Remote VASP serving residents in Morocco
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is not permitted in Morocco.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Morocco's general AML/CFT framework (Law No. 43-05 on Combating Money Laundering, as amended) applies — though this is by virtue of the prohibition, not a VASP licensing regime.
- If engaged in crypto activity, operators would face potential penalties under Law No. 43-05 for unauthorized financial activities and money laundering risks.
- OFAC sanctions screening obligations apply if the operator touches the U.S. financial system (SDN list screening, transaction monitoring, asset blocking, reporting to OFAC).
- EU sanctions compliance obligations apply if the operator has any EU nexus (screening against EU consolidated sanctions list, geographic restrictions on sanctioned jurisdictions, asset freezing).
- No specific VASP-level AML/CFT rules (CDD/KYC thresholds, SAR filing cadence) have been enacted yet — the proposed future framework would likely impose CDD, ongoing monitoring, SAR to the UTRF (FIU).
Key Restrictions
- Engaging in cryptocurrency transactions constitutes a violation of Moroccan foreign exchange regulations (Office des Changes, 2017) — foreign exchange must go through authorized intermediaries.
- The 2017 warning from Bank Al-Maghrib and the Moroccan Exchange Office effectively prohibits cryptocurrency use for transactions or business operations.
- No legal pathway exists for VASP operations — no license can be applied for or granted.
- Foreign entities wishing to operate in any future regime would almost certainly be required to establish a local legal entity (subsidiary) with physical presence, management, and staff in Morocco.
- Cryptocurrencies are not recognized as legal tender in Morocco.
Key Risks
- Enforcement risk: Operating without authorization is a violation of foreign exchange regulations — can lead to fines and legal action under existing Moroccan law.
- Regulatory ambiguity: No VASP framework exists, but the current official stance is de facto prohibition. A future regulatory bill is in consultation but has not been enacted.
- Travel Rule uncertainty: No implementation for VASPs exists; foreign VASPs serving Moroccan customers operate in a legal grey area.
- Financial and legal risks from official warnings: BAM and AMMC highlight risk of financial loss, fraud, and legal exposure for those dealing in virtual assets.
- Lack of consumer protection: No recourse or protection for users of virtual assets as they fall outside the regulated financial system.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
2017 Warnings: Bank Al-Maghrib (BAM - Morocco's central bank) and the Moroccan Exchange Office issued strong warnings against the use of cryptocurrencies.
The Moroccan Exchange Office (Office des Changes) explicitly declared that engaging in cryptocurrency transactions constitutes a violation of the current foreign exchange regulations, which stipulate that foreign exchange transactions must be conducted through authorized intermediaries and in currencies listed by BAM.
Bank Al-Maghrib reiterated its stance, highlighting the risks associated with virtual currencies, including lack of legal protection, price volatility, and potential use for illicit activities.
Result: This effectively made the use of cryptocurrencies for transactions or business operations illegal in Morocco under existing laws, with no legal pathway for VASP operations.
Intention to Regulate: Recognizing the global rise of cryptocurrencies and the need to address them, Bank Al-Maghrib has publicly announced its intention to introduce a regulatory framework for virtual assets.
Ongoing Work: BAM has been working in consultation with international bodies like the International Monetary Fund (IMF) and the World Bank to draft a comprehensive bill. This work has been ongoing since at least late 2022 and throughout 2023.
No Enacted Law Yet: Despite these efforts, the proposed law has not yet been finalized, approved by the government, or published in the Official Bulletin. Therefore, the historical warnings remain the de facto regulatory environment.
No Specific Licenses: Because there is no specific virtual asset regulatory framework in place, there are no specific licenses required or available for:
Moot Point: This distinction is currently moot as neither a registration nor a licensing regime exists for virtual assets in Morocco. Any future framework would likely determine which approach (or a hybrid) is adopted based on the level of risk and oversight deemed necessary. Given Morocco's conservative financial regulatory approach, a comprehensive licensing regime for VASPs is highly probable once the framework is established.
Local Presence: Foreign entities wishing to operate in Morocco would almost certainly be required to establish a local legal entity (e.g., a subsidiary) and have a physical presence, management, and staff in Morocco.
AML/KYC Obligations: This is virtually guaranteed. Morocco already has robust anti-money laundering and combating the financing of terrorism (AML/CFT) laws (e.g., Law No. 43-05 as amended). Any regulated VASP would be subject to strict AML/CFT obligations, including:
Evidence fact ma.licensing.amlcft-laws-robust not found (may have been renamed).
Prohibition/Lack of Legal Framework: BAM views cryptocurrencies as operating outside of the legal and regulatory framework for financial transactions in Morocco, exposing users to significant risks. This means that operating a Virtual Asset Service Provider (VASP) or conducting significant crypto-related business within Morocco itself could be deemed illegal or at least highly unregulated and risky.
No Direct Implementation for VASPs: However, Morocco has not formally adopted specific legislation to regulate Virtual Asset Service Providers (VASPs) or directly implement the FATF Travel Rule for them. This is because the Moroccan financial authorities have largely prohibited the use and trading of cryptocurrencies and virtual assets within the official financial system.
Official Stance: Bank Al-Maghrib (BAM), the central bank, and the Moroccan Capital Market Authority (AMMC), in conjunction with the Ministry of Economy and Finance, have repeatedly issued warnings against the use of cryptocurrencies, stating that they are not legal tender, lack legal backing, and pose significant risks. This effectively means there are no licensed or regulated VASPs in Morocco to whom the Travel Rule would apply.
Foreign VASPs serving Moroccan customers would be operating in a legal grey area, as their services are considered non-compliant with Moroccan financial regulations.
Financial and Legal Risks: The official warnings from BAM and AMMC highlight the risks of financial loss, fraud, and exposure to legal risks for individuals and entities dealing with virtual assets, implying that engaging in such activities could lead to various legal repercussions, although specific penalties solely for "using crypto" for individuals are not always clearly defined outside of illicit use.
Historical Prohibition: An official ban on the use and trading of cryptocurrencies.
Lack of Legal Tender Status: Cryptocurrencies are not recognized as legal tender.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — a foreign-incorporated remote VASP cannot lawfully serve Moroccan residents under the current de facto prohibition on cryptocurrency transactions (2017 BAM/Office des Changes warnings), with no licensing or registration pathway available and any future regime expected to require a local entity.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?