Remote VASP serving residents in Latvia
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Latvia with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Registration with the Financial Intelligence Unit (FIU) of Latvia as a VASP under the AML/CTPF Law (Nozagto noziedzīgi iegūtu līdzekļu legalizācijas un terorisma finansēšanas novēršanas likums)
- Conduct comprehensive risk assessment of money laundering and terrorism financing risks
- Implement Client Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures for identifying and verifying clients and beneficial owners
- Establish transaction monitoring systems for detecting suspicious activities
- Implement reporting procedures for reporting suspicious transactions to the FIU
- Maintain records for a minimum of 5 years
- Provide regular AML/CTPF training for employees
- Appoint a board member or employee as the responsible AML Officer
- Ensure fitness and propriety of management and beneficial owners
- Post-MiCA (from 30 December 2024): Transition to full CASP authorization from the Bank of Latvia, including prudential safeguards (capital requirements), specific client asset safekeeping rules with strict segregation of client crypto-assets, and detailed IT/security arrangements
Key Restrictions
- Operator must be a legal entity registered in Latvia (typically an SIA – Limited Liability Company)
- Operator must have its registered office in Latvia — pure remote/cross-border service from abroad without local entity is not permitted
- Registration with the FIU is required before commencing operations — no 'serve first, register later' allowance
- Post-MiCA (from 30 December 2024): Full CASP license from the Bank of Latvia will be required, with heightened prudential and organizational requirements
Key Risks
- Enforcement risk for unlicensed remote operators: operating without registration constitutes a violation of the AML/CTPF Law, exposing the operator to warnings, administrative measures, or significant fines, and potentially withdrawal of any ability to operate
- Post-MiCA transition risk: operators must upgrade from AML registration to a full MiCA license by December 2024, with new capital and segregation requirements — failure to transition may result in loss of authorization
- Regulatory ambiguity: limited publicly reported enforcement precedents specific to crypto businesses, making penalty magnitude hard to predict
- No explicit segregation or insurance requirements under current regime, but post-MiCA introduces strict client asset segregation — operators must anticipate higher operational costs
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Financial Intelligence Unit (FIU) of Latvia (Finanšu izlūkošanas dienests - FID): The primary authority responsible for registering and supervising VASPs for AML/CTPF compliance.
Current Regime (Pre-MiCA): Registration. Latvia requires entities engaged in virtual asset services to register with the FIU. This registration is primarily an AML/CTPF compliance obligation, meaning the focus is on preventing money laundering and terrorist financing, rather than prudential supervision (e.g., capital adequacy for consumer protection, market integrity, etc., which is typical of a full licensing regime).
The applicant must be a legal entity registered in Latvia (typically a Limited Liability Company – SIA).
The company must have its registered office in Latvia.
AML/CTPF Internal Control System (ICS):
Relevant Law (Latvian): https://likumi.lv/ta/id/296767-no-noziedzigi-iegutu-lidzeklu-legalizacijas-un-terorisma-un-propagandas-finansesanas-preventijas-likums
Future Regime (Post-MiCA): Licensing. Once MiCA fully applies to VASPs (expected December 2024), Latvia will transition to a comprehensive licensing regime under MiCA. This will involve more stringent requirements, including prudential safeguards, operational resilience, and specific disclosures, and will likely be overseen by the Bank of Latvia (FCMC).
Requirement: Entities providing services of custodial wallet providers (which includes safekeeping or administration of virtual assets or instruments enabling control over virtual assets on behalf of clients) are considered Virtual Asset Service Providers (VASPs). They are required to register with the Latvian Financial Intelligence Unit (FID).
Financial Intelligence Unit of Latvia (FID) website on VASPs:
Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA):
Requirement: Under MiCA, providing "custody and administration of crypto-assets on behalf of clients" will require a full authorization (license) from the competent authority in the home Member State – in Latvia, this will be the Bank of Latvia (Latvijas Banka).
Authorization Process: CASPs will need to meet stringent requirements, including:
Mandate: MiCA explicitly mandates strict segregation of client crypto-assets.
Penalty Amount: Varies depending on the severity of the violation, ranging from warnings and administrative measures to significant fines. However, publicly reported large fines against pure crypto businesses are scarce. Outcome: Remedial actions required, potential fines, or in severe cases, withdrawal of registration/license.
Outcome: Remedial actions required, potential fines, or in severe cases, withdrawal of registration/license.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP cannot serve residents of Latvia from abroad without establishing a local legal entity (SIA) registered in Latvia, registering with the FIU for AML/CTPF compliance, and transitioning to a full MiCA CASP license from the Bank of Latvia by December 2024.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?