9 briefs
L&I product providers must rename products away from ETF branding, publish next-day leverage factors before market open, and halt Single Stock products whenever the underlying Hong Kong share is suspended
Licensed corporations must resolve account-opening red flags before executing client orders, not after, and report suspected client document fraud to the SFC
Malaysian fund managers gain streamlined SFC authorisation for Hong Kong retail distribution but must appoint a Hong Kong representative and synchronise disclosure across both markets
Malaysian REIT managers gain a streamlined SFC authorisation route only where the REIT clears HK$3bn market capitalisation, a five-year Bursa compliance record and 300 unitholders at listing
SFC licensees and VASPs must add Bosnia and Herzegovina and Iraq to increased-monitoring country risk and may relax Algeria and Namibia, updating EDD triggers accordingly
Internet brokers and SFC-licensed VASPs must stop using OTP for login and device binding and adopt phishing-resistant authentication (e.g. passkeys, bound devices) no later than 8 July 2027, with monitoring, incident-reporting and client-awareness measures required sooner
Listed structured fund providers and their distributors must now meet SFC naming, disclosure, market-making, capacity-monitoring and single-stock safeguard requirements to offer single-stock L&I and defined-outcome products in Hong Kong.
VATPs and licensed corporations must adopt revised licensing conditions and update disclosures, client classification, and SFC-notification workflows before conducting Relevant Stablecoin activities
Management companies, custodians, and participating dealers of SFC-authorised VA funds must meet revised eligibility, custody, valuation, and disclosure requirements, and obtain prior SFC consultation and approval before exceeding 10% VA exposure or engaging in staking
