How Web3 Startups Can Enter Hong Kong Incubators: Virtual Asset Policy Update

Hong Kong’s Securities and Futures Commission (SFC) published its updated “Guidelines for the Regulation of Virtual Asset Trading Platforms” on 17 February 2025, bringing all centralised virtual asset trading platforms (VATPs) under a mandatory licensing regime effective 1 June 2025. This regulatory shift creates a defined on-ramp for Web3 startups: to access Hong Kong’s incubator ecosystem—including Cyberport, the Hong Kong Science and Technology Parks Corporation (HKSTP), and the Hong Kong Monetary Authority’s (HKMA) Fintech Supervisory Sandbox—a startup must now demonstrate compliance with the SFC’s anti-money laundering (AML) and counter-terrorist financing (CTF) requirements under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). The HKMA’s 2024 circular on “Regulatory Treatment of Tokenised Securities” further mandates that any tokenised asset issued by a Hong Kong-licensed entity must adhere to the Securities and Futures Ordinance (Cap. 571) Chapter 571, Section 103. For a seed-stage Web3 founder, the path to incubation funding is no longer purely technical—it is a regulatory compliance exercise that begins at incorporation.

The Licensing Gateway: SFC Type 1 and Type 7 Licenses as Incubator Entry Criteria

Mandatory Licensing Under the 2025 VATP Regime

The SFC’s updated guidelines, effective 1 June 2025, require any VATP operating in Hong Kong to hold a Type 1 (dealing in securities) and Type 7 (providing automated trading services) license under the Securities and Futures Ordinance (Cap. 571). This replaces the previous voluntary opt-in regime. As of Q1 2025, only 4 platforms—OSL Digital Securities Limited, HashKey Exchange Limited, YAX (Hong Kong) Limited, and PantherTrade (Hong Kong) Limited—hold both licenses, according to the SFC’s public register. For a Web3 startup seeking incubation at Cyberport’s Web3 Hub (which houses over 200 blockchain-related companies as of December 2024), the first requirement is to demonstrate a clear licensing pathway. Cyberport’s 2024-2025 incubation programme application guidelines explicitly state that applicants must submit a “regulatory compliance roadmap” signed off by a licensed sponsor or legal counsel.

The 12-Month Compliance Timeline

The SFC mandates a 12-month transitional period for existing unlicensed platforms to apply, but for new startups, the clock starts at incorporation. The HKMA’s 2023 “Guidelines on Authorisation of Virtual Asset Activities” require that any startup handling client assets must maintain a minimum paid-up capital of HKD 5 million (for Type 1) and HKD 10 million (for Type 7). These capital requirements are a direct filter for incubators: HKSTP’s Incu-Tech programme, which provides up to HKD 1.29 million in funding over 36 months, requires applicants to demonstrate they can meet the SFC’s capital adequacy rules under the Securities and Futures (Financial Resources) Rules (Cap. 571N). A startup that cannot show HKD 15 million in committed capital—either from angel investors or a matched funding round—will not pass the incubator’s due diligence stage.

The Sponsor Requirement

Under the SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC (Chapter 9), every VATP applicant must appoint a licensed sponsor—typically an investment bank or a specialist law firm—to prepare the application. The SFC’s 2024 “Consultation Paper on the Proposed Regulatory Framework for Virtual Asset Trading Platforms” noted that the average sponsor fee for a VATP application was HKD 8-12 million, with a processing time of 8-14 months. For a seed-stage startup, this cost is prohibitive unless the incubator provides a subsidy. Cyberport’s “Web3.0 Accelerator Programme” launched in January 2025 offers a HKD 500,000 grant specifically for regulatory compliance costs, but it is capped at 20 startups per cohort. This creates a bottleneck: only those with a pre-approved sponsor relationship—often brokered through the incubator’s corporate partners, including HSBC and Standard Chartered—can access the funding.

Tokenisation and Asset Structure: Complying with HKMA Circulars

The Tokenised Securities Framework

The HKMA’s circular of 20 November 2024, “Regulatory Treatment of Tokenised Securities,” clarifies that any tokenised security issued in Hong Kong must be treated as a “security” under the Securities and Futures Ordinance (Cap. 571) if it confers ownership rights or profit participation. This directly impacts Web3 startups issuing utility tokens or security tokens through incubator programmes. For example, a startup building a tokenised real estate platform must ensure that each token represents a fractional interest in a Special Purpose Vehicle (SPV) incorporated in Hong Kong or a BVI company, and that the token’s offering complies with the Companies (Winding Up and Miscellaneous Provisions) Ordinance (Cap. 32) for prospectus requirements. The HKMA mandates that any tokenised asset with a face value exceeding HKD 1 million must be registered with the SFC’s prospectus registry.

