ComplianceOne Newsletter – June 2026
The topics discussed in this monthly newsletter are as follows:
Market News
EX.IO Receives Approval from the SFC for Two New VA Businesses
SFC urges licensed firms to guard against emerging AI-enabled cyber threats
Enforcement News
Movie producer Wong Pak Ming sentenced to jail and fined in SFC's insider dealing prosecution
SFC reprimands and fines XHK Limited HKD 2.5 million for regulatory breaches
Regulatory Updates
Markets News
1. Hong Kong to launch Five-Year China Government Bond Futures
The Securities and Future Commission (“SFC”) has announced that Hong Kong is targeting August 3, 2026, debut five-year China Government Bond (“CGB”) Futures on the Hong Kong Exchanges and Clearing Limited (“HKEX”).
This launch is driven by strong global demand following a massive influx of foreign capital into the onshore market. International investor holdings in CGBs are approaching approximately RMB 2 trillion by May 2026 via Bond Connect. The new contracts will provide a crucial offshore derivative tool to hedge mainland interest rate risk directly from Hong Kong.
As Dr Kelvin WONG, SFC’s Chairman, said: “The launch of CGB futures is an important initiative for Hong Kong in aligning its financial sector with the nation’s 15th Five-Year Plan and further deepening mutual access between Hong Kong and the Mainland financial markets. Its introduction is also a milestone in Hong Kong’s efforts to support the internationalization of RMB and develop into a global fixed income and currency hub”.
As Ms Julia LEUNG, SFC’s Chief Executive Officer, said: “The launch comes at a time when asset managers’ demand for RMB-denominated fixed income assets has increased as part of their diversification strategy. It also shines a light on the critical role Hong Kong plays as a regional fixed income and offshore RMB hub”.
SIGNIFICANCE:
Asset managers, institutional investors and other market participants investing in CGBs should consider how the availability of CGB futures may enhance portfolio risk management capabilities. The new product offers a regulated mechanism for hedging interest rate exposure without requiring investors to access onshore derivatives markets, potentially improving portfolio efficiency and supporting increased participation in China's bond market. Additionally, the initiative supports the continued internationalisation of the Renminbi while further strengthening Hong Kong’s position as a leading global centre for fixed income and RMB financial services.
2. EX.IO Receives Approval from the SFC for Two New VA Businesses
On 12 June 2026, EX.IO has secured SFC approval to conduct two categories of business that no other licensed virtual asset trading platform in Hong Kong has previously been permitted to offer (EX.IO’s licensing conditions):
the distribution of traditional investment products and tokenised securities to investors, and;
the provision of custody services for tokenised securities that are not traded on EX.IO’s own platform.
Until this approval, VATPs could only custody assets that were actually tradable on their own platform. EX.IO’s new authorisation means it can act as a regulated custodian for tokenised securities issued by any eligible issuer, whether or not those securities are listed for trading on EX.IO’s platform. This effectively positions EX.IO as a standalone tokenised securities custodian, a function that has historically sat with licensed banks, approved trustees, or Type 1 licensed corporations.
Under the SFC’s existing VATP licensing framework, the ability to distribute investment products and custody off-platform tokenised assets requires a specific modification to the standard licensing conditions. EX.IO is the first VATP to have obtained both modifications simultaneously. EX.IO already holds Type 1 (dealing in securities) and Type 7 (automated trading services) licences and is the only VATP included in the Hong Kong government’s Office for Attracting Strategic Enterprises (“OASES”) initiative.
SIGNIFICANCE:
This development has direct implications for asset managers and issuers exploring tokenised securities distribution in Hong Kong. The availability of a regulated VATP-custodian that sits outside the traditional banking and licensed intermediary framework creates a new channel for tokenised product custody and distribution. Issuers of tokenised securities who have been constrained by the limited pool of approved custodians should consider whether EX.IO’s expanded authorisation opens new product and distribution options.
3. Citigroup launches tokenized depositary receipts
On 12 June 2026, Citigroup has introduced Digital Depositary Receipts (“DDRs”), a blockchain-based product structure that adapts the centuries-old depositary receipt mechanism to give wealthy and institutional investors access to private company equity. The product records ownership on blockchain infrastructure operated by Swiss Infrastructure and Exchange (“SIX”), with Citigroup acting as both issuer and custodian of the underlying position.
