保荐人 · 2025-12-09

How a Sponsor Should Handle False or Misleading Information Provided by the Listing Applicant

The SFC’s enforcement division has, since 2023, intensified its scrutiny of sponsor work papers, with a specific focus on how firms document their response to red flags raised during due diligence. This shift is not theoretical; in 2024, the SFC publicly reprimanded two sponsors for failing to adequately challenge management representations that later proved false, resulting in fines totalling HKD 27 million. For a sponsor licensed under the Securities and Futures Ordinance (SFO) for Type 6 (advising on corporate finance) and Type 6A (sponsor) regulated activities, the handling of false or misleading information from a listing applicant is the single highest-stakes operational risk in the IPO process. The regulatory framework is clear: under paragraph 17 of the SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (the Code of Conduct), a sponsor must exercise due skill, care, and diligence, which includes a positive obligation to verify information, not merely rely on it. This article provides a structured protocol for a sponsor’s compliance team, grounded in the SFC’s 2017 Consultation Conclusions on the Regulation of Sponsors and subsequent enforcement actions, detailing the exact steps from first detection to regulatory notification.

The Regulatory Framework for Handling Red Flags

The Sponsor’s Statutory Duty of Care

The cornerstone of sponsor liability in Hong Kong is Section 213 of the SFO and the common law duty of care, but the operational standard is codified in the Code of Conduct. Paragraph 17.4 of the Code of Conduct requires a sponsor to conduct “reasonable due diligence” to ensure that the information in the listing document is true, accurate, and not misleading. This is not a passive receipt of data; the SFC’s 2017 Consultation Conclusions explicitly state that a sponsor must “proactively challenge” information provided by the listing applicant and its directors. When a sponsor identifies a potential falsehood, the duty escalates from verification to active investigation.

The Listing Rules (Main Board Rule 3A.02) further mandate that a sponsor must take all reasonable steps to satisfy itself that the applicant’s directors have discharged their responsibilities under the Listing Agreement. A failure to act on false information is treated as a breach of the sponsor’s own obligations. The SFC’s enforcement record shows that the most common failing is not the initial failure to detect a red flag, but the failure to adequately document and escalate the response to that flag once identified.

The Materiality Threshold and the “Reasonable Investor” Test

Not every minor discrepancy constitutes a regulatory breach. The materiality threshold is defined by the “reasonable investor” test: would a reasonable investor consider the false or misleading information important in making an investment decision? Under the SFC’s Guidelines on the Application of the Code of Conduct for Sponsors (2012), materiality is assessed in the context of the entire listing document. A misstatement of HKD 100,000 in a company with HKD 2 billion in revenue is likely immaterial. However, a false statement about a key customer contract, a regulatory licence, or a related party transaction is almost always material, regardless of the quantum.

The sponsor’s internal compliance manual should establish a clear materiality matrix. For revenue, a common threshold is 5% of total revenue or 10% of net profit, whichever is lower. For assets, 5% of total assets. For qualitative items—such as the identity of the ultimate beneficial owner or the existence of a material litigation—the threshold is binary: any falsehood is material. This matrix must be applied consistently and documented in the due diligence planning memorandum.

The Operational Protocol: From Detection to Resolution

Step 1: Immediate Triage and Segregation

Upon detection of a potential false or misleading statement, the engagement partner must immediately convene a “red flag” meeting with the compliance officer and the lead due diligence team. The first action is to segregate the information. The specific data point, the source (e.g., a director’s representation letter, a third-party confirmation, or a management account), and the context must be recorded in a privileged communication log. This log is not shared with the listing applicant at this stage.

The purpose of segregation is to prevent the tainted information from infecting the rest of the due diligence work product. If the false information is found in a financial model, the model must be frozen, and a new version created with the disputed data flagged. The sponsor’s IT systems should have a “hold” function that prevents any further use of the specific data point in the draft prospectus or other listing documents until the investigation is complete.

Step 2: Independent Verification and Challenge

The sponsor must not rely on the same source that provided the false information for its verification. If the false statement came from the CEO’s representation, the sponsor must seek independent third-party evidence. For example, if the applicant claimed a revenue figure of HKD 500 million from a single customer, and the sponsor’s due diligence reveals the customer’s audited financial statements show only HKD 100 million in purchases, the sponsor must directly contact the customer’s finance department, with the applicant’s permission, to obtain a direct confirmation.

Paragraph 17.6 of the Code of Conduct requires the sponsor to “exercise professional scepticism.” This means the sponsor must assume the information is false until proven true. The burden of proof shifts to the applicant. The sponsor must issue a formal written notice to the board of directors of the listing applicant, requesting specific evidence to corroborate the disputed information. The notice should cite the specific paragraph of the Code of Conduct and the Listing Rules under which the request is made. The applicant must be given a reasonable deadline, typically 10 business days, but this can be shortened if the information is critical to the listing timetable.

