Custodial wallet / SaaS in Bangladesh
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is not permitted in Bangladesh.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Custodial wallet / SaaS providers would be subject to the Money Laundering Prevention Act, 2012 (MLPA) if they operated; however, the activity is prohibited so no lawful AML pathway exists.
- Bangladesh Bank has issued repeated warnings that cryptocurrency transactions carry high risks of money laundering and terrorist financing, and financial institutions are instructed to block all crypto-related transactions.
- The Foreign Exchange Regulation Act, 1947 governs cross-border transactions — any custodial service involving crypto would violate these forex controls.
- Convictions under MLPA Section 4 carry imprisonment of 4–12 years, fines, and asset forfeiture.
- Bangladesh remains on the FATF grey list due to strategic AML/CFT deficiencies, and has committed to implementing FATF VASP recommendations — but no VASP regime exists yet.
Key Restrictions
- Custody services for virtual assets are explicitly not permitted under Bangladesh Bank circulars and regulations.
- No registration or licensing regime exists for virtual assets in Bangladesh — there is no lawful path to operate.
- Bangladesh Bank has warned all banks and financial institutions against dealing in, facilitating, or promoting cryptocurrencies.
- FE Circular No. 15 of 2017 and Circular No. 34 of 2021 expressly prohibit virtual asset transactions and exchanges.
- Cryptocurrencies are not legal tender in Bangladesh and cannot be used for transactions or exchange within the country.
Key Risks
- Criminal enforcement risk: Operating a custodial crypto service would be treated as a criminal offense under the MLPA and Foreign Exchange Regulation Act, carrying 4–12 years imprisonment and asset forfeiture.
- Law enforcement agencies (CID, RAB) have actively arrested individuals for crypto-related activities, including for operating platforms and facilitating transfers.
- No regulatory pathway exists — any custodial wallet / SaaS operation would be per se illegal with no grandfathering or registration option.
- Banking and payment rails are blocked — financial institutions are instructed to block crypto transactions, making on/off-ramps impossible.
- Reputational and PR risk: Bangladesh Bank publicly labels crypto activities as high-risk for fraud and money laundering, and public enforcement actions are widely reported.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Custody Providers: Providing custody services for virtual assets is not permitted.
Neither a registration nor a licensing regime exists for virtual assets in Bangladesh.
The current approach is one of outright prohibition and warning against engaging in any activities related to cryptocurrencies.
Cryptocurrency Exchanges: Operating an exchange for buying, selling, or trading cryptocurrencies is prohibited.
FE Circular No. 15 of 2017 (December 24, 2017): This was one of the earliest and most direct prohibitions. The BB warned against dealing in virtual currencies like Bitcoin, stating they are not legal tender, are not approved by the BB, and carrying out transactions with them could lead to violations of FERA and MLPA.
Circular No. 34 (of 2021) on Foreign Exchange Transactions (October 14, 2021): This circular reiterated the ban, explicitly stating that "virtual assets" (including cryptocurrencies like Bitcoin, Ethereum, Ripple, Litecoin) are not legal tender and are not permitted for transaction or exchange within Bangladesh. It also warned about associated risks and legal consequences.
Money Laundering Prevention Act, 2012 (MLPA): The BB has highlighted the significant risks of money laundering and terrorist financing associated with the anonymity and unregulated nature of cryptocurrencies. While not specifically mentioning "virtual assets," engaging in transactions that facilitate money laundering through any means would fall under this act.
In Bangladesh, cross‑border foreign exchange transactions are governed by the Foreign Exchange Regulation Act, 1947 (as amended), which remains in force and is administered by Bangladesh Bank. Bangladesh Bank has stated via circulars that cryptocurrencies/virtual currencies are not legal tender in Bangladesh and has warned against their use, but there is no explicit, publicly available provision in the Act itself or authoritative judicial ruling that categorically deems every cryptocurrency transaction—especially solely by virtue of being a “currency”—to be a violation of the Foreign Exchange Regulation Act, 1947. Rather, potential violations would arise where such transactions fall within regulated foreign exchange or cross‑border payment activities without required Bangladesh Bank permission.
Warnings to Financial Institutions: Bangladesh Bank has repeatedly issued warnings to all banks and financial institutions against dealing in, facilitating, or promoting cryptocurrencies. These warnings serve as an instruction to financial institutions to block transactions related to crypto.
Bangladesh has committed to implementing robust AML/KYC procedures in line with FATF recommendations for VASPs, but remains on the FATF grey list due to ongoing strategic AML/CFT deficiencies.
Under Bangladesh’s Money Laundering Prevention Act (MLPA), Section 4, individuals convicted of money laundering are subject to a statutory imprisonment range of 4 to 12 years, with the precise term within that range determined by the court based on the nature, severity, and value of the offense.
General warnings and circulars issued by the Bangladesh Bank (BB) reiterating the illegality and risks.
Criminal investigations into cryptocurrency-related fraud and illegal remittance schemes are active in Bangladesh, but there is insufficient recent evidence to confirm significant arrests of individuals involved.
Entity Targeted: General public, financial institutions, and implicitly, anyone involved in cryptocurrency. Violation Type: Engaging in cryptocurrency transactions, which is considered illegal under existing foreign exchange regulations (Foreign Exchange Regulation Act, 1947) and anti-money laundering laws (Money Laundering Prevention Act, 2012). BB states crypto carries high risks of money laundering, terror financing, and capital flight. Penalty Amount: N/A (for a warning), but the underlying laws carry severe penalties (fines, imprisonment, asset forfeiture) for non-compliance. Outcome: Public awareness campaigns, continued illegal status of crypto, discouragement of financial institutions from dealing with crypto. This forms the basis for criminal prosecutions.
Entity Targeted: Websites, apps, and platforms (including potentially crypto exchanges) deemed illegal or operating against national interests. Violation Type: Operating without license, facilitating illegal financial activities (which crypto trading falls under), or other violations of telecommunication laws. Penalty Amount: N/A (penalty is the blocking of access). Outcome: Restricted access to various online platforms, making it harder for Bangladeshi citizens to access crypto services directly.
There is no application process for virtual asset licenses in Bangladesh because such licenses are not issued.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — Bangladesh has an outright prohibition on virtual asset custody services (and all crypto activities), with no licensing or registration regime available, and enforcement includes criminal penalties (4–12 years imprisonment under MLPA, asset forfeiture) and active arrests by law enforcement agencies.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?