← Regulations / Fiji / Operating Models / DeFi frontend

DeFi protocol frontend in Fiji

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Fiji with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • All entities dealing with virtual assets are considered financial institutions or DNFBPs under the FTRA 2004 (fj.aml.financial-transactions-reporting-act-2004)
  • Must conduct Customer Due Diligence including identity verification of individual and legal-entity customers (fj.aml.individual-customers-obtain-and-verify, fj.aml.legal-entities-companies-trusts-etc)
  • Must identify and verify beneficial ownership (25%+ ownership/control threshold) (fj.aml.beneficial-ownership-identify-and-verify)
  • Must understand purpose and nature of the business relationship (fj.aml.purpose-and-nature-of-the)
  • Must conduct ongoing transaction monitoring for consistency with customer risk profile (fj.aml.ongoing-monitoring-continuously-monitor-the)
  • Enhanced Due Diligence required for PEPs, high-risk jurisdictions, complex/unusual transactions, non-face-to-face relationships, and virtual-asset-related business (fj.aml.enhanced-cdd-edd-must-be, fj.aml.customers-from-high-risk-jurisdictions, fj.aml.politically-exposed-persons-peps-and, fj.aml.non-face-to-face-business-relationships)
  • Suspicious Transaction Reports must be filed promptly with the FIU for any suspected ML/TF transaction regardless of value (fj.aml.reporting-threshold-there-is-no, fj.aml.timing-strs-must-be-submitted)
  • No tipping-off prohibition applies to any STR filing (fj.aml.no-tipping-off-vasps-and-their)
  • Must appoint an AML Compliance Officer and establish internal reporting procedures (fj.aml.internal-reporting-vasps-must-establish)
  • Record-keeping obligations for all CDD information and transaction records (fj.aml.all-cdd-information-customer-identification)

Key Restrictions

  • If the DeFi frontend takes fees (e.g., swap fees, front-end fees) and the tokens it facilitates access to include tokens with an expectation of profit derived from others' efforts, the frontend operator may be deemed to be facilitating a securities offering, triggering prospectus and licensing requirements under the Companies Act 2015 (fj.licensing.prospectus-requirement-generally-an-offer, fj.licensing.licensing-the-issuer-or-any)
  • Any platform facilitating secondary trading of tokens classified as securities must be licensed as a securities exchange or financial market operator by the RBF — a very high bar (fj.licensing.licensing-for-platforms-any-platform)
  • RBF has repeatedly warned the public against cryptocurrencies and does not recognize them as legal tender; the regulator's stance is hostile to crypto operations (fj.enforcement.rbf-statement-2021---warning, fj.enforcement.rbf-statement-2023---warning)
  • No specific VASP or crypto license framework exists — operators must fit into existing financial services categories, which are poorly suited to DeFi frontends
  • Fee-taking by the frontend operator increases the likelihood that the operator is viewed as an active participant in a common enterprise, triggering investment contract / security analysis (fj.licensing.in-a-common-enterprise-the, fj.licensing.deriving-primarily-from-the-efforts)
  • The frontend would likely need to geofence Fijian users entirely to avoid triggering securities and AML obligations, given the RBF's hostile stance and the absence of a licensing pathway

Key Risks

  • High regulatory ambiguity — Fiji has no DeFi-specific or VASP-specific framework, so the frontend operator operates in a legal grey zone with potential retrospective enforcement
  • RBF has a documented history of public warnings against cryptocurrency use, creating reputational and enforcement risk even if no specific enforcement action has been taken yet (fj.enforcement.outcome-public-awareness-campaigns-warnings)
  • Any token listed on the frontend that could be classified as an investment token (per the RBF's Howey-like test) exposes the operator to prospectus and licensing liability (fj.licensing.investment-tokens-any-token-offered, fj.licensing.prospectus-requirement-generally-an-offer)
  • FATF Mutual Evaluation Report (2022) indicates regulatory scrutiny on VAs is increasing — Fiji may adopt stricter enforcement (fj.enforcement.fatf-mutual-evaluation-report-for)
  • No licensed securities exchange or trading platform for security tokens exists in Fiji, making secondary trading compliance impossible for most tokens
  • AML/CFT obligations apply regardless of whether the frontend is decentralized — any entity involved in virtual asset transactions is a reporting institution

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Investment Tokens: Any token offered with the expectation of profit derived from the efforts of others, where the investor is largely passive. This includes:

licensing 60% confidence

In a Common Enterprise: The investor's funds are pooled with others, and their fortunes are linked to the success or failure of the enterprise.

