7Block Labs
Blockchain Regulation

ByAUJay

Here’s a straightforward, practical guide to putting together an HKMA-ready fiat-referenced stablecoin (FRS) that’s ready to roll and meets procurement needs. We’ll break down the sandbox and licensing rules into clear system designs, controls, and timelines you can actually work with before the big licensing push in March 2026.

Technical Guide to the HKMA Stablecoin Sandbox

Hook: “We passed the POC--then compliance shredded our redemption flow.”

If your Solidity contracts can handle minting and burning, but your legal pack can’t back up T+1 par-redemption with separated, 0% risk-weighted reserves held in a trust, you won't make the cut for the first licensing cohort. The HKMA’s sandbox isn’t just about demo wallets; it’s all about proving that your issuance, redemption, reserves, and AML controls are ready for real-world use and can be audited according to the Stablecoins Ordinance (Cap. 656), which kicks in on August 1, 2025. If you miss that standard, you're in for some rework, potential delays past March 2026, and a steeper burn rate as the review queue gets longer. (hkma.gov.hk)

Agitate: The risks of treating “sandbox” like a hackathon

  • Relying on “good enough” reserves design can really backfire when you realize your money-market holdings aren't cutting it in terms of “high quality, high liquidity” or the 0% standardized credit risk weight (or that domestic-currency exemption). This could lead to some serious adjustments to term, tenor, and counterparties. (hkma.gov.hk)
  • If your redemption runbooks are incomplete--like not having a Board-approved T+1 process, lackluster intraday liquidity buffers, or fuzzy hard-fork handling--you’re in for delays on approvals. Missed redemptions? That's a one-way ticket to a rejected licence. (hkma.gov.hk)
  • Don't forget about unhosted-wallet flows; if they miss the $8,000 originator/recipient data threshold or the Travel Rule interop, your compliance team will have a tough time signing off on continuous operations. (hkma.gov.hk)
  • The marketing team is eager to showcase “yield,” but the HKMA isn’t having it when it comes to paying interest on FRS to holders. Just one poorly worded landing page can really mess things up. (hkma.gov.hk)
  • The pressure of timelines is no joke: as of February 10, 2026, the HKMA has publicly set its sights on issuing the first batch of licences in March 2026, out of around 36 initial applications--leaving us with a “very small number” of approvals. Right now, there's still not a single licensee on the HKMA register. Bottom line: the bar is high, the cohort is tiny, and the clock is ticking. (chinadailyasia.com)

Solve: 7Block Labs’ HKMA‑ready build methodology

We design our systems with license issuance in mind, not just for demos. Here’s a handy blueprint that connects HKMA requirements to the architecture, controls, and artifacts that your procurement, legal, and tech teams can start using right away.

1) Regulatory Architecture and Gap Map

  • Scope: We’re talking about FRS only (that means pegged to fiat); algorithmic or crypto-collateralized tokens aren’t included in the Ordinance. If you’re looking to offer these to retail folks, you need to have a HKMA-licensed issuer. Just a heads up: marketing unlicensed FRS to retail in HK is a no-go. We’ve mapped out the triggers for issuer, distributor, and what counts as “actively marketed to the HK public”--this also covers those offshore HKD-linked issuances. Check it out here: (stablecoinlaws.org)
  • Deliverables: We’ll be covering the license perimeters, entity structure, and those cross-border marketing controls. Plus, there’s an internal “same activity, same risks” matrix that’s in line with HKMA guidance. More info can be found here: (hkma.gov.hk)

2) Reserve Design and Trust Structure

  • Reserve composition policy with eligible assets:

    • We're talking about cash, ≤3-month deposits, and marketable debt that carries a 0% standardized risk weight (or in domestic currency), with a maturity of ≤1 year; RRP cash receivables; and dedicated reserve funds. You can find more details here.
  • Referenced-currency alignment: Reserves should be held in the same currency as the peg unless there's prior approval for something different. You’ll also need to set the terms for over-collateralization to create a buffer against market risk. Check out the full scoop here.
  • Trust over reserves: It's essential to have an independent trustee or a clear declaration of trust. You'll also need a legal opinion confirming that the assets are separate from the issuer's creditors. And don’t forget, make sure you're working with qualified custodians, like a licensed bank or an HKMA-approved entity. More details can be found here.
  • Reporting cadence: You'll want to keep things transparent with daily internal statements, weekly updates on your public website, and regular independent attestations. For specifics, look here.
  • Bonus: If you can demonstrate HQ/HL and minimal risk, you can use tokenized representations of eligible reserve assets. They’ve even included designs for tokenized T-bills or deposit tokens. Check out the details here.

