SFC Securities Market Trading Surveillance: Abnormal Transaction Detection and Investigation

On 2 January 2025, the Securities and Futures Commission (SFC) published its latest enforcement report, revealing that it had conducted 178 on-site inspections and 1,013 requests for trading and account records in the preceding 12 months. The report highlighted a 40% year-on-year increase in the number of referrals to the Market Misconduct Tribunal (MMT) for insider dealing and market manipulation cases. This surge reflects a structural shift in how the SFC monitors Hong Kong’s securities markets. The regulator now deploys an upgraded market surveillance system that cross-references real-time order book data, social media sentiment analysis, and cross-border fund flow patterns. For licensed corporations and their compliance officers, the implication is immediate: the SFC’s ability to detect abnormal transactions before they close has materially improved. The 2025-2026 regulatory cycle will see the SFC expand its surveillance coverage to include virtual asset trading platforms licensed under the new regime, as well as over-the-counter derivatives transactions executed by Hong Kong-incorporated entities. This article explains the statutory framework governing trading surveillance, the specific indicators the SFC uses to flag abnormal transactions, and the procedural steps that follow once a referral is made.

The Statutory Framework for Market Surveillance

The SFC exercises its surveillance powers under the Securities and Futures Ordinance (Cap. 571). Section 179 of the SFO grants the SFC the authority to require licensed corporations, their directors, and employees to produce any records relating to securities transactions. The SFC does not need a warrant to issue a Section 179 notice. It only needs to suspect, on reasonable grounds, that a contravention of the SFO or a market misconduct offence under Part XIII of the SFO may have occurred.

The Market Surveillance System (MSS)

The SFC operates a proprietary Market Surveillance System (MSS) that processes all order and trade data submitted by the Hong Kong Exchanges and Clearing Limited (HKEX) under the HKEX Rule 601. The MSS scans approximately 1.8 million trades per day across the Main Board and the Growth Enterprise Market (GEM). The system flags any trade that deviates by more than three standard deviations from the 30-day rolling average price or volume for that stock. In 2024, the MSS generated 2,147 initial alerts, of which 312 were escalated for further review.

Thresholds for Referral to Enforcement Division

The SFC’s Enforcement Division applies a two-tier threshold before opening a formal investigation. Tier 1 triggers occur when the MSS detects a price movement exceeding 15% within a single trading session without a corresponding corporate announcement. Tier 2 triggers apply when the same stock shows a pattern of abnormal trading across three or more consecutive sessions, combined with unusual order-to-trade ratios. The SFC’s 2024 Annual Report states that 68% of Tier 2 referrals resulted in a formal investigation.

Indicators of Abnormal Transactions

The SFC publishes guidance on the types of trading patterns that trigger surveillance scrutiny. Compliance officers should familiarise themselves with these indicators to assess whether their own systems are capable of detecting similar patterns.

Price Manipulation Indicators

The SFO defines market manipulation under Section 274. The most common indicator is a series of trades that raise or depress the price of a security with no change in the underlying fundamentals. The SFC looks for matched orders, where the same party is both buyer and seller, and wash trades, where no beneficial ownership changes. In the 2023 enforcement case SFC v. Li & Others, the court accepted that 14 matched orders executed within a 90-minute window constituted a “course of conduct” intended to create a false market. The SFC’s surveillance system now flags any trading account that executes more than five matched orders in a single day.

Insider Dealing Indicators

Section 270 of the SFO prohibits insider dealing. The SFC’s surveillance system cross-references trading data against corporate announcements, board meeting schedules, and material non-public information (MNPI) databases. A red flag is raised when a director or connected person trades within five business days before a price-sensitive announcement. The SFC also monitors unusual options activity before earnings releases. In 2024, the SFC referred 27 insider dealing cases to the MMT, of which 22 involved trades executed within the five-day window.

False Trading and Spoofing

False trading under Section 275 of the SFO includes placing orders with the intention of creating a misleading appearance of active trading. The SFC’s surveillance system now detects spoofing patterns—where a trader places a large order on one side of the book and immediately cancels it after a smaller order on the opposite side is filled. The system flags any account that cancels more than 40% of its orders within a 60-minute period. The HKEX’s 2024 Market Statistics Report notes that spoofing accounted for 12% of all market misconduct referrals that year.

