← Regulations / Kuwait / Operating Models / CEX

Centralized exchange in Kuwait

Order-book exchange that takes custody of user assets and matches trades between users.

Not permitted AI-Generated · Unreviewed

CEX is not permitted in Kuwait.

Verdict Details

Permitted
no
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Full AML/KYC compliance under Law No. 106 of 2013 (as amended by Law No. 37 of 2020), including customer due diligence, transaction monitoring, suspicious transaction reporting, and record-keeping in line with FATF recommendations
  • Travel Rule: For transfers between two VASPs — no de minimis threshold; full originator and beneficiary information must always be collected and transmitted
  • Travel Rule: For transfers involving non-custodial wallets (unhosted wallets) — threshold of USD/EUR 1,000 or equivalent in virtual assets
  • Collect and store originator/beneficiary information (names, wallet addresses, national ID/passport numbers, physical addresses)
  • Transmit required information to beneficiary VASP immediately and securely
  • Screen transactions in real time for AML/CFT risks, including sanctions screening
  • Implement a risk-based approach to identify and mitigate ML/TF risks
  • Maintain records of all transaction information for at least five years
  • Administrative sanctions by CBK: fines, suspension/revocation of license, restrictions on operations, public censure
  • Criminal penalties: imprisonment and substantial monetary fines for ML/TF offenses

Key Restrictions

  • Absolute prohibition: CBK, CMA, MOCI, and the Insurance Regulatory Unit jointly prohibit regulated financial institutions from dealing in, facilitating, or providing services related to cryptocurrencies or virtual assets
  • No legal framework exists for licensing, supervision, or operation of VASPs in Kuwait
  • Public companies are prohibited from offering crypto services
  • Local banks and financial institutions licensed by the CBK are explicitly banned from dealing in or providing any services related to virtual assets
  • The ban covers issuance, trading, dealing in cryptocurrencies, and using crypto as a payment method
  • Even if a licensing framework were contemplated, requirements would include locally incorporated entity, physical presence, local management/compliance officers, sufficient capital, robust cybersecurity, and consumer protection mechanisms

Key Risks

  • Outright prohibition means any centralized exchange operating in or targeting Kuwait residents faces regulatory enforcement action including license revocation and fines
  • Regulators (CBK, CMA, MOCI) acted in concert to issue the ban — no regulatory pathway or exception exists
  • Enforcement risk is high: proactive bans with monitoring (including electrical grid monitoring for mining) signal active enforcement posture
  • No VASP licensing regime exists — even compliant operators have no route to authorization
  • The ban aligns with FATF-driven consumer protection and ML/TF concerns, so international regulatory pressure may increase over time

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Central Bank of Kuwait (CBK): Prohibits the banking sector and regulated companies from trading in cryptocurrencies, facilitating related transactions, and accepting crypto for e-payments. The CBK also leads public awareness campaigns warning consumers about crypto risks.

licensing 20% confidence

Capital Markets Authority (CMA): Enforces the absolute prohibition on virtual currencies, ensures public companies do not offer crypto services, and issued the primary ban circular in July 2023.

licensing 20% confidence

Kuwait's Insurance Regulatory Unit: Issued a circular contributing to the nationwide prohibition and ensures insurance sector entities comply.

licensing 20% confidence

Ministry of Commerce and Industry: Warns consumers about cryptocurrency risks.

licensing 20% confidence

Ministry of Electricity: Supports enforcement by monitoring electrical grids to identify illegal crypto mining operations.

licensing 60% confidence

Prohibit financial institutions under their supervision from dealing in cryptocurrencies or virtual assets, or providing services related to them.

licensing 60% confidence

Do not provide a legal framework for the licensing, supervision, or operation of VASPs.

licensing 60% confidence

This circular explicitly prohibits local banks and financial institutions licensed by the CBK from dealing in, or providing any services related to, virtual assets. It cites risks like market manipulation, financial crime, operational risk, cyber security risk, and price volatility.

