A token issuance reviewed under Hong Kong's regime

A token issuance does not become a Hong Kong regulatory matter simply because the issuer is incorporated offshore or the intended buyers are located overseas. The question that determines exposure is whether the tokens are offered to persons in Hong Kong, whether they constitute "securities" or "futures contracts" under Hong Kong law, or whether the platform facilitating the sale requires a licence from the Securities and Futures Commission. Get that analysis wrong before launch, and the issuer faces enforcement, not correction. Our desk advises foreign principals on this classification question before documents are finalised and before any public-facing step is taken.

A token issuance reviewed under Hong Kong's regime requires a structured assessment of whether the tokens fall within the scope of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance's virtual-asset trading platform licensing rules, or within the Securities and Futures Ordinance, before any offer is made – with locally licensed Hong Kong counsel engaged from the outset on the Hong Kong-law determinations.

This service note sets out when a foreign principal needs this review, the route we run, the documents the client must own, and the cross-border interface that shapes the advice.

Why a foreign principal needs a Hong Kong token-issuance review

The trigger is rarely chosen. It arrives when a token launch is already structured, a white paper is in draft, and someone – a bank, an exchange operator, a prospective institutional buyer – asks whether the issuance is compliant with Hong Kong requirements. At that point the issuer has already made the decisions that determine the answer.

Hong Kong's virtual-asset trading platform (VATP) licensing regime, which commenced on 1 June 2023 under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, requires centralised platforms that facilitate trading in virtual assets to hold a licence from the Securities and Futures Commission. A token issuer that routes its offering through an unlicensed platform – or that itself operates features that constitute a trading platform – is exposed. That exposure does not disappear because the issuer is incorporated in the British Virgin Islands or registered in another common-law jurisdiction.

The second trigger is the securities classification. Where a token carries rights to profits, participation, or repayment in a form that resembles a collective investment scheme or a debt instrument, the Securities and Futures Commission may treat it as a "security." Once it is a security, the full suite of prospectus, licensing, and conduct requirements under the Securities and Futures Ordinance applies. Foreign principals consistently underestimate this: the classification is substance-driven, not label-driven. Calling a token a "utility token" does not make it one.

A third trigger is institutional distribution. A token that will be offered to professional investors through a Hong Kong-licenced intermediary, or listed on a VATP operating in Hong Kong, brings the issuer directly within the regulatory perimeter whether or not the issuer is present in Hong Kong itself. We regularly advise on this perimeter question at the term-sheet stage, before any documentation is issued to potential buyers.

What does the regulatory classification actually turn on?

The classification analysis sits at the intersection of two statutory regimes, and the outcome is fact-specific – it cannot be resolved by reading the token's label or the white paper's characterisation of itself.

Under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance, a "virtual asset" is broadly defined, and the VATP licensing regime applies to centralised platforms that operate a business of providing trading services in virtual assets. The issuer of the token is not automatically a VATP. But where the issuer runs a proprietary marketplace, a secondary-trading function, or an order-matching system alongside the issuance, it may itself constitute a platform requiring a licence. Our desk maps the issuer's proposed architecture against the statutory perimeter before any structure is confirmed.

Under the Securities and Futures Ordinance, the question is whether the token is a "collective investment scheme" interest, a share, a debenture, or another specified instrument. The Commission has published guidance on this question; its position is that economic substance governs, and that arrangements designed to replicate the economic features of a regulated product while avoiding its label will be treated as the regulated product. We have seen this applied to token structures that included profit-sharing, governance rights, and redemption features – each of which, individually, might appear innocuous, but in combination produced a classification as a regulated investment.

Where a virtual asset is both a virtual asset within the VATP regime and a security within the Securities and Futures Ordinance, both licensing layers apply. That dual-layer exposure is common in practice. It is also the situation most likely to generate enforcement action if not managed at the outset.

For a fiat-referenced stablecoin issuer, a further layer arises: the Hong Kong Monetary Authority's licensing regime for fiat-referenced stablecoin issuers, which commenced in 2025. Parties active in that space should verify the current commencement date and perimeter before acting, as the detailed rules were subject to ongoing legislative finalisation at the time of this publication.

