Self-custodial wallet / non-custodial software in Antigua and Barbuda
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Antigua and Barbuda without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to a non-custodial software publisher, as the publisher never holds, controls, or has access to user funds — the definition of 'digital asset business' under the Digital Assets Business Act 2020 centers on custody, exchange, transfer, or financial services related to digital assets, none of which are triggered by mere software publication.
- The DABA's definition of 'custody services' (Section 2(1)(d)) specifically covers entities that hold or manage private keys or otherwise control clients' digital assets (ag.custody.definition-of-custody-services-the, ag.licensing.custody-providers-providing-custody-and), which a non-custodial wallet publisher does not do.
- AML/CFT obligations under the Anti-Money Laundering and Prevention of Terrorism Act, the Money Laundering Prevention Act 1996, and the Prevention of Terrorism Act 2005 apply only to 'reporting entities' and licensed VASPs, not to software publishers without a licensing trigger.
- If the publisher were to also offer any ancillary service that touches custody (e.g., a hosted recovery service or cloud key backup), that could trigger licensing and full AML obligations including CDD, ongoing monitoring, STR reporting to the FIU, sanctions screening, Travel Rule compliance, and record-keeping for 5 years (ag.licensing.this-is-a-cornerstone-requirement, ag.licensing.customer-due-diligence-cdd-robust, ag.licensing.ongoing-monitoring-continuous-monitoring-of, ag.licensing.reporting-reporting-of-suspicious-transactions, ag.licensing.sanctions-screening-screening-clients-against, ag.licensing.record-keeping-maintaining-records-for, ag.licensing.travel-rule-compliance-with-the)
Key Restrictions
- The publisher must not engage in any activity that could be construed as providing 'custody services' under the DABA — i.e., must never hold, manage, or control user private keys (ag.custody.definition-of-custody-services-the, ag.licensing.custody-providers-providing-custody-and).
- The publisher must not offer wallet infrastructure that involves the publisher as a counterparty, intermediary, or exchange of value, which would trigger the VASP licensing regime (ag.licensing.operating-a-digital-asset-exchange, ag.licensing.providing-services-for-the-exchange).
- If the publisher incorporates in Antigua and Barbuda or has a physical presence there, all directors and senior management must pass 'fit and proper' assessments by the FSRC (ag.licensing.fit-and-proper-persons, ag.licensing.all-directors-senior-management-significant).
- The publisher must not hold itself out as a regulated digital asset business or imply FSRC endorsement of the software.
Key Risks
- Regulatory ambiguity: The DABA's definition of 'digital asset business' is broad and could be interpreted expansively by the FSRC; a non-custodial publisher with a local presence could be deemed to be 'carrying on business in or from Antigua and Barbuda' even if purely publishing software (ag.enforcement.scope-the-dab-act-governs).
- FATF guidance evolution: International standards may expand to treat non-custodial wallet publishers as VASPs if they exercise sufficient control over the software's features (e.g., proprietary transaction relaying, fee structures).
- Enforcement risk is low if the publisher has no Antigua-and-Barbuda presence and serves users globally, but any local office, resident director, or bank account could create jurisdictional nexus (ag.enforcement.jurisdictional-focus-while-companies-may).
- Consumer-protection exposure: Even without licensing obligations, the publisher could face private lawsuits or regulatory actions for software defects, misleading disclosures, or failure to warn users of risks (e.g., private key loss, phishing).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The definition of 'Operating a Digital Asset Exchange' must account for evolving regulatory frameworks such as MiCA, the operational distinction between centralized (CEX) and decentralized (DEX) platforms, and the jurisdictional lack of uniform clarity, meaning it does not directly and uniformly apply to all cryptocurrency exchanges as a single, stable category.
Custody providers are entities that hold or manage private keys or otherwise control clients' digital assets, but regulatory frameworks increasingly require integration with traditional banking, state-level unclaimed property laws, and sophisticated compliance measures beyond mere key control.
Payment processors for virtual assets are subject to evolving and jurisdiction-specific licensing regimes, with some jurisdictions (e.g., Pakistan) moving toward conditional permissiveness for licensed providers, while others (e.g., Brazil) maintain restrictions in regulated systems.
