Hong Kong AML/CFT Framework — A Reference Guide

Hong Kong's anti-money-laundering (AML) and counter-terrorist-financing (CFT) regime is multi-regulator: there is no single AML authority. Each financial and non-financial sector has its own supervisor, all operating under a common statutory backbone — the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615) together with the proceeds-of-crime and UN-sanctions ordinances. A single Financial Intelligence Unit sits across all sectors and receives suspicious transaction reports.

This guide outlines the supervisory bodies, the history of the framework, the current obligations, and the way Hong Kong's binding sanctions duties are structured.

The supervisory bodies

History — timeline

The Hong Kong regime developed offence-first and then obligation-first: the early ordinances created the money-laundering offence and the reporting duty, and the AMLO later added the preventive duties of customer due diligence, record-keeping and licensing. More recent amendments have progressively extended AML supervision across the virtual-asset value chain.

Current framework and core obligations

Customer due diligence (CDD) and enhanced due diligence (EDD). Schedule 2 to the AMLO sets out the statutory CDD and record-keeping requirements binding on all regulated sectors: identify and verify the customer and any beneficial owner, understand the purpose of the relationship, and conduct ongoing monitoring. The default threshold for identifying a corporate beneficial owner is ownership or control of 10% or more of shares or voting rights, or ultimate control. Enhanced due diligence is mandatory in higher-risk situations — notably politically exposed persons (PEPs), correspondent banking, non-face-to-face onboarding, and high-risk jurisdictions. The HKMA Guideline on AML/CFT (For Authorized Institutions), revised May 2023 to align with the AMLO changes in force 1 June 2023, is the operative rulebook for banks; it covers the risk-based approach, AML/CFT systems, CDD, ongoing monitoring, a dedicated chapter on terrorist financing, financial sanctions and proliferation financing, and STRs. The SFC issues a parallel guideline for its licensees and VASPs.

Suspicious Transaction Reports (STRs). A person who knows or suspects that any property represents the proceeds of an indictable offence (OSCO Cap. 455 / DTROP Cap. 405) or is terrorist property (UNATMO Cap. 575) must report to an authorised officer — in practice the JFIU. Failure to report is itself an offence; reporting provides a statutory defence to the offences of dealing with criminal property.

Beneficial ownership — Significant Controllers Register (SCR). Since 1 March 2018, Hong Kong-incorporated companies (other than listed companies) must identify their significant controllers and keep an SCR available for inspection by law enforcement. This is the structural transparency layer behind CDD.

VASP regime. Since 1 June 2023, operating a virtual-asset trading platform in, or actively marketing to, Hong Kong requires an SFC licence; licensed VASPs are subject to the full AMLO Schedule 2 CDD and STR obligations and the SFC AML guideline.

Penalties. Breach of the AMLO CDD and record-keeping requirements, and operating a regulated activity (MSO/VASP/TCSP) without the required licence or registration, carry criminal liability (fines and imprisonment). Supervisors (HKMA, SFC, C&ED) can also impose disciplinary or pecuniary penalties.

Sanctions-screening obligations

Hong Kong's binding financial-sanctions obligations flow from two UN-implementing statutes, not from any Hong Kong autonomous or unilateral sanctions list.

Across both regimes, regulated persons must screen customers against new designations as soon as practicable when lists are updated, and must report any match or dealing with a designated person to the JFIU.

As a matter of Hong Kong law, the regime implements United Nations Security Council sanctions only; it does not incorporate the autonomous or unilateral sanctions lists of other jurisdictions. In practice, many Hong Kong-based institutions with US-dollar clearing, international correspondent relationships, or global parent groups also screen against additional sanctions lists to manage their own commercial exposure, though Hong Kong law does not require this.

Recent and upcoming developments

• VASP regime (2023 onward). SFC VASP licensing went live on 1 June 2023, with a transitional/deeming window that allowed pre-existing platforms to continue operating while applying for a licence.
• DPMS regime (2023). Two-tier C&ED registration began on 1 April 2023, with a transition period for pre-existing dealers. Category B registration applies to cash transactions of HK$120,000 or more.
• Stablecoins Ordinance (2025). Passed 21 May 2025 and in force 1 August 2025, this established HKMA licensing for fiat-referenced stablecoin issuers, with a minimum paid-up capital of HK$25 million and a dedicated HKMA AML/CFT guideline for licensed stablecoin issuers.
• Virtual-asset perimeter. Hong Kong has continued to extend AML supervision across the virtual-asset value chain — from trading platforms to stablecoin issuers — with further legislative work on services such as over-the-counter virtual-asset dealing and custody under consideration. Current status is best confirmed against FSTB, SFC and HKMA primary releases.

Sources & primary authorities

Primary and official sources are listed first.

Legislation (Hong Kong e-Legislation):

• Cap. 615 Anti-Money Laundering and Counter-Terrorist Financing Ordinance — https://www.elegislation.gov.hk/hk/cap615
• Cap. 537 United Nations Sanctions Ordinance — https://www.elegislation.gov.hk/hk/cap537
• Cap. 575 United Nations (Anti-Terrorism Measures) Ordinance — https://www.elegislation.gov.hk/hk/cap575
• Cap. 455 Organized and Serious Crimes Ordinance — https://www.elegislation.gov.hk/hk/cap455
• Cap. 405 Drug Trafficking (Recovery of Proceeds) Ordinance — https://www.elegislation.gov.hk/hk/cap405

Regulators and government:

• HKMA, Ordinances & Statutory Guidelines (AML/CFT) — https://www.hkma.gov.hk/eng/key-functions/banking/anti-money-laundering-and-counter-financing-of-terrorism/ordinances-statutory-guidelines/
• HKMA Banking Regulatory Document Repository, AML/CFT Guideline (For Authorized Institutions), revised May 2023 — https://brdr.hkma.gov.hk/eng/doc-ldg/docId/20230525-2-EN
• HKMA, Regulatory Regime for Stablecoin Issuers — https://www.hkma.gov.hk/eng/key-functions/international-financial-centre/stablecoin-issuers/
• HKMA press release, Implementation of regulatory regime for stablecoin issuers (29 July 2025) — https://www.hkma.gov.hk/eng/news-and-media/press-releases/2025/07/20250729-4/
• C&ED, Supervision of Dealers in Precious Metals and Stones — https://www.customs.gov.hk/en/service-enforcement-information/anti-money-laundering/supervision-of-dealers-in-precious-metals-and-ston/index.html
• C&ED, DPMS Registration Regime FAQ — https://www.customs.gov.hk/en/faqs/dealers-in-precious-metals-and-stones/
• FSTB, United Nations Security Council Sanctions — https://www.fstb.gov.hk/fsb/aml/en/un-sanctions/un-sanctions.htm
• CEDB, United Nations Security Council Sanctions — https://www.cedb.gov.hk/en/policies/united-nations-security-council-sanctions.html
• SFC — https://www.sfc.hk/

Professional commentary (corroboration):

• Law Society of Hong Kong, Targeted Financial Sanctions — https://www.hklawsoc.org.hk/en/Support-Members/Professional-Support/AML/Targeted-Financial-Sanctions
• Morgan Lewis, Hong Kong's Stablecoins Ordinance to Take Effect August 1 — https://www.morganlewis.com/pubs/2025/06/hong-kongs-stablecoins-ordinance-to-take-effect-august-1-an-overview-of-the-regulatory-framework

---

This guide provides general information only and is not legal advice. It is current as of 2026-06-20.