Civil and Criminal Dimensions of Sponsor Legal Liability: A Review of Recent Case Law

The SFC’s Enforcement Division concluded 2024 with a record HKD 2.8 billion in aggregate financial penalties and disgorgement orders against market intermediaries, a figure that includes a single HKD 1.59 billion settlement with a former sponsor for failures in a 2009 listing. This trajectory shows no sign of abating in 2025: the Market Misconduct Tribunal (MMT) has already issued two liability rulings against sponsor firms in Q1 2025, and the Court of Final Appeal (CFA) is expected to deliver judgment in the landmark SFC v. Standard Chartered Bank (Hong Kong) Ltd. appeal before year-end. For SFC Type 6 and Type 6A licence holders, the legal landscape has bifurcated into two distinct risk regimes: civil liability under the Securities and Futures Ordinance (SFO) for negligent due diligence, and criminal liability under the same statute for reckless or intentional misconduct. The distinction is not academic. A civil finding under SFO s.213 can trigger disqualification orders and unlimited compensation claims from investors, while a criminal conviction under SFO s.103 or s.298 carries imprisonment of up to 10 years and automatic revocation of the sponsor’s licence under the Code of Conduct for Persons Licensed by or Registered with the SFC (the Code of Conduct), para. 12.3. This article examines the recent case law that has defined the boundary between these two dimensions of sponsor liability, and what the pending CFA ruling means for due diligence standards in Hong Kong.

The Civil Liability Standard: Negligence and the Duty of Care

The civil liability framework for sponsors rests primarily on SFO s.213, which empowers the Court of First Instance to grant injunctions and make remedial orders against persons who have contravened any provision of the SFO or the Code of Conduct. The leading authority remains SFC v. Sun Hung Kai International Limited [2022] 3 HKLRD 1, in which the Court held that a sponsor owes a duty of care to the investing public at large, not merely to its client issuer. The judgment established that a breach of the Code of Conduct — specifically paras. 17.1 to 17.9 on due diligence — constitutes a contravention of the SFO for the purposes of s.213.

The Sun Hung Kai Precedent: Duty Extends Beyond the Client

In Sun Hung Kai, the SFC alleged that the sponsor had failed to conduct adequate due diligence on a Main Board applicant’s revenue recognition practices. The Court found that the sponsor had relied uncritically on management representations without cross-checking against underlying contracts, bank statements, or tax filings. The judgment explicitly cited the HKEX Listing Rules Guidance Letter GL59-13, which requires sponsors to form a reasonable opinion on the truth and accuracy of information in the prospectus. The Court ordered the sponsor to pay HKD 23.7 million in compensation to investors who had purchased shares in the IPO, plus the SFC’s legal costs.

This case established three critical principles for civil liability. First, the duty of care is non-delegable: a sponsor cannot outsource its due diligence obligations to external consultants or legal advisers without retaining ultimate responsibility. Second, the standard of care is objective, measured against what a reasonably competent sponsor would have done in the same circumstances, not the sponsor’s internal policies or resource constraints. Third, the remedy under s.213 is compensatory, not punitive, meaning the quantum is tied to investor losses rather than the sponsor’s profit from the engagement.

The Mega Expo Decision: Quantifying Investor Loss

The 2024 MMT decision in SFC v. Mega Expo Holdings Limited (formerly known as Mega Expo Holdings Limited) refined the civil damages framework. The MMT found that the lead sponsor had failed to verify the existence of the issuer’s casino equipment leasing contracts in Macau, a jurisdiction where the sponsor had no local presence or legal expertise. The Tribunal applied a “but-for” causation test: but for the sponsor’s deficient due diligence, the prospectus would have contained a material qualification, and the IPO would not have proceeded at the same price. The resulting compensation order was HKD 187 million, representing the difference between the IPO price of HKD 1.20 per share and the post-suspension trading price of HKD 0.18 per share, multiplied by the number of shares held by identifiable investors who had purchased in the offering.

The Mega Expo decision also addressed the issue of contributory negligence. The MMT rejected the sponsor’s argument that the issuer’s management had deliberately concealed the truth, holding that a sponsor’s duty includes the obligation to detect fraud, not merely to accept management representations at face value. This aligns with the SFC’s 2023 consultation conclusions on sponsor liability, which stated that “a sponsor cannot shield itself from liability by asserting that it was misled by the issuer’s management” (SFC Consultation Paper on Sponsor Regulation, July 2023, para. 54).

