Hong Kong's regulatory framework for trust and company service providers has evolved significantly since the TCSP licensing regime came into force in 2018. The 2025 regulatory cycle has brought a further round of guidance updates, enforcement activity that signals supervisory priorities, and a consultation on beneficial ownership register reforms that will affect all CSPs managing Hong Kong-incorporated entities.
For offshore CSPs — particularly those in Jersey, Guernsey, and Cayman who manage Hong Kong holding company structures for Asian clients — understanding these developments is essential for maintaining compliance both in Hong Kong and in their home jurisdictions, where the adequacy of controls for HK entities will be assessed by local regulators.
TCSP Licensing: The Current Framework
Hong Kong's Trust or Company Service Provider regime, administered by the Companies Registry, requires all persons who carry on a trust or company service business in or from Hong Kong to hold a TCSP licence. The activities covered include: forming companies or other legal persons; acting as or providing a director, secretary, partner, or similar position; providing a registered office or business address; acting as or arranging for another person to act as a trustee; and acting as or arranging for another person to act as a nominee shareholder.
The licensing requirements include: fit and proper assessment of controllers, directors, and responsible officers; minimum qualifications for the responsible officer; a structured compliance programme; and satisfactory AML/CFT controls. The Companies Registry conducts on-site inspections of TCSP licensees and has demonstrated willingness to impose conditions on licences and to revoke licences for serious deficiencies.
For offshore CSPs, the TCSP licensing question arises differently: if your firm provides registered agent, registered office, or director services to Hong Kong-incorporated entities while operating from a non-HK office, you may not be directly subject to HK TCSP licensing requirements. However, the AML obligations of your home jurisdiction require you to understand your clients' regulatory environment, and the adequacy of any HK-licensed service provider you use as a local agent is your due diligence responsibility.
2025 AML/CFT Guidance Updates
The Companies Registry issued updated AML/CFT guidance for TCSP licensees in early 2025, incorporating FATF recommendations and addressing typologies identified in recent examination activity. The updates most relevant to CSPs include:
- Enhanced due diligence triggers: The updated guidance expands the list of client types and circumstances that automatically require enhanced due diligence, explicitly including: clients from jurisdictions on the FATF grey list; clients involved in digital asset activities; clients with complex, multi-layered corporate structures; and clients where the purpose of the structure cannot be clearly articulated.
- Source of funds verification standard: The guidance now specifies that source of funds documentation must be independently verifiable — meaning it must be obtained from a source other than the client or the client's representatives. Bank statements, certified property transactions, investment exit confirmations, and inheritance documentation from probate records are acceptable. Client declarations alone are not.
- Ongoing monitoring frequency: High-risk clients must be reviewed at least annually. Standard-risk clients must be reviewed at least every three years. Any material change in client circumstances triggers an out-of-cycle review regardless of when the previous review was conducted.
- Correspondent service provider due diligence: Where TCSP licensees use correspondent services from other CSPs (common in multi-jurisdictional structures), they must conduct AML due diligence on those correspondent relationships — reviewing the correspondent's licensing status, AML programme, and supervisory history.
"The Companies Registry's examination programme has become significantly more rigorous since 2023. Firms that were accustomed to a lighter supervisory touch are finding that the 2025 examination cycle looks more like a Channel Islands regulatory review than the administrative check it used to be."
— Hong Kong compliance specialist, 2025
Beneficial Ownership Register Consultation
Hong Kong has been consulting on significant reforms to its beneficial ownership register framework. The current system requires companies to maintain a "significant controllers register" (SCR) at their registered office, but this register is not publicly accessible and is only available to law enforcement on request.
The consultation — which closed in early 2025 — proposes two significant changes:
Centralisation: Moving from company-held SCRs to a centrally maintained government database. This would require all Hong Kong companies to file BO information with the Companies Registry (or the Registrar of Companies) rather than maintaining it internally.
Expanded access: Providing access to the centralised register to a wider range of authorised users, potentially including banks, regulated financial institutions, and (in a limited form) the public. The extent of public access remains under consultation, with differing views on the appropriate balance between transparency and data protection.
HK Entity Administration: Practical Compliance Considerations
For offshore CSPs managing Hong Kong companies as part of a larger client portfolio, several practical compliance obligations require specific attention:
Annual return compliance: Hong Kong companies must file annual returns with the Companies Registry within the prescribed period following the company's anniversary of incorporation. The filing includes details of directors, company secretaries, shareholders, and registered office. Late filing penalties are automatic and escalating. With a portfolio of HK companies, automated deadline tracking is essential — manually tracking anniversary dates across a large portfolio creates unacceptable error risk.
Company secretary requirements: Every Hong Kong company must have a company secretary who is a natural person ordinarily resident in Hong Kong, or a body corporate with a registered office in Hong Kong. Offshore CSPs that act as company secretary through a Hong Kong affiliate or correspondent arrangement must maintain evidence that the arrangement meets these requirements.
Audit requirements: All Hong Kong companies (with limited exceptions for dormant companies) must have their accounts audited annually by a certified public accountant registered with the Hong Kong Institute of CPAs. This obligation applies to holding companies and SPVs, not just trading companies. Ensuring client HK companies are meeting their audit obligations is a service responsibility that CSPs should explicitly include in their engagement scope.
Implications for Offshore CSP Home-Jurisdiction Compliance
When a Jersey, Guernsey, or Cayman CSP administers Hong Kong structures for clients, their home-jurisdiction regulator expects that the same quality of compliance is maintained for those structures as for any other part of the client relationship. The JFSC, GFSC, and CIMA have all indicated in their guidance that the geographic location of an administered entity is not a reason to apply lower compliance standards.
In practice, this means: CDD on the HK company's beneficial owners must meet home-jurisdiction standards; economic substance assessment (where relevant) must include HK entities; the KYC refresh calendar must include HK entities; and any adverse media or sanctions hits involving HK entities must be treated with the same urgency as for entities in the CSP's home jurisdiction.
For CSPs with significant HK entity portfolios, a specific HK compliance module within your entity management system — tracking annual return dates, SCR currency, audit engagement status, and TCSP correspondent status — is the practical solution to managing these multi-layered obligations reliably.