Self-custodial wallet / non-custodial software in Oman
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Oman without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to the publisher of self-custodial wallet software, because the publisher never holds, controls, or has access to user funds and therefore does not meet the definition of a VASP under Oman's regulatory framework.
- Oman's AML/CFT Law (Royal Decree No. 30/2016, amended by RD 112/2020) and the CMA Virtual Assets Regulatory Framework apply to VASPs — entities that custody, exchange, transfer, or otherwise exercise control over virtual assets on behalf of another person. A non-custodial wallet publisher does not fall within that scope.
- No CDD, KYC, STR filing, sanctions screening, or record-keeping requirements attach to the software publisher in this model.
Key Restrictions
- The CMA Virtual Assets Regulatory Framework (2023) regulates VASPs that issue, list, trade, or custody virtual assets — self-custodial wallet software publishing is not captured, but any ancillary services (e.g., in-wallet swaps, staking-as-a-service, or fiat on-ramps) could trigger VASP classification.
- The CBO has issued ongoing advisories prohibiting regulated financial institutions (banks, payment service providers) from dealing in or facilitating cryptocurrency transactions. Publishers relying on bank-to-crypto on-ramps should ensure those relationships are not structured as crypto-facilitation by the bank.
- The CBO advisories do not directly apply to a software publisher that has no involvement in financial transactions, but the lack of a clear legislative carve-out for non-custodial software creates residual legal uncertainty.
Key Risks
- Regulatory ambiguity: Oman has no statutory definition of 'virtual asset service provider' that explicitly excludes non-custodial software publishers. A broad interpretation could retroactively classify wallet publishers as VASPs.
- CBO stance risk: The CBO's blanket warnings against crypto could influence enforcement even against software-only providers if the authority takes an expansive view of 'facilitating' crypto activity.
- Evolving framework risk: The CMA's Virtual Assets Regulatory Framework (Nov 2023) is new and its implementation details, including whether non-custodial wallet providers need to register, are not yet settled.
- FATF pressure: Oman is a MENAFATF member and FATF Recommendation 15 requires countries to regulate VASPs. Future regulations may broaden the definition to capture wallet publishers.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Capital Market Authority (CMA) Virtual Assets Regulatory Framework (2023): The CMA issued a comprehensive regulatory framework for virtual assets in July 2023. This framework aims to regulate the activities of VASPs, including issuance, listing, and trading of virtual assets, ensuring compliance with international AML/CFT standards. It covers licensing requirements, corporate governance, market conduct, and crucial for this discussion, AML/CFT obligations.
Central Bank of Oman (CBO): The CBO has previously issued warnings regarding the risks of virtual currencies. However, in parallel with the CMA, it has also been working on developing its own regulatory framework for digital assets, particularly concerning digital currencies and payments.
Royal Decree No. 30/2016 on Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT Law), amended by Royal Decree No. 112/2020: This is the foundational law for AML/CFT in Oman. While it predates explicit crypto regulations, its broad definitions of "funds," "financial institutions," and "financial activities" are intended to encompass new technologies and virtual assets once they fall under a regulated scope. VASPs, once licensed, will be designated as financial institutions or designated non-financial businesses and professions (DNFBPs) under this law.
Royal Decree No. 112/2020 (Amending some provisions of the AML/CFT Law) - Similar challenge for direct public link.
Oman's Adherence to FATF Standards: Oman is a member of the Middle East and North Africa Financial Action Task Force (MENAFATF) and is committed to implementing the recommendations of the Financial Action Task Force (FATF). FATF Recommendation 15 specifically addresses new technologies, urging countries to regulate and supervise VASPs for AML/CFT purposes, including sanctions compliance.
Central Bank of Oman (CBO): Has consistently issued warnings against dealing in cryptocurrencies for financial institutions under its supervision, citing risks such as volatility, money laundering, and lack of regulatory oversight. These warnings essentially act as a prohibition for banks and payment service providers. While these warnings are a form of regulatory action, they haven't been followed by publicly disclosed, named enforcement actions with specific fines against a particular entity for crypto-related violations that are distinct from broader financial regulations.
CMA Issuance of Virtual Asset Regulatory Framework
Royal Decree No. 30/2016 (Law on Combating Money Laundering and Terrorism Financing): This is the foundational AML/CFT law in Oman, outlining the obligations for financial institutions and designated non-financial businesses and professions (DNFBPs).
Ministerial Decision No. 63/2016 (Implementing Regulations of the Law on Combating Money Laundering and Terrorism Financing): This decision provides detailed regulations and guidelines for implementing Royal Decree 30/2016.
CBO Warnings against Crypto (Ongoing/Recurring)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditionally permitted — publishing self-custodial wallet software does not trigger VASP licensing or AML obligations under Oman's current regulatory framework because the publisher never holds or controls user funds, but the lack of an explicit statutory exclusion and the evolving CMA/CBO regulatory landscape creates moderate uncertainty requiring legal monitoring.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?