Self-custodial wallet / non-custodial software in Mongolia
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Mongolia without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to the software publisher because it does not qualify as a VASP under Mongolian law — it never holds, controls, or has access to user funds or private keys.
- The VASP Law (Law on Regulation of Virtual Asset Service Providers) defines VASP activities to include exchange, transfer, safekeeping/administration of virtual assets or instruments enabling control. Publishing self-custodial software without custody falls outside these definitions.
Key Restrictions
- Publisher must not hold, control, or have access to user private keys or funds. If any custody or control is introduced, the publisher becomes a VASP and must obtain an FRC license.
- No other specific regulatory restrictions on pure software publishing were identified in the provided facts.
Key Risks
- Regulatory ambiguity: Mongolia's definitions of VASP activities could be interpreted broadly (e.g., 'instruments enabling control' may be stretched to cover wallet software).
- FATF-driven expansion: Mongolia may adopt broader interpretations of virtual asset activities in future rulemaking, potentially capturing non-custodial software publishers.
- If the wallet provider charges fees or integrates value-added services (e.g., swaps, staking), it could cross into VASP activity requiring licensing.
- No consumer-protection or disclosure-specific rules for non-custodial software were identified in the provided facts — this creates uncertainty about obligations (e.g., terms of service, open-source licensing, liability waivers).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Partial but Evolving: Mongolia has moved from an unregulated state to establishing a foundational legal framework for virtual assets, specifically targeting Virtual Asset Service Providers (VASPs). The focus is heavily on AML/CFT compliance, risk management, and consumer protection through licensing. It's considered "partial" as it primarily regulates the service providers rather than attempting to regulate every facet of virtual assets or underlying technologies comprehensively at this stage.
Definition of VASP Activities: Outlines the services requiring a license, such as exchange between virtual assets and fiat currencies, exchange between one or more forms of virtual assets, transfer of virtual assets, safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets, and participation in and provision of financial services related to an issuer’s offer and/or sale of a virtual asset.
Licensing Requirements: Mandates that all entities providing VASP services must obtain a license from the FRC.
Permitted but Regulated: Crypto trading and the operation of cryptocurrency exchanges are legal in Mongolia, provided they are conducted by entities that have obtained a license from the Financial Regulatory Commission (FRC).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a publisher of self-custodial wallet software (no custody, no access to keys/funds) likely does not meet Mongolia's VASP definition and therefore does not require FRC licensing or trigger AML obligations, but the regulatory framework is evolving and the boundary of "instruments enabling control" is ambiguous, creating risk of future reinterpretation.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?