DeFi protocol frontend in Brunei
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is not permitted in Brunei.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD)/KYC procedures required if falling under AMBD's view of VASPs as regulated entities (bn.aml.ambd-amlcft-guidelines-for-financial, bn.aml.ambds-statementcirculars-on-virtual-assets)
- Identification and verification of natural persons (name, address, date of birth, nationality, unique ID) using reliable independent source documents (bn.aml.identification-and-verification-idv-of, bn.aml.collecting-and-verifying-the-identity)
- Identification and verification of legal entity customers and beneficial owners (bn.aml.beneficial-ownership-identifying-and-taking, bn.aml.collecting-and-verifying-the-identity)
- Risk-based approach: Simplified CDD for low-risk customers, Enhanced CDD for higher-risk (PEPs, complex transactions, high-risk jurisdictions) (bn.aml.risk-based-approach-applying-a-risk-based, bn.aml.simplified-cdd-scdd-permissible-for, bn.aml.enhanced-cdd-edd-required-for)
- Ongoing transaction monitoring to ensure consistency with customer risk profile (bn.aml.ongoing-monitoring-regularly-monitoring-transactions)
- Suspicious Transaction Reporting (STR) to the Brunei Financial Intelligence Unit (FIU) for any transactions suspected of ML/TF (bn.aml.obligation-to-report-vasps-are, bn.aml.reporting-body-reports-must-be)
- No tipping-off prohibition (bn.aml.no-tipping-off-vasps-and-their)
- Record-keeping: customer identification records, transaction records, business correspondence retained for at least 5 years (bn.aml.customer-identification-records-copies-of, bn.aml.transaction-records-details-of-all, bn.aml.duration-records-must-be-retained)
- Appoint a qualified Money Laundering Reporting Officer (MLRO) and implement internal AML/CFT policies, controls, and training (bn.aml.implement-robust-internal-amlcft-policies, bn.aml.appoint-a-qualified-money-laundering, bn.aml.provide-ongoing-amlcft-training-to)
- Independent audits of AML/CFT programs required (bn.aml.conduct-independent-audits-of-their)
Key Restrictions
- Cryptocurrency is illegal in Brunei as of 2025 — any exchange facilitating fiat-to-crypto or crypto-to-fiat is conducting an unauthorized, illegal activity (bn.licensing.exchanges-fiat-to-cryptocrypto-to-fiat-if-an-exchange)
- No specific VASP licensing regime exists; the regulatory vacuum means any VA activity carries significant legal uncertainty (bn.licensing.no-specific-va-licensing-regime)
- AMBD has consistently warned that virtual currencies have no regulatory protection and are speculative/high-risk (bn.licensing.ambd-warnings-ambd-has-consistently)
- VAs are not legal tender in Brunei (bn.licensing.vas-not-legal-tender-cryptocurrencies)
- Local physical presence, management, and board members are generally required for licensed financial entities (bn.licensing.local-presence-yes-generally-a)
- Money-changing and remittance licensing from BDCB required if fiat currency is involved in any part of the value chain (bn.licensing.money-changing-and-remittance-businesses-under)
Key Risks
- Criminal enforcement risk: since cryptocurrency is effectively illegal, operating a DeFi frontend serving Brunei residents could be treated as an unauthorized financial activity with potential criminal sanctions
- Regulatory ambiguity: no specific VASP regime means AMBD/BDCB could at any time classify any DeFi frontend activities as regulated financial services under existing AML law
- Conservative regulator stance: Brunei's regulators are conservative and operating without guidance carries significant legal and reputational risk (bn.licensing.conservative-approach-bruneis-regulators-are)
- Public warnings from AMBD against virtual currencies create a hostile enforcement environment regardless of whether the operator takes fees or screens users
- Fee-taking would increase risk of classification as a regulated financial service (money-changing, payment processing, or securities dealing)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific VA Licensing Regime: There is no dedicated law or regulation in Brunei that specifically defines, regulates, or licenses virtual asset service providers (VASPs) for activities like operating crypto exchanges, providing crypto custody, or processing crypto payments.
AMBD Warnings: AMBD has consistently warned the public about the risks associated with investing in virtual currencies and participating in Initial Coin Offerings (ICOs), highlighting their speculative nature, volatility, lack of underlying value, and the absence of regulatory protection.
VAs Not Legal Tender: Cryptocurrencies are not recognized as legal tender in Brunei.
In Brunei, cryptocurrency is illegal as of 2025, so any exchange facilitating fiat-to-crypto or crypto-to-fiat transactions is conducting an unauthorized, illegal activity rather than a licensed or permissible regulated activity.
Money-changing and remittance activities involving the exchange or transfer of fiat funds in Brunei must be licensed by the Brunei Darussalam Central Bank (BDCB) under the current regulatory framework; BDCB is the successor to the Autoriti Monetari Brunei Darussalam (AMBD), and licensing is no longer issued under the 2011 Order in AMBD’s name.
Local Presence: Yes, generally, a local physical presence and local management/board members are required for licensed financial institutions in Brunei.
Conservative Approach: Brunei's regulators are generally conservative. Operating in an unregulated space with high risk, without specific guidance from AMBD, carries significant legal and reputational risks.
AMBD AML/CFT Guidelines for Financial Institutions: While often general, AMBD has clarified that these guidelines, issued under the AMLO 2011, apply to VASPs. These guidelines provide detailed instructions on implementing the requirements of the AMLO 2011.
AMBD's Statement/Circulars on Virtual Assets: AMBD has issued public statements (e.g., "Statement on Virtual Assets") clarifying that virtual asset activities and VASPs fall within the scope of regulated financial activities for AML/CFT purposes. These statements emphasize compliance with the AMLO 2011 and FATF Recommendations, specifically Recommendation 15 concerning virtual assets.
Anti-Money Laundering and Counter-Terrorism Financing Order, 2011 (AMLO 2011): This is the foundational law that establishes the AML/CFT framework in Brunei. It defines reporting institutions, sets out obligations, and empowers AMBD as the supervisory authority.
Obligation to Report: VASPs are obligated to report any transaction (or attempted transaction) that they know, suspect, or have reasonable grounds to suspect is related to money laundering or terrorist financing.
Reporting Body: Reports must be submitted to the Brunei Financial Intelligence Unit (FIU), which operates within AMBD.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR has been, or will be, made.
Duration: Records must be retained for at least five (5) years after the business relationship ends or after the date of the transaction. This ensures that records are available for audit, investigation, and analysis by competent authorities.
Implement robust internal AML/CFT policies, procedures, and controls.
Appoint a qualified Money Laundering Reporting Officer (MLRO).
There are no specific licenses for standalone cryptocurrency or digital asset custodians in Brunei.
If activities involving digital assets were deemed to fall under the definition of "financial services" or "money or value transfer services" (MVTS) as per the FATF recommendations, then entities providing such services would be expected to comply with AML/CFT obligations, including customer due diligence (CDD), record-keeping, and suspicious transaction reporting (STR).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
No — operating a DeFi protocol frontend for Brunei residents is effectively illegal, as cryptocurrency is not recognized and any fiat-to-crypto or crypto-to-fiat activity is unauthorized; even without fee-taking, the conservative regulatory environment and AMBD public warnings create a high-risk operating context, and any entity engaging in such activities would face AML obligations under existing law without a clear licensing path.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?