Hong Kong's RWA Tokenisation Wave: Navigating the Regulatory High Wall

The global real-world asset (RWA) tokenisation market has reached nearly USD 352 billion as of late 2025, according to data from RWA-XYZ. What began in 2017 as a niche experiment in real estate securities and digital art has evolved into a mainstream institutional product category, with Goldman Sachs, BlackRock, and J.P. Morgan all operating tokenised asset products at scale. BlackRock's BUIDL fund — a tokenised US Treasury product — surpassed USD 1.7 billion in market value. Robinhood tokenised 200 US-listed equities and ETFs for European investors.

Hong Kong stands at the intersection of this wave. With an established financial centre infrastructure, proximity to Asia's largest capital pools, and a detailed regulatory framework for virtual assets, the city has the foundations to become a significant RWA hub. But practitioners consistently describe Hong Kong's approach as building a "high wall" — a rigorous, compliance-intensive regime that imposes material barriers on would-be issuers and platform operators.

This article sets out what Hong Kong's RWA regulatory framework actually requires, and what issuers, platforms, and investors need to understand before they proceed.

Hong Kong's RWA Landscape: Largely Still at Trial Stage

Hong Kong's RWA market remains primarily in an exploratory phase. Approximately ten institutions have engaged with RWA projects to date, with the asset base concentrated in financial products — tokenised government bonds are the most developed category, with a move toward "permanent" issuance now underway.

Several characteristics define the current landscape. Most RWA products are restricted to professional investors only, with secondary markets not fully open to retail participation. Projects proceed largely through regulatory sandbox arrangements. And the aggregate scale of Hong Kong's RWA market remains modest compared to global benchmarks, despite the city's status as a leading international financial centre.

The commercial opportunity is genuine: tokenisation offers a route to fractionalise illiquid assets, broaden investor bases, compress settlement times from T+2 to near-instant, and enable tokenised assets to serve as DeFi collateral for additional yield generation. But the gap between commercial opportunity and regulatory compliance is significant, and understanding that gap is the starting point for any serious RWA initiative.

The "Same Activity, Same Risk, Same Regulation" Principle

The Securities and Futures Commission (SFC) has made its regulatory approach explicit. The governing principle is "Same Activity, Same Risk, Same Regulation": if an underlying asset is a security, tokenising it does not change the regulatory classification. The technology wrapper does not alter the legal substance of the instrument.

This principle has three immediate consequences for issuers.

First, tokenised securities remain securities. A token representing an interest in real estate, a fund unit, or a debt obligation is, in most cases, a security under the Securities and Futures Ordinance (SFO). The full securities law regime — prospectus requirements, licensing obligations, and investor protection rules — applies unless a specific exemption is available. The professional investor exemption under section 103 of the SFO is the most frequently used route, but reliance on it imposes its own requirements: KYC verification, suitability assessment, and restricted transfer mechanics.

Second, classification is determined case-by-case. Because RWA structures are diverse, the SFC analyses the nature of the asset and the target investors for each programme and applies the appropriate legal framework. This means issuers cannot rely on a simple checklist. Legal analysis specific to each programme is required before any public announcement or offering.

Third, compliance costs are material. Issuers following the full securities pathway — engaging lawyers, valuers, custodians, and insurance providers — face aggregate compliance costs that can run into the hundreds of millions of dollars. Hong Kong's current framework is therefore primarily accessible to larger institutional players, at least in this phase of market development.

Five Regulatory Requirements Every Issuer Must Address

1. Determine the legal nature of your token

Before any structural or commercial work begins, issuers must identify whether their token is a security, a commodity, a utility token, or falls within the stablecoin framework that the Hong Kong Monetary Authority (HKMA) is developing. This is a legal classification question, not a technology question. The answer determines which regulatory pathway applies and which licences are required.

2. Secure a licensed platform for secondary trading

If the programme involves secondary trading of tokens by Hong Kong investors, the platform operator must hold a VASP licence from the SFC under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). The VASP licensing process takes approximately 12 to 18 months and imposes significant capital, governance, and AML/CFT requirements. Issuers who announce tokenisation programmes without a confirmed licensed platform arrangement should be able to answer a straightforward question: how will secondary market liquidity actually operate, and who is the licensed operator facilitating it?

3. Build a legally enforceable asset transfer structure

Tokenisation is not just a technology deployment — it is a legal restructuring of how interests in an asset are held and transferred. For real estate tokenisation, this typically requires establishing a special purpose vehicle (SPV) or unit trust to hold the underlying asset, with the token representing a beneficial interest in that structure. The legal documentation must address how beneficial ownership is established and recorded, how on-chain token transfers produce legally recognised changes in ownership, how stamp duty implications are managed at each transfer step, and how enforcement rights operate if the holding structure becomes insolvent.

