Maldives -- Sanctions Compliance Regulatory Overview

The Maldives, as a member of the international community and the Asia/Pacific Group on Money Laundering (APG), an FATF-style regional body, is committed to implementing international standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT). This commitment extends to financial activities involving virtual assets (cryptocurrencies) and Virtual Asset Service Providers (VASPs).

While the Maldives may not have specific legislation solely dedicated to crypto sanctions, its comprehensive AML/CFT framework mandates compliance with international sanctions regimes and requires VASPs to adhere to these obligations.

Here's a breakdown of cryptocurrency sanctions and restrictions in the Maldives:

Cryptocurrency Sanctions and Restrictions in Maldives

I. Overarching Legal and Regulatory Framework

The primary legal framework governing AML/CFT in the Maldives, which extends to virtual assets, is:

1. Prevention of Money Laundering and Financing of Terrorism Act (Act No. 10/2014) (PMLFTA): This is the foundational law that outlines the obligations for financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs), which by extension, cover VASPs. It mandates customer due diligence (CDD), record-keeping, suspicious transaction reporting (STR), and compliance with international sanctions.
   • Legal Reference: Prevention of Money Laundering and Financing of Terrorism Act (Act No. 10/2014)
     • While an official English translation may be sought directly from the Attorney General's Office or the Maldives Monetary Authority, its content aligns with FATF standards.
     • A reference to the Maldivian legal portal where it may be found: Attorney General's Office - Acts and Regulations (You may need to search for "Money Laundering" or "Terrorism Financing" there).
2. Regulations, Directives, and Guidelines by the Maldives Monetary Authority (MMA): The MMA is the central bank and financial regulator, responsible for issuing specific regulations and guidelines for AML/CFT compliance, including those relevant to virtual assets.
   • Legal Reference: Maldives Monetary Authority (MMA) website for publications and regulations: MMA - Regulations and Directives
3. Financial Intelligence Unit (FIU): Housed within the MMA, the FIU is responsible for receiving and analyzing STRs/SARs and disseminating financial intelligence to law enforcement.
   • Legal Reference: MMA - Financial Intelligence Unit
4. FATF Recommendations: The Maldives' framework is built upon the Financial Action Task Force (FATF) Recommendations, particularly Recommendation 15 on New Technologies, which requires countries to regulate VASPs for AML/CFT purposes, including sanctions compliance.
   • Legal Reference: FATF Recommendations
   • FATF Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers: This document provides detailed guidance on applying AML/CFT measures to VASPs, including sanctions screening.
     • Legal Reference: FATF Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers (Updated 2023)

II. Sanctions Compliance Requirements for VASPs

Under the PMLFTA and guided by FATF Recommendations, VASPs operating in or from the Maldives are subject to stringent sanctions compliance obligations:

A. UN Sanctions Compliance

• Mandatory Obligation: As a member of the United Nations, the Maldives is legally obligated to implement sanctions resolutions adopted by the UN Security Council (UNSC). These resolutions target individuals and entities involved in terrorism financing, proliferation financing, and other threats to international peace and security.
• Asset Freezing: The PMLFTA requires financial institutions (including VASPs) to immediately freeze the assets of individuals and entities designated by the UNSC. This includes funds held in virtual asset wallets.
• Prohibition on Making Funds/Economic Resources Available: VASPs are prohibited from directly or indirectly making any funds or economic resources (including virtual assets) available to designated persons or entities.
• Screening: VASPs must continuously screen their customers (both at onboarding and on an ongoing basis) against the UN sanctions lists.
• Reporting: VASPs are required to report any hit or potential hit against UN sanctions lists to the FIU and relevant authorities.
• Legal Reference: The implementation of UN Security Council Resolutions is mandated under the PMLFTA. Specific resolutions can be found on the UN website: UN Security Council Sanctions Committees

