AML, sanctions and travel rule.

States that stablecoins are a form of virtual currency that cannot meet KYC and AML requirements, foreshadowing the stablecoin clauses of Notice No. 42.

Requires blockchain service providers to file with the CAC, verify users' real identities and keep records, the permitted lane for non-crypto blockchain businesses.

AML/CFT obligations for issuers, including customer due diligence at issuance and redemption, travel rule and on-chain monitoring.

Part 5B and Schedule 3B, in force from 1 June 2023, make an SFC licence mandatory for any virtual asset trading platform operating in or marketing to Hong Kong.

FSA explanation of the travel rule as applied to exchanges and stablecoin intermediaries, including data to be sent with each transfer.

Japan's core AML law. Exchanges and stablecoin intermediaries must verify customers and, since June 2023, pass originator and beneficiary data on transfers.

The FIU's page for VASPs as reporting entities (checked 5 October 2026), with its suspicious transaction reporting manual, risk-based approach guide and red-flag indicators for virtual assets.

Current rulebook (Mongolian), published by the FRC on 27 August 2026: MNT 400 million capital per service, a board of at least five with two independent members, ISO 27001 security, listing and market abuse policies, a 100x custody cap and Travel Rule data from MNT 3 million.

The first operating regulation, which capped custody at 100 times a VASP's own equity and introduced the MNT 3 million Travel Rule threshold. Repealed by FRC Resolution No. 657 of 27 December 2024; Resolution No. 258 of 2026 is the current text.

Defines virtual assets, lists five regulated VASP activities and requires FRC registration, capital and AML compliance. Adopted 17 December 2021; the FRC's English translation.

Records Mongolia's removal from the grey list a year after it was added, the pressure that led to the 2021 VASP law.

Enforcement decree approved 11 August 2026: tougher registration rules took effect on 20 August 2026, while the travel rule for transfers of all sizes and reporting of overseas transfers of ₩10 million or more start on 19 February 2027, six months after promulgation.

The AML statute that has required VASPs to register with KoFIU since March 2021, with ISMS certification and a real-name bank account for won trading.

The official register, updated 29 September 2026: 11 VASPs with completed AML registration, one voluntary withdrawal, and 17 former operators no longer allowed to provide services.

Proposes amending the VASP AML rules so the travel rule applies to transfers of any value, with extra originator and beneficiary data above NT$30,000; domestic VASP transfers first (planned October 2026), cross-border by end-2027.

Sets who must register, what documents are needed and when registration is refused or revoked; foreign VASPs must establish a company or branch in Taiwan. In force from 30 November 2024.

Customer due diligence, record keeping, large and suspicious transaction reporting and transfer information rules for VASPs; first issued in 2021 and rewritten in November 2024. Article 7, the transfer information (travel rule) provision, has no start date yet.

Article 6, as amended in July 2024, bars anyone from providing virtual asset services without FSC AML registration, on pain of up to two years in prison.

Splits licensing between the two regulators: NBC-licensed commercial banks need prior NBC authorisation for virtual asset services, and all other providers serving Cambodia need an SERC licence. Licensed providers become reporting entities of the Cambodia Financial Intelligence Unit.

Sets the timetable for a FATF- and IOSCO-aligned virtual asset law: a framework law with its competent authority, AML/CFT and enforcement pillars by late September 2026, and enactment-ready legislation in December 2026.

Records Cambodia's removal from the grey list after completing the action plan agreed in February 2019.

The sixth revision, effective 2 March 2026, allows digital currency ETFs that track spot prices of eligible digital currencies. Assets must be bought through SC-registered exchanges or FATF-compliant regulated foreign platforms, and coins built to impede traceability are excluded.

AML/CFT rules for capital market reporting institutions, including registered exchanges and other digital asset intermediaries. Last revised on 13 June 2024.

Consolidated BNM policy document that covers digital currency exchangers among other reporting institutions under AMLA. It took effect on 6 February 2024.

Malaysia's national assessment of money laundering and terrorism financing risks from virtual assets and service providers for 2020 to 2022. It confirms onshore crypto exchange is treated as dealing in securities.

First AML/CFT rulebook for crypto exchangers listed in Paragraph 25 of the AMLA First Schedule. Its requirements now sit in BNM's consolidated DNFBP and NBFI policy document.

