Licensing Thresholds and Ongoing Compliance for Hong Kong Trust or Company Service Providers

The Hong Kong market for trust and company service providers (TCSPs) is undergoing its most significant regulatory recalibration since the regime’s inception in 2018, driven by the Financial Action Task Force’s (FATF) fourth round mutual evaluation report on Hong Kong published in September 2024. The FATF report, which placed Hong Kong under enhanced follow-up for specific deficiencies in legal persons’ transparency, directly pressures the government to tighten the licensing thresholds for TCSPs and to expand the scope of beneficial ownership registers. Simultaneously, the Companies Registry (CR) has signalled in its 2025-2026 business plan that it will prioritise on-site inspections of TCSPs, moving beyond the current document-based compliance checks. For practitioners, this means the previously low barrier to entry for a TCSP licence under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615) is hardening, while ongoing compliance obligations are shifting from a “tick-box” exercise to a substantive, risk-based regime. The confluence of international pressure, local legislative amendments (including the 2024 amendments to the AMLO), and increased enforcement activity by the CR creates a material compliance gap for existing licence holders and a higher capital requirement for new entrants. This article dissects the precise regulatory thresholds, the operational compliance framework under the new regime, and the practical implications for trust practitioners and family office advisors operating in this jurisdiction.

The Revised Licensing Threshold Under the AMLO

The foundational requirement for any entity acting as a TCSP in Hong Kong is obtaining a licence from the Registrar of Companies under Part 5 of the AMLO. The 2024 amendments to the AMLO, which came into effect on 1 January 2025, introduced two critical changes to the licensing threshold: a mandatory “fit and proper” test for all responsible persons and a minimum paid-up capital requirement of HKD 150,000 for corporate applicants. Previously, the regime only required the TCSP itself to be licensed, with no statutory minimum capital. The shift to a minimum capital floor, explicitly stated in Section 53P of the AMLO (as amended by the Anti-Money Laundering and Counter-Terrorist Financing (Amendment) Ordinance 2024), directly mirrors the approach taken for licensed corporations under the Securities and Futures Ordinance (SFO, Cap. 571). This alignment creates a de facto regulatory parity between trust services and securities dealing, raising the cost of entry for smaller boutique trust companies that previously operated on thin capital bases.

The “Fit and Proper” Criteria for Responsible Persons

The “fit and proper” test, codified in Section 53Q of the AMLO, applies to every director, partner, and ultimate beneficial owner of the applying entity. The CR has published a non-exhaustive list of disqualifying factors, which includes any criminal conviction for money laundering, fraud, or tax evasion within the preceding 10 years; bankruptcy or insolvency proceedings; and any previous revocation of a TCSP licence or a similar licence in another jurisdiction. The test is not merely a background check; the CR will assess the collective competence of the responsible persons to manage a TCSP business. This includes a requirement that at least one responsible person has a minimum of three years’ relevant experience in trust administration, corporate secretarial work, or a related regulated activity. Practitioners should note that the CR has begun cross-referencing its database with the SFC’s register of licensed individuals and the Hong Kong Monetary Authority’s (HKMA) register of authorised institutions, creating a single view of regulatory fitness across the financial services ecosystem.

The Minimum Paid-Up Capital and Professional Indemnity Insurance

The HKD 150,000 minimum paid-up capital is a floor, not a ceiling. The CR has indicated in its 2025 guidance notes that it expects TCSPs handling client assets above HKD 10 million in aggregate to maintain a higher capital base, calculated as 0.5% of total client assets under administration (AUA). This is a significant departure from the previous regime, which had no capital requirement linked to AUA. Additionally, the AMLO now requires every licensed TCSP to maintain professional indemnity insurance (PII) with a minimum coverage of HKD 5 million per claim and HKD 10 million in aggregate per annum. The PII must be issued by an insurer authorised by the Insurance Authority (IA). This requirement, effective from 1 July 2025, is designed to create a layer of consumer protection that previously did not exist for trust and company service clients. For a trust company managing a portfolio of family trusts with assets in Hong Kong, Singapore, and BVI structures, the PII premium has become a material fixed operating cost, typically ranging from HKD 80,000 to HKD 150,000 per annum depending on the AUA.