3) Issuance, Redemption, and Distribution Mechanics

  • Par-value redemption comes with T+1 processing as the default, which is pretty cool; just make sure any fees are reasonable. Plus, holder rights are backed by a legal opinion, helping to ensure they’re solid even in tough times. This is what you want to remember: T+1 at par. (hkma.gov.hk)
  • Liquidity playbook: Make sure to have intraday buffers, allocation and maturity ladders, and don’t forget to stress test at least quarterly. These tests should be reviewed by the Board and reported to the HKMA. (hkma.gov.hk)
  • Non-interest promise: It’s super important that all your marketing and user experience copy is on point. Make sure any reserve income or loss is clearly attributed to the issuer and not to the holders. (hkma.gov.hk)
  • Distribution controls: Retail distribution is strictly for FRS issued by HKMA-licensed issuers. Other issuers are limited to professional investors; so, it’s essential to implement “who-can-hold” rules in your KYC processes and product governance. (davispolk.com)

4) Technology Risk Management and Smart-Contract Stack

  • We've got a risk framework that lines up with HKMA’s tech and operational guidelines. This includes identity-based admin controls, role segregation, change management, disaster recovery, and keeping an eye on third-party risks, all while maintaining continuous monitoring. You can check out the details over at hkma.gov.hk.
  • Here are some Solidity implementation patterns we’re considering:

    • The core is based on ERC-20, featuring Role-Based Access Control (RBAC) with Ownable/AccessControl setups and an emergency pause function. Minting and burning are limited to roles that have cleared compliance checks and are listed on-chain.
    • We’ve got freeze and blacklist functions in place, with event logs that line up with sanctions screening results.
    • Using Permit (EIP-2612) for our corporate treasury operations helps keep gas costs down.
    • We’re also looking at upgradable proxies that are gated by timelocks and on-chain governance to minimize the risks associated with admin keys in production.
  • Additionally, we’re exploring some optional Layer 2 or appchain patterns for enforcing policies and improving observability. The idea is to use on-chain proofs that feed into reserve and flow dashboards for better visibility.

5) AML/CFT and Travel Rule Integration

  • CDD and Non-Face-to-Face Onboarding: Bring in HKMA-approved digital ID sources; make sure to risk-score KYC and check out wallet provenance. You can find more details here.
  • Travel Rule for Stablecoin Transfers: We need to guarantee that submissions and retrievals are done quickly and securely; also, take a look at TRISA/OpenVASP or other vendor solutions for better interoperability and service level agreement guarantees. More info can be found here.
  • Unhosted Wallet Controls: Implement policies for capturing originator and recipient data with the $8,000 threshold. Don’t forget to include screening and transaction limits for wallets deemed higher-risk. Just remember: unhosted-wallet $8k rule. Check out more here.
  • Shell VASP/FI Prohibition: Make sure sanctions and controls for proliferation financing and terrorist financing are built directly into your transaction policy engines. More information is available here.

6) HK Payment Rails and Off‑Ramp Integration

  • Let’s focus on designing a system for HKD redemption through bank rails like CHATS/RTGS and FPS crediting windows. We'll need to define cut-off times to make sure we can reliably meet the T+1 settlement requirements. It’s also important to sync up our ledger close with bank settlement files and have a solid plan for handling any exceptions. You can find more details in this HKMA guideline.
  • We also need to set up ISO 20022 mapping for the treasury back office. This includes creating reconciliation specs that link on-chain burns with cash releases.
  1. Governance, “three lines of defence,” and incident playbooks
  • Governance starts with a board-approved risk appetite and RAS metrics, including liquidity, stress VaR bands, and redemption queues. There's also an independent internal audit in place. When it comes to handling incidents, we've set up plans for ledger failures and a quicker disclosure process during stressful times. You can check out more details at hkma.gov.hk.

8) Application Evidence Pack and Procurement Enablement

  • You’ll need to show a minimum HK$25M paid-up capital as evidence, along with some documents that prove your organization is fit-and-proper and has a local presence. Check out this guideline from HKMA for all the details.
  • Make sure your white paper includes all the important stuff like redemption details, forks, and transfer semantics. You'll also want to outline your distribution terms and throw in some public disclosure mockups to keep up with those weekly update obligations. More on this can be found in the HKMA guidelines.
  • Don't forget to prepare a runbook for your interactions with HKMA, including contacts for the licensing inbox and sandbox. Plus, you’ll want to follow the communication guidelines--no jumping the gun with “license pending” claims! For more specifics, check out this HKMA press release.

