Papua New Guinea -- Sanctions Compliance Regulatory Overview

Papua New Guinea (PNG) is in the process of developing a comprehensive regulatory framework for virtual assets and Virtual Asset Service Providers (VASPs). While specific, dedicated cryptocurrency legislation is still emerging, PNG's existing Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF) framework, coupled with its international obligations, forms the basis for sanctions compliance for any entity dealing with financial transactions, including those involving virtual assets.

The Financial Analysis and Supervision Unit (FASU) of the Bank of Papua New Guinea (BPNG) is the country's Financial Intelligence Unit (FIU) and plays a central role in AML/CTF and sanctions enforcement. PNG is also a member of the Asia/Pacific Group on Money Laundering (APG), an associate member of the Financial Action Task Force (FATF), and is therefore committed to implementing FATF Recommendations.

Here's a breakdown of cryptocurrency sanctions and restrictions in PNG:

1. Primary Legal Framework in Papua New Guinea

The cornerstone of PNG's AML/CTF and sanctions regime is:

• Anti-Money Laundering and Counter Terrorist Financing Act 2015 (AML/CTF Act 2015): This Act provides the legal basis for identifying, freezing, and confiscating assets related to money laundering and terrorist financing. It obligates financial institutions and designated non-financial businesses and professions (DNFBPs) to implement AML/CTF measures. While it pre-dates specific crypto regulation, its broad definitions and principles are applied to virtual asset activities where deemed appropriate by regulators.

  • Note: Finding a publicly accessible, definitive online link for the most current version of PNG legislation can sometimes be challenging. Often, these are available through official government gazettes or legal databases.
  • Reference: Anti-Money Laundering and Counter Terrorist Financing Act 2015 (No. 4 of 2015). It can often be found on legal databases like PACLII (Pacific Legal Information Institute): http://www.paclii.org/pg/legis/consol_act/amlact2015408/ (This link may lead to an older version, direct legislative publication is preferred).

• Terrorism Act 2002 (and subsequent amendments): This Act provides specific provisions related to terrorist financing and the designation of terrorist entities.

  • Reference: Terrorism Act 2002. Again, often available via PACLII or official sources.

• Financial Analysis and Supervision Unit (FASU): As the FIU, FASU issues guidance, receives suspicious transaction reports (STRs), and disseminates information regarding designated persons and entities subject to sanctions.

  • Reference: FASU Website (part of BPNG): https://www.bankpng.gov.pg/financial-analysis-and-supervision-unit-fasu/

• Bank of Papua New Guinea (BPNG) Circulars and Statements: BPNG, as the central bank, has the authority to regulate financial services. While it has expressed caution regarding cryptocurrencies, it is working towards a regulatory framework for virtual assets. Any entities providing virtual asset services are expected to comply with existing AML/CTF obligations.

  • Reference: BPNG Public Statements/Press Releases (monitor for specific crypto guidance): https://www.bankpng.gov.pg/media-releases/

2. UN Sanctions Compliance Requirements for VASPs

PNG, as a member of the United Nations, is obligated to implement UN Security Council Resolutions (UNSCRs).

• Obligations for VASPs (or entities providing similar services):
  • Designated Person/Entity Screening: VASPs must screen their customers (both at onboarding and on an ongoing basis) against the UN Consolidated Sanctions List, which includes individuals and entities designated under various UN sanctions regimes (e.g., terrorism, proliferation, specific country regimes).
  • Asset Freezing: If a VASP identifies that it holds assets (including virtual assets) belonging to a designated person or entity, it must immediately freeze those assets and report the match to FASU.
  • Prohibition on Dealing: VASPs are prohibited from making funds or economic resources available to, or for the benefit of, designated persons or entities.
  • Suspicious Transaction Reporting (STR): Any transaction involving designated persons, or transactions suspected of being related to money laundering or terrorist financing, must be reported to FASU.
• Legal Basis: The AML/CTF Act 2015 mandates compliance with international obligations, including UN sanctions. FASU, under this Act, is responsible for disseminating UN sanctions lists to reporting entities and overseeing compliance.
• Reference: UN Security Council Sanctions Committees Website (for consolidated lists): https://www.un.org/securitycouncil/sanctions/information
  • FASU typically publishes advisories when new UN designations are made.

