Hong Kong Crypto Licenses: Four Services Before 2027

I kept waiting for the fine print to land, and it still has not. On a Monday briefing in early October 2026, Hong Kong’s financial services leadership told lawmakers that an amendment bill covering four virtual asset activities would be put in front of the legislature before the year is out. Dealing. Custody. Advisory. Management. Four licenses, one legislative vehicle, and a city that already runs separate regimes for trading platforms and fiat-referenced stablecoins. If you run a desk, hold keys, or advise clients who treat tokens like securities, this is the moment the calendar stops being theoretical.

None of those four regimes is live. A briefing is not a commencement date. The bill still has to be introduced, argued, amended and passed. Exact exemptions, application forms and the day a firm must stop operating without a license will depend on the text that survives and on guidance that follows it. Still, the signal is hard to miss. Hong Kong is not dabbling. It is trying to close the gap between platforms that already need permission and the firms around them that, until now, sat in a greyer patch.

Four Licenses, One Bill, And A City That Already Regulates Crypto

The plan, as described at the Finance Committee policy briefing, is to submit legislation before the end of 2026 that would create licensing regimes for virtual asset dealing, custody, advisory and management. The work sits with the financial services bureau and the securities regulator, after consultations that ran through 2025 and into early 2026. The principle they keep repeating is simple enough to stick on a wall: same business, same risks, same rules.

I have found that phrase does a lot of heavy lifting in this city. It is how officials justify mapping token activity onto the securities rulebook rather than inventing a parallel universe. It is also how critics poke holes. Crypto is not always the same business. A cold-wallet custodian does not behave like a stockbroker. An adviser who only talks about protocol design is not a Type 4 house in any ordinary sense. The draft path accepts the mismatch and still borrows the old categories, because that is the machinery Hong Kong already knows how to supervise.

What already exists is worth keeping in view, or the new bill looks bigger than it is.

• Covered virtual asset trading platforms that serve the local market already need authorization, with rules on investor protection, governance, how assets are handled, and anti-money laundering controls.
• Custody standards for those licensed platforms were tightened in August 2025, with a sharper focus on cold wallets, withdrawals and cybersecurity.
• Fiat-referenced stablecoin issuance has its own ordinance, in force since 1 August 2025, overseen by the monetary authority. The first two issuer licenses were granted in April 2026.

The new bill would sit beside those systems, not replace them. Platforms stay platforms. Stablecoin issuers stay under the monetary authority. The four new permissions are meant for the firms that deal, hold, advise or manage, including activity that never quite fitted the exchange license.

Why The Timing Feels Deliberate

Consultations on standalone dealing and custody licenses opened in June 2025. More than 190 responses came back. Conclusions landed on 24 December. Drafting followed. A separate consultation on advisory and management closed in January 2026 with 51 responses from firms, industry bodies and professional groups. In May, officials said they would finalize proposals under the anti-money laundering and counter-terrorist financing ordinance, and they kept the 2026 submission target.

That is a long runway for a market that moves in weeks. Perhaps the most interesting aspect is how little drama there was in the May readout. Advisory and management, which some people expected to slip to a later bill, were pulled onto the same legislative timetable as dealing and custody. One package. One political window. Less chance that a firm gets licensed to deal and then waits another year to learn whether its advisory arm is even in scope.

A license regime that arrives in pieces trains people to arbitrage the gaps. A regime that arrives together at least forces the gaps into the open.

Market structure note, after the May conclusions

Existing and prospective advisory and management providers were told to talk to the regulator before the law takes effect. Early conversations, the argument goes, help a firm see the proposed requirements and start shaping an application. I would treat that invitation as real, not decorative. In this town, the firms that show up early rarely regret the hours. The ones that wait for the gazette often discover that “ready” meant something more specific than a slide deck.

What The Four Activities Actually Cover

Labels matter here, because a sloppy reading will send the wrong team into the licensing queue.

Virtual asset dealing is drawn, in part, from the framework used for Type 1 securities dealing. The securities regulator would license and supervise firms that carry out covered dealing. Exemptions similar to those in conventional securities markets have been under consideration. That last line is where a lot of private negotiation will live. Who can intermediate without a full license? What counts as dealing if the token never touches a local order book? The consultation record suggests officials want a recognizable dealing perimeter, not a net that catches every wallet-to-wallet transfer.

