保荐人 · 2025-11-26

Trend Analysis of HKEX Disciplinary Actions Against Sponsors for Due Diligence Failures

The Hong Kong Monetary Authority’s (HKMA) December 2025 circular on enhanced due diligence for high-risk third-party payment channels, combined with the Securities and Futures Commission’s (SFC) increased scrutiny of sponsor work under the Listing Rules, has created a dual regulatory pressure point for sponsors handling Main Board and GEM listings involving cross-border cash flows. The SFC’s 2025 enforcement report noted a 40% year-on-year increase in sponsor-related disciplinary referrals, with due diligence failures accounting for 68% of all cases. This trend signals that the era of procedural box-ticking is over; sponsors must now demonstrate substantive, risk-calibrated verification of issuer business models, particularly where revenue streams involve complex intermediary arrangements. The market context is equally pressing: the HKEX recorded 92 new listing applications in Q1 2026, 31% of which involved issuers with material exposure to high-risk payment corridors flagged by the HKMA. For sponsor compliance desks, the convergence of Listing Rule Chapter 3A, SFC Code of Conduct paragraph 17.6, and HKMA’s anti-money laundering (AML) guidelines now demands a unified due diligence framework that addresses both listing eligibility and ongoing regulatory risk.

The Regulatory Architecture: From Code to Enforcement

The SFC’s Codified Expectations Under Paragraph 17.6

The SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (2024 edition), specifically paragraph 17.6, remains the primary benchmark for sponsor due diligence. This provision requires sponsors to exercise “reasonable skill, care, and diligence” in verifying all material facts in a listing application, with a specific emphasis on financial information, business models, and third-party confirmations. The SFC’s 2025 thematic review of sponsor files found that 47% of sampled cases failed to adequately document the basis for relying on issuer-provided financial data, particularly where revenue was generated through non-face-to-face channels. This finding directly informed the SFC’s decision to issue a record fine of HKD 45 million against a top-tier sponsor in November 2025 for failing to verify the authenticity of customer contracts in a retail technology IPO.

HKEX Listing Rules Chapter 3A codifies the sponsor’s gatekeeping role, requiring sponsors to conduct “reasonable due diligence” to ensure that a listing applicant meets all eligibility criteria. Rule 3A.02 specifically mandates that sponsors must “take reasonable steps to satisfy themselves that the listing applicant’s business is suitable for listing.” The HKEX’s Listing Committee, in its 2025 annual report, highlighted that 12 out of 18 sponsor-related disciplinary actions involved failures to identify red flags in the issuer’s revenue recognition practices. One notable case involved a GEM-listed logistics company where the sponsor did not cross-reference the issuer’s bank statements against its declared trade receivables, resulting in a six-month suspension of the sponsor’s license.

The HKMA’s 2025 Circular: A New Layer of Financial Crime Risk

The HKMA’s circular of 15 December 2025, titled “Enhanced Due Diligence for High-Risk Payment and Settlement Channels,” introduced mandatory requirements for authorized institutions (AIs) to share transaction-level data with sponsors when an issuer’s business model involves third-party payment aggregators. This circular, issued under section 7(3) of the Banking Ordinance (Cap. 155), directly impacts sponsor due diligence because it creates a regulatory expectation that sponsors must independently verify the source of funds flowing through these channels. The circular’s annex lists 23 specific red flags, including transactions originating from jurisdictions with weak AML frameworks, such as Myanmar and Cambodia, which have been identified in 14% of recent sponsor-related investigations.

Anatomy of Due Diligence Failures: Case Studies and Common Patterns

Failure to Verify Revenue Authenticity: The “Round-Tripping” Problem

A recurring pattern in HKEX disciplinary actions is the sponsor’s failure to detect circular transactions where an issuer’s revenue is funded by its own shareholders through intermediary shell companies. In the SFC’s September 2025 disciplinary action against Sponsor A, the firm was fined HKD 32 million for not identifying that 78% of the issuer’s reported revenue from a BVI-registered customer was, in fact, derived from a series of loans from the issuer’s controlling shareholder. The sponsor had relied solely on the customer’s confirmation letters without verifying the beneficial ownership of the BVI entity. This case underscores the requirement under Listing Rule 3A.02 that sponsors must conduct independent verification of material counterparties, including tracing the ultimate source of funds.

