Virtual Asset OTC Trading in Hong Kong: Regulatory Requirements and Compliance

Over-the-counter (OTC) trading of virtual assets has grown rapidly in Hong Kong, driven by institutional demand for large-block trades, privacy, and price efficiency outside exchange order books. At the same time, the regulatory landscape has evolved dramatically: what was once a lightly regulated activity now falls squarely within Hong Kong's Virtual Asset Service Provider (VASP) licensing regime. This guide explains the regulatory framework, licensing requirements, and compliance obligations for virtual asset OTC traders and brokers operating in or from Hong Kong.

What is Virtual Asset OTC Trading?

OTC virtual asset trading refers to the direct, bilateral trading of virtual assets (cryptocurrencies, utility tokens, security tokens) between two parties outside a centralised exchange. In practice, OTC trading in Hong Kong takes several forms:

• Principal OTC dealers: firms that buy and sell virtual assets using their own balance sheet, quoting bid/ask prices to counterparties
• Agency brokers: intermediaries who match buyers and sellers and execute trades on their behalf for a commission
• OTC desks operated by exchanges: large exchanges often operate OTC desks for high-volume institutional clients alongside their main order book
• Physical exchange shops: traditional retail OTC shops or money changers dealing in physical fiat-to-crypto conversions (prevalent in Mong Kok and similar areas)

Regulatory Framework: The VASP Regime

Hong Kong's comprehensive regulatory framework for virtual assets is anchored in the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) (Cap. 615), as amended by the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2022 (in force 1 June 2023). The AMLO establishes a mandatory licensing regime for Virtual Asset Service Providers (VASPs), administered by the Securities and Futures Commission (SFC).

Definition of Virtual Asset Service

A "virtual asset service" under AMLO Schedule 3A includes operating a virtual asset exchange, but critically does not expressly include standalone OTC trading or broking as a separate licensed category. The key question for OTC operators is therefore whether their activities fall within the definition of "operating a virtual asset exchange" or constitute regulated activities under the Securities and Futures Ordinance (SFO).

Security Tokens and the SFO

If the virtual assets traded are security tokens (i.e., they constitute "securities" or "futures contracts" as defined in the SFO — for example, tokens representing shares, debt instruments, or collective investment scheme interests), then trading those tokens triggers licensing requirements under the SFO:

• Type 1 regulated activity: Dealing in securities (required if the OTC trader deals in security tokens as principal or agent)
• Type 7 regulated activity: Providing automated trading services (potentially required for algorithmic OTC desks)

Unlicensed dealing in securities is a criminal offence under Section 114 of the SFO.

Non-Security Virtual Assets and AMLO

For OTC trading of non-security virtual assets (e.g., Bitcoin, Ether — which the SFC treats as not being securities), the VASP licensing regime under AMLO applies to the extent the trader "operates a virtual asset exchange." The SFC's position is that an OTC desk that matches buyer and seller orders and provides a centralised marketplace may be operating a "virtual asset exchange" requiring a VASP licence even if it does not operate a traditional order book.

However, a pure principal dealer that simply buys and sells virtual assets on its own account without matching third parties may not be operating an "exchange" and may therefore fall outside the VASP licensing obligation. This distinction is technically important but practically complex, and SFC guidance and enforcement practice should be monitored closely.

AML/CFT Obligations

Regardless of whether a VASP licence is required, virtual asset OTC operators in Hong Kong are subject to comprehensive AML/CFT obligations. Schedule 2 to the AMLO applies to "licensed corporations" and "money service operators," and virtual asset OTC operators that handle fiat currency conversion may additionally fall within the Money Service Operator (MSO) licensing regime under the Customs and Excise Department.

Customer Due Diligence (CDD)

OTC operators must conduct risk-based CDD on all customers, including:

• Identity verification: official ID documents, proof of address
• Beneficial ownership identification for corporate customers
• Source of funds and source of wealth for high-risk customers
• Enhanced due diligence (EDD) for politically exposed persons (PEPs), high-risk jurisdictions, and large transactions

Threshold-based CDD applies: for occasional transactions, CDD is typically required for amounts at or above HK$120,000 (or equivalent). For ongoing customer relationships, CDD must be conducted at onboarding and periodically thereafter.

