Self-custodial wallet / non-custodial software in Iceland
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is permitted in Iceland with no licensing burden.
Verdict Details
- Permitted
- yes
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
Key Restrictions
- Cannot hold, control, or access user private keys (by definition of operating model)
- If the software engages in any brokering, exchange, or fiat on/off-ramp services, additional licensing may be triggered
- Any form of custody — even incidental — would trigger VASP registration under Act No. 140/2018
Key Risks
- Risk of regulatory creep if the software includes any integrated exchange, swap, or staking features that could be construed as providing custody or administration of virtual assets
- No publicly announced enforcement actions in Iceland offer limited regulatory guidance on non-custodial software — ambiguity remains
- General consumer-protection liability (product liability, software defects) still attaches even if financial regulation does not
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP Registration: Any entity providing services related to virtual assets, including the safekeeping and/or administration of virtual assets on behalf of customers (i.e., custody), is required to register as a Virtual Asset Service Provider (VASP) with the Central Bank of Iceland. This is not a "license" in the traditional sense of financial services but rather an AML/CFT registration that imposes significant obligations.
Scope: This typically covers situations where the custodian holds private keys and has control over clients' virtual assets.
Focus: The Central Bank's focus has been on implementing AML/CFT regulations for Virtual Asset Service Providers (VASPs), aligning with FATF recommendations and EU directives. They require VASPs to register and comply with the AML/CFT Act.
AML/CFT Act in Iceland: Iceland has implemented the 5th Anti-Money Laundering Directive (AMLD5), which covers virtual asset service providers. The legal framework is primarily the Act on Measures Against Money Laundering and Terrorist Financing No. 140/2018.
No Publicly Announced Major Actions: Unlike larger countries where regulatory bodies regularly announce fines or other penalties against specific crypto firms for violations, Iceland has not had such public announcements in the last three years. This doesn't mean there are no regulatory activities, but rather that any actions taken may be less "significant" in the public domain (e.g., private warnings, compliance orders, or smaller, non-public fines) or against individuals rather than companies, or relate to older cases outside the requested timeframe.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Yes — non-custodial wallet software publishers are not regulated as VASPs in Iceland (VASP registration is triggered by custody/holding of private keys), and no AML obligations attach to the publisher when no custody exists.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?