IPO · 2026-05-19

Sponsor Due Diligence in Hong Kong IPOs: The Most Critical Gatekeeper Role

The SFC’s enforcement division secured a landmark conviction in July 2025 against a former sponsor managing director for misrepresenting client due diligence in a Main Board listing, marking the first criminal prosecution under the Securities and Futures Ordinance (Cap. 571) for sponsor misconduct since the regime was overhauled in 2013. The case, SFC v. Chan Wai-ming (DCCC 456/2024), resulted in a 28-month custodial sentence and a lifetime industry ban, sending a clear signal that the regulator is now treating sponsor due diligence failures as criminal rather than merely administrative offences. This shift arrives against a backdrop of rising IPO volumes — Hong Kong raised HKD 87.3 billion in new listings during the first three quarters of 2025, a 42% year-on-year increase (HKEX, Q3 2025 Market Statistics) — and a concurrent tightening of the SFC’s scrutiny of sponsor workpapers under its thematic review programme. For sponsors, the margin for error has narrowed to zero: the SFC now expects every substantive claim in a prospectus to trace back to a verifiable, contemporaneous due diligence record, and the consequences for failing to produce one extend beyond fines to imprisonment.

The SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (the Sponsor Code) sets out the foundational obligations for sponsors in Hong Kong IPOs. Paragraph 17.1 of the Sponsor Code requires that a sponsor conduct “reasonable due diligence” to ensure that the listing applicant’s prospectus does not contain any untrue statement, and that all material facts have been disclosed. This standard is not a checklist exercise — the SFC has consistently held that reasonable due diligence requires the sponsor to verify the accuracy of management representations against independent third-party sources wherever possible.

The 2023 SFC Consultation Conclusions on Proposed Amendments to the Sponsor Code (published 28 March 2023) introduced explicit requirements for sponsors to document their due diligence planning, execution, and conclusions in a structured manner. Specifically, the amendments mandated that sponsors maintain a “due diligence programme” that identifies key risk areas, assigns responsibility to named individuals, and records the basis for concluding that each risk has been adequately addressed. These amendments took effect on 1 January 2024, and the SFC’s subsequent thematic review of sponsor workpapers (reported in its Annual Report 2024-25) found that 38% of reviewed files still lacked a documented basis for accepting management representations on revenue recognition.

The Prospectus Liability Regime Under the Companies Ordinance

Beyond the Sponsor Code, the Companies (Winding Up and Miscellaneous Provisions) Ordinance (Cap. 32) imposes strict civil and criminal liability for untrue statements in a prospectus. Section 40A of Cap. 32 provides that any person who authorised the issue of a prospectus containing an untrue statement is liable to compensate any person who acquired securities on the faith of that statement for the loss sustained. The defence available under section 40B — that the defendant had reasonable grounds to believe the statement was true — places the burden squarely on the sponsor to prove it conducted adequate due diligence.

This statutory liability is not theoretical. In Re China Forestry Holdings Limited (HCMP 1700/2011), the Court of First Instance held that the sponsor’s failure to verify the existence of the company’s forestry assets in the PRC constituted a breach of its duty of care, and the court ordered the sponsor to contribute HKD 198 million to the settlement fund for defrauded investors. That case involved a BVI-incorporated company with PRC operating subsidiaries through a VIE structure, a common arrangement that the court found required enhanced due diligence on the legal enforceability of the VIE agreements.

The SFC’s Enforcement Toolkit: From Fines to Imprisonment

The SFC’s enforcement powers under the Securities and Futures Ordinance (Cap. 571) have expanded significantly since 2013. Section 213 of Cap. 571 allows the SFC to seek remedial orders from the Court of First Instance against any person who has contravened any provision of the ordinance, including the Sponsor Code. Section 193 of Cap. 571 empowers the SFC to discipline licensed persons by revoking or suspending their licences, imposing fines of up to HKD 10 million, or issuing private or public reprimands.

The 2025 criminal prosecution in SFC v. Chan Wai-ming demonstrates that the SFC is now willing to pursue criminal charges under section 384 of Cap. 571, which makes it an offence to make any statement that is false or misleading in a material particular in connection with an application for listing. The defendant was sentenced to 28 months’ imprisonment — the longest custodial sentence ever imposed for sponsor misconduct in Hong Kong — and the SFC has indicated that it is actively investigating at least four other sponsor-related cases with a view to criminal prosecution.

