Rule · HKMA · 26 Mar 2007
Authorized Institutions must implement identity verification for IPO refund cheques effective 2 April 2007, accepting cheques only if the payee’s name and identity number positions match the account holder. AIs must establish controls to identify and reject multiple applications when acting as nominees for securities customers or IPO financing borrowers, preferably by automating checks across all channels. This measure replaces the previous arrangement of masking the 5th and 6th digits of identity numbers on refund cheques.
(a)
(b)
Circulars
26 Mar 2007
Preventive measure against multiple applications in initial public offerings (IPOs) Our Ref: B1/15C 26 March 2007 The Chief Executive All Authorized Institutions Dear Sir/Madam, Preventive measure against multiple applications in initial public offerings (IPOs) I am writing to draw the attention of all authorized institutions (AIs) to a new measure to prevent multiple applications in IPOs and some good practices that will help AIs identify and reject such applications. New measure on IPO refund cheques Recently, there have been incidents of suspected IPO multiple applications bearing identical applicant names with similar Hong Kong ID number or passport number1 (hereafter referred to as "identity number"). Against this background, the HKMA, the Securities and Futures Commission (the SFC), the Hong Kong Association of Banks, and the Federation of Share Registrars have been working together to devise a measure to deter future attempts of multiple applications. Under the new measure, the masked positions of identity numbers to be printed on refund cheques for each IPO will be randomly selected by computer programme of the responsible share registrar. This measure, which will take effect for all IPOs launched on or after 2 April 2007, will replace the existing arrangement of masking the 5th and 6th digits of the identity number on refund cheques for all IPOs. Please refer to Annex for a copy of the related press release. To ensure effective implementation of the new measure, AIs should take appropriate actions to - communicate the new measure to all relevant staff members2 ; and ensure strict adherence by all relevant staff members to the requirement of proper verification of the identity of the payee of IPO refund cheques3 . In
(a)
(b)
(c) particular, an IPO refund cheque should be accepted only if the name and all of the printed positions of the identity number of the payee shown on the cheque match with the name and the corresponding positions of the identity number of the account holder. Where an IPO refund cheque is not accepted by an AI due to unsatisfactory result of the identity verification, the AI may suggest the subscriber contacting the relevant share registrar for assistance. Controls when acting as a nominee to lodge IPO applications AIs should also put in place adequate controls to identify and reject multiple applications when they act as nominees to lodge IPO applications on behalf of their securities customers or IPO financing borrowers4 . AIs are recommended to consider adopting the following good practices - automate the checking process of the subscribers' identity number, including identification and rejection of multiple applications from the same person in an IPO by their computer systems; implement the automated checking and rejection procedures on a consolidated basis to cover all channels of applications (such as Internet banking, phone banking and branches) to prevent multiple applications through different channels of the AI; and document the related control procedures in policies or procedural manuals, and properly communicate such control procedures to all relevant staff members involved in the handling of IPO applications. Should you have any questions about the content of this circular, please contact Mr Shu-pui Li at 2878-1826 or Ms Alice Lee at 2878-1603. Yours faithfully, Arthur Yuen Executive Director (Banking Supervision) 1The differences were only in the 5th and 6th digits of the identity number because these two digits are masked by an asterisk "*" on the IPO refund cheque. It appeared that some IPO applicants had attempted to circumvent the existing arrangement for masking identity numbers in the refund cheques. 2The relevant staff members should include those personnel who are responsible for handling cheque deposits, for example through counters, drop-in boxes or ATM machines. 3Refer to the HKMA circular on "Enhanced security measures on refund cheques in initial public offerings (IPOs)" of 22 July 2004. 4For the purpose of this circular, securities customers and IPO financing borrowers do not include registered institutions and licensed corporations as defined in the Securities and
Encl. c.c.
Futures Ordinance.
Controls vs multiple IPO applications (Word file, 30KB) SFC (Attn: Mr Keith Lui, Executive Director, Supervision of Markets) Chairman, The Hong Kong Association of Banks Chairman, The Federation of Share Registrars Last revision date : 01 August 2011
23 March 2007
TO THE BUSINESS EDITOR
FOR IMMEDIATE RELEASE
Joint Press Release by SFC/Federation of Share Registrars/HKMA/HKAB
Preventive Measure Against Multiple IPO Applications
A new measure will be implemented on 2 April to deter multiple applications for IPOs.
Currently, part of the number of an identification document - be it a Hong Kong ID card or a passport - of an IPO applicant (or the first-named applicant of a joint IPO application) is printed on the IPO refund cheque for unsuccessful applications. This measure was first introduced in August 2004 to deal with issues relating to incidents of stolen IPO refund cheques. In compliance with the requirements under the Personal Data (Privacy) Ordinance, the identity number is printed in the way that the 5th and 6th digits (including alphabets and numerals) are masked by an asterisk “*”. For example, the masked identity numbers may look like H1236(7), HK1256(7), P1236789, etc.
Recently, it was noted that there were incidents where some IPO applicants, in submitting multiple applications, had attempted to circumvent the existing arrangement for masking identity numbers in the refund cheques.
In order to improve the existing arrangement and to enhance the integrity of the IPO application process, the SFC, the Federation of Share Registrars Limited, the Hong Kong Monetary Authority, and the Hong Kong Association of Banks have been working closely together to devise a new measure to make it difficult for people to submit multiple applications.
Under the new preventive measure, the position of the two masked digits will vary from IPO to IPO, and will no longer be fixed at the 5th and 6th digits. The masked positions in each IPO will be randomly selected by a computer programme designed by the share registrar handling the IPO. The new measure will take effect for all IPOs launched on or after 2 April 2007.
It is envisaged that the new measure will discourage dishonest people from attempting multiple applications in IPOs because they may encounter difficulties in depositing and encashing the refund cheques bearing an identity number which is different from their own.
The SFC will continue to work with the industry and other relevant parties to identify ways to improve the operation and the integrity of the IPO application process.
Ends
Notes to Editor:
For enquiries, please contact –
The Securities and Futures Commission:
C K Chan at 2842 7624 or Eddy Chan at 2840 9565;
The Federation of Share Registrars:
Virginia Ng at 2980 1735;
The Hong Kong Monetary Authority:
Hing-Fung Wong at 2878 1802
The Hong Kong Association of Banks:
Florence Hui at 2521 1169.
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from HKMA
HKMA published 7 documents in the last 30 days. We email you each new one the day it's published.
Source: Hong Kong Monetary Authority — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated