How to approach a token issuance reviewed

A group planning a token issuance rarely faces a single legal question. It faces a cluster: is the token a security? Which regulator has authority? Which obligations attach before the token reaches investors? For a Hong Kong-connected issuance, those questions have specific, sequential answers – and the sequence matters as much as the substance.

A token issuance reviewed under Hong Kong's regulatory regime requires the issuer to determine, before any other step, whether the token constitutes a "security" or "futures contract" under the Securities and Futures Ordinance, or whether it is a virtual asset subject to the mandatory licensing regime that commenced on 1 June 2023 under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. The Securities and Futures Commission (SFC) is the licensing authority in either case. The governing instrument determines the applicable gate and the obligations that follow.

This guide sets out the decision the reader faces, the sequence in order, the gate at each step, and the common mistakes that stall or derail a filing. It is written for in-house counsel and founders approaching the process for the first time, and for those who have already started and want to re-check the route.

What decision does the issuer actually face – and why does it have to be made first?

Before any document is drafted, the threshold question is the legal character of the token. This is not a branding or marketing decision. It is a regulatory determination with direct consequences for which statute applies, which licence is required, and which set of AML and conduct obligations governs the offering.

Hong Kong law draws the primary line between two categories. A token that represents a right to profits, a share in an enterprise, or an interest in a collective investment scheme will almost certainly be a "security" within the meaning of the Securities and Futures Ordinance. Tokens that fall outside those categories but are traded on a centralised platform fall under the virtual-asset trading platform (VATP, a centralised exchange licensed by the SFC) regime. The same token can engage both regimes if it is issued with one set of rights and then traded on a licensed exchange.

Getting this determination wrong at the outset is the single most common structural error we see in our cross-border tech and Web3 practice. An issuer that assumes a token is a utility asset and proceeds without a securities-law review risks a regulatory intervention that can stop the issuance entirely. An issuer that over-classifies and seeks an SFC licence it does not need will face a longer timeline and a higher compliance burden than the facts require.

The decision is a legal one, not a technical one. It should be made by counsel before any offering document is circulated, before any pre-sale agreement is signed, and certainly before any token is delivered to an investor.

How does the Hong Kong licensing regime actually work – and which authority applies?

The SFC operates two distinct but overlapping licensing regimes for virtual assets, and the issuer must identify which applies to its specific offering before it takes any step toward the market.

Where the token is a security or futures contract, the Securities and Futures Ordinance is the governing instrument. Dealing in, advising on, or marketing such a token requires the appropriate type of SFC licence. The issuer itself, any arranger, any distributor, and any platform offering the token for trading must each consider their own licensing position. The SFC has published guidance on the point, but the guidance does not remove the need for a fact-specific analysis of the token's characteristics.

Where the token is a virtual asset that does not constitute a security, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance governs the mandatory VATP licensing regime (the framework under which centralised virtual-asset trading platforms must be licensed). The VATP regime does not directly license token issuers. It licenses the platforms on which those tokens are offered for trading. That distinction matters: an issuer planning a direct offering to Hong Kong investors still needs to consider whether the offering itself triggers any separate regulatory requirement, and whether any placement agent or distributor engaged in Hong Kong needs a licence.

A third dimension arises where the token is a fiat-referenced stablecoin (a token designed to maintain a stable value by reference to one or more fiat currencies). The Hong Kong Monetary Authority (HKMA) is the licensing authority for such instruments. A stablecoin-issuance regime commenced in 2025; issuers and counsel should verify the current commencement date and the exact perimeter of the regime before relying on any characterisation.

Our desk regularly advises on the initial classification step across all three categories. The analysis turns on the token's economic rights, its governance structure, the issuer's obligations to holders, and – critically – the jurisdiction of the investors targeted.

What is the step-by-step sequence – and what is the gate at each point?

The sequence for a token issuance reviewed under Hong Kong's regulatory regime follows five identifiable stages. Each stage has a gate: a condition that must be satisfied before the next stage can begin.

Stage 1 – Legal-character determination. The issuer's counsel prepares a written legal analysis of the token's characteristics against the definitions in the Securities and Futures Ordinance and, where relevant, the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. The gate is a concluded, documented position – not an internal assumption. Without this, no later step can be taken responsibly.

Stage 2 – Licensing and registration review. Depending on the Stage 1 output, the issuer identifies which licences are required: for the issuer entity, for any distributor, for any platform. Where the SFC is the relevant authority, the applicable licence type is determined. This stage also includes a review of whether any exemption or exclusion applies (for example, a private placement to professional investors only). The gate is a complete map of who needs what licence before the offering proceeds.

