Every Hong Kong limited company must appoint an auditor each year, and most owners choose on price alone. The cost of choosing badly can be high: at the mild end, a poor report, awkward communication and requests for more documents every year; at the serious end, an unlicensed practitioner or an intermediary trading on someone else's certificate, leaving your audit report invalid and your compliance exposed.
This guide covers the current qualification regime, how to verify against the AFRC register, a four-step verification process, how to compare quotes, independence requirements and ten warning signs. Most importantly, it corrects something many older articles still get wrong: practising certificates are no longer issued by the HKICPA but by the AFRC (Accounting and Financial Reporting Council).
The short answer: four hard requirements
- An AFRC practising certificate: obtain the signing CPA (practising)'s name and PC Number
- Findable on the register: check the AFRC's register of CPAs (practising) and firms
- The same signatory: the person signing the final report must be the licence holder you verified
- A transparent quote: setting out audit scope, transaction volume assumptions, whether bookkeeping is included, how extra work is charged, and who signs
If any one of these cannot be answered clearly, do not sign.
In this article
- 1. The updated qualification rules
- 2. Who may lawfully audit
- 3. Four-step verification
- 4. Ten warning signs
- 5. The quote transparency test
- 6. Independence is not negotiable
- 7. Choosing for your situation
- 8. Changing auditors
- 9. How Stepcon arranges audits
- FAQ
1. Correcting the old information: AFRC and HKICPA today
A common error in older material: "the auditor must hold a practising certificate issued by the HKICPA" is out of date. Since 1 October 2022, under the new regulatory regime for the accounting profession, practising certificates, registration of CPA firms and corporate practices, and inspection, investigation and discipline, are the responsibility of the Accounting and Financial Reporting Council (AFRC).
| Body | Current main functions |
|---|---|
| AFRC | Issues practising certificates; registers CPA firms and corporate practices; regulation, inspection, investigation and discipline; maintains the public registers of practising accountants and practice units |
| HKICPA | Professional qualification examinations, membership registration, continuing professional development, and setting Hong Kong accounting and auditing standards |
So when choosing an auditor, do not simply ask whether they are an HKICPA member. Ask: do you hold a valid AFRC practising certificate, and what is the PC Number?
2. What counts as a recognised auditor in Hong Kong
Under the Accounting and Financial Reporting Council Ordinance (Cap. 588), only the following practice units are eligible to be appointed or to provide company audit services under the Companies Ordinance (Cap. 622):
- A CPA (practising) holding a practising certificate issued by the AFRC
- A CPA firm registered with the AFRC
- A corporate practice registered with the AFRC
Every practising certificate carries a unique PC Number identifying the holder. The auditor who ultimately signs the report should be a CPA (practising) you can verify on the AFRC register.
Membership is not the same as being able to sign. Someone may be an HKICPA member, hold the professional qualification, even have years of experience in an accounting department — but without an AFRC practising certificate they cannot sign a company's statutory audit report as a practising accountant. Do not stop at the word "accountant" on a business card; ask for the practising certificate and PC Number.
3. Four-step verification you can do yourself
- Ask: request the full name of the person who will sign, confirmation that they are a CPA (practising), and their PC Number
- Check the person: use the AFRC's public "Find a CPA (Practising)" register, searching by name or PC Number
- Check the unit: if the service is provided in a firm's or company's name, check the AFRC's CPA firm / corporate practice register too
- Check the signature: when the report arrives, confirm the signatory, PC Number and firm name match what you verified
If you suspect an unlicensed audit, stop. The AFRC defines a bogus CPA as an unqualified person impersonating or holding themselves out as a CPA (practising) to provide audit services. Providing audit services without the required qualification is a criminal offence. If you suspect impersonation or unlicensed audit work, report it to the police and the AFRC.
4. Ten warning signs
- Unable or unwilling to give you the signatory's name and PC Number
- Says only "we have accountants" but will not name the practising accountant who signs
- A quote so low it falls below the hourly cost of even handling the basic documents
- Claims to "do the bookkeeping and sign the audit report ourselves"
- Promises an unqualified opinion, or guarantees an offshore claim will succeed
- Refuses to provide a written quote, engagement letter or scope of work
- Quotes low initially, then adds charges for further documents, urgency or adjusting entries
- Presses for payment before explaining the report
- Cannot explain how long the audit takes, what documents are needed or what you must do
- Will not handle a handover, or wants to hold your company chop and all originals indefinitely without listing them
5. The quote transparency test
| What to ask | What a professional provider can answer clearly |
|---|---|
| What does the quote include? | Whether audit, document preparation, tax computation and the tax return are charged separately |
| What is excluded? | Bringing prior years' books up to date, IRD queries, special procedures, additional confirmation costs |
| What assumptions is it based on? | Transaction count, bank accounts, currencies, inventory, turnover, whether the books are complete |
| How is extra work charged? | Whether a written quote comes first, or it is billed by time afterwards |
| Who signs the report? | Name, PC Number, firm name |
| When will it be finished? | Expected time once documents are complete, and what you need to provide when |
Market reference: a dormant company audit from about HK$3,000; a trading SME roughly HK$8,000–30,000, averaging about HK$9,000. Stepcon's audit arrangement: dormant companies from HK$2,000 a year; turnover under HK$500,000 HK$3,000; HK$500,000–1m HK$3,800; HK$1m–1.5m HK$4,500; HK$1.5m–3m HK$5,500. See our guide to audit fees.
