DeFi protocol frontend in Guyana
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Guyana without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- CDD: identify and verify customers (name, address, date of birth, national ID/passport for individuals; legal form, directors, incorporation proof for legal entities) per AMLCFTA and FIU guidance
- Beneficial ownership identification and verification required
- Ongoing transaction monitoring — transactions must be consistent with customer risk profile
- Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex ownership structures, and novel technologies (including virtual assets)
- Suspicious Transaction Reports (STRs) to the FIU — mandatory regardless of amount, promptly upon suspicion
- Sanctions screening against UN Security Council and other applicable lists
- Travel Rule (FATF Rec. 16) — obtain, hold, and transmit originator/beneficiary info for virtual asset transfers; likely threshold-based
- Record-keeping: customer ID records, transaction records, and STR documentation must be retained
- No tipping-off prohibition applies to any FIU report
- If the frontend takes fees or facilitates transfers, it likely qualifies as a VASP/reporting entity under the AMLCFTA amendment broadening 'financial institution' scope
Key Restrictions
- No specific crypto licensing regime exists — no dedicated pathway for DeFi frontends, exchanges, or custodians
- Bank of Guyana has repeatedly stated cryptocurrencies are not legal tender and are unregulated (March 2021 advisory, reiterated periodically through 2023)
- Operating a crypto business without clarity may expose operators to being classified as engaging in unlicensed financial activities or fraud, as seen in the Coinvest/ACFI criminal prosecution
- Fee-taking from users (e.g., frontend fees, swap fees) may heighten risk of classification as an unlicensed financial service
- No explicit exemption for DeFi frontends or non-custodial interfaces — the absence of regulation does not equal permission
Key Risks
- Enforcement risk: The sole major crypto enforcement action (Coinvest/ACFI) involved criminal fraud charges, not regulatory fines — operators risk criminal prosecution (over 100 fraud charges, bail set in tens of millions GYD, asset freezes/seizures)
- Regulatory ambiguity: No VASP-specific license, no guidance on DeFi, no statement on whether non-custodial frontends are considered 'financial institutions' under AMLCFTA
- Reputational/exposure risk: BoG public advisories actively warn the public against cryptocurrency, creating a hostile operating environment
- If the frontend collects fees or directs user traffic to specific protocols, it could be re-characterized as a promoter/operator of a financial scheme, inviting prosecution under fraud or pyramid-scheme statutes
- No formal FATF-compliant VASP registration mechanism appears operational — compliance with AML obligations would be ad hoc
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific Crypto Licenses: There are no distinct licenses for "crypto exchanges," "crypto custody," or "crypto payment processors" in the same way there are for traditional financial institutions.
Bank of Guyana (BoG) Stance: The Bank of Guyana has generally adopted a cautious stance, issuing public advisories warning about the risks associated with virtual assets (volatility, scams, lack of consumer protection). While they acknowledge the emergence of crypto, they have not yet issued specific regulations or licensing requirements for VASP activities.
March 2021: A prominent advisory reiterating that cryptocurrencies are not legal tender and are unregulated.
Ongoing: The BoG's stance has been consistently cautious since then, with similar warnings periodically reiterated through public statements and official channels.
Regulator/Enforcing Body: Guyana Police Force, Special Organised Crime Unit (SOCU)
Anti-Money Laundering and Countering the Financing of Terrorism Act 2009 (as amended) (AMLCFTA). This Act, enforced by the Financial Intelligence Unit (FIU) Guyana, serves as the cornerstone for financial institutions and designated non-financial businesses and professions (DNFBPs), which now explicitly include VASPs.
This amendment, along with others, updated the original Act to address evolving FATF standards and typically broadened the scope of "reporting entities" or "financial institutions" to include new types of services, implicitly or explicitly bringing VASPs under its ambit.
Verifying the Customer's Identity: Using reliable, independent source documents, data, or information. This often involves comparing documents against official databases or using digital verification tools.
Identifying and Verifying the Beneficial Owner: Determining the natural person(s) who ultimately own or control the customer, or on whose behalf a transaction is being conducted.
Ongoing Monitoring: Continuously scrutinizing transactions made throughout the course of the relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Enhanced Due Diligence (EDD): Applying more stringent measures for higher-risk situations, such as:
Politically Exposed Persons (PEPs) and their family members/close associates.
Customers from high-risk geographic locations (e.g., countries subject to FATF countermeasures or known for high corruption/crime rates).
New and complex technologies (like certain virtual assets) where anonymity concerns are higher.
"Travel Rule" (FATF Recommendation 16): While specific domestic legislation implementing the travel rule for VASPs might still be evolving, FATF standards require VASPs to obtain, hold, and transmit originator and beneficiary information for virtual asset transfers above a certain threshold (typically equivalent to USD/EUR 1,000). VASPs in Guyana should be preparing for or already implementing this where feasible, especially for cross-border transactions.
Screening for Sanctions: Customers and transactions must be screened against national and international sanctions lists (e.g., UN Security Council sanctions, OFAC sanctions).
Obligation to Report: VASPs are legally obligated to report any suspicious transaction or activity to the FIU, regardless of the amount. A transaction is suspicious if the VASP has reasonable grounds to suspect that it may be related to money laundering or terrorist financing, or if it deviates from the client's usual activity or financial profile.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a report has been or will be made to the FIU (i.e., "tipping-off").
Customer Identification Records: Copies of identification documents, verification data, beneficial ownership information.
Entity Targeted: Individuals associated with "Coinvest Guyana" and "Accelerated Capital Firm Inc. (ACFI)," particularly Yuri Garcia-Lopez and Ateeka Ishmael, along with others later implicated. Violation Type: Operating a pyramid scheme, obtaining money by false pretences (fraud), unlicensed financial operations. The scheme reportedly solicited investments with promises of high returns, often facilitated through digital means and sometimes referencing digital asset investments as part of its pitch, though its core was a classic Ponzi/pyramid structure.
Entity Targeted: General public, financial institutions, and implicitly, anyone considering operating an unregulated cryptocurrency business in Guyana. Violation Type: While not a "violation" in itself, the BoG warns against the inherent risks and unregulated nature of cryptocurrencies, implying that conducting such activities falls outside the regulated financial system and thus carries significant risks for participants. The advisories highlight that cryptocurrencies are not legal tender, are not regulated by the BoG, and offer no consumer protection. Penalty Amount: N/A (These are advisories, not direct enforcement actions with fines). Outcome: Increased public awareness of the risks associated with cryptocurrencies in Guyana, a clear statement that such activities are outside the regulated financial sector, and a deterrent for unregulated operations seeking legitimacy. This stance limits the growth of formal crypto businesses until a regulatory framework is established.
Outcome: Increased public awareness of the risks associated with cryptocurrencies in Guyana, a clear statement that such activities are outside the regulated financial sector, and a deterrent for unregulated operations seeking legitimacy. This stance limits the growth of formal crypto businesses until a regulatory framework is established.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend could theoretically operate in Guyana but in a near-regulatory vacuum with no specific licensing pathway, and would likely be treated as a VASP under the amended AMLCFTA, requiring AML/KYC compliance (CDD, EDD, STRs, travel rule, sanctions screening) while facing significant criminal enforcement risk if regulators or prosecutors view fee-taking or user facilitation as unlicensed financial activity or fraud.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?