B. OFAC/EU Sanctions Compliance (Indirect but Critical)

• Not Directly Legally Binding (for Maldives-only entities): While OFAC (U.S. Department of the Treasury's Office of Foreign Assets Control) and EU sanctions are not directly legally binding on Maldivian entities operating solely within the Maldives and not involving US/EU persons or jurisdictions, they are critically important for practical and reputational reasons.
• Correspondent Banking and De-risking: Maldivian financial institutions, including those dealing with VASPs, rely heavily on correspondent banking relationships with international banks (many of which are in the US or EU). Failure to comply with OFAC or EU sanctions can lead to these international banks terminating relationships, effectively cutting off access to the global financial system ("de-risking").
• International Transactions: Any VASP facilitating transactions with individuals, entities, or jurisdictions subject to OFAC or EU sanctions, or using services from US/EU-based blockchain infrastructure providers, wallets, or exchanges, would be directly exposed to these sanctions.
• Best Practice: Adhering to OFAC and EU sanctions lists (e.g., Specially Designated Nationals and Blocked Persons List - SDN List) is a widely recognized best practice for global AML/CFT compliance, even for jurisdictions not directly subject to them.
• Screening: Maldivian VASPs, especially those with international operations or ambitions, are expected to screen their customers against OFAC and EU sanctions lists as part of their risk management and enhanced due diligence processes.
• Legal Reference: While not Maldivian law, adherence is driven by international financial practice and FATF's risk-based approach.
  • OFAC Sanctions Programs and Information
  • EU Sanctions Map

C. Sanctioned Entity Screening Obligations

• Mandatory: VASPs in the Maldives must implement robust systems and procedures for screening customers, beneficial owners, and transactions against relevant sanctions lists (UN, and practically OFAC/EU).
• Ongoing Monitoring: Screening is not a one-time event; it requires continuous monitoring of existing customers and transactions for any changes in sanctions status.
• Technology: VASPs should leverage technology to automate and enhance their screening processes, ensuring accuracy and efficiency.
• Due Diligence: Enhanced due diligence must be applied to high-risk customers, politically exposed persons (PEPs), and transactions involving high-risk jurisdictions, as identified by the VASP's risk assessment.

III. Geographic Restrictions

• Risk-Based Approach: The Maldives does not typically impose outright blanket bans on crypto transactions with specific countries (beyond UN sanctions). Instead, its AML/CFT framework mandates a risk-based approach.
• High-Risk Jurisdictions: VASPs are required to identify and assess the risks associated with customers and transactions originating from or destined for high-risk jurisdictions (those identified by FATF, or under international scrutiny for AML/CFT deficiencies). Enhanced due diligence and potentially outright refusal of service may be necessary for such jurisdictions.
• FATF High-Risk and Monitored Jurisdictions: VASPs should consult FATF's lists of "High-Risk Jurisdictions subject to a Call for Action" and "Jurisdictions under Increased Monitoring" to inform their risk assessments.
  • Legal Reference: FATF - High-Risk Jurisdictions subject to a Call for Action
  • FATF - Jurisdictions under Increased Monitoring

IV. Penalties for Violations

The PMLFTA specifies penalties for non-compliance with its provisions, including those related to sanctions and AML/CFT obligations. These can include:

• Fines: Significant monetary penalties for individuals and corporate entities.
• Imprisonment: For serious offenses or repeated violations by individuals.
• Revocation or Suspension of License: For VASPs or other regulated entities, non-compliance can lead to the loss of their operating license.
• Reputational Damage: Beyond legal penalties, non-compliance can severely damage a VASP's reputation and ability to operate within the international financial system.

V. Country-Specific Sanctions Lists for Crypto

The Maldives does not maintain its own country-specific sanctions lists that are unique or explicitly for crypto, separate from its commitment to implement UN Security Council Sanctions. Its approach is to adopt the internationally recognized UN lists and to advise regulated entities (including VASPs) to also consider other major lists like OFAC and EU for risk management purposes, aligning with international best practices and FATF recommendations.

VI. Key Obligations for VASPs in the Maldives

To summarize, VASPs operating in the Maldives must:

1. Comply with Registration/Licensing Requirements: Obtain any necessary licenses or registrations from the MMA or other relevant authorities.
2. Implement a Robust AML/CFT Program: Including a risk assessment, internal controls, and independent audits.
3. Conduct Customer Due Diligence (CDD): Identify and verify customers and beneficial owners, and conduct ongoing monitoring.
4. Perform Sanctions Screening: Regularly screen all customers and transactions against UN, and practically, OFAC and EU sanctions lists.
5. Comply with the FATF "Travel Rule": Collect and transmit required originator and beneficiary information for virtual asset transfers above a certain threshold.
6. Report Suspicious Transactions (STRs): Report any suspected money laundering or terrorism financing activities, including sanctions evasion attempts, to the FIU.
7. Maintain Records: Keep all relevant records for a minimum period as required by law.
8. Provide Training: Ensure staff are adequately trained on AML/CFT and sanctions compliance.

In essence, while the Maldives' specific crypto regulations are evolving, the overarching AML/CFT framework, driven by the PMLFTA and FATF Recommendations, requires VASPs to operate with the same level of sanctions diligence expected of traditional financial institutions globally.