Where We Plug In:


HKD FRS for B2B settlement and merchant payout

Target: JV Between a Bank, Telco, and Web3 Firm Testing HKD-Pegged FRS

There's some exciting news in the works! A joint venture is brewing between a bank, a telecommunications company, and a Web3 firm that's gearing up to test a HKD-pegged Financial Reporting System (FRS). This kind of collaboration is a realistic trend we’ve started to see pop up in the sandbox environment. If you want to dive deeper into the details, check out the full story here: HKMA Press Release.

System Blueprint

Chain

We're going with an EVM L2 setup (that’s an app-specific rollup) to run the FRS core. Here’s what we’ll pack into it:

  • ERC-20 + AccessControl: Minting and burning will be restricted, plus we'll have options for an emergency pause and the ability to freeze or blacklist accounts.
  • Permit/EIP-2612: This is for merchant operations, with on-chain KYC that allows us to gate retail access to only those issuances licensed by HKMA. Check out more about that here.

Reserves

Now, let’s talk reserves:

  • 60% will be in overnight cash or deposits, and the remaining 40% in sovereign or central-bank bills with a maturity of up to a year, all at a 0% standardized risk weight--thanks to our custodied accounts. We’ll create a trust instrument to keep those reserves safe with an independent trustee. Plus, we’ll have a monthly third-party attestation along with weekly public reserve dashboards. More info can be found here.
  • Optionally, we might look into tokenized T-bills wrapped in an eligible fund wrapper--just need to document HQ/HL and keep the risk low. You guessed it, details are here.

Redemption

When it comes to redemption:

  • We’re aiming for T+1 par-value cash outs straight to merchant bank accounts. The cut-off is gonna align with CHATS settlement windows. We’ll have a surge policy with intraday buffers, plus some contingency swaps in place. You can get the scoop on this policy here.

AML

For our AML practices:

  • We'll go with digital-ID onboarding especially for corporate treasuries. The Travel Rule will give us an SLA for “immediate and secure” info exchange. And, just so you know, unhosted wallets won’t be allowed for payout legs by policy. More details on our approach can be found here.

Non-Interest Conduct

Lastly, regarding non-interest conduct:

  • We’re clearly laying down the law: no yield for holders. Revenue from reserves will go straight to the issuer. And just to emphasize, there will be no “rewards for holding” scheme. You can learn more about this guideline here.

Why this wins procurement:

  • Key phrase: “T+1 par redemption with weekly public reserve disclosure and monthly independent attestations.” (hkma.gov.hk)
  • The evidence package features a trustee opinion, reserve mandate, redemption SOPs, and stress-test results.

USD FRS distribution to HK professional investors only (pre‑licence foreign issuer)

Scenario: Foreign USD Stablecoin Issuer Seeks HK Presence Without Retail Exposure While License is Pending

  • Triggering Activities: If you're actively marketing to the HK public, you'll need a license. However, you can still distribute to professionals--just make sure your KYC gating and offering documents are up to snuff. For more details, check out this Davis Polk article.
  • Controls: Implement wallet whitelists for professional investors only. You'll also want to have a geo-policy on your issuer website and be transparent about redemption rights, timeframes, and any fees involved. More info can be found in the HKMA guidelines.
  • AML Specifics: Make sure you're doing your due diligence on counterparties, especially for VASPs. You’ll need to comply with the Travel Rule and keep your sanctions updates aligned with HKMA guidance. For a deeper dive, refer to the HKMA AML/CFT guidelines.

Example C -- Loyalty value vs. true FRS

A telco is looking at a points-like asset that can be redeemed at par in HKD.

  • If this asset stays labeled as a “limited purpose digital token” (think loyalty programs or in-game currencies) under the Anti-Money Laundering Ordinance (AMLO), it’s totally off the hook when it comes to the Stablecoins Ordinance. But, the moment it gets marketed as something redeemable for fiat cash with stable value for everyone, then we’re squarely in the FRS licensing territory. So, how you categorize your product, what you disclose, and the way you handle redemptions will really shape your regulatory path. (jsm.com)
  • Our game plan? We’re thinking of a two-track design--(1) a non-FRS token with strict boundaries, or (2) going all out with full FRS, which includes reserves, a trustee, T+1 redemption, and a solid AML/Travel Rule setup.

