Break into financial institutions via the regulatory sandbox
Hong Kong's three financial regulators (the HKMA, the SFC, and the IA) each run a regulatory sandbox, linked through a single point of entry: they let you pilot a fintech solution in a controlled environment with real data and a regulatory endorsement. But the key thing to recognize is that a sandbox is a testing regime, not a customer — it gives you data + an endorsement + a way in, not orders.
You work in fintech (payments / RegTech / WealthTech / InsurTech / risk control / security) and need real-environment validation and a regulatory endorsement to win over banks / insurers.
Your product has nothing to do with regulated financial business, or you just want orders fast — the sandbox takes a long time and doesn't equal a deal; see the other doors in 'Turn banks into your customers'.
What a sandbox is and what it gives you
- The HKMA's Fintech Supervisory Sandbox (FSS), the SFC's sandbox, and the IA's InsurTech sandbox; the three are linked through a single point of entry for enquiries.
- What it gives you: a real-data environment, the chance to pilot with a licensed institution, and a regulator-recognized endorsement.
- What it doesn't give you: orders. Getting into the sandbox is not the same as someone paying; even with the endorsement, you still have to go through the institution's procurement and compliance.
HKMA Fintech Supervisory Sandbox (FSS)[S19]
Pilot in a controlled environment with a partner bank, gaining real data + a regulatory endorsement.
Who it's for: Bank-related payment / risk-control / data solutions
SFC regulatory sandbox[S19]
A controlled pilot for SFC-regulated activities (such as asset management / trading / virtual-asset-related work).
Who it's for: Securities / asset-management / WealthTech solutions
IA InsurTech sandbox[S19]
A controlled-pilot channel for insurtech solutions.
Who it's for: InsurTech solutions
GFT / bank accelerators (turn the sandbox into a way in)[S81]
Global Fast Track (InvestHK's flagship matchmaking programme) and banks' own labs often work alongside the sandbox, giving you POC opportunities and an internal champion.
Who it's for: Startups that want to be seen directly by institutions
- 1
Work out which sandbox you fall under
Banking → HKMA; securities / asset management → SFC; insurance → IA. Submit your enquiry through the single point of entry.
Pitfall: Approaching the wrong regulator and getting passed back and forth.
- 2
Find a partner institution
A sandbox pilot usually requires teaming up with a licensed bank / insurer — finding an institution willing to try it with you is the prerequisite.
Pitfall: Assuming you can enter the sandbox on your own; without a partner institution it often goes nowhere.
- 3
Submit + set success criteria
From the outset, agree clearly with the institution / regulator: what will be tested, what success looks like, and how it converts to a full contract afterwards.
Pitfall: Focusing only on getting into the sandbox, with no agreed path to a full contract.
- 4
Pilot → get data + endorsement → push through procurement
Use the pilot results and the regulatory endorsement to get through the institution's risk control and procurement, turning the POC into a contract.
Pitfall: The pilot finishes and then nothing happens (POC hell).
A sandbox is not a customer· First-hand insight in the works
It's a controlled testing regime, not the same as someone paying; don't treat getting into the sandbox as a closed deal
Most cases need a partner institution· First-hand insight in the works
A sandbox pilot usually requires working with a licensed institution; first settle 'who will test it with you'
Watch out for POC hell· First-hand insight in the works
Pilots run long and it's common for nothing to follow; lock down the success criteria and the path to a full contract from the start
Don't trust agents who 'guarantee' sandbox entry· First-hand insight in the works
The sandbox has a clear application and partnership mechanism; a promise to guarantee entry is a red flag
- 01First work out which sandbox you fall under → submit your enquiry through the single point of entry.
- 02Find a partner institution in parallel → pursue the sandbox alongside the doors in 'Turn banks into customers'.
- 03Discuss the path to a full contract from the start → don't settle for just 'getting into the sandbox'.