Remote VASP serving residents in Nauru
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Nauru without local incorporation, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) under the AML/CTF Act 2019 — obtain and verify identity for individuals using reliable independent source documents (government-issued ID, proof of address)
- Beneficial ownership identification — identify and verify beneficial owner(s) of legal entity customers, including ownership and control structure
- Purpose and intended nature of business relationship — must understand and document the purpose of the business relationship
- Ongoing due diligence — conduct continuous scrutiny of transactions to ensure consistency with customer knowledge and risk profile
- Enhanced Due Diligence (EDD) — apply EDD for high-risk customers (PEPs, cross-border relationships, complex transactions)
- Suspicious Transaction Reporting (STR) — immediately report any transaction suspected of ML/TF to the Nauru Financial Intelligence Unit (NFIU)
- No tipping-off — prohibited from disclosing STR filings to customers or third parties
- Record-keeping — maintain customer and transaction records for at least 5 years after relationship ends or occasional transaction date
- Employee training — provide regular training on STR obligations and suspicious activity identification
- AML/CTF compliance applies to all VASPs under the AML/CTF Act 2017 and AML/CTF Act 2019
Key Restrictions
- Remote VASPs must comply with Nauru's AML/CTF Act 2017 and AML/CTF Act 2019 — no exemption for foreign-incorporated, non-resident operators servicing residents from abroad
- If the crypto tokens/services offered involve securities-like characteristics (investment contracts, profit-sharing, governance rights), the operator may be required to register the offering with the Nauru Financial Services Authority (NFSA) and/or publish a prospectus
- Licensing may be required if the VASP facilitates trading of security tokens — the NFSA would likely require licensing as a securities exchange or trading facility
- No explicit VASP licensing framework identified for non-security virtual asset services; AML registration/obligations apply regardless
Key Risks
- Enforcement risk for unlicensed remote operators is low due to limited regulatory capacity, small jurisdiction size, and minimal public disclosure of enforcement actions
- Regulatory ambiguity — Nauru's Securities Act text is not publicly accessible, making it difficult to confirm precise security classification standards and exemption thresholds
- APG mutual evaluation scrutiny — Nauru is under APG monitoring; gaps in VASP oversight could trigger increased international pressure and eventual enforcement action
- Very small local market and limited financial infrastructure make Nauru a low-priority jurisdiction for most crypto businesses, but compliance obligations still legally apply
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Anti-Money Laundering and Counter-Terrorism Financing Act 2017 (AML/CTF Act 2017): While not about securities classification, this is crucial for all virtual asset service providers (VASPs) and virtual assets in Nauru, requiring them to comply with AML/CTF obligations.
Anti-Money Laundering and Counter-Terrorist Financing Act 2019: This Act sets out the preventive measures for financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs), including customer due diligence, suspicious transaction reporting, and record-keeping. It is the most direct piece of legislation for prudential AML/CFT obligations.
Identification and Verification:
Beneficial Ownership: Identify and take reasonable measures to verify the identity of the beneficial owner(s) of customers, including understanding the ownership and control structure of legal persons.
Purpose and Intended Nature of Business Relationship: Understand the purpose and intended nature of the business relationship.
Ongoing Due Diligence: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP’s knowledge of the customer, their business, and risk profile.
Enhanced Due Diligence (EDD): Apply EDD measures for high-risk customers, relationships, or transactions (e.g., politically exposed persons (PEPs), cross-border correspondent relationships, complex transactions).
Reporting Obligation: Immediately report any transaction (or attempted transaction) that is suspected to be related to money laundering, terrorist financing, or other criminal activity.
No Tipping-Off: Prohibit the VASP, its directors, officers, or employees from disclosing to the customer or third parties that an STR has been filed (tipping-off).
Training: Provide regular training to employees on their STR obligations and how to identify suspicious activities.
Customer Records: All records obtained through CDD, including identification data, beneficial ownership information, and account files.
Transaction Records: Records of all domestic and international transactions, sufficient to reconstruct individual transactions.
STRs: Copies of all suspicious transaction reports filed.
Retention Period: Records must typically be retained for at least five (5) years after the business relationship has ended or after the date of an occasional transaction.
Nauru Financial Intelligence Unit (NFIU): The NFIU is the central agency responsible for receiving, analyzing, and disseminating financial intelligence reports, including STRs, and for overseeing compliance with AML/CFT obligations across relevant sectors.
Nauru Financial Services Authority Act 2017: Establishes the NFSA.
Registration/Prospectus Requirements: Issuers would likely need to register the offering with the NFSA and/or publish a prospectus or offering document providing full disclosure to potential investors. This is to ensure investor protection and market transparency.
Licensed Platforms: Platforms (exchanges) facilitating the trading of security tokens would likely need to be licensed by the NFSA as securities exchanges or trading facilities.
Security Tokens: Any token that explicitly represents a traditional security (e.g., equity in a company, debt, real estate ownership, shares in an investment fund).
Investment Contracts: This is the most likely catch-all. While not explicitly named "Howey," the spirit of an investment contract generally involves:
Small Jurisdiction: Nauru is one of the world's smallest nations. Its financial sector is very limited, and the scale of cryptocurrency activity and the potential for "significant" violations (in terms of public reporting) is extremely low compared to larger economies.
Limited Public Disclosure: Even if minor enforcement actions occurred, small island nations often do not have robust public disclosure frameworks for financial enforcement to the same extent as major financial hubs.
Regulatory Capacity: While Nauru has a financial intelligence unit (FIU) and participates in global anti-money laundering (AML) and combating the financing of terrorism (CFT) efforts (e.g., through the Asia/Pacific Group on Money Laundering - APG), its regulatory capacity and enforcement resources are constrained.
National Financial Intelligence Unit (NFIU) of Nauru
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP may serve Nauru residents without a local entity but is subject to mandatory AML/CTF obligations (CDD, STR, record-keeping, training) under the AML/CTF Act 2017/2019 supervised by the NFIU, and may face securities registration/licensing requirements under NFSA rules if services involve security-like tokens.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?