Ongoing Compliance Obligations Under the Revised Regime

Once licensed, a TCSP faces a structured set of ongoing obligations that go far beyond the initial application. The CR’s 2025-2026 enforcement plan explicitly targets four areas: customer due diligence (CDD), record-keeping, suspicious transaction reporting (STR), and annual return filing. The data from the CR’s 2024 annual report shows that 34% of all on-site inspections resulted in a formal warning letter, and 12% led to a suspension or revocation of the licence. These figures underscore that the regulator is moving from a supervisory to an enforcement posture.

Customer Due Diligence and Beneficial Ownership Transparency

The CDD requirements under Schedule 2 of the AMLO are the most operationally demanding component of the regime. For every client, the TCSP must identify and verify the beneficial owner(s) holding 25% or more of the shares or voting rights of the corporate entity. This is a direct response to the FATF’s finding that Hong Kong’s legal persons’ transparency regime was “partially compliant” in the September 2024 evaluation. The CR has mandated that TCSPs must obtain a certified copy of the client’s passport and a proof of residential address dated within the last three months. For legal persons incorporated in jurisdictions such as BVI, Cayman, or Bermuda, the TCSP must obtain a certificate of incumbency or a register of members from the registered agent in that jurisdiction. The practical challenge is that many BVI and Cayman entities do not maintain a publicly accessible beneficial ownership register; the TCSP must rely on the client’s undertaking, which the CR now considers insufficient without independent verification. The CR’s 2025 guidance states that TCSPs should use a third-party commercial database (such as those operated by Moody’s Orbis or Bureau van Dijk) to cross-reference beneficial ownership information for clients with assets over HKD 5 million.

Record-Keeping and the Seven-Year Retention Rule

The AMLO requires TCSPs to retain all CDD records, transaction records, and correspondence for a period of seven years after the termination of the business relationship. This is consistent with the general anti-money laundering framework under the SFO and the Banking Ordinance (Cap. 155). The CR has clarified that “termination” means the formal cessation of the service relationship, not the date of the last transaction. For a trust that continues in existence but where the TCSP resigns as trustee, the records must be retained for seven years from the date of resignation. This creates a logistical challenge for TCSPs that handle hundreds of corporate structures; the CR expects the records to be stored in a searchable electronic format within Hong Kong. The 2024 amendments also introduced a requirement that the TCSP must maintain a central register of all clients, including the date of CDD completion, the name of the responsible officer who conducted the CDD, and the date of the last review. This register must be produced to the CR within 14 days of a written request, without the need for a court order.

Suspicious Transaction Reporting and the SFC’s Parallel Obligations

The obligation to file an STR with the Joint Financial Intelligence Unit (JFIU) is triggered when a TCSP knows or suspects that any property is proceeds of crime or is related to terrorist financing. The threshold is low: suspicion, not certainty. The SFC’s 2024 thematic review of AML/CFT controls for licensed corporations found that 28% of firms had deficiencies in their STR processes, including failure to escalate internal suspicions to the compliance officer. For TCSPs, the CR has adopted a similar standard. A practical example: if a TCSP is administering a trust for a Hong Kong resident who transfers HKD 5 million from a bank account in a jurisdiction with weak AML controls (such as Vanuatu or the Marshall Islands) without a clear source of wealth, the TCSP must file an STR. The failure to do so is a criminal offence under Section 25A of the Organized and Serious Crimes Ordinance (Cap. 455), carrying a maximum penalty of HKD 5 million and seven years’ imprisonment. The CR has publicly stated that it will prosecute TCSPs that fail to file STRs where the facts indicate a reasonable suspicion existed.

