← Regulations / Iraq / Operating Models / Remote VASP

Remote VASP serving residents in Iraq

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Not permitted AI-Generated · Unreviewed

Remote VASP is not permitted in Iraq.

Verdict Details

Permitted
no
Local entity required
No
Licensing burden
None
Last updated
2026-07-13

AML Obligations

  • No licensing or AML framework available for VASPs — the CBI has imposed a blanket ban on cryptocurrency trading, use, advertising, and facilitation (iq.aml.decree-in-february-2022-and)
  • Traditional financial institutions that observe crypto-linked transactions must report suspicious transactions to the Iraqi AML/CFT Office (FIU) under Law No. 39 of 2015 (iq.aml.suspicious-transaction-reporting-str, iq.aml.iraqi-anti-money-laundering-and-counter-terrorist)
  • CDD/EDD obligations apply to banks and financial institutions, but not to unlicensed VASPs — no legal pathway exists for a remote VASP to comply (iq.aml.customer-due-diligence-cdd-requirements, iq.aml.enhanced-due-diligence-edd-for)

Key Restrictions

  • Cryptocurrency trading, use, advertising, and facilitation are prohibited outright by the Central Bank of Iraq (CBI) — first announced February 2021 and reaffirmed February 2023 (iq.enforcement.original-ban-directive-2021, iq.enforcement.re-affirmation-and-enhanced-warnings-2023)
  • Financial institutions, payment companies, and money transfer agencies are prohibited from dealing in or facilitating crypto transactions (iq.enforcement.entity-targeted-all-financial-institutions, iq.enforcement.entity-targeted-financial-institutions-payment)
  • Foreign platforms attempting to serve Iraqi residents are operating illegally; the CBI has specifically warned against foreign companies operating illicitly in Iraq (iq.enforcement.entity-targeted-financial-institutions-payment)
  • No licensing, registration, or exemption pathway exists for any VASP activity — the ban is categorical (iq.aml.implication-this-ban-means-that)

Key Risks

  • Outright illegality — any remote VASP serving Iraqi residents is operating in violation of CBI directives and could face legal consequences (iq.enforcement.re-affirmation-and-enhanced-warnings-2023)
  • Enforcement risk includes potential criminal liability under broader financial crime laws; details of penalties are not transparently published (iq.enforcement.blanket-ban-because-crypto-is, iq.enforcement.lack-of-transparency-iraqi-authorities)
  • Banking and payment rails are blocked — financial institutions are prohibited from facilitating crypto-related transactions, making fiat on/off-ramps inaccessible (iq.enforcement.entity-targeted-all-financial-institutions)
  • Repeat CBI warnings (2021 and 2023) signal continued focus and willingness to act against violators (iq.enforcement.re-affirmation-and-enhanced-warnings-2023)

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

aml 40% confidence

Decree: In February 2022 (and reiterated earlier), the Central Bank of Iraq (CBI) issued directives prohibiting the use, trading, and advertising of cryptocurrencies within Iraq. The CBI considers cryptocurrencies to be highly volatile, prone to fraud, and lacking proper regulatory oversight, posing risks to the financial system and national security.

aml 40% confidence

Implication: This ban means that there are no legally operating cryptocurrency exchanges or virtual asset service providers in Iraq. Any entity engaging in such activities within Iraq would be doing so illegally.

enforcement 100% confidence

Entity Targeted: All financial institutions operating under CBI supervision, and implicitly, the general public and any platforms attempting to facilitate cryptocurrency trading or transactions within Iraq. Penalty Amount: Not a specific fine for the directive itself. Non-compliance by financial institutions could lead to severe regulatory penalties, including fines, license suspension, or revocation. Individuals could face legal prosecution under existing financial crime laws.

enforcement 100% confidence

Entity Targeted: Financial institutions, payment companies, money transfer agencies, and the general public, with specific warnings against foreign companies operating illicitly within Iraq. Violation Type: Engaging in, promoting, or facilitating cryptocurrency transactions, deemed a breach of Iraqi financial law and a risk to the national economy and financial system. Penalty Amount: Not a specific fine for the re-affirmation. The directive reiterated that any individual or entity found dealing in cryptocurrencies would be subject to legal prosecution, implying criminal charges rather than administrative fines.

enforcement 100% confidence

Outcome: All licensed banks, financial institutions, and payment service providers were prohibited from dealing in cryptocurrencies. This established the legal framework making crypto activities illegal in Iraq.

enforcement 100% confidence

Outcome: Reinforced the existing ban, explicitly stating that using or dealing with cryptocurrencies is against Iraqi law and that violators would face legal consequences. It aimed to shut down any perceived loopholes or illicit operations. This was a significant re-emphasis of the country's hardline stance.

enforcement 60% confidence

Blanket Ban: Because crypto is outright banned, enforcement tends to fall under broader financial crime or anti-money laundering laws rather than specific crypto-related administrative fines.

enforcement 60% confidence

Lack of Transparency: Iraqi authorities generally do not publicly disclose details of individual arrests, investigations, or specific financial penalties related to cryptocurrency violations in a systematic or easily accessible manner, especially to international observers.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Not permitted — Iraq has imposed a blanket ban on cryptocurrency trading, use, advertising, and facilitation since February 2021 (reaffirmed 2023); there is no licensing or registration pathway for any VASP, foreign or domestic, and serving Iraqi residents from abroad is categorically illegal.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?