The Agriculture Committees are actively drafting and updating legislation (such as the CLARITY Act and Senate market structure bills) to assert jurisdiction over digital asset market structure, including issuance, but the regulatory landscape is actively shifting and evolving, not static.
Transferring digital assets between wallets or accounts that you control is generally not a taxable event under IRS guidance, and the SEC-CFTC Joint Staff Statement clarifies that facilitating certain digital asset trades does not necessarily violate securities or commodities laws, meaning the regulatory scope is narrower than the original claim implies.
Providing services for the exchange of digital assets for fiat currency or other digital assets (overlapping with exchanges, but could also cover simpler payment gateway models where crypto is exchanged for fiat for a merchant).
Providing financial services related to an issuer's offer or sale of a digital asset is subject to evolving federal oversight by SEC and CFTC, with state AG licensing potentially outdated.
Mandatory Licensing: Any person carrying on a "digital asset business" in or from Antigua and Barbuda, which includes providing custody services, must obtain a license from the FSRC.
Definition of Custody Services: The Act defines "digital asset business" to include "digital asset custody services" (Section 2(1)(d)).
Antigua and Barbuda’s digital asset/custody regulatory regime is based on the Digital Assets Business Act 2020 (Act No. 16 of 2020) as amended by the Digital Assets Business (Amendment) Act 2020 (Act No. 29 of 2020) and its supporting regulations, rather than the unamended 2020 Act alone.
Scope: The DAB Act governs any person carrying on or purporting to carry on a digital assets business from within Antigua and Barbuda or to or from Antigua and Barbuda, requiring licenses for activities such as virtual asset exchange, transfer, custody, and participation in financial services related to initial coin offerings.
This is the specific law that defines 'virtual assets' and 'virtual asset service providers,' establishes a licensing regime, and outlines AML/CFT obligations for VASPs. It mandates that VASPs implement measures to combat money laundering and terrorist financing in accordance with the Money Laundering (Prevention) Act and the Prevention of Terrorism Act. Following the State Bank of Pakistan's April 2026 notification, licensed VASPs may now access banking services under strict regulation.
The Anti-Money Laundering and Countering the Financing of Terrorism Programs rule (2026) and FATF Guidance (2025) establish modern AML obligations including CDD, record-keeping, STR, and screening requirements for financial institutions and DNFBPs, which now explicitly extend to VASPs, superseding any 1996-era framework in AG.
The current operative law for terrorism prosecutions in Nigeria is the Terrorism (Prevention) Act, 2011 (as amended), likely by the 2022 amendment, not the 2005 Act.
Free Trade & Processing Zone Act, 1994 (as amended) is the primary legislation legalizing and governing online gaming/iGaming in Antigua and Barbuda, with oversight by the Financial Services Regulatory Commission (FSRC)
This is a cornerstone requirement, heavily influenced by FATF standards. Licensees must implement comprehensive Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) policies and procedures.
Customer Due Diligence (CDD): Robust KYC procedures for identifying and verifying clients (individuals and legal entities).
Ongoing Monitoring: Continuous monitoring of transactions and business relationships for suspicious activity.
Reporting: Reporting of suspicious transactions to the national Financial Intelligence Unit (FIU).
Sanctions Screening: Screening clients against national and international sanctions lists.
Record Keeping: Maintaining records for a specified period (typically 5 years).
Compliance with the Travel Rule for virtual asset transfers, now integrated under frameworks like MiCA, requires VASPs to obtain and transmit originator and beneficiary information, including standardized identifiers such as Legal Entity Identifiers (LEIs) where applicable, as part of evolving global regulatory infrastructure.
The 'fit and proper persons' standard is currently enforced by the Clean Energy Regulator for ANREU account holders and by FERC for licensee fitness, but it is not part of the EPA's Agricultural Worker Protection Standard.
All directors, senior management, significant shareholders, and beneficial owners must undergo rigorous "fit and proper" assessments by the FSRC. This involves background checks, demonstrating competence, integrity, and sound financial standing.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet software publisher does not trigger VASP licensing or AML obligations under Antigua and Barbuda's Digital Assets Business Act 2020 so long as it never holds, controls, or manages user private keys, but any ancillary custody-like feature or local operational presence could create licensing requirements.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?