Draft amendments to the payment systems manual that would let merchant acquirers onboard virtual asset service providers, alongside casinos and money service businesses, only under direct merchant arrangements with enhanced due diligence. It would also pause new payment system operator registrations for 12 months; comments closed on 1 October 2026.

Signed on 30 May 2025 and effective 30 days after newspaper publication, it brings crypto-asset service providers dealing with Filipinos, including offshore platforms that solicit them, under SEC licensing, and sets disclosure, marketing, AML and enforcement rules for crypto-asset offerings.

Signed 29 January 2021, adding virtual asset service providers to the list of AML covered persons. VASPs must register with the AMLC, apply customer due diligence and file suspicious transaction reports.

The core VASP regime: a Certificate of Authority for exchange, transfer and custody services. Minimum capital is ₱50 million with custody and ₱10 million without, plus AML, travel rule, cybersecurity and consumer protection duties.

Binding AML/CFT rules for DPT licensees covering customer due diligence, monitoring and suspicious transaction reporting. Includes Travel Rule data for token transfers, last revised 30 June 2025.

Explains how MAS expects DPT service providers to apply Notice PSN02 in practice, including risk assessment and value transfer controls.

Notification Sor Thor. 9/2026 requires originator and beneficiary data to travel with transfers and self-hosted wallet checks. It takes effect on 27 February 2027.

Tightens KYC, enhanced due diligence and suspicious transaction reporting across securities and digital asset operators to counter mule accounts and scams.

Under the amended technology crime decree (No. 2) B.E. 2568, in force from 13 April 2025, the digital economy ministry blocked five unlicensed platforms from 28 June 2025 at the SEC's request.

The core statute, in force from 14 May 2018, requiring licences for exchanges, brokers and dealers and approval for token offerings. Section 7 makes licensed operators financial institutions under the AML law.

Sets customer due diligence and reporting duties for financial institutions, which include licensed digital asset operators by virtue of the 2018 Emergency Decree.

Passed 24 August 2026 and effective 1 December 2026. It adds crypto asset services to the AML regime as reporting entities and lists suspicious-transaction indicators specific to crypto.

Keeps Vietnam on the grey list, where it has been since June 2023, and urges it to implement an action plan whose deadlines all expired in May 2025.

Passed 15 November 2022 and effective 1 March 2023. Resolution 05 applies its customer due diligence rules to crypto providers, with identification required for occasional transactions of US$1,000 or more.

AML, counter-terrorist financing and sanctions duties for all GFSO licensees, applied to virtual asset firms together with the Travel Rule expectations in the Virtual Asset Guidance.

Sets out accepted virtual assets, capital (US$200,000 for dealers and custodians, US$500,000 for an exchange), custody, technology and AML expectations, and the framework for stablecoin issuers.

Section 13 PMLA notices and IT Act takedown notices to 15 platforms including WhiteBIT, Pionex and ChangeNow. Repeats the warning that crypto products are unregulated and risky.

Official answer listing the 54 VDA service providers registered with FIU-IND as of 9 March 2026 and the 53 platforms whose apps and URLs it had ordered taken down. It confirms FIU-IND does not publish a register and that registration is not a licence.

FIU-IND's updated rulebook for VDA service providers, first issued in 2023. Covers registration, KYC, travel rule, record-keeping and suspicious transaction reporting.

Second enforcement wave against unregistered offshore platforms. Reports that 50 VDA service providers had registered with FIU-IND.

Revised process and documentation for VDA service providers, onshore and offshore, to register as reporting entities before serving Indian users.

Named nine offshore exchanges operating without registration and asked the IT ministry to block their URLs. At the time 31 VDA SPs had registered.

Made businesses that exchange, transfer, safekeep or administer VDAs, or provide financial services for token offerings, reporting entities under the PMLA. This is the legal basis for FIU-IND registration.

Confirmed the 2018 circular is no longer valid after IAMAI v RBI. Banks may serve crypto clients but must apply normal KYC, AML and FEMA due diligence.

Core licensing rulebook: minimum capital by licence category, governance, client asset segregation, 100% reserves for token issuers and a Travel Rule threshold of USD 1,000. Notified in the Gazette on 21 August 2026.

