← Regulations / Cuba / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Cuba

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Cuba with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Covered entities must implement a Risk-Based Approach (RBA) under Ley 143/2021 and Resolution 215/2021.
  • Customer Due Diligence (CDD) required: obtain and verify full legal name, date of birth, address, nationality, national identity number, and occupation for individuals.
  • For legal entities: obtain legal name, legal form, registered address, directors/senior management, beneficial owners, and proof of existence (articles of incorporation, business registration).
  • Understand the purpose and intended nature of the business relationship or transaction.
  • Ongoing monitoring of business relationships and transactions for consistency with customer and risk profile, including source of funds.
  • Enhanced Due Diligence (EDD) required for higher-risk categories.
  • Simplified Due Diligence (SDD) permitted only in low-risk situations.
  • Suspicious transaction reporting obligations under Ley 143/2021 (AML/CFT law).
  • Supervised by Banco Central de Cuba (BCC).

Key Restrictions

  • Only virtual assets issued by central banks or monetary authorities, or explicitly approved by the BCC, are authorized for use.
  • Any legal person operating with virtual assets must obtain prior authorization from the Banco Central de Cuba.
  • Only state-owned and mixed-enterprise firms (10 entities have been licensed so far) — private foreign firms are effectively excluded from licensing.
  • No explicit segregation rules for client virtual assets from custodian's own assets; general banking principles apply only to authorized financial institutions.
  • No explicit crypto-specific insurance, bonding, or cold-storage requirements exist.
  • The concept of 'qualified custodian' as understood in Western jurisdictions is not defined in Cuban law.

Key Risks

  • Private foreign firms face near-certain rejection: licensing has been limited to 10 state-owned and mixed-enterprise firms, with no indication of private sector access.
  • Regulatory ambiguity — no specific custody license, no segregation/insurance/cold-storage rules, leaving significant compliance uncertainty.
  • Lack of transparency in Cuban enforcement and state-controlled economy means independent crypto operations risk shutdown or absorption without public process.
  • BCC holds expanded enforcement powers including unilateral authority to freeze accounts without notice and suspend payment transactions.
  • US sanctions exposure — operating in Cuba under US sanctions regimes (OFAC) creates secondary sanctions risk for any international operator.
  • No explicit framework for determining liability between SaaS custodian and white-label client for AML obligations.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 90% confidence

Resolution 215/2021 of the Banco Central de Cuba (BCC), published in Official Gazette No. 73 Ordinary of 2021.

custody 90% confidence

Resolution 216/2021 of the Banco Central de Cuba (BCC), also published in Official Gazette No. 73 Ordinary of 2021.

custody 40% confidence

Resolution 215/2021 regulates the use of virtual assets in Cuba. It defines virtual assets and states that their use for transactions between natural and legal persons is authorized by the BCC, provided they are issued by central banks or monetary authorities, or otherwise explicitly approved by the BCC. It also explicitly prohibits the use of virtual assets issued by private entities without prior authorization from the BCC. Entities operating with virtual assets must obtain a license from the BCC.

custody 85% confidence

Resolution 216/2021 initially authorized financial institutions to use virtual assets under BCC supervision with prior authorization, but subsequent implementation has moved to a concrete licensed framework where only 10 state-owned and mixed-enterprise firms have been granted licenses, excluding regular banks and non-bank financial institutions, and accompanied by new restrictive conditions including unilateral account freezing powers.

custody 85% confidence

Cuba does not have a distinct "crypto custodial license" in the sense of a specialized license solely for custody services.

custody 100% confidence

However, Resolution 215/2021 mandates that any legal person (entity) operating with virtual assets (which would include providing custody-like services) must obtain prior authorization from the Banco Central de Cuba.

custody 100% confidence

Resolution 216/2021 further specifies that existing financial institutions (banks, non-bank financial institutions) must also obtain specific authorization from the BCC to operate with virtual assets. This implies that if a Cuban bank were to offer crypto custody, it would need this authorization.

custody 100% confidence

The authorization process involves proving economic-financial solvency, demonstrating expertise and technological infrastructure, and adhering to BCC guidelines.

custody 95% confidence

There are no explicit crypto-specific rules mandating the segregation of client virtual assets from the operating assets of the custodian or the personal assets of the entity in the Cuban regulations (Resolution 215/216).

Evidence fact cu.custody.there-are-no-explicit-crypto-specific-0 not found (may have been renamed).

custody 100% confidence

There are no explicit mandates or requirements for cold storage (offline storage of private keys) in the Cuban regulations.

custody 100% confidence

The term "qualified custodian" as understood in jurisdictions like the US (e.g., under the SEC's Custody Rule) is not explicitly defined in Cuban virtual asset regulations.

licensing 60% confidence

Ley No. 143/2021 (Law 143/2021) – Ley de Prevención y Confrontación del Lavado de Activos, el Financiamiento al Terrorismo y a la Proliferación de Armas de Destrucción Masiva

licensing 100% confidence

Resolución No. 215/2021 del Banco Central de Cuba (BCC)

licensing 100% confidence

Resolución No. 216/2021 del Banco Central de Cuba (BCC)

licensing 100% confidence

Legalizes the use of virtual assets for financial transactions between individuals and legal entities, but only those authorized by the BCC.

licensing 100% confidence

Requires service providers dealing with virtual assets to obtain a license from the BCC.

licensing 100% confidence

Stresses compliance with AML/CFT regulations.

licensing 90% confidence

Risk-Based Approach (RBA): Implement a risk-based approach, meaning that the intensity of CDD measures should be commensurate with the level of ML/TF risk identified.

licensing 60% confidence

Identification and Verification:

licensing 85% confidence

Obtain and verify the identity of the customer and, where applicable, the beneficial owner. This includes:

licensing 85% confidence

For Individuals: Full legal name, date of birth, address, nationality, national identity number (e.g., ID card, passport), and occupation. Verification must be from reliable, independent sources (e.g., official documents).

licensing 60% confidence

For Legal Entities: Legal name, legal form, address of the registered office, names of directors/senior management, beneficial owners, and proof of existence (e.g., articles of incorporation, business registration certificate).

licensing 90% confidence

Purpose and Nature of the Business Relationship: Understand the purpose and intended nature of the business relationship or transaction.

licensing 90% confidence

Ongoing Monitoring: Conduct ongoing monitoring of the business relationship and transactions undertaken by customers to ensure consistency with the VASP's knowledge of the customer, their business, and risk profile, including the source of funds.

licensing 85% confidence

Simplified Due Diligence (SDD): May be applied in low-risk situations.

licensing 90% confidence

Enhanced Due Diligence (EDD): Must be applied for higher-risk categories, such as:

enforcement 90% confidence

Lack of Transparency: The Cuban government is not known for its transparency regarding internal enforcement actions, especially against individuals or smaller, private entities.

enforcement 85% confidence

Nature of the Economy: In a state-controlled economy, significant independent financial operations (like an unregistered crypto exchange) would likely be shut down or absorbed without a public trial or detailed announcement.

enforcement 100% confidence

Central Bank of Cuba (BCC) holds expanded enforcement powers, including unilateral authority to freeze bank accounts without notice and suspend Visa and Mastercard transactions.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet / SaaS operation is theoretically permitted under BCC authorization, but in practice only 10 state-owned or mixed-enterprise firms have been licensed; no private foreign entity has been approved, no dedicated custody license exists, and there are no specific segregation, insurance, or proof-of-reserves rules.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?