DingTalk Must Follow the Rules: Unveiling Hong Kong's Securities and Futures Ordinance

When it comes to the "supreme martial arts master" of Hong Kong's financial world, nothing tops the Securities and Futures Ordinance (Cap. 571). This isn't some theoretical kung fu manual—it’s the real regulatory bible. Since its enactment in 2003, consolidating previous laws, it has unified the landscape, bringing securities, futures, leveraged foreign exchange, and asset management under one roof, overseen directly by the Securities and Futures Commission (SFC)—essentially serving as the central police force of the financial world.

Here’s the key point: if you engage in any of the nine categories of “regulated activities” defined by the ordinance, whether you’re in a suit and tie or hiding behind an app sending messages, you must obtain a license. Under Section 114 of Part V, operating without a license could land you with fines up to millions or even jail time. Don’t think encrypted groups or voice notes can help you slip through the cracks—the SFC’s “eagle eyes” are trained to detect all kinds of technological tricks.

In short, even if you're a communications giant like DingTalk, stepping into the financial arena means you first need the SFC’s approval.

If DingTalk wants to play in Hong Kong’s financial space, don’t assume it’s as simple as creating chat groups and sending messages. The moment someone starts posting inside a group, “This stock is guaranteed to rise,” or integrating brokerage interfaces that allow one-click trading, congratulations—you’ve just entered the minefield of the Securities and Futures Ordinance. Under Type 1 regulated activity (“Dealing in Securities”), any platform that “facilitates” buying or selling—whether through a button embedded in a chat room—is engaging in regulated activity and must be licensed. Similarly, enabling futures contract trading would immediately breach Type 2 regulations.

Even more nuanced are Types 4 and 5: “Providing Advice.” Don’t think you’re safe saying, “I think US stocks will drop tonight.” If your comments become ongoing, systematic, or involve analytical models, the SFC may determine you’re offering advice on securities or futures—and yes, that requires a license too.

And if DingTalk launches automated trading bots allowing users to set conditions for automatic execution, that falls squarely under Type 7: “Providing Automated Trading Services.” No matter how advanced the tech, it still needs regulatory clearance first. Bottom line: the closer your features get to finance, the closer you are to jail.

While some may still see tech platforms as lawless territories, the SFC has quietly pulled up a chair at the gate—go ahead and innovate, but don’t forget we enforce the rules. Don’t think wrapping yourself in the sheepskin of a “messaging app” will save you from the regulator’s jaws. The SFC lives by one core principle: substance over form. If DingTalk merely sends messages and hosts chat groups, it remains clean. But once a guru inside starts issuing calls: “Buy Tencent! Target price HK$500!”—that chat just escalated into a Type 4 regulated activity: providing securities advice. Time to apply for a license.

The SFC’s logic is straightforward: whether you use DingTalk, WeChat, or Feishu, if what you’re doing resembles what a broker does, you must wear the same regulatory muzzle. The 2022 crackdown on unlicensed virtual asset platforms was a clear example—no matter how flashy the technology, it couldn’t hide the fact that they were soliciting clients and facilitating trades. So DingTalk, don’t try to deflect with “I’m just a tool.” The SFC doesn’t care about your outer shell—they care about what you’re actually doing.

For DingTalk, entering Hong Kong’s financial scene is like a young martial artist trying to compete at Huashan Summit—raw skill isn’t enough; you must understand the sects’ rules. Option one: apply directly to the SFC for a full license. Sounds impressive, but it’s costly and time-consuming—like retreating into seclusion for ten years, only to emerge after rivals have already fought three rounds. Option two: partner with a licensed broker, embedding trading functions via API while avoiding sensitive operations yourself. Let your partner shoulder the regulatory burden—like gaining protection from a senior master. Safety improves significantly, but beware: even as a “ghost behind the curtain,” you may still come under scrutiny. The SFC doesn’t care if you’re outsourcing—anti-money laundering checks and suitability assessments still apply. Option three is the most conservative: lock down functionality strictly to “pure messaging.” Sharing market news? Fine. Saying “this stock will definitely surge”? Absolutely not. And never assist users in placing trades. Seems safe—but also sacrifices business opportunities. In finance, sometimes being too cautious brings its own anxiety.

No matter which path DingTalk chooses, one thing is clear: no matter how dazzling the technology, regulatory red lines cannot be dodged. Even in partnership mode, the platform must implement client identification systems, monitor suspicious communications, and maintain audit trails accessible to the SFC. In other words, you might not wield the sword, but you’d better come equipped with armor and military records. After all, the SFC’s motto is: “Whoever controls the system bears the responsibility.”

"Boss, the finance team said this stock looks great in our DingTalk group!"—if you hear this, watch out! You might already have stepped on a landmine set by the Securities and Futures Ordinance. Don’t dismiss it as casual office chatter. Once non-employees join the group or content gets screenshotted and shared externally, such “sharing” can easily morph into “providing investment advice.” And if your company lacks a license, that constitutes illegal conduct of regulated activity.

It gets riskier when HR uses DingTalk to gauge employee interest in ESOPs (Employee Share Ownership Plans). If this involves unlisted shares or public appeals to participate, it may cross the red line into “soliciting investments.” Financial regulation doesn’t deal in sentiment—it focuses solely on the nature of actions. No matter how convenient DingTalk is, it shouldn’t become a loophole for bypassing compliance.

Instead of fixing problems after they occur, regularly review communication policies, run compliance training sessions in the style of “comedy workshops” (e.g., simulating违规 dialogues for staff to spot issues), and have your legal team clearly define boundaries for commonly used features. Remember: You can be late clocking in—but you must never cross the compliance line!

We dedicated to serving clients with professional DingTalk solutions. If you'd like to learn more about DingTalk platform applications, feel free to contact our online customer service or email at This email address is being protected from spambots. You need JavaScript enabled to view it.. With a skilled development and operations team and extensive market experience, we’re ready to deliver expert DingTalk services and solutions tailored to your needs!