Hong Kong Beneficial Ownership in 2026: How the SCR Works

Hong Kong is, by company count, one of the largest corporate registries in the world. At the end of 2025 there were 1,557,103 companies on the register — an all-time high, growing by nearly 100,000 net entities in a single year. For compliance teams, that scale is the point: the probability that a cross-border structure touches a Hong Kong entity somewhere in its ownership chain is high, and rising.

Hong Kong's beneficial-ownership regime has been in place since 2018. The Significant Controllers Register (SCR) — Hong Kong's name for the beneficial-ownership register — became a statutory obligation for every Hong Kong-incorporated company on 1 March 2018, under the Companies (Amendment) Ordinance 2018. Like Singapore, Hong Kong adopted a closed-register model: the SCR is not public, and access is reserved for law enforcement and prescribed authorities. Unlike Singapore, Hong Kong has not introduced a public nominee-transparency layer.

What changed in 2025 was the intensity of enforcement, not the architecture. The Companies Registry tightened the Trust or Company Service Provider (TCSP) licensing regime with a new AML/CFT guideline effective 3 March 2025, raised the pecuniary penalty ceiling for TCSP AML breaches to HKD 500,000, and stepped up on-site inspection of how companies maintain their registers. The supervisory message of 2026 is consistent across every Companies Registry communication: it is no longer enough to have an SCR — the register must be accurate, current, and produced on demand within tightening timeframes.

For compliance teams onboarding a Hong Kong counterparty in 2026, this means something specific. The SCR data sits behind a closed door, accessible only to authorities. There is no legitimate-interest access pathway as in Cayman or the BVI, and no public nominee flag as in Singapore. The operational reality is that a foreign bank verifies a Hong Kong UBO through a combination of the public Companies Registry search (the ICRIS / e-Registry system), the paid company particulars, the TCSP that maintains the entity's records, and contractual disclosure under onboarding terms — supplemented by walking the corporate chain through transparent jurisdictions upstream.

This guide explains how the Hong Kong SCR actually works as of 2026: the 25% threshold, the closed-register model, the e-Registry filing system, the TCSP regime and its 2025 tightening, the penalty structure, and the operational workflow for verifying a Hong Kong UBO when the register is not open to you.

1. The Hong Kong regime in 2026: scale and closed-register design

Hong Kong introduced statutory beneficial-ownership disclosure through the Companies (Amendment) Ordinance 2018, which came into operation on 1 March 2018. The amendment required every company incorporated in Hong Kong to identify and record its significant controllers in a Significant Controllers Register, and to keep that register up to date and available for inspection by law enforcement on demand.

The central design choice that defines the regime: the SCR is closed. It is not a public document. It must be kept at the company's registered office (or another prescribed location in Hong Kong notified to the Registrar) and made available for inspection only by law enforcement officers and specified authorities — the Companies Registry, the Hong Kong Police Force, the Customs and Excise Department, the Inland Revenue Department, the Securities and Futures Commission, the Hong Kong Monetary Authority, the Insurance Authority, and others acting under their statutory powers. There is no public access, no journalist access, no business-counterparty access, and — unlike Cayman and the BVI — no legitimate-interest access pathway.

Three operational decisions sit at the heart of the regime as it operates in 2026:

• The data is held at company level, not centrally. Unlike Singapore's central RORC at ACRA, Hong Kong's SCR is maintained by each company at its registered office. There is no central beneficial-ownership database that authorities query — they inspect the company's own register on demand. A "designated representative" (typically the company secretary or a TCSP) must be appointed to provide assistance relating to the SCR to law enforcement.
• The TCSP is the operational gatekeeper. Most Hong Kong companies — especially foreign-owned ones — maintain their registered office and statutory registers through a licensed Trust or Company Service Provider. The TCSP regime, established under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) in 2018 and tightened in 2025, makes the TCSP a regulated, accountable layer in the beneficial-ownership chain.
• Enforcement is the 2025–2026 story. The architecture has been stable since 2018. What has changed is the Companies Registry's willingness to inspect, prosecute, and penalise. The supervisory expectation in 2026 is speed and accuracy of SCR maintenance, not merely its existence.

