Crypto & Blockchain Company Setup & Structuring in Hong Kong

Hong Kong has established itself as one of the most structured and internationally credible jurisdictions for crypto and blockchain businesses. The Securities and Futures Commission (SFC) operates a mandatory licensing regime for virtual asset service providers (VASPs), and the Companies Registry provides a straightforward incorporation pathway. Founders who understand the regulatory architecture from the outset avoid costly restructuring later. This article covers the legal framework, licensing requirements, corporate structuring options, compliance obligations, common pitfalls, and the practical economics of setting up a crypto or blockchain company in Hong Kong.

The opportunity is real but the regulatory bar is high. Hong Kong';s approach combines a common law legal system, a sophisticated financial regulator, and proximity to Asian capital markets. At the same time, the SFC';s licensing requirements for virtual asset trading platforms (VATPs) and fund managers dealing in virtual assets impose substantial compliance costs. Founders who treat Hong Kong as a light-touch offshore option will encounter serious problems. Those who engage with the framework properly gain access to banking relationships, institutional investors, and a credible regulatory passport within the Asia-Pacific region.

This article proceeds from the legal context through corporate structuring tools, the licensing process, compliance architecture, practical scenarios, and strategic alternatives.

---

Hong Kong';s primary legislative instrument governing virtual assets is the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO), Chapter 615 of the Laws of Hong Kong, as amended by the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022. Part 5B of the amended AMLO introduced a mandatory licensing regime for VATPs, which came into full effect in June 2023. Any person operating a virtual asset trading platform in Hong Kong, or actively marketing such a platform to Hong Kong investors, must hold a VATP licence issued by the SFC.

The Securities and Futures Ordinance (SFO), Chapter 571, remains the governing statute for virtual assets that qualify as "securities" under Hong Kong law. Where a token constitutes a collective investment scheme interest or a futures contract, the full SFO licensing regime applies. This means that many token issuers and decentralised finance (DeFi) protocols face dual regulatory exposure: AMLO for the exchange or custody function, and SFO for the underlying asset classification.

The Payment Systems and Stored Value Facilities Ordinance (PSSVFO), Chapter 584, governs stored value facilities and certain payment-related blockchain applications. Stablecoin issuers operating in Hong Kong fall under a separate proposed regulatory framework that the Hong Kong Monetary Authority (HKMA) has been developing in parallel with the SFC';s VATP regime.

The Companies Ordinance (CO), Chapter 622, governs the incorporation and ongoing administration of Hong Kong companies. A private company limited by shares remains the standard vehicle for a crypto or blockchain operating entity. The CO requires at least one director who is a natural person, a company secretary resident in Hong Kong, and a registered office address in Hong Kong.

The Inland Revenue Ordinance (IRO), Chapter 112, provides the tax framework. Hong Kong operates a territorial tax system: profits tax applies only to profits arising in or derived from Hong Kong. For many crypto businesses with international revenue streams, this creates a genuine tax efficiency, but the analysis requires careful legal and accounting work to establish the source of profits correctly.

---

Founders have several structuring options, each with distinct regulatory, tax, and operational implications.

Private company limited by shares is the most common vehicle. Incorporation takes approximately five to seven business days through the Companies Registry';s electronic filing system (e-Registry). The minimum paid-up capital has no statutory minimum for general companies, but the SFC requires VATPs to maintain minimum liquid capital of HKD 5 million (approximately USD 640,000) at all times. A private limited company provides limited liability, is straightforward to administer, and is recognised by banks and institutional counterparties.

Variable capital company (VCC) is a structure introduced in Singapore but not yet available in Hong Kong in the same form. Hong Kong introduced the Open-ended Fund Company (OFC) structure under the Securities and Futures (Open-ended Fund Companies) Rules. An OFC can hold virtual assets as part of a diversified fund portfolio, subject to SFC authorisation. This vehicle suits crypto asset managers rather than operating platforms.

Holding company and operating subsidiary structure is the preferred architecture for larger crypto businesses. A holding company - often incorporated in a jurisdiction such as the Cayman Islands, BVI, or Singapore - holds shares in a Hong Kong operating subsidiary. The Hong Kong entity holds the VATP licence, employs local staff, and maintains the required liquid capital. The holding company sits above and can own intellectual property, hold equity in other subsidiaries, and facilitate capital raising. This structure separates regulatory risk at the operating level from investment and IP assets at the holding level.

