DeFi protocol frontend in Cuba
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Cuba with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Mandatory CDD: obtain and verify customer identity (full name, DOB, address, nationality, national ID/passport, occupation) from reliable independent sources.
- For legal entity customers: verify legal name, legal form, registered address, directors/senior management, beneficial owners, and proof of existence (e.g., articles of incorporation).
- Understand the purpose and intended nature of the business relationship or transaction.
- Ongoing monitoring of business relationships and transactions for consistency with customer risk profile, including source of funds.
- Risk-Based Approach (RBA) required — intensity of CDD commensurate with ML/TF risk.
- Simplified Due Diligence (SDD) permitted for low-risk situations; Enhanced Due Diligence (EDD) mandatory for higher-risk categories.
- Compliance with Ley No. 143/2021 (AML/CFT law) and Resolution 215/2021 AML/CFT obligations enforced by the BCC.
- Reporting obligations to the Central Bank of Cuba (BCC) as supervisory authority for VASPs.
Key Restrictions
- Frontend must be operated by a legal entity licensed by the Central Bank of Cuba (BCC) under Resolutions 215/2021 and 216/2021.
- Only virtual assets authorized by the BCC may be used — all other virtual assets are prohibited.
- Only 10 state-owned and mixed-enterprise firms have been granted licenses to date; private/foreign entities face significant practical barriers.
- Geofencing and region restriction required: Cuba's framework explicitly prohibits use of unauthorized virtual assets and limits permissible activities to those pre-approved by the BCC.
- Fee-taking activity (e.g., swap fees, frontend fees) likely constitutes VASP activity requiring a license — no carve-out for decentralized protocols.
Key Risks
- Lack of transparency in Cuban government enforcement makes unlicensed operation high-risk — unregistered crypto operations are likely shut down or absorbed without public proceedings.
- BCC holds expanded enforcement powers, including unilateral authority to freeze accounts and suspend payment services.
- State-controlled economy means independent DeFi frontends face structural headwinds — only state-approved entities have been licensed to date.
- Regulatory ambiguity: no explicit exemptions for non-custodial, decentralized protocol frontends — the licensing framework appears to apply broadly to anyone facilitating virtual asset transactions.
- US sanctions exposure: operating from or through Cuba carries significant cross-border sanctions risk for any entity with US nexus.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Ley No. 143/2021 (Law 143/2021) – Ley de Prevención y Confrontación del Lavado de Activos, el Financiamiento al Terrorismo y a la Proliferación de Armas de Destrucción Masiva
Resolución No. 215/2021 del Banco Central de Cuba (BCC)
Resolución No. 216/2021 del Banco Central de Cuba (BCC)
Legalizes the use of virtual assets for financial transactions between individuals and legal entities, but only those authorized by the BCC.
Requires service providers dealing with virtual assets to obtain a license from the BCC.
Prohibits the use of virtual assets that are not authorized by the BCC.
Overview: This is the cornerstone regulation specifically for virtual assets. It establishes the rules for the use of certain virtual assets in commercial transactions, their licensing, and supervision in Cuba. It defines virtual assets and virtual asset service providers (VASPs). It explicitly states that the BCC will grant licenses to VASPs that operate in Cuba. It also emphasizes that operations with virtual assets must comply with AML/CFT rules.
Stresses compliance with AML/CFT regulations.
Identification and Verification:
Obtain and verify the identity of the customer and, where applicable, the beneficial owner. This includes:
For Individuals: Full legal name, date of birth, address, nationality, national identity number (e.g., ID card, passport), and occupation. Verification must be from reliable, independent sources (e.g., official documents).
For Legal Entities: Legal name, legal form, address of the registered office, names of directors/senior management, beneficial owners, and proof of existence (e.g., articles of incorporation, business registration certificate).
Purpose and Nature of the Business Relationship: Understand the purpose and intended nature of the business relationship or transaction.
Ongoing Monitoring: Conduct ongoing monitoring of the business relationship and transactions undertaken by customers to ensure consistency with the VASP's knowledge of the customer, their business, and risk profile, including the source of funds.
Risk-Based Approach (RBA): Implement a risk-based approach, meaning that the intensity of CDD measures should be commensurate with the level of ML/TF risk identified.
Simplified Due Diligence (SDD): May be applied in low-risk situations.
Enhanced Due Diligence (EDD): Must be applied for higher-risk categories, such as:
Lack of Transparency: The Cuban government is not known for its transparency regarding internal enforcement actions, especially against individuals or smaller, private entities.
Focus on Regulation: Cuba's primary public actions concerning crypto have been the creation of a legal framework to regulate virtual assets, aiming to harness them for economic benefit (e.g., bypassing US sanctions, facilitating remittances) while simultaneously controlling their use to prevent illicit activities and maintain state oversight.
Nature of the Economy: In a state-controlled economy, significant independent financial operations (like an unregistered crypto exchange) would likely be shut down or absorbed without a public trial or detailed announcement.
Central Bank of Cuba (BCC) holds expanded enforcement powers, including unilateral authority to freeze bank accounts without notice and suspend Visa and Mastercard transactions.
Resolution 215/2021 regulates the use of virtual assets in Cuba. It defines virtual assets and states that their use for transactions between natural and legal persons is authorized by the BCC, provided they are issued by central banks or monetary authorities, or otherwise explicitly approved by the BCC. It also explicitly prohibits the use of virtual assets issued by private entities without prior authorization from the BCC. Entities operating with virtual assets must obtain a license from the BCC.
Resolution 216/2021 initially authorized financial institutions to use virtual assets under BCC supervision with prior authorization, but subsequent implementation has moved to a concrete licensed framework where only 10 state-owned and mixed-enterprise firms have been granted licenses, excluding regular banks and non-bank financial institutions, and accompanied by new restrictive conditions including unilateral account freezing powers.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi frontend serving Cuban residents would require a BCC VASP license under Resolutions 215/2021 and 216/2021, but only state-owned and mixed-enterprise firms have been licensed to date, no explicit exemption exists for non-custodial/decentralized protocols, and regulatory opacity makes the practical pathway for private/foreign operators highly uncertain.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?