DeFi protocol frontend in Moldova
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Moldova with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification (name, date of birth, address, identification number) per md.aml.identification-and-verification-of-identity and md.aml.natural-persons-obtain-and-verify
- Legal entity CDD: name, legal form, address, registration number, directors/authorized persons per md.aml.legal-entities-obtain-and-verify
- Beneficial ownership (UBO) identification and verification per md.aml.beneficial-ownership-ubo-identify-and
- Purpose and intended nature of business relationship assessment per md.aml.purpose-and-intended-nature-of
- Ongoing transaction monitoring to detect suspicious activity per md.aml.ongoing-monitoring-continuously-monitor-the
- Risk-based approach (RBA) classifying customers as low/medium/high risk per md.aml.risk-based-approach-rba
- Simplified Due Diligence (SDD) for low-risk cases per md.aml.simplified-due-diligence-sdd-may
- Enhanced Due Diligence (EDD) for PEPs, complex/unusually large transactions, and high-risk scenarios per md.aml.enhanced-due-diligence-edd-must, md.aml.transactions-involving-politically-exposed-persons, and md.aml.complex-unusually-large-transactions-or
- Reporting obligations to the Financial Intelligence Unit (FIU) per md.aml.it-defines-the-general-obligations
- Supervision by the National Bank of Moldova (BNM) as the designated VASP supervisor per md.aml.designates-the-national-bank-of
Key Restrictions
- Must obtain a VASP license from the National Bank of Moldova (BNM) under Law No. 182 of 21 July 2022 per md.aml.establishes-a-licensing-regime-for and md.aml.designates-the-national-bank-of
- Must be incorporated as a local entity in Moldova — no foreign-entity-only operation appears permissible given the licensing regime
- Frontend screening/geofencing of users required to comply with full CDD obligations; unrestricted access to Moldovan residents without KYC is not compliant per md.aml.mandates-vasps-to-comply-with
- Fee-taking (e.g., trading fees, swap fees) likely qualifies the frontend as a VASP under the definition of virtual asset services, triggering the full licensing and AML regime
- The regulatory framework is newly in effect (mid-2024 enforcement start per md.enforcement.outcome-a-new-regulatory-framework) — precise scope of what constitutes a regulated VASP may still be subject to interpretation
Key Risks
- Regulatory ambiguity risk: Law No. 182 and its amendments are recent (July 2022, enforcement mid-2024); it is unclear whether a pure frontend with no smart contract control is considered a VASP vs. a software provider
- No published guidance or enforcement action yet specifically targeting DeFi frontends — first cases will set precedent
- Criminal enforcement risk: Moldovan authorities (Prosecutor's Office, CNA) have shown willingness to pursue crypto-related criminal cases per md.enforcement.criminal-investigations-involving-cryptocurrency and md.enformance.example-illustrative-of-typical-criminal
- If the frontend does not take fees or custody assets, it might argue it is not a VASP — but no safe harbor or guidance exists for this interpretation
- Ongoing international pressure (FATF, EU alignment) means the regulatory framework may tighten further, increasing compliance burden over time
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 308 of 22 December 2017 on preventing and combating money laundering and terrorist financing (Legea Nr. 308 din 22.12.2017 privind prevenirea și combaterea spălării banilor și finanțării terorismului):
Law No. 182 of 21 July 2022 on the regulation of virtual assets (Legea Nr. 182 din 21.07.2022 privind reglementarea activelor virtuale):
This is the cornerstone legislation specifically addressing virtual assets and VASPs in Moldova.
Defines "virtual assets" and "virtual asset service providers" (VASPs).
Establishes a licensing regime for VASPs.
Designates the National Bank of Moldova (BNM) as the supervisory authority for VASPs.
Mandates VASPs to comply with AML/CFT obligations as per Law No. 308.
It defines the general obligations for reporting entities, the role of the Financial Intelligence Unit (FIU), and the overall framework for AML/CFT compliance.
Identification and Verification of Identity:
Natural Persons: Obtain and verify the customer's name, date of birth, address, and an identification number (e.g., passport, ID card number). Verification must be based on reliable, independent source documents, data, or information.
Legal Entities: Obtain and verify the legal entity's name, legal form, address, registration number, and the names of directors/authorized persons.
Beneficial Ownership (UBO): Identify and verify the identity of the ultimate beneficial owner(s) of the customer, understanding the ownership and control structure.
Purpose and Intended Nature of the Business Relationship: Understand the reasons for the customer's transactions and the expected activity.
Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes scrutinizing transactions to ensure they are not suspicious.
Risk-Based Approach (RBA):
Simplified Due Diligence (SDD): May be applied in specific low-risk situations, with reduced intensity of CDD measures.
Enhanced Due Diligence (EDD): Must be applied in higher-risk situations, including:
Transactions involving politically exposed persons (PEPs).
Complex, unusually large transactions, or unusual patterns of transactions.
Outcome: A new regulatory framework for VASPs, requiring registration, AML/CFT compliance, and supervision, will come into effect in mid-2024. This sets the stage for future enforcement actions.
Regulator: National Bank of Moldova (BNM), General Prosecutor's Office, Financial Intelligence Unit (FIU), National Anticorruption Center (CNA).
Activity: Moldova has been working to align its legislation with FATF recommendations regarding virtual assets. The December 2023 amendments are a direct result of this.
Criminal Investigations Involving Cryptocurrency:
Example (Illustrative of typical criminal reporting, not a specific crypto-focused regulatory action): News reports from Moldovan outlets (like IPN, Jurnal TV, Pro TV Chișinău) occasionally mention arrests related to fraud or illicit schemes where crypto is involved. However, these are criminal prosecutions, not regulatory actions against a VASP. Finding a direct, publicly reported case with all the requested details specific to crypto-related enforcement is challenging.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend serving Moldovan residents likely constitutes a VASP under Law No. 182/2022, requiring a BNM license, local incorporation, and full AML/CFT compliance per Law No. 308/2017, but the framework is newly effective (mid-2024) and has not been tested against DeFi frontends specifically, creating significant regulatory ambiguity.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?