DeFi protocol frontend in Iran
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Iran with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/identification verification for individuals: National ID number (National Code for Iranians), contact information (phone, email), verification through official documents (e.g., National ID card, passport) — per ir.aml.identification-and-verification and ir.aml.national-id-number-national-code
- KYC/identification verification for legal entities: Legal name and trade name, registration number and date, legal form, registered address, details of directors/senior management/beneficial owners (≥25% shareholding), verification through official corporate documents — per ir.aml.legal-name-and-trade-name through ir.aml.verification-through-official-corporate-documents
- Reporting obligations under the Law on Combating Money Laundering (LCML) and Law on Combating the Financing of Terrorism (LCFT), including suspicious transaction reporting (STR) to the FIU — per ir.aml.law-on-combating-money-laundering and ir.aml.law-on-combating-the-financing
- Sanctions screening obligations given Iran's FATF blacklisting status (enhanced due diligence required by counterparties) — per ir.aml.fatf-blacklisting-iran-is-currently
- CBI directives applying existing AML/CFT framework to any entity authorized to deal with virtual assets — per ir.aml.applying-existing-aml-the-cbis
Key Restrictions
- Domestic use of cryptocurrencies for payments is generally prohibited by the CBI — per ir.aml.evolving-stance-2019-present-the-cbi
- Public trading of cryptocurrencies is restricted/highly controlled — per ir.aml.evolving-domestic-stance-irans-stance and ir.aml.evolving-stance-2019-present-the-cbi
- International sanctions (primarily US) prohibit most financial transactions involving Iranian entities or individuals, making cross-border operation extremely difficult — per ir.aml.international-sanctions-iran-is-under
- Any entity dealing with virtual assets in Iran must be authorized by the CBI and subject to existing AML/CFT laws — per ir.aml.applying-existing-aml-the-cbis
- Iran is on the FATF blacklist (high-risk jurisdiction subject to call for action), imposing enhanced due diligence and countermeasure expectations on any counterparty — per ir.aml.fatf-blacklisting-iran-is-currently
Key Risks
- ["Extreme enforcement risk: Sanctions exposure (US, international) makes any Iran-facing crypto frontend a high-priority target for OFAC and other sanctions enforcement bodies", "Regulatory ambiguity: No clear licensing framework for DeFi frontends or VASPs exists; only mining has a formal licensing path, leaving all other operations in a grey zone", "FATF blacklisting means international counterparties (e.g., hosting providers, payment rails, node operators) face enhanced scrutiny and may refuse service", "CBI crackdown precedent is focused on mining, but the general prohibition on domestic crypto trading suggests a DeFi frontend serving Iranian residents could face criminal enforcement", "Sanctions compliance conflict: Geofencing out US persons may be impossible to verify given Iran's limited identification infrastructure and lack of international cooperation"]
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FATF Blacklisting: Iran is currently on the FATF's "Public Statement – High-Risk Jurisdictions Subject to a Call for Action," meaning it is subject to a call for countries to apply enhanced due diligence and, in the most serious cases, countermeasures to protect the international financial system from the ongoing money laundering, terrorist financing, and proliferation financing (ML/TF/PF) risks emanating from Iran. This significantly impacts any international VASP's ability or willingness to operate in or with Iran.
International Sanctions: Iran is under extensive international sanctions (primarily from the US), which prohibit most financial transactions involving Iranian entities or individuals, further complicating VASP operations.
Evolving Domestic Stance: Iran's stance on cryptocurrencies has evolved from outright bans to allowing regulated mining and exploring the use of crypto for bypassing sanctions (e.g., import payments), while generally maintaining strict controls over public trading and use for domestic payments.
Law on Combating the Financing of Terrorism (LCFT):
Central Bank of Iran (CBI) Regulations and Directives:
Early Stance (2018): The CBI initially banned all dealings in cryptocurrencies by banks and financial institutions, citing money laundering risks.
Evolving Stance (2019-Present): The CBI later allowed cryptocurrency mining as an industrial activity, requiring miners to obtain licenses and sell their mined crypto to the CBI for import financing. However, the use of cryptocurrencies for domestic payments is generally prohibited, and public trading platforms for major cryptocurrencies face significant restrictions or are not officially sanctioned in a broad retail sense.
Applying Existing AML: The CBI's stance implies that any entity authorized to deal with virtual assets (e.g., licensed miners selling to CBI, or potentially future regulated exchanges) would be subject to existing AML/CFT laws and CBI directives regarding KYC, transaction monitoring, and reporting.
National ID number (National Code for Iranians)
Registered address and principal place of business
Details of directors, senior management, and beneficial owners (shareholders owning 25% or more, or controlling persons).
Verification through official corporate documents (e.g., certificate of incorporation, articles of association).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi protocol frontend for Iranian residents is severely constrained by international sanctions, FATF blacklisting, CBI prohibition on domestic crypto trading, and the absence of a tailored licensing framework, making any compliant operation practically impossible without addressing sanctions risk and obtaining CBI authorization under evolving AML/CFT rules.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?