Cross-Border Structuring and Jurisdictional Nuances

Hong Kong TCSPs frequently operate structures that span multiple jurisdictions, including BVI, Cayman, Bermuda, Singapore, and the PRC. Each jurisdiction imposes its own set of compliance obligations that interact with Hong Kong’s regime. The key challenge is the divergence in beneficial ownership disclosure requirements between Hong Kong and the BVI/Cayman, which creates friction for trust structures that rely on nominee shareholders or bearer shares.

The BVI-Cayman-Hong Kong Nexus

A typical family office structure involves a BVI or Cayman holding company, a Hong Kong operating company, and a trust in Hong Kong or Singapore. Under the BVI Business Companies Act (as amended in 2022), BVI companies must maintain a register of beneficial owners at the registered agent’s office in the BVI. However, this register is not publicly accessible. When a Hong Kong TCSP acts as the director or nominee shareholder of a BVI company, the TCSP must comply with both BVI law (which restricts disclosure) and Hong Kong’s AMLO (which requires the TCSP to identify the beneficial owner). The CR has confirmed in its 2025 guidance that the TCSP cannot rely on the BVI’s non-disclosure regime as a justification for failing to identify the beneficial owner for Hong Kong purposes. The TCSP must obtain a written declaration from the client identifying the beneficial owner, and if the client refuses, the TCSP must terminate the business relationship. This has led to a practical trend where Hong Kong TCSPs are increasingly requiring BVI and Cayman clients to provide a certified copy of the beneficial ownership register from the BVI registered agent, even though the BVI agent may charge a fee of USD 500 to USD 1,000 for this service.

The PRC Cross-Border Dimension

For structures involving PRC residents or assets, the TCSP must navigate the PRC’s Foreign Exchange Control Regulations and the Personal Income Tax Law. The PRC’s 2018 amendment to the Individual Income Tax Law introduced a “residence” standard that deems any individual who lives in China for 183 days or more in a tax year to be a tax resident, subject to worldwide taxation. When a Hong Kong TCSP establishes a trust for a PRC tax resident, the TCSP must consider whether the trust is a “controlled foreign corporation” (CFC) under PRC tax rules. The PRC’s CFC rules, effective from 2018, attribute the undistributed income of a foreign entity to its PRC resident shareholders if the foreign entity is located in a jurisdiction with an effective tax rate lower than 12.5%. BVI and Cayman have effective tax rates of 0%, so a BVI company held by a PRC resident through a trust is likely to be a CFC. The Hong Kong TCSP has a duty to inform the client of this tax risk, even if the TCSP itself is not providing tax advice. The CR’s 2025 guidance on TCSP conduct explicitly states that a TCSP must not participate in a structure that is “primarily designed to avoid tax in a jurisdiction where the client is a resident,” citing the SFC’s Code of Conduct for Licensed Persons as a reference standard.

Actionable Takeaways for Practitioners

• Every TCSP must verify that its paid-up capital meets the HKD 150,000 minimum and, if AUA exceeds HKD 10 million, the 0.5% AUA-based capital requirement, with compliance documentation filed with the CR by 31 December 2025.
• The professional indemnity insurance policy must be renewed to a minimum HKD 5 million per claim and HKD 10 million aggregate, issued by an IA-authorised insurer, with the certificate of insurance lodged with the CR by 1 July 2025.
• For any existing client with a BVI, Cayman, or Bermuda structure, the TCSP must obtain a certified beneficial ownership register from the overseas registered agent within 90 days of this guidance, or terminate the relationship.
• The central register of clients must be updated with the date of the last CDD review for every active client, and the register must be capable of production to the CR within 14 days of any request.
• Any transaction involving a client from a high-risk third country (as defined by the FATF) that exceeds HKD 500,000 must trigger an automatic enhanced due diligence (EDD) review, with the results documented in a written report retained for seven years.