Custody is narrower and, in my view, more urgent. The December 2025 consultation conclusions focused on firms responsible for safeguarding private keys that belong to clients. The regime is aimed at risks tied to holding client virtual assets in Hong Kong, including controls meant to protect customer property. If you only route orders and never touch keys, this may not be your license. If clients sleep better because your name is on the vault, it almost certainly is.

Advisory is expected to track Type 4 securities regulation in broad outline. Advice on virtual assets, where it looks like regulated advice, would need a permission of its own. Management is modeled on Type 9 asset-management requirements. Discretionary management of virtual asset portfolios would sit in that lane. The May conclusions said both areas had support during consultation, which is why they share the bill with dealing and custody.

Same business, same risks, same rules. You will hear it again. It is the design choice, not a slogan bolted on at the end.

A Practical Map Of Who Might Need What

Rules are still draft-shaped, so this is a working map, not a compliance opinion. Still, teams keep asking the same question in different clothes: which desk is exposed?

A single firm can easily touch two columns. An OTC desk that also holds client coins is not choosing between dealing and custody. It is probably staring at both. A manager that publishes model portfolios and then executes them may have advisory and management questions in the same week. The bill’s value, if it is drafted cleanly, is that those overlaps get named instead of being left to side letters.

Dealing Rules Will Feel Familiar, Until They Do Not

Securities dealing in Hong Kong is a known craft. Fit and proper tests. Client agreements. Record keeping. Conflicts. Capital. Conduct. The proposed virtual asset dealing regime is designed to follow parts of that craft, not photocopy every page. Exemptions similar to the conventional market have been discussed, which is the polite way of saying some activity will stay outside if it looks enough like an existing carve-out.

Here is where I get a little opinionated. Copying Type 1 is the right instinct for client-facing intermediation and a clumsy one for pure technology routing. A firm that matches professional counterparties, holds no inventory and never solicits retail is not the same animal as a shop advertising leverage to walk-in clients. If the exemptions are thin, serious liquidity will book elsewhere and the license will mostly catch the firms that already wanted a stamp. If the exemptions are wide, retail-facing dealing will hide inside them. The consultation volume, north of 190 responses on dealing and custody alone, suggests the industry already fought this fight on paper. The bill is where the fight gets a clause number.

What should a dealing desk actually do while it waits?

1. Map every flow that could be called dealing: voice, chat, electronic, introducer, and anything booked through an affiliate.
2. Separate proprietary inventory from client orders in the records, not just in the pitch.
3. Write down which clients are professional, which are not, and who decided.
4. List exemptions you think you can use, and the facts that would break them.
5. Open the conversation with the regulator before the application window, not after a competitor files.

Short version: if you cannot explain your book in one sitting, you are not close to a license conversation.

Custody Is The License That Keeps Risk Officers Awake

Keys are the whole argument. The December conclusions tied the custody regime to firms that safeguard private keys belonging to clients, and to the risks of holding client virtual assets in Hong Kong. Controls intended to protect customer property sit at the center. That is a narrower hook than “anyone who mentions a wallet,” and it is still wide enough to catch prime brokers, wallet companies, trust companies and platform affiliates that store client coins off the exchange license.

Licensed trading platforms already live under stricter custody standards from August 2025: cold wallets, withdrawal controls, cybersecurity. The new regime is the piece for firms that are not exchanges. In practice, supervisors will look for the same instincts. Who can move a key? How many people? What happens at 2 a.m.? Where is the disaster recovery that is not a screenshot? Can a client get assets back if the company hits trouble?

There is a surveillance layer coming beside the license. Officials have said a digital asset custody surveillance system is scheduled to come into operation in the second half of 2026. A technology program is then expected to add big-data market surveillance and anti-money laundering monitoring components in 2027. Licensing without eyes is a paper exercise. Eyes without a license is a fishing trip. Hong Kong is trying to stand up both, which is ambitious, and a little late if you have been holding client keys since 2021.