2. The enforcement turn: JPEX and why 2025 changed the tone

For its first six years, the SCR regime was a compliance formality enforced lightly. What changed the supervisory tone was not a beneficial-ownership scandal as such, but the collapse of the JPEX cryptocurrency exchange in September 2023 — the largest financial fraud case in Hong Kong's history, and a case that ran directly through the anti-money-laundering machinery that the SCR and TCSP regimes are meant to support.

JPEX marketed itself as a "safe and easy-to-use" virtual asset platform, using a network of social-media influencers and over-the-counter retail crypto shops to funnel deposits. In September 2023 the Securities and Futures Commission publicly warned that JPEX was operating without a licence; withdrawals froze, and the platform collapsed. Hong Kong Police launched "Operation Iron Gate." By the end of 2025, over 80 people had been arrested, HK$228 million in assets seized (cash, gold bars, luxury cars, and virtual assets), and Interpol red notices issued for three fugitive masterminds who had fled overseas.

In November 2025 — two years into the investigation — police charged 16 people, including the prominent influencer and former barrister Joseph Lam Chok, with conspiracy to defraud, money laundering, and inducing virtual-asset investment. A further 10 were charged in March 2026 over HK$132 million of "abnormal transactions" in accounts disproportionate to the holders' financial profiles. The JPEX prosecution was among the first major actions brought under the money-laundering provisions of the AMLO in the virtual-asset context, and it crystallised a supervisory shift that had been building since 2023.

3. The 25% threshold and the significant-control test

Under the Companies Ordinance (Cap. 622) as amended, a "registrable person" or "registrable legal entity" is a significant controller of a company if they meet one or more of five conditions. The threshold aligns with the UK PSC regime, Cayman BOTA, Singapore's RORC, AMLD6, and the FATF Recommendation 24 baseline — and is materially higher than the BVI's 10%.

1. Holds, directly or indirectly, more than 25% of the issued shares of the company (or, for a company without share capital, a right to share in more than 25% of capital or profits)
2. Holds, directly or indirectly, more than 25% of the voting rights of the company
3. Holds, directly or indirectly, the right to appoint or remove a majority of the board of directors
4. Has the right to exercise, or actually exercises, significant influence or control over the company
5. Has the right to exercise, or actually exercises, significant influence or control over a trust or firm (not a legal person) that itself meets one of the first four conditions

Working the five conditions in practice

The five conditions are not a sequence — they are alternative tests, and a significant controller is anyone who meets any one of them. For CDD teams, the practical work splits into two very different exercises:

• Conditions 1 and 2 (the 25% tests) are arithmetic. Sum the direct and indirect shareholding or voting rights through the ownership chain. These are the conditions the Annual Return shareholder list helps you assess, and they resolve most straightforward structures.
• Conditions 3, 4 and 5 (the control tests) are interpretive. The right to appoint or remove a majority of directors, or the exercise of "significant influence or control," can exist with little or no shareholding — through shareholder agreements, side letters, golden shares, contractual veto rights, or control over a trust or firm that sits in the chain. These conditions do not appear in any public filing.

This split is the single most important operational point in Hong Kong UBO work. A counterparty can return a clean 25%-threshold analysis from the Annual Return and still have an unrecorded significant controller under conditions 3–5. Where the structure involves a trust, a holding company with an unusual board-appointment arrangement, or a documented control agreement, the share register is not enough — the controlling arrangement must be obtained and assessed directly. The Companies Registry's guidance is explicit that "significant influence or control" covers any person who can direct the company's activities or ensure the company adopts the activities the person desires.

Where no individual meets any of the conditions, the company must still record that fact and, where applicable, record the company's directors or senior management who exercise control. A company cannot simply leave the SCR empty — it must record the steps taken to identify controllers and the outcome.

4. Who is in scope: companies, exemptions, re-domiciled entities

The SCR regime applies broadly to Hong Kong-incorporated companies, with a narrow set of exemptions.

