Who was sanctioned, and for what?

On 17 September 2026 the Shatin Magistrates' Courts (a Hong Kong magistrates' court), on prosecutions brought by the Labour Department (Hong Kong's labour authority), fined four companies for breaches of the Factories and Industrial Undertakings Regulations, the Factories and Industrial Undertakings (Electricity) Regulations and the Construction Sites (Safety) Regulations (Hong Kong workplace safety rules). The case concerned a fatal accident on 10 September 2023 at Hong Kong Science Park, in which a worker received an electric shock while carrying out electrical work. China Power International Development Limited and Towngas - China Power (HK) Integrated Energy Company Limited pay 908,000 HKD each, A. Kourage Limited 904,250 HKD and Skynet Engineering Company Limited 417,000 HKD, 3,137,250 HKD in total.

Authority / court

Shatin Magistrates' Courts, Hongkong (Anklage: Labour Department)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Factories and Industrial Undertakings Regulations; Factories and Industrial Undertakings (Electricity) Regulations; Construction Sites (Safety) Regulations

Action

Fine

Status of proceedings

unknown

Sector

Energy and utilities

Published

17 Sep 2026

Original amount 3,137,250 HKD, converted at the ECB reference rate of 17 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

In Construction was fined HKD 640,000 for breaches of the Factories and Industrial Undertakings Ordinance and the regulations on lifting appliances and safety management. On a foundation construction site in Tai Po on 30 September 2025, a female worker had been trapped between the rear end of a slewing crawler crane and the railing of a steel platform and later died.

Authority / court

Shatin Magistrates' Courts, Hongkong (Anklage: Labour Department)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Factories and Industrial Undertakings Ordinance; Factories and Industrial Undertakings (Lifting Appliances and Lifting Gear) Regulations; Factories and Industrial Undertakings (Safety Management) Regulation

Action

Fine

Status of proceedings

unknown

Sector

Construction and real estate

Published

4 Sep 2026

Original amount 640,000 HKD, converted at the ECB reference rate of 4 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Luk Fook Securities (HK) was publicly reprimanded and fined 2,100,000 HKD because inadequate cybersecurity controls might have contributed to a ransomware attack on 19 September 2022 hitting numerous core servers and to full recovery taking until 7 October 2022; during that time clients could not trade via the app or internet platform. Findings included missing firewall protection, outdated operating systems and antivirus software, weak access and password controls with credentials stored unencrypted, insufficient controls over remote access and external devices, inadequate data backup and a last security training session in 2018.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Information security and cyber · Security measures and risk management

Legal basis

s. 194 SFO (Cap. 571); Code of Conduct GP 2, GP 3, GP 7, paras. 12.1, 18.5 und Schedule 7; Guidelines for Reducing and Mitigating Hacking Risks Associated with Internet Trading

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Root-cause review with an independent reviewer, strengthened controls, no evidence of client loss, cooperation, clean disciplinary record.

Published

28 Jul 2026

Original amount 2,100,000 HKD, converted at the ECB reference rate of 28 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded China Industrial Securities International Asset Management (CISIAM) and fined it HKD 6.8 million because, between August 2019 and September 2020, the manager of a private fund set up for the insurer Tahoe Life acquired complex structures with notes linked to bonds of a related company at the request of the insurer's chief investment officer, without identifying and properly examining the red flags. CISIAM also failed to observe the fund's investment restrictions and objectives and did not manage its risks effectively. In setting the penalty, the SFC also took into account management fees of around HKD 1.9 million received from the fund.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Section 194 Securities and Futures Ordinance (Cap. 571); General Principle 2 Code of Conduct; Paragraphen 1.2(d), 3.1 und 3.11.1 Fund Manager Code of Conduct; Abschnitt VIII Management, Supervision and Internal Control Guidelines

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial measures (new policies on risk management and dubious investment arrangements, compliance training), cooperation with the SFC and an otherwise clean disciplinary record.

Published

27 Jul 2026

Original amount 6,800,000 HKD, converted at the ECB reference rate of 27 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Bright Smart Securities International (H.K.) was publicly reprimanded and fined 2,800,000 HKD because between November 2023 and September 2025 its controls did not prevent 615 clients from executing 1,021 pairs of wash trades (trades without a change in beneficial ownership) in 736 shares and warrants. Monitoring was mostly after the event and manual, and several wash trades by one client on the same day counted as a single occurrence. Similar deficiencies had been identified and raised repeatedly before but were not fully remedied in any instance.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Market abuse and insider dealing

Legal basis

s. 194 SFO (Cap. 571); Code of Conduct GP 2, para. 4.3

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Mitigating circumstances

Enhanced systems and a commitment to an independent effectiveness review, cooperation.