Custody fails in the boring places: a shared seed, a vendor no one revisited, a withdrawal policy that lives in someone’s head.

I have sat through enough incident reviews to believe that line. The firms that will struggle are not the ones lacking a slogan about security. They are the ones whose vendor list, key ceremony and client mandate do not match. If the regime lands as the consultations described, those mismatches become licensing problems, not just reputational ones.

Advisory And Management Borrow The Securities Shape

In May, the regulator said advisory rules would broadly follow Type 4, and virtual asset management would be modeled on Type 9. That is the cleanest sentence in the whole package, and also the one most likely to be misread by a research shop that “only publishes notes.”

Advice becomes regulated when it is personal enough, specific enough, and tied to a business of advising. A public essay about market structure is not the same as a call telling a family office to rotate into a token. Management becomes regulated when discretion shows up: you decide, they own the result. Model portfolios that clients must approve trade by trade can fall on the advisory side. Mandates that let you trade inside a policy can fall on the management side. Plenty of wealth firms do both before lunch.

The May conclusions brought those two areas onto the same timetable as dealing and custody, after 51 consultation responses. Support does not mean the text will be gentle. It means the industry did not reject the idea of a license. Final exemptions, transitional relief and the treatment of overseas managers serving Hong Kong clients will be the clauses people highlight in yellow.

What I would not do is wait for a perfect definition of virtual asset before cleaning the advisory files. Scope fights are real. Messy recommendation logs are a worse problem, because they are yours to fix regardless of where the legal line settles.

Stablecoins And Platforms Stay On Their Own Tracks

It is easy to mash every Hong Kong crypto headline into one reform. They are related. They are not the same statute.

Trading platforms that serve the local market already need authorization. The expectations cover investor protection, governance, asset handling and anti-money laundering. Custody rules for those platforms were tightened separately in August 2025. The new dealing and custody licenses are the expansion beyond that platform perimeter, which is why earlier policy agendas already flagged dealing and custody legislation, with advisory and management added later to the same package.

Stablecoin issuance sits with the monetary authority under an ordinance that took effect on 1 August 2025. Covered businesses need a license to issue fiat-referenced stablecoins. The authority’s 2025 annual report confirmed that the first two issuer licenses were granted in April 2026 after the application review. Licensees are expected to meet rules on reserves, governance, redemption and anti-money laundering. That is a banking-adjacent regime. It is not a securities dealing license wearing a different hat.

The 2026 policy address pushes the two worlds closer in the market, if not in the statute. Licensed platforms are expected to support trading in regulated stablecoins. Rules for tokenized investment products are set to widen toward suitable assets, including tokenized gold. So a platform might list a regulated stablecoin, custody client balances under tighter wallet rules, and still not be the issuer. An issuer might hold reserves and redemption mechanics and still not be a dealer. The four-service bill is what fills some of the space between those chairs.

Surveillance, Settlement And The Rest Of The 2026 Agenda

Licensing is the headline. It is not the whole policy address.

The securities regulator is expected to keep tightening virtual asset licensing rules and to publish more detailed guidance for service providers. The custody surveillance system is slated for the second half of 2026. The broader technology program, often discussed under a crypto-tech label, is expected to add market-surveillance and anti-money laundering monitoring built on larger data sets in 2027. If you are building compliance software for this market, that 2027 component is the quieter contract. Licenses create applicants. Surveillance creates daily work.

At the central bank layer, the monetary authority plans central bank digital currency settlement and round-the-clock operations through its tokenized-deposit pilot around the end of 2026. The annual report describes that system as the pilot phase of a wider project, with support for tokenized central-bank money being developed during the year. A 24/7 settlement rail for tokenized deposits is not a crypto license. It is the plumbing that makes tokenized deposits less of a demo. I would not bet a business plan on the exact month it goes fully live. I would bet that counterparties will ask whether you can settle against it once it does.