The notable 2025 development was the introduction of the company re-domiciliation regime, effective 23 May 2025 under the Companies (Amendment) (No. 2) Ordinance 2025. The regime lets non-Hong Kong companies relocate their domicile to Hong Kong while preserving legal identity and operational continuity. By the end of 2025, the Companies Registry had received more than 420 enquiries and 30 applications, with six corporations — from Luxembourg, the Cayman Islands and Bermuda, including an insurance company — having already completed re-domiciliation. Every re-domiciled company becomes subject to the full SCR regime on arrival. For compliance teams, this is a new category of Hong Kong entity that did not exist before mid-2025: companies with a corporate history elsewhere now carrying Hong Kong SCR obligations.

5. The Companies Registry and the e-Registry filing model

Hong Kong's corporate filing runs through the Companies Registry's electronic systems — the Integrated Companies Registry Information System (ICRIS) and its e-Registry / e-Services portal. Understanding what is and is not available through these systems is the starting point for any Hong Kong CDD workflow.

What's publicly searchable — and what isn't

The critical distinction: the public Companies Registry search returns corporate-record data, but the SCR is not part of it. The SCR is held at the company's registered office, not at the Registry, and is closed to public inspection.

The operationally important point for CDD teams: Hong Kong's Annual Return (Form NAR1) is a rich public document. It lists directors, the company secretary, and — critically — the shareholders and their shareholdings as at the made-up date of the return. For most private Hong Kong companies, the Annual Return shareholder list is the practical starting point for identifying the beneficial owner, even though it is not the SCR. Where the registered shareholder is a natural person, the Annual Return may resolve the question directly. Where it is a corporate shareholder, the chain must be walked.

6. The TCSP regime: gatekeeper licensing and the 2025 tightening

The Trust or Company Service Provider licensing regime is the regulatory backbone of Hong Kong's beneficial-ownership ecosystem. Established under the AMLO with effect from 1 March 2018 — the same date as the SCR regime — it requires any person carrying on a trust or company service business in Hong Kong to hold a TCSP licence issued by the Companies Registry.

What the TCSP regime requires, in operational terms:

• Mandatory licensing. Carrying on a trust or company service business without a licence is a criminal offence — fine up to HKD 100,000 and imprisonment up to 6 months. The Registrar applies a "fit and proper" test to the applicant and all its directors and ultimate owners.
• Full AML/CFT compliance. Licensed TCSPs must conduct customer due diligence on every client, screen against sanctions and PEP lists, monitor transactions, maintain records, appoint a Compliance Officer and a Money Laundering Reporting Officer, and report suspicious transactions.
• The 3 March 2025 Guideline. The Companies Registry issued a new version of its "Guideline on Compliance of Anti-Money Laundering and Counter-Terrorist Financing Requirements for Trust or Company Service Providers," effective 3 March 2025, raising the operational bar for CDD, ongoing monitoring, and beneficial-ownership verification.
• Pecuniary penalties. The Companies Registry can order a TCSP licensee to pay a pecuniary penalty of up to HKD 500,000 for AML/CFT non-compliance, alongside licence suspension or revocation in serious cases.

For compliance teams onboarding a Hong Kong counterparty, the TCSP regime is a useful verification anchor. The TCSP servicing the counterparty must be licensed, and licensing status is verifiable through the Companies Registry's public TCSP licensee register. A counterparty whose corporate services are arranged through an unlicensed provider is dealing with a criminal operation — and that is a material CDD red flag.

7. How to verify a Hong Kong UBO: step-by-step workflow

In this illustrative chain, two Hong Kong layers sit beneath a UK parent. The Hong Kong layers have SCR data in the closed registers held at their registered offices, and named shareholders in the purchased Annual Returns, but the natural-person UBO is not directly accessible through public Hong Kong data. The UK layer is on the public PSC register and identifies the natural person directly. Where the chain leads to a transparent jurisdiction upstream, the UBO is resolvable without relying on the closed SCR or contractual disclosure. Where the chain stays within Hong Kong, or runs through mainland China or other closed-register jurisdictions, contractual disclosure under onboarding terms is the operational route.

