Starting a Business in Hong Kong: Legal, Tax, and Banking Checklist

Define the launch gates for the real business

The operating model determines the checklist. A consulting company working remotely for overseas clients has different premises, licence, employment and payment dependencies from a restaurant, money service operator, online marketplace or company holding investments. Write the first twelve months of activity in concrete terms: what the company sells, where work occurs, who signs, who pays, how goods or data move, which staff are hired and which currencies enter the account.

Turn that model into launch gates. Each gate needs a responsible person, source rule, required evidence, target date, dependency and stop condition. “Legal complete” should mean the company exists and can show valid authority; “tax ready” should mean the ledger, records and reporting owner are active; “bank ready” should mean the institution can evaluate a truthful KYC file and the account supports the flows. A coloured project tracker without evidence definitions is not a compliance control.

Set the planned start date after mapping dependencies. A regulated activity may not commence while a licence is pending; hiring cannot proceed without lawful work arrangements and employer controls; invoices should not be issued into a payment route the company cannot reconcile. If the business model changes, rerun the gate analysis rather than treating the original company registration as permanent permission for a new activity.

Establish the legal entity and decision authority

A local private company limited by shares is the common commercial form when founders need separate legal personality, limited member liability and share ownership. It requires at least one founder member, one natural-person director, a qualified company secretary and a Hong Kong registered office. Foreign ownership and directors are generally permitted; the sole director cannot also be the secretary.

The incorporation submission contains Form NNC1, Articles of Association and Form IRBR1. On August 19, 2026, the electronic incorporation fee is HK$1,545 and the one-year BRC amount is HK$2,350. The electronic certificates may be issued within about one hour after complete delivery, but the first approvals still need to translate the filing into operating authority.

• Approve banking and payment signers, contract-signing thresholds, expense authority and who can bind the company.
• Issue and record the initial shares, subscription amounts and member details; separate equity from shareholder loans.
• Maintain registers of members, directors and secretary, share certificates and the Significant Controllers Register where required.
• Appoint an eligible designated representative for the Significant Controllers Register and document where it is kept.
• Notify the Business Registration Office of business particulars within one month from commencement and report later changes on time.

Contracts should use the incorporated company’s exact legal name and Business Registration Number where appropriate. A founder who signed a pre-incorporation contract should obtain advice on adoption, novation or personal exposure; the later company does not automatically rewrite every earlier obligation. If an overseas parent funds or licenses intellectual property to the company, use documented intercompany terms and approvals rather than informal founder transfers.

Identify licences, premises and contract rules

The Business Registration Certificate is not a licence to trade. The IRD says business registration is not designed to regulate activities. The responsible authority depends on what the company actually does: financial and securities work, money service operation, lending, insurance, food and liquor, education, travel, employment agencies, import/export controls and professional services each have distinct legislation and regulators.

Use the government’s licensing information and the relevant regulator’s current rules to identify the exact permission, applicant, responsible personnel, premises, financial resources, forms, fees, processing path, renewal and prohibited pre-approval conduct. A company can be incorporated before an activity licence is granted, but its contracts, marketing and service delivery must respect the licence boundary. If a provider says a business is “unregulated,” ask for the activity description and source used for that conclusion.

Customer and supplier contracts should specify the service, payment, liability, governing law, data handling, intellectual property, termination and dispute process appropriate to the transaction. Terms cannot waive mandatory consumer, employment, privacy or licensing rules. If personal data is collected, create notices, retention, security and cross-border handling controls that match the Personal Data (Privacy) Ordinance and the real systems, rather than copying a website privacy template from another jurisdiction.

Make the accounting and profits tax file live

Tax readiness begins before the first invoice. The company should choose an accounting reference date, chart of accounts, bookkeeping system, document-retention process, expense policy, invoicing sequence and responsible accountant. Record contracts, invoices, receipts, bank statements, payroll, inventory, director approvals, share subscriptions and shareholder loans in a way that lets an auditor trace each ledger entry to its commercial source.

Hong Kong profits tax is territorial. The normal corporate rate is 16.5%; under the two-tier regime, an eligible corporation pays 8.25% on the first HK$2 million of assessable profits and 16.5% above that. Connected entities can nominate only one entity for the two-tier rates, and special activities can have different rules. The IRD profits-tax guidance supports the rate facts; it does not replace a source analysis for the company’s operations.

An “offshore” profits claim is not an election made on the incorporation form. Source depends on the operations that produced the profit: where contracts are negotiated and concluded, services are performed, sales activity occurs, assets are managed and decision-making happens, depending on the income type. Keep contemporaneous evidence. A business run entirely from the founder’s home country may also create tax-residence or permanent-establishment consequences there, even if Hong Kong ultimately accepts an offshore source position.

