FinTech Licensing in Hong Kong: A Guide for Market Entrants

Hong Kong regulates FinTech activity through a small number of well-established authorities rather than a single dedicated FinTech law. For a company entering the market, the practical challenge is less about novelty and more about mapping a business model onto the right existing licence or registration. This guide provides a general, educational overview of the main regulatory pathways — it is not legal or investment advice, and any company planning market entry should seek qualified local counsel for its specific circumstances.

The three regulators

Hong Kong's financial regulatory architecture is built around three principal authorities, each responsible for a distinct slice of the financial system:

• Hong Kong Monetary Authority (HKMA) — the de facto central bank, responsible for banking supervision, virtual banking licences, and the regulation of Stored Value Facilities (SVF) and retail payment systems.
• Securities and Futures Commission (SFC) — regulates securities, asset management, and investment advisory activity, and since 2023 licenses centralised Virtual Asset Trading Platforms (VATPs) under a dedicated VASP regime.
• Insurance Authority (IA) — regulates insurers and insurance intermediaries, and runs dedicated Insurtech initiatives including a Fast Track authorisation queue for digital-only insurers.

A single FinTech business can fall under more than one of these regulators simultaneously — a digital wealth platform that also issues a prepaid card, for example, may need to deal with both the SFC and the HKMA.

Money Service Operator (MSO) licence

Any company carrying on money changing or remittance services in Hong Kong needs an MSO licence, issued not by a financial regulator but by the Customs and Excise Department (C&ED) under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. This is the entry point for most cross-border payments and remittance FinTechs. Controllers, partners, and directors must be assessed as "fit and proper," and applicants typically need to demonstrate a working AML/CFT compliance programme — including customer due diligence procedures, record-keeping, and staff training — before a licence is granted.

Stored Value Facility (SVF) licence

Businesses issuing e-wallets or prepaid payment products — where value is stored for later use in purchasing goods or services or for person-to-person transfers — generally need an SVF licence from the HKMA under the Payment Systems and Stored Value Facilities Ordinance, with a minimum paid-up capital of HK$25 million, plus the possibility of higher requirements depending on the scale of the float and complexity of the business. Hong Kong's SVF ecosystem is already substantial — HKMA data put total SVF accounts in use at close to 89 million as of Q1 2026, up 9.7% year on year, reflecting deep consumer adoption of e-wallets alongside established products like Octopus.

Virtual banking licence

Companies seeking to operate a full-service, branchless bank need a virtual banking licence from the HKMA. A virtual bank is held to the same authorisation criteria as any other licensed bank under the Banking Ordinance, including the HK$300 million minimum paid-up capital requirement, alongside guidance specific to digital-only business models covering technology risk management and outsourcing arrangements. The HKMA issued eight virtual banking licences between 2019 and 2020 — including ZA Bank and Mox Bank — and no new licences have been issued since, making this one of the more mature and closely-watched segments of Hong Kong's FinTech landscape.

SFC licences for WealthTech and InvestTech

Companies building robo-advisory, brokerage, or portfolio management products generally need one or more SFC licences under the Securities and Futures Ordinance, most commonly:

• Type 1 — Dealing in securities — required for platforms that execute securities trades on behalf of clients.
• Type 4 — Advising on securities — required for platforms or firms that issue investment recommendations tied to securities.
• Type 9 — Asset management — required for discretionary management of client portfolios, including many robo-advisory models.

It is common for a single WealthTech platform to hold two or three of these licences together, since dealing, advising, and portfolio management functions are often bundled into one product. Licensed corporations must appoint Responsible Officers who meet the SFC's competence and experience requirements, and minimum paid-up capital varies by licence type and the scope of activities carried on — applicants should confirm current thresholds directly with the SFC rather than rely on generic figures.

The VASP regime for virtual asset platforms

Since June 2023, centralised Virtual Asset Trading Platforms (VATPs) operating in Hong Kong, or actively marketing to Hong Kong investors, must be licensed by the SFC under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance's VASP regime — one of the more comprehensive frameworks of its kind globally, covering custody standards, AML/CFT controls, and a requirement for at least one locally based Responsible Officer. The government has signalled it intends to extend the AMLO framework further, broadening licensing coverage beyond trading platforms to other virtual asset activities such as dealing, custody, and advisory services — worth monitoring closely for any company building on digital assets in Hong Kong.

Sandboxes and innovation support

Hong Kong's regulators have long favoured supervised experimentation over blanket exemptions. The HKMA's Fintech Supervisory Sandbox (FSS), running since 2016, lets banks and their technology partners pilot new products with a limited customer base ahead of full compliance — pilot trials of 398 fintech initiatives had been allowed as of end-June 2026. The SFC runs its own regulatory sandbox for qualified firms testing new technology in regulated activities, and the IA operates a parallel Insurtech Sandbox alongside its Fast Track authorisation queue for digital-only insurers. In March 2026 the HKMA, SFC, IA, and MPFA jointly launched the GenA.I. Sandbox++ initiative, extending cross-sector sandbox access — covering banking, securities, asset and wealth management, insurance, MPF, and stored value facilities — to firms testing generative AI applications in risk management, anti-fraud, and customer experience.

How long does licensing take?

There is no single answer, and any adviser quoting a precise timeline without knowing your specific business model should be treated with caution. Timelines vary considerably by licence type and by how well-prepared the application is. Factors that consistently affect the pace of review include the completeness of the AML/CFT compliance framework submitted, whether controllers and Responsible Officers can clearly demonstrate they are "fit and proper," the degree of genuine local presence and substance in Hong Kong, and how novel or complex the underlying business model is. Virtual banking and VASP applications, given the scale of scrutiny involved, tend to take considerably longer than an MSO registration for a straightforward remittance business. Building in time for iterative dialogue with the regulator — rather than a single submit-and-wait application — is generally the more realistic approach.

Choosing the right licence, sequencing multiple applications correctly, and engaging regulators with the right documentation from the outset are the factors that most often separate a smooth market entry from a stalled one.

► View the complete list of FinTechs active in Hong Kong
► View our live, up-to-date statistics for Hong Kong
► Explore FinTech Consult's market entry services to support your Hong Kong licensing journey