Two gold-market items travel in the same policy program, and they are easy to ignore if you only read the virtual asset paragraphs. A central clearing and settlement system for gold is scheduled to begin formal operations in the first quarter of 2027, after a trial during 2026. The exchange is expected to announce details this year for a new renminbi-denominated gold futures contract with physical settlement. Tokenized gold showed up in the virtual asset product language for a reason. Hong Kong wants commodities, currency and tokens in the same conversation, even when the licenses differ.

Rough 2026–27 sequence, as described publicly:
  Bill introduction targeted before end-2026
  Custody surveillance system aimed at H2 2026
  Tokenized CBDC-style settlement pilot toward end-2026
  Big-data surveillance and AML tools expected in 2027
  Gold clearing formal operations targeted Q1 2027
  Commencement of the four licenses: not announced

That last line is the one to underline. Authorities have not announced a commencement date for the new licenses in the materials behind this briefing. Introduction is not commencement. Passage is not commencement. Guidance is not commencement. Firms that staff a project as if the license starts on 1 January 2027 are guessing.

What Passage Actually Requires

Hong Kong’s legislature does not rubber-stamp a financial bill because a secretary mentioned it in October. Once introduced, the amendment goes through the council process. Committees ask questions. Industry groups send another round of letters. Drafting counsel adjusts definitions. A commencement clause can be staged, so dealing might start on a different day from management. Transitional arrangements can let incumbents keep operating while applications are processed, or they can be short and sharp. None of that is fixed in the briefing.

The legal home matters too. Officials have pointed to the anti-money laundering and counter-terrorist financing ordinance as the vehicle for finalizing proposals. That choice tells you something about the lens. Client asset protection and market conduct will be in the rules, but the statute they are amending is built for financial crime controls as well as licensing architecture. Expect beneficial ownership questions, travel-rule instincts, and a suspicious-transaction culture to show up in the application, not only in a later circular.

Could the bill slip into 2027? Of course. Legislative calendars slip when definitions fight. The October remarks were meant to keep the package on the 2026 timetable, which is as close to a commitment as a briefing usually gets. I would plan for introduction this year and for commencement whenever the text says, not when a headline implies.

How Firms Should Use The Gap Between Briefing And Law

The gap is a gift if you use it, and a trap if you treat it as permission to wait. Regulators have already encouraged companies that provide, or plan to provide, dealing, custody, advisory or management services to begin discussions before the regimes take effect. That is the practical door.

A useful pre-application pack, in my experience, is boring on purpose.

• A one-page description of each activity, written the way a supervisor would describe it, not the way marketing would.
• An org chart that shows who approves a trade, who holds a key, and who can change either control.
• Client categories, with a count, not a vibe.
• A vendor list for wallets, cloud, chain analytics and settlement banks.
• Incident history for the last two years, including near misses.
• A gap list against Type 1, Type 4 or Type 9 instincts, depending on the lane.
• Capital and insurance sketches, even if the numbers will change.

Bring questions, not a finished fantasy application. Ask which affiliates are in scope. Ask whether an overseas manager with Hong Kong clients is expected to establish locally. Ask how platform custody rules interact with a standalone custody license if you are both. Those answers will not all be available. Asking them early still changes how you design the group.

Retail-facing shops should assume the bar looks like investor protection, not like a sandbox badge. Professional-only shops should not assume they are exempt just because the clients are rich. Wealth managers who “allocate a sleeve” to tokens should read the management analogy twice. Technology firms that custody as a feature inside a larger app should stop calling it a feature in internal memos. If clients rely on you for the keys, the label on the website will not save the licensing analysis.

Where This Leaves Regional Competition

Other hubs have spent the same years writing their own versions of this story. Some moved faster on spot products. Some moved faster on stablecoins. Some still treat the whole sector as a registration problem rather than a conduct problem. Hong Kong’s bet is the securities-shaped one: license the activity, supervise the firm, and keep the monetary authority on issuance and settlement rails.

Is that the best design? It depends what you want the city to be. If you want deep professional liquidity, familiar conduct rules and a path for tokenized funds, the Type 1, Type 4 and Type 9 echoes are a feature. If you want experimental consumer apps with thin compliance, they are a cost. I lean toward the first outcome being what officials actually want. The stablecoin licenses granted in April 2026, limited in number and heavy on reserves and redemption, point the same way. This is not a race to the lightest rulebook.