Published

27 Jul 2026

Original amount 2,800,000 HKD, converted at the ECB reference rate of 27 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

On 17 June 2026 the Competition Commission (Hong Kong's competition authority) accepted a commitment from Kangaroo Limited, which operates the Keeta food delivery platform in Hong Kong and is a subsidiary of Meituan. The authority was concerned that clauses in Keeta's agreements with partner restaurants made access harder for new and small platforms and softened competition – a possible breach of the First Conduct Rule (the ban on anti-competitive agreements). Keeta had already amended the agreements voluntarily (cooperation with platforms of up to 10% market share without losing incentives, easier switching, no bar on lower prices on the restaurants' own channels and on rival platforms); with the acceptance, these changes are legally binding and enforceable by the authority until 28 December 2026.

Authority / court

Competition Commission (Hongkong)

Area of law

Competition law

Legal basis

Competition Ordinance (Cap. 619), s. 6 (First Conduct Rule); Annahme einer Verpflichtungszusage nach s. 60

Action

Order

Status of proceedings

final

Sector

Media and online platforms

Published

17 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

In April 2026 China Harbour Engineering Company Limited was fined 78,000 HKD at the Eastern Magistrates' Courts (a Hong Kong magistrates' court) under the Water Pollution Control Ordinance (Hong Kong's water pollution law) because the company had discharged waste or polluting matter into a water control zone on 14 July 2025; the prosecution was brought by the Environmental Protection Department (Hong Kong's environmental authority). It was the highest fine among the 40 environmental convictions the department published for April 2026.

Authority / court

Eastern Magistrates' Courts, Hongkong (Anklage: Environmental Protection Department)

Area of law

Environment and sustainability · Emissions and permits

Legal basis

Water Pollution Control Ordinance (Einleitung von Abfall oder verunreinigenden Stoffen in eine water control zone)

Action

Fine

Status of proceedings

unknown

Sector

Construction and real estate

Published

22 May 2026

Original amount 78,000 HKD, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Market abuse and insider dealing

Legal basis

s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)

Action

Other

Status of proceedings

final

Sector

Other

Published

23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Data breaches and data security

Legal basis

Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice

Action

Order

Status of proceedings

unknown

Sector

Other

Published

23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

The court fined Sun Shine Decoration HKD 500,000 and Wai Tat Aluminium & Glass Engineering HKD 230,000, HKD 730,000 in total, for breaches of the Factories and Industrial Undertakings Ordinance and the Construction Sites (Safety) Regulations. The case arose from a fatal accident on 16 May 2025 at a house in Kwu Tung, in which a worker fell into the swimming pool of the neighbouring house while fixing insulation boards on a metal canopy.

Authority / court

Fanling Magistrates' Courts, Hongkong (Anklage: Labour Department)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Factories and Industrial Undertakings Ordinance; Construction Sites (Safety) Regulations

Action

Fine

Status of proceedings

unknown

Sector

Construction and real estate

Published

14 Apr 2026

Original amount 730,000 HKD, converted at the ECB reference rate of 14 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Chevalier (Construction) was fined HKD 80,000 in January 2026 because on 23 February 2025 the company carried out prescribed construction work in breach of the conditions of its construction noise permit. It was the heaviest single fine among the 34 convictions reported by the Environmental Protection Department for January 2026.

Authority / court

Kwun Tong Magistrates' Courts, Hongkong (Anklage: Environmental Protection Department)

Area of law

Environment and sustainability · Emissions and permits

Legal basis

Noise Control Ordinance (Bauarbeiten entgegen den Bedingungen einer Construction Noise Permit)

Action

Fine

Status of proceedings

unknown

Sector

Construction and real estate

Published

23 Feb 2026

Original amount 80,000 HKD, converted at the ECB reference rate of 23 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded Kylin International (HK) and fined it HKD 9 million for failures as investment manager or consultant of six sub-funds of a Cayman Islands fund from August 2018. The SFC found that conflicts of interest arising from six loans by the firm or a director to four sub-funds were neither managed nor disclosed, reconciliations, valuations and audits were missing, investors were wrongly told that the suitability requirement did not apply, KYC and suitability controls were inadequate and anti-money laundering records were missing. The firm ceased its regulated activities at the end of 2023; its licence was revoked at its request in January 2025.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Section 194 Securities and Futures Ordinance (Cap. 571)

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial measures after an SFC review in late 2020, cessation of regulated activities and an otherwise clean disciplinary record.

Liability of senior managers

Measures against individuals are not set out here.

