← Regulations / Bhutan / Operating Models / Remote VASP

Remote VASP serving residents in Bhutan

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Conditional AI-Generated · Unreviewed

Remote VASP is conditionally permitted in Bhutan with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • All entities providing virtual asset services (including custody) must comply with the AML/CFT Act of Bhutan 2018, which requires customer due diligence (CDD) — collecting and verifying customer name, date of birth, nationality, unique identification number (e.g. citizenship ID), residential address.
  • Beneficial ownership identification and verification required for legal persons.
  • Ongoing due diligence and transaction monitoring to ensure consistency with customer risk profile and source of funds.
  • Risk-based approach: Simplified CDD for lower-risk, Standard CDD for typical, Enhanced CDD (EDD) for higher-risk situations (PEPs, high-risk jurisdictions, complex transactions).
  • Obligation to report any transaction where there are reasonable grounds to suspect money laundering, terrorist financing, or other criminal activity — no minimum threshold.
  • STRs submitted to the FIU (housed within the RMA) in prescribed format; no tipping-off prohibition applies.
  • Record-keeping: customer identification data, transaction data, and business correspondence must be kept for a minimum of 5 years after relationship ends or transaction date.
  • FATF Travel Rule (Recommendation 16) — though not explicitly codified for VASPs in Bhutanese law, RMA would likely expect compliance as part of AML/CFT framework.
  • AML/CFT Guidelines for Financial Institutions (2018) apply to any entity found to be performing financial services.

Key Restrictions

  • No legal framework exists to permit or regulate private crypto trading, exchanges, or VASPs for the general public — the RMA has adopted a cautious and prohibitive stance.
  • RMA directives effectively prohibit licensed financial institutions from processing transactions related to virtual assets, meaning individuals cannot access crypto services through the formal financial system.
  • As of current public information, Bhutan does not have a distinct licensing framework for private VASPs; however, a Digital Asset Trading and Custody Services License regime exists (e.g., in-principle approval granted to BTSE Bhutan in May 2026).
  • The Gelephu Mindfulness City (GMC) has introduced a fast-track licensing pathway for crypto firms — but this is a geographically restricted, special-zone regime.
  • Cross-border service from a foreign entity without a local presence and license constitutes operating outside the formal financial system and carries enforcement risk.
  • State-owned crypto activity (via Druk Holdings & Investments) is explicitly permitted and separate; this does not open a pathway for private or foreign operators.

Key Risks

  • RMA public warnings explicitly discourage cryptocurrency use and warn of fraud/volatility — unlicensed remote operators face potential enforcement action if detected serving Bhutanese residents.
  • No licensed or regulated crypto exchanges operate for the public in Bhutan; any foreign operator serving residents would be operating outside the formal financial system.
  • Regulatory landscape is evolving (Financial Services Amendment Bill 2025 in Third Reading, April 2025 RMA communication) — rules may change rapidly, creating uncertainty for operators.
  • Government has stated it 'does not recall selling' bitcoin notwithstanding on-chain evidence of regular BTC transfers, indicating potential recordkeeping or transparency gaps that could complicate compliance.
  • Operating as a remote VASP without a local entity or license carries high enforcement and reputational risk given RMA's prohibitive public stance.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

For the Public and Licensed Financial Institutions: The Royal Monetary Authority of Bhutan (RMA) has adopted a cautious and prohibitive stance. There is no legal framework to permit or regulate private crypto trading, exchanges, or virtual asset service providers (VASPs) for the general public. Licensed financial institutions (banks, non-bank financial institutions) are generally prohibited from dealing with virtual assets, processing transactions related to them, or providing services to crypto businesses. This effectively acts as a de facto ban on public participation in the unregulated crypto market.

licensing 85% confidence

For State-Owned Entities: In contrast, Bhutan has strategically engaged with cryptocurrency through Druk Holdings & Investments (DHI), the sovereign wealth fund. DHI has been involved in Bitcoin mining and holds significant crypto assets, indicating a state-controlled, strategic adoption rather than an open market approach.

licensing 95% confidence

Royal Monetary Authority of Bhutan (RMA):

licensing 85% confidence

RMA Circulars and Public Notices: The RMA has issued warnings and advisories to the public and financial institutions concerning the risks of cryptocurrencies, highlighting their unregulated nature, volatility, and potential for fraud and money laundering. These directives effectively prohibit licensed financial institutions from facilitating crypto-related transactions. Specific circular numbers and dates are often for internal circulation or specific institutions, but the general public advisories are consistent.

licensing 85% confidence

Crypto Trading: For the general public in Bhutan, crypto trading is heavily restricted and effectively prohibited through the formal financial system. The RMA's stance discourages and prevents licensed financial institutions from processing transactions related to virtual assets. This means individuals cannot easily buy or sell cryptocurrencies via traditional banking channels within Bhutan.

