Centralized exchange in Maldives

Pure Crypto-to-Crypto: Currently, there is no specific license required from the MMA for a platform exclusively facilitating crypto-to-crypto trades. However, such entities would still be subject to general AML/CFT obligations if identified as VASPs under Maldivian law.

Crypto-to-Fiat (or Fiat-to-Crypto): If an exchange involves the exchange of fiat currency (Maldivian Rufiyaa - MVR or other fiat currencies) for virtual assets, or vice-versa, it could potentially fall under existing financial services regulations, such as those for money services businesses or payment service providers. This would require an appropriate license from the MMA for those traditional activities. The scope of these existing licenses might need to be interpreted or expanded to explicitly cover VA activities.

Custody Providers: Similar to exchanges, if a provider merely holds virtual assets (cold or hot storage) without engaging in other regulated financial activities (like fund management of traditional assets), there isn't a specific VA custody license. However, if the custody service is part of a broader financial service or if it involves managing client funds/assets that are then invested in traditional markets, existing licenses (e.g., for investment funds, trustees) might apply.

Capital Requirements: There are no specific capital requirements for VASPs as VASPs yet. However, if a business falls under an existing financial license (e.g., payment service provider, money service business), then the capital requirements for that specific license would apply.

AML/KYC (Anti-Money Laundering / Know Your Customer): This is the most crucial requirement for any entity dealing with virtual assets in the Maldives, regardless of licensing. VASPs are expected to:

Implement robust KYC procedures for all customers.

Conduct ongoing customer due diligence.

Monitor transactions for suspicious activity.

Maintain records for a specified period.

Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) of the Maldives Monetary Authority.

Implement sanctions screening.

Appoint an AML Compliance Officer.

Adhere to the "Travel Rule" as per FATF guidance.

Local Presence: For any financial service that requires an MMA license (e.g., payment services), a physical local presence, typically in the form of a locally incorporated entity and local management, is usually mandatory. For purely crypto-related activities without a specific license, a local presence might not be legally mandated but is generally advisable for effective AML/CFT compliance and to engage with regulators.

Maldives Monetary Authority (MMA): The central bank and financial regulator.

Prevention of Money Laundering and Financing of Terrorism Act (No. 10/2014): This is the core AML/CFT legislation in the Maldives. VASPs, even without specific licensing, are expected to comply with its provisions.

Financial Action Task Force (FATF) Recommendations: The MMA and the Maldivian FIU base their AML/CFT expectations for VASPs heavily on FATF standards, particularly Recommendation 15 and its Interpretive Note.

No specific "custody license": The Maldives does not currently have a dedicated license type explicitly for "cryptocurrency custodian."

VASP Registration/Licensing: However, entities providing custodial services for virtual assets would likely fall under the definition of a Virtual Asset Service Provider (VASP) as defined by the AML/CFT Act and subsequent regulations. VASPs are subject to AML/CFT obligations and may require registration or licensing with the MMA/FIU.

Evidence fact mv.aml.safekeepingandor-administration-of-virtual not found (may have been renamed).

No explicit mandates: There are no specific regulatory mandates in the publicly available Maldivian virtual asset framework that explicitly require the segregation of client digital assets from the custodian's proprietary assets.

General financial principles: While not explicitly legislated for crypto, general good practice in financial services, and principles underlying the AML/CFT Act regarding risk management, would strongly suggest that custodians should segregate client assets. However, this is more of an industry best practice than a specific regulatory dictate for crypto in the Maldives at this stage.

No explicit requirements: There are currently no specific regulatory requirements for cryptocurrency custodians in the Maldives to hold insurance or bonding for potential losses (e.g., due to hacks, operational errors, or insolvency).

No specific mandates: The Maldivian regulatory framework does not include specific technical requirements or mandates for the use of cold storage (offline storage) for client digital assets. Custodians are expected to implement appropriate security measures, but the specifics of how they secure assets (e.g., hot vs. cold storage percentages) are not dictated by regulation.

Adopted: Yes, the Maldives has adopted the FATF Travel Rule through the Regulation on Virtual Asset Service Providers (VASPs) issued by the Maldives Monetary Authority (MMA).

Effective Date: The VASP Regulation was approved by the MMA Board on 1st December 2022 and officially came into force on 1st January 2023. This regulation mandates VASPs to comply with AML/CFT obligations, including those related to the Travel Rule.

Threshold: Transactions equal to or greater than MVR 15,000 (Maldivian Rufiyaa) or its equivalent in USD 1,000.

For transactions below this threshold, VASPs are still required to monitor for suspicious activities and report them to the Financial Intelligence Unit (FIU).

Collection of Required Information: For any VA transfer equal to or exceeding the threshold, VASPs must obtain and hold the following accurate and meaningful information:

Transmission of Information: The originator VASP must transmit the required information to the beneficiary VASP immediately and securely with the VA transfer.

Secure Record-Keeping: VASPs must maintain records of all collected information for at least five years, and these records must be readily available to the MMA or FIU upon request.

Reporting: VASPs are required to file Suspicious Transaction Reports (STRs) to the Financial Intelligence Unit (FIU) in cases where they suspect money laundering or terrorist financing, regardless of the transaction amount.

Forfeiture of assets.

Restrictions on business operations.

MMA's Consistent Position: The Maldives Monetary Authority has repeatedly stated that cryptocurrencies are not recognized as legal tender in the Maldives. They also do not provide licenses or regulatory oversight for any cryptocurrency-related activities or businesses operating within the country.

Public Advisories: The MMA has issued warnings to the public about the inherent risks of cryptocurrencies, including price volatility, cybersecurity risks, potential for fraud, and the absence of consumer protection. These advisories are the primary "action" taken by the regulator concerning crypto.

Lack of Licensed Entities: Since no crypto businesses are licensed by the MMA, there are no regulated entities for the MMA to "enforce" against in the traditional sense (e.g., for non-compliance with licensing conditions or specific crypto-related regulations). Any potential criminal activity involving crypto would fall under general criminal law enforcement by the police, rather than specific financial regulatory enforcement.

MMA's Official Statement on Cryptocurrencies (2022, but reflects consistent stance):