Published

9 Feb 2026

Original amount 9,000,000 HKD, converted at the ECB reference rate of 9 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

After a fatal accident on 19 August 2023 at a construction site in Chek Lap Kok, in which a worker received an electric shock while carrying out electrical work on a false ceiling, Hip Seng Builders had been fined HKD 261,000 on 23 January 2025. On the prosecution's application, the court reviewed the sentence and on 21 January 2026 increased the fines to HKD 521,000. The conviction was under the Factories and Industrial Undertakings Ordinance and two regulations on construction site and electrical safety.

Authority / court

West Kowloon Magistrates' Courts, Hongkong (Anklage: Labour Department)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Factories and Industrial Undertakings Ordinance; Construction Sites (Safety) Regulations; Factories and Industrial Undertakings (Electricity) Regulations

Action

Fine

Status of proceedings

unknown

Sector

Construction and real estate

Published

21 Jan 2026

Original amount 521,000 HKD, converted at the ECB reference rate of 21 Jan 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Saxo Capital Markets HK was publicly reprimanded and fined 4,000,000 HKD because between November 2018 and November 2022 retail clients, too, could trade on its online trading platform 32 complex virtual asset-related products which under the regulators' circulars were reserved for professional investors (1,446 transactions by 130 retail clients and six professional investors). The firm neither assessed clients' knowledge nor provided sufficient information and warnings; the detection rules adopted from its parent group had not identified the products as crypto-related.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 194 SFO (Cap. 571); Code of Conduct; Guidelines on Online Distribution and Advisory Platforms; SFC-Rundschreiben vom 01.11.2018 und HKMA/SFC-Rundschreiben vom 28.01.2022

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Self-report, voluntary compensation of clients, cessation of regulated activities, cooperation and acceptance of the findings, otherwise clean disciplinary record.

Published

6 Jan 2026

Original amount 4,000,000 HKD, converted at the ECB reference rate of 6 Jan 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded EFG Bank AG and fined it HKD 10,850,000 because, between January 2015 and December 2020, the bank failed to take special product features into account in its due diligence on 322 bonds, updated its policies late after the complex product regime took effect and in some cases served customers without the required information and warning statements. In addition, due diligence records were missing for 141 bonds, and the bank did not report the failures to the SFC immediately. The bank will apply an enhanced complaint handling procedure for customers who acquired one of 351 potentially affected products.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Section 196 Securities and Futures Ordinance (Cap. 571); Code of Conduct for Persons Licensed by or Registered with the SFC; Management, Supervision and Internal Control Guidelines

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Mitigating circumstances

Remedial measures on product due diligence, cooperation with the HKMA and the SFC, and commitment to an enhanced complaint handling procedure for affected customers.

Published

11 Dec 2025

Original amount 10,850,000 HKD, converted at the ECB reference rate of 11 Dec 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Tung Tai Securities was reprimanded and fined 900,000 HKD because between September 2019 and February 2020, acting on instructions from a bogus email address resembling the genuine one, it sold an overseas client's shares and transferred the proceeds of 3,301,740 USD to three overseas bank accounts not designated by the client. Red flags such as transfers rejected by several banks were ignored, and effective controls to protect client assets from theft and fraud were lacking.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 194 SFO (Cap. 571); Code of Conduct GP 2, GP 3, GP 8, paras. 4.3, 11.1(a); Management, Supervision and Internal Control Guidelines Part VII

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Compensation of the client, improved order-handling and execution procedures, independent review of controls, cooperation, otherwise clean disciplinary record.

Published

13 Nov 2025

Original amount 900,000 HKD, converted at the ECB reference rate of 13 Nov 2025.

Checked against the official source on 3 Oct 2026 · Direct link

UBS AG was publicly reprimanded and fined 8,000,000 HKD in Hong Kong because, from 2009 to July 2022, its automated process for classifying professional investors rested on a misinterpretation of the minimum portfolio requirement for certain joint accounts. From July 2018 to July 2022 alone, 560 joint accounts were misclassified; securities of 23 of these accounts were lent in 9,190 lending transactions without valid authority, and 94 accounts carried out 500 transactions in products reserved for professional investors. In August 2021 the regulator had already fined UBS 9.8 million HKD, among other things for similar failings.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 196 SFO (Cap. 571); s. 4 Securities and Futures (Client Securities) Rules; s. 11(3A) Securities and Futures (Contract Notes, Statements of Account and Receipts) Rules; Securities and Futures (Professional Investor) Rules; Code of Conduct

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Employees

10,000 or more

Repeat case

yes

Mitigating circumstances

Look-back review and remediation after self-reporting, cooperation, commitment to an enhanced complaint handling procedure for potentially misclassified clients.

