Ongoing compliance, licence renewal and maintenance

01 / Establish a Management Calendar by Licence Type

Manage licence validity periods, renewal windows, statutory company filings, audit or financial information, regulatory reports, changes to directors or controllers, and changes to business premises or business activities separately. SVF, MSO and money lender licences do not share a single type of “annual review”.

Assign a responsible person to maintain the latest official requirements, document versions and submission evidence. Schedule routine reports separately from event-triggered reports to avoid discovering only after a shareholding transaction or staff departure that prior consent is required.

02 / AML/CFT Is More Than a Compliance Manual

Risk assessments should reflect the customers, regions, products, delivery channels, transaction volumes and partners involved. Customer due diligence, beneficial ownership identification, sanctions screening, ongoing monitoring and suspicious transaction handling should align with the actual systems and roles, rather than simply copying a template.

For high-risk customers and unusual transactions, record the decision-making and handling process. Keep evidence of staff training, monitoring rules, internal checks and remediation of issues. Check the specific obligations and applicable guidance separately under each licensing regime.

03 / Customer Funds, Settlement and Credit Risks

SVFs should manage their float and customer protection arrangements in accordance with the relevant framework. MSOs should ensure that the recipient of funds, exchange rate, cross-border route and ultimate payee are consistent with the contracts, accounts and customer due diligence. Lending arrangements should be checked against the loan agreement, explanations of fees, affordability and complaint handling.

Regularly check settlement reconciliation, refunds, freezes, reserves, chargebacks and exit arrangements. If a licensed partner fails, outsourcing is disrupted or a system incident occurs, it must be clear who will take responsibility for unsettled funds and customers.

04 / Technology, Outsourcing and Business Continuity

Establish access controls, change management, cybersecurity, incident response, and business continuity and recovery arrangements. Payment authorisations, balances, accounts and settlement records should be traceable; outsourcing to a supplier must not make the allocation of responsibility unclear.

Before entering into agreements with banks, acquirers, SVF, MSO, or credit partners, verify their licences and roles, and continue to monitor service levels, data handling, control of customer funds, and exit arrangements.

05 / Common Omissions in Renewals and Changes

• Mistaking business registration renewal for financial licence renewal.
• The company’s directors have been updated, but the licence-level approval or notification has not been dealt with.
• Continuing to use the old business plan after relocating, adding a premises, or changing fund flows.
• Duties and regulatory handover arrangements were not made promptly after a key person’s departure.
• The bank account, customer contracts, promotional materials and actual operating entity do not match.

Any identified gaps should be addressed with assigned responsibility, timelines and supporting evidence. A consultant can assist with organisation and coordination, but management cannot transfer its own ongoing responsibilities.

Official Sources and Information Disclaimer

• Hong Kong Monetary Authority | Stored Value Facilities and Retail Payment Systems ↗ · Official public source · Verified by this site on 2026-11-01
• Hong Kong Customs | Money Service Operator Licensing System ↗ · Official public source · Checked by this website on 2026-11-01
• Companies Registry | Money Lender’s Licence Applications and Renewals ↗ · Official public source · Checked by this website on 2026-11-01
• Joint Financial Intelligence Unit | Suspicious Transaction Reports ↗ · Official public source · Checked by this website on 2026-11-01