/publication/consult/doc/VAdealing_cons...
• [7] kwm.com/hk/en/insights/latest-thinking/hong-kong-virtual-...
• [8] info.gov.hk/gia/general/202512/24/P2025122400265.htm

What Changed

This is an enforcement case, not a regulatory change; no new rules, requirements, or amendments to the SFO or Listing Rules were introduced. It exemplifies ongoing application of existing insider dealing prohibitions under SFO sections 270-271, where individuals with inside information (e.g., on privatization failure from proxy forms) must not deal in relevant securities. The court's emphasis on "immediate custodial sentence" for professionals in positions of trust signals stricter sentencing norms for such offenses.

Suggested Considerations

• Enhance insider dealing training: Mandate annual refreshers for staff handling corporate actions, emphasizing SFO prohibitions on dealing with inside information (e.g., voting outcomes, privatization status).
• Strengthen information barriers: Implement robust Chinese walls between operational teams (e.g., proxy coordinators) and personal trading, with pre-approval for staff trades in client-related securities.
• Monitor personal trading: Require disclosure and review of employees' holdings in companies involved in serviced transactions; automate alerts for unusual trading pre-announcements.
• Conduct insider lists and attestations: Maintain accurate lists of insiders during corporate events; require signed attestations of non-dealing.
• Audit workflows: Review processes for proxy form handling and voting scrutiny to prevent incidental access to inside information.

Key Dates

References

• [1] fxnewsgroup.com/forex-news/regulatory/former-vp-of-comput...
• [2] fxnewsgroup.com/forex-news/regulatory/hk-court-convicts-f...
• [3] timothyloh.com/insights/latest-news/former-vice-president...
• [4] complianceone.hk/news/complianceone-newsletter-december-2025
• [5] apps.sfc.hk/edistributionWeb/gateway/EN/news-and-announce...
• [6] hubbis.com/news/former-vice-president-of-computershare-re...
• [7] hubbis.com/news/sfc-obtains-order-to-freeze-101-million-b...
• [8] caproasia.com/2025/12/19/hong-kong-court-sentenced-ex-com...