Duplicate Application Risk in IPOs: Can Multiple Accounts Lead to Disqualification

Hong Kong’s IPO market has entered a period of heightened regulatory scrutiny over application integrity, following the SFC’s 2024 enforcement action against a syndicate that used 150 nominee accounts to secure allocations in four Main Board IPOs. The SFC’s Market Misconduct Tribunal proceedings, concluded in March 2025, resulted in disqualification orders against 12 individuals and a total of HKD 27.8 million in disgorgement of profits and penalties. This case, coupled with HKEX’s ongoing consultation on the enhancement of the IPO application and allocation framework (HKEX Consultation Paper, October 2024), has made duplicate application risk a central concern for sponsors, placing agents, and retail investors alike. The regulatory framework is unambiguous: HKEX Listing Rule 18.08(2) prohibits any person from making more than one application for shares in a public offer, and the consequences extend beyond mere rejection to criminal liability under the Securities and Futures Ordinance (Cap. 571). For the 2025-2026 deal pipeline, where retail oversubscription multiples have averaged 28.4x for new economy issuers on the Main Board, the financial incentive to circumvent this rule remains substantial, making a detailed understanding of the disqualification mechanics essential for all market participants.

The Regulatory Framework: HKEX Listing Rules and SFC Enforcement

The prohibition against duplicate applications is rooted in HKEX Listing Rule 18.08(2), which explicitly states that “no person may make or be deemed to make more than one application for shares in a public offer.” This rule applies to all Main Board and GEM IPOs, and its breach can result in the rejection of all applications made by that person, the forfeiture of application monies, and referral to the SFC for potential criminal proceedings. The SFC’s enforcement approach has evolved from administrative sanctions to active criminal prosecution, reflecting a zero-tolerance stance on market manipulation through application stacking.

The Prohibition Under Listing Rule 18.08(2)

HKEX Listing Rule 18.08(2) operates in conjunction with the standard terms of IPO prospectuses, which invariably include a clause stating that any applicant who makes or is deemed to make a duplicate application will have all their applications rejected. The rule’s scope extends beyond the individual applicant to include “persons acting in concert” — a term defined broadly in the Takeovers Code (SFC Code on Takeovers and Mergers, 2024 edition) but applied analogously in the IPO context. The SFC’s 2024 enforcement action interpreted “acting in concert” to include family members, employees of the same entity, and individuals who shared the same funding source or nominee agent. The practical implication is that an applicant cannot circumvent the rule by distributing applications across family members or corporate vehicles if a common control or funding source exists.

SFC Enforcement Trends: 2022-2025

SFC enforcement statistics for the period 2022-2025 reveal a clear upward trajectory in actions against duplicate application schemes. According to the SFC’s Annual Enforcement Report 2024, the regulator investigated 17 cases involving suspected duplicate applications in IPOs during the 2023-2024 financial year, a 42% increase from 12 cases in 2022-2023. Of these, 8 cases were referred to the Market Misconduct Tribunal, and 3 resulted in criminal convictions under Section 300 of the Securities and Futures Ordinance (Cap. 571), which prohibits the use of fraudulent or deceptive devices in connection with dealing in securities. The maximum penalty under Section 300 is a fine of HKD 10 million and imprisonment for 10 years. The SFC’s 2024 case involving 150 nominee accounts was the largest such scheme uncovered, with the syndicate having applied for a total of 2.4 million shares across four IPOs, securing allocations worth HKD 18.2 million at the offer prices.

The Role of the Market Misconduct Tribunal

The Market Misconduct Tribunal (MMT) serves as the primary adjudicatory body for civil cases involving duplicate applications. Under Part XIII of the Securities and Futures Ordinance (Cap. 571), the MMT can issue disqualification orders that bar individuals from being involved in the management of any listed company for a period of up to five years. In the 2025 MMT ruling on the nominee account case, the Tribunal imposed disqualification orders on all 12 respondents, with the longest period being 4 years for the scheme’s mastermind. The MMT also ordered the disgorgement of HKD 18.2 million in profits, plus interest at the judgment rate of 8% per annum, and imposed civil penalties totaling HKD 9.6 million. These orders have a direct impact on the individuals’ ability to participate in future IPOs, as sponsors are required under HKEX Listing Rule 3A.03 to conduct due diligence on the integrity of all applicants.

How Duplicate Applications Are Detected: HKEX’s Technological and Procedural Mechanisms

Detection of duplicate applications has been significantly enhanced by HKEX’s implementation of the IPO Application and Allotment System (IAAS) in 2023, which replaced the previous manual reconciliation process. The IAAS uses a combination of biometric data matching, funding source analysis, and network mapping to identify patterns indicative of duplicate applications. Sponsors and placing agents are also subject to enhanced due diligence requirements under the SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC (2024 edition).