Stage 3 – Entity and structure preparation. The issuer entity must be correctly incorporated and, where applicable, resident in the right jurisdiction. Many token issuers use a BVI or Cayman Islands holding entity above a Hong Kong operating entity – a structure that engages both offshore company law and Hong Kong's economic-substance expectations. The gate is a finalised structure with confirmed substance in the operating jurisdiction.

Stage 4 – AML and travel-rule compliance. Any VATP involved in the offering is subject to customer due diligence (CDD) obligations and the FATF travel rule (the international standard requiring originator and beneficiary information to accompany virtual-asset transfers above the applicable threshold). The issuer must ensure that its own processes and those of any platform it uses are aligned. The gate is a documented CDD and travel-rule policy before any token is transferred to an investor.

Stage 5 – Offering document and investor-facing materials. The offering document must accurately reflect the legal character of the token, the regulatory status of the issuer and any distributor, and the risk factors specific to a cross-border issuance. Where the token is a security, the document must comply with prospectus requirements or fall within an available exemption. The gate is a document that is internally consistent with the Stage 1 legal-character determination and has been reviewed against the applicable disclosure standard.

The sequence is not optional. Stages cannot be run in parallel where an earlier gate has not been cleared. An offering document prepared before the licensing review is complete will almost certainly need to be revised – and may have created regulatory exposure in the interim.

The sequence above describes the standard position. Your matter turns on the token's specific characteristics, the jurisdictions of the targeted investors, and the platforms through which the token will be offered or traded – which is where the route is won or lost.

To discuss how the VATP licensing regime and the Securities and Futures Ordinance apply to your specific token structure, contact info@lockhartyip.com.

What does the cross-border dimension add – and where does Hong Kong sit as a hub?

A token issuance is almost never confined to a single jurisdiction. The issuer entity may be in the Cayman Islands or the BVI. The investors may be in Europe, the Middle East, or across Mainland China. The trading platform may be licensed in Hong Kong but operated by a group with entities in Singapore or the UAE. Each of those connections adds a layer of regulatory obligation – and a potential enforcement point.

Hong Kong's position as a regulated hub for digital assets is relevant to the cross-border analysis in two specific ways. First, the SFC's jurisdiction is engaged not only by Hong Kong-incorporated entities but also by any person who markets or offers a regulated product to Hong Kong investors or through a Hong Kong platform. A Cayman-incorporated issuer that uses a Hong Kong-licensed VATP as its primary trading venue is subject to the SFC's conduct expectations, even if it holds no Hong Kong entity.

Second, Hong Kong implements United Nations sanctions and does not give domestic effect to the unilateral sanctions measures of other states. This is a factual position under the United Nations Sanctions Ordinance. For issuers with investors or counterparties in jurisdictions that are subject to unilateral measures imposed by the United States, the European Union, or the United Kingdom, the applicable compliance obligations depend on the legal system governing each party and each transaction – not on a single, unified global standard. Counsel on our desk regularly advise on the alignment of these obligations across the relevant jurisdictions.

The Mainland China dimension is a separate, specific question. Mainland residents are not eligible investors in most Hong Kong-regulated token offerings. The boundary between Hong Kong and Mainland investor populations must be maintained at the platform level and at the CDD level. An offering that is nominally Hong Kong-based but effectively distributed to Mainland investors engages a different and significantly more complex regulatory position.

For in-house teams managing a multi-jurisdictional investor base, the cross-border interface is not a secondary concern. It is a primary gate at Stage 2 of the sequence above.

What are the most common mistakes – and how does a structured approach avoid them?

In our cross-border tech and Web3 practice, three mistakes account for the majority of the regulatory difficulties that issuers bring to us after the fact.

The first is treating the legal-character determination as a marketing decision. Issuers sometimes label a token as a "utility token" in offering materials before any legal analysis has been done. The SFC does not accept self-classification. The determination is a legal one, and if the regulator reaches a different conclusion from the issuer's chosen label, the issuer has created its own liability.

The second is failing to map the full licensing chain. The issuer focuses on its own entity and misses the obligation of a distributor, a placement agent, or a platform. The SFC's licensing requirements apply to each participant in the distribution chain who is carrying on a regulated activity. A clean issuer entity does not protect a group that uses an unlicensed distributor to place tokens with Hong Kong investors.