For groups already licensed as platforms, the new bill is less of a surprise and more of a group-structure question. Do you keep custody inside the platform entity, or do you split it? Does the advisory affiliate need its own permission once the law starts? Can introducing brokers that feed the platform stay unlicensed under an exemption, or does the dealing regime pull them in? Those are board questions. They are also the questions competitors will use when they pitch clients on “fully licensed” coverage.

Risks The Briefing Does Not Spell Out

A few risks sit between the lines.

First, definitional drift. Virtual asset, dealing, safeguarding, advice and management can expand in committee. A draft that looks manageable in October can cover an extra affiliate by the time it passes. Build the analysis so a wider definition does not collapse the project.

Second, dual supervision friction. A stablecoin issuer under the monetary authority that also deals or custodies for clients may answer to two styles of supervisor. Platforms already know this feeling. New applicants will learn it. Coordination is promised more often than it is painless.

Third, timing mismatch with surveillance. If licenses commence before the custody surveillance system is useful, supervisors will lean on manual reviews. If surveillance arrives before licenses, firms may feel watched without a clear permission to operate. Neither sequence is fatal. Both are awkward.

Fourth, talent. Fit-and-proper responsible officers do not appear because a bill is tabled. The securities industry already employs them. Virtual asset experience plus a clean regulatory history is a thinner pool. Firms that start the search after passage will pay for the delay.

Fifth, client communication. A license application can freeze product launches. Clients notice. The better shops tell them early what will change in onboarding, withdrawal times and which tokens stay available. The worse shops discover the question in a redemption queue.

A Closer Look At Exemptions And Edge Cases

Exemptions are where commercial reality meets the statute. In securities markets, certain professional dealings, incidental activity and group transactions sit outside full licensing if the facts hold. Officials have said similar exemptions have been under consideration for virtual asset dealing. That is encouraging if you run a narrow professional desk. It is not a promise.

Edge cases I keep hearing about, none of them resolved in the October remarks:

• An overseas manager with a handful of Hong Kong professional investors and no local office.
• A technology firm that generates keys for clients inside an app but says the client “controls” them through a user interface.
• An introducer paid for referrals into a licensed platform, with no order handling of its own.
• A research firm whose notes are public, plus a side retainer that looks a lot like personal advice.
• A trust company that holds tokens as trustee and insists it is not a custodian in the crypto sense.
• A market maker that deals only with other professionals and never faces retail.

If your model is on that list, the pre-law conversation is not optional color. It is the difference between designing a permission and discovering you needed one. I would write the facts down in plain sentences. “We hold the seed.” “We do not hold the seed.” “We choose the trade.” “The client clicks every order.” Supervisors can work with plain sentences. They struggle with metaphors.

What Investors Should Take From The Package

This is not a price call. A licensing bill does not tell you where bitcoin trades next month. It does tell you something about market structure, and structure is what serious allocators actually underwrite.

Regulated stablecoin trading on licensed platforms, if it arrives as the policy address described, gives local investors a cleaner on-ramp than an offshore token with a marketing PDF. Tokenized products that expand toward suitable assets, including tokenized gold, give private banks a story they can put in an investment committee pack. Round-the-clock settlement for tokenized deposits, if the pilot matures, shortens the awkward gap between a token moving and money moving. None of that removes market risk. It removes some operational excuses.

The skeptical read is also fair. Two stablecoin issuer licenses is a start, not a deep market. A surveillance system scheduled for late 2026 does not protect a client today. A bill that has not been introduced cannot be enforced. Anyone selling “Hong Kong regulated” as a blanket label before commencement is ahead of the law. Ask which entity, which activity, which supervisor, and which rule is already in force. The platforms and the stablecoin issuers have answers. Many dealers and custodians, for now, have a plan.

How I Would Brief A Board This Week

If I had twenty minutes with a board that touches this market, I would skip the skyline rhetoric and use the time like this.