licensing 60% confidence

Deriving Primarily from the Efforts of Others: The profits are expected to come from the managerial or entrepreneurial efforts of the issuer or a third party, rather than the investor's own active participation.

licensing 60% confidence

Prospectus Requirement: Generally, an offer of securities to the public in Fiji requires the preparation and registration of a prospectus with the Registrar of Companies. This prospectus must contain all material information necessary for investors to make an informed decision.

licensing 60% confidence

Licensing: The issuer or any entity advising on, marketing, or facilitating the offering of such security tokens may need to be licensed as a financial services provider by the RBF or other relevant authorities, depending on the nature of their activities (e.g., an investment adviser, broker-dealer, or fund manager).

licensing 60% confidence

Licensing for Platforms: Any platform facilitating the secondary trading of security tokens would need to be appropriately licensed as a securities exchange or a financial market operator by the RBF. Given the lack of specific crypto licenses, this would be a high bar to meet under existing legislation.

aml 60% confidence

Financial Transactions Reporting Act 2004 (FTRA 2004): This is the foundational AML/CFT law in Fiji. It establishes the framework for reporting institutions, customer due diligence, suspicious transaction reporting, and the powers of the Financial Intelligence Unit (FIU).

aml 60% confidence

Customer Identification and Verification:

aml 60% confidence

Individual Customers: Obtain and verify identity using reliable, independent sources (e.g., national ID cards, passports, driver's licenses). This includes full name, date of birth, residential address, and nationality.

aml 60% confidence

Legal Entities (Companies, Trusts, etc.): Obtain and verify the entity's name, legal form, proof of existence, registered address, and the names of directors/partners/trustees.

aml 60% confidence

Beneficial Ownership: Identify and verify the ultimate natural person(s) who own or control the customer, or on whose behalf a transaction is being conducted. For legal entities, this typically involves identifying individuals with 25% or more ownership/control.

aml 60% confidence

Purpose and Nature of the Business Relationship: Understand the purpose and intended nature of the business relationship or transaction to assess potential risks.

aml 60% confidence

Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious activities.

aml 60% confidence

Enhanced CDD (EDD): Must be applied in higher-risk situations, which typically include:

aml 60% confidence

Customers from high-risk jurisdictions.

aml 60% confidence

Politically Exposed Persons (PEPs) and their family members/close associates.

aml 60% confidence

Non-face-to-face business relationships.

aml 60% confidence

Reporting Threshold: There is no monetary threshold for reporting. Any transaction (including attempted transactions), regardless of value, where the VASP suspects or has reasonable grounds to suspect involves money laundering, terrorism financing, or any other criminal activity, must be reported.

aml 60% confidence

Timing: STRs must be submitted promptly to the FIU, typically within a few days of forming the suspicion.

aml 60% confidence

No Tipping-Off: VASPs and their employees are strictly prohibited from "tipping off" or informing the customer or any other third party that an STR has been filed or that an investigation is underway.

aml 60% confidence

Internal Reporting: VASPs must establish internal procedures for reporting suspicious activities to a designated AML Compliance Officer, who is then responsible for filing the STR with the FIU.

aml 60% confidence

All CDD information (customer identification data, beneficial ownership information).

enforcement 60% confidence

RBF Statement (2023) - Warning on Virtual Assets and Cryptocurrency: While a specific press release for 2023 isn't easily found, the RBF's general stance is reiterated in public speeches and financial stability reports. Their 2022 Annual Report mentions ongoing monitoring and collaboration with FIU.

enforcement 60% confidence

Outcome: Public awareness campaigns, warnings against the risks of investing in cryptocurrencies, reiterating that they are not legal tender in Fiji. The RBF has consistently highlighted volatility, scams, and lack of consumer protection.

custody 60% confidence

No specific license for cryptocurrency custody exists. As cryptocurrencies are not recognized as regulated financial products under the current RBF framework, there is no specific "crypto custodian license."

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — operating a DeFi protocol frontend in/from Fiji carries very high regulatory risk: no VASP-specific license exists, the RBF has publicly warned against crypto, any fee-taking or token listing with investment characteristics likely triggers securities prospectus and exchange licensing requirements, and AML/CFT obligations automatically attach; the only practically compliant approach may be to geofence Fiji entirely or restrict to pure utility/governance tokens with no profit expectation.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?