Published

20 Oct 2025

Original amount 8,000,000 HKD, converted at the ECB reference rate of 20 Oct 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded Instinet Pacific and fined it HKD 8 million because, between December 2012 and March 2018, the broker failed to report 8,817 pairs of cross trades between clients and an affiliated company, worth around HKD 25.9 billion, to the Stock Exchange of Hong Kong as required by Rule 526 of the Exchange Rules. There were neither internal rules on reporting such trades nor any review of the reporting process.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Disclosure and reporting obligations

Legal basis

Section 194 Securities and Futures Ordinance (Cap. 571); Rule 526 Rules of the Exchange (SEHK); General Principles 2 und 7 sowie Paragraph 12.1 Code of Conduct

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Mitigating circumstances

The firm ceased the relevant trade flows on its own initiative and cooperated with the SFC.

Published

8 Sep 2025

Original amount 8,000,000 HKD, converted at the ECB reference rate of 8 Sep 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Deutsche Bank AG was publicly reprimanded and fined 23,800,000 HKD in Hong Kong. Clients were overcharged fees of about 5 million USD in management fees on 39 accounts, 10,988 EUR at 92 customers and 493 USD at 32 customers, because agreed discounts were not applied, floating rate debt instruments were wrongly valued and fund prices were not updated. 261 single stock and 1,590 industry research reports lacked disclosure of investment banking relationships. 40 ETFs were given too low a product risk rating. The proceedings stemmed from the bank's self-reports.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 196 SFO (Cap. 571); Code of Conduct GP 2, GP 7, paras. 2.1, 12.1, 16.5(d)

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Employees

10,000 or more

Culpability

negligent

Mitigating circumstances

Self-reports, root-cause analysis, remediation and stronger controls, refund of overcharged fees, breaches found by the regulator to be inadvertent and without intent, cooperation and acceptance of the findings.

Published

28 Aug 2025

Original amount 23,800,000 HKD, converted at the ECB reference rate of 28 Aug 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded The Hongkong and Shanghai Banking Corporation (HSBC) and fined it HKD 4.2 million because, between 2013 and 2021, the bank failed to disclose, or disclosed incorrectly, its investment banking relationships with the companies covered in research reports on Hong Kong-listed securities. The cause was deficiencies in recording and mapping data across systems; an estimated more than 4,200 reports were affected. Following a self-report, the HKMA investigated jointly with the SFC.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Disclosure and reporting obligations

Legal basis

Section 196 Securities and Futures Ordinance (Cap. 571); Paragraph 16.5(d), General Principles 2, 3 und 7 sowie Paragraph 12.1 Code of Conduct

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Employees

10,000 or more

Mitigating circumstances

No evidence of client losses, root-cause review, enhancement of systems and controls, and cooperation with the HKMA and the SFC.

Published

26 Aug 2025

Original amount 4,200,000 HKD, converted at the ECB reference rate of 26 Aug 2025.

Checked against the official source on 3 Oct 2026 · Direct link

At Kwong's Art Jewellery Trading Company Limited and its retail subsidiary My Jewelry Management Limited, which run their IT systems jointly, an attacker (reported in November 2024) obtained the credentials of an administrator account by brute force, exfiltrated the database and deleted it; around 79,400 individuals were affected, including customers and current and former employees. In its report published on 21 August 2025 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1), among other things because the account of a departed employee had not been deleted in time, server operating systems were outdated and security policies and security assessments were lacking. Both companies were served enforcement notices to remedy the deficiencies and prevent further contraventions.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Data breaches and data security

Legal basis

Personal Data (Privacy) Ordinance, Data Protection Principle 4(1); Enforcement Notices

Action

Order

Status of proceedings

unknown

Sector

Retail and e-commerce

Published

21 Aug 2025

Checked against the official source on 3 Oct 2026 · Direct link

The Hong Kong branch of Indian Overseas Bank was reprimanded, ordered to pay a pecuniary penalty of 8,500,000 HKD and required to carry out a look-back review of its transaction-monitoring alerts, submit a remedial plan and have its effectiveness assessed by an external adviser. Between May 2021 and January 2024 alerts were not properly followed up, unusual transactions of ten customers were not examined and documented, and senior management did not steer anti-money laundering controls effectively; a competent compliance officer, clear responsibilities and adequate training were lacking.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

s. 21(2)(a), (b), (c) AMLO (Cap. 615); Schedule 2 ss. 5(1)(c), 19(3), 23 AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

No previous disciplinary record under the AMLO, cooperation with the regulator.