The route we run, step by step

Our engagement for a token issuance review follows a defined sequence. Each step produces a document or a decision that the client owns and can use with its own board, its banking relationships, and the regulator if required.

The first step is a factual intake. We take a structured brief from the issuer covering the token's economic rights, the proposed distribution method, the proposed platforms, the intended investor base, the jurisdiction of incorporation, and the current state of documentation. This brief drives everything that follows. It is not a questionnaire for its own sake; it is the factual foundation on which the classification analysis rests.

The second step is the classification analysis. We assess whether the token constitutes a virtual asset, a security, a futures contract, or a combination of the above under Hong Kong's applicable instruments. Where the classification engages a Hong Kong-law determination, we bring in locally licensed Hong Kong counsel at this step. The output is a written position paper, structured so that the issuer's board and external banking counsel can read and rely on it.

The third step is the licensing map. Once the classification is confirmed, we map the licensing obligations that follow. If the issuer is itself a VATP or proposes to operate one, we set out the Securities and Futures Commission licensing requirements. If the distribution will run through a licenced platform, we advise on the issuer-side obligations in that relationship. If the token is a security, we advise on prospectus requirements and the exemptions available for offers to professional investors.

The fourth step is the AML and travel rule (the FATF requirement that virtual-asset service providers pass originator and beneficiary information with each transfer) analysis. VATPs are subject to customer due diligence obligations and the travel rule under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. Where the issuer's distribution structure engages these obligations, we prepare the compliance framing. This includes a review of the issuer's proposed know-your-customer procedures and the information-passing mechanics between platforms.

The fifth step is documentation review. We review the white paper, the token sale agreement, any investor representations, and the terms of service for the proposed platform. We mark the provisions that create regulatory exposure and propose revisions. Locally licensed Hong Kong counsel draft or settle any Hong Kong-law provisions in those documents.

The sixth step is the pre-launch sign-off file. This is the complete record of the classification analysis, the licensing map, the AML review, and the document revisions. It is structured for use by the issuer's board, its auditors, and any future regulatory inquiry. We advise on its format at the outset so that it serves the purpose it needs to serve.

Throughout this sequence, we coordinate with the issuer's offshore counsel on the entity structure, the token's terms under the law of the issuer's jurisdiction, and the cross-border distribution mechanics. We do not replicate that work; we run the Hong Kong-facing analysis alongside it.

The sequence above describes the standard position. Your matter turns on the documents, the jurisdictions actually engaged, and the order of steps – which is where the regulatory outcome is determined or missed. To discuss the analysis for your issuance, write to us at info@lockhartyip.com.

How does the cross-border element shape the analysis?

A token issuance is almost always a cross-border transaction. The issuer is incorporated in one jurisdiction, the platform operates in another, the token's technical infrastructure may sit in a third, and the buyers are distributed across multiple markets. Each of those connections raises a distinct regulatory question, and none of them is resolved by the law of the issuer's home jurisdiction alone.

Hong Kong's position in this architecture is determined by one or more of three facts: the platform used is licenced or operating in Hong Kong; the tokens are offered or marketed to persons in Hong Kong; or the token constitutes a security under Hong Kong law and is offered in circumstances that do not fall within a recognised exemption. Any one of these is sufficient. The issuer does not need to be present in Hong Kong; the Securities and Futures Commission's jurisdiction extends to conduct that occurs outside Hong Kong but produces effects within it.

The most common cross-border scenario we encounter is a British Virgin Islands or Cayman Islands issuer with a white paper intended for a global audience, seeking distribution through one or more exchanges that hold a VATP licence or are applying for one in Hong Kong. The exchange's licence conditions will, in practice, require the exchange to satisfy itself that the tokens it lists comply with Hong Kong requirements. That means the issuer's compliance position becomes a condition of the exchange relationship, not merely a legal formality.

