← Regulations / Laos / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Laos

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Conditional AI-Generated · Unreviewed

Self-custodial wallet is conditionally permitted in Laos without local incorporation, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • Self-custodial wallet publishers that do not hold, control, or access user private keys or funds do not trigger VASP classification under current Lao law, as VASPs in Laos are defined under the sandbox framework for entities dealing with custody/transmission of virtual assets.
  • General AML/CFT obligations under the Law on Anti-Money Laundering and Combating the Financing of Terrorism (Law No. 67/NA) attach only to 'reporting entities' (financial institutions, DNFBPs); a non-custodial software publisher is not currently defined as a reporting entity in Laos.
  • The FATF Travel Rule (Recommendation 16) has not been implemented for VASPs in Laos; there is no specific threshold or obligation applicable to non-custodial wallet publishers.
  • No AML registration, CDD, EDD, STR filing, or record-keeping requirements attach to the software-publishing activity alone under current Lao law.

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender in Laos; the Bank of Lao PDR has repeatedly warned the public and financial institutions against using digital assets.
  • Engaging in any regulated virtual-asset activity (custody, exchange, transmission) requires participation in the government's sandbox program under Prime Minister's Order No. 001/PMO — but pure non-custodial software publishing does not fall within that scope.
  • There is no specific consumer-protection or disclosure regime for non-custodial wallet software in Laos; product-liability or general contract law would apply.

Key Risks

  • Regulatory ambiguity: Laos has not comprehensively defined 'Virtual Assets' or 'VASPs' under its AML/CFT framework (per APG Mutual Evaluation Reports), so a non-custodial software publisher operates in a grey area.
  • Enforcement risk: The BOL has issued periodic warnings discouraging crypto use; a future regulatory expansion could retroactively apply obligations to software publishers.
  • Reputational risk: The government has a restrictive stance (crypto not legal tender, pilot/sandbox only); operating openly may attract public scrutiny or business disruption.
  • No clear legal pathway: Without a VASP licensing framework, a non-custodial wallet publisher has no route to formal regulatory recognition or clarity.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

Law on Anti-Money Laundering and Combating the Financing of Terrorism (Law No. 67/NA, dated 17 November 2022): This is the foundational AML/CFT law in Laos, superseding previous versions. It establishes the general obligations for reporting entities, including financial institutions, and covers key aspects of AML/CFT compliance.

licensing 40% confidence

Decree on the Implementation of the Law on Anti-Money Laundering and Combating the Financing of Terrorism (Decree No. 37/GOV, dated 10 February 2020): This decree provides detailed guidance and procedures for implementing the provisions of the AML/CFT Law.

licensing 40% confidence

Instruction on the Management and Supervision of Virtual Assets (Instruction No. 001/BOL, dated 28 January 2022): Issued by the Bank of Lao PDR, this instruction is highly specific to the pilot program for virtual assets. It outlines the regulatory framework, licensing requirements, and ongoing obligations (including AML/KYC) for entities authorized to engage in virtual asset activities (mining, trading platforms, exchanges, etc.). It designates authorized VASPs as reporting entities for AML/CFT purposes.

licensing 40% confidence

Regulatory Approach: Restrictive / Partial Ban (for the public) with Controlled Exceptions.

licensing 40% confidence

For the general public and most businesses, engaging in cryptocurrency trading, exchanges, or financial services is largely prohibited or highly discouraged due to the Bank of the Lao PDR's warnings and notices.

licensing 40% confidence

However, the government has, at times, indicated an openness to pilot projects for specific, state-controlled uses, particularly in areas like cryptocurrency mining to monetize surplus energy, but these are exceptions and not indicative of a liberalization for the broader market.

aml 40% confidence

No, not comprehensively. While Laos has a general AML/CFT law, its framework for VAs and VASPs is still considered insufficient by international standards. The FATF Travel Rule (which stems from FATF Recommendation 15 and its Interpretive Note) requires countries to regulate VASPs for AML/CFT purposes, including implementing obligations to collect and transmit originator and beneficiary information for virtual asset transfers. Laos has yet to establish this comprehensive regulatory regime.

aml 40% confidence

Which VASPs are Covered:

aml 40% confidence

This is the primary challenge. Laos's existing AML/CFT framework, while aiming to combat financial crime, does not yet comprehensively define Virtual Assets (VAs) or Virtual Asset Service Providers (VASPs) to bring them under direct AML/CFT supervision as required by FATF Recommendation 15 and its Interpretive Note.

aml 40% confidence

Therefore, there isn't a clear list of "covered VASPs" that are currently subject to Travel Rule obligations. Any entities dealing with virtual assets operate in a largely unregulated or ambiguous legal environment concerning AML/CFT specifically for virtual assets.

aml 40% confidence

APG Mutual Evaluation Reports for Laos: These reports provide the most authoritative public assessment of Laos's compliance with FATF Recommendations.

aml 40% confidence

The APG 3rd Enhanced Follow-Up Report on Lao PDR (2022), for instance, highlights the ongoing deficiencies in addressing Virtual Assets and VASPs, noting that the country still needs to revise its legal and regulatory framework to ensure VAs and VASPs are adequately covered.

custody 60% confidence

A General Prohibition with Exceptions: Initial stances were restrictive. However, a significant development was the Prime Minister's Order No. 001/PMO, which allowed for a controlled experiment.

custody 60% confidence

The "Sandbox" Approach: The government initiated a pilot program or "sandbox" allowing a limited number of companies to mine and trade cryptocurrencies under strict supervision. This means that any entity engaging in activities that would involve custody must be part of this approved sandbox.

custody 60% confidence

No specific "custodial license" exists. Instead, entities wishing to provide any form of digital asset service that involves holding client funds (even if implicitly, like an exchange) must apply for and obtain a license to participate in the government's digital asset sandbox program.

enforcement 60% confidence

Issuing Official Warnings and Prohibitions: The BOL has repeatedly reminded the public and financial institutions that cryptocurrencies are not legal tender and pose significant risks.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a self-custodial wallet publisher that never holds user private keys or funds does not trigger VASP classification or AML obligations under current Lao law, because Laos has not yet comprehensively defined VASPs or brought non-custodial software under its AML/CFT framework; however, the broader regulatory environment is restrictive (crypto not legal tender, BOL warnings, sandbox-only regime for any regulated activity), creating ambiguity and risk of future regulatory change.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?