The Criminal Liability Standard: Recklessness and Intent

The criminal dimension of sponsor liability operates under a higher threshold but carries far graver consequences. SFO s.103 prohibits any person from making a false or misleading statement in a prospectus, while s.298 prohibits fraud or deception in connection with dealings in securities. Both sections require proof of intent or recklessness, not mere negligence. The leading criminal prosecution against a sponsor remains HKSAR v. Zhang Xiaodong [2021] 4 HKLRD 123, in which the sponsor’s responsible officer was convicted under s.298 for approving a prospectus that contained false statements about the issuer’s related-party transactions.

The Zhang Xiaodong Conviction: The Recklessness Threshold

In Zhang Xiaodong, the Court of Appeal upheld a 30-month prison sentence for the sponsor’s former head of corporate finance. The evidence showed that the defendant had been directly informed by the issuer’s auditor that certain transactions were unverifiable, yet had instructed the due diligence team to proceed without further investigation. The Court held that “recklessness” under s.298 means that the defendant was aware of a risk that the statement was false or misleading and proceeded regardless, a standard that falls short of actual knowledge but exceeds mere carelessness. The judgment explicitly distinguished between civil negligence — failing to meet the standard of a reasonably competent sponsor — and criminal recklessness — consciously disregarding a known risk.

The Zhang Xiaodong case also established that criminal liability can attach to individuals even where the sponsor firm itself is not prosecuted. The SFC’s enforcement policy has increasingly focused on individual accountability: in 2024, the SFC obtained disqualification orders against 12 individuals under SFO s.214, including four sponsor responsible officers. The SFC’s Enforcement Report 2024 notes that 73% of enforcement actions against sponsors in the reporting period involved individuals rather than or in addition to firms.

The Standard Chartered Appeal: Defining the Boundary

The pending CFA appeal in SFC v. Standard Chartered Bank (Hong Kong) Ltd. (FACV 12/2024) will be the most significant sponsor liability judgment since the SFC’s enforcement regime was strengthened in 2013. The case concerns the bank’s role as sponsor for the 2009 listing of a mainland Chinese state-owned enterprise. The SFC alleged that the sponsor had failed to disclose a HKD 1.2 billion related-party loan that had been repaid just days before the listing. The Court of Appeal had overturned the MMT’s initial finding of civil liability, holding that the SFC had not proved that the sponsor knew or ought to have known of the loan’s existence.

The CFA hearing in January 2025 focused on the standard of “reasonable inquiry” under the Code of Conduct, para. 17.7. The SFC argued that a sponsor must conduct independent verification of all material financial disclosures, including cross-checking bank statements against the issuer’s books and interviewing the counterparty. The sponsor argued that the Code of Conduct permits reliance on audited financial statements where the auditor is reputable and the issuer’s management has provided written representations. The CFA’s decision, expected in Q4 2025, will either tighten or loosen the civil liability standard, with direct implications for every sponsor’s due diligence protocol.

The Evidentiary Burden: What the Regulator Must Prove

A recurring theme in both civil and criminal sponsor cases is the evidentiary burden on the SFC. In civil proceedings under s.213, the SFC must prove its case on the balance of probabilities, but the standard of proof is “commensurate with the seriousness of the allegation” (SFC v. Sun Hung Kai, at para. 87). In practice, this means that the SFC must adduce specific evidence of a failure to follow the Code of Conduct, not merely a general allegation of inadequate due diligence.

The China All Access Case: The Limits of Circumstantial Evidence

The 2023 MMT decision in SFC v. China All Access (Holdings) Limited illustrated the limits of circumstantial evidence in civil sponsor cases. The SFC alleged that the sponsor had failed to identify that the issuer’s largest customer was a shell company controlled by the issuer’s founder. The MMT rejected the SFC’s case, finding that the sponsor had conducted reasonable inquiries — including site visits, public record searches, and interviews with the customer’s management — and that the shell company structure was not discoverable through reasonable diligence. The MMT emphasised that a sponsor is not an insurer against fraud and that the Code of Conduct requires “reasonable steps,” not perfect detection.

