On-shore VASP in Oman
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Oman with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) under Royal Decree No. 30/2016 and Ministerial Decision No. 63/2016 — collect and verify identity, address, date of birth, nationality, and unique ID for all customers
- Beneficial ownership identification — identify natural persons owning or controlling 25%+ of the customer
- Purpose and intended nature of business relationship — gather information on anticipated activity, source of funds, and purpose of virtual asset transactions
- Ongoing transaction monitoring — scrutinize transactions throughout the business relationship for consistency with customer risk profile
- Politically Exposed Persons (PEP) screening — implement procedures to determine PEP status and apply Enhanced Due Diligence (EDD)
- Sanctions screening — screen customers and transactions against UN, OFAC, and other international sanctions lists
- Enhanced Due Diligence (EDD) for higher-risk categories — non-face-to-face relationships, complex ownership structures, high-value transactions, cross-border correspondent virtual asset relationships, high-risk jurisdictions
- Suspicious Transaction Reports (STRs) — file promptly with the Oman Financial Intelligence Unit (OMAFIU) when funds are suspected to be proceeds of crime or related to terrorism financing
- No tipping-off prohibition — VASPs and employees may not disclose STR filings to customers or third parties
- Record-keeping — maintain transaction records (origin, destination, amount, date, type) and CDD records for the legally prescribed retention period
- Compliance management — establish and maintain an AML/CFT compliance program, appoint a compliance officer at the management level, and provide ongoing training to employees
Key Restrictions
- Must obtain a license from the Capital Market Authority (CMA) under the Virtual Assets Regulatory Framework (2023) — the first comprehensive licensing regime for VASPs in Oman
- Local incorporation is required — the VASP must be a locally-incorporated entity to operate under the CMA framework
- CBO-regulated financial institutions (banks, payment service providers) are effectively prohibited from dealing in or facilitating cryptocurrency — an on-shore VASP must not rely on CBO-supervised entities for core banking services without careful structuring
- The CMA framework covers issuance, listing, and trading of virtual assets — scope includes custodial services and exchange operations
- Full compliance with FATF Recommendation 15 (new technologies) and MENAFATF standards is expected
- Must comply with Oman's AML/CFT Law (Royal Decree No. 30/2016 as amended by Royal Decree No. 112/2020) and implementing regulations under Ministerial Decision No. 63/2016
Key Risks
- Regulatory ambiguity — the CMA framework was issued in November 2023 and its full operational details, application timeline, and enforcement posture are still maturing; there is limited publicly available guidance on capital requirements, governance standards, and application procedures
- CBO-CMA jurisdictional tension — the CBO continues to warn against crypto for its supervised entities, while the CMA licenses VASPs; operators may face friction in accessing the formal banking system
- No specific qualified custodian, segregation of client assets, insurance/bonding, or cold storage rules exist — operators must design their own safeguards without regulatory guidance, creating compliance risk
- Low enforcement precedent — the framework is new, and no known enforcement actions against licensed VASPs exist; regulatory expectations in practice are untested
- AML/CFT regime is broad in statutory language but sparse in crypto-specific guidance — VASPs must extrapolate obligations from general financial institution rules under Ministerial Decision No. 63/2016
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Capital Market Authority (CMA) Virtual Assets Regulatory Framework (2023): The CMA issued a comprehensive regulatory framework for virtual assets in July 2023. This framework aims to regulate the activities of VASPs, including issuance, listing, and trading of virtual assets, ensuring compliance with international AML/CFT standards. It covers licensing requirements, corporate governance, market conduct, and crucial for this discussion, AML/CFT obligations.
Legal Reference: While the full official text is often subject to specific publication (e.g., in the Official Gazette), announcements from the CMA confirm its promulgation.
CMA Announcement: CMA Oman News - Issuance of Virtual Assets Regulatory Framework (This link might change or be archived; search CMA Oman for "Virtual Assets Regulatory Framework 2023")
Central Bank of Oman (CBO): The CBO has previously issued warnings regarding the risks of virtual currencies. However, in parallel with the CMA, it has also been working on developing its own regulatory framework for digital assets, particularly concerning digital currencies and payments.
Royal Decree No. 30/2016 on Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT Law), amended by Royal Decree No. 112/2020: This is the foundational law for AML/CFT in Oman. While it predates explicit crypto regulations, its broad definitions of "funds," "financial institutions," and "financial activities" are intended to encompass new technologies and virtual assets once they fall under a regulated scope. VASPs, once licensed, will be designated as financial institutions or designated non-financial businesses and professions (DNFBPs) under this law.
Royal Decree No. 112/2020 (Amending some provisions of the AML/CFT Law) - Similar challenge for direct public link.
Oman's Adherence to FATF Standards: Oman is a member of the Middle East and North Africa Financial Action Task Force (MENAFATF) and is committed to implementing the recommendations of the Financial Action Task Force (FATF). FATF Recommendation 15 specifically addresses new technologies, urging countries to regulate and supervise VASPs for AML/CFT purposes, including sanctions compliance.
Legal Reference: FATF Recommendations (updated 2023) - particularly Recommendation 15 and the VASP Guidance
Royal Decree No. 30/2016 (Law on Combating Money Laundering and Terrorism Financing): This is the foundational AML/CFT law in Oman, outlining the obligations for financial institutions and designated non-financial businesses and professions (DNFBPs).
Ministerial Decision No. 63/2016 (Implementing Regulations of the Law on Combating Money Laundering and Terrorism Financing): This decision provides detailed regulations and guidelines for implementing Royal Decree 30/2016.
Identification and Verification (ID&V) of Customers:
Beneficial Ownership Identification:
Understanding the Purpose and Intended Nature of the Business Relationship:
Conducting ongoing scrutiny of transactions undertaken throughout the course of the business relationship to ensure consistency with the VASP's knowledge of the customer, their business, and risk profile.
Politically Exposed Persons (PEPs):
Screening customers and transactions against national and international sanctions lists (e.g., UN, OFAC).
Enhanced Due Diligence (EDD):
Obligation to Report: If a VASP knows, suspects, or has reasonable grounds to suspect that funds are proceeds of a criminal activity or are related to terrorism financing, it must promptly file a Suspicious Transaction Report (STR) with the Oman Financial Intelligence Unit (OMAFIU).
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that an STR is being, or has been, submitted, or that an investigation is being conducted.
Transaction Records: All records of domestic and international transactions, including information on the origin and destination of the funds/virtual assets, transaction amount, date, and type.
CDD Records: Records of all information obtained through the CDD process (identification data, beneficial ownership information, business relationship purpose, etc.).
CMA Issuance of Virtual Asset Regulatory Framework
CMA Oman Official Announcement (English): https://cma.gov.om/Home/News/NewsDetails/638363765101683416
Central Bank of Oman (CBO): Has consistently issued warnings against dealing in cryptocurrencies for financial institutions under its supervision, citing risks such as volatility, money laundering, and lack of regulatory oversight. These warnings essentially act as a prohibition for banks and payment service providers. While these warnings are a form of regulatory action, they haven't been followed by publicly disclosed, named enforcement actions with specific fines against a particular entity for crypto-related violations that are distinct from broader financial regulations.
CBO Warnings against Crypto (Ongoing/Recurring)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — an on-shore VASP may operate in Oman under the CMA's November 2023 Virtual Assets Regulatory Framework, requiring local incorporation, a CMA license, full AML/CFT compliance under Royal Decree No. 30/2016, and careful navigation of the CBO's continued prohibitions against crypto for its supervised entities, though the framework is new and many operational details (capital, governance, application timeline) remain untested.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?