The IPO Application and Allotment System (IAAS)

The IAAS, operational since January 2023, processes all IPO applications submitted through the Central Clearing and Settlement System (CCASS) and white form applications. The system cross-references applicant data against a database of over 8.2 million unique investor profiles, using the Hong Kong Identity Card number (for individuals) or Business Registration Certificate number (for corporates) as the primary key. The IAAS also employs fuzzy matching algorithms to detect applications submitted under slightly different name spellings or identity document variations. According to HKEX’s 2024 Annual Report, the IAAS flagged 1,847 potential duplicate application incidents in the 2024 calendar year, of which 312 were confirmed as intentional duplicates after sponsor investigation. The system’s false positive rate is 0.02% of total applications, which HKEX considers acceptable given the volume of approximately 9.2 million applications processed annually.

Sponsor Due Diligence Obligations

Sponsors are required under HKEX Listing Rule 3A.03 to exercise “reasonable care and due diligence” in verifying the identity and eligibility of applicants. The SFC’s Code of Conduct, paragraph 17.6, specifically requires sponsors to implement systems and controls to detect and prevent duplicate applications. In practice, this means sponsors must review applicant lists for commonalities such as identical mailing addresses, telephone numbers, bank account numbers, and payment sources. The SFC’s 2024 thematic inspection of 12 major sponsors found that 8 had inadequate systems for detecting duplicate applications, resulting in the SFC issuing warning letters and requiring remedial action plans. The inspection report noted that the most common deficiency was the failure to cross-reference applicant data against the sponsor’s own client database, which would have revealed relationships between multiple applicants.

Funding Source Tracing and White Form Applications

White form applications, which are physical application forms submitted by individual investors, remain a significant vulnerability in the duplicate application detection framework. Unlike electronic applications submitted through CCASS, white form applications are not automatically linked to a single investor identity. The HKEX has addressed this through the requirement that all white form applications must be accompanied by a cheque drawn on a Hong Kong bank account, and the cheque number, bank branch code, and account number are recorded. The IAAS then cross-references these funding source details against other applications. In the 2024 nominee account case, the syndicate used 150 separate bank accounts, each with a different account holder, to fund the applications. However, the IAAS detected the pattern because all 150 accounts were opened at the same bank branch on the same day, with the same initial deposit amount of HKD 10,000 each. This pattern triggered a manual review by the sponsor, which ultimately led to the SFC investigation.

Consequences for Applicants: From Rejection to Criminal Liability

The consequences of making a duplicate application in a Hong Kong IPO range from administrative rejection to criminal prosecution, depending on the scale and intent of the violation. The HKEX and SFC have established a graduated enforcement framework that applies to both retail investors and sophisticated market participants.

Rejection of All Applications and Forfeiture of Monies

The immediate consequence of a confirmed duplicate application is the rejection of all applications made by that person, regardless of whether the duplicate was intentional or inadvertent. Under the standard terms of an IPO prospectus, the applicant forfeits the right to any allocation, and the application monies are returned without interest. However, if the duplicate application is detected after the allotment has been made, the HKEX may require the issuer to claw back the shares from the offending applicant. In the 2024 case involving the 150 nominee accounts, the syndicate had already received allocations worth HKD 18.2 million before the duplicate applications were detected. The HKEX required the sponsoring bank to repurchase the shares from the syndicate at the offer price, resulting in a loss of HKD 3.4 million for the sponsor due to the decline in the share price between the allotment date and the repurchase date.

Criminal Prosecution Under the Securities and Futures Ordinance

Section 300 of the Securities and Futures Ordinance (Cap. 571) makes it a criminal offence to use any fraudulent or deceptive device in connection with dealing in securities. The SFC has successfully argued that the use of multiple nominee accounts to secure additional allocations in an IPO constitutes a fraudulent device, as it misrepresents the true identity of the applicant to the issuer and the HKEX. The maximum penalty under Section 300 is a fine of HKD 10 million and imprisonment for 10 years. In the 2024 case, the SFC charged 8 individuals under Section 300, and 6 pleaded guilty, receiving sentences ranging from 6 to 18 months’ imprisonment, suspended for 2 years. The two individuals who contested the charges were convicted after trial and sentenced to 24 months’ imprisonment each, with the judge emphasizing the need for general deterrence given the prevalence of such schemes.

