Crypto-funded debit card in Kazakhstan
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Kazakhstan with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- AML/KYC adherence to AIFC AML Rules aligned with FATF recommendations (kz.licensing.amlkyc-anti-money-laundering-know-your)
- Screening customers against UN Security Council Consolidated List of sanctioned individuals/entities (kz.aml.requirement-as-a-un-member, kz.aml.compliance-vasps-must-screen-customers)
- Screening against OFAC SDN List if dealing with U.S. persons or using USD-denominated settlement (kz.aml.requirement-while-ofac-sanctions-are, kz.aml.compliance-vasps-must-screen-against)
- Screening against EU Consolidated Financial Sanctions List if utilizing EU financial infrastructure or serving EU customers (kz.aml.requirement-similar-to-ofac-eu, kz.aml.compliance-vasps-must-screen-against)
- Compliance with the national AML/CFT Law No. 191-IV dated August 28, 2009, enforced by the Financial Monitoring Agency (FMA) (kz.aml.law-of-the-republic-of, kz.aml.financial-monitoring-agency-fma-the)
- Adherence to Law on Digital Assets (No. 4-VIII dated February 6, 2023) integrating VASP activities into AML framework (kz.aml.law-of-the-republic-of)
- Ongoing capital maintenance sufficient to cover regulatory capital requirements (base capital + operational risk) (kz.licensing.ongoing-capital-firms-must-maintain)
Key Restrictions
- Must be incorporated as a legal entity within the AIFC with a physical office and key personnel based there (kz.licensing.must-be-incorporated-or-established, kz.licensing.maintain-a-physical-office-presence, kz.licensing.have-key-personnel-eg-ceo)
- Requires a PSP license (min USD 50,000–200,000 capital) for fiat-to-crypto and crypto-to-fiat conversion/on-off-ramp services (kz.licensing.key-services-fiat-to-crypto-onoff-ramps-crypto, kz.licensing.payment-services-provider-psp-varies)
- May also require a Custodian (Digital Assets) license (min USD 300,000 capital) if holding customer crypto keys/wallets (kz.licensing.custodian-digital-assets-typically-usd)
- Crypto-to-fiat conversion is regulated as a 'payment service' under AFSA's PSP framework — off-ramp at point of sale is a licensed activity (kz.licensing.definition-while-not-exclusively-for)
- Use of cryptocurrencies for payments is prohibited outside the AIFC; the card program must operate within or originate from the AIFC legal framework (kz.tax.general-republic-of-kazakhstan-the)
- Stablecoins used as funding source are classified as 'secured digital assets' or 'asset-referenced tokens' under AIFC rules, requiring issuer backing and disclosure obligations (kz.stablecoin.secured-digital-asset-a-digital, kz.stablecoin.within-the-aifc-stablecoins-are)
Key Risks
- Outside-AIFC crypto activity remains illegal — any slippage in customer-facing legitimacy (marketing, card issuance geography) could trigger enforcement by the Financial Monitoring Agency (kz.enforcement.afm-kazakhstan-clamps-down-on)
- National Bank of Kazakhstan maintains a cautious stance on crypto payments; the Digital Tenge (CBDC) is the state-preferred stable digital currency, creating regulatory uncertainty for private stablecoin-based products (kz.stablecoin.the-national-bank-of-kazakhstan, kz.stablecoin.interaction-the-nbk-has-stated)
- Enforcement precedent for blocking unregistered crypto exchange websites and prosecution of operators (kz.enforcement.entity-targeted-operators-and-websites)
- Partner bank/BIN-sponsor arrangements must be with an AIFC-licensed entity or a Kazakh bank comfortable with crypto off-ramp flows — limited local banking appetite
- Tax treatment of card transactions (crypto-to-fiat-to-goods) is complex: each taxable event (crypto sale, fiat spend) may trigger 10% IIT or 20% CIT obligations for Kazakh-resident holders (kz.tax.general-principle-gains-derived-from, kz.tax.general-principle-profits-from-the)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Definition: While not exclusively for digital assets, a PSP license is required for firms handling fiat-to-crypto and crypto-to-fiat conversions, remittances, or other payment-related services where digital assets are involved in the transaction flow. AFSA's rules define specific "payment services" that require licensing, and these can extend to services involving digital assets.
Key Services: Fiat-to-crypto on/off-ramps, crypto remittances, facilitating payments using stablecoins or other digital assets.
