Hong Kong's financial regulator has ordered all licensed virtual asset trading platforms and online brokerages to phase out the use of onetime passwords for customer logins, mandating a shift to more secure, phishing-resistant authentication methods.