Bahrain -- Travel Rule Implementation Regulatory Overview

Bahrain has been a proactive jurisdiction in regulating crypto-assets and implementing Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) measures, including principles aligned with the FATF Travel Rule.

The Central Bank of Bahrain (CBB) introduced a comprehensive regulatory framework for crypto-asset activities in 2019, making it one of the first in the MENA region to do so. This framework, outlined in the CBB Rulebook, Volume 6 – Capital Markets, specifically the Crypto-assets (CA) Module, incorporates the spirit and requirements of the FATF Recommendations, including the "Travel Rule" (FATF Recommendation 16).

Here's a breakdown:

1. Adoption

• Adopted: Yes, the principles of the FATF Travel Rule are adopted and integrated into Bahrain's regulatory framework for Crypto-Asset Service Providers (CASPs) licensed by the CBB. While not explicitly termed "Travel Rule" in every section, the requirements for originator and beneficiary information collection and transmission are mandated.
• Legislation/Guidance: The primary regulatory framework is the CBB Rulebook, Volume 6 – Capital Markets, Crypto-assets (CA) Module.
  • URL: CBB Rulebook Volume 6 (Capital Markets) (Navigate to the Crypto-assets (CA) Module within this volume).
  • The CBB also issues various circulars and guidance notes that complement the rulebook.

2. Effective Date

• The CBB's comprehensive regulatory framework for crypto-assets came into effect in 2019. This framework included stringent AML/CFT obligations for CASPs, encompassing requirements aligned with the Travel Rule principles.

3. Threshold Amounts

• The CBB's AML/CFT requirements generally align with international standards. For the FATF Travel Rule, the general threshold is typically USD/EUR 1,000 or equivalent for transactions involving at least one unhosted wallet, or in jurisdictions where such a threshold is applied.
• However, for VASP-to-VASP transfers, the expectation is usually that all required originator and beneficiary information is exchanged, regardless of the transaction amount. The CBB's framework emphasizes a risk-based approach, meaning that even smaller transactions could trigger information requirements if deemed high-risk.
• The CBB's CA Module requires CASPs to conduct Customer Due Diligence (CDD) and ongoing monitoring, which would necessitate collecting originator and beneficiary information for virtually all transactions processed by a licensed VASP.

4. Which VASPs Are Covered

• The CBB's framework covers all entities licensed as Crypto-Asset Service Providers (CASPs). The CA Module defines various regulated crypto-asset activities, including:
  • Operating a crypto-asset exchange
  • Dealing in crypto-assets as a principal
  • Dealing in crypto-assets as an agent
  • Managing a crypto-asset portfolio
  • Providing crypto-asset advisory services
  • Acting as a crypto-asset custodian
• Any entity performing these activities and licensed by the CBB is subject to the AML/CFT requirements, including those aligning with the Travel Rule.

5. Technical Implementation Requirements

The CBB's regulations do not typically mandate specific technical solutions (e.g., TRISA, OpenVASP, etc.) but rather set out the requirements that licensed CASPs must meet. This means CASPs are responsible for implementing robust systems and procedures to:

• Collect Information: Obtain and hold accurate and meaningful originator and beneficiary information for all crypto-asset transfers. This includes:
  • Originator Information: Name, physical address, national identity number (or customer identification number), and the crypto-asset wallet address or account identifier.
  • Beneficiary Information: Name, physical address, and the crypto-asset wallet address or account identifier.
• Transmit Information: Ensure that the collected information "travels" with the transaction to the beneficiary VASP, or is made available upon request. This implies secure and reliable methods for data transfer between CASPs.
• Verify Information: Implement measures to verify the identity of their customers (both originators and beneficiaries) in accordance with CDD requirements.
• Store Records: Maintain records of all transactions and the associated originator/beneficiary information for at least five years, as per CBB AML/CFT requirements.
• Monitor and Report: Implement robust transaction monitoring systems to identify suspicious transactions and report them to the Financial Intelligence Directorate (FID) of Bahrain.
• Risk-Based Approach: CASPs must have a comprehensive risk assessment framework to identify, assess, and mitigate AML/CFT risks, which informs the level of due diligence and information collection required.

6. Penalties for Non-Compliance

The CBB has strong enforcement powers under its establishing laws and the CBB Rulebook. Non-compliance with AML/CFT regulations, including Travel Rule requirements, can lead to significant penalties, which may include:

• Monetary Fines: Substantial financial penalties imposed on the CASP and/or its senior management.
• Administrative Sanctions: Public reprimands, warnings, and specific directives to rectify deficiencies.
• Restrictions on Operations: Imposing limitations on business activities or specific transactions.
• Suspension or Revocation of License: For serious or repeated breaches, the CBB can suspend or revoke a CASP's operating license, effectively forcing them to cease operations.
• Individual Accountability: Senior management and board members can be held personally accountable and face individual sanctions, including disqualification from holding similar positions.
• Referral for Criminal Prosecution: In cases of severe AML/CFT breaches or suspected criminal activity, the CBB can refer cases to the Public Prosecution for criminal investigation and prosecution under Bahrain's AML/CFT laws (e.g., Law No. (4) of 2001 with respect to the prevention and combating of money laundering and terrorism financing, as amended).

Bahrain's proactive regulatory stance and comprehensive framework underscore its commitment to combating financial crime in the crypto-asset space, ensuring its CASPs adhere to international standards like the FATF Travel Rule.