The third is running AML compliance as a back-office function rather than a gate. The travel rule and CDD obligations apply from the first transfer. An issuer that processes an early-access sale or a pre-seed allocation before its CDD policy is in place has created an AML file that may later complicate a licensing application or an enforcement defence.

A structured approach – following the five-stage sequence above, with each gate confirmed before the next stage opens – avoids all three errors by design. The sequence forces the legal-character determination before any document is circulated, the licensing review before any distribution step, and the AML policy before any transfer.

If an earlier filing, structure, or enforcement attempt produced an adverse or stalled result, a second review can identify the point at which the sequence broke down and the steps still available to correct the position.

For a structured review of your token issuance position – including the licensing chain, the AML policy, and the cross-border investor analysis – write to info@lockhartyip.com.

How should an in-house team use the decision checklist before proceeding?

The checklist below is a self-assessment tool. It does not replace legal advice. It is designed to help an in-house team identify, before engaging external counsel, the points that will need to be addressed and the documents that should be assembled.

Has the legal character of the token been determined in a written legal analysis against the definitions in the Securities and Futures Ordinance and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance?
Has the licensing map been completed – identifying every entity in the issuance and distribution chain that may be carrying on a regulated activity in Hong Kong?
Is the issuer entity correctly incorporated, and does it have the substance required in its operating jurisdiction?
Is the structure – issuer entity, any BVI or Cayman holding layer, any Hong Kong operating entity – finalised and documented?
Has the investor population been defined by jurisdiction, and has the Mainland China boundary been confirmed at the platform and CDD level?
Is there a documented CDD and travel-rule policy, and has it been implemented before the first transfer?
Does the offering document accurately reflect the legal-character determination and the regulatory status of each participant in the chain?
Where a fiat-referenced stablecoin structure is involved, has the HKMA licensing position been separately reviewed?
Has the sanctions position been reviewed for each investor jurisdiction against the applicable legal system – not assumed to be uniform across jurisdictions?

An in-house team that can answer each of these questions with a documented position is ready to proceed to the drafting stage. A team that cannot is at Stage 1 or Stage 2 of the sequence and should not advance further until those gates are cleared.

Our Tech & Web3 practice covers the full sequence from legal-character determination through licensing review, AML policy, and offering-document preparation. For context on the current regulatory environment, our regulatory briefing on Hong Kong's token-issuance regime sets out the latest position. For groups with technology assets being structured across jurisdictions, our note on IP licensing for technology groups expanding into Asia addresses a related structuring question.

Related practices

Sanctions & AML – cross-border AML compliance, travel-rule policy, and source-of-funds analysis for digital-asset transactions
Holding Structures – offshore and Hong Kong holding-entity design for technology and Web3 groups

Frequently asked questions

What does the route look like for a token issuance reviewed under Hong Kong's regime?

A token issuance reviewed under Hong Kong's regime follows five stages: a legal-character determination, a licensing and registration review, entity and structure preparation, AML and travel-rule compliance, and preparation of the offering document. Each stage has a gate that must be cleared before the next opens. The SFC is the licensing authority for securities-type tokens and for VATPs; the HKMA licenses fiat-referenced stablecoin issuers. The sequence cannot be compressed without creating regulatory exposure at the stage that is skipped. Parties should verify the current perimeter of each regime before acting.

Which jurisdiction's law applies to a token issuance reviewed under Hong Kong's regime?

Where a token issuance has a Hong Kong connection – through the issuer entity, a licensed platform, or the targeted investor population – the Securities and Futures Ordinance and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance are the primary governing instruments. Offshore issuer entities in the BVI or Cayman Islands engage those jurisdictions' company law as well. Where investors are drawn from multiple jurisdictions, each investor jurisdiction's own regulatory regime is also engaged. The applicable law is therefore determined by the facts of the specific issuance, not by the issuer's preferred characterisation.

How does the cross-border element affect a token issuance reviewed under Hong Kong's regime?

The cross-border element affects a Hong Kong-reviewed token issuance at multiple points. It determines which investors are eligible, which platforms can be used, which sanctions regimes apply to which parties, and whether any Mainland China boundary issues arise. The SFC's jurisdiction is not confined to Hong Kong-incorporated entities: it extends to any person marketing a regulated product to Hong Kong investors or through a Hong Kong-licensed platform. An issuer with a Cayman entity but a Hong Kong VATP as its primary trading venue must treat Hong Kong regulatory requirements as fully applicable.

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.

How to approach a token issuance reviewed under Hong Kong's regime