A digital-asset fund structured through Hong Kong and Cyprus

A principal considering a digital-asset fund that spans Hong Kong and Cyprus is not facing one regulatory question. They are facing two licensing regimes, two sets of AML obligations, two corporate governance tracks, and a cross-border enforcement exposure that sits at the intersection of all of them. The commercial pressure usually arrives in a specific form: an institutional investor, a prime-brokerage counterparty, or an existing portfolio demands a regulated wrapper before the next capital raise. That demand is the trigger – and it arrives faster than most structures are ready for.

A digital-asset fund structured through Hong Kong and Cyprus requires a sequenced approach: a Hong Kong entity positioned for virtual-asset licensing under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, a Cyprus investment-fund or licensed-entity layer providing European regulatory recognition, and a documented AML programme that satisfies both regulators before the fund takes a single subscription.

This note sets out the route we run for cross-border principals, where the decisions fall, and what local licensed counsel handle at each stage. It is written for a general counsel, a chief compliance officer, or a principal who has already decided to build – and wants to understand the steps before the first engagement call.

Why Hong Kong and Cyprus – and why the combination creates a structural question

The Hong Kong–Cyprus combination is not arbitrary. Hong Kong is the access point for Greater China capital flows, the HKIAC arbitration seat, and increasingly the licensed gateway for digital-asset trading infrastructure in Asia. Cyprus is a European Union member state with an established fund-registration regime, a treaty network, and a relatively compact regulatory authority. Together, they offer an Asia-facing trading and custody layer alongside a European distribution wrapper.

The structural question is which entity does what. A Hong Kong company operating a centralised virtual-asset trading platform requires licensing from the Securities and Futures Commission under the mandatory regime that commenced on 1 June 2023. Where the digital assets in question are securities or futures contracts, the Securities and Futures Ordinance licensing layer applies in addition. A Cyprus entity running a fund or a regulated investment firm operates under its own transposition of European financial-services directives.

Those two systems do not map neatly onto each other. The definition of a regulated activity, the AML documentation threshold, and the custody-arrangement requirements differ. A structure that satisfies one regulator without considering the other produces a gap – and regulators on both sides are alert to structures where the licensing posture in one jurisdiction is used to avoid or dilute obligations in the other.

In our cross-border practice, we regularly see structures where the Cyprus vehicle is incorporated first, because it is perceived as faster or more familiar to European-based principals, and the Hong Kong licensing position is addressed later. That sequencing tends to generate the most expensive corrections. The AML programme in particular must be designed as a unified document from the outset, because both regulators will look at the consolidated group position when they assess the quality of the compliance function.

What triggers this engagement – and what the risk looks like if it is deferred

Enforcement risk in digital-asset structures arrives through a specific set of channels, and understanding which channel is active for a given client determines the urgency of the structuring work.

The most common trigger is an institutional investor conducting due diligence before committing capital. That investor's legal team will look at the fund's licensing position in each jurisdiction where it operates or solicits. If the Hong Kong entity is operating a trading platform without a licence under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, the due-diligence process stops. The investor cannot document a compliant investment into an unlicensed vehicle. The fund loses the subscription, and the precedent is set for every future capital raise.

A second channel is a banking or custody counterparty. Virtual-asset businesses in Hong Kong are subject to customer due diligence requirements, and banks that service them are, too. A Hong Kong-incorporated entity that has not established its AML programme to the standard set out in the relevant regulators' guidelines will find that banks decline to open or maintain accounts. That forces the operation offshore or into informal settlement channels – neither of which supports institutional-grade fundraising.

A third channel is the Securities and Futures Commission directly. The SFC publishes its supervisory priorities and has signalled sustained attention to unlicensed virtual-asset activity. An entity conducting regulated activities without the required authorisation faces the prospect of an enforcement action, a public statement, and the reputational consequences that follow.

What does this mean for timing? The licensing application process is not short. A principal who defers structuring until a specific counterparty or investor is ready to transact will not have time to correct the position before that window closes. The practical answer is to run the structuring and the licensing process in parallel with the fund's early-stage capital formation – not after it.

