Hong Kong's Reference-Check Net Now Reaches 110,000 Financial Workers: What Phase 3A Means for Hiring Timelines

If you hire for a regulated role in Hong Kong's financial sector, the reference check you request today is not the courtesy call it used to be. It is a mandatory, templated, seven-year conduct history request, sent to a former employer who has a regulatory obligation to answer it — and since 1 July 2026, that obligation now runs across the wall between banks and insurers, not just within one industry. Two months into that change, it is worth being precise about what actually applies, to whom, and what it does to the mechanics of making an offer.

From one bank's senior staff to 110,000 people, in three steps

Hong Kong's Mandatory Reference Checking (MRC) regime did not arrive all at once. It has been built in phases, each one widening who is covered:

Phase 1 (May 2023). The Hong Kong Monetary Authority's original scheme applied to senior and other specified roles at licensed banks (Authorized Institutions). Before hiring into one of those roles, a bank had to request conduct-related reference information from the candidate's current and recent employers.

Phase 2 (30 September 2025). The scheme expanded sharply, to cover an additional roughly 50,000 staff — more than doubling the population in scope. The new coverage brought in bank employees who are separately licensed or registered for securities activities under the Securities and Futures Ordinance, for insurance activities as technical representatives, or as subsidiary intermediaries registered with the Mandatory Provident Fund Schemes Authority, according to summaries of the scheme published by Timothy Loh LLP and covered on Lexology. The HKMA and the Hong Kong Association of Banks held a briefing session for banks on the change on 22 August 2025, ahead of the effective date.

Phase 3A (1 July 2026). This is the newest and, for hiring purposes, the most structurally interesting step: it stopped being a banking-only regime. Under a cross-sector arrangement between the HKMA and the Insurance Authority — set out in a joint circular dated 12 May 2026 — banks that are also licensed insurance agencies, and standalone insurance entities, must now run reference checks when appointing individual insurance intermediaries who sell long-term insurance business, drawing on records held on the other regulator's side of the industry. Local reporting on the rollout, including The Standard and China Daily Asia, put the combined population now in scope at roughly 110,000 employees across banking and insurance. The HKMA and HKAB held a further briefing on the arrangement on 2 June 2026, according to the HKMA's own published remarks.

A further step, Phase 3B, is already on the calendar: both regulators have said they will review how Phase 3A performs at the end of 2026 and use that review to extend cross-sector checking to the individuals still outside its scope. The direction of travel is consistent across all three phases — wider population, longer memory, fewer places for a conduct problem to disappear when someone changes employer.

What a check actually requires

The mechanics matter as much as the headline numbers, because they set real deadlines inside a hiring process:

• A seven-year look-back. Across the schemes, the requesting employer must ask former employers for conduct-related information covering roughly the preceding seven years, using a standardised reference template rather than an open-ended reference letter.
• Consent, and a right to respond. The candidate must consent to the check, and — where adverse information surfaces — there is a process for the individual to be given an opportunity to respond before it is acted on.
• A real response deadline on the other side. Coverage of the scheme's operation, including Freshfields' review of the first months of Phase 2 and reporting by Fintech News Hong Kong, describes banks generally expected to respond to a reference request within about a month, with insurance entities held to a tighter roughly 15-calendar-day turnaround under the equivalent insurance-sector scheme.

None of that is exotic by the standards of regulated-industry hiring elsewhere. What is worth registering is that it is now mandatory and templated, not a best-effort courtesy — which means "we're still waiting on the reference" is no longer a soft delay a hiring manager can route around by calling the candidate's old manager directly. The request has to go through the formal channel, and the clock on it is the regulator's clock, not the hiring team's.

The early evidence: a low hit rate, and why that's not the whole story

One data point worth including, precisely because it cuts against the alarmist read of "everyone's misconduct is about to surface": early figures reported around Phase 1's operation put the number of reference checks conducted by banks at roughly 700, of which about nine — call it 1% — turned up negative information, per the reporting cited above. That is a small hit rate. It is also, on its own, weak evidence about how the scheme performs now, for two reasons the reporting itself flags: Phase 1 covered only senior roles at banks, a population that is smaller and more scrutinised than the tens of thousands Phase 2 and Phase 3A have since added; and a 1% disclosure rate under a new, unfamiliar-to-both-sides process is a different number than the disclosure rate once the scheme has been running long enough that everyone understands what they're obligated to report. Treat the early figure as a baseline, not a verdict — which is also why the regulators built a formal end-of-2026 review into Phase 3A from the start, rather than assuming the design was right on day one.

What this does to the shape of a hiring process

For a hiring team building out a pipeline for a regulated financial role in Hong Kong, MRC checking is not a step that happens after everything else is decided — it is a dependency with its own, sometimes month-long, turnaround that has to be scheduled deliberately rather than squeezed in at the end:

It has to sit before the offer is final, not after. A reference request that takes up to a month cannot reasonably be the last item before a start date without either a long lead time or a conditional offer structure. Teams that have historically treated "reference check" as a same-week formality tacked onto the close of a process need to re-sequence it as a parallel-running stage, started as soon as a candidate is seriously in play for a covered role — not after terms are agreed.

It changes what "in scope" means mid-search. Because Phase 2 and Phase 3A brought in dual-licensed and cross-sector roles that were not covered before, a hiring team's own list of "which of our open roles trigger MRC" needs periodic revisiting rather than a one-time classification. A relationship-manager role that combines banking and insurance-intermediary licensing, for instance, is exactly the kind of position Phase 3A newly reaches.

It is a candidate-experience question, not just a compliance one. Consent and the right to respond to adverse findings are built into the scheme for a reason: a candidate who is asked to consent to a formal seven-year conduct-history request deserves to understand, at the point of asking, what it covers and how long it typically takes — the same instinct that should govern any stage in a hiring process where a candidate is waiting on something outside their control.

None of this is a novel idea in hiring generally — background verification of one kind or another has long been a distinct, sequenced stage in regulated hiring everywhere. What is new in Hong Kong's case is the scale (110,000 people and rising toward a Phase 3B most of the remaining regulated workforce), the formality (a mandatory template and a regulatory obligation to respond, not a courtesy), and the fact that it now crosses the line between two industries that used to keep separate records on the same person. A hiring pipeline that treats verification as a defined, sequenced stage of its own — rather than an informal task someone remembers to chase near the finish line — is better positioned for a regime that is visibly still expanding.

What's still unsettled

A few things are genuinely open rather than merely under-reported. Phase 3B's scope — which "remaining individuals" get added, and on what timeline — has not been specified beyond the regulators' commitment to review Phase 3A at the end of 2026 first. And while the response-time figures above are consistently reported across the sources we reviewed, none of the coverage we found publishes a single authoritative, sector-wide compliance statistic more recent than the early Phase 1 numbers — so treat any precise current hit-rate figure you see elsewhere with the same caution the regulators themselves are applying by waiting for a formal review before expanding further.

Sources consulted (via web search, cross-referenced across independent outlets): HKMA, Welcoming Remarks at the HKMA–HKAB Briefing on the Cross-sector Reference Checking Arrangement, 2 June 2026; joint HKMA/IA circular on the Cross-sector Reference Checking Arrangement, 12 May 2026; The Standard; China Daily Asia; Timothy Loh LLP; Lexology / Deacons; Freshfields; Fintech News Hong Kong.

By NiceHire Team.