Self-custodial wallet / non-custodial software in Maldives
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Maldives without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No specific license required for publishing non-custodial wallet software since the publisher never holds, controls, or has access to user funds/private keys.
- However, if the software facilitates transfer of virtual assets and constitutes 'transfer of virtual assets' under the VASP definition, AML/CFT obligations under the Prevention of Money Laundering and Financing of Terrorism Act (No. 10/2014) may apply.
- If classified as a VASP: implement robust KYC procedures for all customers (mv.licensing.implement-robust-kyc-procedures-for).
- If classified as a VASP: conduct ongoing customer due diligence (mv.licensing.conduct-ongoing-customer-due-diligence).
- If classified as a VASP: monitor transactions for suspicious activity (mv.licensing.monitor-transactions-for-suspicious-activity).
- If classified as a VASP: maintain records for a specified period (mv.licensing.maintain-records-for-a-specified).
- If classified as a VASP: report suspicious transactions (STRs) to the FIU of the MMA (mv.licensing.report-suspicious-transactions-strs-to).
- If classified as a VASP: implement sanctions screening (mv.licensing.implement-sanctions-screening).
- If classified as a VASP: appoint an AML Compliance Officer (mv.licensing.appoint-an-aml-compliance-officer).
- If classified as a VASP: adhere to the FATF Travel Rule (mv.licensing.adhere-to-the-travel-rule).
Key Restrictions
- The MMA has repeatedly stated that cryptocurrencies are not recognized as legal tender in the Maldives and that they do not license or regulate virtual asset activities (mv.enforcement.mmas-consistent-position-the-maldives).
- There is regulatory ambiguity as to whether a non-custodial software publisher that never holds, controls, or has access to user funds or private keys is classified as a VASP under Maldivian law — the VASP definition includes 'transfer of virtual assets' and 'safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets' which could be interpreted to cover wallet software.
- No specific disclosure or consumer-protection rules exist for non-custodial wallet software in the Maldives (mv.enforcement.public-advisories-the-mma-has — the MMA has only issued general public warnings about crypto risks).
- Local entity incorporation is likely not required since there is no specific license to obtain, but engaging proactively with MMA/FIU is recommended (mv.licensing.local-presence-for-any-financial).
Key Risks
- Regulatory ambiguity: It is unclear whether a self-custodial wallet publisher falls under the VASP definition ('transfer of virtual assets' or 'instruments enabling control over virtual assets') — the MMA has provided no guidance on this distinction.
- Enforcement risk: The MMA has not licensed any crypto entities, and its public stance warns against unregulated crypto activities — a wallet publisher could face regulatory pushback if the MMA interprets the model as facilitating unlicensed VASP activities.
- Reputational/PR risk: The MMA's public advisories caution the public against cryptocurrency risks generally, which could create negative perception for any crypto-related software operating in or targeting the Maldives.
- No dedicated custody or wallet regulation exists — legal status depends entirely on interpretation of the broad AML/CFT Act definitions (mv.aml.no-explicit-mandates-there-are).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Pure Crypto-to-Crypto: Currently, there is no specific license required from the MMA for a platform exclusively facilitating crypto-to-crypto trades. However, such entities would still be subject to general AML/CFT obligations if identified as VASPs under Maldivian law.
AML/KYC (Anti-Money Laundering / Know Your Customer): This is the most crucial requirement for any entity dealing with virtual assets in the Maldives, regardless of licensing. VASPs are expected to:
Implement robust KYC procedures for all customers.
Conduct ongoing customer due diligence.
Monitor transactions for suspicious activity.
Maintain records for a specified period.
Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) of the Maldives Monetary Authority.
Implement sanctions screening.
Appoint an AML Compliance Officer.
Adhere to the "Travel Rule" as per FATF guidance.
Local Presence: For any financial service that requires an MMA license (e.g., payment services), a physical local presence, typically in the form of a locally incorporated entity and local management, is usually mandatory. For purely crypto-related activities without a specific license, a local presence might not be legally mandated but is generally advisable for effective AML/CFT compliance and to engage with regulators.
Prevention of Money Laundering and Financing of Terrorism Act (No. 10/2014): This is the core AML/CFT legislation in the Maldives. VASPs, even without specific licensing, are expected to comply with its provisions.
VASP Registration/Licensing: However, entities providing custodial services for virtual assets would likely fall under the definition of a Virtual Asset Service Provider (VASP) as defined by the AML/CFT Act and subsequent regulations. VASPs are subject to AML/CFT obligations and may require registration or licensing with the MMA/FIU.
The definition of a VASP, consistent with FATF standards, includes entities that conduct one or more of the following activities or operations for or on behalf of another natural or legal person:
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets. (This is where custody falls)
MMA's Consistent Position: The Maldives Monetary Authority has repeatedly stated that cryptocurrencies are not recognized as legal tender in the Maldives. They also do not provide licenses or regulatory oversight for any cryptocurrency-related activities or businesses operating within the country.
Public Advisories: The MMA has issued warnings to the public about the inherent risks of cryptocurrencies, including price volatility, cybersecurity risks, potential for fraud, and the absence of consumer protection. These advisories are the primary "action" taken by the regulator concerning crypto.
MMA's Official Statement on Cryptocurrencies (2022, but reflects consistent stance):
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a self-custodial/non-custodial wallet publisher operating in/from the Maldives likely does not trigger a specific license requirement since it never holds user funds, but faces significant regulatory uncertainty around whether it qualifies as a VASP under the AML/CFT Act (triggering AML obligations), and must contend with the MMA's hostile public stance against unregulated crypto activities.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?