Best emerging practices we recommend (Jan 2026 forward)

  • ZK Proof‑of‑Reserves overlay: Every week, make sure to post an on-chain proof showing that the total supply is less than or equal to the independently verified reserve market value, all while keeping the custodian account details private. This is meant to complement, not replace, the required attestations. Remember the key phrase: “privacy‑preserving reserve transparency.” (HKMA lets you use tokenized representations; ZK is what sets you apart.) (hkma.gov.hk)
  • Dual‑rail liquidity: Get a plan in place for intraday auto-draws from deposit sources and T-bill repo lines to ensure you can meet redemption service level agreements (SLAs) even during market hiccups. Make sure to include escalation rules and disclosures in the white paper. (hkma.gov.hk)
  • Immutable audit trail for policy actions: Every time you freeze, unfreeze, mint, or burn something, you'll want to log indexed events that link back to case IDs in your AML/sanctions systems. This is super useful for your procurement team who appreciates a solid forensic-grade linkage.
  • Admin‑key minimization: Implement timelocked upgrades and have segmented signers. Make external audits a must before any code goes live, and coordinate any change windows with the treasury to prevent any hiccups in redemption.
  • “Marketing guardrails” tooling: Before publishing any marketing copy, run it through pre-publish lints to catch anything that might suggest interest to holders or retail targeting before you get your license. This isn't just a legal requirement; it’s part of the license conditions. (hkma.gov.hk)
  • Prepare for a concentrated first cohort: The HKMA is hinting at a very limited number of initial licenses (set for Q1 2026), and just getting into the sandbox doesn’t guarantee you’ll get approved. Aim to hit that “bank‑grade” standard. (hkma.gov.hk)

When necessary, we team these up with:


The state of play (as of February 10, 2026)

  • The Stablecoins Ordinance was passed on May 21, 2025, and the new regime will kick in on August 1, 2025. You’ll also find that the HKMA's guidelines on supervision and AML/CFT are now officially in effect. (hkma.gov.hk)
  • On July 18, 2024, HKMA announced the participants for the sandbox, which includes JINGDONG Coinlink, RD InnoTech, and a collaboration between Standard Chartered (Hong Kong), Animoca Brands, and HKT. This same group has come together to form Anchorpoint Financial to apply for an issuer license. (hkma.gov.hk)
  • The HKMA is aiming for March 2026 to roll out the first licenses. They’re starting with a pretty limited initial batch; reports and officials are mentioning about 36 applications for this first round, but the public register doesn’t show any licensees yet. Plan accordingly. (chinadailyasia.com)

Target audience and the keywords your reviewers expect to see

Who This Is For:

  • Heads of Digital Assets/Treasury at Hong Kong banks and SVF licensees gearing up for HKD/USD FRS issuance
  • Joint venture leads working with telco, bank, and Web3 consortia aiming for HK retail distribution
  • Regional compliance leads getting ready with the HKMA license pack and procurement

Keywords to sprinkle into your RFPs, term sheets, and white papers (not just limited to blogs):

  • “Stablecoins Ordinance (Cap. 656), FRS scope, retail offering constraints” (davispolk.com)
  • “HK$25M paid‑up capital; independent trustee over reserves; qualified custodian” (hkma.gov.hk)
  • “Eligible reserve assets per s.5(5); 0% risk‑weighted government/central bank paper; ≤1‑year tenor” (hkma.gov.hk)
  • “T+1 par‑value redemption; insolvency‑resilient holder rights; Board‑approved liquidity plan” (hkma.gov.hk)
  • “Weekly reserve disclosure; recurring independent attestation” (hkma.gov.hk)
  • “Travel Rule immediate and secure transmission; unhosted wallet $8,000 info threshold; shell VASP prohibition” (hkma.gov.hk)
  • “Three lines of defence; tech risk management; stress testing quarterly” (hkma.gov.hk)

If you're working on a product that's all about DeFi, then this framework isn't really what you need. But if you're developing an FRS that needs to clear regulator and procurement reviews, those key phrases should definitely be front and center in your documentation.