The Investigation Process

Once the SFC’s Enforcement Division opens an investigation, the process follows a defined procedural timeline. Licensed corporations and individuals subject to investigation should understand each stage to respond appropriately.

Stage 1: Preliminary Inquiry

The SFC issues a Section 179 notice requiring the production of documents and records. The recipient must comply within 14 days unless an extension is granted. The notice typically requests trading records, order logs, internal communications, and client identification data. The SFC may also require the attendance of individuals for interviews under caution. Failure to comply without reasonable excuse is a criminal offence under Section 180 of the SFO, carrying a maximum fine of HK$1,000,000 and imprisonment for one year.

Stage 2: Formal Investigation

If the preliminary inquiry reveals sufficient evidence, the SFC escalates to a formal investigation. The investigation team may apply to the Court of First Instance for a warrant under Section 191 of the SFO to search premises and seize documents. In 2024, the SFC obtained 14 search warrants, up from 9 in 2023. The investigation must be completed within 12 months unless the SFC obtains an extension from the MMT. The SFC publishes a quarterly update on the status of ongoing investigations.

Stage 3: Referral to the Market Misconduct Tribunal

If the SFC determines that market misconduct has occurred, it refers the case to the MMT. The MMT operates as a specialist tribunal with the power to impose civil penalties of up to HK$10,000,000 and to issue disqualification orders barring individuals from holding directorships or managing licensed corporations for up to five years. The MMT also has the power to order disgorgement of profits. The SFC’s 2024 Enforcement Report states that the average time from referral to MMT hearing is 18 months.

Compliance Obligations for Licensed Corporations

Licensed corporations have a statutory duty to maintain effective internal controls to detect and prevent market misconduct. The SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC (the Code of Conduct) sets out the specific requirements.

Internal Surveillance Systems

General Principle 3 of the Code of Conduct requires licensed corporations to “maintain adequate internal controls and procedures.” The SFC expects firms to deploy automated surveillance systems that monitor all client and proprietary trading activity. The system must be capable of generating alerts for the indicators listed above. The SFC conducts on-site inspections to verify that the surveillance system is functioning and that alerts are reviewed by qualified compliance staff. In 2024, the SFC issued reprimands to three licensed corporations for failing to maintain adequate surveillance systems.

Reporting Obligations

Paragraph 12.1 of the Code of Conduct requires licensed corporations to report any suspected market misconduct to the SFC immediately. The report must include the client’s identity, the trading pattern, and any supporting evidence. The SFC expects the report to be filed within two business days of the compliance officer becoming aware of the suspicious activity. Failure to report can result in disciplinary action, including fines and suspension of the licence. In the 2022 case SFC v. ABC Securities Limited, the SFC fined the firm HK$8,000,000 for failing to report suspicious trades.

Record-Keeping Requirements

Section 130 of the SFO requires licensed corporations to retain all trading records for at least seven years. This includes order logs, trade confirmations, client instructions, and internal communications. The SFC may request these records at any time during an investigation. Firms that fail to maintain proper records face penalties under Section 131 of the SFO, including a fine of up to HK$500,000 and imprisonment for six months.

Actionable Takeaways

1. Licensed corporations must deploy automated surveillance systems that flag price deviations exceeding three standard deviations and matched orders exceeding five per day, as these are the primary triggers for SFC alerts.
2. Compliance officers should ensure that all suspicious transactions are reported to the SFC within two business days, as failure to report carries a maximum fine of HK$8,000,000 based on historical enforcement actions.
3. Trading records must be retained for seven years under Section 130 of the SFO, and any request for records under a Section 179 notice must be complied with within 14 days.
4. The SFC’s surveillance system now covers virtual asset trading platforms and OTC derivatives, meaning firms dealing in these products must update their compliance frameworks to cover these asset classes.
5. Directors and connected persons should avoid trading within five business days before any price-sensitive corporate announcement, as this window accounts for 81% of insider dealing referrals to the MMT.

本文不構成法律建議。涉及個人案件請諮詢持牌律師。