Branch office of a foreign company is technically available under the CO but is rarely used for crypto businesses. A branch is not a separate legal entity, meaning the foreign parent bears full liability for the branch';s obligations. Regulators and banks generally prefer a locally incorporated entity.

A common mistake among international founders is to incorporate the Hong Kong entity first and then attempt to retrofit a holding structure. The SFC';s fit and proper assessment of VATP applicants examines the entire group structure, including ultimate beneficial owners. Restructuring after a licence application has been submitted creates delays and may trigger additional regulatory scrutiny.

To receive a checklist on corporate structuring for crypto and blockchain companies in Hong Kong, send a request to info@vlolawfirm.com

---

The VATP licence is the central regulatory requirement for any entity operating a virtual asset exchange or providing custody services to clients in Hong Kong. The SFC administers the licensing process under Part 5B of the AMLO.

Eligibility requirements include the following:

• The applicant must be a company incorporated in Hong Kong or a registered non-Hong Kong company with a principal place of business in Hong Kong.
• At least two responsible officers (ROs) must be approved by the SFC. Each RO must demonstrate relevant experience in virtual asset markets, financial services, or technology, and must pass the SFC';s fit and proper assessment.
• The applicant must maintain minimum paid-up share capital of HKD 5 million and minimum liquid capital of HKD 3 million at all times.
• The applicant must appoint an SFC-approved external auditor and a licensed insurance provider to cover client assets held in custody.
• The applicant must implement an anti-money laundering and counter-terrorist financing (AML/CTF) programme compliant with the AMLO and the SFC';s AML guidelines.

The licensing timeline is substantial. The SFC';s published processing time for a VATP licence application is approximately six to twelve months from submission of a complete application. In practice, the SFC issues a "returned for amendment" notice in most cases, which restarts parts of the review clock. Founders should plan for a twelve to eighteen month process from initial preparation to licence grant.

Pre-application preparation typically takes three to six months. This phase involves drafting the compliance manual, AML/CTF policies, custody arrangements, technology audit reports, and the business plan required by the SFC. The SFC expects applicants to demonstrate that their technology infrastructure meets the standards set out in the SFC';s Guidelines for Virtual Asset Trading Platform Operators.

Costs are significant. Legal and compliance advisory fees for a VATP application typically start from the low tens of thousands of USD and can reach the mid-six figures for complex group structures. Technology audits, required as part of the application, add further cost. Ongoing compliance costs - including the AML compliance officer, internal audit, and external auditor - represent a recurring annual expense in the low to mid hundreds of thousands of USD for a platform of modest scale.

Type 1 and Type 9 SFO licences remain relevant where the VATP also deals in security tokens. A VATP licence under the AMLO does not automatically authorise dealing in securities. If the platform lists tokens that qualify as securities under the SFO, the entity must also hold an SFO Type 1 licence (dealing in securities) and potentially a Type 9 licence (asset management) if it manages client portfolios.

In practice, it is important to consider that the SFC conducts ongoing supervision of licensed VATPs, including on-site inspections and periodic reporting requirements. A licence grant is not the end of the regulatory relationship - it is the beginning of a continuous compliance obligation.

---

AML/CTF compliance is not a box-ticking exercise in Hong Kong. The AMLO imposes criminal liability on directors and senior management for failures in the AML programme. The HKMA and SFC conduct joint inspections of licensed entities and have demonstrated willingness to impose licence conditions, suspensions, and revocations for compliance failures.

The core elements of a compliant AML/CTF programme for a Hong Kong VATP include:

• Customer due diligence (CDD) and enhanced due diligence (EDD) procedures aligned with the AMLO Schedule 2 requirements.
• Transaction monitoring systems capable of detecting suspicious patterns in virtual asset flows, including blockchain analytics tools.
• A designated AML compliance officer with sufficient seniority and resources.
• Suspicious transaction reporting (STR) procedures to the Joint Financial Intelligence Unit (JFIU).
• Record-keeping for at least six years, as required by AMLO section 20.

A non-obvious risk is the treatment of decentralised wallet addresses. The SFC expects VATPs to apply the Travel Rule - the requirement to transmit originator and beneficiary information with virtual asset transfers - in accordance with the Financial Action Task Force (FATF) Recommendation 16. Implementing the Travel Rule for transfers to and from unhosted wallets requires technical infrastructure and legal analysis of counterparty risk that many early-stage platforms underestimate.