The mechanics mirror traditional depositary receipts: Citigroup acquires and holds the underlying private company shares, issues blockchain tokens representing proportional claims on those shares, and investors hold the tokens rather than the shares directly. The key innovation is by recording the receipts on a distributed ledger. Citigroup aims to make private market positions more liquid, easily transferable, and efficiently administered than conventional private equity ownership structures. Citigroup has also indicated this is the beginning of a broader programme. The bank intends to expand DDR issuance to public blockchains over time, positioning the product within the emerging ecosystem of tokenised bank deposits and shared digital settlement networks that major institutions are developing in parallel.
SIGNIFICANCE:
Private banks, family offices and wealth managers operating in Hong Kong should take note of the DDR structures as a potential template for client-facing innovation. As traditional depositary receipts are well understood regulatory instruments, the DDR format may offer a faster path to regulatory acceptance for tokenised private market exposure than novel product structures. Asset managers should also monitor for HKEX or SFC guidance on tokenised product distribution that would accommodate DDR-style instruments listed on Hong Kong venues.
4. SFC urges licensed firms to guard against emerging AI-enabled cyber threats
On 02 June 2026, the SFC issued a circular warning all licensed corporations, SFC-licensed VATPs, and associated entities that frontier AI models are enabling more frequent, sophisticated cyberattacks. In 2025, Hong Kong cyber incidents rose 27% to 15,877.
Below highlights a summary of the circular issued on 02 June 2026.
Key Focus | Core Requirements and Actions |
Rising AI Threats |
|
Senior Management & MIC-IT |
|
Tech Asset Inventory |
|
Vulnerability & Patching |
|
Access & Zero Trust |
|
Detection & Monitoring |
|
Third-Party Risk |
|
Incident Response |
|
High-Risk Sectors | Full compliance expected for:
|
Regulatory Oversight |
|
SIGNIFICANCE:
Cybersecurity is now a front-line regulatory obligation tied to senior management accountability of SFC licensed corporations most especially for internet brokers and virtual asset trading platforms. They don’t need to be a tech expert, but they must be able to evidence that their firm has assessed AI-era threats, strengthened controls proportionate to their business, and that RO’s/MICs have actively supervised the process. As Dr Eric YIP, SFC’s Executive Director of Intermediaries, said: “As frontier AI models become more powerful and accessible, AI-enabled cyber threats are set to accelerate and complicate the tasks to detect and contain them. Senior management of licensed firms should shoulder primary responsibilities in gatekeeping firm’s cyber resilience and the security of client assets.”.
Enforcement News
5. Movie producer Wong Pak Ming sentenced to jail and fined in SFC's insider dealing prosecution
In June 2026, prominent Hong Kong film producer Raymond Wong Pak Ming (“Wong”) began serving a five‑month prison sentence after being convicted of insider dealing in shares of Pegasus Entertainment Holdings Limited (“Pegasus”), now Transmit Entertainment Limited, (HK Stock Code: 1326). The West Kowloon Magistrates’ Court handed down the sentence on June 9, 2026, concluding a criminal case launched in February 2025 and featuring a 16‑day contested trial.
The court heard that in 2017, while negotiating the sale of his controlling stake in Pegasus, Wong received material non‑public information, including a signed memorandum of understanding and a HKD 10 million earnest payment from a prospective buyer. On the same day he received the deposit, Wong transferred HKD 2 million to his sister and subsequently used WhatsApp to instruct her on when and at what price to buy Pegasus shares. She ultimately acquired over nine million shares at prices below post‑announcement market levels, generating HKD 99,720 in realised profits.
Wong was fined an amount equal to those profits and ordered to pay HKD 374,305.48 for the SFC investigation costs, penalties designed to strip away all economic gain from the offence. While the judge recognised Wong’s lifelong contributions to Hong Kong’s film industry, he emphasised that such achievements could not justify leniency where market integrity had been deliberately undermined. The SFC reaffirmed its commitment to robust enforcement to safeguard investors and maintain confidence in Hong Kong’s financial markets.