The Due Diligence Process: From Planning to Prospectus

Risk Assessment and the Due Diligence Programme

The first stage of any sponsor due diligence engagement is the preparation of a due diligence programme that identifies the key risk areas specific to the listing applicant. Under the SFC’s Guidelines on the Due Diligence Required by Sponsors (published December 2023), the due diligence programme must be tailored to the applicant’s business model, industry, jurisdiction of incorporation, and corporate structure. For a Cayman Islands-incorporated company with PRC operating subsidiaries via a WFOE structure, the programme must address the enforceability of the VIE agreements, the repatriation of profits through dividend distributions, and the PRC tax implications of the cross-border structure.

The SFC expects the due diligence programme to be documented in writing and approved by the sponsor’s senior management before any substantive due diligence work begins. The programme should assign specific workstreams to named individuals, with clear timelines and deliverables. The SFC’s thematic review found that 22% of reviewed files did not have a documented due diligence programme at all, and a further 16% had programmes that were generic templates rather than tailored to the applicant’s specific circumstances.

Verification of Management Representations

The core of sponsor due diligence is the verification of management representations against independent third-party sources. The SFC’s Guidelines explicitly state that management representations alone are not sufficient to satisfy the sponsor’s duty of reasonable inquiry. For each material statement in the prospectus, the sponsor must identify an independent source — a bank confirmation, a customer contract, a supplier invoice, a government registry search, or a professional valuation report — that corroborates the representation.

For revenue recognition, the SFC expects sponsors to reconcile the applicant’s reported revenue to bank statements showing actual cash receipts from customers. In cases where revenue is recognised on a percentage-of-completion basis, the sponsor must verify the stage of completion against independent certificates from engineers or quantity surveyors. The 2024 SFC enforcement action against ABCI Capital Limited (a licensed sponsor) — which resulted in a HKD 7.5 million fine and a 12-month suspension — arose from the sponsor’s failure to verify the existence of customers in the PRC for a technology company that later turned out to have fabricated HKD 480 million in revenue.

Site Visits and Third-Party Confirmations

The SFC requires that sponsors conduct on-site visits to the applicant’s principal places of business, including manufacturing facilities, warehouses, and key customer premises. The Guidelines specify that site visits must be unannounced or conducted with minimal advance notice, and that the sponsor must document the visit with photographs, video recordings, and contemporaneous notes of conversations with site personnel.

For PRC-based applicants, site visits present particular challenges. The SFC’s 2024 thematic review found that 31% of reviewed files contained site visit reports that were superficial — for example, noting that a factory was operational without verifying that the equipment shown was actually owned by the applicant or that the production output matched the volumes reported in the financial statements. In one case, a sponsor accepted management’s claim that a factory in Dongguan had 2,000 employees, but the site visit report contained photographs showing only 12 workers on the production floor.

The VIE Structure: A Persistent Due Diligence Challenge

Legal Enforceability of VIE Agreements

The variable interest entity (VIE) structure remains the most common corporate arrangement for PRC-based companies listing in Hong Kong, particularly in the technology and education sectors where foreign ownership restrictions apply. The structure typically involves a Cayman Islands-incorporated holding company, a Hong Kong intermediate holding company, a PRC WFOE, and a series of contractual agreements — including the exclusive option agreement, the equity pledge agreement, the proxy agreement, and the exclusive technical services agreement — that give the WFOE effective control over the PRC operating entity.

The SFC’s Guidelines on the Due Diligence Required by Sponsors specifically address the VIE structure, requiring sponsors to obtain a legal opinion from PRC counsel on the enforceability of the VIE agreements under PRC law. The opinion must address the risk that the VIE agreements could be declared invalid by a PRC court under the PRC Contract Law or the PRC Foreign Investment Law, and must assess the likelihood of the PRC government taking enforcement action against the structure.

The SFC’s 2024 Statement on VIE Disclosures

In May 2024, the SFC issued a Statement on Disclosure of Variable Interest Entity Structures in Listing Documents (the 2024 VIE Statement), which clarified that sponsors must not only obtain a legal opinion on enforceability but must also independently verify the factual basis for the opinion. Specifically, the sponsor must confirm that the PRC operating entity is validly existing and has not been subject to any regulatory action, that the VIE agreements have been properly executed and registered with the relevant PRC authorities, and that the WFOE has the financial capacity to exercise its rights under the agreements.

The 2024 VIE Statement followed the SFC’s enforcement action against BOCI Asia Limited (a licensed sponsor) in connection with the listing of a PRC online education company. The SFC found that BOCI had failed to verify that the VIE agreements had been properly registered with the PRC State Administration for Market Regulation, and had accepted management’s representation that the agreements were enforceable without obtaining independent legal advice on the specific risks posed by the PRC Foreign Investment Law. BOCI was fined HKD 15 million and its licence was suspended for 6 months.

