Remote VASP serving residents in Moldova
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Moldova with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD obligations under Law No. 308: obtain and verify customer name, DOB, address, and identification number for natural persons
- Legal entity CDD: verify legal name, form, address, registration number, and directors/authorized persons
- UBO identification and verification for legal entity customers under Law No. 308
- Ongoing transaction monitoring to ensure consistency with customer risk profile
- Risk-based approach (RBA) — classify customers as low/medium/high risk
- Enhanced Due Diligence (EDD) for PEPs, complex/unusually large transactions, and unusual transaction patterns
- Simplified Due Diligence (SDD) permitted in low-risk situations
- Suspicious transaction reporting to the FIU under Law No. 308
- All AML/CFT obligations supervised by the National Bank of Moldova (BNM) as the VASP supervisory authority
- Obligations flow from Law No. 182 (VASP law) which mandates VASPs comply with Law No. 308 as reporting entities
Key Restrictions
- Must obtain a VASP license from the National Bank of Moldova (BNM) under Law No. 182 of 21 July 2022
- Must be a 'reporting entity' under Law No. 308, meaning a licensed/registered entity — unlicensed cross-border service is not permitted
- Licensing regime entered into force mid-2024 — operators must be licensed or face enforcement risk
- No indication that a foreign-incorporated entity without a local presence can be licensed — local entity likely required
- Must comply with FATF Recommendation 15 and EU 5AMLD standards as transposed into Moldovan law
Key Risks
- ["Unlicensed remote operation carries risk of criminal investigation by the General Prosecutor's Office, National Anticorruption Center (CNA), or Ministry of Internal Affairs", "No grandfathering or safe harbor for pre-existing cross-border services — the new framework applies to all VASPs serving Moldovan residents", "Enforcement focus is still developing; regulatory precedent for crypto-specific enforcement actions is limited, creating some uncertainty", "Serving Moldovan residents without a license could be treated as operating an unlicensed VASP, potentially triggering money laundering charges under criminal law", "Moldova is under international pressure to strengthen AML/CFT enforcement, increasing likelihood of active supervision of VASPs once the framework is operational"]
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 182 of 21 July 2022 on the regulation of virtual assets (Legea Nr. 182 din 21.07.2022 privind reglementarea activelor virtuale):
This is the cornerstone legislation specifically addressing virtual assets and VASPs in Moldova.
It transposed relevant provisions of the EU's 5th AML Directive (5AMLD) concerning virtual assets and aligns with FATF Recommendation 15 on new technologies.
Defines "virtual assets" and "virtual asset service providers" (VASPs).
Establishes a licensing regime for VASPs.
Designates the National Bank of Moldova (BNM) as the supervisory authority for VASPs.
Mandates VASPs to comply with AML/CFT obligations as per Law No. 308.
Law No. 308 of 22 December 2017 on preventing and combating money laundering and terrorist financing (Legea Nr. 308 din 22.12.2017 privind prevenirea și combaterea spălării banilor și finanțării terorismului):
Crucially, this law was amended to include VASPs as "reporting entities" (subiecți raportori) following the adoption of Law No. 182.
Identification and Verification of Identity:
Beneficial Ownership (UBO): Identify and verify the identity of the ultimate beneficial owner(s) of the customer, understanding the ownership and control structure.
Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes scrutinizing transactions to ensure they are not suspicious.
Risk-Based Approach (RBA):
Enhanced Due Diligence (EDD): Must be applied in higher-risk situations, including:
Regulator: National Bank of Moldova (BNM), General Prosecutor's Office, Financial Intelligence Unit (FIU), National Anticorruption Center (CNA).
Activity: Moldova has been working to align its legislation with FATF recommendations regarding virtual assets. The December 2023 amendments are a direct result of this.
Outcome: A new regulatory framework for VASPs, requiring registration, AML/CFT compliance, and supervision, will come into effect in mid-2024. This sets the stage for future enforcement actions.
Criminal Investigations Involving Cryptocurrency:
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a foreign remote VASP serving Moldovan residents must obtain a VASP license from the National Bank of Moldova under Law No. 182 (effective mid-2024) and comply with full AML/CFT obligations under Law No. 308; unlicensed cross-border service is unlawful and carries criminal enforcement risk.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?