8. Penalties: SCR breaches, TCSP sanctions, and enforcement

Hong Kong operates two parallel penalty regimes — one for SCR non-compliance by companies, and one for AML/CFT breaches by licensed TCSPs.

9. Recent and upcoming changes: 2024–2027

10. Sector-specific obligations: HKMA, SFC, funds, VASPs

The SCR sits alongside sector-specific AML/CFT obligations supervised by Hong Kong's financial regulators. The architecture matters for CDD on different counterparty types.

Hong Kong Monetary Authority (HKMA) — banks

The HKMA supervises authorised institutions (banks, restricted-licence banks, deposit-taking companies) for AML/CFT compliance under the AMLO and the HKMA's AML/CFT Guideline. Beneficial-ownership identification to the 25% threshold is a baseline requirement, with enhanced due diligence for higher-risk customers, PEPs, and complex structures. A HKMA-supervised counterparty has performed UBO identification under standards that exceed the SCR alone.

Securities and Futures Commission (SFC) — asset managers and funds

The SFC regulates licensed corporations conducting regulated activities, and supervises the fund vehicles domiciled in Hong Kong. Two structures matter: Open-Ended Fund Companies (OFCs), of which there were 676 by the end of 2025 (up 43% year-on-year), and Limited Partnership Funds (LPFs), of which there were 1,347 (up 35%). Both are subject to AML/CFT obligations through their licensed managers, and both have grown rapidly as Hong Kong competes with Singapore for Asian fund domicile.

Virtual Asset Service Providers (VASPs)

Hong Kong operates a licensing regime for virtual asset trading platforms under the AMLO, supervised by the SFC. Licensed VASPs are subject to full AML/CFT obligations including beneficial-ownership identification and the FATF Travel Rule. Hong Kong has positioned itself as a regulated virtual-asset hub, and VASP supervision is correspondingly rigorous.

Designated Non-Financial Businesses and Professions (DNFBPs)

Lawyers, accountants, estate agents, and TCSPs are DNFBPs under the AMLO. AML/CFT supervision is split: the Law Society of Hong Kong supervises solicitors, the Hong Kong Institute of Certified Public Accountants supervises accountants, the Estate Agents Authority supervises estate agents, and the Companies Registry supervises TCSPs. Beneficial-ownership identification is required across all DNFBP categories.

11. The mainland China nexus: where Hong Kong UBO chains get hard

The defining operational reality of Hong Kong UBO verification is that a large share of Hong Kong companies have mainland Chinese ownership, and a large share of mainland-Chinese cross-border structures route through Hong Kong. When a Hong Kong ownership chain runs north into the mainland, the verification problem changes character — and this is the single most common point at which a Hong Kong chain becomes difficult to resolve from accessible data.

Mainland China now has its own BO regime — and it is closed

On 29 April 2024, the People's Bank of China (PBOC) and the State Administration for Market Regulation (SAMR) jointly issued the Administrative Measures for Beneficial Owner Information. The Measures took effect on 1 November 2024, requiring all companies, partnerships, and branches of foreign companies registered in mainland China to file beneficial-owner information. Entities formed before that date had a one-year grace period, with a filing deadline of 1 November 2025.

The mainland regime aligns with Hong Kong on the headline architecture: a 25% threshold (ownership, ultimate entitlement to gains, or voting rights), a fallback to actual control where the 25% test is not met, and a fallback to senior management where no controller can otherwise be identified. There is a small-entity exemption — broadly, entities with registered capital not exceeding RMB 10 million whose owners are all natural persons. Penalties for non-filing or inaccurate filing run up to RMB 50,000.

Critically for foreign CDD teams: the mainland BO data is not public. It is filed into the PBOC system and made available only to government authorities, financial institutions, and certain non-financial institutions for AML/CFT purposes. A foreign bank cannot access mainland BO filings directly. So when a Hong Kong chain runs into a mainland parent, the new mainland regime does not open the data to you — it simply means the data now exists inside a closed Chinese system.

