Afghanistan -- AML/CFT Compliance Regulatory Overview

The regulatory landscape for cryptocurrency and Virtual Asset Service Providers (VASPs) in Afghanistan is highly complex, volatile, and largely non-existent in a formal, internationally recognized sense under the current de facto Taliban administration.

Key Point: The Taliban authorities have reportedly banned cryptocurrency trading and activities within Afghanistan. This means that any discussion of "AML/KYC requirements" for VASPs needs to be framed within the context of an environment where such services are officially prohibited.

Below is an overview of what existed or might be nominally referenced, alongside the current realities:

AML/CFT Legislation (Historical Context & Current Reality)

1. Law on Anti-Money Laundering (2014): Enacted by the previous internationally recognized government, this law established the general AML framework, defining money laundering, predicate offenses, and obligations for financial institutions.
2. Law on Combating the Financing of Terrorism (2014): Also from the previous government, this law defined terrorist financing offenses and outlined measures to combat it.

Current Reality:

• These laws, while on the books from the previous government, do not specifically address virtual assets or VASPs. They were drafted before cryptocurrencies became a significant regulatory concern globally.
• The current de facto Taliban administration's official stance, as widely reported since August 2022, is a ban on cryptocurrency trading, deeming it "haram" (forbidden in Islam) and a source of fraud. This outright ban supersedes any potential regulatory framework for VASPs.
• Any entity attempting to operate as a VASP would be doing so outside of the law as enforced by the current de facto authorities.

Customer Due Diligence (CDD) Requirements (Theoretical, Based on Previous Laws)

If a VASP were hypothetically operating under the general principles of the 2014 AML law (which, again, is unlikely and risky):

1. Identification and Verification:
   • Identifying the customer (and beneficial owner, where applicable).
   • Verifying identity using reliable, independent source documents (e.g., national ID cards, passports). Given the current political situation, the validity and reliability of official identification documents are themselves a complex issue.
   • Identifying the beneficial owner for legal persons and arrangements.
2. Understanding the Business Relationship:
   • Obtaining information on the purpose and intended nature of the business relationship.
3. Ongoing Monitoring:
   • Conducting ongoing monitoring of the business relationship and transactions undertaken throughout the course of the relationship to ensure they are consistent with the obliged entity's knowledge of the customer, their business, and risk profile.
   • Ensuring that documents, data, or information obtained are kept up-to-date.
4. Risk-Based Approach:
   • Applying enhanced due diligence for high-risk customers or transactions (e.g., Politically Exposed Persons – PEPs, complex transactions, high-value transfers, or transactions with high-risk jurisdictions).

Current Reality: These are theoretical applications. Given the ban, no legitimate VASP would be able to formally implement these requirements in a way recognized or sanctioned by the de facto authorities.

Suspicious Transaction Reporting (STR)

Historical Context (Pre-Taliban):

• Under the previous AML/CFT framework, financial institutions (including any future regulated VASPs) were obliged to report suspicious transactions to the Financial Intelligence Unit of Afghanistan (FinTRACA).
• STRs would typically involve transactions suspected of being linked to money laundering, terrorist financing, or other criminal activities.

Current Reality:

• While FinTRACA technically still exists under the de facto administration, its functionality, independence, and engagement with international AML bodies (like the Egmont Group or FATF) are severely compromised.
• Given the ban on crypto, there is no formal mechanism or expectation for VASPs to report STRs regarding virtual assets to FinTRACA. Any such activity would likely be considered illegal by the de facto authorities.

Record-Keeping Obligations

Historical Context (Pre-Taliban):

• The AML law typically required obliged entities to retain records of customer identification data, account files, business correspondence, and transaction data for a minimum period (often 5-7 years) after the business relationship has ended or the transaction was completed.

Current Reality:

• Similar to CDD and STRs, these obligations are not practically applicable to VASPs in the current environment where virtual asset activities are banned.

Overseeing Authority

Historical Context (Pre-Taliban):

• Da Afghanistan Bank (DAB): The central bank, which would have been the primary financial sector regulator responsible for licensing, supervision, and enforcement of AML/CFT compliance for financial institutions.
• Financial Intelligence Unit of Afghanistan (FinTRACA): The national centre for receiving, analysing, and disseminating suspicious transaction reports.

Current Reality:

• Da Afghanistan Bank (DAB): Currently controlled by the de facto Taliban administration. It is the institution that has reportedly enforced the ban on cryptocurrency trading. Therefore, its role concerning VASPs is one of prohibition and enforcement of the ban, rather than regulation and oversight.
• FinTRACA: Its operational capacity and international recognition are highly questionable under the current regime.

Specific Legislation Names and Regulatory Body URLs

Legislation:

• Law on Anti-Money Laundering (2014) (from previous government)
• Law on Combating the Financing of Terrorism (2014) (from previous government)

Regulatory Bodies:

• Da Afghanistan Bank (DAB) - Central Bank:
  • URL: https://www.dab.gov.af/
  • Note: DAB under the Taliban administration is the de facto enforcer of the crypto ban.
• Financial Intelligence Unit of Afghanistan (FinTRACA):
  • URL: https://fintraca.gov.af/
  • Note: This website's functionality and the body's independence and international standing are highly uncertain under the current de facto administration.

Conclusion:

Operating as a cryptocurrency/virtual asset service provider in Afghanistan is fraught with extreme legal, operational, and financial risks. There is no recognized, specific regulatory framework for VASPs; instead, there is an official ban enforced by the de facto authorities. Any engagement with virtual assets in Afghanistan should be undertaken with extreme caution, recognizing the absence of a stable legal framework, the high risk of sanctions, and the potential for severe legal repercussions from the de facto authorities.