The route we run – step by step

The engagement follows a defined sequence. The stages below describe the standard route; the precise order and the documents required in each stage depend on the jurisdictions actually engaged, the fund strategy, and the categories of virtual assets involved.

Stage one: entity and structure mapping. Before any incorporation or application is filed, we map the full structure: which entity will operate the trading platform, which entity will hold the fund assets, which entity will manage the portfolio, and how the two jurisdictions interact. This stage produces a structure diagram and a regulatory-gap analysis. It is also where we identify whether the digital assets in question are likely to be classified as securities or futures contracts in Hong Kong, because that classification determines which licensing regime applies – and in what order.

Stage two: Hong Kong entity and licensing strategy. We advise on the Hong Kong company formation and the licensing posture. The mandatory virtual-asset trading platform regime sits under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, with the Securities and Futures Commission as the licensing authority. Where a securities or futures classification applies, the Securities and Futures Ordinance layer is engaged in addition. We prepare the licensing strategy, the policy documents required for the application, and the framework for the AML programme. Locally licensed Hong Kong firms handle the formal application filings and any advocacy before the SFC – we coordinate and review those submissions.

Stage three: Cyprus entity and fund structure. The Cyprus layer typically involves either a fund registration under the relevant Cypriot collective-investment or alternative-investment regime, or a Cyprus Investment Firm authorisation. We advise on the choice of vehicle, the governance documents, and the cross-border coordination requirements. Allied counsel admitted in Cyprus handle the local regulatory submissions and ongoing compliance work.

Stage four: AML programme and FATF travel-rule compliance. Virtual-asset trading platforms in Hong Kong are subject to customer due diligence obligations and to the FATF travel rule (the requirement that originator and beneficiary information accompanies virtual-asset transfers above specified thresholds). We prepare a unified AML programme that satisfies the Hong Kong regulators' guidelines and is consistent with the Cyprus entity's own AML obligations. This is a document the client must own and operate – we build the framework; the compliance team implements and updates it.

Stage five: subscription documents and investor-facing disclosures. The fund's subscription documents must describe the regulatory status of each entity in the structure accurately. A document that overstates the licensing position of a Hong Kong or Cyprus entity creates a misrepresentation risk. We review the private placement memorandum and the subscription agreement for accuracy on the regulatory and AML points, and we advise on the risk-factor disclosures that are appropriate for a cross-border digital-asset structure.

Stage six: ongoing governance and regulatory monitoring. Licensing is not a one-time event. Both the Hong Kong and Cyprus regulatory positions require ongoing compliance reporting, periodic AML reviews, and management of any changes in the fund's strategy or the composition of its digital-asset portfolio. We advise on the governance framework that supports ongoing compliance, and we coordinate with locally licensed counsel in each jurisdiction on reporting obligations.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the route is won or lost. To discuss how this sequence applies to your structure, write to us at info@lockhartyip.com.

The cross-border interface: what Hong Kong and Cyprus regulate differently

The most consequential difference between the two systems is the legal classification of digital assets. Hong Kong uses a functional test: an asset is regulated as a security or futures contract if it meets the relevant definition under the Securities and Futures Ordinance, regardless of how the issuer or the fund describes it. Cyprus, as an EU member state, applies the relevant European financial-instruments classification framework. The two tests are not identical, and an asset that falls outside regulated status in Cyprus may be a regulated instrument in Hong Kong – or vice versa.

That classification gap matters for two reasons. First, it determines which licensing regime applies to each entity in the structure. Second, it affects the investor-facing disclosure: a fund that describes an asset as unregulated in its Cyprus-facing documentation may be mischaracterising its regulatory position from a Hong Kong perspective, or from the perspective of the underlying investor's home jurisdiction.

AML obligations diverge in a second, equally significant way. The FATF travel rule applies in both jurisdictions, but the threshold and the implementation mechanics differ. Hong Kong's application of the travel rule to virtual-asset transfers follows the Securities and Futures Commission and HKMA guidance. Cyprus applies the relevant European-level transposition. A unified AML programme must be calibrated to the stricter threshold in practice – and must document why that calibration is appropriate.