License Type: Providing Payment Services Provider (PSP) services.
Payment Services Provider (PSP): Varies depending on the specific payment services and tiers of authorization, ranging from USD 50,000 to USD 200,000 (or KZT equivalent) for higher-tier PSPs.
Must be incorporated or established as a legal entity within the AIFC.
Maintain a physical office presence in the AIFC.
Have key personnel (e.g., CEO, Compliance Officer) primarily based in the AIFC.
Custodian (Digital Assets): Typically USD 300,000 (or KZT equivalent).
License Type: Providing Custodian (Digital Assets) services.
AML/KYC (Anti-Money Laundering / Know Your Customer):
Adherence to AIFC AML Rules, which are aligned with FATF (Financial Action Task Force) recommendations.
Ongoing Capital: Firms must maintain capital sufficient to cover their regulatory capital requirements (base capital plus operational risk requirements) at all times.
Requirement: As a UN member state, Kazakhstan is obligated to implement all UN Security Council resolutions imposing sanctions. These are universally binding.
Compliance: VASPs must screen customers and transactions against the UN Security Council Consolidated List (individuals and entities associated with terrorism and proliferation of weapons of mass destruction, and other sanction programs).
Requirement: While OFAC sanctions are primarily U.S. law, their extra-territorial reach is significant. Any VASP that deals with U.S. persons (citizens, residents, entities), uses U.S. financial systems (e.g., for USD transactions), or handles U.S.-origin technology or services, falls under OFAC's jurisdiction. Given the global nature of crypto, avoiding a U.S. nexus can be challenging.
Compliance: VASPs must screen against OFAC's Specially Designated Nationals And Blocked Persons List (SDN List) and other relevant sanctions lists specific to programs (e.g., Russia/Ukraine, Iran, North Korea).
Requirement: Similar to OFAC, EU sanctions have extra-territorial implications for any entity or individual doing business with EU persons, entities, or utilizing EU financial infrastructure. Many international crypto exchanges and platforms have an EU presence or serve EU customers.
Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.
Financial Monitoring Agency (FMA): The FMA is Kazakhstan's Financial Intelligence Unit (FIU) and the primary body responsible for enforcing AML/CFT laws, including monitoring compliance with international sanctions.
Secured Digital Asset: A digital asset that certifies property rights to specific goods, services, or property, including money, and is backed by real assets or obligations of the issuer.
Within the AIFC, stablecoins are most likely to be classified as "Asset-Referenced Tokens" or potentially "Security Tokens," depending on their specific design and the rights they convey.
Interaction: The NBK has stated that the Digital Tenge aims to enhance payment efficiency and potentially integrate with innovative financial products. While private stablecoins are not explicitly prohibited, the CBDC will serve as the primary official stable digital currency. The NBK's future regulations may clarify the complementary or competitive roles of private stablecoins relative to the Digital Tenge. It's likely that private stablecoins, if allowed to operate broadly, would be subject to strict oversight to prevent systemic risks and ensure consumer protection, potentially requiring interoperability with the CBDC infrastructure.
General Republic of Kazakhstan: The National Bank of Kazakhstan has historically maintained a cautious stance, stating that cryptocurrencies are not legal tender and are generally viewed as digital property or assets. The use of cryptocurrencies for payments is prohibited outside the AIFC.
General Principle: Gains derived from the sale or exchange of digital assets are generally subject to Individual Income Tax (IIT). When a cryptocurrency is sold for a higher price than its acquisition cost, the difference is considered a capital gain.
General Principle: Profits from the sale or exchange of digital assets are subject to Corporate Income Tax (CIT).
Entity Targeted: Operators and websites of unregistered cryptocurrency exchanges and peer-to-peer trading platforms. Violation Type: Unlicensed financial activity, facilitation of illegal financial operations (e.g., fraud, money laundering), violation of financial regulations. Penalty Amount: Not specified as a direct fine in publicly available reports. Outcome: Blocking of website access, criminal charges against individuals involved, seizure of funds (if traceable).
AFM: Kazakhstan clamps down on illegal crypto mining farms (This link provides context on various AFM actions, including illegal crypto-related activities.)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program can operate in Kazakhstan only if structured through an AIFC-licensed entity holding a PSP license (and likely a Custodian license), with full AML/CFT compliance, a local AIFC presence, and careful management of the prohibition on crypto payments outside the AIFC zone.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?