Custodial wallet / SaaS in Maldives

Custody Providers: Similar to exchanges, if a provider merely holds virtual assets (cold or hot storage) without engaging in other regulated financial activities (like fund management of traditional assets), there isn't a specific VA custody license. However, if the custody service is part of a broader financial service or if it involves managing client funds/assets that are then invested in traditional markets, existing licenses (e.g., for investment funds, trustees) might apply.

AML/KYC (Anti-Money Laundering / Know Your Customer): This is the most crucial requirement for any entity dealing with virtual assets in the Maldives, regardless of licensing. VASPs are expected to:

Maldives Monetary Authority (MMA): The central bank and financial regulator.

Prevention of Money Laundering and Financing of Terrorism Act (No. 10/2014): This is the core AML/CFT legislation in the Maldives. VASPs, even without specific licensing, are expected to comply with its provisions.

Financial Action Task Force (FATF) Recommendations: The MMA and the Maldivian FIU base their AML/CFT expectations for VASPs heavily on FATF standards, particularly Recommendation 15 and its Interpretive Note.

Local Presence: For any financial service that requires an MMA license (e.g., payment services), a physical local presence, typically in the form of a locally incorporated entity and local management, is usually mandatory. For purely crypto-related activities without a specific license, a local presence might not be legally mandated but is generally advisable for effective AML/CFT compliance and to engage with regulators.

Capital Requirements: There are no specific capital requirements for VASPs as VASPs yet. However, if a business falls under an existing financial license (e.g., payment service provider, money service business), then the capital requirements for that specific license would apply.

Processing payments in MVR (or other fiat) for goods/services, with crypto merely as an underlying settlement layer: This would likely require a payment service provider license from the MMA under the existing payment systems framework.

For purely crypto activities: For now, the focus would be on ensuring full compliance with the Maldivian AML/CFT Act and engaging proactively with the MMA and FIU regarding your operations and compliance framework.

No specific "custody license": The Maldives does not currently have a dedicated license type explicitly for "cryptocurrency custodian."

VASP Registration/Licensing: However, entities providing custodial services for virtual assets would likely fall under the definition of a Virtual Asset Service Provider (VASP) as defined by the AML/CFT Act and subsequent regulations. VASPs are subject to AML/CFT obligations and may require registration or licensing with the MMA/FIU.

The definition of a VASP, consistent with FATF standards, includes entities that conduct one or more of the following activities or operations for or on behalf of another natural or legal person:

Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets. (This is where custody falls)

No explicit mandates: There are no specific regulatory mandates in the publicly available Maldivian virtual asset framework that explicitly require the segregation of client digital assets from the custodian's proprietary assets.

No explicit requirements: There are currently no specific regulatory requirements for cryptocurrency custodians in the Maldives to hold insurance or bonding for potential losses (e.g., due to hacks, operational errors, or insolvency).

No specific mandates: The Maldivian regulatory framework does not include specific technical requirements or mandates for the use of cold storage (offline storage) for client digital assets. Custodians are expected to implement appropriate security measures, but the specifics of how they secure assets (e.g., hot vs. cold storage percentages) are not dictated by regulation.

No specific definition: The concept of a "qualified custodian" as seen in some jurisdictions (e.g., under the U.S. Investment Advisers Act) does not have a specific definition or regulatory framework within the Maldives' virtual asset laws.

MMA's Consistent Position: The Maldives Monetary Authority has repeatedly stated that cryptocurrencies are not recognized as legal tender in the Maldives. They also do not provide licenses or regulatory oversight for any cryptocurrency-related activities or businesses operating within the country.

Focus on AML/CFT: While there isn't a specific crypto regulatory framework, the Maldives, as a member of the Asia/Pacific Group on Money Laundering (APG), is working to strengthen its Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) regime. This includes addressing virtual assets in line with FATF recommendations, but this is more about developing future regulations rather than current enforcement actions against existing crypto businesses.

Lack of Licensed Entities: Since no crypto businesses are licensed by the MMA, there are no regulated entities for the MMA to "enforce" against in the traditional sense (e.g., for non-compliance with licensing conditions or specific crypto-related regulations). Any potential criminal activity involving crypto would fall under general criminal law enforcement by the police, rather than specific financial regulatory enforcement.