How the HKMA supervises banks that conduct securities business

Hong Kong uses a two-regulator arrangement for securities business carried on by banks. The bank is not treated exactly like a standalone securities firm, and the people working in its securities department do not follow the same individual licensing route as representatives of a licensed corporation.

The institution registers with the SFC

An authorized institution that carries on regulated activities covered by the registration regime must register with the SFC under the Securities and Futures Ordinance. Registered institutions may conduct regulated activities other than Type 3 leveraged foreign exchange trading and Type 8 securities margin financing. Those two categories are excluded from the registered-institution route described by the SFC. The bank remains an authorized institution under the banking framework; SFC registration addresses its securities regulated activities.

The HKMA supervises the bank day to day

The SFC describes the HKMA as the frontline regulator for securities and futures activities at banks and says the HKMA monitors those activities on a day-to-day basis. That means the SFC is not absent: it sets the securities framework, maintains the public register, and retains statutory powers. The HKMA brings the banking supervisory relationship to its ongoing oversight of the bank's conduct.

Bank staff use a different individual record

Relevant individuals performing regulated functions for a registered institution generally are not licensed or registered with the SFC in the same way as licensed representatives. Their particulars are entered in the Register of Securities Staff of Authorized Institutions maintained by the HKMA. The HKMA explains that authorized institutions must ensure those relevant individuals are fit and proper. Do not confuse this with a bank employee being free from conduct requirements: the different register reflects the institutional route, not an exemption from supervision.

Exam distinction

When a question asks who registers a bank or maintains the securities framework, identify the SFC. When it asks who conducts frontline, ongoing supervision of a bank's regulated securities business, identify the HKMA. When it asks where relevant bank employees are recorded, identify the HKMA Register of Securities Staff. These answers describe different layers of the same arrangement.

Key takeaway

Remember the split: SFC registration and statutory framework; HKMA frontline day-to-day supervision; HKMA register for relevant bank securities staff.

Two regulators, different legal roles

An authorized institution (AI) conducting securities business sits within a divided framework. The HKMA is the institution’s frontline prudential supervisor, while the SFC is the statutory regulator for securities and futures activities. The SFO provides a route for an AI to be registered with the SFC for specified regulated activities instead of being licensed as an ordinary intermediary. The arrangement avoids treating a bank as though it were a standalone securities firm, but it does not remove conduct obligations or make securities activity outside the SFC framework.

Who may perform the activity

For an AI’s registered activity, the relevant executive officers and individuals must satisfy the applicable registration and competence requirements and appear in the appropriate public records. A bank employee’s job title or employment by a bank is not, by itself, authorization to conduct every regulated activity. The entity’s scope of registration, the person’s permitted activity and capacity, and any conditions all matter. In a fact pattern, ask first which legal entity provides the service, then which activity it performs, and finally whether the individuals and supervisory arrangements are properly registered.

How supervision works in practice

The HKMA assesses the AI as a whole: governance, capital and liquidity where relevant, risk management, controls, management accountability, and the way the securities business interacts with the banking business. SFC conduct standards remain important, and the SFC can exercise statutory powers concerning regulated activity. The agencies cooperate and may coordinate information or supervisory work. This is not a simple division in which the HKMA handles every bank issue and the SFC handles every customer complaint; the nature of the issue, the legal power and the responsible entity determine the route.

Exam scenario and common errors

If a bank employee gives investment advice, do not answer merely “HKMA regulated” because the employer is a bank. Identify the advice as a regulated activity, check the AI’s SFC registration and the individual’s status, and then recognize the HKMA’s supervisory role over the institution. Conversely, do not describe the AI as an ordinary SFC-licensed corporation if the question is testing registration of an AI. The exam may contrast prudential oversight, intermediary conduct, and individual registration; state each role rather than collapsing them into one regulator.

Implementation and review

The framework also makes accountability inside the AI important. Senior management should know which business lines are registered, who is responsible for them, what conduct controls apply and how issues reach the board. If the same institution offers deposits, lending and investment products, information barriers and conflict controls may be needed. A customer complaint can raise both a product-conduct question and a broader prudential or governance concern. The institution should route it according to substance, preserve evidence and coordinate internally rather than assume that one regulator’s involvement excludes the other’s legitimate role.

A practical review checklist

For exam recall, use three labels: the AI is registered for the activity; the relevant individual is registered and fit to perform it; the HKMA supervises the institution, while SFC statutory conduct requirements and powers remain relevant. If the question concerns capital, governance or a bank-wide control, emphasize the HKMA’s prudential role. If it concerns client treatment in securities dealing, identify the SFC conduct framework as well. Where the issue touches both, explain cooperation rather than forcing an exclusive answer.