Hong Kong VASP Licence in 2026: Approval Rate, Requirements and the Real Operators
Hong Kong’s mandatory VASP licensing regime went live on 1 June 2023, when the SFC replaced the earlier opt-in sandbox with compulsory licensing. By May 2026 that regime has run nearly three years. Early industry optimism aimed at “ten licences in three years”; the real numbers diverge sharply. This piece uses SFC data plus operating observations to map the true state of the Hong Kong VASP licence in 2026 — approval rate, binding requirements and real businesses. For wider context see Hong Kong Crypto Licence Regime Explained.
The Licensee Map: 11 Approved Plus a Few “Deemed Licensed”
By May 2026 the SFC’s public register of licensed virtual-asset trading platforms lists 11 fully approved VASPs:
| Wave | Date | Licensee |
|---|---|---|
| First batch | Aug 2023 | OSL, HashKey Exchange |
| 2024 expansion | Jun – Dec 2024 | HKVAX, Crypto.com (HK), PantherTrade |
| 2025 dense run | Mar – Nov 2025 | Bullish, EX.IO, YAX, ARCHAX HK, Matrixport HK |
| 2026 first | Feb 2026 | DFX Labs |
Alongside the 11 there are about 8 venues in “deemed-licensed” status — a transitional pass for platforms operating before the June 2024 cut-off. They run while completing the application; failing to obtain a full licence by end-2026 means winding down.
Together — around 19 crypto exchanges can actively operate in Hong Kong as of May 2026. Modest against the city’s hub ambitions, but among the highest licensee counts of any Asian city outside Japan.
The Real Approval Rate: 18 Percent, Not 35
The actual VASP approval rate is significantly worse than headline numbers suggest. SFC disclosure at end-2024 counted 47 total applications, 6 approvals, 17 withdrawn or returned, giving an apparent rate near 35 percent. Updating with 2025 data:
- About 60 cumulative applications by April 2026
- 11 full licences granted — roughly 18 percent
- About 25 withdrawn or returned — roughly 42 percent
- About 24 still under review — 40 percent
Withdrawals and returns outnumber approvals by more than two to one — that is where the regime’s real bite lies. Most failures cluster in three areas:
- Capital and liquidity: a 12 percent cash buffer over custodied client assets, which mid-sized venues struggle to fund
- Platform tech and hot-cold wallet architecture: 98 percent cold storage with multi-sig and insurance, a major rebuild
- Fitness of key persons: the responsible officer, compliance head and information security head each need individual SFC approval
The third item is often the silent killer — there have been cases of solid institutions failing simply because they could not find a compliance head who could pass fitness review.
The Six Hard Requirements
Distilling the SFC’s Code of Conduct for VATP operators with real review feedback, the licence sits on six pillars:
| Pillar | Headline requirement |
|---|---|
| Capital | Minimum paid-up capital HK$5m plus a 12 percent cash buffer on client assets |
| Client assets | 98 percent cold storage, multi-sig, independent custody or commercial insurance |
| Listings | Retail-eligible coins must be large-cap, established and traded on two acceptable markets; retail clients must pass a knowledge test |
| AML | On-chain analytics, Travel Rule implementation, suspicious-activity reporting |
| Disclosure | Monthly published proof of reserves, order-book transparency |
| Key persons | Responsible officer, compliance and infosec heads all individually approved |
The most underestimated item is the listing rule. The SFC requires retail-eligible tokens to have traded on at least two developed or acceptable markets in the past twelve months and to have substantial market cap. That tight filter shrinks the retail menu sharply — mostly BTC, ETH, SOL, AVAX, LINK, UNI plus core stablecoins. Licensed Hong Kong exchanges offer roughly 25 to 35 retail-tradable assets on average, against the thousands listed at major global venues.
How the Licensed Venues Actually Make Money: HashKey and OSL
To see what the VASP licence is really worth, HashKey Exchange and OSL are the two headline samples.
HashKey Exchange was in the first batch in 2023, positioned for institutions plus HNW retail. 2025 data: annualised volume near US$35 billion, active accounts close to 350,000, AUC above US$2.5 billion. Dual-engine model — institutional (OTC, custody, API) ~60 percent of revenue, retail ~40 percent. In 2025 it added a spot ETF issuance pipeline, traditional broker connectivity and the HKDR stablecoin.
OSL runs a more purely institutional book — retail is small, focus is OTC, custody and prime brokerage. 2025 financials show over 80 percent revenue from B2B. A controlling-share change in late 2024 brought deeper traditional-finance backers, pushing OSL toward a licensed crypto broker-dealer profile.
Lesson: the real value of the VASP licence is institutional credibility, not retail flow. Retail is capped by listing limits, knowledge tests and the absence of leveraged derivatives. The B2B book is precisely where being licensed is the product — asset managers, family offices and corporate treasuries can only transact with licensees.
HKD Stablecoins and ETF Pipelines: New Growth Engines
The new VASP story in 2026 sits in two adjacent markets — HKD stablecoins and virtual-asset ETFs.
On HKD stablecoins, the HKMA published a draft issuer framework in December 2024 and started accepting applications when final rules took effect in June 2025. Three issuers have in-principle approval by April 2026: the Standard Chartered–Animoca–HKT consortium’s HKDR; JD Technology Hong Kong’s JDHKD; Roundcoin’s HKDC. HKD stablecoins are natively bound to licensed exchanges — issuance flows almost exclusively through Hong Kong VASPs. The market is small but the licensing moat keeps shares steady.
On ETFs, Hong Kong was first in Asia to approve spot BTC and ETH ETFs in April 2024. Total crypto ETF assets are around US$1.8 billion as of May 2026 — small, but the only retail-compliant Asia pipeline running (Singapore still bars retail crypto ETFs, Japan has yet to approve). Licensed venues act as primary-market APs and secondary-market makers — a growing source of stable fees for HashKey and OSL. For Asian context see Strictest Crypto Regulation Globally.
What Happens to the Rejected Applicants
For the 25 withdrawn or returned venues, 2026 narrows to three exits:
- Remediate and reapply — fix capital, rebuild custody, find a new compliance head
- Drop retail, keep institutional OTC — under the lighter Type 9 path
- Pivot jurisdiction — Dubai VARA, Singapore MAS or Panama have become next stops
SFC stance toward unlicensed venues serving Hong Kong retail tightened visibly in 2025, including warning letters to offshore venues marketing to Hong Kong users. The grey-zone window is closing fast.
The Next Phase: From Gatekeeping to Product Power
Pulling these threads together, the role of the Hong Kong VASP licence in 2026 is shifting. The first three years it was the gate — the licence was the scarcity. The next three years it becomes a product — the licence is the entry ticket, and competitive position depends on differentiation in HKD stablecoins, ETF pipelines, institutional custody and cross-border settlement.
That shift means the same thing for licensees, applicants and Hong Kong itself — a licence is no longer the destination, only the starting line. Track ongoing developments via the regulation news roundup.