Many international founders underappreciate the practical difficulty of obtaining banking services in Hong Kong as a licensed VATP. Despite the regulatory framework, Hong Kong banks remain cautious about crypto clients. The process of opening a corporate bank account for a VATP typically takes three to six months and requires detailed documentation of the business model, AML programme, and source of funds. Some VATPs use licensed money service operators or payment institutions as intermediaries while their banking relationships are established.

The risk of inaction on AML compliance is acute. Operating a virtual asset exchange in Hong Kong without a VATP licence, or with a materially deficient AML programme, exposes directors to criminal prosecution under the AMLO, with maximum penalties of imprisonment and substantial fines. The SFC has published enforcement actions against unlicensed operators, and the regulatory environment has tightened considerably since the mandatory regime came into force.

To receive a checklist on AML/CTF compliance requirements for VATPs in Hong Kong, send a request to info@vlolawfirm.com

---

Scenario one: a retail crypto exchange targeting Hong Kong and Asian users. A founder wants to operate a spot trading platform for Bitcoin, Ether, and a selection of altcoins. The platform will serve retail and professional investors. The correct structure is a Hong Kong private limited company holding a VATP licence. The entity must comply with the SFC';s investor protection requirements for retail clients, including suitability assessments and token admission criteria. The SFC';s Guidelines for Virtual Asset Trading Platform Operators set out specific requirements for tokens listed on retail-accessible platforms, including due diligence on the token issuer and ongoing monitoring. The business economics require the founder to budget for a minimum of twelve to eighteen months of pre-revenue compliance and licensing costs before the platform can legally onboard retail clients.

Scenario two: a blockchain technology company providing infrastructure services. A software development company builds blockchain infrastructure - smart contract development, node operation, and API services - for third-party clients. This business does not operate a trading platform and does not hold client assets. It does not require a VATP licence. The correct vehicle is a standard Hong Kong private limited company. The company benefits from Hong Kong';s territorial tax system if its development work is performed outside Hong Kong or its clients are located outside Hong Kong. The key legal risk is inadvertent classification as a VATP if the company';s services include any element of facilitating client trades or holding client virtual assets. Legal advice on the scope of the VATP definition is essential before the business model is finalised.

Scenario three: a crypto asset management fund. A fund manager wants to establish a fund investing in virtual assets on behalf of institutional and professional investors. The fund manager must hold an SFC Type 9 licence (asset management) under the SFO. The fund vehicle itself may be structured as a Cayman Islands exempted limited partnership or a Hong Kong OFC. The SFC has issued specific guidance on virtual asset fund managers, including requirements for custody arrangements, valuation policies, and disclosure to investors. The fund manager must also comply with the SFC';s Code of Conduct for Persons Licensed by or Registered with the SFC. The business economics of a virtual asset fund in Hong Kong require the manager to maintain sufficient assets under management to cover the ongoing compliance and operational costs, which typically start from the low hundreds of thousands of USD annually.

Scenario four: a stablecoin issuer. A company wants to issue a fiat-referenced stablecoin pegged to the Hong Kong dollar or US dollar. The HKMA has proposed a licensing regime for stablecoin issuers under a separate legislative framework. As of the current regulatory position, stablecoin issuers operating in Hong Kong or issuing stablecoins referencing the Hong Kong dollar are expected to obtain a licence from the HKMA once the regime is enacted. In the interim, operating without engaging with the HKMA creates regulatory risk. The prudent approach is to engage with the HKMA';s sandbox programme and seek legal advice on the applicable requirements under the existing PSSVFO and the proposed stablecoin legislation.

---

Hong Kong is not the only credible jurisdiction for crypto and blockchain businesses, and it is not always the optimal choice. Founders should evaluate the following alternatives before committing to a Hong Kong structure.

Singapore operates a comparable regulatory framework under the Monetary Authority of Singapore (MAS) and the Payment Services Act 2019. Singapore';s Major Payment Institution licence covers digital payment token services. Singapore has a more developed ecosystem of crypto-friendly banks and a longer track record of licensed crypto operators. The compliance costs are broadly comparable to Hong Kong. Singapore may be preferable for founders with existing business relationships in Southeast Asia or for those who find Hong Kong';s banking environment too restrictive.

