← Regulations / Dominican Republic / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Dominican Republic

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Dominican Republic with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Obligated party (sujeto obligado) under Ley 155-17 — must implement AML/CFT policies regardless of absence of a dedicated VASP license (do.licensing.ley-no-155-17-contra-el, do.licensing.this-law-defines-obligated-parties)
  • Customer Due Diligence (CDD) required for all customers (individuals: name, DOB, address, nationality, cédula/passport; legal entities: incorporation docs, beneficial owners, directors) (do.licensing.identification-and-verification, do.licensing.individuals-obtaining-and-verifying-identity, do.licensing.legal-entities-obtaining-and-verifying)
  • Beneficial ownership identification required — identify ultimate natural person(s) owning or controlling the customer (do.licensing.beneficial-ownership-identifying-and-verifying)
  • Risk-based approach — Simplified Due Diligence (SDD) for low-risk customers; Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusual transactions (do.licensing.risk-based-approach-applying-a-risk-based, do.licensing.simplified-due-diligence-sdd-permitted, do.licensing.enhanced-due-diligence-edd-required)
  • Ongoing transaction monitoring to ensure consistency with customer risk profile (do.licensing.ongoing-monitoring-continuously-monitoring-the)
  • Suspicious Transaction Reporting (STR) to Unidad de Análisis Financiero (UAF) — no tipping-off (do.licensing.report-to-fiu-report-any, do.licensing.no-tipping-off-prohibit-informing-the)
  • Designated compliance officer required for AML/CFT matters (do.licensing.designated-compliance-officer-appoint-a)
  • Record-keeping for minimum 5 years after termination of relationship or transaction (do.licensing.retention-period-records-must-be)
  • Sanctions screening obligation — UN Security Council Consolidated List, OFAC SDN List (for entities with U.S. nexus), EU sanctions lists (where applicable) (do.aml.un-security-council-resolutions-unsc, do.aml.compliance-requirement-dominican-entities-including, do.aml.compliance-requirement-vasps-in-the, do.aml.compliance-requirement-screening-against-the)
  • FATF Travel Rule expected compliance as member of GAFILAT — obtain and transmit originator/beneficiary info for virtual asset transfers above threshold (do.licensing.fatf-travel-rule-expectation-as)

Key Restrictions

  • Financial institutions regulated by Superintendencia de Bancos (SIB) are prohibited from engaging with virtual assets per Resolución R-BC-004-2022 de la Junta Monetaria — custodial wallet/SaaS operators cannot be structured as or partner with SIB-regulated entities (do.licensing.resolucin-r-bc-004-2022-de-la-junta)
  • No specific VASP or custody licensing framework exists — operator cannot obtain a dedicated 'qualified custodian' license; operates in regulatory grey area under general AML law (do.enforcement.absence-of-a-specific-licensing)
  • Central Bank (BCRD) repeatedly warns cryptocurrencies are not legal tender, not backed, and not regulated — creates reputational and operational uncertainty for custodial operators (do.enforcement.warnings-and-advisories-the-central, do.enforcement.comunicado-del-banco-central-sobre)
  • No explicit insurance, segregation, or proof-of-reserves rules exist for custodial wallet providers in Dominican law — any such safeguards would be voluntary/commercial commitments

Key Risks

  • Regulatory ambiguity — no dedicated VASP/custody framework means operator relies on interpretation that Ley 155-17 applies; new regulation could impose retroactive or incompatible requirements
  • Banking access risk — formal banks are prohibited from crypto dealings per Junta Monetaria Resolution, making it difficult to secure local banking relationships (do.licensing.resolucin-r-bc-004-2022-de-la-junta)
  • Enforcement gap risk — UAF may assert AML jurisdiction over a custodian that holds keys and controls transfers, but no public enforcement precedent confirms scope for custodial SaaS operators
  • Travel Rule compliance uncertainty — FATF obligations are expected but no local implementing regulation sets thresholds or technical standards for custodial wallet providers (do.licensing.fatf-travel-rule-expectation-as)
  • Lack of segregation/insurance rules creates consumer-protection exposure — custody failures (hack, insolvency) would face uncertain legal treatment in Dominican courts

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 95% confidence

Ley No. 155-17 contra el Lavado de Activos y el Financiamiento del Terrorismo (Law No. 155-17 Against Money Laundering and Terrorism Financing), enacted in June 2017.