SIGNIFICANCE:
This case sets a clear and practical precedent in Hong Kong. Insider dealing now carries tangible custodial risk, not merely regulatory fines or civil penalties. The court’s decision to impose a financial penalty equal to the illicit profits underscores that restitution is a core component of punishment. Regulators and courts are also signalling that informal communication channels such as WhatsApp are fully within the scope of SFC investigations, and casual trading instructions carry the same legal weight as formal ones. Senior executives and substantial shareholders who possess price-sensitive, non-public information can face criminal liability for tipping connected parties, even in seemingly routine deal discussions. Wong’s case marks a defining moment for enforcement outcomes in Hong Kong, highlighting the need for compliance programmes to strengthen insider dealing training, particularly around prohibitions on informal trading discussions with family members.
6. SFC seeks share buy-out order against former chairman of Target Insurance (Holdings) Limited (HK Stock Code:6161)
The SFC has resumed legal proceedings against Neo Ng Yu (“Ng”), former chairman of Target Insurance (Holdings) Limited and the alleged orchestrator of one of Hong Kong’s most complex client asset misappropriation cases. Proceedings had stalled while authorities worked to serve Ng, who was located in mainland China. Following successful service with the assistance of Mainland authorities, the Court restored the case at a management conference in June 2026. The SFC is seeking a share buy-out order requiring Ng to purchase the shares of Target Insurance’s remaining public shareholders at fair value, a remedy available under section 214 of the Securities and Futures Ordinance where a person’s conduct has rendered it unfair for shareholders to remain invested. The underlying allegation is that Ng orchestrated a fraudulent scheme through which more than USD 150 million of funds belonging to Target Insurance Company Limited (the group’s operating insurer) were funnelled from Nerico Brothers Limited (“NBL”) into a Cayman-based fund controlled by Ng through his firm Amber Hill Capital Limited.
Case Context
This case is the final active thread in a multi-year enforcement campaign that has already produced landmark outcomes. The SFC revoked NBL’s licence* and imposed a lifetime ban on its director in August 2025. Amber Hill Capital’s licence was also revoked and its principals banned for life in the same period. Paul Wan Kai Leung, NBL’s former responsible officer, received his own lifetime ban in May 2026. Target Insurance itself was wound up in September 2022, and its shares were delisted from HKEX in December 2023 after trading was suspended in January 2022 when the scale of the losses became known.
*For more details, please click on the Statement of Disciplinary Action for NBL’s case.
SIGNIFICANCE:
This case illustrates the SFC’s persistent cross-border enforcement capability. The ability to effect service in mainland China via formal channels, and the court’s readiness to restore previously adjourned proceedings, demonstrate that leaving Hong Kong’s jurisdiction does not bring enforcement to a halt. For institutional investors and listed company shareholders, the section 214 buy-out mechanism is an important but underappreciated investor protection tool. Where a controlling shareholder’s misconduct renders continued investment unfair, the SFC can seek to put investors in the position they would have been in absent the wrongdoing.
7. SFC reprimands and fines XHK Limited HKD 2.5 million for regulatory breaches
On 01 June 2026, the SFC has publicly reprimanded and fined XHK Limited (“XHK”) HKD 2.5 million following disciplinary proceedings triggered by the firm's own self-reporting. The SFC found multiple regulatory failures:
Financial Resources Rules (“FRR”) Breach:
XHK submitted financial returns with accounting errors (Jan 2020 – Jun 2021), causing inaccurate liquid capital reporting. After correction, XHK was found to have had required liquid capital deficits of HKD 3.6 million – HKD 32.3 million for four months. The failures were attributed to inadequate oversight of external service providers and staff unfamiliarity with FRR requirements.
Client Money Rules (“CMR”) Breaches:
In Mar – Apr 2021, XHK transferred up to HKD 206 million of client money from segregated accounts to overseas brokers without obtaining clients' written direction or standing authority.
Between Feb 2019 – Oct 2021, XHK failed to promptly transfer non-client money (approximately HKD 38 million in commissions and interest on client money) out of segregated accounts within one business day of identification, as required by CMR.
These breaches also constituted violations of the SFC Code of Conduct.
*For more details, please click on the Statement of Disciplinary Action for XHK case.
SIGNIFICANCE:
The SFC is particularly focused on capital adequacy failures, misuse of client money, inadequate oversight of third-party vendors, and staff ignorance of regulatory requirements. Maintaining a “clean” disciplinary record and fostering a culture of compliance are vital for all licensed entities.