Pakistan's primary crypto law: it establishes PVARA, requires a licence for any virtual asset service in or from Pakistan and sets issuer, custody and AML duties. Signed by the President on 4 March 2026, published in the Gazette on 5 March and in force at once (section 1(3)).

Set the NOC process that precedes a licence: AML/CFT framework, controller disclosure, fit-and-proper forms and ongoing reporting. Effective 2 December 2025; NOC applications have been made under the Services Regulations, 2026 since 21 August 2026.

Records Pakistan's removal from the grey list after it completed two FATF action plans, the backdrop to building a FATF-aligned VASP regime.

Names the FSA as the supervision and control body for virtual assets, covering licence compliance and AML monitoring, removes its licensing role, and repeals the KGS 10 billion exchange capital clause. It applies from 9 June 2026.

Rules for crypto exchanges, as amended by Resolutions No. 625 (2025) and No. 516 (2026): fit-and-proper owners, AML and travel rule duties and service to residents and non-residents. Resolution No. 516 removed the KGS 10 billion capital clause; the minimum is now set by presidential decree.

Explains Resolution No. 625: mandatory AML/KYT screening through approved providers, bans on anonymous wallets, NFTs and high-risk assets, sanctions checks on key staff and annual audits.

Sanctioned Capital Bank of Central Asia, Grinex, Tengricoin, Old Vector and others linked to the A7A5 token.

Designated Grinex as the successor to Garantex and Old Vector, the Kyrgyz issuer of the rouble-backed A7A5 token, along with other firms in Russia and Kyrgyzstan.

At the EAG parliamentarians' forum Turkmenistan presented the Law on Virtual Assets as creating a digital financial market with a virtual asset exchange.

Adopted by the EAG Plenary in May 2026 and published on 29 June: upgraded Recommendations 12 and 26 but left Recommendation 15 partially compliant, with enhanced follow-up until November 2027.

Reports the parliamentary session that considered the Law on Virtual Assets and adopted amendments to the AML/CFT law.

Adopted at the 38th EAG Plenary: found no registered VASPs, no VASP AML obligations and no legal basis for mining, and rated Recommendation 15 on new technologies partially compliant.

Requires crypto providers to run customer due diligence, monitor transactions and report suspicious activity; last amended by No. 3309-3, in force from 29 September 2026 (Uzbek text).

Announcement of the Crypto-Asset Module, covering licensing, governance, capital, risk management, AML/CFT, wallet security and trade transparency.

The core crypto regime: licensing, conduct, custody, technology, AML and market abuse rules for crypto-asset services. First issued February 2019; the current version applies from 6 May 2026.

Applies the CBB's AML/CFT rules to crypto-asset licensees; since January 2020 it states that simplified customer due diligence is not allowed.

The banking AML directive; section 87A, added on 9 May 2022, sets how banks handle payment services linked to customers' virtual currency activity. The current version (No. 29, Hebrew) was issued on 30 April 2026.

Announces that the AML order extending identification, reporting and record-keeping duties to financial asset service providers took effect on 14 November 2021 (gov.il blocks automated checks; URL confirmed via search).

Jordan's FATF Recommendation 15 risk assessment, which found virtual asset exchange services carried high inherent and residual ML/TF risk because controls were largely ineffective.

The FSA and the Public Prosecution trained specialists on tracing money laundering through cryptocurrencies, a sign of the enforcement focus while licensing is pending.

Rates Oman largely compliant with the FATF standard on virtual assets (R.15) under the 2023 registration regime, and notes that only one VASP was registered and operating.

No one may carry on virtual asset activity in Oman without registering with the regulator. Registrants must run AML/CFT controls, report suspicious transactions to the National Centre for Financial Information and follow rules on virtual asset transfers.

Tells banks, exchange houses and payment firms to identify customers' exposure to virtual assets and apply enhanced due diligence where risk is higher, guided by FATF standards.

Oman's core AML/CFT law, issued on 2 June 2016, which sets the obligations of financial institutions and the powers of the National Centre for Financial Information; the 2023 VASP instructions build on it.

The QFC's AML/CFT rulebook, amended in the September 2024 digital assets package to cover investment token business. The current version (No. 6) has applied since 1 May 2026.

Lets crypto asset service providers, brokers and portfolio managers onboard non-Turkish nationals remotely with NFC-enabled passports and onboard companies through their authorised representatives. Address checks are required within three months, and no money or crypto may be transferred until the address is confirmed. In force on publication.

