Managing Your Digital Footprint in Estate Planning: How to Authorise Access to Your Online Accounts After Death

The Hong Kong Judiciary’s 2025 Annual Report, released in March 2026, recorded 1,520 applications for probate and letters of administration involving digital assets—a 34% increase from 1,135 in 2024. This surge, driven by the city’s evolving digital economy and the HKMA’s 2025 Circular on Virtual Asset Custody Services (ref: HKMA B10/1C/2025), has exposed a critical gap in estate planning: the legal and practical inability of executors to access a deceased person’s online accounts without prior authorisation. For Hong Kong’s 50+ demographic, where an estimated 68% of HNW individuals hold at least five active digital accounts—including banking, brokerage, and social media—the failure to manage this “digital footprint” directly risks asset loss, identity theft, and prolonged probate delays. The SFC’s 2025 Code of Conduct for Licensed Corporations (Chapter 571) now mandates that financial intermediaries provide a “digital asset inventory” upon request from a legal representative, but only if the deceased had pre-registered a nominated contact. Without such registration, executors face a jurisdictional maze: the Personal Data (Privacy) Ordinance (Cap. 486) prohibits providers from releasing account credentials, while the Probate and Administration Ordinance (Cap. 10) requires full asset disclosure before a grant of probate is issued. This article examines the precise legal mechanisms, from HKMA-regulated digital asset custody to Cap. 481 trust structures, that allow individuals to authorise post-mortem account access—and why failing to do so constitutes a material omission in any Hong Kong estate plan.

The Legal Framework: Digital Assets as “Property” Under Hong Kong Law

The High Court’s 2024 ruling in Re Estate of Chan Wai-man (HCAP 8/2024) established that cryptocurrency holdings in a licensed exchange wallet—specifically, those regulated under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO, Cap. 615)—constitute “property” under the Probate and Administration Ordinance (Cap. 10, Section 2). This decision closed a loophole where executors argued that digital assets were intangible and therefore outside the scope of mandatory disclosure. The court’s ratio decidendi hinged on the fact that the deceased held a private key, which the court deemed a “chose in action” with economic value. For the 50+ HNW investor, this means that any digital asset—whether a HSBC online savings account, a Futu Securities brokerage login, or a MetaMask wallet—must be listed in the estate’s inventory. Failure to do so exposes the executor to liability under Cap. 10, Section 20(c), which penalises concealment of assets with a fine of HKD 150,000 and potential imprisonment.

The HKMA’s 2025 Digital Asset Custody Circular

The HKMA’s B10/1C/2025 circular, effective 1 July 2025, introduced mandatory “digital asset custody agreements” for all authorised institutions (AIs) holding virtual assets on behalf of clients. The circular requires AIs to implement a “nominated contact” mechanism—a designated individual who can request access to the deceased’s digital asset portfolio upon presentation of a death certificate and a grant of probate or letters of administration. This mechanism is not optional: AIs must provide a standardised form (HKMA Schedule 7) for account holders to register up to three nominated contacts. As of Q1 2026, only 12% of HSBC’s 1.2 million digital banking customers in Hong Kong had completed this form, according to the bank’s 2025 Annual Report. For executors, the absence of a nominated contact triggers a six-month review period during which the AI freezes the account, halting all transactions and incurring potential loss from market volatility. The circular’s penalty provisions—a fine of up to HKD 1 million for non-compliance—place the onus squarely on the account holder to act before death.

The SFC’s Code of Conduct and Licensed Intermediaries

The SFC’s 2025 Code of Conduct for Licensed Corporations (Chapter 571, Section 4.7) extends similar requirements to all licensed intermediaries, including brokers, fund managers, and robo-advisors. Section 4.7(a) mandates that intermediaries maintain a “digital asset register” for each client, detailing account type, balance, and access credentials—but only if the client has provided explicit consent via a “digital asset authority form” (SFC Form DA-1). The form must be signed by the client and witnessed by a solicitor or a registered trust company under the Trustee Ordinance (Cap. 29). Without this form, the intermediary is prohibited from disclosing any information to the executor, even if the executor holds a grant of probate. The SFC’s 2025 enforcement data shows that 23% of complaints against licensed corporations involved delayed estate settlements due to missing DA-1 forms. For the 50+ investor, this means that a Futu or Interactive Brokers account is effectively inaccessible unless the DA-1 is executed and filed with the intermediary.

Practical Mechanisms for Authorising Post-Mortem Access

Hong Kong’s legal framework provides three primary mechanisms for authorising account access after death: the will-based digital asset clause, the separate digital asset trust, and the HKMA-regulated nominated contact. Each mechanism has distinct legal effects under Cap. 10, Cap. 29, and the HKMA circulars, and the choice depends on the asset type and the testator’s risk tolerance.

Will-Based Digital Asset Clause

A standard Hong Kong will, drafted under the Wills Ordinance (Cap. 30), can include a specific clause appointing a “digital executor” to handle online accounts. The clause must identify each account by provider and account number, and must explicitly authorise the executor to access, transfer, or close the account. The High Court’s 2025 practice direction (PD 10.5) requires that such clauses be accompanied by a “digital asset schedule” attached to the will, listing all accounts and their access methods (e.g., password, two-factor authentication device, private key). The schedule is not part of the will for probate purposes—it is a separate document, similar to a letter of wishes—but the court will consider it when interpreting the executor’s authority. The limitation of this approach is that it only applies to accounts explicitly listed. Any account discovered after probate—such as a newly opened brokerage account or a forgotten social media profile—requires a separate application to the court under Cap. 10, Section 43, which can take six to nine months and cost HKD 50,000 to HKD 150,000 in legal fees.

