Crypto-funded debit card in Kyrgyzstan

Law of the Kyrgyz Republic on Combating the Financing of Terrorism and Legalization (Laundering) of Criminal Proceeds (No. 87, dated July 25, 2011, with subsequent amendments). This law establishes the legal and organizational framework for AML/CFT, defines the obligations of reporting entities, and outlines the role of the financial intelligence unit.

For individuals: Full name, date and place of birth, citizenship, residential address, identification document details (e.g., passport, national ID number). Verification through reliable, independent sources (e.g., government-issued documents, utility bills).

Beneficial Ownership Identification: VASPs must identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer, including those who ultimately own or control the customer, or the person on whose behalf a transaction is being conducted. Thresholds (e.g., 25% ownership or control) typically apply.

Risk-Based Approach: VASPs must adopt a risk-based approach to CDD. This means applying enhanced due diligence (EDD) for higher-risk customers (e.g., Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, complex structures, large transactions) and simplified due diligence (SDD) for lower-risk scenarios where permitted.

Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure that they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

Obligation to Report: If a VASP has grounds to suspect that funds or other property, regardless of the amount, are related to the financing of terrorism or legalization (laundering) of criminal proceeds, it must immediately report such suspicions.

Retention Period: Records must generally be kept for a minimum period of five years from the date of the transaction or the termination of the business relationship.

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that a suspicious transaction report (STR) has been filed, or that an investigation into money laundering or terrorist financing is being conducted.

The State Service for Financial Intelligence (SSFI) under the Ministry of Finance of the Kyrgyz Republic.

Evolving Landscape: The regulatory landscape for virtual assets is constantly evolving globally and in Kyrgyzstan. VASPs should monitor for any new specific laws, regulations, or guidance related to cryptocurrencies issued by the SSFI or the National Bank of the Kyrgyz Republic.

National Bank of the Kyrgyz Republic (NBKR): While the SSFI is the primary AML/CFT supervisor, the NBKR also plays a crucial role in maintaining financial stability and overseeing the financial sector. The NBKR has historically issued warnings regarding the risks of cryptocurrencies. Any future comprehensive regulatory framework for VASPs might involve the NBKR, especially if virtual assets are classified as financial instruments or securities.

Key Legislation: The primary law is the Law of the Kyrgyz Republic No. 200 "On the Turnover of Virtual Assets" dated August 10, 2022. This law provides the legal basis for the regulation of virtual assets and designates VASPs as obliged entities for AML/CFT purposes.

The Law No. 200 "On the Turnover of Virtual Assets" broadly defines and covers entities engaged in activities related to virtual assets. It defines a "Virtual Asset Service Provider" (VASP) as a legal entity carrying out one or more of the following activities for or on behalf of another natural or legal person:

Exchange between virtual assets and fiat currencies.

Core Requirement: VASPs in Kyrgyzstan are required to obtain, hold, and transmit required originator (sender) and beneficiary (receiver) information for virtual asset transfers that meet the specified thresholds.

FATF Standard Threshold: The FATF Travel Rule generally applies to virtual asset transfers (transactions) exceeding USD/EUR 1,000 (or its equivalent in virtual assets) for cross-border transfers and USD/EUR 1,000 (or its equivalent) if the transaction is domestic and not part of a pre-existing business relationship where the customer has been verified. For unhosted wallets, the guidance usually suggests due diligence for transactions above a certain threshold (e.g., USD/EUR 1,000), but the Travel Rule itself focuses on VASP-to-VASP transfers.

It does NOT explicitly classify stablecoins as e-money, payment tokens, or securities. The law distinguishes between "digital tokens" (which can represent property rights, services, etc.) and "digital currencies" (which serve as a medium of exchange). Stablecoins, depending on their design, could potentially be considered a form of "digital currency" or a "digital token" if they represent a claim on an underlying asset.

There is no dedicated licensing regime specifically for stablecoin issuers.

Evidence fact kg.stablecoin.national-bank-of-the-kyrgyz-republic not found (may have been renamed).

No specific regulatory framework exists for stablecoins to guarantee redemption rights.

Virtual Asset Operators (Exchanges): Crypto exchanges operating in Kyrgyzstan are subject to a turnover tax of 0.1% on the volume of transactions they facilitate. This tax is specifically for their services related to the exchange of virtual assets.

Rate: Gains derived from the sale of virtual assets by individuals are likely treated as "other income" and are subject to the Individual Income Tax rate of 10%.

Entity Targeted: Organized groups and individuals operating illegal crypto mining farms. Violation Type: Illegal electricity consumption (theft), illegal entrepreneurship, potential tax evasion. Penalty Amount: Varies. Typically involves confiscation of mining equipment, imposition of fines for stolen electricity, and initiation of criminal proceedings. Exact financial penalties for each individual operation are often not publicly detailed but can amount to millions of KGS in damages to the energy grid. Arrests and potential imprisonment for organizers.

Entity Targeted: The general public, financial institutions, and potential investors. Violation Type: N/A (warnings are preventative, not punitive). The NBKR warns against the risks associated with cryptocurrency, including high volatility, fraud, and the lack of legal tender status. They also emphasize that transactions using crypto are not regulated under Kyrgyz law, except for a specific license requirement for crypto-exchange activities. Penalty Amount: N/A (no direct penalty for warnings).