Custody and safekeeping arrangements present a third divergence. Hong Kong's licensing regime for virtual-asset trading platforms includes specific requirements on client-asset segregation and custody. Cyprus-regulated entities have their own segregation requirements under the applicable European directives. Where the fund uses a single custodian for both layers of the structure, the custody arrangement must satisfy both sets of requirements simultaneously. In practice, this means the custody agreement is negotiated against a dual standard – and that negotiation is where structuring errors are most likely to be introduced.

How does enforcement risk flow across the two systems? An adverse regulatory action in one jurisdiction will typically be considered by the regulator in the other. The Securities and Futures Commission and EU financial-services regulators exchange information through established channels. A public enforcement statement in Hong Kong creates a reputational and regulatory consequence in Cyprus, and vice versa. The cross-border risk is not hypothetical – it is the reason a unified compliance posture is essential from the outset, rather than two parallel programmes that are never reconciled.

For a related perspective on structuring digital assets across comparable cross-border configurations, our analysis of a digital-asset fund structured through Hong Kong and Singapore addresses the parallel interface in the Singapore regulatory environment. The SaaS and data-agreement issues that arise in offshore structures are addressed in our note on cross-border SaaS or data agreements touching BVI.

The documents and decisions the client must own

A digital-asset fund structure is only as strong as the documents that sit underneath it. There is a category of decisions that counsel can advise on and prepare – but that the client must own and execute. This distinction matters because a regulator conducting a supervisory review will ask who made each decision and how it was documented. "Counsel decided" is not a compliant answer.

The client must own the AML programme. Counsel builds the framework, but the compliance officer or money-laundering reporting officer signs the programme, updates it when the regulatory position changes, and is accountable for its implementation. In a Hong Kong-licensed entity, that officer is a named individual who has been assessed as fit and proper. If that individual changes, the regulator must be notified. The AML programme is not a document that can be filed and forgotten.

The client must own the investment mandate and the asset-classification position. The fund's investment policy sets out the categories of digital assets in which the fund will invest. That document determines the licensing regime that applies. If the mandate expands to include a new asset class, the licensing and AML position must be re-assessed before the first investment in that class is made. Counsel can advise on the re-assessment, but the decision to expand the mandate – and the timing of that decision – belongs to the fund's board or governing body.

The client must own the source-of-funds and investor onboarding documentation. Every subscription must be supported by documentation that satisfies the AML requirements of both the Hong Kong and Cyprus entities. That documentation is held by the fund, reviewed by the fund's compliance function, and must be available to each regulator on request. A subscription accepted without adequate source-of-funds documentation is an AML breach, regardless of whether the investor is known to the principal personally.

The client must own the governance record. Board minutes, investment committee records, compliance-review reports, and regulatory correspondence must be maintained in a form that demonstrates the fund's governance is active and effective. A regulator assessing a licensing application or conducting a supervisory review will look at the governance record as evidence that the compliance programme is real, not theoretical.

If a previous filing, structure, or compliance attempt produced an adverse or stalled result, a second review can identify the strategic error and the routes still open. Write to us at info@lockhartyip.com to discuss the position.

Common errors in cross-border digital-asset fund structures – and what foreign principals get wrong

The most frequent error we see is treating the Hong Kong licensing process as an administrative step to be completed after the fund is operational. The mandatory virtual-asset trading platform regime under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance applies from the point at which the platform commences operations. An entity that begins accepting subscriptions or executing trades before its licensing position is resolved is already non-compliant. The correction – suspending operations, restructuring the entity, and reapplying – is materially more expensive than a properly sequenced initial structure.

A second error is treating the Cyprus entity as a passive holding vehicle rather than a regulated entity in its own right. Cyprus-regulated collective-investment schemes and investment firms have their own governance, reporting, and AML obligations. A structure that places all the compliance resource in the Hong Kong entity and treats the Cyprus vehicle as an administrative convenience will fail the Cyprus regulatory review.

A third error involves the selection of the AML officer. In cross-border structures, principals sometimes appoint an AML officer who is qualified in one jurisdiction but not in the other – or who does not have the operational authority to implement the programme across both entities. Both regulators will assess the competence and authority of the named compliance officer as part of their review. An officer who is technically qualified but operationally constrained – for example, because they report to a principal who controls deal flow – is not an independent compliance function.