licensing 10% confidence

This law defines "obligated parties" (sujetos obligados) which include a broad range of financial and non-financial businesses and professions. While it doesn't explicitly name "virtual asset service providers," entities dealing with virtual assets in a professional capacity (e.g., exchanges, custodians, transfer services) are likely to be interpreted as falling under its scope due to the nature of the financial services they provide or facilitate.

licensing 0% confidence

Resolución R-BC-004-2022 de la Junta Monetaria (Monetary Board Resolution R-BC-004-2022): This resolution, while not a VASP specific regulation, is crucial context. It forbids financial entities regulated by the Superintendencia de Bancos (SIB) from engaging with virtual assets, cryptocurrencies, or crypto assets. This means traditional banks cannot offer VASP services.

licensing 0% confidence

Individuals: Obtaining and verifying identity (name, date of birth, address, nationality, official identification number/document like passport or cédula).

licensing 0% confidence

Legal Entities: Obtaining and verifying legal name, address, articles of incorporation, legal form, proof of existence, powers of attorney, and the identity of beneficial owners and directors.

licensing 0% confidence

Beneficial Ownership: Identifying and verifying the identity of the ultimate natural person(s) who own or control the customer, or the person on whose behalf a transaction is being conducted.

licensing 0% confidence

Risk-Based Approach: Applying a risk-based approach to CDD. This means:

licensing 0% confidence

Simplified Due Diligence (SDD): Permitted for low-risk customers or transactions.

licensing 0% confidence

Enhanced Due Diligence (EDD): Required for high-risk customers, such as Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, or complex and unusual transactions.

licensing 0% confidence

Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.

licensing 0% confidence

Report to FIU: Report any transaction or attempted transaction suspected of being related to money laundering or terrorism financing to the Unidad de Análisis Financiero (UAF), the Dominican Republic's Financial Intelligence Unit.

licensing 0% confidence

No Tipping-Off: Prohibit informing the customer or any third party that a STR has been filed (no "tipping-off").

licensing 0% confidence

Designated Compliance Officer: Appoint a compliance officer responsible for AML/CFT matters, including STR filings.

licensing 0% confidence

Retention Period: Records must be retained for a minimum period of five (5) years after the termination of the business relationship or the date of the transaction.

licensing 20% confidence

FATF Travel Rule Expectation: As the DR is a member of GAFILAT (the FATF-style regional body), VASPs are expected to eventually comply with the FATF's "Travel Rule," which requires VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers above a certain threshold. While not explicitly codified in DR law for VASPs yet, it's a global standard.

aml 60% confidence

Compliance Requirement: Dominican entities, including VASPs, must freeze assets and prevent transactions with individuals and entities appearing on the UN Security Council Consolidated List.

aml 60% confidence

Compliance Requirement: VASPs in the DR engaging with the U.S. financial system or dealing with U.S. persons, or facilitating transactions that touch sanctioned entities/jurisdictions, must screen against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List and other sanctions lists (e.g., the Sectoral Sanctions Identifications List).

aml 60% confidence

Compliance Requirement: Screening against the EU Consolidated List of Persons, Groups and Entities Subject to EU Financial Sanctions.

enforcement 60% confidence

Warnings and Advisories: The Central Bank of the Dominican Republic (Banco Central de la República Dominicana - BCRD) has repeatedly issued public statements and communications warning about the risks associated with cryptocurrencies, stating that they are not legal tender, are not backed by any government or central bank, and are subject to high volatility and lack of regulation.

enforcement 60% confidence

Prohibition for Regulated Entities: Financial institutions regulated by the BCRD and the Superintendency of Banks (Superintendencia de Bancos - SB) are generally prohibited from dealing in or offering services related to cryptocurrencies.

enforcement 60% confidence

Absence of a Specific Licensing Framework: Unlike some other jurisdictions, the Dominican Republic does not currently have a specific regulatory framework for the licensing and supervision of cryptocurrency exchanges or related businesses. This means there isn't a specific set of crypto regulations for regulators to enforce against these entities.

enforcement 60% confidence

Comunicado del Banco Central sobre las criptomonedas (March 25, 2021): This is one of the most definitive statements from the Central Bank.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a custodial wallet/SaaS operator may operate in the Dominican Republic only under Ley 155-17 AML obligations (as a sujeto obligado), but faces severe structural constraints: no dedicated custody license framework exists, SIB-regulated financial entities are prohibited from crypto dealings, and the Central Bank has publicly warned crypto is unregulated, creating a high-risk grey-area operating environment.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?