8. Evergrande's judicial review blocks PricewaterhouseCoopers' demand for HKD 1 billion in compensation from retail investors
What appeared to be a landmark resolution of the Evergrande audit scandal, the SFC’s HKD 1 billion compensation agreement with PricewaterhouseCoopers (“PwC”) announced in April 2026, has become the subject of a High Court judicial review filed by the company’s own liquidators. The challenge goes to the heart of the SFC’s authority to settle market misconduct cases involving non-regulated parties and raises difficult questions about who should benefit from such settlements.
The Liquidators’ Grounds
Alvarez & Marsal, acting as Evergrande’s liquidators, advance two main arguments. First, they contend that PwC Hong Kong, in its capacity as a certified public accountant, was not a ‘regulated person’ under the Securities and Futures Ordinance. In their view, PwC fell under the jurisdiction of the Accounting and Financial Reporting Council (“AFRC”), not the SFC, and the SFC therefore lacked the standalone authority to settle market misconduct proceedings with a non-licensed entity. Second, and perhaps more fundamentally, the liquidators argue that the settlement’s beneficiaries are the wrong people. Under Hong Kong’s Companies Ordinance, liquidation proceeds must be distributed to priority creditors and then unsecured creditors before any residual value reaches shareholders. The SFC’s settlement channels HKD 1 billion directly to eligible independent minority shareholders, bypassing the statutory priority waterfall entirely. The liquidators had separately pursued their own lawsuit against PwC for RMB 57 billion and wrote to the SFC on two occasions in May 2026, requesting a suspension of the settlement pending the outcome of the civil proceedings. The SFC rejected both requests, prompting the judicial review application.
SIGNIFICANCE
The SFC is normalizing settlements that require payments into an investor compensation pool, this has been seen in Lehman cases, Tiger Asia, and now PwC. Licensed corporations facing SFC investigation should expect settlement offers to include restitution to affected clients/shareholders, not only disciplinary fines or license conditions.
Regulatory Updates
9. SFC concludes consultation on the investor identification regime for Hong Kong’s exchange-traded derivatives market
Since March 2023, every on-exchange security traded in Hong Kong have been backed by the Hong Kong Investor Identification Regime for the Securities Market (“HKIDR-S”), linking each order to the identity of the person carrying out the trade. This infrastructure is now being applied to the derivatives market, extending to exchange-traded futures contracts, options contracts, and stock options, creating the Hong Kong Investor Identification Regime for the exchange-traded derivatives market (“HKIDR-DM”). The target implementation date is set in Q2 of 2028. This move follows a three-month consultation that drew nine submissions, with respondents broadly supportive.
How will it work
The HKIDR-DM mirrors the operational model of the existing securities regime. Licensed corporations and registered institutions that offer brokerage services or conduct proprietary trading in exchange-traded derivatives will be required to submit their clients' names and identity information to a centralised data repository at the point of order submission. The regime will cover on-exchange orders executed through the trading system of the Hong Kong Futures Exchange Limited and will be implemented concurrently with HKEX's launch of its new Orion Derivatives Platform, allowing firms to build HKIDR-DM functionality into their system upgrades rather than treating it as a separate project.
As Mr Rico Leung, SFC's Executive Director of Supervision of Markets, said: “The extension of the investor identification regime demonstrate our firm commitment to strengthening market integrity and protecting investors. By strengthening our capability to conduct timely and effective surveillance, the HKIDR-DM will bolster the long-term resilience and sustainable development of Hong Kong’s derivatives market, further reinforcing its status as a trusted international financial centre”. The SFC has established a dedicated HKIDR-DM webpage and has indicated that further guidance and FAQs will follow in the coming months.
SIGNIFICANCE
Licensed corporations and registered institutions active in Hong Kong’s derivative market should treat the Q2 2028 target as a planning horizon. The HKIDR-S’ implementation showed that firms that engaged early with data management frameworks, and client onboarding processes for identity collection were positioned advantageously at go-live compared to those that waited for finalised guidance.
[End of ComplianceOne Newsletter – June 2026]
For more details, please click on the title of the topic above.
=================================
~ Make It Right Today, Better Tomorrow ~
=================================
The Newsletter is for general information purpose only and is not intended to constitute legal or other professional advice.
For enquiries, please email to support@complianceone.hk or WhatsApp us at (852) 95164607.
Unit 1605, 16/F, West Tower, Shun Tak Centre,168-200 Connaught Road Central,
Sheung Wan, Hong Kong
Tel: (852) 39550277 www.complianceone.hk