Centralized exchange in Azerbaijan

A General Lack of Specific Legislation: There is no specific law or regulatory framework explicitly governing the licensing of crypto exchanges, custody providers, or dedicated crypto payment processors.

Restrictive Interpretation / Regulatory Silence: The prevailing approach by the Central Bank of Azerbaijan (CBA) and other financial authorities leans towards caution and, in many cases, a de facto prohibition or severe restriction on activities involving virtual assets, especially when they touch upon traditional financial services. Cryptocurrencies are not recognized as legal tender.

Application of General Financial Laws (Where Applicable): Certain activities might inadvertently fall under existing financial services laws (e.g., banking, payment services, securities), which are highly regulated and typically not easily granted for crypto-related businesses.

No Dedicated Licensing Regime: There is no "virtual asset license" you can apply for specifically to operate a crypto exchange, custody service, or crypto payment processing.

Regulatory Gap / De Facto Prohibition: The absence of a framework often means such activities are either not allowed, operate in a legal grey area with significant risk, or would require a full traditional financial license (e.g., a banking license or a payments institution license), which is extremely difficult to obtain and often not suitable for pure crypto businesses.

Cryptocurrency Exchanges: There is no specific license for a cryptocurrency exchange. Any entity attempting to operate an exchange facilitating fiat-to-crypto or crypto-to-fiat transactions would likely face significant regulatory hurdles and could be deemed to be operating an unlicensed financial service, potentially requiring a banking license or being considered illegal. Crypto-to-crypto exchanges might exist in a grey area, but still face AML/CTF obligations.

Custody Providers: There is no specific license for virtual asset custody. If a service involves holding client assets, especially if they are deemed to have monetary value, it could potentially fall under regulations for safekeeping, trust services, or even banking, requiring appropriate traditional licenses.

Processing payments in cryptocurrency: This is generally not permitted as cryptocurrencies are not legal tender in Azerbaijan.

Processing fiat payments for cryptocurrency services: An entity processing fiat payments on behalf of clients or other businesses for crypto-related transactions would typically require a traditional payment services license under the "Law on Payment Services and Payment Systems." However, the underlying crypto activity itself might still be problematic or prohibited.

Capital Requirements: For traditional financial institutions (banks, payment institutions), capital requirements are significant. For example, a bank would require a very high minimum capital. For a payment institution, it's lower but still substantial.

Local Presence: Any regulated financial institution in Azerbaijan is required to have a physical local presence and often local management.

Management & Governance: Fit and proper tests for directors and senior management, robust internal controls, and risk management frameworks are standard for financial institutions.

The AML/CTF framework defines the scope of reporting entities and their obligations, but amendments intended to align more fully with international standards—particularly in relation to new technologies and virtual assets—have been enacted but are not scheduled to commence until 31 March 2026, so those specific changes are not yet in force.

Financial Monitoring Service of the Republic of Azerbaijan (FMS)

Identification and Verification:

Individuals: Obtaining and verifying the customer's full legal name, date of birth, address, and unique identification number (e.g., passport number, national ID card number). Verification typically involves reliable, independent source documents or data.

Legal Entities: Obtaining and verifying the legal name, registration number, address, articles of incorporation, and identifying the natural persons who are the beneficial owners (typically those owning 25% or more of the entity's shares or voting rights, or exercising control through other means).

Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual transaction patterns.

Enhanced Due Diligence (EDD): Required for higher-risk scenarios, such as:

Evidence fact az.aml.suspicious-transaction-reporting-str-reporting not found (may have been renamed).

Evidence fact az.aml.record-keeping-maintaining-records-of not found (may have been renamed).

For transfers between VASPs: The requirement to obtain and transmit required originator and beneficiary information applies to virtual asset transfers equal to or exceeding USD/EUR 1,000 (or its equivalent in other currencies/virtual assets).

For transfers below the FATF threshold, VASPs must collect, verify, and store originator and beneficiary information, but transmission to counterparty VASPs is not required unless there are suspicions of ML/TF or jurisdiction-specific rules (e.g., EU zero threshold) apply.

Collect: Obtain the required originator and beneficiary information (name, account number/wallet address, physical address/ID number/date of birth, etc.).

Under current FATF Travel Rule–aligned practice, the originating institution must collect and verify accurate originator information and transmit it with the transfer, while the beneficiary institution must obtain and hold the originator data but is not generally required to re‑verify its accuracy; there is no evidence of a separate, general Arizona‑specific obligation that all collected information must be verified for accuracy across all regulated entities.

Transmit: Forward the required information to the beneficiary VASP during a virtual asset transfer above the threshold.

Store: Maintain records of this information for a minimum of five years.

Screen: Perform sanctions and AML/CFT screening on the parties involved.

The FMS of Azerbaijan has not explicitly mandated a specific technical solution (like TRISA, TRAVEL, Sygna, etc.) for Travel Rule compliance.

Nature of Violations: The most common "violations" related to crypto in Azerbaijan that lead to law enforcement action are criminal in nature (fraud, pyramid schemes) rather than breaches of specific crypto-regulatory compliance.

Regulatory Maturity: Azerbaijan's specific regulatory framework for cryptocurrencies is still evolving. There isn't a dedicated crypto regulator actively issuing fines against licensed entities because the licensing regime is still nascent.

Entity Targeted: Individuals or groups operating alleged fraudulent schemes (e.g., Ponzi schemes, pyramid schemes) using cryptocurrencies as an investment vehicle or payment method. Violation Type: Fraud, swindling, operating illegal financial schemes, potentially money laundering. Penalty Amount: This is not a "fine." Instead, it involves arrests, criminal investigations, pre-trial detention, potential prosecution leading to imprisonment, and asset forfeiture. Specific "penalty amounts" as regulatory fines are not applicable here.