British Virgin Islands (BVI) or Cayman Islands remain popular holding company jurisdictions for crypto businesses with a Hong Kong operating subsidiary. These jurisdictions do not impose corporate income tax and provide flexible corporate structures for capital raising and token issuance. However, neither jurisdiction provides a credible operating licence for a retail-facing exchange. Using a BVI or Cayman entity as the sole operating entity, without a regulated subsidiary in a recognised jurisdiction, creates problems with banking, institutional investors, and regulatory recognition.

Dubai (DIFC and ADGM) has emerged as an alternative for founders who find Hong Kong';s licensing timeline too long or its compliance costs too high. The Virtual Assets Regulatory Authority (VARA) in Dubai and the Financial Services Regulatory Authority (FSRA) in ADGM offer licensing pathways with different cost and timeline profiles. Dubai may be preferable for founders targeting Middle Eastern capital or operating in markets where Hong Kong';s regulatory status is less relevant.

The decision to choose Hong Kong over alternatives should be driven by specific business factors: the target client base, the source of capital, the nature of the virtual assets involved, and the founders'; capacity to meet the SFC';s ongoing compliance requirements. A common mistake is to choose Hong Kong for reputational reasons without assessing whether the business model can sustain the compliance costs and regulatory obligations over a three to five year horizon.

A loss caused by incorrect jurisdiction selection can be substantial. Founders who incorporate in Hong Kong, begin the VATP application process, and then discover that their business model does not fit the SFC';s requirements face sunk costs in legal fees, technology audits, and management time, as well as the cost of restructuring into a different jurisdiction. Early legal analysis of the regulatory fit is significantly cheaper than late-stage restructuring.

We can help build a strategy for your crypto or blockchain business in Hong Kong. Contact info@vlolawfirm.com to discuss your specific situation.

---

What is the most significant practical risk for a crypto company setting up in Hong Kong?

The most significant practical risk is underestimating the banking challenge. Even after obtaining a VATP licence from the SFC, licensed operators frequently encounter difficulties opening and maintaining corporate bank accounts with Hong Kong-licensed banks. Banks conduct their own due diligence on crypto clients, which is separate from and in addition to the SFC';s licensing assessment. Founders should engage with banking relationships early in the setup process, ideally before submitting the VATP licence application. Some operators use licensed payment service providers as a bridge while banking relationships are established, but this creates its own operational and compliance complexity.

How long does the full setup process take, and what does it cost?

From initial incorporation to a fully operational licensed VATP, founders should budget eighteen to twenty-four months and costs starting from the low hundreds of thousands of USD. Incorporation itself takes approximately one week. Pre-application preparation - drafting compliance manuals, AML policies, technology infrastructure, and the SFC application - takes three to six months. The SFC';s review process takes a further six to twelve months, and banking setup runs in parallel. Ongoing annual compliance costs - AML officer, external auditor, technology audit, insurance - add a recurring expense that must be factored into the business plan from the outset.

Should a crypto business use a Hong Kong entity as the top-level holding company, or is a separate offshore holding structure better?

For most crypto businesses of meaningful scale, a separate offshore holding company - typically in the Cayman Islands or BVI - above a Hong Kong operating subsidiary is the more practical structure. The offshore holding company provides flexibility for capital raising, equity issuance to investors in multiple jurisdictions, and separation of IP and investment assets from the regulated operating entity. The Hong Kong subsidiary holds the VATP licence, employs local staff, and maintains the required regulatory capital. This structure is well understood by institutional investors and the SFC. A pure Hong Kong holding and operating structure is simpler but limits flexibility for international capital raising and creates concentration of regulatory risk at the holding level.

---

Hong Kong provides a credible, well-structured regulatory environment for crypto and blockchain businesses, anchored by the SFC';s VATP licensing regime and the AMLO';s AML/CTF framework. The jurisdiction offers genuine advantages: a common law system, territorial taxation, and proximity to Asian capital markets. The compliance bar is high, the banking environment is demanding, and the licensing timeline is long. Founders who engage with the framework early, structure their corporate architecture correctly, and build a genuine compliance programme can establish a durable and internationally recognised crypto business in Hong Kong.

Our law firm VLO Law Firms has experience supporting clients in Hong Kong on crypto, blockchain, and virtual asset regulatory matters. We can assist with corporate structuring, VATP licence applications, AML/CTF programme design, and ongoing compliance advisory. To receive a consultation, contact: info@vlolawfirm.com

To receive a checklist on the full setup process for a crypto or blockchain company in Hong Kong, send a request to info@vlolawfirm.com