The Definitive 2026 Checklist for Setting Up a Licensed TCSP Company in Hong Kong
The definitive 2026 checklist for setting up a licensed TCSP company in Hong Kong — covering every pre-application, submission, and post-approval requirement.
The Definitive 2026 Checklist for Setting Up a Licensed TCSP Company in Hong Kong
Last Reviewed: June 2026 | Originally Published: January 2026
Setting up a licensed Trust Company Service Provider (TCSP) in Hong Kong requires satisfying a precise set of statutory, structural, and operational conditions governed by the Companies Ordinance (Cap. 622) and enforced by the Hong Kong Companies Registry. Every applicant must hold a valid TCSP licence before conducting any regulated trust or company services — there are no provisional exceptions. This checklist covers every mandatory requirement for 2026, from pre-incorporation planning through to post-approval compliance infrastructure.
Why the 2026 Regulatory Environment Demands Greater Preparation
Hong Kong's TCSP licensing regime has become progressively more demanding since its introduction under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). The Financial Action Task Force (FATF), in its most recent Mutual Evaluation Report on Hong Kong, highlighted that designated non-financial businesses and professions — including TCSPs — face increased scrutiny over client due diligence procedures and beneficial ownership transparency. According to the Hong Kong Companies Registry, over 7,800 entities held active TCSP licences as of early 2025, reflecting the jurisdiction's maturity as a trust services hub serving clients across Singapore, London, the Cayman Islands, British Virgin Islands, and Switzerland.
For new applicants, this competitive and tightly regulated landscape means preparation is not optional — it is the primary determinant of whether an application succeeds or stalls.
The TCSP licensing framework in Hong Kong is one of the most structurally rigorous in Asia-Pacific. Firms that treat the application as an administrative exercise rather than a compliance architecture project consistently face delays, requests for information, and rejection. Preparation begins months before a single form is submitted.
The Definitive Pre-Application Checklist
1. Company Incorporation and Registered Address
- Incorporate a Hong Kong limited company under the Companies Ordinance (Cap. 622)
- Secure a physical, operational registered address in Hong Kong — virtual offices do not satisfy the substance requirement
- Ensure the company's Memorandum and Articles of Association explicitly authorise TCSP activities
- Register with the Inland Revenue Department and obtain a Business Registration Certificate
2. Fit-and-Proper Assessment for Responsible Persons
The Companies Registry applies a fit-and-proper test to all individuals named as responsible persons on a TCSP application. This covers:
- No convictions for fraud, dishonesty, or money laundering offences
- No history of regulatory sanctions in Hong Kong or equivalent overseas jurisdictions
- Demonstrated competence in trust and company services administration
- Submission of personal declarations, identity documents, and CV evidence for each responsible person
Applications naming responsible persons who have previously been directors or officers of a struck-off or sanctioned firm face automatic enhanced scrutiny.
3. Appointment of a Compliance Officer and MLRO
- Designate a qualified Compliance Officer responsible for day-to-day AML/CFT adherence
- Appoint a Money Laundering Reporting Officer (MLRO) with relevant financial crime compliance experience
- Both roles may be held by the same individual in small firms, but dual-role holders must demonstrate capacity to perform both functions independently
- Document role descriptions, reporting lines, and escalation procedures before application submission
For firms uncertain whether to hire in-house or outsource these roles, reviewing the practical trade-offs is essential — our detailed analysis on outsourcing vs in-house TCSP compliance officer responsibilities covers the key decision factors.
4. AML/CFT Policy Framework
This is where many applicants underestimate the workload. The Companies Registry requires evidence of a documented, operational AML/CFT framework. Required components include:
- Written AML/CFT Policy approved by senior management
- Customer Due Diligence (CDD) procedures including standard, simplified, and enhanced due diligence protocols
- Politically Exposed Person (PEP) screening processes
- Sanctions screening procedures aligned with UNSC, OFAC, and HK Monetary Authority lists
- Suspicious Transaction Reporting (STR) procedures and internal reporting workflows
- Record-keeping policies meeting the six-year retention requirement under AMLO
- Staff AML training programme with documented delivery schedules
A compliant AML/CFT framework is not a folder of policy templates — it is a living operational system. The Companies Registry expects applicants to demonstrate that policies are implemented, tested, and understood by all relevant staff. Template-based submissions without evidence of operational embedding are the leading cause of application rejection in 2026.
