Financial Licensing · Hong Kong

Hong Kong VATP Licence

Hong Kong's SFC issues Virtual Asset Trading Platform (VATP) licences under the Anti-Money Laundering Ordinance — establishing HK as a regulated hub for compliant virtual asset exchange operations in Asia.

VATPSFCHong KongVirtual AssetsCrypto ExchangeAMLO

Overview

Hong Kong's Virtual Asset Exchange Regime

Hong Kong introduced mandatory VATP licensing under the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022, effective June 2023. All centralised virtual asset exchanges operating in or targeting HK must hold an SFC VATP licence. The regime positions HK as a regulated alternative to less supervised offshore crypto jurisdictions.

Marensa Advisory advises on VATP licence applications — covering corporate setup, AML/CFT programme, cybersecurity framework, insurance arrangements, token admission policy, and ongoing SFC reporting obligations.

Discuss Your VATP Application

What We Cover

VATP licence application under AMLO regime
AML/CFT programme tailored to VA exchange operations
Cybersecurity policy, penetration testing and incident response framework
Insurance: professional indemnity and crime coverage
Token admission policy and asset vetting procedures
Client onboarding: retail vs professional investor distinctions
Responsible Officers with VA expertise
Ongoing SFC reporting and annual external audit

Key Considerations

VATP Licensing — What the SFC Requires

The SFC's VATP requirements are among the most comprehensive for crypto exchanges globally. These are the key areas assessed during application.

Retail Access

Unlike most other crypto regulators, the SFC allows VATP licensees to serve retail investors — but only after complying with additional conduct and suitability requirements including knowledge assessments and concentration limits.

Token Admission

Licensed VATPs must have a formal token admission policy governing which tokens are listed. The SFC expects due diligence on each listed token, including assessment of regulatory status, liquidity, and market integrity risks.

Insurance Requirements

VATPs must hold adequate insurance — professional indemnity and crime insurance covering the virtual assets they custody. The SFC sets minimum coverage expectations based on assets under custody.

Cold Storage

VATPs must hold at least 98% of client virtual assets in cold storage — offline, hardware-based custody. Hot wallet limits and security protocols are prescribed in SFC guidelines.

AML/CFT for VA Exchanges

The SFC requires a comprehensive AML/CFT programme including blockchain analytics (transaction monitoring), Travel Rule compliance, sanctions screening, and SAR/STR procedures aligned with FATF standards.

Cybersecurity Standards

VATPs must implement cybersecurity frameworks covering access controls, network security, penetration testing (at least annually), incident response, and vulnerability management — aligned with SFC cybersecurity guidelines.

Our Process

How We Work

Eligibility Assessment

We assess whether your business model meets VATP licence eligibility — particularly in relation to HK incorporation, qualified management, and compliance infrastructure readiness.

Application Package

We prepare all VATP application materials including business plan, AML/CFT programme, cybersecurity policy, token admission policy, and governance documentation.

Insurance & Cold Storage

We assist with identifying insurers and cold storage custodians meeting SFC requirements — practical bottlenecks that require early planning.

Submission & Liaison

We submit the application, manage SFC queries, and assist with any meetings or interviews during the review process.

Post-Licence Compliance

We establish the ongoing compliance programme, annual audit engagement, and SFC reporting calendar.

Why Marensa

HK Crypto Compliance. SFC Standard.

VATP licensing is complex and requires genuine operational infrastructure — not just paperwork. Insurance, cold storage custody, and blockchain analytics are practical requirements that must be in place, not just planned.

Marensa Advisory advises VATP applicants with deep knowledge of both the SFC's documented requirements and the operational realities of building a compliant virtual asset exchange.

Start the Conversation

SFC

Regulator

2023

Regime Launch

98%

Cold Storage Req.

Asia Crypto Hub

FAQ

Common Questions

Is VATP licensing mandatory for all crypto exchanges in HK? +

Yes. Since June 2023, all centralised virtual asset exchanges operating in or actively marketing to HK investors must hold a VATP licence or have applied for one under transitional arrangements.

Can VATP licensees serve retail investors? +

Yes — this is a key distinction from most other jurisdictions. However, retail investor access requires additional conduct controls, knowledge assessments, and concentration limits not required for professional investors.

How long does VATP licensing take? +

The SFC has not published a firm timeline. Given the volume of applications and the depth of assessment, 12–24 months from submission is a realistic expectation for full VATP licensing.

Is an SFC Type 1 or Type 9 licence also required? +

VATPs that provide dealing or asset management services alongside exchange operations may also need standard SFC Regulated Activity licences (e.g., Type 1 for dealing). Dual licensing is common for full-service VATP operators.

Related Services

You May Also Need

HK SFC Licence

Standard SFC Regulated Activity licence for securities and fund management.

Learn more →

HK MSO Licence

Money Service Operator licence for HK-based money exchange and remittance.

Learn more →

UAE VASP Licence (VARA)

Dubai's VARA regime for virtual asset businesses.

Learn more →