licensing 80% confidence

Crypto Exchanges: There are no licensed or regulated cryptocurrency exchanges operating for the public within Bhutan. The regulatory environment does not support their establishment or operation for public access. Any involvement would be considered operating outside the formal financial system and could carry significant risks for participants.

aml 60% confidence

Anti-Money Laundering and Countering Financing of Terrorism Act of Bhutan (AMLCFT Act) 2018: This is the cornerstone legislation for AML/CFT in Bhutan. While it may not explicitly name "cryptocurrency" or "virtual assets" in all its provisions, its broad definitions and regulatory scope are intended to cover evolving financial instruments and services that fall under the FATF's purview.

aml 60% confidence

AML/CFT Guidelines for Financial Institutions (2018): Issued by the RMA, these guidelines provide detailed instructions and requirements for financial institutions to implement the provisions of the AML/CFT Act. While not specifically named for VASPs, these guidelines generally apply to any entity falling under the scope of "financial institutions" or "reporting entities" for AML/CFT purposes.

aml 90% confidence

Identification and Verification:

aml 90% confidence

Individuals: Collecting and verifying the customer's name, date of birth, nationality, unique identification number (e.g., citizenship ID), residential address. This typically involves using reliable, independent source documents, data, or information.

aml 90% confidence

Legal Persons/Entities (e.g., companies): Collecting and verifying the legal name, legal form, proof of existence, powers governing the entity, address of registered office, and names of directors and senior management.

aml 90% confidence

Beneficial Ownership: Identifying and verifying the natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

aml 90% confidence

Ongoing Due Diligence: Conducting ongoing monitoring of the business relationship and transactions to ensure they are consistent with the entity's knowledge of the customer, their business, and risk profile, including the source of funds.

aml 90% confidence

Risk-Based Approach: Applying CDD measures based on the risk associated with the customer, product, service, or jurisdiction. This means:

aml 90% confidence

Simplified CDD: For lower-risk situations.

aml 90% confidence

Standard CDD: For typical relationships.

aml 90% confidence

Enhanced CDD (EDD): For higher-risk situations, such as customers from high-risk jurisdictions, Politically Exposed Persons (PEPs), or complex transactions. EDD would involve obtaining additional information, increasing transaction monitoring, and obtaining senior management approval.

aml 95% confidence

Obligation to Report: Any transaction (regardless of amount) where there are reasonable grounds to suspect that it may be linked to money laundering, terrorist financing, or other criminal activity must be reported.

aml 60% confidence

No Tipping-Off: Reporting entities and their employees are prohibited from disclosing to the customer or any third party that an STR has been or will be filed.

aml 90% confidence

Reporting Mechanism: Reports are submitted to the FIU (which is housed within the RMA) in a prescribed format.

aml 70% confidence

Customer Identification Data: Records of all customer identification and verification documents (e.g., copies of ID, beneficial ownership information).

aml 90% confidence

On-chain data shows Bhutan's government has conducted regular Bitcoin transactions (e.g., 90 BTC transfers) with total outflows exceeding $237 million in 2026, but the government has stated it does not recall selling any bitcoin, indicating a lack of comprehensive, reconstructable transaction records.

aml 80% confidence

Correspondence: Records of business correspondence relating to customers.

aml 80% confidence

Duration: Records must generally be kept for a minimum of five (5) years after the business relationship has ended or after the date of the transaction.

aml 90% confidence

Licensing: As of current public information, Bhutan does not have a distinct licensing framework specifically for VASPs. However, depending on the nature of their activities (e.g., if they provide services similar to traditional financial institutions), they may be required to obtain a license under the Financial Institutions Act or operate under specific regulatory guidance from the RMA.

aml 70% confidence

FATF "Travel Rule": The FATF's Interpretive Note 15 (Recommendation 16) requires VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers. While not explicitly codified in Bhutanese law for VASPs, the RMA would likely expect VASPs to comply with this as part of their broader AML/CFT obligations, consistent with international standards.

Evidence fact bt.custody.entities-that-only-provide not found (may have been renamed).

custody 100% confidence

Pending Custody Legislation:

Evidence fact bt.custody.royal-monetary-authority-of-bhutan-further not found (may have been renamed).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a remote VASP cannot serve Bhutanese residents from abroad without a local presence and a Digital Asset Trading and Custody Services License; the RMA has no public-VASP framework, prohibits licensed financial institutions from processing crypto transactions, and considers unlicensed cross-border service to be operating outside the formal financial system, carrying significant enforcement risk.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?