SFC investigations

Facing an SFC search warrant?

Under section 191 of the Securities and Futures Ordinance (Cap. 571) — Magistrate’s warrants — a magistrate may issue a search warrant authorising entry to named premises to search for, seize and remove records or documents that may be required to be produced under Part VIII of the Ordinance. The warrant is issued by a magistrate, not by the SFC itself — and in practice there is no advance notice.

Liva Law advises licensed corporations, responsible officers, Managers-In-Charge of Core Functions (MICs), staff and third-party record holders when SFC officers attend with a search warrant — scope, privilege claims, follow-on section 183 notices, and next steps.

Discuss the search warrantor call +852 3520 3333

What is a search warrant under section 191?

A search warrant under section 191 of the Securities and Futures Ordinance (Cap. 571) is a warrant issued by a magistrate, on information on oath, in respect of records or documents that may be required to be produced under Part VIII of the Ordinance (Supervision and Investigations). It names premises and authorises SFC officers to enter, search, and seize and remove material covered by the warrant.

Unlike a section 180 inspection or a section 183 notice, the warrant is not issued by the SFC. An SFC employee, a person authorised under section 179 or 180, or an investigator may lay the information before the magistrate; SFC officers then execute the warrant. Nor is the power limited to cases where a section 182 investigation has already commenced — it attaches to records or documents that may be required under Part VIII generally.

In practice there is no advance notice: the first sign is usually officers attending the premises, whether or not anyone senior is present.

Who may be affected?

The warrant names premises — which may be offices, data rooms or homes — and it is the occupier who must deal with the officers on site. The occupier need not be the person under investigation: third parties who happen to hold records, such as professional firms or service providers, may also find SFC officers at the door with a warrant.

Within a firm, the search will typically involve reception and IT staff first, then the responsible officers, Managers-In-Charge of Core Functions (MICs) and compliance staff who manage the firm’s response.

What may officers do under the warrant?

Within the wording of the warrant, section 191 authorises SFC officers to:

  • enter the named premises, by force if necessary, within 7 days beginning on the date of the warrant;
  • search for, seize and remove records or documents covered by the warrant;
  • require any person on the premises to produce records or documents for examination;
  • prohibit the removal, erasure, addition or alteration of — or other interference with — records or documents; and
  • take other steps that appear necessary to preserve them.

Records and documents are defined broadly in Schedule 1 and include information stored on discs, tapes and other devices, and output from information systems — material is not outside the warrant merely because it is held electronically.

The warrant itself does not require anyone to explain the matters under investigation or to assist the investigation generally. Requirements of that kind usually arrive separately — for example, a section 183 notice after an investigation has commenced.

Failing without reasonable excuse to comply with a requirement or prohibition imposed under section 191(2), or obstructing the officers in the exercise of those powers, is an offence (section 191(6) and (7)). Obstructing the SFC may also be an offence under section 382. If a demand appears to go beyond the warrant, raise it through your solicitor rather than by resisting on site.

Legal professional privilege is preserved: nothing in the Ordinance affects a claim of legal professional privilege (section 380(4)), subject to limited exceptions such as a client’s name and address (section 380(5)). Identify privileged materials at the outset and ask for them to be segregated — and take advice promptly if privileged material is removed.

How this differs from other SFC processes

A search warrant is a court-issued instrument — not an SFC notice — and it authorises entry, search and seizure rather than questions.

Scroll sideways for the full table

InstrumentIssued byPrimary purposeTypical position
section 180 inspectionAn SFC-authorised personSupervision — review of the firm’s records, business and complianceVisit, scheduled or unannounced; cooperation expected
section 183 noticeThe SFC, after a section 182 investigation has commencedInformation gathering in an investigationWritten requirements to produce records, give explanations and/or attend an interview
section 191 search warrantA magistrate, on information on oathSearch for, seize and remove records or documentsOfficers attend the premises, typically without notice
restriction notice (sections 204–205)The SFCIntervention — restrict business and/or dealings with relevant propertyIn effect on service
Warrant in a joint operation (Police / ICAC)A court, on another agency’s applicationCriminal investigation by that agencyThat agency’s own powers and procedures

The same facts can involve more than one process: a search may be followed by a section 183 notice, and a firm under a restriction notice may also face an investigation.

First steps while officers are on site

Ask to see the warrant and identification

Ask to see the search warrant and the officers’ SFC identification, and note the officer in charge. Check the warrant names the premises, and note its date — entry is authorised within 7 days beginning on the warrant date.

Do not obstruct — and do not delete or hide anything

Obstructing the officers, or failing without reasonable excuse to comply with a requirement or prohibition under section 191(2), is an offence. Once officers are on site, nothing should be removed, erased, added to, altered or interfered with.

Call your solicitor immediately

Say that SFC officers are on the premises with a search warrant, and ask for immediate guidance or attendance. If the firm does not have a solicitor, call Liva Law on +852 3520 3333.

