Virtual asset service providers as AML/CFT reporting entities Albania — — source View →
Originator and beneficiary information on virtual asset transfers Albania — — source View →
Travel-rule information for virtual asset transfers Angola With each transfer; sent immediately and securely
— source View →
Travel-rule information for crypto-asset transfers Austria From 30 December 2024; self-hosted wallet checks above EUR 1,000
— source View →
VASP travel-rule information for virtual asset transfers Azerbaijan On each virtual asset transfer
— source View →
VASP licensing before offering crypto-asset services Bahrain Before offering services
— source View →
Stablecoin issuer licensing and reserve backing Bahrain Before issuance; reserves at all times
— source View →
Minimum funds for crypto platform and crypto exchange operators Belarus — — source View →
Segregation of client funds and virtual assets Brazil Ongoing; independent audit every 2 years (Art. 30, III)
— source View →
Reporting of crypto-asset operations to the Receita Federal Brazil Monthly by the last business day of the following month; exchanges' annual report by the last business day of January
— source View →
AML/CFT duties for virtual-asset service providers Cabo Verde Ongoing
— source View →
Travel-rule information for virtual-asset transfers Cameroon With each virtual-asset transfer
— source View →
Large virtual currency transaction report Canada Within 5 working days after receiving the amount
— source View →
Travel rule for electronic funds and virtual currency transfers Canada With each qualifying transfer
— source View →
Travel-rule information for virtual asset transfers Chad With each transfer
— source View →
Authorisation of crypto-asset service providers Croatia Before offering crypto-asset services
— source View →
Enhanced due diligence for crypto transfers involving self-hosted addresses Cyprus — — source View →
Crypto-asset service providers must be authorised by the CNB under MiCA Czechia Transitional period ended 1 July 2026
— source View →
Permit from the FAÚ for virtual-asset services outside MiCA Czechia Decision within 120 days of application (FAÚ page)
— source View →
Crypto-asset service providers must be authorised before offering services Denmark Before providing crypto-asset services; transition of up to 18 months for firms that applied by 30 December 2024
— source View →
Originator and beneficiary information with virtual asset transfers Ecuador With each transfer
— source View →
Travel rule for virtual asset transfers Equatorial Guinea With each virtual asset transfer
— source View →
Authorisation before providing crypto-asset services Estonia Before starting services; transitional period ends 1 July 2026
— source View →
Licence for crypto-asset service providers before offering services Finland Before offering services; the Finnish transition period for existing providers ended on 30 June 2025
— source View →
Authorisation as a crypto-asset service provider France Before providing crypto-asset services; transitional period ended 1 July 2026
— source View →
VASP authorisation before operating Gabon Prior approval before operating
— source View →
Travel-rule information for virtual asset transfers Gabon On each virtual asset transfer
— source View →
VASP registration with the National Bank before offering virtual asset services Georgia Before offering services; ongoing
— source View →
Travel rule: information accompanying crypto-asset transfers Germany With or before each transfer (Art. 14(4))
— source View →
Virtual asset trading platform licence Hong Kong Licence required before operating or marketing to Hong Kong investors
— source View →
Complete KYC before onboarding and re-do KYC at least annually (virtual digital asset service providers) India Before onboarding; re-KYC at least annually
— source View →
Send originator and beneficiary information with virtual digital asset transfers (travel rule) India With each virtual digital asset transfer
— source View →
Report suspicious transactions within seven working days (virtual digital asset service providers) India Within seven working days of forming the suspicion
— source View →
Travel rule: notify originator and beneficiary details on crypto-asset transfers Japan On each crypto-asset transfer
— source View →
Obtain a licence before providing virtual asset services Jordan Before starting the activity
— source View →
Virtual asset transfers: collect and keep travel-rule information Jordan On each transfer
— source View →
VASP licence before offering virtual asset services Kenya Before commencing business; licence expires 31 December each year (s.13)
— source View →
Crypto-asset operator licence or authorisation Kosovo Before offering services
— source View →
No virtual asset services: prohibition and customer risk warnings Kuwait — — source View →
VT service provider registration with the FMA Liechtenstein Before starting services
— source View →
Crypto-asset service provider authorisation and notifications (MiCA) Liechtenstein — — source View →
MiCAR authorisation for crypto-asset service providers Luxembourg Before providing crypto-asset services; CASP provisions applied from 30 December 2024
— source View →
Register with the SC before operating a digital asset exchange or custody service Malaysia Before offering digital asset exchange or custody services
— source View →
Virtual asset service provider licensing before operating Mauritius Before starting business; ITO issuers register at least 45 days before the offer
— source View →
Originator and beneficiary information on virtual asset transfers Mauritius With each transfer; intermediary providers keep records at least 7 years (r. 6)
— source View →
Segregation and custody of client virtual assets Mauritius — — source View →
Authorisation before providing digital-asset or crypto-asset services Monaco Before offering services; conditions apply continuously (art. 19)
— source View →
Prior label for token offerings Monaco Before any token offering
— source View →
Prior registration or authorisation of virtual asset service providers Mozambique Before offering services; Bank decision within 90 days
— source View →
Register with the SEC before offering digital asset or VASP services Nigeria Before commencing operations; ongoing