Stablecoin and Payment Token Compliance

The HKMA’s “Stablecoin Bill” (introduced to the Legislative Council in December 2024) requires any stablecoin issuer operating in Hong Kong to hold a licence from the HKMA, with a minimum capital requirement of HKD 25 million and a reserve asset ratio of 100% in HKD or USD-denominated government bonds. For a Web3 startup seeking incubation at HKSTP’s Fintech Incubation Programme, the stablecoin licence is a prerequisite for any project involving payment tokens. The HKMA’s 2024 “Sandbox for Stablecoin Issuers” reported that only 3 startups—Circle, Paxos, and a local entity named “Digital Hong Kong Limited”—had been admitted as of December 2024. The sandbox requires participants to submit monthly reserve attestations from a Big Four auditor (PwC, Deloitte, EY, or KPMG), a cost that typically runs HKD 200,000-400,000 per year for a startup.

Cross-Border Token Listing on HKEX

For Web3 startups that progress beyond incubation to a potential listing on the Hong Kong Stock Exchange (HKEX), the HKEX’s “Guidance Letter on the Listing of Virtual Asset-Related Companies” (GL94-24, published 15 August 2024) requires that any tokenised asset listed on the Main Board must be fully fungible with a traditional security. This means the startup must demonstrate that its token can be settled through the Central Clearing and Settlement System (CCASS) operated by HKSCC. As of Q1 2025, no pure Web3 startup has completed a Main Board listing; the closest precedent is BC Technology Group (stock code: 0863), which listed its OSL platform via a reverse takeover in 2021. The HKEX’s listing fee for a Main Board applicant is HKD 150,000, plus an annual listing fee of HKD 145,000, but the sponsor costs for a Web3-specific IPO are estimated at HKD 50-80 million by the Hong Kong Investment Funds Association.

Incubator Selection Criteria: Cyberport, HKSTP, and the HKMA Sandbox

Cyberport’s Web3 Hub: The Compliance-First Approach

Cyberport’s Web3 Hub, launched in January 2023, has admitted 210 startups as of December 2024, according to its annual report. The incubator’s “Web3.0 Accelerator Programme” requires applicants to submit a “Regulatory Compliance Assessment” prepared by a licensed law firm, covering the SFC’s AML/CTF requirements under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and the HKMA’s guidelines on virtual asset custody. The programme provides up to HKD 500,000 in grant funding, but 80% of this is disbursed only after the startup has obtained a “no-action letter” from the SFC confirming its licensing pathway. Cyberport’s acceptance rate for Web3 startups in 2024 was 18%, down from 32% in 2023, reflecting the increased regulatory scrutiny.

HKSTP’s Incu-Tech Programme: The Capital Adequacy Filter

HKSTP’s Incu-Tech programme, which has supported over 1,200 startups since 2002, launched a dedicated “Fintech and Web3 Track” in April 2024. The track requires applicants to demonstrate a minimum of HKD 5 million in committed funding from a licensed venture capital firm (registered with the SFC under the Securities and Futures Ordinance, Cap. 571, Section 114). As of Q1 2025, only 12 startups had been admitted to this track, with an average funding round of HKD 8.3 million. The programme’s key requirement is a “tokenomics audit” conducted by an SFC-licensed auditor, costing between HKD 150,000 and HKD 300,000. HKSTP’s acceptance rate for this track is 9%, according to its 2024-2025 annual report.

The HKMA Fintech Supervisory Sandbox (FSS)

The HKMA’s FSS, established in 2016, admitted 8 Web3 projects in 2024, up from 3 in 2023. The sandbox allows startups to test tokenised payment and stablecoin solutions without a full licence, but the HKMA requires a “sponsor bank” (a licensed bank under the Banking Ordinance, Cap. 155) to oversee the testing. As of December 2024, only 4 banks—HSBC, Standard Chartered, Bank of China (Hong Kong), and DBS Bank (Hong Kong)—had been approved as sponsor banks for FSS Web3 projects. The sandbox’s maximum testing period is 12 months, after which the startup must either apply for a full HKMA licence or exit the market. The HKMA’s 2024 “Annual Report on the FSS” noted that 2 of the 8 Web3 projects had transitioned to full licences, both in the stablecoin space.

