Compliance arbitrage meets enforcement reality
China’s securities regulator has hit Auckland-based Tiger Brokers (NZ) Limited with a combined fine and income confiscation of roughly 411 million yuan, approximately NZ$100 million. The China Securities Regulatory Commission (CSRC) announced the action on 22 May, finding Tiger had conducted securities business targeting mainland Chinese investors without any of the required approvals or licences.
Tiger is a subsidiary of US-listed UP Fintech, but its New Zealand registration is the legal anchor for its international operations. That registration gave it credibility, a light-touch regulatory environment, and access to global markets. What it did not give it was immunity from the jurisdiction where its actual customers live.
The penalty dwarfs anything New Zealand’s own Financial Markets Authority has ever imposed on the firm. In June 2023, the Auckland High Court ordered Tiger to pay $900,000 for breaching the Anti-Money Laundering and Countering Financing of Terrorism Act. That figure was itself a fraction of the $7 million maximum available. The CSRC just demonstrated what a regulator looks like when it actually wants to hurt.
A pattern, not an accident
Tiger’s New Zealand compliance record was already dire before China weighed in. The FMA found the company had failed to conduct customer due diligence on at least 3,768 customers, failed to report suspicious transactions, and failed to keep adequate records. Between April 2019 and January 2020, approximately $60.8 million was transacted through New Zealand’s financial system without proper checks. The High Court found non-compliance in 30 of 33 sample customers reviewed.
Did that slow the business down? Not remotely. By mid-2021, Tiger’s customer base had grown to 425,000 with over 17 million transactions processed. The NZ penalty was a cost of doing business. The Chinese penalty is an existential event.
Beijing can now see what it couldn’t before
China has always prohibited individuals from investing directly in overseas markets without approved channels like the Qualified Domestic Institutional Investor scheme. Offshore brokerages like Tiger operated in what legal firm Simmons & Simmons calls a regulatory grey zone, marketing to and processing orders for mainland investors who had no legal right to use them.
The CSRC had flagged concerns about Tiger and rival Futu as early as 2021, but as Simmons & Simmons notes, “those measures were less severe.” What changed is capability. Xu Tianchen, senior economist at the Economist Intelligence Unit, puts it plainly: “Beijing always cares about financial security and wants strong control over these illicit flows. But in the past it lacked the ability to do so.” The Common Reporting Standard now gives regulators a much clearer view of overseas financial activity, making enforcement practical for the first time.
This is not a one-off enforcement action. Eight government bodies are involved, including the Ministry of Public Security and the People’s Bank of China. A two-year rectification period restricts existing mainland Chinese clients to sell orders and fund withdrawals only. No new buy orders. No new inflows. It is a structured wind-down of Tiger’s Chinese client base.
The model is broken, not just for Tiger
Simmons & Simmons is unambiguous about the wider implications. The new enforcement framework “targets not only Overseas Institutions themselves, but also the broader ecosystem supporting cross-border activities”, including domestic partners, internet platforms, banks and service providers.
For Hong Kong-registered Futu Securities, the proposed fine is even larger, at approximately 1.85 billion yuan (US$271 million). But Tiger’s case is the one that should concern New Zealand’s financial services sector specifically, because the NZ registration was the legal foundation of the entire operation.
Brock Silvers, chief investment officer at Kaiyuan Capital, offers the clearest summary of where this is heading: “Authorities remain committed to financial opening, but primarily for inbound capital. Outbound capital flows remain controlled, and investors shouldn’t expect rapid changes.”
Domestic compliance is not the risk that matters
The lesson here is not about China specifically. It is about any NZ-registered fintech or financial services business that has built growth on serving customers in a foreign market while relying on domestic regulation as its compliance framework. The FMA’s $900,000 penalty was the local cost. The real regulatory risk was always sitting in the market where the customers live, and Tiger just proved what happens when that market decides to enforce.
For directors and investors in NZ fintechs with cross-border ambitions, this is the stress test. If your business model depends on a foreign regulator not noticing, your business model has an expiry date.
Sources
- China probes three major brokers in crackdown on ‘illegal’ cross-border trade (2026-05-23)
- CSRC Strictly Investigates Tiger and Other Institutions’ Illegal Cross-Border Operations (2026-05-22)
- Tiger Brokers to pay $900,000 penalty for multiple AML/CFT Act breaches (2023-06-29)
- China escalates crackdown on cross-border financial activities (2026-05)
- The end of a regulatory grey zone: Why China is cracking down on offshore brokerages (2026-06)
- China Launches Two-Year Crackdown on Offshore Brokers Serving Mainland Investors (2026-05-25)