Liability of senior managers

The regulator found that senior management did not take a clear leadership role in anti-money laundering and did not appoint a competent compliance officer; the decision contains no measures against individuals.

Published

22 Jul 2025

Original amount 8,500,000 HKD, converted at the ECB reference rate of 22 Jul 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The HKMA reprimanded the licensed stored value facility provider 33 Financial Services and ordered it to pay a pecuniary penalty of HKD 1.6 million. Between December 2019 and August 2023, a group made up of one corporate and five individual customers bought more than 49,000 gift cards for around HKD 25 million without the firm sufficiently establishing the purpose and nature of the business relationship; for ten customers whom it knew to be buying on behalf of businesses, those businesses were not subjected to due diligence. The firm also failed to ensure that business partners verified and documented the identity of non-Hong Kong resident customers in person.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Sections 33Q(2)(a) und 33Q(2)(b)(iii), Section 8Q Payment Systems and Stored Value Facilities Ordinance (Cap. 584) i. V. m. Section 6(2)(b) Part 2 Schedule 3; Guideline on AML/CFT (For Stored Value Facility Licensees)

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

yes

Mitigating circumstances

Remedial measures to improve controls and cooperation with the HKMA.

Published

22 Jul 2025

Original amount 1,600,000 HKD, converted at the ECB reference rate of 22 Jul 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The SFC publicly reprimanded Interactive Brokers Hong Kong and fined it HKD 4.2 million because, between December 2017 and October 2020, the broker lent securities listed on the Hong Kong stock exchange belonging to 7,911 clients on the basis of expired standing authorities. Owing to a programming error, the renewal notices had not been sent. This breached the Securities and Futures (Client Securities) Rules and the Code of Conduct.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Section 194 Securities and Futures Ordinance (Cap. 571); Sections 7 und 10 Securities and Futures (Client Securities) Rules; General Principles 7 und 8, Paragraphen 11.1(a) und 12.1 Code of Conduct

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Culpability

negligent

Mitigating circumstances

Self-report and remedial action, conduct not deliberate, no evidence of client loss, cooperation and acceptance of the findings.

Published

28 Apr 2025

Original amount 4,200,000 HKD, converted at the ECB reference rate of 28 Apr 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Hang Seng Bank was publicly reprimanded and fined 66,400,000 HKD. Relationship managers had induced 46 clients, whose fund transactions in 2016/2017 were recorded as their own choice, to trade excessively often with short holding periods; between 2014 and 2018, 388 clients without established knowledge of derivatives bought derivative funds in 629 transactions; and between 2014 and 2023 the bank improperly retained benefits, overcharged fees and inadequately disclosed trailer fees (at least 22.4 million HKD). The bank has compensated affected clients and refunded the amounts overcharged.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 196 SFO (Cap. 571); Code of Conduct for Persons Licensed by or Registered with the SFC

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Compensation of clients and refund of benefits, internal and independent reviews after self-reporting, cooperation with the Hong Kong Monetary Authority (HKMA) and the Securities and Futures Commission (SFC) and acceptance of the findings, no previous disciplinary record.

Published

27 Jan 2025

Original amount 66,400,000 HKD, converted at the ECB reference rate of 27 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

In January 2025 the Competition Tribunal (Hong Kong's specialist competition court) imposed allegedly agreed penalties on two cleaning companies that, from at least May 2016 to August 2018, exchanged confidential bid information in 17 tenders of the Hong Kong Housing Authority (the public housing authority) for cleaning services at public housing estates (contract value around 180 million HKD) – price fixing under the First Conduct Rule (the ban on anti-competitive agreements); the case came to light through a complaint from a group that included cleaners at a housing estate. Hong Kong Commercial Cleaning Services Limited received 10,960,000 HKD, and Man Shun Hong Kong & Kln Cleaning Company Limited received 11,300,000 HKD on 20 January 2025. The amount and the facts have not been confirmed against the primary source.

Authority / court

Competition Tribunal (Hongkong), auf Antrag der Competition Commission

Area of law

Competition law · Cartels and collusion

Legal basis

Competition Ordinance (Cap. 619), s. 6 (First Conduct Rule), s. 91 (Beteiligung), s. 93(1) (pecuniary penalty), ss. 101–102 (Disqualifikation)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Cooperation discount of 9% for Hong Kong Commercial Cleaning (admission only after the trial dates had been fixed, less than five months before trial); for Man Shun a cooperation discount of 15% (admission before any witness statements were filed) and a further 20% reduction because the full penalty would have undermined its viability; payment in four and eight quarterly instalments respectively.