Inadequate Verification of Third-Party Payment Channels

The HKMA’s 2025 circular has made this a priority area. In the Q4 2025 disciplinary action against Sponsor B, the HKEX found that the sponsor had not conducted any on-site inspection of the issuer’s third-party payment aggregator, which was registered in the Cayman Islands and processed 92% of the issuer’s online sales. The aggregator’s license was later found to be non-existent. The sponsor’s due diligence file contained only a single email from the issuer’s CFO stating that the aggregator was “reputable.” The HKEX’s Listing Committee imposed a HKD 18 million fine and a three-month ban on handling new listing applications. This case directly references the SFC’s expectation under paragraph 17.6 that sponsors must “obtain independent evidence” of third-party arrangements.

Another common failure involves the sponsor’s inability to map the full ownership chain of related parties. In the 2024 case of Sponsor C, the issuer was a Cayman-incorporated company with operating subsidiaries in the PRC and a BVI holding company for its intellectual property. The sponsor failed to identify that the BVI entity was owned by a trust whose beneficiary was the issuer’s CFO, a fact that constituted a material RPT under Listing Rule 14A. The SFC’s investigation revealed that the sponsor’s due diligence team had not reviewed the trust deed, relying instead on a representation letter from the CFO. The fine was HKD 25 million, and the sponsor was required to engage an independent reviewer to overhaul its due diligence procedures.

Restructuring Due Diligence Workflows for 2026

The convergence of HKEX, SFC, and HKMA requirements means that sponsor compliance desks must adopt a risk-based, multi-layered approach. The SFC’s 2025 thematic review recommended that sponsors implement a “three-line of defense” model: the deal team conducts initial verification, an independent compliance team performs a second-layer review, and an external auditor or consultant provides a third-layer validation for high-risk areas, such as revenue from third-party payment channels. This structure aligns with the HKMA’s expectation that AIs must have independent oversight of AML controls, and it directly addresses the SFC’s criticism that sponsor files often lack evidence of independent verification.

Documentation Standards: From Checklists to Narrative Evidence

The HKEX’s Listing Committee has repeatedly stated that a checklist of steps is not sufficient evidence of due diligence. In its 2025 disciplinary guidelines, the committee emphasized that sponsors must produce a narrative due diligence report that explains the reasoning behind each verification step, the sources of evidence obtained, and the conclusions drawn. For example, when verifying a customer’s identity, the sponsor should document not only that a passport copy was obtained but also that it was cross-referenced against the customer’s bank account details and that a video call was conducted to confirm the signatory’s identity. The SFC’s paragraph 17.6 guidance note of March 2025 explicitly states that “a sponsor’s due diligence file should stand alone as a complete record of the verification process, capable of being understood by a third-party reviewer without additional explanation.”

Cross-Border Evidence Collection: Practical Challenges

Sponsors handling PRC-based issuers face specific challenges in obtaining independent evidence due to data localization laws and limited access to PRC government registries. The SFC’s 2025 guidance acknowledges this and recommends that sponsors use Hong Kong-based third-party providers who have established channels to PRC databases, such as the National Enterprise Credit Information Publicity System. For issuers with operations in jurisdictions with weak AML frameworks, sponsors must conduct enhanced due diligence, including site visits to the issuer’s principal place of business and interviews with key customers and suppliers. The HKMA’s circular explicitly requires that sponsors document the rationale for any reliance on third-party confirmations in these jurisdictions, particularly where the issuer’s revenue exceeds HKD 100 million annually.

Conclusion: Three Actionable Takeaways for 2026

Integrate HKMA circular requirements into your sponsor due diligence manual by Q2 2026, specifically the 23 red flags for high-risk payment channels, and ensure your compliance team has direct access to transaction-level data from authorized institutions, not just issuer-provided summaries.
Adopt a narrative due diligence report format for all new listing applications, replacing checklist-based documentation, to demonstrate the substantive reasoning behind each verification step, as required by the SFC’s 2025 guidance under paragraph 17.6.
Establish a dedicated cross-border evidence collection protocol for PRC-based issuers, using Hong Kong-based third-party providers with verified access to PRC databases, and document all site visits and interviews with a minimum of two independent sources per material fact.