A second common scenario is a Mainland China-connected project with a token designed to be distributed outside Mainland China, using a Hong Kong structure as part of the international offering. This raises a distinct set of questions about the Mainland regulatory position alongside the Hong Kong analysis. We advise on the Hong Kong-facing questions and coordinate with Mainland-qualified counsel on the Mainland-facing ones. The two analyses must be run in parallel, because a structure that resolves the Hong Kong question by routing through an offshore entity may simultaneously engage Mainland rules on cross-border capital flows and virtual-asset activities.

The travel rule adds a further cross-border dimension. Where the issuance involves a transfer of virtual assets between platforms or between a platform and a wallet, the originator and beneficiary information must pass with the transfer, regardless of the jurisdictions involved. The mechanics of compliance with this requirement across jurisdictions – where one platform is Hong Kong-licenced and the counterpart is licenced in another jurisdiction – require advance planning. Our desk sees this issue arise regularly in multi-platform distribution arrangements, and we build it into the compliance framing at the documentation stage.

For issuers with a distribution plan that spans Hong Kong, Singapore, the UAE, or European markets, we advise on the Hong Kong component and coordinate with counsel in the other jurisdictions to produce a single, consistent compliance narrative across the offering. Inconsistency between the Hong Kong position paper and the Singapore or UAE analysis is itself a regulatory risk – it suggests that the issuer has not applied a coherent classification standard.

If an earlier structure, white paper, or distribution arrangement has produced an adverse finding or a stalled exchange-listing process, a second review can identify the structural issue and the routes still available. Write to info@lockhartyip.com to arrange that assessment.

The documents and decisions the client must own

A token issuance review produces outputs. Those outputs are not internal to the law firm – they belong to the client and must be structured for use across the issuance's lifecycle.

The classification position paper is the foundational document. It records the factual basis for the classification, the statutory provisions applied, the conclusion reached, and the conditions on which that conclusion depends. If the token's terms change – if profit-sharing provisions are added, if redemption rights are extended, if governance features are introduced – the classification must be re-run. The position paper sets out explicitly what changes would trigger a re-analysis. We write it in a form that the issuer's board can adopt as its authoritative record.

The licensing map is a companion document. It records which licences are required, which licences the issuer currently holds, which licences are to be obtained, and which activities have been structured to fall outside a licensing requirement on a reasoned basis. Where a licensing exemption is relied on, the map records the factual conditions that must be maintained for the exemption to continue to apply.

The AML compliance framework is the third document. It sets out the issuer's customer due diligence approach, the travel-rule mechanics, the record-keeping obligations, and the escalation procedure for suspicious-transaction reporting. Where the distribution runs through a VATP, the issuer's obligations are partly discharged by the platform; the framework records what the issuer relies on the platform to do, and what it retains responsibility for itself.

The document review record is the fourth output. It records every material provision in the white paper, the token sale agreement, and the platform terms that was reviewed, the issue identified, and the revision made or the reason no revision was required. This record is the issuer's evidence of a diligent pre-launch process. It is the document that matters if the Securities and Futures Commission raises a question after launch.

The client owns all of these. We structure them to be accessible to a non-specialist board, usable by the issuer's auditors and banking relationships, and defensible before a regulator. They are not advisory memoranda in the traditional sense – they are operational compliance documents.

Decisions also belong to the client. The classification analysis identifies the question; the issuer's board decides how to respond to it. Where the analysis produces a conclusion that the token is a security, the issuer decides whether to proceed under the securities regime, to restructure the token to move it outside that regime, or to limit distribution to jurisdictions and investor categories where appropriate exemptions are available. We present the options clearly and advise on the implications of each. We do not make the decision for the client, and we do not guarantee a particular regulatory outcome from any given structure.

What foreign principals consistently get wrong

Three errors appear with consistent frequency in cross-border token issuances that come to us at a late stage – typically after a launch has occurred or an exchange-listing process has stalled.