Hong Kong companies normally prepare audited financial statements for profits tax filing unless a specific legal exception applies. Dormant, low-turnover or loss-making companies should not assume audit and filing obligations vanish. Obtain an audit and tax scope early enough to preserve source documents, select an accounting period sensibly and avoid year-end reconstruction. Stamp duty can also arise on Hong Kong stock transfers and certain instruments, so changes in ownership need a separate review.

Prepare employer, payroll and work-permission controls

A company becomes an employer through real hiring, not through incorporation. Before the first start date, use a compliant employment contract, verify the person’s right to work, set payroll and leave records, register or enrol eligible staff in Mandatory Provident Fund arrangements within the applicable timetable, and establish employer tax-reporting controls. Directors and founders are not automatically outside employment, payroll, MPF or immigration analysis; the facts of their work and remuneration matter.

The company should separate salary, director’s fees, expense reimbursement, dividends and shareholder-loan movements. Each has different approval, accounting and tax implications. Payroll should reconcile gross pay, deductions, MPF, net payment and employer reporting. If staff work outside Hong Kong, local employment, payroll, permanent-establishment and social-security rules may also apply in that country.

• Obtain and retain identity, address, tax and work-authorisation evidence appropriate to each worker.
• Create onboarding and offboarding checklists for contracts, systems, confidential information, final payments and government notifications.
• Set an employer-return calendar independent of the company’s profits tax and Companies Registry dates.
• Use immigration advice before a foreign founder or employee performs work in Hong Kong; owning shares or holding a director title does not grant permission to work.

Employment and contractor labels should match reality. Calling a worker an independent contractor does not settle legal classification if the company controls how, when and where the person works. Contractor arrangements also need intellectual-property, confidentiality, data and tax terms. Review hiring geography before recruiting, because a remote team can create obligations in several jurisdictions even when the contracting company is incorporated only in Hong Kong.

Build a bank-ready and reconcilable payment route

A business account is a private-institution decision, separate from company registration. Banks commonly review the legal entity, ownership and control, business nature, account purpose, expected transactions, counterparties, operating countries and source of funds. The HKMA account-opening information explains the types of information an institution may request, while each institution retains its own onboarding policy.

Prepare a bank pack that tells the same story as the company, licence and tax records. Include the Certificate of Incorporation, valid BRC, Articles, current ownership chart, member and director evidence, board account mandate, business plan, contracts or commercial pipeline, website or product material, expected currencies and volumes, source of initial funds and explanations for high-risk countries or complex ownership. Do not invent invoices or inflate transaction forecasts to appear more established.

Payment providers can complement or sometimes replace a traditional account for particular flows, but compare safeguarding, deposit protection status, currencies, geographic reach, card or merchant functions, withdrawal limits and closure risk. Client money or regulated payment activity may trigger additional rules. Never route company revenue through a founder’s personal account as a permanent workaround; it creates accounting, ownership, tax and compliance problems.

Sequence the first ninety days with proof

A practical launch plan sequences decisions by dependency rather than by department. Before incorporation, settle the entity, ownership, activity, licence hypothesis, office, secretary and banking narrative. At incorporation, preserve the filed forms, certificates and payment evidence. Before the first transaction, activate authority, records, invoicing, payment and any licence gate. Before hiring, activate employer and immigration controls.

1. Days 0–10: map the business model, legal form, owners, controllers, licence and premises requirements, funding and account needs.
2. Days 10–20: complete provider due diligence, freeze the company data, sign NNC1 and Articles, submit IRBR1 and obtain the certificates.
3. Days 20–35: adopt first approvals, issue shares, establish statutory and significant-controller records, notify commencement particulars and open the ledger.
4. Days 20–60: submit bank or payment applications with commercial evidence, answer KYC questions and test the chosen flow after acceptance.
5. Days 30–75: finalise activity licences, premises, customer and supplier terms, privacy controls and any regulated staffing.
6. Days 45–90: test month-end bookkeeping, payment reconciliation, payroll where relevant, document retention and the full compliance calendar.

These are planning ranges, not official approval promises. A simple unregulated service business may move faster; premises approvals, corporate ownership, licensed activity, certified foreign documents or complex bank review may take longer. Track “ready,” “submitted,” “queried,” “approved with conditions” and “operationally tested” as different states. A certificate or portal status should be attached to each state rather than described from memory.

Authorise launch when legal, tax and banking gates align

Authorise the launch only when the legal entity has valid authority and registration, the activity can lawfully be performed at the chosen premises and by the chosen people, the accounting system can capture the first transaction, and the accepted payment route can receive and reconcile the expected funds. Tax advice, bank onboarding and licensing should use the same ownership and business facts rather than three customised stories.

Record the authorisation in a short launch memorandum that lists each gate, evidence, residual condition and owner. Escalate any item whose answer depends on a regulator, bank or foreign jurisdiction; do not replace that decision with a provider assurance. A controlled business can then grow without losing the chain from contract and payment to ledger, tax return, audit evidence and board responsibility.