The Hong Kong Securities and Futures Commission (SFC) has mandated that licensed crypto trading platforms and online brokers eliminate SMS-based authentication in favor of more secure login methods. This change needs to be implemented within the next year as part of a broader effort to combat phishing scams that have caused substantial financial losses.

In the first quarter of 2026 alone, phishing scams were responsible for approximately $306 million in losses associated with cryptocurrencies. As such, the SFC's recent directive emphasizes the need for enhanced cybersecurity measures in the rapidly evolving digital asset sector.

Why This Matters for Users and the Industry

Transitioning away from SMS-based verification is crucial for improving the security of user accounts on crypto platforms. The SFC's new regulations are aimed at minimizing phishing attempts that exploit traditional authentication methods. Businesses now require more robust systems to protect their clients and their own operations.

  • All licensed platforms have 12 months to comply with the new requirements.
  • Phishing attacks account for significant financial losses, emphasizing the urgency of this change.
  • Acceptable alternatives include passkeys and cryptographic hardware security keys.

The SFC’s announcement coincides with Hong Kong's ongoing efforts to enhance standards in the digital asset market. Recently, the regulator signaled changes to the Certified Virtual Asset Platform Practitioner program, which aims to bolster professional qualifications in the sector. This aligns with Hong Kong’s goals of supporting innovation while ensuring stability.

Looking Ahead: Next Steps for the Crypto Sector

As the industry adapts to these new authentication regulations, stakeholders will need to monitor implementation progress and the effectiveness of the new systems. The upcoming introduction of regulated stablecoins and the evolving certification programs will also be critical areas to watch as the regulatory landscape continues to develop.

This article is for informational purposes only and does not constitute financial advice.