← Regulations / Kazakhstan / Operating Models / Remote VASP

Remote VASP serving residents in Kazakhstan

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Conditional AI-Generated · Unreviewed

Remote VASP is conditionally permitted in Kazakhstan with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Must comply with Kazakhstan's Law 'On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism' (No. 191-IV dated August 28, 2009).
  • Must adhere to AIFC AML Rules aligned with FATF recommendations.
  • Must screen customers and transactions against the UN Security Council Consolidated List.
  • Must screen against OFAC's SDN List if dealing with U.S. persons or using USD financial systems.
  • Must screen against the EU Consolidated Financial Sanctions List if dealing with EU persons/entities.
  • Must comply with the Law 'On Digital Assets in the Republic of Kazakhstan' (No. 4-VIII dated February 6, 2023).
  • Oversight by the Financial Monitoring Agency (FMA) — Kazakhstan's FIU.

Key Restrictions

  • Must be incorporated as a legal entity within the AIFC (Astana International Financial Centre).
  • Must maintain a physical office presence in the AIFC.
  • Must have key personnel (e.g. CEO, Compliance Officer) primarily based in the AIFC.
  • Must obtain an AFSA license (e.g. Digital Asset Trading Facility, Custodian, PSP, Broker, or Dealer) depending on services offered.
  • Minimum capital requirements apply: DATF/Custodian ~USD 300,000; PSP ranges USD 50,000–200,000.
  • Operating from outside Kazakhstan without a licensed AIFC entity is effectively prohibited and triggers enforcement.

Key Risks

  • Unlicensed remote operation carries significant enforcement risk — Kazakhstan has actively blocked websites and pursued criminal cases against unregistered exchanges and P2P platforms.
  • Historical enforcement actions against unregistered crypto mining farms (50+ shut down) and illegal exchanges show a pattern of aggressive enforcement.
  • Regulatory ambiguity exists for entities that do not fall neatly into AIFC categories (e.g. DeFi protocols, non-custodial wallet providers).
  • AIFC licensing is a multi-month, capital-intensive process with ongoing supervision by AFSA.
  • Dual oversight by AFSA (AIFC) and FMA (national) creates compliance complexity.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Must be incorporated or established as a legal entity within the AIFC.

licensing 60% confidence

Maintain a physical office presence in the AIFC.

licensing 60% confidence

Have key personnel (e.g., CEO, Compliance Officer) primarily based in the AIFC.

licensing 60% confidence

License Type: Operating a Digital Asset Trading Facility (DATF).

licensing 60% confidence

License Type: Providing Custodian (Digital Assets) services.

licensing 60% confidence

License Type: Providing Payment Services Provider (PSP) services.

licensing 60% confidence

Broker (Digital Assets): Acting as an agent for clients in buying and selling digital assets.

licensing 60% confidence

Dealer (Digital Assets): Dealing in digital assets as a principal, either buying or selling for one's own account.

licensing 60% confidence

Digital Asset Trading Facility (DATF): Typically USD 300,000 (or KZT equivalent) for non-dealing DATFs. If the DATF also acts as a Dealer, higher capital may be required.

licensing 60% confidence

Custodian (Digital Assets): Typically USD 300,000 (or KZT equivalent).

licensing 60% confidence

Payment Services Provider (PSP): Varies depending on the specific payment services and tiers of authorization, ranging from USD 50,000 to USD 200,000 (or KZT equivalent) for higher-tier PSPs.

licensing 60% confidence

Adherence to AIFC AML Rules, which are aligned with FATF (Financial Action Task Force) recommendations.

aml 60% confidence

Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.

aml 60% confidence

Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.

aml 60% confidence

Financial Monitoring Agency (FMA): The FMA is Kazakhstan's Financial Intelligence Unit (FIU) and the primary body responsible for enforcing AML/CFT laws, including monitoring compliance with international sanctions.

aml 60% confidence

Requirement: As a UN member state, Kazakhstan is obligated to implement all UN Security Council resolutions imposing sanctions. These are universally binding.

aml 60% confidence

Requirement: While OFAC sanctions are primarily U.S. law, their extra-territorial reach is significant. Any VASP that deals with U.S. persons (citizens, residents, entities), uses U.S. financial systems (e.g., for USD transactions), or handles U.S.-origin technology or services, falls under OFAC's jurisdiction. Given the global nature of crypto, avoiding a U.S. nexus can be challenging.

aml 60% confidence

Requirement: Similar to OFAC, EU sanctions have extra-territorial implications for any entity or individual doing business with EU persons, entities, or utilizing EU financial infrastructure. Many international crypto exchanges and platforms have an EU presence or serve EU customers.

enforcement 60% confidence

Entity Targeted: Operators and websites of unregistered cryptocurrency exchanges and peer-to-peer trading platforms. Violation Type: Unlicensed financial activity, facilitation of illegal financial operations (e.g., fraud, money laundering), violation of financial regulations. Penalty Amount: Not specified as a direct fine in publicly available reports. Outcome: Blocking of website access, criminal charges against individuals involved, seizure of funds (if traceable).

enforcement 60% confidence

Outcome: Websites were blocked, and criminal investigations were launched against individuals involved in operating these platforms. This reinforces Kazakhstan's stance against any crypto trading outside the regulated AIFC framework.

enforcement 60% confidence

Entity Targeted: Numerous unregistered cryptocurrency mining farms operated by various individuals and organizations across the country. Violation Type: Unlicensed business activity, illegal electricity consumption, tax evasion, sometimes money laundering, and operating outside the legal framework for crypto mining. Outcome: Shut down of operations, seizure of equipment (hundreds of thousands of mining devices), criminal charges against operators, and significant administrative fines. While individual penalty amounts for each entity are not publicly disclosed, the total economic impact and asset seizures were substantial. For instance, in 2022 alone, the AFM reported stopping 51 illegal mining farms and confiscating equipment worth billions of tenge.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a remote VASP cannot serve Kazakhstan residents from abroad without a local presence; it must establish a licensed entity within the AIFC (Astana International Financial Centre), maintain a physical office and local key personnel, meet capital requirements (USD 50k–300k depending on license type), and comply with comprehensive AIFC AML/CFT rules and national AML law, with significant enforcement risk for unlicensed cross-border operations.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?