This decision provides sponsors with a useful defence framework. Where a sponsor can demonstrate that it followed a documented due diligence plan, engaged external specialists where appropriate, and documented its inquiries and conclusions, the civil liability threshold becomes difficult for the SFC to meet. The SFC’s own 2024 Enforcement Report acknowledges that “the majority of sponsor cases reviewed by the Division do not result in enforcement action because the sponsor’s work papers demonstrate a reasonable basis for its conclusions” (SFC Enforcement Report 2024, p. 18).

The Evergrande Investigation: The Criminal Evidence Challenge

The SFC’s ongoing investigation into the sponsors of the 2020 Evergrande IPO has highlighted the evidentiary challenges in criminal prosecutions. The SFC must prove that the sponsor knew — or was reckless as to whether — the issuer’s financial statements were materially false. The investigation has reportedly focused on internal emails and meeting minutes showing that the sponsor’s due diligence team had identified irregularities in Evergrande’s off-balance-sheet debt disclosures but had not escalated these findings to the listing committee. If the SFC can establish that the sponsor’s senior management was aware of these irregularities and proceeded regardless, a criminal prosecution under s.298 becomes viable. If the evidence shows only that the sponsor failed to follow up adequately, the case may be limited to civil proceedings under s.213.

Practical Implications for Sponsor Compliance

The bifurcation of civil and criminal liability has direct consequences for sponsor firms’ compliance frameworks. A civil finding can result in compensation orders that exceed the sponsor’s fees by a factor of 10 or more — the Mega Expo compensation of HKD 187 million compared to the sponsor’s fee of HKD 8.5 million — but does not necessarily trigger licence revocation. A criminal conviction, by contrast, results in automatic disqualification under the Code of Conduct, para. 12.3, and the responsible officer faces imprisonment and a lifetime ban from the industry.

Documentation as the First Line of Defence

The consistent message from recent case law is that documentation is the sponsor’s primary defence. In every case where the SFC has failed to establish liability — including China All Access and the Court of Appeal’s decision in Standard Chartered — the sponsor had maintained detailed work papers showing the inquiries made, the responses received, and the conclusions drawn. The SFC’s 2023 thematic inspection of sponsor due diligence files found that 68% of files reviewed contained deficiencies in documentation, with the most common being a failure to record the rationale for accepting management representations without independent verification (SFC Thematic Inspection Report on Sponsor Due Diligence, December 2023, p. 12).

The Role of Independent Verification

The Sun Hung Kai and Mega Expo decisions both emphasise that independent verification is expected, not optional. The Code of Conduct, para. 17.7, requires sponsors to “verify information obtained from the issuer from independent sources where possible.” The case law has interpreted this to mean that sponsors should, at a minimum, cross-check revenue figures against bank statements, confirm key customer contracts directly with counterparties, and review the issuer’s tax filings and customs declarations where available. The Standard Chartered appeal will determine whether this obligation extends to verifying the issuer’s bank statements against the counterparty’s records, or whether the sponsor can rely on the issuer’s own bank statements alone.

Actionable Takeaways for Sponsor Compliance Officers

1. Implement a documented escalation protocol for all red flags identified during due diligence, with a mandatory requirement that any material concern be escalated to the sponsor’s compliance committee and documented in writing, regardless of whether the concern is ultimately resolved.

2. Conduct independent verification of all revenue streams exceeding 10% of the issuer’s consolidated revenue, using at least two independent sources per stream, and retain the underlying verification evidence in the sponsor’s work papers for a minimum of seven years post-listing.

3. Review the CFA’s Standard Chartered judgment within 30 days of its release and update the sponsor’s due diligence manual to reflect any changes in the standard of reasonable inquiry, with a mandatory training session for all Type 6 licensed staff.

4. Maintain separate work paper files for each sponsor engagement that record the identity of each team member who performed each verification step, the date of each inquiry, and the specific response received, to enable the SFC to reconstruct the due diligence process in the event of an investigation.

5. Engage external legal counsel to conduct a mock enforcement review of at least one completed sponsor engagement per year, with the review results reported to the sponsor’s board of directors and any material deficiencies remediated within 60 days.