SFC fines Victory Securities HK$1.7 million and suspends its responsible officer over unresolved account red flags
Licensed corporations must resolve account-opening red flags before executing client orders, not after, and report suspected client document fraud to the SFC
Change
On 24 July 2026 the SFC reprimanded and fined Victory Securities Company Limited HK$1.7 million and suspended responsible officer Stephen Chiu Che Leung's licence for three months from 22 July to 21 October 2026, after finding the firm executed a new client's share sales without resolving red flags and failed to report the client's suspected use of false documents.
Why it matters
The SFC set out three distinct failure points. First, the client's claimed shareholding was incommensurate with the financial profile he declared at account opening — a mismatch detectable from documents the firm already held. Second, Victory executed the sell orders without obtaining satisfactory answers to that and other red flags, placing the enquiry after execution rather than before it. Third, when later information suggested the client had supplied false brokerage statements, Victory did not report the suspected fraudulent or deceptive conduct to the SFC. The SFC attributed the firm's failures to Chiu's neglect as an RO and member of senior management. The penalty level is calibrating: the SFC expressly weighed that this was an isolated incident, that there was no evidence of systematic internal-control weakness, that Victory had since enhanced policies and introduced mandatory staff training, that both parties cooperated, and that Chiu had an otherwise clean record — and still imposed a HK$1.7 million fine and a three-month suspension.
Implications
- — Compliance and AML functions at licensed corporations must test whether their account-opening process compares a client's declared financial profile against the value of holdings the client claims to transfer in and sell, since the SFC treated that mismatch as a red flag the firm should have caught from documents already in its possession.
- — Dealing and order-execution desks must be able to hold a new client's sell order until red flags are satisfactorily answered, because the SFC's finding was not that Victory failed to enquire at all but that it executed before obtaining satisfactory answers.
- — Licensed corporations must have a defined escalation path to report a client's suspected fraudulent or deceptive conduct to the SFC once information indicates false documents were supplied, as the failure to report was found as a breach separate from the account-handling failures.
- — Responsible officers and managers-in-charge of Compliance and AML functions face personal licence suspension where firm-level failures are attributed to their neglect of senior-management duties, independently of any finding of systemic control weakness at the firm.
Who is affected
- — Compliance and AML functions at SFC-licensed corporations
- — Dealing and order-execution desks at SFC-licensed corporations
- — Responsible officers and managers-in-charge at SFC-licensed corporations
What to watch
- — Suspension ends: 21 October 2026 — Stephen Chiu Che Leung's licence suspension runs from 22 July 2026 to that date.