5. Business Plan and Client Risk Assessment
- Submit a detailed business plan describing the types of TCSP services to be offered
- Include a client risk assessment methodology that classifies clients by jurisdiction, entity type, ownership structure, and purpose
- Identify the geographic markets to be served — clients in Singapore, London, Cayman Islands, BVI, and Switzerland each carry distinct risk profiles that must be addressed in the risk assessment methodology
- Demonstrate that the firm's proposed fee structure and staffing model are proportionate to the risk exposure described
6. Technology and Operational Infrastructure
Applications submitted in 2026 are increasingly evaluated on the operational credibility of the proposed compliance infrastructure. Firms without a structured client management or compliance tracking system face questions about their capacity to meet ongoing obligations.
Leading TCSP applicants are turning to purpose-built SaaS platforms for client and compliance management — such as the platform offered by Bridge Corporate Services — to demonstrate system-level readiness before approval. A purpose-built compliance platform signals to the Companies Registry that the firm has invested in sustainable operational infrastructure, not just paper-based procedures.
Minimum infrastructure requirements include:
- A secure client record management system with audit trail capability
- Automated or semi-automated sanctions and PEP screening
- Document storage meeting data retention and security obligations
- Workflow tools for CDD refresh cycles and ongoing monitoring
The Application Submission Checklist
7. Form CR-TCSP1: The Core Application
- Complete Form CR-TCSP1 in full — incomplete submissions are returned without assessment
- Attach certified copies of the company's Certificate of Incorporation and Business Registration Certificate
- Provide a schedule of all TCSP services to be offered, mapped to the definitions in Schedule 1 of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance
- Pay the prescribed application fee (currently HK$9,180 for a new licence application, as published by the Companies Registry)
8. Supporting Documentation Package
- Personal declaration forms for each responsible person
- Proof of registered address (lease agreement or equivalent)
- Organisational chart with compliance reporting lines
- AML/CFT Policy document
- Business plan
- CVs and qualification evidence for Compliance Officer and MLRO
- Audited financial statements or evidence of financial standing (for firms with existing operations)
Post-Approval Compliance Obligations Checklist
Obtaining a TCSP licence is not the end of the compliance journey — it is the beginning. The following obligations activate immediately upon licence issuance.
9. Ongoing AML/CFT Monitoring
- Conduct periodic CDD reviews for all existing clients based on risk classification
- Perform enhanced due diligence (EDD) for high-risk clients, PEPs, and clients from higher-risk jurisdictions
- Submit Suspicious Transaction Reports to the Joint Financial Intelligence Unit (JFIU) where required
- Maintain accurate beneficial ownership records for all client entities
10. Annual Licence Renewal
- Submit renewal application to the Companies Registry before licence expiry
- Confirm no material changes to responsible persons, business scope, or AML/CFT framework without prior notification
- Pay the annual renewal fee of HK$7,320 (as published by the Companies Registry)
- Update the AML/CFT policy and risk assessment methodology to reflect any regulatory guidance issued during the preceding year
11. Staff Training and Competency Records
- Deliver AML/CFT training to all relevant staff at least annually
- Maintain signed attendance records and training materials
- Update training content to incorporate FATF typologies updates and Companies Registry guidance circulars
12. Regulatory Notifications and Record-Keeping
- Notify the Companies Registry within 14 days of any change to responsible persons, registered address, or material business changes
- Retain all client records, transaction records, and CDD documentation for a minimum of six years
- Ensure records are accessible for inspection by authorised officers within a reasonable timeframe
Frequently Asked Questions
Q: What is the minimum timeline to obtain a TCSP licence in Hong Kong in 2026?