Liability of senior managers

Measures against individuals are not set out here.

Published

20 Jan 2025

Original amount 22,260,000 HKD, converted at the ECB reference rate of 20 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The HKMA imposed a pecuniary penalty of HKD 4 million on China CITIC Bank International because, in the transaction monitoring system it used from November 2015, 13 of 33 detection rules and two core model rules were not implemented as intended until July 2018, so fewer alerts were generated. For 12 of 30 sampled customers, the bank did not examine the background and purpose of unusual transactions. The HKMA identified the lack of a maker-checker control over system values and inadequate acceptance testing as root causes.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Section 21(2)(c) Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615); Sections 5(1)(c) und 19(3) Schedule 2 AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial action, no previous disciplinary record under the AMLO and cooperation with the HKMA.

Published

6 Dec 2024

Original amount 4,000,000 HKD, converted at the ECB reference rate of 6 Dec 2024.

Checked against the official source on 3 Oct 2026 · Direct link

The HKMA imposed a pecuniary penalty of HKD 4 million on Fubon Bank (Hong Kong) because, between April 2019 and July 2022, the bank lacked effective procedures for changes to its transaction monitoring: data transfer from the core banking system was poorly controlled, acceptance tests were ineffective, and there were no procedures for following up a sharp fall in alerts from June 2019 or for regularly reviewing the scope of monitoring. Transactions of around 64,000 customers were not properly scrutinised, and for around 1,500 of them no trigger event review took place after dormant business relationships were reactivated.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Section 21(2)(c) Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615); Sections 19(3) und 5(1) Schedule 2 AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Self-report, cooperation, remediation of the deficiencies and no previous disciplinary record.

Published

8 Nov 2024

Original amount 4,000,000 HKD, converted at the ECB reference rate of 8 Nov 2024.

Checked against the official source on 3 Oct 2026 · Direct link

The e-wallet provider, a stored value facility licensee, must pay a pecuniary penalty of 875,000 HKD. From August 2016 to October 2021 it lacked adequate control systems to repeat customer due diligence upon trigger events and to apply enhanced due diligence in situations presenting a high risk of money laundering and terrorist financing. The company had self-reported the failings.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

ss. 8Q, 33Q(2)(a) PSSVFO (Cap. 584); Schedule 3 Part 2 s. 6(2)(b) PSSVFO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Self-report, remedial measures, no previous disciplinary record, cooperation.

Published

30 Aug 2024

Original amount 875,000 HKD, converted at the ECB reference rate of 30 Aug 2024.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 30 Aug 2026 · Direct link

The commercial bank must pay a pecuniary penalty of 10,000,000 HKD because it breached due diligence duties under the AMLO in various periods between April 2012 and April 2019. Among other things, up to July 2017 it did not verify the identity of 609 persons whom 477 corporate customers had registered as authorisers in its corporate internet banking, did not complete trigger-event reviews for 23 customers, failed to identify suspicious transactions when reviewing transaction-monitoring alerts for 15 customers and did not establish the source of wealth and funds of high-risk customers; record-keeping and procedural failings came on top.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

s. 21(2)(c) AMLO (Cap. 615); Schedule 2 ss. 5(1)(a), 5(1)(c), 15(a), 19(3), 20(3) AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial measures and improved AML controls, no previous disciplinary record under the AMLO, cooperation.

Published

5 Jul 2024

Original amount 10,000,000 HKD, converted at the ECB reference rate of 5 Jul 2024.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 5 Jul 2026 · Direct link

The HKMA imposed a pecuniary penalty of HKD 9 million on the Hong Kong branch of a Taiwanese commercial bank. Between April 2012 and July 2018 most alerts generated by the transaction monitoring system introduced in 2011 went unreviewed; after discovering this in 2018, the bank reviewed more than 2,200 customers and retrospectively filed 304 suspicious transaction reports on 504 customers. In addition, recipient names were missing from a number of cross-border wire transfers between March and July 2018.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Section 21(2)(c) Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615); Sections 5(1)(c), 19(3), 12(3) und 12(5) Schedule 2 AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

The bank identified and reported the deficiencies itself, took remedial measures, had no previous disciplinary record under the AMLO and cooperated in the proceedings.