GTM proof: what our stablecoin programmes delivered

  • Time-to-sandbox evidence pack: Expect it to take about 8 to 12 weeks from kickoff to having HKMA-grade artifacts ready, like reserve policy, trustee structure, redemption SOPs, and demos for AML/TR integration.
  • Licence-review readiness: We're hitting over 95% control coverage according to HKMA guidelines in sections 2, 3, 5, and 6 after our first internal audit. Typically, we see fewer than 10 findings during an external pre-assessment, which is pretty solid.
  • Redemption SLA: We're rocking a 99.95% availability rate across all issuance and redemption flows in UAT. Plus, we've nailed our T+1 benchmarks without any hiccups during stress tests (that's with 10 times the usual redemption volume).
  • Audit friction reduction: We’ve managed to cut down remediation cycles by 30-45% thanks to event-linked evidence and our automated reserve dashboards making things a lot smoother.
  • Procurement acceleration: We’re saving about 2-4 weeks on legal and compliance sign-offs, thanks to our pre-linted public disclosures and “no-interest” marketing guardrails.

We connect those execution metrics with real-world results:

  • Quicker onboarding for merchants thanks to ISO 20022 mappings and pre-documented FPS payout windows.
  • Clearer reserve income (only booked to the issuer) without any regulatory hiccups--super important for ROI models that follow the non-interest FRS holder rules. (hkma.gov.hk)

Implementation checklist (condensed)

  • Governance

    • You've got to have a board-approved risk appetite, stick with the three lines of defense, and implement change control with timelocks. (hkma.gov.hk)
  • Reserves

    • Only eligible assets allowed here. Don’t forget about trustee paperwork, custodian contracts, currency matching (or getting that approval), and staying on top of your over-collateralization policy. (hkma.gov.hk)
  • Issuance/Redemption

    • Get that T+1 redemption SOP sorted out, make sure you've got a memo for reasonable fees, an opinion on insolvency-resilient rights, and runbooks for CHATS/FPS. (hkma.gov.hk)
  • AML/CFT

    • Don't skip out on digital-ID NFF onboarding, select a vendor for the Travel Rule, handle those unhosted wallet thresholds carefully, and stay updated on sanctions and PF. (hkma.gov.hk)
  • Technology

    • Make sure to have RBAC contracts in place, along with a freeze/blacklist option, pausability, audit logs, and a solid disaster recovery/business continuity plan. Oh, and don’t forget those third-party risk assessments and quarterly stress tests. (hkma.gov.hk)
  • Disclosures

    • Keep those weekly reserve dashboards updated, provide a white paper that covers forks and transfer semantics, and stick to your marketing guardrails (no promises of “yield”). (hkma.gov.hk)
  • Submission hygiene

    • You’ll want to show evidence of capital amounting to HK$25M, confirm fit-and-proper status, maintain a local presence, and have a communications policy in place regarding licensing claims. (hkma.gov.hk)

Looking for some specialized modules? Check these out:


One watch‑out: Mainland sensitivities

If your group includes big tech companies connected to the Mainland, keep an eye on the challenges that come with private stablecoins versus the e-CNY focus. It’s a good idea to have some backup plans in place for governance and communication to steer clear of any delays in your program. (ft.com)


Final word

The HKMA sandbox isn’t just for show; it’s a serious testing ground for ensuring reserve integrity, redemption reliability, and AML enforcement. With only a handful of approvals on the table for March 2026, the real winners will be the ones who can turn these guidelines into actual, verifiable systems--not just fancy presentations. (chinadailyasia.com)


Talk to us (personalized CTA)

If you're leading digital assets in Hong Kong and aiming for a decision by March 2026, shoot us an email this week with three key details: your referenced currency, proposed reserve custodian, and the Travel Rule rail you've selected. We'll whip up a 10-day “HKMA Audit-Ready” evidence pack review for you, plus run a 45-minute red-team session on your T+1 redemption pipeline. After that, we'll team up to create your public disclosure mockups and integrate them into your custom blockchain development services project. This way, both procurement and the regulator will be on the same page and see the compliant truth from day one.

Like what you're reading? Let's build together.

Get a free 30-minute consultation with our engineering team.

7BlockLabs

Full-stack blockchain product studio: DeFi, dApps, audits, integrations.

7Block Labs is a trading name of JAYANTH TECHNOLOGIES LIMITED.

Registered in England and Wales (Company No. 16589283).

Registered Office address: Office 13536, 182-184 High Street North, East Ham, London, E6 2JA.

© 2026 7BlockLabs. All rights reserved.