← Regulations / Bhutan / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Bhutan

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Conditional AI-Generated · Unreviewed

Self-custodial wallet is conditionally permitted in Bhutan with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • No AML obligations attach to a pure self-custodial software publisher in Bhutan because the publisher never holds, controls, or accesses user funds — the facts indicate AML/CFT obligations under the AMLCFT Act 2018 apply to 'financial institutions' and entities designated by the FIU or RMA
  • If the publisher were deemed a financial institution or VASP by the RMA, standard CDD obligations would apply (customer name, ID, beneficial ownership, purpose of relationship), ongoing monitoring, and STR filing to the FIU regardless of transaction amount
  • Record-keeping obligations under the AMLCFT Act 2018 would require retention of any customer identification and transaction data for a minimum of 5 years
  • The FATF Travel Rule (Recommendation 16) has not been explicitly codified for VASPs in Bhutanese law, though the RMA would likely expect compliance as part of a risk-based approach

Key Restrictions

  • Software publishing of a non-custodial wallet does not trigger VASP/MSB classification under current Bhutanese law because the publisher never holds, controls, or has access to user funds — no licensing framework for self-custodial software exists
  • However, the overall regulatory environment is prohibitive for crypto-related activities involving the general public; the RMA has effectively prohibited licensed financial institutions from processing transactions related to virtual assets
  • Any service that goes beyond pure software distribution (e.g., integrated fiat on-ramps, swap APIs, or revenue-sharing) could be re-characterized as a regulated activity requiring a Digital Asset Trading and Custody Services License under the Gelephu Mindfulness City framework
  • The Gelephu Mindfulness City fast-track licensing pathway exists but is designed for custodial/trading services, not pure software publishers

Key Risks

  • Regulatory ambiguity: Bhutan has no published guidance distinguishing self-custodial software from VASP activities — a future RMA circular could classify wallet publishers as regulated entities
  • Enforcement risk: The RMA's general prohibitive stance on crypto for the public means any association with crypto (even non-custodial software) may attract scrutiny if the software enables Bhutanese residents to trade
  • Tax/PR exposure: State-owned Druk Holdings is active in Bitcoin mining, creating a potential conflict where private-sector crypto software could be discouraged in favor of state-controlled crypto activities
  • The April 30, 2025 RMA communication signals a move toward structured regulation — wallet publishers must monitor for new digital asset frameworks that could capture software tools under licensing requirements

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

For the Public and Licensed Financial Institutions: The Royal Monetary Authority of Bhutan (RMA) has adopted a cautious and prohibitive stance. There is no legal framework to permit or regulate private crypto trading, exchanges, or virtual asset service providers (VASPs) for the general public. Licensed financial institutions (banks, non-bank financial institutions) are generally prohibited from dealing with virtual assets, processing transactions related to them, or providing services to crypto businesses. This effectively acts as a de facto ban on public participation in the unregulated crypto market.

licensing 85% confidence

RMA Circulars and Public Notices: The RMA has issued warnings and advisories to the public and financial institutions concerning the risks of cryptocurrencies, highlighting their unregulated nature, volatility, and potential for fraud and money laundering. These directives effectively prohibit licensed financial institutions from facilitating crypto-related transactions. Specific circular numbers and dates are often for internal circulation or specific institutions, but the general public advisories are consistent.

licensing 85% confidence

Crypto Trading: For the general public in Bhutan, crypto trading is heavily restricted and effectively prohibited through the formal financial system. The RMA's stance discourages and prevents licensed financial institutions from processing transactions related to virtual assets. This means individuals cannot easily buy or sell cryptocurrencies via traditional banking channels within Bhutan.

licensing 80% confidence

Crypto Exchanges: There are no licensed or regulated cryptocurrency exchanges operating for the public within Bhutan. The regulatory environment does not support their establishment or operation for public access. Any involvement would be considered operating outside the formal financial system and could carry significant risks for participants.

aml 60% confidence

Anti-Money Laundering and Countering Financing of Terrorism Act of Bhutan (AMLCFT Act) 2018: This is the cornerstone legislation for AML/CFT in Bhutan. While it may not explicitly name "cryptocurrency" or "virtual assets" in all its provisions, its broad definitions and regulatory scope are intended to cover evolving financial instruments and services that fall under the FATF's purview.

aml 60% confidence

AML/CFT Guidelines for Financial Institutions (2018): Issued by the RMA, these guidelines provide detailed instructions and requirements for financial institutions to implement the provisions of the AML/CFT Act. While not specifically named for VASPs, these guidelines generally apply to any entity falling under the scope of "financial institutions" or "reporting entities" for AML/CFT purposes.

aml 90% confidence

Identification and Verification:

aml 90% confidence

Ongoing Due Diligence: Conducting ongoing monitoring of the business relationship and transactions to ensure they are consistent with the entity's knowledge of the customer, their business, and risk profile, including the source of funds.

aml 95% confidence

Obligation to Report: Any transaction (regardless of amount) where there are reasonable grounds to suspect that it may be linked to money laundering, terrorist financing, or other criminal activity must be reported.

Evidence fact bt.aml.record-keeping-requirements-entities-must-maintain not found (may have been renamed).

aml 80% confidence

Duration: Records must generally be kept for a minimum of five (5) years after the business relationship has ended or after the date of the transaction.

aml 70% confidence

FATF "Travel Rule": The FATF's Interpretive Note 15 (Recommendation 16) requires VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers. While not explicitly codified in Bhutanese law for VASPs, the RMA would likely expect VASPs to comply with this as part of their broader AML/CFT obligations, consistent with international standards.

aml 90% confidence

Licensing: As of current public information, Bhutan does not have a distinct licensing framework specifically for VASPs. However, depending on the nature of their activities (e.g., if they provide services similar to traditional financial institutions), they may be required to obtain a license under the Financial Institutions Act or operate under specific regulatory guidance from the RMA.

custody 75% confidence

Entities providing virtual asset services in Bhutan, including custody, are subject to a specific Digital Asset Trading and Custody Services License regime, not merely AML/CFT registration. This licensing framework inherently includes AML/CFT obligations such as customer due diligence, transaction monitoring, and suspicious transaction reporting, but the primary regulatory obligation is the specialized license, not just AML/CFT requirements alone.

custody 90% confidence

No specific "digital asset custody license" currently exists.

Evidence fact bt.custody.royal-monetary-authority-of-bhutan-rma-the not found (may have been renamed).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — publishing non-custodial wallet software in Bhutan does not currently trigger VASP licensing or AML obligations because the publisher never holds user funds, but the RMA's general prohibition on crypto for the public creates significant ambiguity, and any ancillary services (e.g., fiat ramps, swap APIs) could reclassify the operator under the new Digital Asset Trading and Custody Services framework.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?