November 2022: the largest joint operation in SFC and ICAC history — 190 officers, 50 premises searched — against a pump-and-dump syndicate that ran like a business: "investment teacher" chatrooms, brokerage insiders, nominee accounts, and retail investors as exit liquidity. The alleged illegal gains: HK$191 million.
1. The industrial supply chain
2. Why retail investors fall for it
The scam doesn't steal your money — it makes you press the buy button yourself. The "teacher" calls trades; the "fellow students" (mostly the syndicate's own accounts) post wins; FOMO does the rest. By the time the victim owns the shares, the syndicate is already out.
3. Why the enforcement is hard
- Inside men defeat perimeter controls: brokerage ROs and listed-company chairmen lent legitimacy — the people licensed to prevent the fraud enabled it.
- The deception is distributed: chatrooms feel like communities, not solicitations — each message alone looks innocuous.
- Attribution across accounts: nominee structures multiply the evidentiary work; proving who controlled which trade is laborious.
- Cross-agency dependency: it took SFC + ICAC + police in one coordinated raid — no single agency sees the whole scheme.
RegSir's take
The structural finding is the "inside man" problem: the regime's first line — self-reporting by intermediaries — fails when the intermediary is the fraud. Controls assume compliance staff report anomalies; these cases had ROs running the anomaly. The answer isn't more rules for honest firms — it's independent anomaly detection (transaction surveillance that doesn't rely on the desk flagging itself) and rotation/removal incentives that make insider collusion expensive. Regulators also need to price in that Telegram-era manipulation is telecom fraud wearing a market face — coordination, not just statute, is the tool.
4. Compliance takeaways
- Surveillance that doesn't trust the desk: flag matched-account patterns and coordinated small-cap accumulation independently of desk attestations.
- RO conflicts: an RO with trading discretion over the book he supervises is a structural red flag — separate the functions.
- Client-boom patterns: sudden retail inflows into illiquid small-caps after social-media hype = pattern worth escalating, not just noting.
5. Official sources & reporting
| Document / report | Link |
|---|---|
| SFC — joint operation press releases (Nov 2022) | sfc.hk ↗ |
| ICAC — operation details | icac.org.hk ↗ |
| SFO ss.274/295 — false trading offences | elegislation.gov.hk ↗ |