Disqualification Orders and Market Bans

The Market Misconduct Tribunal has the power under Section 257 of the Securities and Futures Ordinance to issue disqualification orders that prevent individuals from being involved in the management of any listed company for up to five years. This has significant career implications for finance professionals, as it effectively bars them from serving as directors, company secretaries, or senior executives of any HKEX-listed entity. In the 2025 MMT ruling, the Tribunal imposed disqualification orders on all 12 respondents, including 3 licensed representatives who were also referred to the SFC for disciplinary action under the SFC’s disciplinary powers. The SFC subsequently revoked the licenses of these 3 individuals under Section 194 of the Securities and Futures Ordinance, permanently barring them from the securities industry. For retail investors who are not licensed professionals, the disqualification order still prevents them from serving as directors of listed companies, which can affect their ability to participate in pre-IPO placements or serve on boards of family-controlled listed entities.

Practical Safeguards for Market Participants

Given the severity of the consequences, all market participants — from retail investors to institutional placing agents — must implement robust safeguards to ensure compliance with the duplicate application prohibition. The HKEX and SFC have provided guidance on best practices, and sponsors have developed internal controls to mitigate risk.

For Retail Investors: Single Application Discipline

Retail investors should submit only one application per IPO, using their own Hong Kong Identity Card number and a single bank account for the application funds. The common misconception that using different bank accounts or different family members’ names automatically avoids detection is incorrect, as the IAAS cross-references funding sources and network relationships. Investors should also avoid using multiple brokerage accounts to submit separate applications, as this is a clear violation of Listing Rule 18.08(2). The SFC’s Investor Education Centre advises that even if the investor genuinely has multiple accounts at different brokers, they must not submit applications from more than one account for the same IPO. The penalty for inadvertent duplication — such as forgetting a previous application and submitting a second one — is still the rejection of all applications, though criminal prosecution is unlikely if the sponsor determines the duplication was unintentional.

For Placing Agents and Sponsors: Enhanced Due Diligence

Placing agents and sponsors should implement automated pre-submission screening systems that check applicant data against their own client databases and the IAAS. The SFC’s 2024 thematic inspection recommended that sponsors adopt a “three-line of defence” model: (1) automated screening at the point of application submission, (2) manual review by compliance officers of flagged applications, and (3) post-allocation audit to identify any missed duplicates. Sponsors should also maintain detailed records of all applicant communications, including the source of funds verification, for a minimum of seven years as required under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615). The cost of implementing such systems is estimated at HKD 2-5 million per sponsor for initial setup, with annual maintenance costs of HKD 500,000 to HKD 1 million. However, the potential liability from a single duplicate application scheme — as demonstrated by the HKD 3.4 million loss suffered by the sponsoring bank in the 2024 case — justifies this investment.

For Issuers and Directors: Board-Level Oversight

Issuers and their directors should ensure that the IPO prospectus includes clear language regarding the prohibition on duplicate applications and the consequences of breach. The board should also review the sponsor’s systems and controls for detecting duplicates as part of the due diligence process under HKEX Listing Rule 3A.03. Directors who knowingly facilitate or turn a blind eye to duplicate applications by related parties may face personal liability under Section 300 of the Securities and Futures Ordinance. In the 2024 case, the MMT found that the chairman of the issuer in one of the four IPOs was aware of the nominee account scheme and had provided introductions to the syndicate. The chairman was disqualified from being a director for 3 years and ordered to pay HKD 2.1 million in penalties. Issuers should also consider including a representation and warranty in the placing agreement that the placing agents have implemented adequate systems to prevent duplicate applications.

Actionable Takeaways

• Retail investors must submit only one application per IPO using their own identity document and a single bank account, as the IAAS cross-references funding sources and network relationships to detect duplicates regardless of account name differences.
• Sponsors and placing agents should implement automated pre-submission screening systems with a “three-line of defence” model, as the SFC’s 2024 thematic inspection found that 8 out of 12 major sponsors had inadequate duplicate detection systems.
• The consequences of duplicate applications escalate from rejection of all applications to criminal prosecution under Section 300 of the Securities and Futures Ordinance, with maximum penalties of HKD 10 million fines and 10 years imprisonment.
• Directors who knowingly facilitate duplicate applications face personal liability, including disqualification orders of up to 5 years and civil penalties, as demonstrated by the MMT’s 2025 ruling against a chairman who provided introductions to a nominee account syndicate.
• The cost of implementing duplicate detection systems (HKD 2-5 million for initial setup) is justified by the potential liability from a single scheme, as the sponsoring bank in the 2024 case suffered a HKD 3.4 million loss from repurchasing shares at the offer price.