Published

19 Apr 2024

Original amount 9,000,000 HKD, converted at the ECB reference rate of 19 Apr 2024.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 19 Apr 2026 · Direct link

After a ransomware attack in August 2023 on the technology park company, which is wholly owned by the Hong Kong government, data of 13,632 individuals were affected; data samples appeared on the dark web. On 2 April 2024 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of the data security duty (DPP 4(1)) and the retention limit (DPP 2(2)): brute-force attacks went undetected, remote access ran without multi-factor authentication, security audits were insufficient, the security policy lacked specificity, and data of 5,292 unsuccessful job applicants and former employees had been kept beyond the retention period. By enforcement notice, the company must among other things introduce multi-factor authentication, commission independent security audits every year and delete data held beyond the retention periods.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Data breaches and data security

Legal basis

Personal Data (Privacy) Ordinance (Cap. 486), Data Protection Principles 4(1) und 2(2); Enforcement Notice nach s. 50(1)

Action

Order

Status of proceedings

unknown

Sector

Public sector

Published

2 Apr 2024

Checked against the official source on 7 Oct 2026 · Company name anonymised since 2 Apr 2026 · Direct link

On 29 December 2023 the Competition Commission (Hong Kong's competition authority) accepted commitments from two food delivery platforms – the Hong Kong company of the first platform and the Hong Kong company of the second platform together with its parent company. Their agreements with partner restaurants contained exclusivity and pricing clauses which, in the authority's view, made it harder for new or small platforms to enter the market and could therefore breach the First Conduct Rule (the ban on anti-competitive agreements). The platforms must allow restaurants to work with platforms of up to 10% market share without losing the benefits granted to exclusive partners (such as lower commission rates), make switching easier and remove clauses that prohibit lower prices on the restaurants' own channels (and, for the first platform, on rival platforms); the first platform also drops the tie to its pick-up service, and the commitments run for three years.

Authority / court

Competition Commission (Hongkong)

Area of law

Competition law

Legal basis

Competition Ordinance (Cap. 619), s. 6(1) (First Conduct Rule); Annahme von Verpflichtungszusagen nach s. 60

Action

Order

Status of proceedings

final

Sector

Media and online platforms

Published

29 Dec 2023

Checked against the official source on 7 Oct 2026 · Company name anonymised since 29 Dec 2025 · Direct link

After data of 2.6 million of the marketplace's users worldwide, including 324,232 accounts in Hong Kong, had been offered for sale on an online forum, the PCPD found that the marketplace's Hong Kong entity had breached DPP 4(1). The cause was a vulnerability in an application programming interface introduced during a system migration in January 2022; there was no privacy impact assessment, no complete code review, no thorough security assessment, no written code review policy and no effective detection measures. The PCPD issued an enforcement notice even though the systems were run centrally by the group.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Data breaches and data security

Legal basis

Data Protection Principle 4(1) Schedule 1 und Section 50(1) Personal Data (Privacy) Ordinance (Cap. 486)

Action

Order

Status of proceedings

unknown

Sector

Media and online platforms

Mitigating circumstances

Prompt data breach notification to the PCPD and affected users, cooperation with the investigation, voluntary acknowledgement of its deficiencies, and technical and organisational measures taken by the group after the incident.

Published

21 Dec 2023

Checked against the official source on 7 Oct 2026 · Company name anonymised since 21 Dec 2025 · Direct link

A supervisor at the luxury fashion company shared a photo of an employee's medical diagnosis certificate in a work chat group of around 14 members and forwarded the employee's sick note to another group of around 10 members. The PCPD regarded this as use of health data for a new purpose without express consent and thus a breach of DPP 3(1). It issued an enforcement notice requiring policies, their inclusion in training, staff awareness measures and regular monitoring.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Employee data

Legal basis

Data Protection Principle 3(1) Schedule 1 Personal Data (Privacy) Ordinance (Cap. 486)

Action

Order

Status of proceedings

unknown

Sector

Retail and e-commerce

Published

21 Dec 2023

Checked against the official source on 7 Oct 2026 · Company name anonymised since 21 Dec 2025 · Direct link

The stored value facility licensee was reprimanded and must pay a pecuniary penalty of 1,575,000 HKD. From February 2019 to mid-July 2020 it lacked adequate transaction-monitoring controls under the AML guideline for SVF licensees, and from August 2016 to August 2020 it lacked sound governance, an effective risk management framework and a robust internal control system. The company therefore did not meet minimum criteria for its licence.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

ss. 8Q, 33Q(2)(a), 33Q(2)(b)(iii) PSSVFO (Cap. 584); Schedule 3 Part 2 ss. 5(1)(d), 6(2)(b) PSSVFO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial measures (some at the regulator's request), no previous disciplinary record, cooperation.

