Hong Kong mandates unlocking phones and Bitcoin wallets; those who refuse face criminal charges.

Hong Kong authorities have recently reiterated that, under the 2020 National Security Law, law enforcement officers have the right to require individuals to unlock their phones and laptops during national security investigations. Refusing to cooperate can constitute a criminal offense. The law also authorizes police to seize and retain devices related to relevant cases at airports and border crossings.

Scope of Enforcement and Legal Framework: Foreign Travelers and Transit Passengers Are Included

According to provisions of the National Security Law, the authority to enforce device unlocking is not limited by nationality and explicitly applies to foreign citizens and transit travelers, not just Hong Kong permanent residents. The definition of “national security” remains somewhat vague, making it difficult to clearly define potential triggers in advance.

Law enforcement also has the authority, within relevant case frameworks and based on subjective judgment of “relevance to the case,” to seize devices. This applies at international airports and various border entry points. Such broad scope means potential risks are no longer limited to individuals with clear political stances but extend to any visitors carrying devices containing sensitive data.

Special Financial Risks Facing Bitcoin Wallet Holders

This regulation poses a threat to cryptocurrency holders that goes far beyond privacy concerns, directly impacting asset security. Crypto users and security experts point out that many people store their Bitcoin private keys, seed phrases, or wallet addresses on personal devices. Once law enforcement gains access, this information could be fully exposed—anyone with these details could immediately transfer the associated assets.

The groups currently at risk include not only politically sensitive individuals but also:

• Crypto traders: Devices may contain account login credentials or exchange API keys
• Web3 founders and developers: Devices may store smart contract private keys or multi-signature wallet access data
• Retail self-custody wallet holders: Ordinary investors managing Bitcoin or other crypto assets directly on personal devices

For users managing their own crypto assets, losing device access could mean permanent loss of funds, as on-chain transfers are irreversible once completed.

Security Tips Before Traveling to Hong Kong

Crypto communities and security experts recommend the following precautions. Travel devices should follow the “clean device” principle—do not store any private keys, seed phrases, or wallet credentials on devices used in Hong Kong. If managing crypto assets is necessary, consider using hardware wallets combined with passphrase features to completely separate main assets from daily-use devices. Evaluating whether it is truly necessary to carry devices containing sensitive crypto data into Hong Kong is the most straightforward protective measure currently available.

Frequently Asked Questions

What is the legal basis for Hong Kong’s mandatory device unlocking?

The enforcement authority stems from the 2020 National Security Law, not a new legislation. It authorizes law enforcement to require device unlocking during national security investigations; refusal to cooperate can be criminal. Recent widespread discussions on social media have brought renewed public attention to this clause.

Does this regulation apply to foreign travelers and transit passengers?

Yes. The current legal framework explicitly applies to foreign nationals and transit travelers in Hong Kong, not just Hong Kong residents. The definition of “national security” remains somewhat vague, making the scope of triggers difficult to define in advance.

What specific risks do Bitcoin and cryptocurrency holders face?

If private keys, seed phrases, or wallet addresses are stored on devices that are forcibly unlocked, holders risk full access and transfer of their assets. Since on-chain transactions are irreversible, once funds are transferred, they are nearly impossible to recover. Loss of device access could directly equate to financial loss.