A fourth error is failing to document the asset-classification analysis. A fund that invests in assets that may be securities under Hong Kong law but does not document why it has concluded they are not – or why a particular licensing exemption applies – has no defence if the regulator disagrees. The documentation of the classification analysis is the work that demonstrates the decision was made properly, at the right time, by the right people.

What do European-based principals, in particular, get wrong? They often assume that a Cyprus regulatory authorisation provides a measure of equivalence or recognition in Hong Kong. It does not. The Securities and Futures Commission and the Anti-Money Laundering and Counter-Terrorist Financing Ordinance regime apply to activity conducted in or from Hong Kong, regardless of the entity's European regulatory status. Each jurisdiction assesses the fund's compliance position independently.

How this practice connects to AML, tax, and holding-structure considerations

A digital-asset fund structure does not sit in isolation. The licensing and AML work at the core of this engagement connects directly to three other practice areas, and the sequencing of the broader structure depends on addressing those connections before they become problems.

The first connection is to AML and sanctions compliance. Hong Kong implements United Nations sanctions and does not give domestic effect to unilateral measures of other states. A fund that accepts subscriptions from investors in jurisdictions subject to UN sanctions has a clear obligation. A fund that operates in markets where counterparty sanctions status is contested – a common situation for digital-asset funds with broad geographic mandates – needs a documented risk-based approach that is updated as the sanctions position changes. That work sits within the AML programme, but it requires a level of counterparty analysis that goes beyond standard onboarding due diligence.

The second connection is to tax positions. The Hong Kong territorial tax system – profits tax at 8.25% on the first HK$2,000,000 of assessable profits and 16.5% above that threshold, with no capital gains tax and no withholding tax on dividends – is commercially relevant to a digital-asset fund structure. The foreign-sourced income exemption regime, in force from 1 January 2023, introduces economic-substance conditions on certain categories of income. Whether the fund's income falls within or outside that regime depends on the nature of the assets and the activities conducted in Hong Kong. For groups with consolidated revenue meeting the Pillar Two threshold, the minimum top-up tax and income-inclusion rule that took effect for fiscal years beginning on or after 1 January 2025 also requires assessment.

The third connection is to the holding structure above the fund. Many digital-asset funds are held through a BVI or Cayman holding entity, with the Hong Kong and Cyprus operating entities sitting below. The economic-substance requirements that apply in both the BVI and the Cayman Islands affect the viability of that arrangement. A holding entity that has no real presence and no decision-making activity in its jurisdiction of incorporation may not satisfy those requirements – and that failure can affect the tax and regulatory position of the entire structure. Our broader work on holding structures is set out at our Tech & Web3 practice page.

What the first engagement step looks like

Principals who contact us on this topic are typically at one of three points: they are designing the structure from scratch, they have an existing structure that has encountered a regulatory or investor-due-diligence problem, or they are completing a transaction and need a rapid read on whether the current structure supports the closing conditions.

In each case, the first step is a structured review of the existing documents and the regulatory position in both jurisdictions. That review produces a written assessment of the licensing position, the AML gaps, and the sequence of steps required to resolve them. It is not a commercial pitch – it is a diagnostic, and it gives the client a clear picture of where the work sits before any retainer is agreed.

We work alongside locally licensed Hong Kong firms on matters that require Hong Kong law advice or SFC filings. We coordinate with allied counsel admitted in Cyprus on the Cypriot regulatory and corporate work. The cross-border coordination – the unified AML programme, the structure mapping, the review of the subscription documents – is our role.

The structure will not improve by waiting. A principal who is aware of a licensing gap, an AML programme that has not been updated to reflect the current regulatory position, or an investor due-diligence file that is incomplete is accumulating regulatory and enforcement risk with each day the fund operates.

To map the options for your digital-asset fund structure through Hong Kong and Cyprus, reach us at info@lockhartyip.com.

Related practices

• Sanctions & AML – AML programme design, counterparty due diligence, and sanctions-neutral contracting for cross-border structures
• Holding Structures – cross-border holding and offshore vehicle structuring above Hong Kong operating entities

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Tech Web3
• Cross Border Saas Or Data Agreement Touching Bvi 2
• Digital Asset Fund Structured Through Hong Kong Singapore 4

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.