HKVAX combines professional exchange and negotiated OTC execution with custody and tokenization in Hong Kong.[2]
Markets, execution and professional services
Sections ↑The four service lines
| Service | Published role |
|---|---|
| OTC brokerage | Customized fiat/crypto transactions; USD, HKD, BTC, ETH, USDT and USDC are examples.Source 2 |
| Exchange | Professional-investor platform for virtual assets and security tokens.Source 2 |
| Custody | Safekeeping for institutional users and tokenized projects.Source 2 |
| Tokenization | Issuance/listing support and primary and secondary trading.Source 4 |
An OTC bitcoin purchase requires agreement on quantity, price and delivery. A tokenized security can also involve an issuer, an underlying claim, transfer restrictions and servicing arrangements. HKVAX’s tokenization capability does not establish that a particular instrument is listed or that an eligible buyer will be available when its holder wants to sell.[4]
HKVAX describes a proprietary matching engine and continuous exchange access. Independently measured spreads, executable depth and a comparable daily spot-volume series were not established.[1]
Fees, quotes and total execution cost
Sections ↑No numerical maker/taker schedule, standard OTC commission or custody tariff was established in the inspected service pages.[2]
For a commercial comparison, ask for the asset price, separate execution charge, custody cost and external-release cost. Compare the amount delivered for the same size, direction, destination and quote time.
Consider a hypothetical one-unit purchase with identical delivery. Proposal A costs USD 100,000 with no separate commission. Proposal B quotes USD 99,900 plus an assumed 0.20% charge: 99,900 × 1.002 = USD 100,099.80, or USD 99.80 more. This is editorial arithmetic, not an HKVAX tariff or quote; bank, custody, withdrawal and tax costs are excluded.
Cash, crypto and settlement
Sections ↑HKVAX describes same-day, or T+0, settlement. This is a stated service timing, not a guarantee for every bank credit or blockchain receipt.[2]
A settlement instruction should distinguish agreement, delivery and external release. The client needs to know which side delivers first, when the quote becomes binding and when the acquired asset can be moved.
Bank routes, card support, transfer minimums, withdrawal networks and standard charges were not established in the inspected materials.[2]
For cash, verify the beneficiary, currency and reference. For crypto, verify the asset, network and assigned receiving address. Preserve the trade confirmation and delivery reference separately so that an execution discrepancy can be distinguished from a transfer delay.
Asset controls and insurance scope
Sections ↑Thales’ case study describes HKVAX using Luna hardware security modules for cryptographic key generation, storage and transaction signing. It also describes hot/cold wallet separation, role-based access and disaster-recovery arrangements. These are attributed descriptions of the deployed custody architecture. Hardware certification concerns the security module and its defined controls; it is not a guarantee of the solvency, pricing or uninterrupted availability of the entire exchange.[9]
What the custody evidence establishes
| Evidence | Supported conclusion | Limit |
|---|---|---|
| Hardware key controls | Thales describes key operations in certified hardware. | The case study is a vendor account, not the complete independent audit report.Source 9 |
| Wallet architecture | HKVAX’s licensing announcement describes multiple-signature controls and hot/cold separation. | No personal private-key control is established for a custodial client.Source 4 |
| Insurance | HKVAX promotes coverage for assets held in custody. | No reviewed policy establishes a named customer payout, aggregate cap, deductible or complete exclusions.Source 1 |
| Compliance monitoring | Bitrace cooperation covers transaction monitoring and suspicious-fund tracing. | Monitoring can support review; it does not preapprove every incoming transfer.Source 10 |
HKVAX advertises custody insurance; its public page does not establish a per-client limit, deductible or complete claims wording.[1]
A policy assessment needs the policyholder, covered events, aggregate limits and claims process. For a substantial balance, obtain the policy summary and custody agreement, including the treatment of compromised customer credentials.
Client admission and account scope
Sections ↑HKVAX’s product page targets professional investors, including institutions, asset managers, funds, brokers and high-net-worth individuals.[2]
The documented scope does not support assuming admission for every Hong Kong retail or overseas resident. Client classification, residence, beneficial ownership and the proposed transaction all need account-specific confirmation.
Access questions for the intended client
| Client situation | Relevant service context | What approval needs to establish |
|---|---|---|
| Fund or institutional treasury | Professional execution and custody. | The contracting entity, authorized traders and settlement signatories.Source 4 |
| Broker seeking distribution | HKVAX and Victory announced an exploratory brokerage/distribution partnership. | Whether the actual broker arrangement is live and which firm contracts with the end client.Source 11 |
| Issuer or tokenized project | Token issuance, listing and secondary-market infrastructure. | Instrument rights, investor eligibility, transfer restrictions and servicing responsibilities.Source 1 |
Elliptic announced wallet-screening and transaction-monitoring tools for HKVAX in March 2021. This is historical evidence of compliance infrastructure, not a current accepted-document or country list. The requirements supplied for the proposed account remain necessary; a vendor partnership is not an account-opening checklist.[12]
Support, outages and impersonation
Sections ↑HKVAX’s published fraud notice dated 2 January 2025 identifies its official website and states that it did not have an official mobile app. Its current news index also lists a further impersonation warning in September 2026. The dated statement should not be stretched into a complete current device-capability inventory; it does make verification of any app invitation or unofficial download particularly important. Obtain an app or client-portal route from the established company contact.[5][7]
Official contact routes
Scope Company information and verified starting point for the client relationship.