— source View →
Travel rule: originator and beneficiary information on virtual-asset transfers North Macedonia Before or during the transfer
— source View →
Customer due diligence for virtual asset service providers Peru At onboarding + ongoing
— source View →
Report suspicious transactions through ROSEL (virtual asset service providers) Peru No later than 24 hours after classification as suspicious
— source View →
Retain suspicious transaction records for five years (virtual asset service providers) Peru 5 years
— source View →
Crypto-asset service provider authorisation under MiCA Portugal Before offering crypto-asset services
— source View →
Travel-rule information and supervision for crypto-asset transfers Portugal Ongoing
— source View →
Licence required before providing virtual asset services Rwanda Before offering virtual asset services
— source View →
VASP registration and authorisation before offering crypto services San Marino Before offering services
— source View →
Licence from the NBS or Securities Commission before providing digital asset services Serbia Before offering services
— source View →
VASP licence before offering virtual asset services Seychelles Before commencing business
— source View →
Travel-rule information for virtual asset transfers Seychelles Each transfer
— source View →
VASP cyber security measures and incident notification Seychelles Within 12 hours of becoming aware (s. 18(1)); report within 5 working days
— source View →
Licence for digital token service providers serving customers outside Singapore Singapore Before providing the service; regime effective 30 June 2025
— source View →
Authorisation before providing crypto-asset services Slovakia Before offering services; transitional period to 30 December 2025
— source View →
Virtual currency service provider registration Slovenia Before starting services; changes within 8 days
— source View →
Crypto asset service providers: register with the FIC as accountable institutions South Africa Within 90 days of the Schedule 1 amendment (regulation 27A(2))
— source View →
Travel rule information for crypto asset transfers South Africa At or before the transfer
— source View →
Crypto-asset service providers: authorisation or notification before offering services Spain Before providing services (transitional period ended 2026-07-01)
— source View →
Authorisation or registration for crypto-asset activity under MiCA Sweden Before offering crypto-asset services
— source View →
Originator and beneficiary information with payment and virtual asset transfers Switzerland With each transfer
— source View →
FinTech licence for deposit-taking and crypto custody below banking thresholds Switzerland Before starting the activity
— source View →
Virtual asset service provider AML registration before operating Taiwan Before operating
— source View →
Travel rule: originator and beneficiary information on transfers Tonga With each transfer
— source View →
Crypto asset service provider authorisation before operating Türkiye Before starting activity
— source View →
Obtain a permit before providing virtual-asset services and a licence to operate as an exchange operator Turkmenistan Before operating; ongoing
— source View →
Register as a miner of virtual assets Turkmenistan Before mining begins
— source View →
VASP permit before conducting virtual asset activity in Dubai United Arab Emirates Before starting the activity
— source View →
Travel rule information for virtual asset transfers United Arab Emirates At each virtual asset transfer
— source View →
Cryptoasset business registration United Kingdom Before carrying on the business
— source View →
Travel rule for cryptoasset transfers United Kingdom With each inter-cryptoasset business transfer
— source View →
Money services business registration (applies to virtual asset service providers acting as money transmitters) United States Within 180 days of establishment; renewal every two calendar years
— source View →
Licensing before engaging in virtual currency business activity involving New York United States Before engaging in the activity
— source View →
Hold a VASP licence before carrying on virtual asset business Vanuatu Before offering virtual asset services
— source View →
Travel-rule information for virtual asset transfers Vanuatu Each cross-border transfer at or above USD/EUR 1,000
— source View →
Virtual asset service provider registration with the FIU Zimbabwe Before offering services; certificate valid for one year
— source View →
Applies across all sectors
Lawful basis, notice and data subject rights Albania — — source View →
Personal data breach notification Albania No later than 72 hours after becoming aware of the breach
— source View →
Beneficial ownership registration and updating Albania Changes within 90 calendar days of the actual change
— source View →
Lawful basis, notice and data subject rights Algeria — — source View →
Personal data breach notification Algeria No later than 5 days after becoming aware
— source View →
Appoint a data protection officer Algeria — — source View →
Designate a person responsible for information systems security Algeria — — source View →
Lawful basis, privacy notice and data subject rights Andorra Ongoing
— source View →
Personal data breach notification to the APDA Andorra Within a maximum of 72 hours of becoming aware (Art. 36)
— source View →
Lawful basis, notice and data subject rights Angola Ongoing
— source View →
File an annual beneficial ownership and control attestation with the Registrar of Companies Antigua and Barbuda Annually, within 30 days after the company's anniversary date
— source View →
Process personal data on a lawful basis, inform data subjects and honour their rights Argentina Ongoing; access within 10 calendar days; rectification or deletion within 5 business days
— source View →
Integrity programme for legal persons, required for certain contracts with the national State Argentina Ongoing; before contracting with the national State where Art. 24 applies
— source View →
Privacy policy, collection notice and individual access and correction rights Australia Ongoing
— source View →
Ransomware and cyber extortion payment reporting Australia Within 72 hours of the payment or of becoming aware of it
— source View →
No obligations for this country.