Step 3: Escalation and Internal Reporting

If the listing applicant fails to provide satisfactory evidence within the deadline, or if the evidence provided is itself questionable, the sponsor must escalate the matter to its own board of directors or risk committee. The SFC’s 2019 Enforcement Report highlighted a case where a sponsor’s junior team identified a false statement but did not escalate it to the sponsor’s senior management, resulting in a HKD 10 million fine for the sponsor firm. The escalation protocol must be documented in the sponsor’s internal compliance manual and must include a mandatory reporting line to the sponsor’s designated compliance officer and, if the sponsor is a licensed corporation, to the SFC.

The internal report must include:

A description of the false or misleading information.
The evidence (or lack thereof) provided by the applicant.
The sponsor’s assessment of materiality.
A recommendation on whether to continue with the listing application, to withdraw, or to notify the SFC.

The sponsor’s board or risk committee must formally resolve the matter, and the resolution must be minuted.

Step 4: SFC Notification and Listing Application Withdrawal

The decision to notify the SFC is governed by paragraph 17.8 of the Code of Conduct, which states that a sponsor must “immediately inform the Commission” if it becomes aware of any material false or misleading information in a listing document that has been submitted to the Stock Exchange. This is not discretionary. The notification must be made in writing to the SFC’s Corporate Finance Division, with a copy to the HKEX’s Listing Division.

The notification should include:

The name of the listing applicant.
The specific false or misleading information.
The steps taken by the sponsor to verify the information.
The applicant’s response, if any.
The sponsor’s recommendation (e.g., withdrawal of the application).

Simultaneously, the sponsor must advise the listing applicant to withdraw the listing application. If the applicant refuses, the sponsor must withdraw as the sponsor. Under Listing Rule 3A.07, a sponsor may resign only with the Exchange’s consent, but in cases of false information, the Exchange will typically grant consent if the sponsor has followed the proper protocol. The sponsor must also consider whether the false information constitutes a breach of the SFO, which would require a suspicious transaction report to the Joint Financial Intelligence Unit (JFIU).

Practical Considerations for Compliance Teams

Documentation Standards for Work Papers

The SFC’s inspection teams focus on work papers. Every step of the above protocol must be documented. The work papers should include:

The initial red flag identification memo.
The triage meeting minutes.
The verification requests and responses.
The escalation report.
The board or risk committee resolution.
The SFC notification (if applicable).

The documentation must be contemporaneous. A sponsor that creates work papers after the fact, or that backdates documents, faces disciplinary action under Section 194 of the SFO for making false statements to the regulator. The SFC’s 2022 Thematic Inspection Report on Sponsor Due Diligence noted that poor documentation was a factor in 80% of enforcement cases reviewed.

Managing the Listing Timetable

False information inevitably delays the listing. The sponsor must recalculate the timetable and inform the HKEX of any expected delay. Under Listing Rule 9.11, the Exchange may require a fresh filing of the listing application if the delay exceeds three months. The sponsor should also consider whether the false information triggers a re-examination of the entire due diligence file, particularly if the false information relates to a core business metric.

The sponsor’s compliance team should maintain a “watch list” of red flags that, if detected, automatically trigger a timetable review. This list should include:

False financial statements.
False customer or supplier confirmations.
False regulatory licences.
False director or shareholder identities.

Liability Insurance and Indemnification

The sponsor should review its professional indemnity insurance policy. Most policies exclude coverage for claims arising from fraud or dishonesty by the listing applicant, but they may cover the sponsor’s own costs in investigating and reporting the false information. The sponsor should also ensure that its engagement letter with the listing applicant includes a robust indemnification clause, requiring the applicant to reimburse the sponsor for all costs incurred in investigating and reporting false information, including legal fees and regulatory fines.

The SFC’s 2023 Enforcement Report noted that sponsors that proactively reported false information received more lenient treatment than those that attempted to bury the issue. The indemnification clause is a commercial tool, not a regulatory one, but it is essential for protecting the sponsor’s financial position.

Implement a mandatory red flag escalation protocol that requires any team member who identifies a potential false statement to report it to the compliance officer within 24 hours, with a written record, regardless of the perceived materiality.
Establish a materiality matrix in your due diligence planning memorandum with specific quantitative and qualitative thresholds, and ensure it is reviewed and approved by the risk committee before each engagement.
Maintain a privileged communication log for all interactions with the listing applicant regarding disputed information, and never share this log with the applicant’s management without legal advice.
Prepare a standard SFC notification template that includes all required elements under paragraph 17.8 of the Code of Conduct, and ensure it is pre-approved by your legal counsel for rapid deployment.
Conduct a biannual mock drill simulating a false information scenario, with the compliance team required to execute the full protocol from triage to SFC notification within 10 business days, and document the results for the SFC’s next inspection.