Designate one point of contact

One senior person — a responsible officer, MIC or director — should accompany the officers and receive their requests. Staff should route requests through that person and should not volunteer explanations.

Claim privilege on the spot

Identify materials subject to legal professional privilege and ask for them to be segregated. Section 380(4) preserves privilege claims, and a documented claim made on the spot is far easier to maintain than one raised later.

Log what is removed

Ask what is being removed and keep your own log — item, location and time. Ask about the receipt under section 191(4), and about inspecting the materials and making copies at reasonable times afterwards.

After the search

  • Map what is missing against your own log and the receipt, and assess the operational impact — client files, transaction records, compliance materials.
  • Ask about inspecting seized materials and making copies at reasonable times (section 191(4)). Retention is generally limited to 6 months from removal — or longer where the materials are needed for criminal proceedings or proceedings under the Ordinance (section 191(3)).
  • Expect possible follow-up: a section 183 notice requiring production, explanations or interview attendance often follows a search.
  • Take advice before wider disclosure — the secrecy provisions (section 378) can be relevant, and obtaining legal advice is the usual safe framing.
  • Record the event for governance: brief the board or senior management as appropriate, and preserve your own records of the day.

How we can assist

  • Immediate response — telephone guidance while officers are on site and, where feasible, attendance; the scope of the warrant; and dealing with officer requests without obstructing the search.
  • Privilege claims — identifying and segregating privileged materials, and asserting and documenting legal professional privilege claims under section 380(4).
  • Seizure follow-up — the receipt under section 191(4), inspection and copies of seized materials, and tracking retention under section 191(3).
  • The wider investigation — section 183 notices and interviews that follow a search, and strategy where a matter may move towards criminal proceedings, the Market Misconduct Tribunal or disciplinary action.

Related service: SFC Investigations, Notices & Enforcement

Who we advise

Licensed corporations, responsible officers, Managers-In-Charge of Core Functions (MICs), directors and staff whose premises are the subject of a search warrant; occupiers of searched premises, including homes; and third-party record holders — such as professional firms and service providers — where SFC officers attend with a warrant. Where the interests of a firm and an individual may differ, we advise on separate representation.

Frequently asked questions

Can we refuse entry until our lawyer arrives?

No. The warrant authorises entry — by force if necessary — within 7 days beginning on its date, and obstructing the officers is an offence. You may ask whether the officers will wait a short time for your solicitor to arrive, but do not resist or bar entry. Call your solicitor immediately and follow the first steps above.

Do we have to unlock phones or laptops?

Records and documents covered by a warrant include material stored on discs, tapes and other devices, and output from information systems (Schedule 1). Whether officers can require a password or an unlock on site depends on the wording of the warrant and the circumstances — take advice on the spot. Do not wipe, delete or alter data: that can itself be an offence.

Can officers take originals, including client files?

Yes. The warrant authorises officers to search for, seize and remove records or documents within its scope, which can include originals and client files. Claim legal professional privilege where it applies and ask for privileged materials to be segregated; log everything removed and ask about the receipt under section 191(4).

Am I under arrest?

No. A section 191 warrant is a search power, and the SFC does not have the power of arrest. In a joint operation, any arrest would be made by a partner agency — such as the Police or the ICAC — under its own powers.

Can we tell the board, our employer or clients?

Briefing those who need to know internally is usual — designate one senior contact and keep a record. The secrecy provisions (section 378) can restrict wider disclosure of information about an SFC investigation, so take advice before telling clients, counterparties or anyone beyond those who need to know; obtaining legal advice is the usual safe framing.

Does a search warrant mean we will be prosecuted?

No. A search warrant is an investigation step, not an outcome. What follows ranges from no further action to criminal proceedings, Market Misconduct Tribunal proceedings or disciplinary action — the direction usually becomes clearer through later contact, such as a section 183 notice.

How long can the SFC keep what it seizes?

Under section 191(3), records or documents removed under a warrant may be retained for not exceeding 6 months from removal — or longer where they are needed for criminal proceedings or proceedings under the Ordinance. The person from whom they were removed is entitled to a receipt, and may be permitted to inspect them and make copies at reasonable times (section 191(4)).

What if privileged material is taken?

Nothing in the Ordinance affects a claim of legal professional privilege (section 380(4)), subject to limited exceptions such as a client’s name and address (section 380(5)). Identify privileged materials on site and ask for segregation; if privileged material is removed, take advice promptly on asserting and documenting the claim.

Discuss the search warrant

If SFC officers are on your premises now — or a search has just taken place — contact Liva Law to discuss the warrant, privilege claims and the practical next steps. At first contact, please provide your name, a safe contact number and whether officers are still on site. Please do not send the warrant or other confidential documents until we have confirmed how they should be provided and whether we can accept the engagement.