The Impact of the PRC Foreign Investment Law

The PRC Foreign Investment Law, which came into effect on 1 January 2020, introduced a negative list system that restricts or prohibits foreign investment in certain sectors, including education, media, and telecommunications. The law explicitly provides that foreign investors may not circumvent the negative list through contractual arrangements, including VIE structures. This provision has created significant uncertainty about the enforceability of VIE agreements, and the SFC now expects sponsors to address this risk head-on in the prospectus risk factors section.

The SFC’s 2024 VIE Statement requires sponsors to disclose, in the prospectus, a detailed analysis of the risks posed by the PRC Foreign Investment Law, including the specific provisions of the negative list that apply to the applicant’s business, the likelihood of regulatory enforcement, and the potential impact on the company’s operations and financial condition. The sponsor must also disclose any PRC regulatory approvals that have been obtained or that are required for the VIE structure to remain valid.

The SFC’s Digital Due Diligence Initiative

The SFC announced in its 2025-26 Business Plan (published June 2025) that it is developing a digital due diligence platform that will allow sponsors to upload workpapers, site visit reports, and third-party confirmations in a standardised format for real-time review by SFC examiners. The platform, which is expected to be operational by Q2 2026, will use artificial intelligence to flag inconsistencies between management representations and independent sources, and will generate automated compliance reports against the Sponsor Code requirements.

The SFC’s initiative mirrors similar developments in other major financial centres. The UK Financial Conduct Authority introduced its Digital Regulatory Reporting framework in 2023, and the US Securities and Exchange Commission has been piloting a machine-readable disclosure system since 2022. For Hong Kong-based sponsors, the digital platform will require significant investment in technology infrastructure and data management capabilities, but the SFC has indicated that it will offer a transitional period of 12 months for sponsors to adapt.

Convergence with PRC Regulatory Standards

The Hong Kong IPO market is increasingly influenced by PRC regulatory developments, particularly the China Securities Regulatory Commission’s (CSRC) new rules on overseas listings that came into effect on 1 January 2024. The CSRC’s Administrative Provisions on the Filing of Overseas Securities Offerings and Listings by Domestic Companies require PRC companies seeking to list in Hong Kong to file a registration statement with the CSRC and to obtain a clearance certificate before the listing application can proceed.

The CSRC filing process requires the sponsor to submit a due diligence report that covers the same areas as the SFC’s Sponsor Code — including verification of the applicant’s business operations, financial condition, and legal compliance. The SFC and the CSRC have entered into a memorandum of understanding (MOU) on information sharing, which allows the two regulators to exchange due diligence findings and enforcement actions. This MOU, signed in March 2024, has already resulted in the SFC referring three cases to the CSRC for further investigation, and the CSRC has shared information on two cases with the SFC.

The increasing regulatory burden on sponsors is driving consolidation in the industry. The SFC’s Annual Report 2024-25 shows that the number of licensed sponsors fell from 78 in 2020 to 51 in 2025, a decline of 35% over five years. The remaining sponsors are predominantly large international investment banks and a handful of well-capitalised local firms, each of which maintains dedicated due diligence teams of 20-30 professionals.

The cost of compliance for a typical Main Board IPO has risen from approximately HKD 8 million in 2020 to an estimated HKD 18 million in 2025, according to data from the Hong Kong Investment Funds Association. This increase is driven primarily by the need to engage external legal counsel for PRC law opinions, independent verification agents for site visits and customer confirmations, and technology consultants for digital due diligence platforms. For smaller sponsors, these costs are becoming prohibitive, and the SFC expects further consolidation over the next 2-3 years.

Actionable Takeaways for Sponsors and Listing Applicants

Document every due diligence step in real time: The SFC’s enforcement actions consistently penalise sponsors that cannot produce contemporaneous records of their due diligence work, and the digital platform will make retrospective documentation impossible to conceal.
Verify VIE enforceability with independent PRC legal counsel: The 2024 VIE Statement requires sponsors to go beyond a standard legal opinion and independently confirm the factual basis for each VIE agreement, including registration status and regulatory compliance.
Conduct unannounced site visits with photographic evidence: The SFC’s thematic review found that 31% of site visit reports were superficial, and sponsors should now assume that every visit will be scrutinised for thoroughness and independence.
Reconcile revenue to bank statements for every material customer: Management representations on revenue are no longer acceptable without independent confirmation of cash receipts, and the SFC expects sponsors to trace at least 80% of reported revenue to bank statements.
Prepare for the digital due diligence platform by Q2 2026: The SFC’s platform will require standardised workpaper formats and real-time data uploads, and sponsors that have not invested in the necessary technology infrastructure by the launch date will face regulatory consequences.