The first error is jurisdiction-shopping without analysis. An issuer incorporated in a low-regulation jurisdiction assumes that its home jurisdiction's tolerance of token issuances shields it from the regulatory requirements of the jurisdictions in which it actually operates or distributes. It does not. Hong Kong's regulatory reach, like that of most mature financial-centre regulators, is determined by the effects of the conduct, not the place of incorporation of the person engaging in it.

The second error is labelling as analysis. A white paper that describes a token as a "utility token" and asserts that it is not a security is not a legal analysis. It is a description that will be tested against the token's actual economic rights. We see this regularly in matters referred to us by issuers whose exchange-listing applications have been rejected or queried. The exchange's legal team has conducted the analysis the issuer should have commissioned before the white paper was issued.

The third error is sequencing. Issuers that engage legal counsel after the white paper is finalised, the token terms are confirmed, and the platform relationships are in place have removed most of the structural options. The compliance review at that point becomes a gap-analysis exercise against a fixed structure, rather than an input to a flexible one. The cost of restructuring after launch – in regulatory terms, in investor-relations terms, and in exchange-relationship terms – is consistently higher than the cost of the analysis before launch.

Our desk works at the planning stage. That is the point at which the analysis adds the most value and the client retains the most options.

Self-assessment: when does this service apply to your issuance?

The following questions indicate whether a Hong Kong token-issuance review applies to your situation. If you answer "yes" to any of them, the review is warranted.

• Are you proposing to distribute tokens to persons in Hong Kong, or through a platform that operates in or holds a licence from the Securities and Futures Commission?
• Does the token carry rights to profits, participation in a project's financial returns, governance votes that affect economic outcomes, or redemption at a stated value?
• Is the token a fiat-referenced stablecoin, or does it have a stable-value mechanism tied to a fiat currency or basket of assets?
• Will the distribution involve a centralised platform that matches buy and sell orders for the token?
• Is a Hong Kong-incorporated entity – whether the issuer itself, an affiliate, or a distribution vehicle – involved in the offer or the proceeds?
• Does your existing documentation include a classification analysis produced by counsel admitted in Hong Kong or instructed specifically on Hong Kong law?
• Is an institutional investor, exchange, or banking relationship in Hong Kong asking for a compliance position before proceeding?

The checklist does not produce a classification answer. That requires the full analysis. But it identifies the pressure points that, in our experience on cross-border issuances, determine whether the Hong Kong regulatory question is live for your matter.

For a structured assessment of your token-issuance position across the relevant jurisdictions, write to us at info@lockhartyip.com.

The interaction with holding structures and cross-border transactions

A token issuance does not sit in isolation. The issuer's corporate structure, the jurisdiction of the treasury entity, the tax position of the proceeds, and the AML obligations that attach to the distribution all interact with one another. A compliance decision made in the token-issuance review can create a consequence in the holding structure. A structure optimised for tax without regard to the AML obligations can produce a compliance gap.

We coordinate the token-issuance review with our Tech & Web3 practice across the full range of related questions. Where the issuance involves a digital-asset fund structure, we engage the analysis developed in our work on digital-asset funds structured through Hong Kong and Singapore. Where the issuer's commercial arrangements include data-sharing or SaaS agreements with cross-border dimensions, we address those alongside the token-issuance work, drawing on our analysis of cross-border SaaS and data agreements touching CIS jurisdictions.

This coordination matters because regulators and exchange operators do not evaluate a token issuance in isolation either. The Securities and Futures Commission, when assessing a VATP licence application or a token-listing submission, looks at the issuer's group structure, the flow of proceeds, and the AML controls at each layer. A well-constructed issuance review anticipates that scrutiny and builds the answer into the compliance file from the start.

Related practices

• Sanctions & AML – cross-border AML compliance, counterparty review, and source-of-funds documentation
• Holding Structures – offshore and Hong Kong holding-entity design for tech and digital-asset groups

Speak with Lockhart & Yip

For a scoped view of your matter, contact info@lockhartyip.com. Discuss your matter →

Related

• Tech Web3
• Digital Asset Fund Structured Through Hong Kong Singapore 3
• Cross Border Saas Or Data Agreement Touching Cis 5

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@lockhartyip.com.