Content as of September 2026. Reviewed quarterly against the latest Customs and Excise Department publications.
In February 2026, ZTO Digital Technology (Hong Kong), a member of ZTO Pay, obtained a Money Service Operator (MSO) licence from Hong Kong's Customs and Excise Department (C&ED); earlier, a subsidiary of GRG Banking Equipment had been granted the same licence in October 2025. Behind the queue of mainland payment and technology companies lies one logic: for cross-border money flows, the MSO licence is Hong Kong's compliance gateway.
Based on the C&ED's official guidance and public materials, this article sets out the MSO licence's scope, eligibility, process, and the latest regulatory developments in 2026.
1. What Is the MSO Licence
The MSO licence is issued by the C&ED under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) (AMLO) and covers two categories of business:
- Money changing;
- Remittance services.
The C&ED has been the sole licensing and supervisory authority for MSOs since April 2012. Operating a money service without a licence is a criminal offence, punishable by a fine of up to HK$1 million and two years' imprisonment.
Two exemptions are worth noting: currency exchange or remittance conducted as incidental to a main business (for example, a retail business accepting foreign currency), and one-way exchange services provided by hotel operators for their guests, do not require a licence.
2. Who Needs This Licence
Judging by the profile of recent licensees, the MSO has long ceased to be a "money-changer's licence" — it is infrastructure-level qualification for cross-border money businesses:
- Third-party payment companies expanding cross-border acceptance and payout;
- Cross-border e-commerce platforms and service providers collecting and settling funds;
- Multi-currency account and settlement services.
3. Eligibility: Three Thresholds
1. Fit and proper. The C&ED must be satisfied that the sole proprietor, every partner, every director, and every ultimate owner of the applicant is a fit and proper person — background checks cover all relevant individuals.
2. Physical premises. A physical office or actual place of business in Hong Kong is mandatory, and the C&ED conducts on-site inspections. Purely virtual addresses or secretary-company addresses are not accepted. For mixed-use premises, written consent from occupants is required.
3. AML capability. Applicants must submit AML/CTF policies, a risk assessment mechanism, and customer due diligence procedures meeting the AMLO's requirements — and pass the C&ED's competence assessment. Introduced in 2023, the assessment covers seven areas: AML fundamentals, Parts 1 to 7 of the AMLO, the AMLO's schedules, the C&ED's regulatory guidelines, institutional-level compliance strategy, internal control design, and compliance monitoring and ongoing review.
4. Process and Timeline
- Entity preparation: incorporate the operating company in Hong Kong;
- Self-assessment: work with professional advisers familiar with the C&ED's vetting practice to diagnose the readiness of your business model, personnel, and documentation before deciding whether to file;
- Documentation: application form, business plan (business model, target customers, fund flows and transaction processes), AML/CTF policies, and identity and background documents for relevant persons;
- Submission and fee: file via the C&ED's online system or by post;
- Interview and inspection: meet C&ED officers, sign documents, and undergo an on-site inspection;
- Grant of licence: issued upon approval, valid for two years.
The full process typically takes four to six months, longer for complex cases. Renewal applications must be filed no later than 45 days before expiry — miss the window and you apply from scratch.
5. Regulatory Trends in 2026: Three Signals
Signal one: licensing and enforcement are tightening in parallel. The C&ED has continued disciplinary action against non-compliant licensees in recent years — public reprimands, fines (up to HK$10 million or three times the profit gained or expense avoided, whichever is higher), and orders to remediate. The most common violations are strikingly basic: failure to report changes in bank account details, changing directors or adding premises without approval, and failing to display the licence at the premises. Post-licensing compliance maintenance matters as much as the application itself.
Signal two: mainland institutions are accelerating their build-out. The ZTO and GRG cases show mainland payment and fintech companies using the MSO as a fulcrum for cross-border settlement networks connecting Southeast Asia, Europe, and the Americas. For companies going global, "Hong Kong entity + MSO licence + banking relationships" has become a standard component of cross-border fund-flow architecture.
Signal three: licence portfolio design is the new frontier. The boundaries and combinations between the MSO and other financial licences — such as the Stored Value Facility (SVF) licence — need to be settled at the architecture stage, to avoid reapplying after the business expands.
6. Next Step
If you are evaluating whether the MSO licence fits your business, or are already preparing an application, come talk to us. We can start with an application-readiness diagnostic: how to frame your business model, how to arrange personnel and premises, and how to build the AML framework — solving problems before filing, not after.
Book a 25-minute consultation and tell us about your plans →
This article is based on the Customs and Excise Department's official guidance and HKSAR Government press releases. It is for reference only and does not constitute legal advice. Requirements are subject to the C&ED's latest publications. The register of licensed MSOs is updated daily and searchable via the C&ED's Money Service Operators Licensing System and the government's DATA.GOV.HK portal.
Sources:
- Customs and Excise Department (C&ED) — MSO Licensing Guide, application form guidance notes, register of licensees
- Information Services Department, HKSAR Government — press releases on C&ED disciplinary actions