Practical Compliance Steps for Seed-Stage Web3 Founders

Step 1: Incorporate in Hong Kong with a BVI or Cayman Parent

The SFC’s licensing requirements apply to the Hong Kong operating entity, but the ultimate parent company—typically incorporated in the BVI or Cayman Islands for tax efficiency—must also be disclosed in the application. The SFC’s “Fit and Proper Criteria” under the Securities and Futures Ordinance (Cap. 571) Section 129 require that all directors and substantial shareholders (holding 10% or more) pass a “fit and proper” test. For a seed-stage founder, this means submitting a personal declaration of assets, a police clearance certificate from the Hong Kong Police Force, and a credit report from the Hong Kong Monetary Authority’s Commercial Credit Reference Agency. The cost for these checks is approximately HKD 5,000 per director.

Step 2: Engage a Licensed Sponsor Before Applying to an Incubator

Cyberport and HKSTP both require a sponsor letter as part of the application. The sponsor must be a Type 1 or Type 7 licensee under the SFC. As of Q1 2025, only 14 firms are licensed to act as sponsors for VATP applications, according to the SFC’s public register. The average engagement fee for a seed-stage startup is HKD 2-3 million, but Cyberport’s grant can cover up to 25% of this. Founders should approach sponsors early—ideally 6 months before the incubator application deadline—as the sponsor’s due diligence process takes 3-4 months.

Step 3: Prepare a Tokenomics Audit and AML/CTF Manual

The SFC requires that every VATP applicant submit a “Tokenomics Audit” covering the token’s issuance mechanism, distribution schedule, and lock-up periods. This audit must be conducted by a firm registered with the Hong Kong Institute of Certified Public Accountants (HKICPA) and must comply with the SFC’s “Guidelines on the Assessment of Tokenomics for Virtual Asset Trading Platforms” (published 30 November 2024). The audit costs between HKD 150,000 and HKD 300,000. Separately, the AML/CTF manual must comply with the HKMA’s “Guidelines on Anti-Money Laundering and Counter-Terrorist Financing for Virtual Asset Activities” (updated 1 January 2025), which require transaction monitoring for all trades exceeding HKD 8,000.

Step 4: Secure a Banking Relationship

The HKMA’s circular of 15 March 2024, “Banking Services for Virtual Asset Firms,” requires that any VATP maintain a settlement account with a licensed bank in Hong Kong. As of Q1 2025, only 6 banks—HSBC, Standard Chartered, Bank of China (Hong Kong), DBS Bank (Hong Kong), Citibank (Hong Kong), and Industrial and Commercial Bank of China (Asia)—have publicly stated they accept VATP clients. The minimum deposit for a corporate account is typically HKD 1 million, and the account opening process takes 4-6 months. Cyberport’s incubation programme offers a “banking referral” service that reduces this to 2 months, but only for startups that have already obtained a “no-action letter” from the SFC.

Actionable Takeaways

1. Incorporate your Hong Kong entity with a BVI or Cayman parent structure before applying to Cyberport or HKSTP, as the SFC’s fit and proper test requires disclosure of all ultimate beneficial owners under the Companies Ordinance (Cap. 622) Section 653.

2. Engage a licensed sponsor (Type 1 or Type 7) at least 6 months before your incubator application deadline, as the sponsor’s due diligence process takes 3-4 months and costs HKD 2-3 million, partially subsidised by Cyberport’s HKD 500,000 grant.

3. Prepare a tokenomics audit and AML/CTF manual costing HKD 150,000-300,000, compliant with the SFC’s 30 November 2024 guidelines and the HKMA’s 1 January 2025 AML/CTF update, respectively.

4. Secure a banking relationship with one of the 6 banks accepting VATP clients—HSBC, Standard Chartered, Bank of China (Hong Kong), DBS Bank (Hong Kong), Citibank (Hong Kong), or ICBC (Asia)—requiring a minimum HKD 1 million deposit and a 4-6 month account opening process.

5. Target the HKMA’s Fintech Supervisory Sandbox for stablecoin testing, but only if you have a sponsor bank relationship, as the sandbox’s 12-month testing period requires a licensed bank to oversee operations.