Hong Kong gives crypto platforms one year to ditch one-time passwords or cover user losses The SFC wants phishing-resistant login and device binding by July 8, 2027, while monitoring and response duties apply immediately. Quick Take - Hong Kong’s SFC ordered licensed crypto platforms and internet brokers to replace OTPs for client logins and device binding by July 8, 2027. - The shift is meant to ...