← Regulations / Cambodia / Operating Models / Remote VASP

Remote VASP serving residents in Cambodia

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Not permitted AI-Generated · Unreviewed

Remote VASP is not permitted in Cambodia.

Verdict Details

Permitted
no
Local entity required
No
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • KYC/CDD: Identify and verify customers using reliable independent source documents (national ID, passport, proof of incorporation, beneficial ownership for >25% ownership).
  • Enhanced Due Diligence (EDD): Required for high-risk customers (PEPs, high-risk jurisdictions, complex/large transactions, anonymity-prone tech).
  • Suspicious Transaction Reporting (STR): Report promptly (within 24-48 hours) to the Cambodia Financial Intelligence Unit (CAFIU) if suspicion arises — no minimum threshold.
  • No-tipping-off prohibition: VASPs and employees cannot disclose STR filings to customers or third parties.
  • Sanctions screening: Must screen customers and transactions against the UN Consolidated List (legally binding); practical necessity to screen OFAC SDN and EU sanctions lists due to correspondent banking dependencies.
  • Ongoing transaction monitoring and periodic CDD refreshes required.
  • Record-keeping: Maintain transaction and CDD records for a specified period under the AML/CFT Law.

Key Restrictions

  • The issuance, circulation, and trading of cryptocurrencies and other virtual currencies are deemed illegal unless specifically authorized by the National Bank of Cambodia (NBC).
  • No VASP licensing regime exists — there is no lawful pathway to register or license a remote VASP service.
  • The 2018 Joint Announcement (NBC, SERC, Police) prohibits financial institutions and the public from buying, selling, trading, or using cryptocurrencies; unlicensed operators face prosecution under applicable laws.
  • No specific custodial or VASP license frameworks have been established — activities sit in a legally prohibited gray area.
  • The Travel Rule (FATF Recommendation 16) has not been implemented for VASPs, as there is no recognized VASP category.

Key Risks

  • Prosecution risk: Any person/entity issuing, circulating, or trading virtual currencies without NBC authorization can be prosecuted under applicable Cambodian laws.
  • Enforcement precedent: The NBC, SERC, and Police jointly enforce the ban; the ban has been continuously reiterated (2018, 2022, 2023-2024) with no signs of relaxation.
  • FATF grey-list pressure: Cambodia was on the FATF grey list and remains under heightened monitoring; virtual asset activity is a continued focus — regulatory crackdowns may intensify.
  • Correspondent banking risk: Non-compliance with OFAC/EU sanctions by a Cambodia-facing VASP could trigger termination of correspondent banking relationships for local partners.
  • Legal ambiguity: No clear distinction between prohibited 'trading/circulation' and permitted blockchain use — any VASP activity could be deemed illegal.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 40% confidence

"The issuance, circulation, and trading of cryptocurrencies and other virtual currencies in Cambodia are illegal activities."

custody 40% confidence

It warned the public against engaging in such activities, citing risks of fraud, money laundering, and financial instability.

custody 40% confidence

It explicitly stated that "any person or entity that issues, circulates, or trades cryptocurrencies or other virtual currencies without obtaining a license from the National Bank of Cambodia and other relevant authorities, shall be prosecuted in accordance with the applicable laws of the Kingdom of Cambodia."

enforcement 60% confidence

Regulator Name: National Bank of Cambodia (NBC), Securities and Exchange Regulator of Cambodia (SERC), General-Commissariat of National Police (jointly issued original ban).

enforcement 60% confidence

Date: The original ban was issued in 2018/2019. Warnings have been continuously reiterated, including within the last three years.

enforcement 60% confidence

Entity Targeted: The general public, unauthorized individuals/entities attempting to circulate, trade, or develop cryptocurrencies. Violation Type: Circulating, trading, mining, or using unauthorized virtual currencies, which are not recognized as legal tender or financial products in Cambodia. Penalty Amount: Not applicable for public warnings. Criminal penalties would apply for engaging in illegal financial activities or fraud.

aml 60% confidence

Prohibition on Issuance, Trading, and Use: In May 2018, the NBC, in collaboration with the Securities and Exchange Regulator of Cambodia (SERC) and the General-Commissariat of National Police, issued a joint public announcement prohibiting financial institutions and the public from buying, selling, or trading cryptocurrencies.

aml 60% confidence

Legal Reference: Joint Public Announcement on the Management of Digital Currency (May 2018) by the National Bank of Cambodia, Securities and Exchange Commission of Cambodia, and the General-Commissariat of National Police. (Direct English URL often difficult to find; commonly cited as "Joint Announcement on Digital Currency, 2018").

travel-rule 40% confidence

Not explicitly adopted for VASPs: Cambodia has not yet enacted specific legislation or regulations that define VASPs according to FATF standards, license them, and mandate the Travel Rule requirements directly for them.

travel-rule 40% confidence

The government has historically issued warnings against unregulated cryptocurrency activities, which suggests that unauthorized operations could lead to legal action, fines, or imprisonment under existing laws governing financial crimes or unauthorized financial services.

licensing 60% confidence

Key Provisions: Defines money laundering and terrorist financing offenses, establishes the legal framework for identifying, verifying, and reporting suspicious activities, and outlines penalties for non-compliance. It also identifies "reporting entities" (or "obliged entities") that must comply. VASPs, by the nature of their services, are generally considered reporting entities under this broad definition, especially concerning the movement of value.

licensing 60% confidence

Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds or other assets, regardless of the amount, are derived from criminal activity, or are related to terrorist financing, must report promptly.

licensing 60% confidence

Timeline: Reports must be made without delay, typically within 24-48 hours of forming the suspicion.

licensing 60% confidence

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been or will be submitted.

licensing 60% confidence

Identification and Verification of Customers:

licensing 60% confidence

Enhanced Due Diligence (EDD): Required for high-risk customers, business relationships, or transactions (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, new technologies with inherent anonymity).

custody 40% confidence

There are no specific custodial licenses for cryptocurrencies/digital assets in Cambodia because the underlying activities (issuance, circulation, trading) are deemed illegal if not authorized by NBC. Since NBC has not authorized private cryptocurrency activities, no licensing mechanism exists for custody.

enforcement 60% confidence

Example of recent reinforcement (2022): The NBC Governor reinforced the ban and warned against the risks of digital assets in various forums.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Not permitted — a remote VASP serving Cambodian residents from abroad would be operating unlawfully under the 2018 Joint Announcement prohibiting unlicensed cryptocurrency issuance, trading, and circulation, and no VASP licensing regime exists to provide a lawful pathway.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?