What this means operationally

• The chain often terminates in opacity, not transparency. Unlike a Hong Kong company owned by a UK or Luxembourg parent — where the chain resolves through a public register — a Hong Kong company owned by a mainland parent resolves into a closed mainland system you cannot query.
• State-linked ownership is a distinct risk dimension. Where a mainland parent is a state-owned enterprise or has state-linked shareholders, the "beneficial owner" analysis interacts with sanctions screening (see below) and with the practical reality that ultimate control may rest with a state entity rather than an identifiable natural person.
• Contractual disclosure and specialist data sourcing become necessary. For mainland-terminating chains, the operational routes are direct disclosure from the counterparty under onboarding terms, mainland corporate-registry data (the National Enterprise Credit Information Publicity System discloses shareholders but not the BO filing), and specialist data providers that aggregate mainland ownership records.

12. Cross-border implications for EU and UK banks

For an EU bank under AMLD6 or a UK bank under MLR 2017, Hong Kong CDD is operationally similar to Singapore — a closed-register jurisdiction with a 25% threshold — but with specific points to build into the workflow.

Threshold alignment — no reconciliation needed

Hong Kong's 25% threshold matches AMLD6, UK MLR, FATF Recommendation 24, Singapore, and Cayman. CDD teams do not need to perform the threshold reconciliation work that the BVI's 10% regime requires. Data calibrates naturally to a 25% home regime.

The Annual Return is your friend — but it isn't the SCR

Hong Kong's public Annual Return (Form NAR1) is a richer public document than many closed-register jurisdictions provide — it discloses shareholders and shareholdings. For straightforward structures, the Annual Return resolves ownership. But it is a snapshot as at the made-up date, it shows legal not beneficial ownership, and it does not capture the "significant influence or control" conditions. Treat it as the starting point, not the conclusion.

The mainland China dimension

A large share of Hong Kong companies have mainland Chinese ownership. Where a Hong Kong entity's chain runs into mainland China, the mainland's beneficial-ownership regime (in force from 2024) is itself a closed register, and practical access for foreign banks is limited. This is the most common point at which a Hong Kong ownership chain becomes difficult to resolve from public data — and where contractual disclosure or specialist data sourcing becomes necessary.

Sanctions screening — a distinct risk picture

Hong Kong's sanctions position is operationally distinct. Hong Kong implements United Nations sanctions through the United Nations Sanctions Ordinance, but does not implement autonomous US, EU, or UK sanctions that go beyond UN listings. Given the geopolitical environment since 2020 — including US sanctions on certain Hong Kong officials and entities — compliance teams should treat OFAC SDN, EU Consolidated, and UK HMT screening as primary home-jurisdiction obligations and apply enhanced scrutiny to Hong Kong structures with mainland Chinese state-linked ownership. The divergence between Hong Kong's UN-only sanctions implementation and the broader Western sanctions regimes is a material CDD consideration.

13. Hong Kong vs Singapore: the two Asian closed registers

Hong Kong and Singapore are the two dominant Asian financial centres, and they compete directly for regional headquarters, fund domicile, and family-office business. Their beneficial-ownership regimes are structurally similar — both closed, both 25% — but the operational details differ in ways that matter for CDD.

Three observations matter for compliance teams running CDD across both jurisdictions:

• Hong Kong's Annual Return is a structural advantage. Hong Kong publicly discloses shareholders and shareholdings via the Annual Return — a data point Singapore matches through the paid Business Profile. Both jurisdictions give you legal ownership; neither gives you the closed-register beneficial-ownership data without authority access or contractual disclosure.
• Singapore has moved further on nominee transparency. Singapore's 2025 reforms added a public nominee flag and a central nominee register (ROND/RONS). Hong Kong has no equivalent public nominee transparency — a nominee arrangement in a Hong Kong company is not flagged on any public record. For nominee-heavy structures, Singapore data carries more signal.
• The gatekeeper regimes are converging. Hong Kong's TCSP regime (2018, tightened 2025) and Singapore's CSP Act (2024) are structurally similar — both make corporate service providers licensed, accountable AML gatekeepers. Both jurisdictions now treat the service provider as a regulated layer, not a neutral intermediary.

14. Practical takeaways for compliance teams

15. Frequently asked questions