Scope Address in HKVAX’s official impersonation warning; not documented as a telephone dealing substitute.
The news index records system-upgrade notices dated 13 July and 2 September 2026. The inspected index does not reveal the complete affected-service windows or standing instructions for emergency order handling. The useful operational arrangement is an agreed client escalation channel, a method to establish whether an order was accepted and a documented cancellation procedure. Sending a support request should not be treated as confirmation that a trade or cancellation has been executed.[7]
Authorisations and their limits
Sections ↑The SFC lists Hong Kong Virtual Asset Exchange Limited (HKVAX), BPW549, licensed on 3 October 2024.[3]
HKVAX’s corresponding announcement identifies Type 1, Type 7 and AMLO permissions.[4]
The dynamically rendered SFC register conditions were not fully retrievable. This profile retains the documented professional-service scope and makes no broader access inference.
Operator, development and commercial reach
Sections ↑HKVAX dates its inception to 2019 and describes infrastructure connecting professional investors, issuers and financial institutions.[1][13]
The reviewed materials did not establish comparable active-client or turnover figures. Its service role can be described, but a numerical global league-table position cannot be supported by those materials.
Partnership evidence and its actual scope
| Announcement | Purpose | Evidence boundary |
|---|---|---|
| Victory Securities — January 2025 | Explore brokerage, distribution and tokenization opportunities. | An MOU is not proof that every contemplated customer route has launched.Source 11 |
| Bitrace — March 2025 | Monitoring, investigation, fund tracing and anti-fraud cooperation. | The announcement does not disclose a customer withdrawal-review deadline.Source 10 |
| Microsoft — April 2025 | Cloud, security infrastructure and AI-related development. | An announced technology program does not prove autonomous customer trading.Source 8 |
- Operator
- Hong Kong Virtual Asset Exchange Limited
- Exchange model
- Centralised
- Service scope
- Professional OTC and exchange execution, custody and tokenization. A complete live listing inventory was not established.
- Client types
- Professional clients; Institutional clients
- Pricing publication
- Not disclosed
- Funding scope
- Same-day OTC settlement is advertised. Bank routes, cut-offs, network support and withdrawal tariffs require account-specific confirmation.
- Custody and asset handling
- Provider-controlled custody; published wallet separation and insurance claims, with a Thales hardware-key-management case study. No public per-client insurance limit or full custody contract established.
- Client eligibility
- Professional/institutional service; residence, client classification and product approval remain subject to admission. No complete accepted-country matrix established.
- Support
- Official website and client relationship contact; anti-fraud reporting address [email protected] is published in HKVAX’s official warning.
- Authorisation and registration scope
- SFC-listed Hong Kong operator; company reports Type 1, Type 7 and AMLO permissions. Professional client and product scope applies.
Exchange metadata checked 21 Oct 2026Source 1Source 2Source 3Source 4Source 9Source 6
Covered contracting entities
Operational fit, records and connected systems
Sections ↑The Microsoft announcement is expressly an infrastructure collaboration. Its cloud and AI ambitions do not document a client-facing assistant with authority to place orders, change payment destinations or move assets. Similarly, professional matching infrastructure does not establish a public API permission model. Any automated connection should have its permitted accounts, actions, credential controls and revocation procedure documented in the agreed implementation.[8]
The public company material did not establish export formats, tax calculations, post-closure statement access or a dormant-account timetable.[13]
For accounting, retain the quote, execution confirmation, custody movement and external-transfer reference separately. Agree record-access and exit provisions before relying on the service for an ongoing treasury process.
Sources & further reading
- HKVAX — official services and roadmap HKVAX · Accessed 21 Oct 2026
- What We Do HKVAX · Accessed 21 Oct 2026
- SFC list of formally licensed virtual asset trading platforms Securities and Futures Commission · Accessed 21 Oct 2026
- HKVAX Secures SFC Type 1, 7 and AMLO Licences HKVAX · Accessed 21 Oct 2026
- Warning Against Fraudulent Websites and Apps HKVAX · Accessed 21 Oct 2026
- HKVAX official fraud-warning post and reporting address HKVAX · Accessed 21 Oct 2026
- HKVAX News and Events HKVAX · Accessed 21 Oct 2026
- HKVAX collaboration with Microsoft Hong Kong Microsoft · Accessed 21 Oct 2026
- How HKVAX Strengthened Digital Asset Security with Thales Luna HSMs Thales · Accessed 21 Oct 2026
- HKVAX and Bitrace strategic partnership HKVAX · Accessed 21 Oct 2026
- HKVAX and Victory Securities strategic partnership HKVAX · Accessed 21 Oct 2026
- HKVAX Partners with Elliptic to Mitigate Financial Crime Risk Elliptic · Accessed 21 Oct 2026
- HKVAX — About Us HKVAX · Accessed 21 Oct 2026
This profile reports dated public information, including exchange-published services and terms. It does not independently test or guarantee trading, custody, pricing or withdrawals. Inclusion is not an endorsement. Permissions and protections apply only to the named legal entity, service and client category; check the current official records and your contract.