4. Comply with Listing Rules disclosure obligations

For Hong Kong-listed companies, any RWA initiative that is commercially material is itself a disclosure event under the Listing Rules. This creates a two-sided obligation: premature or vague disclosure of an incomplete programme can give rise to liability, while delayed disclosure of a material decision can equally attract regulatory exposure. Legal counsel should be involved in drafting any tokenisation-related regulatory announcement — not only in the underlying structuring work. An announcement that overstates commercial progress, or that implies an active product where only a feasibility study exists, creates real regulatory risk.

5. Implement a robust AML/CFT programme

Investor onboarding in a tokenised environment triggers the same AML/CFT obligations as traditional securities distribution. The issuer or its licensed platform partner must collect and verify KYC documentation, screen against international sanctions lists, conduct ongoing transaction monitoring, and file suspicious transaction reports as required. The transparency of blockchain technology assists with monitoring but does not replace the underlying legal obligation. A tokenisation programme that relies on smart contract mechanics alone for investor onboarding is not compliant under Hong Kong law, regardless of the technology.

The Security Risk Dimension

Beyond regulatory compliance, issuers must grapple with infrastructure security risks specific to tokenised products. Losses from RWA protocol vulnerabilities globally in 2025 reached USD 146.2 million — more than double the 2024 full-year figure, according to Web3 security firm CertiK. Identified risk categories include storage risk (custody of private keys and tokenised assets), smart contract technical risk, compliance risk, and secondary market liquidity risk.

For Hong Kong issuers, this requires that the legal structure account explicitly for the consequences of a protocol or platform failure: how are investor interests protected? What contractual rights exist against technology providers? How is liability allocated between the issuer, platform operator, and custodian? These questions need answers in the documentation, not after an incident occurs.

Three Categories of Announcement — Not All Are Equal

Not every RWA announcement reflects the same level of readiness. In practice, most current Hong Kong announcements fall into one of three categories.

Exploratory MOUs and feasibility studies. A memorandum of understanding with a technology provider or platform operator commits a company to nothing beyond exploring the concept. These announcements carry disclosure obligations but do not engage the full VASP or securities regulatory framework for the offering itself.

Structures that tokenise a wrapper, not the underlying asset. Some programmes issue a blockchain-based instrument representing an interest in a fund or trust that holds the underlying asset. The economic result resembles a token but the legal form is a traditional fund or structured product that uses distributed ledger technology. These structures may not require a VASP licence but likely require SFC product authorisation or a professional investor exemption.

Full tokenisation programmes. A smaller number of initiatives describe genuine token issuance, where the tokens themselves constitute or represent securities and secondary trading is contemplated. These structures engage the full VASP licensing framework and the SFC's requirements for tokenised investment products.

Understanding which category applies is the first legal question any issuer must answer — and the answer significantly shapes the compliance pathway and timeline that follows.

Navigating the High Wall

The characterisation of Hong Kong's RWA regime as a "high wall" is not unfair. Compliance costs are material, the licensing process is time-consuming, and the case-by-case regulatory approach creates uncertainty for novel structures. Critics in the market argue that treating all RWA as securities is applying an excessively broad regulatory lens at a time when global competitors are moving faster.

But the other side of a high wall is a defensible perimeter. Issuers and platforms that clear Hong Kong's compliance requirements are building on foundations that will withstand regulatory scrutiny as the market matures. The RWA projects that fail will predominantly be those that prioritised speed over legal structure — that announced commercial ambitions without building the compliance foundations to match.

The companies that succeed in Hong Kong's RWA market will be those that treated the regulatory framework as a feature rather than an obstacle: who engaged legal counsel at the outset, structured correctly from the beginning, and built investor protections clear enough to explain to both regulators and clients.

How Alan Wong LLP Can Help

Alan Wong LLP advises listed companies, asset managers, and technology platforms on the full range of RWA tokenisation matters in Hong Kong. Our work includes:

• Regulatory analysis — classifying the token, identifying the applicable regulatory pathway, and advising on exemptions available for the proposed structure
• Structuring — designing the SPV, trust, or fund vehicle that will hold the underlying asset and issue compliant token interests
• Platform arrangements — advising on VASP licensing requirements and the terms of platform agreements
• Disclosure — drafting and reviewing Listing Rule announcements related to RWA programmes
• AML/CFT compliance — designing the investor onboarding and ongoing monitoring framework for token holders

If your organisation is evaluating an RWA initiative — at any stage from feasibility to launch — we are available for an initial consultation.

Contact us: enquiry@awlawyers.co
WhatsApp: +852 2156 8163
Book a call: calendly.com/cynthia-ang/30min

This article is provided for general information and educational purposes only. It does not constitute legal advice and should not be relied upon as such. Laws and regulatory requirements are subject to change. Please seek independent legal advice in relation to your specific circumstances before taking any action.