3. OFAC/EU Sanctions Compliance Requirements for VASPs

While OFAC (US Office of Foreign Assets Control) and EU (European Union) sanctions are not directly PNG law, compliance is often a practical necessity for VASPs operating in PNG due to:

• Extraterritorial Reach: OFAC and EU sanctions can have extraterritorial effects, particularly if transactions involve:
  • US persons (citizens, residents, entities, or their foreign branches).
  • The US financial system (e.g., US dollar clearing).
  • US-origin technology or services.
  • EU persons or entities.
• Correspondent Banking Relationships: PNG financial institutions (and potentially VASPs dealing with them) rely on correspondent banking relationships with US and European banks, which impose their own OFAC/EU compliance requirements.
• Reputational Risk: Failing to comply with major international sanctions regimes like OFAC or EU can lead to severe reputational damage, de-risking by international partners, and exclusion from global financial systems.
• Obligations: VASPs in PNG that engage in international transactions, particularly those involving US dollars or counterparties in the US/EU, should screen against:
  • OFAC Specially Designated Nationals (SDN) List: https://www.treasury.gov/ofac/downloads/sdn.txt
  • EU Consolidated Financial Sanctions List: https://www.sanctionsmap.eu/

4. Sanctioned Entity Screening Obligations

VASPs operating in or from PNG, or providing services to PNG residents, are expected to implement robust screening processes:

• Who: Any entity offering services related to virtual assets that falls under the scope of "financial institutions" or "designated non-financial businesses and professions" (DNFBPs) as defined by the AML/CTF Act 2015, or is otherwise regulated by BPNG/FASU. Even if not formally regulated as such yet, prudent business practice dictates compliance.
• What: Screening must be conducted against:
  • UN Consolidated Sanctions List.
  • OFAC SDN List (for US nexus/best practice).
  • EU Consolidated Financial Sanctions List (for EU nexus/best practice).
  • Any other relevant sanctions lists from jurisdictions where the VASP operates or has significant business ties.
• When:
  • Onboarding: Before establishing any business relationship or conducting transactions.
  • Ongoing Monitoring: Regular screening of existing customer bases against updated lists.
  • Per-Transaction Screening: For high-risk transactions or as part of a risk-based approach.
• How: Using reliable screening software or services that keep lists updated and provide auditable results.

5. Geographic Restrictions

PNG itself does not impose explicit geographic restrictions on cryptocurrency use beyond what is dictated by international sanctions. However, the enforcement of UN, OFAC, and EU sanctions effectively creates geographic restrictions for VASPs:

• Prohibited Jurisdictions: VASPs are generally prohibited from dealing with individuals or entities located in or connected to comprehensively sanctioned jurisdictions (e.g., North Korea, Iran, Syria, Cuba, certain regions of Ukraine/Russia) where those sanctions apply.
• High-Risk Jurisdictions: VASPs are expected to apply enhanced due diligence to transactions involving countries identified by FATF or other international bodies as high-risk for money laundering and terrorist financing. FASU may issue guidance on such jurisdictions.

6. Penalties for Violations

Violations of PNG's AML/CTF and sanctions laws can result in significant penalties:

• AML/CTF Act 2015:

  • For Individuals: Imprisonment, substantial fines.
  • For Corporations: Significant monetary penalties (fines) that can be millions of Kina, and potential de-registration or loss of operating license.
  • For Directors/Officers: Personal liability, including fines and imprisonment.

• Terrorism Act 2002: Severe penalties, including long-term imprisonment for financing terrorism.

• Reputational Damage: Significant harm to business reputation, making it difficult to operate internationally or attract customers.

• De-risking: International financial partners may sever relationships, effectively cutting off access to global financial systems.

• Reference: Specific penalty provisions can be found in the respective Acts, particularly Part 9 (Enforcement and Penalties) of the AML/CTF Act 2015.

7. Country-Specific Sanctions Lists for Crypto

PNG does not maintain its own independent country-specific sanctions lists targeting cryptocurrencies or specific virtual assets.

Instead, PNG's approach is to:

• Implement UN Sanctions: FASU and BPNG are responsible for enforcing UN Security Council Resolutions, which list sanctioned individuals and entities. These lists are applied universally, meaning any assets (fiat or virtual) belonging to these designated persons/entities must be frozen.
• Follow FATF Recommendations: PNG's regulatory developments for VASPs will be guided by FATF Recommendation 15 (New Technologies) and Recommendation 6 (Targeted Financial Sanctions), ensuring that VASPs are subject to the same sanctions obligations as traditional financial institutions.

In summary, while PNG's specific crypto regulatory framework is evolving, the existing AML/CTF laws and international obligations mean that VASPs operating in PNG are expected to conduct rigorous sanctions screening against UN, OFAC, and EU lists, freeze assets of designated persons, and report suspicious activities to FASU. Failure to do so carries significant legal and financial risks. It is always advisable for VASPs to seek independent legal counsel regarding their specific compliance obligations in PNG.