Marcus adjusted his grip on the heavy-duty drill, the vibration humming through his calloused palms as he stood in the narrow, dimly lit corridor of a Tuen Mun warehouse. He was a locksmith of , a man who had seen every variety of desperation and forgetfulness the city had to offer.
Behind him stood a man in an expensive wool suit, tapping a frantic rhythm on his thigh. The suit had lost his keys, or perhaps he had never had them; the story changed three times in five minutes. Before Marcus would even touch the cylinder of the lock, he demanded a photo of the man’s HKID and a utility bill matching the address on the unit’s lease.
The man in the suit exploded, claiming it was an invasion of privacy, a waste of time, and an insult to his character. Marcus didn’t flinch. He knew that the “job” wasn’t drilling a hole in a piece of brass; the job was the liability of opening a door for someone who might not have the right to be inside.
He waited. He didn’t care about the suit’s anger. He cared about the license he had spent decades protecting.
The WhatsApp Verification Ritual
In a different part of the city, specifically an industrial building in Fo Tan where the elevators still used heavy manual iron gates that clattered like a Victorian prison, Daniel sat at a metal desk. He was a new director of a small import-export firm.
At , his phone buzzed with a WhatsApp message from a number he recognized as his company secretary. “Good morning, Daniel. To complete the annual filing and update our records, please send a clear photo of your HKID and a recent proof of residential address. We also need a selfie of you holding the ID for our KYC file.”
Daniel stared at the screen, his eyes stinging with the remnants of shampoo from a rushed morning shower. He felt a sudden, sharp prick of resentment. He had already paid the annual fee. He had signed the appointment forms months ago. Why did this person-someone he had never met in person-need a photo of his most private document?
When he had looked at the Companies Registry website to check his company status, the government portal hadn’t asked for a photo. It just wanted a credit card for the $140 filing fee. He felt like the man in the wool suit. He felt like the request was an overreach by a clerk who was taking their job far too seriously.
This friction is the central misunderstanding of modern Hong Kong corporate life. It is a collision between two different maps of reality. The business owner’s map shows a world of “forms”-if the form is filled, the job is done. The licensed company secretary’s map shows a world of “obligations”-if the identity isn’t verified, the secretary is a criminal.
The confusion stems from the fact that the Companies Registry is essentially a giant, sophisticated library. Its primary function is to store information and make it available to the public. When you file an Annual Return (NAR1), the Registry checks that the boxes are ticked, the fee is paid, and the document is legible.
They are not, in the moment of filing, verifying that the “Daniel” who signed the paper is the same “Daniel” who lives in the apartment listed on the form. They assume the person submitting the document is telling the truth. They do not ask for your passport photo because their role is to record, not to police.
Beyond the Participation Trophy
However, the person filing that document for you-the company secretary-is not a mere courier. Since , the landscape of Hong Kong business changed under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance.
It created a regime where anyone providing trust or company services must hold a TCSP license. This is not a participation trophy. It is a rigorous regulatory burden.
Filings processed by automated registry systems with zero identity verification.
Licensed entities (TCSP) carrying the legal liability for every single filing.
The Verification Gap: Automated systems record data, while 7,200 licensed professionals verify the humans behind it.
When a firm like 毅思會計 (AC Accounting & Secretaries Co.) asks for your ID, they are performing a ritual of “Know Your Customer” (KYC). This is the invisible layer of the transaction.
You are paying for the filing of the form, but the secretary is “paying” for the right to file it by maintaining a massive, secure archive of your identity. If a company is later found to be involved in something illicit, the police do not go to the Companies Registry and ask, “Why did you let them file this?”
“Show us your KYC file. Show us the proof that you verified this person’s identity before you acted for them.”
– Regulatory Mandate
If the secretary cannot produce that photo of the ID or that proof of address, they face massive fines and the revocation of their license. The person asking you for that photo isn’t being nosy. They are protecting their ability to stay in business.
Vendor vs. Gatekeeper
The irritation Daniel feels in Fo Tan is a classic conflict of perceived roles. As a mediator, I often see that conflict arises when one party believes they are buying a “product” (the NAR1 filing) while the other party is providing a “regulated service” (the maintenance of statutory compliance).
To Daniel, the secretary is a vendor. To the secretary, they are a professional gatekeeper. Consider the “proof of address” requirement. In an era of digital banking and paperless billing, finding a utility bill from the last feels like a scavenger hunt in a graveyard. It is inconvenient.
It feels unnecessary. But in the eyes of the law, a residential address is the physical anchor of a director’s liability. The secretary needs to know that if the government needs to find you, there is a verified place to look.
The irony of the digital age is that as transactions become faster, the verification of those transactions becomes slower and more intrusive. We want things done in a WhatsApp group, with the click of a button, but that very speed creates a vacuum of trust.
A scammer will never ask for your proof of address. A fly-by-night “consultant” who isn’t licensed will take your $500, file your form, and never ask to see your face. They don’t care because they have no license to lose. They are not on the hook.
Adam Ho, the founder of AC Accounting, holds license TC009660. That number is not just a sequence of digits; it represents a commitment to the Hong Kong government that every one of the 3,000+ clients the firm serves has been properly identified.
When his team asks for a selfie with an ID, they are closing the loop of trust that allows a limited company to exist as a legal person. The passport is not a key to a door, but a weight that anchors the secretary’s license to the director’s signature.
The Resignation of the Boss
I remember a case where a director refused to provide his documents for . He argued that since he was the 100% shareholder, he was the “boss” and the secretary was the “employee.”
He didn’t understand that in the hierarchy of the Companies Ordinance, the secretary has a statutory duty that supercedes the director’s desire for privacy. Eventually, the secretary had to resign.
The director was then stuck with a company in “default” because no other licensed provider would take him on without the very documents he refused to provide. He had mistaken his power as an owner for an exemption from the law.
The Compliance Iceberg: The filing is the only visible part of a massive statutory infrastructure.
The “job” of a company secretary is often seen as the “Annual Return” because that is the visible output. It’s the $140 fee and the one-page summary of share capital. But that is the tip of a very large iceberg. Underneath the surface is the Significant Controllers Register (SCR), the AML monitoring, the sanctions list checking, and the constant verification of data.
The Trade-Off for Protection
When you send that photo of your HKID, you aren’t just “sending a photo.” You are participating in a system of mutual protection. You are giving your secretary the ammunition they need to defend your company’s standing.
If the Registry is the library, your secretary is the lawyer making sure your library card isn’t being used by a stranger to rack up fines. Daniel eventually sent the photo. He did it because he realized that if he wanted the protection of a “Limited” company-the ability to shield his personal assets from his business risks-he had to accept the “Limited” privacy that comes with it.
The trade-off for limited liability is public transparency and regulated oversight.
The next time your phone pings with a request for a document you’ve already given them three times, or a photo of your passport that you’d rather keep in your safe, take a breath. Don’t look at it as a clerk being difficult. Look at it as a professional performing the most important part of their job: making sure that your company is, in the eyes of the law, exactly who you say it is.
The irritation of the request is the price of the legitimacy of the result. Marcus the locksmith eventually got his ID photo, and the man in the wool suit got his door opened.
But more importantly, the record showed that the right person entered the right room. In the world of Hong Kong business, that record is the only thing that keeps the gates from clattering shut on everyone.