Imposes enhanced customer due diligence on crypto firms, 48-hour holds on withdrawals (72 hours for a first withdrawal) and caps stablecoin withdrawals at $3,000 a day and $50,000 a month.

Adds Article 24/A, requiring crypto service providers to collect and pass on originator and beneficiary information for crypto transfers. Published 25 December 2024, in force 25 February 2025.

Adds crypto asset service providers to the list of obliged parties under Turkey's AML/CFT measures, subject to MASAK supervision.

VARA's public enforcement record, including fines on 19 unlicensed firms in October 2025, on the operators of MEXC and KuCoin in June 2026 for serving Dubai customers without a licence, and on licensee CoinMENA for AML failures.

Replaces Federal Decree-Law No. 20 of 2018 and places VASPs under the full set of preventive AML/CFT duties alongside banks. In force 14 October 2025.

The FSRA's consolidated guide to its virtual asset regime: Accepted Virtual Assets, capital, custody, technology governance and AML/CFT for multilateral trading facilities, custodians, brokers and managers. Current version dated 10 June 2025.

Removes the UAE from the list of jurisdictions under increased monitoring after it completed its action plan.

Tells banks and other licensed institutions how to assess and manage money laundering risk when serving VASPs or handling virtual asset flows.

AUSTRAC cancelled, suspended or refused to renew 45 remittance and virtual asset service provider registrations over the past year, including GetCoins, a crypto business allegedly exploited by investment scams.

AUSTRAC suspended Cryptolink's VASP registration for three months, shutting its 96 crypto ATMs after reporting failures that followed a 2025 enforceable undertaking.

Announces supervisory campaigns into 36 over-the-counter crypto businesses and 27 local exchanges as the VASP reforms bed in.

Explains which crypto services make a business a VASP and states that providing them without AUSTRAC registration is illegal.

Made on 29 August 2025, with the virtual asset provisions in force from 31 March 2026 (as amended by 2026 amending rules). Sets VASP registration requirements, enhanced due diligence for certain virtual asset services and Travel Rule data for crypto transfers.

Assented to on 10 December 2024. Schedule 6, in force from 31 March 2026, replaces digital currency exchange rules with a broader virtual asset service provider regime.

Applies Bermuda's AML/ATF regulations and general guidance notes to digital asset businesses, covering customer due diligence, ownership and staff checks, and wire and digital asset transfers.

After the June 2026 FATF plenary, the government reported continued progress on its action plan since its June 2025 commitment, with more than 92% of actions in its revised national plan completed or ahead of schedule.

The March 2026 to February 2027 inspection cycle targets 50 licensees, up from 40 inspections in 2025, focusing on trust and company service providers, investment business and VASPs.

Strategic analysis of virtual asset suspicious activity reports filed by BVI exchanges, covering typologies such as layering, cross-border transfers to evade sanctions and unhosted wallets.

Lists the originator and beneficiary information that must accompany transfers of US$1,000 or more between VASPs, and explains how to handle counterparties in jurisdictions without the travel rule.

Corrected the originating VASP obligations in the virtual asset transfer rules and set administrative penalties for breaches of them. In force from 17 March 2023.

Explains how the AML Regulations and the AML/TF Code of Practice apply to VASPs, covering risk assessment, customer due diligence, the travel rule, sanctions screening and suspicious activity reporting.

Gazetted on 29 August 2022; its provisions on virtual asset transfers, the BVI travel rule, took effect on 1 December 2022. It also set a US$1,000 threshold for due diligence on one-off virtual asset transactions.

Made providing virtual asset services in transactions of US$1,000 or more a relevant business under the AML Regulations, with the virtual asset provisions in force from 1 December 2022.

Sets the criteria CIMA uses to approve registrations, licences and waivers, including fit and proper tests for owners of 10% or more, governance, business plans and travel rule systems. Effective 30 May 2025.

Part 10A sets the travel rule for virtual asset transfers, requiring originating VASPs to collect and send originator and beneficiary information. CIMA states Part 10A has applied since 1 July 2022.

CIMA's answers on scope, the move from registration to licensing on 1 April 2025, the 90-day transition, waivers, fees and travel rule compliance.