6. Independence is not negotiable
The value of a statutory audit lies in its independence. The auditor must express a professional opinion on the financial statements free of influence from the client or management, which is why the same party should not both prepare the accounts and audit them.
Stepcon's role: we provide audit arrangement — organising the books, preparing the documents, coordinating an independent auditor, and following up confirmations and progress. The final audit report is issued by an independent auditor holding an AFRC practising certificate; the audit opinion is their independent professional judgement, and we neither will nor can guarantee any particular outcome. This is not a gap in the service — it is the boundary that keeps the report valid and protects your company's interests.
7. Choosing for your situation
| Your situation | What to prioritise |
|---|---|
| New company, first audit | Experience with opening balances; allow 4–8 weeks; familiar with the first BIR51 typically issued about 18 months after incorporation |
| Dormant company | Confirm whether the bank pays interest or charges fees; the scope is simple but compliance still applies |
| Trading or retail | Experience with stock counts, foreign currency, bills of lading and import documents |
| E-commerce | Familiar with platform settlements, payment gateways, multiple currencies and net-basis posting |
| Food and beverage | Cash sales, POS daily closing, food inventory, payroll and MPF |
| Property rental | Experience with property tax, profits tax and building allowances |
| Holding company | Two-tiered rate S1 elections, FSIE, dividends and interest, related party transactions |
| Years of unfinished accounts | Able to work forward from the earliest year, and to deal with estimated assessments and penalty relief |
8. Changing auditors properly
- Change at a financial year boundary, where the cut-off is cleanest
- Notify the outgoing auditor and arrange a professional handover
- Obtain the prior year's audit report, financial statements, tax computation, fixed asset schedule, trial balance and general ledger
- Confirm the incoming auditor has obtained the predecessor's professional clearance where applicable
- Check that the opening balances for the new year agree to the prior year's audited statements
- Update the auditor's appointment by annual general meeting or written resolution
Do not change auditor every year to save a few hundred dollars. A stable relationship helps the auditor understand your business and its history; explaining everything again each year adds hours and cost.
9. How Stepcon arranges audits
- Initial assessment: year of incorporation, turnover, transaction volume, bank accounts, inventory, employees and year end date
- A quote based on your actual position: setting out the scope of bookkeeping, audit arrangement, tax filing and any additional services
- Document preparation: bank statements, invoices, contracts, payroll and inventory data organised to the auditor's requirements
- Coordinating the independent auditor: following up audit queries, confirmations and the progress of the report
- Handing over to filing: once the audit report is complete, preparing the tax computation and submitting the BIR51
With bookkeeping, audit arrangement and tax filing joined up in one team, there are fewer repeat requests for documents and the auditor's hours stay under control.
FAQ
What counts as a recognised auditor in Hong Kong?
Under the Accounting and Financial Reporting Council Ordinance (Cap. 588), only a CPA (practising) holding an AFRC practising certificate, or a CPA firm or corporate practice registered with the AFRC, is eligible to provide company audit services under the Companies Ordinance. Not every "accountant" or HKICPA member can sign a statutory audit report.
What is the difference between the AFRC and the HKICPA now?
Since 1 October 2022 the AFRC issues practising certificates, registers CPA firms and corporate practices, and regulates auditors. The HKICPA continues to run professional qualification examinations, membership registration and continuing education, and to set standards. To verify a statutory auditor, check the AFRC register.
How do I verify an auditor's credentials?
Use the four steps: obtain the signatory's full name and PC Number; check the AFRC "Find a CPA (Practising)" register; check the CPA firm / corporate practice register; and when the report arrives, confirm the signatory matches what you verified.
Is the cheapest quote the best?
No. Look for reasonable rather than cheapest. A fee far below the market may exclude bookkeeping, document preparation or the tax computation, with charges added later for further documents, urgency or additional procedures. Ask for a written quote setting out scope, transaction volume assumptions, additional charges and who signs.
Does Stepcon sign audit reports itself?
No. Stepcon provides audit arrangement: organising the books, preparing the documents, coordinating an independent auditor and following up progress. A statutory audit must be signed by an independent auditor holding a valid practising certificate and registered with the AFRC, and the opinion is their independent professional judgement.
Can Stepcon arrange an auditor for me?
Yes. We can arrange a qualified independent auditor and provide bookkeeping, audit arrangement and tax filing as one joined-up service. The signatory's name and credentials are available for you to verify on the AFRC public register.
What if I think my auditor may be unlicensed?
Stop the engagement and any payment, keep the quote, correspondence, copies of the report and payment records, and contact or report the matter to the AFRC and the police. An unqualified person impersonating or holding themselves out as a CPA (practising) to provide audit services is a serious matter.
