SFC reprimands and fines Victory Securities Company Limited $1.7 million and suspends its responsible officer for regulatory breaches

What Changed

• (Strictly speaking this is an enforcement case rather than a rule change, but it effectively clarifies regulatory expectations and evidences enforcement priorities.)
• Licensed corporations must treat discrepancies between a client’s declared financial profile and purported asset holdings as material red flags, triggering enhanced KYC, source-of-wealth/source-of-funds enquiries, and verification of external stateme
• Firms must independently verify documents purportedly issued by other brokers, especially when used as proof of holdings for sell orders, and must not rely on such documents at face value when they are inconsistent with client profile or transaction
• Licensed corporations are expected to apply risk-based AML/CFT controls to securities sell orders where there is a risk that the client may not beneficially own the assets, or where forged/false documents may have been provided to facilitate trading.
• Firms must report suspected fraudulent or deceptive conduct by clients to the SFC (and, where applicable, to JFIU) without delay, even where the misconduct appears confined to a single transaction or client.
• Responsible Officers and Managers-in-Charge of Compliance, AML/CFT, Key Business Line, Operational Control and Overall Management Oversight are expected to exercise active oversight over onboarding and trading in higher-risk accounts, and failure to

Suggested Considerations

• Review and update client onboarding procedures to ensure that inconsistencies between clients’ declared financial profiles and claimed asset holdings are systematically identified, documented, and escalated for enhanced due diligence before any orders are executed.
• Implement controls requiring independent verification (e.g. direct confirmation or reliable third‑party checks) of statements and documents purportedly issued by other brokers when these are used to evidence holdings for sell orders.
• Update AML/CFT policies and procedures under AMLO and the SFC Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Corporations) to explicitly cover handling of suspected forged documents and false information supplied by clients.
• Establish or reinforce a formal process for promptly reporting suspected fraudulent, deceptive, or market abusive conduct by clients to the SFC, and where appropriate to JFIU, including clear internal thresholds, escalation paths, and record‑keeping.
• Conduct a gap analysis of existing red flag indicators to ensure they cover situations where the size or nature of client holdings is incommensurate with the client’s stated income, net worth, occupation, or overall risk profile.
• Provide mandatory training to front-office, operations, and compliance staff on identification of documentation-related red flags, verification requirements, and regulatory reporting obligations, and maintain training attendance records.

Key Dates

Who is Affected