Remote VASP serving residents in Libya
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is not permitted in Libya.
Verdict Details
- Permitted
- no
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- All financial institutions (and VASPs if legalized) must conduct CDD — obtaining/verifying name, address, DOB, nationality, official ID for individuals; legal form, proof of existence, senior management for entities (Law No. 1 of 2021).
- Beneficial ownership identification required for any customer that is a legal entity (25%+ ownership threshold).
- Ongoing transaction monitoring and scrutiny to ensure transactions match the customer's risk profile.
- Risk-based approach with Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusual large transactions, and transactions involving new/anonymity-favoring technologies.
- Suspicious Transaction Reports (STRs) must be filed promptly with the Libyan Financial Intelligence Unit (LFIU) for any suspicious activity.
- No tipping-off prohibitions apply once an STR is filed.
- Record-keeping: CDD documents, transaction records (including blockchain addresses for virtual asset transactions), STR copies, account files — all must be retained.
- Internal AML/CFT policies, procedures and controls must be implemented.
Key Restrictions
- Cryptocurrencies are effectively banned in Libya under CBL Circular No. 2 of 2018 — dealing in, trading, or possessing virtual currencies is prohibited for all individuals and financial institutions.
- The Central Bank of Libya has consistently reaffirmed the ban since 2018; there is no indication it has been lifted.
- No regulatory framework exists for registration, licensing, or exemption of VASPs or token issuers.
- Commercial banks and other financial institutions are forbidden from facilitating cryptocurrency transactions.
- Cross-border remote servicing of Libyan residents in crypto would directly violate the CBL's prohibitory guidance.
Key Risks
- Total prohibition on cryptocurrency activities means any remote VASP operation serving Libyan residents carries risk of enforcement under AML/CFT laws (Law No. 1 of 2021) for illicit financial activity.
- Limited regulatory transparency and enforcement capacity in Libya creates ambiguity but does not reduce legal exposure — the ban is clear.
- No legal pathway to compliance — there is no licensing or registration mechanism to legitimize operations.
- CBL warnings and the 2018 circular constitute the primary enforcement mechanism; violators face potential penalties under Libyan law for illegal financial activities.
- Political instability and lack of accessible English-language legal resources increase operational and legal risk assessment difficulty.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 1 of 2021 on Anti-Money Laundering and Combating the Financing of Terrorism (Amending and replacing earlier laws like Law No. 2 of 2005).
For Individuals: Obtaining and verifying name, permanent address, date of birth, nationality, and official identification documents (e.g., national ID, passport).
For Legal Entities/Arrangements: Obtaining and verifying name, legal form, proof of existence, powers that regulate and bind the entity, and the names of relevant persons having a senior management position.
Beneficial Ownership: Identifying and verifying the ultimate beneficial owner (UBO) of customers who are legal entities or arrangements, typically individuals who own or control 25% or more of the entity's shares or voting rights, or otherwise exercise control through other means.
Purpose and Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship or occasional transaction.
Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship, to ensure that the transactions are consistent with the obliged entity’s knowledge of the customer, their business, and risk profile.
Risk-Based Approach: Applying CDD measures based on a risk assessment of the customer, business relationship, or transaction. Enhanced Due Diligence (EDD) would be required for higher-risk situations, such as:
Complex, unusually large transactions, or unusual patterns of transactions that have no apparent economic or visible lawful purpose.
Transactions involving new technologies or products that favor anonymity.
VASPs, if regulated, would be obliged to report any suspicious transactions to the Financial Intelligence Unit (FIU).
Reporting Obligation: Any transaction, attempted transaction, or activity that raises suspicions of money laundering or terrorist financing must be reported promptly.
No Tipping-Off: Prohibitions on "tipping off" the customer or any third party that an STR has been made or that a money laundering/terrorist financing investigation is underway.
Internal Controls: Implementation of internal policies, procedures, and controls for identifying and reporting suspicious activities.
Customer Due Diligence Records: All documents and information obtained during the CDD process (identification documents, beneficial ownership information).
Transaction Records: Records of all transactions, including amounts, currencies, dates, and parties involved. This would be particularly critical for virtual asset transactions, including blockchain addresses.
STRs: Copies of all suspicious transaction reports submitted.
Account Files and Business Correspondence: Relevant documentation related to customer accounts and business relationships.
Central Bank of Libya (CBL) Circular No. 2 of 2018:
Content: This is the most significant directive. It explicitly warned against dealing in virtual currencies due to the absence of a regulatory framework, high risks, and potential for fraud, money laundering, and terrorism financing. It effectively banned commercial banks and other financial institutions from processing transactions related to cryptocurrencies.
General Prohibition: All virtual currencies are generally subject to the same prohibitory or highly restrictive guidance issued by the CBL. The CBL does not distinguish based on the underlying nature or rights conferred by the token; rather, it focuses on the medium of exchange itself being unregulated and risky.
Evidence fact ly.aml.cbl-warnings-the-central-bank-of-libya not found (may have been renamed).
Unregulated and Discouraged: The CBL has consistently warned against engaging in any form of dealing, exchanging, or trading of virtual currencies.
AML/CFT Prosecution: Any use of cryptocurrencies in illicit activities (e.g., money laundering, financing terrorism, fraud) would fall under Libya's existing Anti-Money Laundering and Combating the Financing of Terrorism laws. While these laws are not crypto-specific for securities classification, they provide a legal basis for prosecuting individuals involved in illicit financial activities, regardless of the asset used.
None Exist: There are no established registration or exemption requirements for token issuers in Libya. This is primarily because the issuance or facilitation of trading such tokens is not a recognized or permitted activity under current regulations. The CBL's guidance effectively makes it unfeasible or illegal for entities to operate in this space.
Lack of Legal Basis: Without a legal framework that recognizes and regulates crypto assets, there is no mechanism for issuers to seek registration or exemptions.
Entity Targeted: All individuals and financial institutions within Libya (general ban, not a specific entity). Violation Type: Dealing in, trading, or possessing cryptocurrencies. Penalty Amount: Not applicable to the ban itself, but potential penalties under Libyan law for illegal financial activities could include fines and imprisonment.
Outcome: Cryptocurrencies remain illegal in Libya.
Focus on Other Crimes: Law enforcement may prioritize other forms of financial crime or security threats.
Technical Capacity: Regulators and law enforcement might lack the specialized technical capacity to track, investigate, and prosecute complex cryptocurrency-related offenses effectively.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
No — remote VASP service to Libyan residents is not permitted; the Central Bank of Libya's Circular No. 2 of 2018 effectively bans all dealing in, trading, or possession of virtual currencies, and no licensing or registration pathway exists to legalize such activity.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?