Tradelink participated in the FIDO APAC Marketing Forum organised by the FIDO Alliance, serving as a co-speaker alongside other distinguished representatives from the FIDO community. During the session, Mr. Andrew Cheng, Executive Director and Chief Operations Officer at Tradelink, shared expert insights on two critical issues surrounding the Securities and Futures Commission’s (SFC) mandatory authentication requirements: the imperative for transition and the key operational considerations for seamless implementation.
Cyber threats continue to escalate, with an alarming 57% of incidents reported by the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) in 2025 involving phishing attacks. As traditional One-Time Passwords (OTPs) prove increasingly vulnerable to interception, biometric login mechanisms (such as Face ID and fingerprint recognition) deliver a harmonious balance between robust security and intuitive user experience. FIDO-based authentication has already become a critical backbone for government and banking applications (e.g., iAM Smart), while up to 80% of mobile network operators and gaming platforms have adopted the Universal Authentication Framework (UAF) to align with modern mobile-first user behaviors.
With licensed securities and futures brokers required to implement phishing-resistant authentication by July 8, 2027, smaller brokerages and boutique Virtual Asset Trading Platforms (VATPs) face significant hurdles, including implementation costs, technical complexity, and user resistance—particularly among less tech-savvy senior clients. To address these industry pain points, Andrew outlined practical strategies:
- Phased Rollout: Prioritise implementation on high-risk transaction flows first to mitigate immediate exposure.
- Proactive Engagement: Consult with the SFC early to ensure full regulatory alignment throughout the integration lifecycle.
- User Inclusion: Enhance user education and streamline onboarding interfaces to ensure no client is left behind during the digital transition.
Andrew emphasised that the SFC regulatory mandate extends far beyond a compliance deadline — it signals the definitive arrival of the phishing-resistant authentication era. By establishing Hong Kong as a pioneering regulatory case study, the mandate drives safer investor environments, resilient financial markets and heightened trust across international capital markets.
As a proud member of the FIDO Alliance, Tradelink stands at the forefront of identity management and cybersecurity solutions. Leveraging deep domain expertise and proven deployment capabilities, Tradelink’s Multi-Factor Authentication (MFA) solution enables seamless compliance upgrades for financial institutions and enterprise clients, aligning authentication standards with global security benchmarks.
The FIDO (Fast IDentity Online) Alliance is an open industry association launched in February 2013 whose stated mission is to develop and promote global authentication standards that help reduce the world’s over-reliance on traditional passwords. FIDO enables secure, key-based authentication across devices and platforms.