DeFi protocol frontend in Jamaica
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Jamaica without local incorporation, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- AML/CFT obligations under the Proceeds of Crime Act (POCA) 2007 and the Terrorism Prevention Act (TPA) 2007 if the frontend operator qualifies as a VASP under the BOJ Guidance Note on VASPs for AML/CFT purposes.
- Customer Due Diligence (CDD) required: identify and verify customer identity using reliable independent source documents (e.g., government-issued ID, passport, driver's license) — per BOJ Guidance.
- Beneficial ownership identification required: identify and take reasonable measures to verify natural person(s) who ultimately own or control the customer.
- Ongoing due diligence and transaction monitoring required throughout the business relationship, ensuring transactions are consistent with knowledge of the customer and risk profile.
- Risk-based approach to CDD: Simplified Due Diligence (SDD) for lower-risk situations; Enhanced Due Diligence (EDD) for higher-risk situations (PEPs, cross-border correspondent relationships, high-risk geographic locations, complex/unusual/large transactions, unknown wallet addresses).
- Reporting obligations to the Financial Investigations Division (FID) — Jamaica's FIU — including Suspicious Transaction Reports (STRs) under POCA.
- If the frontend operator takes fees (whether in fiat or crypto), it likely triggers classification as a VASP engaging in 'exchange between virtual assets and fiat currencies' or 'participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset' — bringing full AML obligations.
Key Restrictions
- No comprehensive VASP licensing regime is currently in force — the regulatory framework is still evolving, with specific VASP licensing expected via FATF/CFATF influence.
- Operator must assess whether its activities fall within the BOJ's definition of VASP activities (exchange between VA and fiat, VA-to-VA exchange, transfer of VA, safekeeping/administration of VA, or participation in financial services related to VA offers/sales).
- Fee-taking or any form of intermediation (e.g., charging swap fees, frontend fees) strongly increases the likelihood the frontend is a regulated VASP activity.
- Operator may need to enter the BOJ FinTech Regulatory Sandbox to test services under regulatory supervision if activities are deemed regulated.
- If crypto assets offered through the frontend are deemed securities, the Financial Services Commission (FSC) may assert regulatory authority.
Key Risks
- Regulatory ambiguity: Jamaica does not yet have a comprehensive crypto/VASP framework — enforcement currently relies on AML laws and general financial principles, creating uncertainty.
- If the frontend is purely non-custodial and does not take fees or screen users, it may fall outside current regulated definitions — but this is untested and carries risk of regulatory escalation.
- BOJ has repeatedly warned the public that cryptocurrencies are not legal tender and carry risks — reputational and enforcement exposure if the frontend is perceived as facilitating unregulated financial activity.
- FID actively monitors crypto transactions for illicit activity — a non-compliant frontend could face AML/CFT investigations even in the absence of a specific VASP licensing regime.
- Evolving regulatory landscape could result in retroactive compliance requirements or penalties as the VASP framework develops (influenced by FATF recommendations).
- Small market size means fewer entity-level enforcement actions to date, but this may change as the market grows and VASP licensing is formalized.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Bank of Jamaica (BOJ) Guidance Note on Virtual Asset Service Providers (VASPs) for Anti-Money Laundering/Combating the Financing of Terrorism (AML/CFT) Purposes: This is the most crucial document specifically addressing VASPs' obligations.
Proceeds of Crime Act (POCA): This is the foundational legislation for anti-money laundering.
Terrorism Prevention Act (TPA): This addresses the financing of terrorism and the implementation of UN Security Council resolutions related to terrorism.
The Proceeds of Crime Act (POCA), 2007 (as amended): This is the cornerstone of Jamaica's AML framework. It criminalizes money laundering and provides for the investigation, prosecution, and confiscation of the proceeds of crime. It also places obligations on "financial institutions" and "designated non-financial businesses and professions" (DNFBPs) to implement AML/CFT measures. VASPs, depending on their activities, are typically considered under these categories.
The Terrorism Prevention Act (TPA), 2007 (as amended): This Act provides for the prevention, suppression, and punishment of terrorism, including the financing of terrorism.