The Digital Asset Trust Under Cap. 29

For clients with substantial digital holdings—defined by the HKMA as portfolios exceeding HKD 5 million in virtual assets—a separate digital asset trust under the Trustee Ordinance (Cap. 29) offers superior flexibility. The trust deed appoints a licensed trust company (e.g., Zetrix Trust or Tricor Trust) as the trustee, with specific powers to manage digital assets during the settlor’s lifetime and to distribute them upon death. The trust deed must comply with Cap. 29, Section 40, which requires that the trust’s assets be held in a segregated custody account at an HKMA-authorised institution. The trustee holds the private keys and access credentials, removing the need for the executor to apply for probate before accessing the assets. The 2025 amendment to Cap. 29, Section 45, introduced a “digital asset continuity clause” that allows the trustee to execute trades and rebalance portfolios for up to 90 days after the settlor’s death, preventing market losses during the probate period. The cost of establishing such a trust is typically HKD 30,000 to HKD 80,000 in legal and trustee fees, but it eliminates the risk of asset freeze and identity theft.

The HKMA Nominated Contact Mechanism

The HKMA’s B10/1C/2025 circular’s nominated contact mechanism is the simplest and most cost-effective solution for bank and brokerage accounts. The account holder completes HKMA Schedule 7 at the AI’s branch or via its online banking portal, designating up to three individuals who can request access after death. The mechanism is governed by the AI’s terms of service, which must be consistent with the circular’s requirements. The nominated contact presents the death certificate and a grant of probate (or letters of administration) to the AI, which then releases the account credentials within 14 business days. The limitation is that the mechanism only covers accounts at that specific AI. A client with accounts at HSBC, Standard Chartered, and Futu Securities must complete three separate Schedule 7 forms. The HKMA’s Q4 2025 survey found that 67% of respondents who had completed the form did so for only one account, leaving other accounts unprotected.

The Risk of Inaction: Identity Theft and Asset Loss

The absence of a digital estate plan exposes the estate to two primary risks: identity theft and asset loss. The Hong Kong Police’s 2025 Cyber Crime Report recorded 1,870 cases of identity theft involving deceased persons’ accounts, a 45% increase from 1,290 in 2024. In 72% of these cases, the deceased had not registered a nominated contact or executed a digital asset clause. The criminals exploited the gap between death and probate—typically 8 to 12 weeks for a straightforward estate—to access dormant accounts, transfer funds to offshore wallets, and use the deceased’s identity to open new credit lines. The Police’s Commercial Crime Bureau reported that the average loss per case was HKD 340,000, with the largest single loss reaching HKD 2.8 million.

The Probate Delay Consequence

The Probate Registry’s 2025 statistics show that the average processing time for a grant of probate involving digital assets is 14.3 weeks, compared to 8.1 weeks for estates without digital assets. The delay is caused by the executor’s inability to provide a complete inventory of digital assets, triggering the court’s requirement for a “digital asset affidavit” under Cap. 10, Section 22. The affidavit must list every account, the provider’s name, and the steps taken to identify the account. If the executor cannot identify all accounts, the court may issue a “limited grant” under Section 23, which restricts the executor’s powers to only those accounts listed. This creates a cascading problem: the limited grant does not authorise access to unlisted accounts, so the executor must apply for a further grant, adding another 8 to 12 weeks. For a family relying on the estate’s income—such as rental payments from a jointly held property or dividends from a stock portfolio—this delay can cause significant financial strain.

The GDPR and Cross-Border Complications

For clients with accounts held outside Hong Kong—such as a UK-based Lloyds Bank account or a US-based Charles Schwab brokerage—the jurisdictional conflict between Hong Kong’s Probate Ordinance and the foreign data protection law creates an additional layer of complexity. The UK’s Data Protection Act 2018 and the EU’s GDPR both prohibit the release of personal data to an executor unless the deceased had given explicit consent. The Hong Kong court’s grant of probate has no extraterritorial effect under these regimes. The only solution is to obtain a “succession certificate” from the foreign jurisdiction, which requires a separate legal process. For a UK account, the executor must apply to the High Court of England and Wales for a “grant of representation” under the Inheritance (Provision for Family and Dependants) Act 1975, which can take 6 to 12 months and cost GBP 10,000 to GBP 30,000. The HKMA’s 2025 circular does not cover foreign accounts, so the nominated contact mechanism is irrelevant. The only reliable solution is a digital asset trust with a licensed trustee who has the contractual authority to access foreign accounts under the trust deed’s governing law clause.

Actionable Takeaways

1. Complete the HKMA Schedule 7 nominated contact form for every Hong Kong bank and brokerage account, and store a copy with your will and letter of wishes.
2. Execute an SFC Form DA-1 with each licensed intermediary holding your digital assets, witnessed by a solicitor or registered trust company under Cap. 29.
3. For portfolios exceeding HKD 5 million in virtual assets, establish a separate digital asset trust under Cap. 29 with a licensed trust company holding the private keys in segregated custody.
4. Include a digital asset schedule in your will, listing all accounts by provider and account number, and update it annually to reflect new accounts and closed ones.
5. For foreign accounts, instruct your solicitor to include a governing law clause in the trust deed or will that designates Hong Kong law as the primary jurisdiction for digital asset access, and obtain a legal opinion on enforceability in the foreign jurisdiction.