Centralized exchange in Oman
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Oman with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer Identification and Verification (CDD) — collect name, address, date of birth, nationality, and unique ID (passport/national ID) under Royal Decree No. 30/2016 and Ministerial Decision No. 63/2016
- Beneficial ownership identification — identify natural persons owning ≥25% of shares or voting rights
- Purpose and intended nature of business relationship — gather source of funds and transaction purpose
- Ongoing transaction monitoring — ensure transactions are consistent with customer risk profile
- PEP screening — procedures to determine if customer/beneficial owner is a PEP and apply EDD
- Sanctions screening — screen against UN, OFAC, and other applicable sanctions lists
- Enhanced Due Diligence (EDD) for high-risk categories — non-face-to-face, complex ownership, cross-border VASP relationships, high-risk jurisdictions
- Suspicious Transaction Report (STR) filing — report to OMAFIU where funds are suspected to be proceeds of crime or related to terrorism financing
- No tipping-off — prohibited from disclosing STR filing to customer or third parties
- Recordkeeping — maintain CDD records and transaction records (domestic and cross-border) covering origin/destination, amount, date, type
- Travel Rule obligation — FATF Recommendation 15 applies; Oman as a MENAFATF member is committed to implementing FATF standards including the Travel Rule for VASPs, though specific implementing regulations under the CMA framework are still being developed
Key Restrictions
- CBO-regulated financial institutions (banks, payment service providers) are effectively prohibited from engaging with or facilitating crypto transactions under CBO advisories — a centralized exchange must not rely on CBO-supervised banking partners without clarity
- The CMA Virtual Assets Regulatory Framework (2023) requires licensing for VASPs, including exchanges; operating without a CMA license is unlawful
- No current regime for segregation of client assets, insurance/bonding, or cold storage mandates exists — legal uncertainty around custody protections
- No definition of 'qualified custodian' exists in Omani law — unclear how user assets must be held
- The CMA framework is newly issued (2023) and operational details/implementing regulations may not be fully settled
Key Risks
- CBO-crypto prohibition tension: CBO warnings prohibit regulated financial entities from facilitating crypto, which may impede access to banking services even with a CMA license
- Regulatory ambiguity: No track record of CMA licensing decisions, enforcement actions, or interpretation of the 2023 framework — first-mover uncertainty
- Custody risk: No segregation, insurance, or cold-storage rules in place — operator bears full liability for safeguarding user assets
- Travel Rule implementation gap: FATF obligations apply, but no Omani-specific implementing regulation for VASP Travel Rule exists — compliance approach must be self-constructed
- Legislative gap: No defined licensing application process, capital requirements, or timelines have been publicly operationalized under the CMA framework
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Capital Market Authority (CMA) Virtual Assets Regulatory Framework (2023): The CMA issued a comprehensive regulatory framework for virtual assets in July 2023. This framework aims to regulate the activities of VASPs, including issuance, listing, and trading of virtual assets, ensuring compliance with international AML/CFT standards. It covers licensing requirements, corporate governance, market conduct, and crucial for this discussion, AML/CFT obligations.
No specific license exists. Oman does not currently have a licensing regime for digital asset custody providers. Financial institutions operating under CBO licenses are generally advised against involvement with virtual currencies.
Reference: While a direct "licensing law" for crypto custodians doesn't exist, the CBO's general advisories against virtual currencies imply that such activities are not sanctioned for regulated entities.
Not applicable. Since there is no framework for licensing crypto custodians, there are no specific rules regarding the segregation of client assets for such services.
Not applicable. There are no specific mandates for cold storage, as the regulatory framework for crypto custody does not exist.
No definition exists. Oman's regulatory landscape does not currently define "qualified custodians" in the context of digital assets.
Central Bank of Oman (CBO): The CBO has previously issued warnings regarding the risks of virtual currencies. However, in parallel with the CMA, it has also been working on developing its own regulatory framework for digital assets, particularly concerning digital currencies and payments.
Royal Decree No. 30/2016 on Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT Law), amended by Royal Decree No. 112/2020: This is the foundational law for AML/CFT in Oman. While it predates explicit crypto regulations, its broad definitions of "funds," "financial institutions," and "financial activities" are intended to encompass new technologies and virtual assets once they fall under a regulated scope. VASPs, once licensed, will be designated as financial institutions or designated non-financial businesses and professions (DNFBPs) under this law.
Oman's Adherence to FATF Standards: Oman is a member of the Middle East and North Africa Financial Action Task Force (MENAFATF) and is committed to implementing the recommendations of the Financial Action Task Force (FATF). FATF Recommendation 15 specifically addresses new technologies, urging countries to regulate and supervise VASPs for AML/CFT purposes, including sanctions compliance.
Royal Decree No. 30/2016 (Law on Combating Money Laundering and Terrorism Financing): This is the foundational AML/CFT law in Oman, outlining the obligations for financial institutions and designated non-financial businesses and professions (DNFBPs).
Ministerial Decision No. 63/2016 (Implementing Regulations of the Law on Combating Money Laundering and Terrorism Financing): This decision provides detailed regulations and guidelines for implementing Royal Decree 30/2016.
Identification and Verification (ID&V) of Customers:
Beneficial Ownership Identification:
Politically Exposed Persons (PEPs):
Enhanced Due Diligence (EDD):
Obligation to Report: If a VASP knows, suspects, or has reasonable grounds to suspect that funds are proceeds of a criminal activity or are related to terrorism financing, it must promptly file a Suspicious Transaction Report (STR) with the Oman Financial Intelligence Unit (OMAFIU).
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that an STR is being, or has been, submitted, or that an investigation is being conducted.
Transaction Records: All records of domestic and international transactions, including information on the origin and destination of the funds/virtual assets, transaction amount, date, and type.
Central Bank of Oman (CBO): Has consistently issued warnings against dealing in cryptocurrencies for financial institutions under its supervision, citing risks such as volatility, money laundering, and lack of regulatory oversight. These warnings essentially act as a prohibition for banks and payment service providers. While these warnings are a form of regulatory action, they haven't been followed by publicly disclosed, named enforcement actions with specific fines against a particular entity for crypto-related violations that are distinct from broader financial regulations.
Capital Market Authority (CMA): This is where the most significant development has occurred recently. The CMA has been working on and recently issued a regulatory framework for Virtual Assets, marking a shift towards controlled legitimization rather than outright prohibition in certain sectors.
CMA Issuance of Virtual Asset Regulatory Framework
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange may operate in Oman under the CMA's 2023 Virtual Assets Regulatory Framework, but faces high licensing burden, no established custody/segregation rules, unresolved tension with CBO prohibitions on banking support, and an immature regulatory infrastructure with no operational precedent.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?