licensing 60% confidence

AML/KYC Compliance: Strict adherence to anti-money laundering (AML) and know-your-customer (KYC) regulations, including customer due diligence, transaction monitoring, suspicious transaction reporting, and record-keeping, in line with FATF recommendations (as Kuwait is a member of the FATF).

licensing 60% confidence

Local Presence: Typically, a locally incorporated entity and a physical presence would be required, along with local management and compliance officers.

licensing 60% confidence

Capital Requirements: Sufficient capital to ensure the stability and solvency of the VASP.

licensing 60% confidence

Cybersecurity & Data Protection: Robust measures to protect customer assets and data.

licensing 60% confidence

Consumer Protection: Mechanisms for dispute resolution and transparency.

aml 20% confidence

Law No. 106 of 2013 regarding Anti-Money Laundering and Combating the Financing of Terrorism.

aml 20% confidence

Law No. 37 of 2020 amending Law No. 106 of 2013.

travel-rule 60% confidence

USD/EUR 1,000 (or the equivalent in virtual assets or other currency) for transfers between non-custodial wallets (unhosted wallets) or when one VASP is involved.

travel-rule 60% confidence

No de minimis threshold for transfers between two VASPs. In such cases, full originator and beneficiary information must always be collected and transmitted, regardless of the amount.

travel-rule 60% confidence

Collect and Store Information: Obtain and hold accurate and meaningful originator and beneficiary information (names, account numbers/wallet addresses, physical addresses, national ID numbers/passport numbers, etc.) for virtual asset transfers.

travel-rule 60% confidence

Transmit Information: Transmit the required originator and beneficiary information to the beneficiary VASP (or to the beneficiary directly in the case of unhosted wallets) immediately and securely.

travel-rule 60% confidence

Safeguard Information: Ensure the security and confidentiality of the collected information in compliance with data protection laws.

travel-rule 60% confidence

Screen Transactions: Conduct real-time monitoring and screening of virtual asset transactions for potential AML/CFT risks, including sanctions screening.

travel-rule 60% confidence

Risk-Based Approach: Implement a risk-based approach to identify and mitigate money laundering and terrorist financing risks associated with virtual asset activities.

travel-rule 60% confidence

Record Keeping: Maintain records of all transaction information for at least five years, as per general AML/CFT requirements.

travel-rule 60% confidence

Administrative Sanctions: Imposed by the Central Bank of Kuwait, such as fines, suspension or revocation of VASP licenses, restrictions on operations, and public censure.

travel-rule 60% confidence

Criminal Penalties: Imprisonment and substantial monetary fines for individuals and legal entities found guilty of money laundering or terrorist financing offenses, or for serious breaches of AML/CFT obligations. These penalties can be severe, reflecting the seriousness of financial crimes.

travel-rule 60% confidence

Central Bank of Kuwait Circular No. 2/QR/2023 on AML/CFT Framework for Virtual Asset Service Providers (VASPs) (issued February 28, 2023).

enforcement 60% confidence

Entity Targeted: All regulated financial institutions, including banks, investment companies, financial services firms, and virtual asset service providers (VASPs) licensed in Kuwait. This effectively targets the activity itself within the regulated sector. Violation Type: Engaging in any virtual asset activities, including:.

enforcement 60% confidence

Penalty Amount: Not a specific fine, but a prohibition. The "penalty" for regulated entities found to be non-compliant with this ban would be regulatory sanctions, including license revocation, operational restrictions, and potentially fines under existing financial laws.

enforcement 60% confidence

Outcome: All financial institutions supervised by the CMA, CBK, and MOCI are prohibited from providing virtual asset services or engaging in crypto-related activities. The ban was issued in the context of money laundering, terrorist financing risks, and consumer protection concerns, aligning with the recommendations of international bodies like the Financial Action Task Force (FATF).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

No — centralized exchanges are prohibited in Kuwait under a blanket ban jointly enforced by the CBK, CMA, MOCI, and the Insurance Regulatory Unit, with no licensing framework or legal pathway available for VASP operations.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?