TCSP Licence in Hong Kong: What It Is, Who Needs One, and Why It Matters for Company Data
2026-09-07
Buried in the Companies Registry's open data catalogue, alongside the weekly incorporation lists this directory is built on, sits a much smaller but sharper dataset: the register of licensed Trust or Company Service Providers (TCSP). It's a niche regulatory list on its face, but it's one of the more useful cross-references available for anyone trying to understand who's actually behind a Hong Kong company's paperwork.
Why the licence exists
Since March 2018, providing trust or company services as a business in Hong Kong — for a fee, to third parties — has required a TCSP licence under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO).1 Before that date, the industry was effectively self-regulated: anyone could set up a company secretarial or trust services business without government oversight. AMLO changed that by bringing "designated non-financial businesses and professions" — a category that includes company service providers alongside real estate agents and dealers in precious metals — inside the anti-money-laundering perimeter that banks and financial institutions had already been operating under for years.
The regulatory logic is straightforward. Company secretarial and trust service providers sit at a structural chokepoint: they incorporate companies, hold registered offices, sometimes act as nominee directors, and routinely handle client funds and sensitive ownership information. That makes them an attractive layer for anyone trying to obscure beneficial ownership, launder proceeds, or set up shell structures at scale. Requiring a licence — with a fit-and-proper test, ongoing supervision, and real penalties for non-compliance — puts a floor under an industry that used to have none.
Who actually needs a licence
The rule is broad by design. A person who carries on a trust or company service business in Hong Kong needs a TCSP licence — full stop.1 It doesn't matter whether the services are the whole business or a small part of a broader operation; if you're providing them for a fee to third parties, the licensing requirement applies. This catches:
- Dedicated company secretarial firms
- Accounting practices that also offer incorporation and registered-office services
- Trust administrators
- Firms offering nominee director or nominee shareholder arrangements
Who's exempt
A handful of professions are exempt because they're already supervised under a separate regulatory regime: licensed corporations regulated by the Securities and Futures Commission (SFC), certified public accountants and CPA firms, and legal practitioners such as solicitors.1 The logic is that duplicating supervision for professions already subject to their own AML obligations and professional-conduct rules would add cost without adding protection. Everyone else providing these services commercially falls under the Companies Registry's TCSP regime.
What the applicant actually needs to show
To qualify, the applicant must be properly established in Hong Kong — a local company, a foreign company with a place of business in Hong Kong, a Hong Kong-resident sole proprietor, or a partnership with at least one local partner.2 Beyond that baseline, licensed firms must pass a fit-and-proper test, put in place internal controls adequate to detect and prevent money laundering and terrorist financing, and maintain those controls on an ongoing basis, not just at the point of application.2
The government fee starts at HKD 3,440 for the application itself, plus an additional HKD 975 for each individual who needs to go through the fit-and-proper verification — directors, ultimate beneficial owners, and certain senior staff, depending on the applicant's structure.2 For a firm with several partners or directors, the per-person fees add up quickly, which is itself a mild deterrent against setting up shell operations purely to game the system.
What happens if you operate without one
Operating a trust or company service business without a licence is a criminal offence. The maximum penalty is a fine of up to HKD 100,000 and imprisonment for up to six months.2 That's meaningfully more than a slap on the wrist, and it applies to the individual operator, not just an abstract "company" that can absorb the cost and continue trading.
The open dataset, and what it's actually good for
The Companies Registry publishes the full TCSP licensee register as open data — company name in English and Chinese, licence number, and registered business address — updated on a rolling basis. At the time of writing, it holds well over 7,000 licensees. On its own, that's just a list. Cross-referenced against something else — like the registered addresses of the companies this directory indexes — it becomes genuinely useful.
Here's a concrete example from our own data. When we built the address-density feature on this site (showing how many companies share a given registered address), one of the most-shared addresses in our index turned out to be the registered business address of Sleek Hong Kong Limited, a real TCSP licensee (licence number TC006483). That's not a coincidence and not a guess — it's the same address string matched exactly against the Registry's own public licensee list. A shared address on its own tells you nothing about who's behind it. A shared address that also matches a licensed TCSP provider tells you it's very likely a legitimate company-secretarial hub serving many real clients, not an unexplained cluster.
That's the pattern worth generalizing: none of Hong Kong's individual open datasets — the weekly incorporation lists, the address lookup API, the TCSP register — is especially rich on its own. Layered together, they start to behave like a knowledge graph rather than a flat list, and each layer is independently verifiable against an official government source rather than inferred or scraped from a third party.
Verifying a provider yourself
If a firm offers to act as your company secretary, hold your registered office, or serve as a nominee director, checking their name against the current TCSP register takes a few minutes and tells you something a sales pitch won't: whether they're actually operating within the law, not just claiming to. The Companies Registry publishes the register monthly, and this directory cross-references it automatically against every company address we index — when a match exists, it's shown directly on the relevant company and address pages, with the licence number attached so you can verify it independently rather than taking our word for it.
Doing this manually is straightforward too: the Registry's TCSP register is downloadable directly, and a simple text search for the provider's exact registered name is usually enough to confirm a match — licence numbers follow a consistent "TC" prefix format, so a result that doesn't fit that pattern is worth a second look before you trust it.
Common misconceptions worth clearing up
"A licensed TCSP guarantees the company is legitimate." It doesn't, and it isn't meant to. The licence tells you the service provider has passed a fit-and-proper test and operates under AML controls — it says nothing about the intentions of any individual client who walks through their door. A licensed, properly-run TCSP can still be used, unwittingly, by a client engaged in wrongdoing. The licence is a floor under the industry, not a guarantee about any specific company it services.
"An unlicensed provider automatically means fraud." Also not quite right. Some entities are exempt for legitimate reasons — a CPA firm or a firm of solicitors offering company secretarial work as an adjunct to their main practice doesn't need a separate TCSP licence, because they're already supervised elsewhere. The absence of a TCSP match against a given address doesn't automatically mean the address is problematic; it might just mean the provider is a law firm or accounting practice regulated under a different regime, or that the address belongs to a company that simply doesn't use a third-party secretarial service at all.
"This is a uniquely Hong Kong requirement." It isn't. Most major financial centres regulate this activity in some form — the UK requires Trust or Company Service Providers to register under its Money Laundering Regulations 2017 and be supervised by HMRC or a professional body, and jurisdictions like Singapore and the Cayman Islands run comparable licensing regimes for corporate service providers. Hong Kong's 2018 introduction of TCSP licensing brought it in line with a global standard that FATF (the Financial Action Task Force) has been pushing for years, rather than inventing a new category of regulation from scratch.
Where this fits with the rest of Hong Kong's company data
This is one register among several worth knowing about if you're trying to understand a Hong Kong company beyond its bare registration details. The Companies Registry alone publishes datasets on newly incorporated companies, registered-office addresses, and non-Hong Kong company registrations, and other regulators maintain their own licensee lists for other regulated activities. None of them is a complete picture in isolation, and none of them tells you anything about a company's financial health, since Hong Kong's open registry data doesn't include filed accounts or credit information for private companies. What it does let you do — cheaply, and without relying on a paid aggregator's opaque methodology — is verify the parts of a company's story that are actually a matter of public record: who incorporated it, where its registered office is, and whether the people running its registered office are licensed to do so.