One: the government intends to introduce an amendment bill before the end of 2026 covering dealing, custody, advisory and management. It is not law. Two: dealing is being shaped with Type 1 in mind, custody around client keys and client property, advisory along Type 4 lines, management along Type 9 lines. Three: platforms and stablecoin issuers are already in separate regimes, and the first issuer licenses were granted in April 2026. Four: custody surveillance is aimed at the second half of 2026, with broader monitoring tools expected in 2027. Five: no commencement date has been announced. Six: the useful move is a scoped conversation with the regulator and a gap review, not a press release about being “license ready.”

Then I would ask the board three questions. Which legal entity actually holds client keys? Which entity gives advice a client could reasonably treat as personal? Which entity has discretion? If those answers take more than a minute, the project is a structure project, not a policy-watching project.

Board filter: keys, advice, discretion. If any answer is “it depends,” start there.

The Human Side Of A Licensing Wave

Regimes like this land on people, not only on entities. Compliance hires inherit a half-built policy set. Engineers get asked to prove a key ceremony they designed for speed. Sales teams learn they cannot promise a product timeline. Founders who liked the word unregulated in 2019 now want the word licensed on the website, and they want it without changing the product. That tension is normal. It is also where projects stall.

The firms that move cleanly tend to pick an owner who can say no. Not a committee. An owner. They freeze new client segments until the activity map is done. They tell existing clients what might change in withdrawals and reporting. They budget for advice that is specific to Hong Kong conduct rules, not a generic global memo. None of that is glamorous. It is how you avoid rebuilding the same deck in March because nobody owned the exemption analysis.

There is also a quieter opportunity. Guidance will reward firms that can show controls in operation, not controls in a binder. A surveillance system landing in late 2026 will have something to look at. Better that it looks at records you would show a client anyway.

What To Watch Between Now And Year-End

A few markers will tell you whether the October remarks were a schedule or a hope.

1. Gazette or council papers that actually introduce the amendment bill, with definitions you can read.
2. Any transitional language for firms already in the market.
3. Further guidance for platforms on trading regulated stablecoins.
4. Detail on the custody surveillance system as the second half of 2026 approaches.
5. Updates on the tokenized settlement pilot and whether 24/7 operations stay on the year-end track.
6. Exchange detail on the renminbi gold futures contract, as a read-through on how tokenized commodities may be framed.
7. Public notes from early regulatory meetings, if firms are willing to share the themes without sharing their secrets.

Until the bill text exists, everything else is direction. Direction is still useful. It tells you which work is wasted and which work survives a rewrite. Mapping keys, advice and discretion survives a rewrite. Arguing on social media about whether Hong Kong is “open” does not.

A Note On What This Is Not

It is not a retail invitation. Nothing in the briefing lowers the bar for ordinary investors chasing yield. Platform rules and stablecoin reserve rules point the other way. It is not a ban, either. The city is adding permissions, not shutting the market. It is not an instant passport into every product. Tokenized gold, regulated stablecoins and discretionary token mandates will each carry their own conditions.

And it is not finished. I keep coming back to that because headlines compress. “Hong Kong plans new licenses” is true. “Hong Kong now licenses dealers, custodians, advisers and managers” is not true yet. The difference is the whole story.

Pulling The Threads Together

Hong Kong has spent more than a year preparing separate rules for dealing, custody, advisory and management, then chose to legislate them together. The October briefing keeps that bill on the 2026 timetable. Dealing leans on the securities dealing model, with exemptions still in play. Custody is about client keys and client property, with a surveillance system aimed at the back half of the year. Advisory and management borrow the shape of existing securities permissions, after a consultation that closed in January and was confirmed in May. Platforms and stablecoin issuers continue under regimes that are already operating, including the first issuer licenses granted in April 2026.

Beside the licenses, the policy program talks about regulated stablecoin trading, a wider set of tokenized products, round-the-clock digital settlement toward the end of 2026, and a gold-market build that runs into 2027. Ambitious, yes. Coherent, mostly. Dependent on legislative text that the public has not yet been handed.

If you touch this market, the adult move is unglamorous. Read your own activity against the four labels. Talk to the regulator before you need a file number. Assume commencement will lag introduction. Build records you would not be embarrassed to show. The city is telling you the direction. It has not told you the day. That gap is still yours to use.