The Company Disclosed It Was Unlicensed. The Lawsuit Says That Is the Problem.

Here is the start of the class action complaint against Futu Holdings: it charges that the company and its officers made false or misleading statements to investors. Here is a quote from Futu's own most recent annual report, filed with the SEC in April 2026: "We do not hold any license or permit for providing securities brokerage services in Mainland China."

The company told investors, in plain English, that it didn't have a license. The lawsuit says telling investors that isn't the same as telling investors what the consequence would be when the Chinese government finally enforced the rule. It's a distinction that sits at the center of almost every securities fraud case - but in this one, the distinction has a $271 million price tag.

The basic point is that Futu operated a brokerage business in mainland China without a license, collected fees from mainland investors for roughly three years after regulators told it to stop, and treated the risk of a penalty as a cost it could price in. On May 22, the China Securities Regulatory Commission (CSRC) sent a letter proposing confiscation of illegal gains and fines totaling RMB 1.85 billion, roughly $271 million. The company's founder and CEO also faces a personal fine of RMB 1.25 million. The stock fell 27.5% on the same day, from $123.86 to $89.76.

This is basically the oldest story in regulated finance: a company operating in a gray area where the law says "no" but enforcement has been slow, and deciding that the revenue is worth the eventual bill. The interesting part is not whether Futu broke a Chinese rule - the CSRC told it so publicly in December 2022, and Futu said so publicly in its own SEC filings - but whether US investors should have been told that the bill was coming, how big it might be, and how likely it was to arrive.

Let's walk through the plumbing. The CSRC warned Futu and its rival Tiger Brokers on December 30, 2022. Both companies stopped soliciting new mainland clients and pulled their apps from Chinese app stores. But existing mainland accounts were left in limbo: no clear deadline, no penalty yet, just a regulatory cloud. Futu kept serving those accounts, kept earning the fees, and kept filing annual reports that said, effectively, "we don't have a license and regulators could fine us someday."

The complaint alleges that this disclosure was insufficient. It argues the company should have disclosed that the penalty was not a vague someday risk but a reasonably likely outcome, that the company's financial results were inflated because they included revenue from an unlicensed operation, and that the magnitude of the risk was understated. The class period the lawsuit covers runs from May 24, 2023 to May 27, 2026.

There's a wrinkle. There was a previous lawsuit making almost this exact argument, covering the period from April 2020 to May 2023. In September 2024, a federal judge dismissed it. The court agreed with Futu's defense team - Skadden handled the work - that the plaintiffs failed to plead any actionable misstatement or omission. The company told the truth about the risk. Telling the truth about a risk, even a big one, generally doesn't violate the securities laws if the risk later materializes.

The new complaint has to explain why this time is different from the last time. The May 22 CSRC letter gives plaintiffs a concrete event that didn't exist when the first case was thrown out. But they still need to show that Futu's management knew something more specific about the timing or size of the penalty that wasn't disclosed - not just that the risk existed, but that the company had a more concrete expectation of how bad it would get.

On May 28, Futu reported Q1 earnings. Revenue grew 24.7% to HK$5.86 billion. Net income fell 61.2%, hit by the provision for the proposed penalty. The stock dropped another 4.8%. Revenue growth in the same quarter as a $271 million regulatory bill is the kind of result that makes investors look closely at where those new dollars are coming from.

As of the end of the first quarter, mainland accounts represented 13% of Futu's total funded accounts. Those accounts generated roughly 20% of revenue and 17% of total assets under management. The unlicensed business was outsized relative to its account base - a smaller share of accounts was doing a larger share of the revenue. That's the sort of number that makes the disclosure question harder for the defense. Even if Futu disclosed the risk, did it disclose how central the at-risk revenue stream was to its growth story?

Tiger Brokers, Futu's smaller rival, received a similar CSRC letter the same day, with combined fines and confiscations of over $50 million. Tiger's stock also fell sharply. The coordinated timing across multiple brokers suggests this was a campaign the CSRC had been building toward, not an ad hoc decision. Industry reporting puts the enforcement push inside a broader two-year effort to shut down unauthorized cross-border securities trading by mainland retail clients.

The lead plaintiff deadline - the date by which investors can ask the court to appoint them to run the lawsuit on behalf of the class - is August 25, 2026. If you're reading this because a law firm's press release told you to, the short version is that you don't need to do anything to remain a member of the class. The ability to share in any future recovery does not depend on stepping forward as lead plaintiff. The lead plaintiff simply gets to pick the law firm. This part of the process is largely a game between plaintiff-side law firms trying to capture the most lucrative litigation fee arrangement.

The substantive question is whether the lawsuit itself has legs. The prior dismissal cuts against the plaintiffs. But the May 22 CSRC letter gives them a concrete event that didn't exist when the first case was thrown out, and the revenue concentration in the at-risk segment gives them something to work with on the disclosure side.

The stock is around $109 now, up roughly 7% over the last five days but still down 33% year-to-date. The market has partially recovered from the initial shock, which suggests investors have separated the one-time penalty from the ongoing business. Whether that's the right call depends on what happens next: the CSRC penalty is still proposed, not final. Futu has the right to defend itself and request a hearing. The number could move up, move down, or stay roughly where it is.

The real structural question is the one the lawsuit forces you to stare at: how much of Futu's growth story was built on regulatory risk that the company priced as a cost of doing business? A $271 million bill is large, but on a revenue base that just posted 24.7% growth, it's a one-time hit. The more persistent problem is the 20% of revenue that may not be available going forward, if the CSRC requires Futu to wind down mainland accounts entirely. That's a different problem from the fine. It's a problem about the shape of the business, not the price of a penalty.

Futu's official framing after the announcement was careful and standard: the company "will fully cooperate with the CSRC and exercise its lawful rights to safeguard the legitimate interests of the company and its shareholders." In practice, that means they'll fight the penalty while simultaneously telling US investors the business is fine. Whether those two moves are compatible depends on how much of the mainland operation the company is actually willing to close.

The class action may not survive. The dismissed predecessor is a heavy anchor. But the complaint points to a real structural question about a brokerage that told investors it was operating without a license, continued to do so anyway, and then got the bill. The machine behind the lawsuit is not particularly unusual. The machine behind the business - collecting fees in a jurisdiction where you don't have permission to collect them, and betting the fine is cheaper than compliance - is something regulators in every jurisdiction, including the US, have been trying to shut down for decades. The difference in China is just that the fine arrived with a letter instead of a phone call.

The lead plaintiff deadline of August 25 is the administrative clock. The more interesting clock is the one inside the CSRC's proceedings, where the actual size of the penalty - and the scope of the business disruption - will be determined. That's the number that will tell you whether the market's partial recovery is right or premature.