Transaction Monitoring and Suspicious Transaction Reports

OTC operators must implement real-time or near-real-time transaction monitoring to detect suspicious activity. Blockchain analytics tools (e.g., Chainalysis, Elliptic) are increasingly used to screen wallet addresses against sanctions lists and known illicit addresses. Suspicious transactions must be reported to the Joint Financial Intelligence Unit (JFIU) via a Suspicious Transaction Report (STR).

Travel Rule Compliance

Hong Kong has implemented the FATF Travel Rule for virtual asset transfers. Licensed VASPs (and, in practice, regulated OTC operators) must collect and transmit originator and beneficiary information for virtual asset transfers above the threshold (HK$8,000 or equivalent). This requires technical solutions for inter-VASP data exchange and due diligence on unhosted (self-hosted) wallets.

Money Service Operator (MSO) Licensing

OTC operators that exchange virtual assets for fiat currency (and vice versa) may be operating a money changing service or remittance service within the meaning of the Money Service Operators Licensing Regime (administered by the Customs and Excise Department under AMLO). An MSO licence is required in addition to (or instead of, depending on the scope of activities) a VASP licence. MSO licensees are subject to their own AML/CFT requirements, inspection regime, and fit and proper standards.

Retail vs. Institutional OTC Trading

The SFC has drawn important distinctions between retail and institutional virtual asset trading:

• Retail access: Licensed VASPs operating exchanges may offer retail access (to Hong Kong retail investors) subject to strict conditions including investor protection measures, token eligibility requirements (large-cap tokens only), and risk disclosure obligations
• Institutional-only OTC: OTC desks dealing exclusively with "professional investors" (as defined in the SFO — broadly, individuals with a portfolio of HK$8 million or more, or institutional investors) may benefit from lighter-touch treatment in some respects, though AML/CFT obligations apply equally

The practical implication is that OTC operators should clearly define their target client base and implement onboarding procedures that verify professional investor status where they intend to rely on this distinction.

Licensing Application for VASPs

For OTC operators that require a VASP licence, the application process involves:

1. Submission of a detailed business plan, including description of OTC services offered
2. Information on the applicant's corporate structure, shareholders, and beneficial owners
3. Fit and proper assessment of responsible officers and key personnel
4. AML/CFT policies and procedures manual
5. Technology assessment (custody arrangements, cybersecurity, blockchain analytics)
6. Financial resources assessment (the SFC requires licensed VASPs to maintain minimum liquid capital)

The SFC has been processing VASP applications since June 2023 and has signalled that it takes a rigorous approach to assessing applicants' AML/CFT infrastructure and governance. Legal and compliance advice from practitioners experienced in the SFC's expectations is critical to a successful application.

Sanctions Compliance

Virtual asset OTC operators must comply with Hong Kong's sanctions legislation, primarily administered by the Hong Kong Monetary Authority (HKMA) and pursuant to the United Nations Sanctions Ordinance (Cap. 537) and related subsidiary legislation. Screening customers and transaction counterparties against OFAC, UN, EU, and HK-specific sanctions lists is required. The rapidly evolving crypto-specific sanctions environment (including OFAC's sanctioning of Tornado Cash and individual wallet addresses) requires robust and regularly updated screening procedures.

Practical Recommendations for OTC Operators

• Regulatory mapping: Conduct a thorough legal analysis of your specific OTC model to determine which licences (VASP, MSO, SFC Type 1/7) are required before commencing operations
• Robust KYC/AML programme: Invest in a comprehensive AML/CFT compliance programme, including blockchain analytics, ongoing transaction monitoring, and experienced compliance personnel
• Travel Rule readiness: Implement a compliant Travel Rule solution before handling significant transaction volumes
• Institutional focus: Where feasible, focusing on institutional and professional investor clients reduces regulatory complexity and risk
• Legal and regulatory advice: Engage Hong Kong lawyers experienced in virtual asset regulation early in the business planning process

Conclusion

Virtual asset OTC trading in Hong Kong is now firmly within the regulatory perimeter. The combination of the VASP licensing regime, SFO regulation of security tokens, MSO requirements for fiat conversion, and comprehensive AML/CFT obligations creates a multi-layered compliance environment that demands specialist expertise. The SFC and other regulators have made clear that operating without appropriate licences is not an option: the regulatory and reputational risks of non-compliance far outweigh the short-term convenience of operating in a grey zone.

Alan Wong LLP advises virtual asset businesses on regulatory compliance, VASP licence applications, and AML/CFT programme development. Contact us to discuss your virtual asset OTC operations.