The Financial Investigations Division Act (FIDA), 2010: This Act establishes the Financial Investigations Division (FID) as Jamaica's Financial Intelligence Unit (FIU), responsible for receiving, analyzing, and disseminating suspicious transaction reports.
Financial Investigations Division (FID)
Role: The FID serves as Jamaica's Financial Intelligence Unit (FIU). It is the central agency responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) and suspicious activity reports (SARs) from reporting entities across various sectors, including those involved with virtual assets.
Exchange between virtual assets and fiat currencies.
Exchange between one or more forms of virtual assets.
Transfer of virtual assets.
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
Participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset.
FinTech Regulatory Sandbox: The Bank of Jamaica (BOJ) has established a FinTech Regulatory Sandbox which allows innovative financial services, including those involving digital assets (and potentially custody), to be tested under regulatory supervision for a limited period. Firms operating within the sandbox may receive temporary exemptions or waivers from certain regulatory requirements, allowing them to iterate and gain insights. Successful participants may then transition to a full regulatory regime once developed.
Development of VASP Framework: Jamaica is actively working towards establishing a comprehensive regulatory framework for Virtual Asset Service Providers (VASPs). Both the Bank of Jamaica and the Financial Services Commission have acknowledged the need for specific legislation to regulate the burgeoning digital asset space.
FATF Influence: As a member of the CFATF, Jamaica is committed to implementing FATF Recommendations, which require the regulation and supervision of VASPs, including those involved in virtual asset custody. This commitment strongly suggests that future legislation will define VASPs, require their licensing, and set out specific rules for their operation, which will cover custody services.
Ongoing Consultation: The BOJ and FSC have engaged in discussions and consultations regarding the future of digital asset regulation, which will likely lead to amendments to existing legislation or the introduction of new acts to address virtual assets comprehensively. While a specific "custody bill" may not be publicly identified, the broader VASP legislation is expected to address all aspects of VASP activities, including custody.
Evolving Regulatory Landscape: Jamaica does not yet have a comprehensive, dedicated regulatory framework specifically for cryptocurrencies and virtual asset service providers (VASPs). Enforcement would largely fall under existing laws such as anti-money laundering/counter-financing of terrorism (AML/CFT) laws, fraud statutes, or securities regulations if a crypto asset were deemed a security. The lack of specific licensing requirements for most crypto activities means fewer direct "licensing violation" cases.
Bank of Jamaica (BOJ):
Stance on Crypto: Cautious. While supporting innovation, the BOJ has repeatedly warned the public about the risks of unregulated cryptocurrencies, emphasizing their volatility and lack of consumer protection. They have clarified that cryptocurrencies are not legal tender in Jamaica.
Financial Investigations Division (FID):
Stance on Crypto: Actively monitors crypto transactions for potential illicit activities, consistent with global AML/CFT standards. They have issued warnings regarding the use of crypto in scams and money laundering schemes.
Financial Services Commission (FSC):
Stance on Crypto: Has a cautious approach. If a crypto asset were to be deemed a security, it would fall under the FSC's purview for regulation. The FSC has also warned investors about the risks of unregulated investments, which would include many crypto assets.
Identification and Verification of Customers:
Beneficial Ownership Identification:
Purpose and Intended Nature of Business Relationship:
Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship. This includes ensuring that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Implementing a risk-based approach to CDD, meaning:
Simplified Due Diligence (SDD): May be applied where the risk of money laundering or terrorist financing is lower.
Enhanced Due Diligence (EDD): Must be applied in higher-risk situations, such as:
Transactions involving politically exposed persons (PEPs).
Customers from high-risk geographic locations.
Complex, unusual, or large transactions.
Relationships with unknown or unverified virtual asset wallet addresses.
Existing Frameworks & Future Licensing:
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi protocol frontend in/from Jamaica is not explicitly prohibited but carries regulatory ambiguity: if the frontend takes fees or intermediates transactions, it likely falls under the BOJ's VASP AML/CFT guidance and may require sandbox entry or future licensing; a purely non-custodial, fee-free, non-screening frontend may fall outside regulated definitions, but the absence of a comprehensive VASP regime creates enforcement risk.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?