Virtual Asset Wallet Law and Self-Custody Rights in Hong Kong

Introduction

The ownership and control of virtual assets such as cryptocurrencies and digital tokens is mediated through cryptographic keys—mathematical constructs that provide the holder with the ability to transact on the blockchain. The "wallet"—whether a software application, a hardware device, or a paper record of private keys—is the interface through which individuals exercise control over their digital assets. The legal status of virtual asset wallets, the rights of self-custodying holders, and the obligations and liabilities of wallet service providers are areas of growing legal significance in Hong Kong.

This article examines the legal framework applicable to virtual asset wallets in Hong Kong, the rights of individuals who self-custody their digital assets, and the regulatory implications for wallet service providers.

What Is a Virtual Asset Wallet?

A virtual asset wallet is a tool that stores and manages the cryptographic private keys that give control over blockchain-based assets. It is important to understand that the wallet does not store the digital assets themselves—those exist on the blockchain as entries in a distributed ledger. Rather, the wallet stores the private key that enables the holder to sign transactions authorising the transfer of those assets.

Wallets exist in several forms:

• Software wallets: Applications (desktop or mobile) that generate and store private keys on the user's device, with varying levels of security depending on the implementation.
• Hardware wallets: Physical devices (such as Ledger or Trezor) that store private keys in secure hardware and require physical interaction to sign transactions, providing strong protection against remote attacks.
• Paper wallets: Physical records of private keys (or seed phrases) printed or written on paper, offering offline storage at the cost of vulnerability to physical damage or theft.
• Custodial wallets: Arrangements where the private key is held by a third-party service provider (such as a cryptocurrency exchange) rather than by the individual user. In a custodial wallet arrangement, the user relies on the provider to transact on their behalf.

Self-Custody vs Custodial Arrangements: Legal Implications

The distinction between self-custody and custodial arrangements has fundamental legal consequences:

Self-Custody

In a self-custody arrangement, the individual generates and controls their own private key. They have direct, exclusive control over their digital assets and can transact without the involvement or permission of any third party. The legal characterisation of the assets—as personal property of the key holder—is relatively clear, subject to the legal analysis discussed below.

The primary risks of self-custody are practical: loss or destruction of the private key or seed phrase results in the permanent and irrecoverable loss of access to the associated digital assets. There is no recovery mechanism, no "forgot your password" option, and no regulatory authority that can restore access. The responsibility for security rests entirely with the individual.

Custodial Arrangements

In a custodial arrangement, the service provider holds the private key and the individual holds a contractual claim against the provider for the delivery of the assets. This is analogous to a bank deposit: the depositor does not hold physical cash but has a contractual right against the bank. In the event of the provider's insolvency, the individual may be an unsecured creditor rather than a property owner, depending on the legal structure of the custody arrangement and the jurisdiction's treatment of customer assets in insolvency.

The high-profile failures of cryptocurrency exchanges (FTX, Celsius, and others) have demonstrated that custodial arrangements carry significant counterparty risk: when a custodian becomes insolvent, customers may face prolonged uncertainty and potential loss of assets, even where the underlying digital assets exist on the blockchain.

Legal Nature of Virtual Assets Under Hong Kong Law

The legal status of virtual assets as property under Hong Kong law is a foundational question for wallet law. Hong Kong courts have affirmed, following the analysis in the UK Supreme Court's decision in Tulip Trading Ltd v Bitcoin Association for BSV (and other persuasive authorities), that virtual assets are capable of being treated as personal property. The Law Commission of England and Wales has also concluded that digital assets are a third category of property distinct from "things in action" and "things in possession", capable of attracting the full suite of property rights.

The recognition of virtual assets as property means that:

• An individual holding private keys to digital assets owns those assets as personal property
• Theft or misappropriation of private keys (and hence the digital assets they control) can give rise to proprietary claims and remedies in Hong Kong courts
• Digital assets can be held on trust, passed by succession, and dealt with in insolvency proceedings as property of the estate

Regulatory Status of Wallet Service Providers

Non-Custodial Wallet Providers

Providers of non-custodial wallet software—applications that generate and manage private keys on the user's device, with the provider having no access to those keys—are generally not subject to Hong Kong's VASP licensing regime under the AMLO, because they do not hold or control client assets. The user retains direct control over their keys, and the provider merely supplies the software interface.

However, non-custodial wallet providers may still be subject to consumer protection laws, software liability principles, and (if the wallet includes features such as in-app token swaps or other transaction services) potentially to VASP or other regulatory requirements.

Custodial Wallet Providers

Where a wallet provider holds private keys on behalf of users—as in the case of a cryptocurrency exchange's internal wallet system—the provider is likely engaged in virtual asset services within the scope of the VASP licensing regime. Exchanges operating in Hong Kong that hold client virtual assets must comply with the SFC's stringent safeguarding, cold storage, and segregation requirements as part of their VASP licence obligations.

Loss, Theft, and Recovery of Virtual Assets

Loss of Private Keys

Where an individual loses access to their private key (for example, through loss of a hardware wallet or destruction of a seed phrase), the digital assets controlled by that key are effectively inaccessible. There is no legal mechanism in Hong Kong (or anywhere) to compel the blockchain network to restore access. Estate planning considerations therefore require that individuals make appropriate provisions for their heirs or executors to access private keys in the event of death or incapacity.

Theft of Private Keys

Where private keys are stolen through hacking, phishing, or physical theft, the thief acquires the ability to transfer the assets but does not acquire good legal title to them. The victim retains a beneficial ownership claim to the assets. Hong Kong courts can grant injunctive relief and proprietary remedies—such as freezing injunctions and tracing orders—to assist victims in recovering stolen digital assets or the proceeds of their sale, subject to practical limitations relating to blockchain pseudonymity and the speed of asset movement.

Estate Planning Implications

For individuals holding digital assets in self-custody, estate planning is critical. Private keys should be stored securely and in a manner that allows trusted executors or heirs to access them on death. Options include:

• Depositing sealed instructions containing key material with a solicitor or trustee
• Including key access information in a will (noting that wills become public documents on probate)
• Using multi-signature arrangements that require the cooperation of multiple trusted parties to access
• Instructing a professional trustee to hold key material as part of a trust structure

Alan Wong LLP advises clients on digital asset estate planning, including the drafting of appropriate will provisions and trust structures to ensure that self-custodied digital assets can be efficiently transferred to intended beneficiaries.

How Alan Wong LLP Can Assist

Alan Wong LLP advises clients across the legal landscape of virtual asset wallets and self-custody, including:

• Legal advice on the ownership and property rights analysis of self-custodied digital assets under Hong Kong law
• Advising on custodial arrangements and the counterparty risk of exchange custody
• Digital asset estate planning, including will provisions and trust structures for private key succession
• Legal action in cases of virtual asset theft, including applications for injunctions and tracing orders in Hong Kong courts
• Regulatory advice for wallet software providers on applicable VASP and related requirements

Conclusion

The law of virtual asset wallets sits at the intersection of property law, contract law, and financial regulation. For individuals, understanding the distinction between self-custody and custodial arrangements—and the legal rights and risks associated with each—is essential to making informed decisions about how to hold and plan for digital assets. For businesses offering wallet services, navigating the regulatory landscape requires careful analysis of whether activities trigger VASP licensing obligations. Alan Wong LLP provides the expertise to guide clients through these issues in Hong Kong's evolving digital asset environment.

This article is intended for general informational purposes only and does not constitute legal advice. Readers requiring advice on specific matters should consult a qualified solicitor.