Published

18 Dec 2023

Original amount 1,575,000 HKD, converted at the ECB reference rate of 18 Dec 2023.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 18 Dec 2025 · Direct link

The corporate finance adviser was publicly reprimanded, fined 20,000,000 HKD and may not act as a sponsor for listing applications on the Stock Exchange of Hong Kong for at least one year from 18 August 2023 and, beyond that, until the regulator is satisfied with its sponsor controls. Across six listing applications it filed as sponsor between 2015 and 2017, three applications each lacked adequate due diligence on material business issues, correct advice on listing eligibility or disclosure of material information in the draft prospectus, and for all six the due diligence work was not properly documented.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

s. 194 SFO (Cap. 571); Code of Conduct GP 2, GP 7, para. 12.1 und Kapitel 17 (u. a. paras. 17.1(b), 17.2, 17.3(b), 17.4, 17.6, 17.9(a), 17.10(c)); Corporate Finance Adviser Code of Conduct paras. 1.5, 2.3, 5.1, 5.7; Practice Note 21 der Listing Rules paras. 2 und 4

Action

Fine

Status of proceedings

final

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

The firm's financial position (otherwise a heavier fine), commitment to an independent review of the sponsor business, cooperation, otherwise clean disciplinary record.

Published

21 Aug 2023

Original amount 20,000,000 HKD, converted at the ECB reference rate of 21 Aug 2023.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 21 Aug 2025 · Direct link

The Hong Kong branch of a Swiss private bank must pay a pecuniary penalty of 16,000,000 HKD. Despite known red flags, from February 2016 to January 2018 it did not verify in a timely manner the identity of 147 customers transferred from another institution and of their beneficial owners; from April 2012 to October 2018 it also failed to adequately verify the beneficial owners of 33 higher-risk customers, did not terminate 23 of these relationships in time and omitted trigger-event reviews of unusually large transactions of 33 customers.

Authority / court

Hong Kong Monetary Authority (HKMA)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

s. 21(2)(c) AMLO (Cap. 615); Schedule 2 ss. 3(1), 3(3), 3(4)(b), 5(1)(a), 19(3) AMLO

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Repeat case

no

Mitigating circumstances

Remedial and enhancement measures, no previous disciplinary record under the AMLO, cooperation with the regulator.

Published

15 Aug 2023

Original amount 16,000,000 HKD, converted at the ECB reference rate of 15 Aug 2023.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 15 Aug 2025 · Direct link

On 14 June 2023 the Competition Tribunal (Hong Kong's specialist competition court), on a joint application with the Competition Commission (Hong Kong's competition authority), imposed pecuniary penalties on three suppliers of mail inserters of the same brand that had fixed prices, shared markets and rigged bids between April 2018 and January 2019 (breach of the First Conduct Rule). The brand manufacturer's two Hong Kong companies (which formerly traded under the brand name) pay 1,399,000 HKD together, the second supplier 3,372,000 HKD and the third supplier 808,000 HKD, 5,579,000 HKD in total; in addition each pays 476,101 HKD in investigation costs plus legal costs. It was the first case in which all parties under investigation cooperated with the authority under its cooperation policy already at the investigation stage; in return the Commission refrained from pursuing the employees involved.

Authority / court

Competition Tribunal (Hongkong), auf Antrag der Competition Commission

Area of law

Competition law · Cartels and collusion

Legal basis

Competition Ordinance (Cap. 619), s. 6 (First Conduct Rule), s. 93 (pecuniary penalty), s. 96 (Ermittlungskosten)

Action

Fine

Status of proceedings

final

Sector

Manufacturing and mechanical engineering

Mitigating circumstances

Cooperation discounts of 25% (brand manufacturer, second supplier) and 28% (third supplier); liability and penalties agreed by consent.

Published

15 Jun 2023

Original amount 5,579,000 HKD, converted at the ECB reference rate of 14 Jun 2023.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 14 Jun 2025 · Direct link

The SFC publicly reprimanded the securities firm and fined it HKD 6 million over its conduct as placing agent for the then majority shareholder of another company in November and December 2019. The firm entered into trades at prices that differed from the agreed placing price, transferred the shares to the purchasers without prior payment and carried out an unverified third-party instruction to transfer part of the shares free of charge. The SFC regarded this as grossly negligent.

Authority / court

Securities and Futures Commission (SFC), Hongkong

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Section 194 Securities and Futures Ordinance (Cap. 571); Code of Conduct for Persons Licensed by or Registered with the SFC

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Culpability

negligent

Repeat case

no

Mitigating circumstances

Insufficient evidence of dishonesty or recurrent misconduct; otherwise clean disciplinary record.

Published

18 May 2023

Original amount 6,000,000 HKD, converted at the ECB reference rate of 18 May 2023.

Checked against the official source on 7 Oct 2026 · Company name anonymised since 18 May 2025 · Direct link