The Companies Registry targets a processing time of approximately six weeks from the date a complete application is received. In practice, applications with deficiencies or requests for further information extend to three to five months. Firms with a complete, well-documented submission — including a fully operational AML/CFT framework — consistently achieve approval within the six-to-ten-week window.
Q: Do I need a physical office in Hong Kong to hold a TCSP licence?
Yes. The Companies Registry requires applicants to demonstrate a genuine Hong Kong operational presence. A registered address at a virtual office provider does not satisfy this requirement. The premises must be capable of hosting business operations, storing client records securely, and receiving regulatory inspections.
Q: Can an overseas corporate service provider from the BVI, Cayman Islands, or Singapore apply for a Hong Kong TCSP licence?
Yes. Overseas firms from Singapore, the BVI, Cayman Islands, London, and Switzerland regularly apply for and obtain Hong Kong TCSP licences. The same statutory requirements apply regardless of the applicant's origin jurisdiction. Overseas applicants face additional scrutiny around the fit-and-proper assessment of directors and responsible persons, and are advised to engage expert guidance on Hong Kong TCSP regulations well in advance of submission.
How End-to-End TCSP Consulting Reduces Risk at Every Stage
The checklist above reflects the official requirements — but navigating each item in practice is where complexity accumulates. Bridge Corporate Services provides end-to-end TCSP company setup and licensing consulting, guiding applicants from corporate structure design through to AML/CFT framework implementation, application submission, and post-approval compliance management. For firms that need structured support at every stage, working with a specialist consultant eliminates the risk of incomplete submissions, policy gaps, and post-approval compliance failures.
The Bridge Corporate Services SaaS platform for client and compliance management is purpose-built for licensed TCSPs operating in Hong Kong, providing real-time compliance dashboards, automated CDD workflow tracking, document retention tools, and sanctions screening integration — all configured to the specific requirements of the AMLO framework.
Key Regulatory Bodies and References
All TCSP applicants should maintain direct familiarity with the following authoritative sources:
- Hong Kong Companies Registry — the licensing authority for TCSP applications and renewals
- Financial Action Task Force (FATF) — sets international AML/CFT standards that underpin Hong Kong's AMLO framework
- Joint Financial Intelligence Unit (JFIU) — the body to which Suspicious Transaction Reports are submitted
- Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) — the primary legislative instrument governing TCSP obligations
For applicants evaluating whether Hong Kong is the right licensing jurisdiction relative to alternatives such as Singapore, London, or the Cayman Islands, the detailed comparative analysis on why Hong Kong remains Asia's premier jurisdiction for corporate trust services in 2026 provides a structured framework for that decision.
Final Checklist Summary
| Stage | Item | Status |
|---|---|---|
| Pre-Application | Hong Kong company incorporated | ☐ |
| Pre-Application | Physical registered address secured | ☐ |
| Pre-Application | Responsible persons fit-and-proper verified | ☐ |
| Pre-Application | Compliance Officer and MLRO appointed | ☐ |
| Pre-Application | AML/CFT framework documented and operational | ☐ |
| Pre-Application | Business plan and risk assessment completed | ☐ |
| Pre-Application | Compliance technology infrastructure in place | ☐ |
| Application | Form CR-TCSP1 completed | ☐ |
| Application | Supporting documentation package assembled | ☐ |
| Application | Application fee paid | ☐ |
| Post-Approval | Ongoing CDD monitoring programme active | ☐ |
| Post-Approval | Annual renewal scheduled | ☐ |
| Post-Approval | Staff training programme delivered | ☐ |
| Post-Approval | Record-keeping system operational | ☐ |
Every licensed TCSP in Hong Kong starts with a complete, accurate application — and sustains its licence through disciplined, system-supported compliance management. This checklist provides the structural framework; expert guidance and purpose-built technology deliver the execution certainty.