DeFi protocol frontend in Philippines
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Philippines with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP License or SEC CASP registration required — AML/CTF compliance under AMLA enforced by AMLC
- Customer identification (KYC) and due diligence required for users (casual or occasional users likely face same obligations if frontend is a VASP/CASP)
- Suspicious Transaction Reports (STRs) to AMLC for any suspicious activity
- Covered transaction reporting to AMLC (threshold not specified in facts but standard PH AMLA applies)
- Regular reports to SEC and AMLC with detailed documentation 30 days prior to any activity (for CASPs under SEC regime)
- Strict AML procedures mandatory under SEC CASP rules with minimum ₱100M capital and physical incorporation
- Geofencing (IP blocking) required for unlicensed operation — SEC/NTC enforce blocks on sites serving PH users without authorization
Key Restrictions
- VASP license from BSP (Circular 1108) requires PHP 50M minimum capitalization (~$900K USD) — new licenses frozen as of 2025, effectively blocking new entrants under BSP regime
- SEC CASP registration requires ₱100M minimum paid-up capital and physical incorporation in the Philippines
- 60% Filipino ownership may apply under certain structures
- Must geofence/block Philippine users and IP addresses if operator does not hold VASP/CASP license — SEC has enforced blocks on major exchanges (Binance, OKX, Bybit, KuCoin, Kraken etc.) via telecom coordination
- Fee-taking from PH users likely triggers classification as a regulated VASP/CASP activity requiring authorization
- Cannot operate solely offshore — local entity and license required for lawful operation serving PH residents
- If the frontend interacts with protocols that may be deemed securities under Section 3 of the SRC, additional SEC securities registration may be required
Key Risks
- Aggressive enforcement pattern: SEC has issued advisories and coordinated NTC website/app blocking against 50+ unlicensed platforms including Binance, Coinbase, Gemini, OKX, Bybit, KuCoin (2024-2025)
- BSP VASP license moratorium frozen indefinitely as of 2025 — even willing applicants cannot obtain a VASP license, leaving SEC CASP (₱100M capital) as the only current pathway
- Regulatory ambiguity: DeFi frontends are not explicitly classified — they may fall under BSP (payment/custody) or SEC (securities) or both, creating dual-reporting risk
- Telecom-level blocking (PLDT/Smart/Globe) can make the frontend inaccessible to all PH users regardless of decentralization of underlying protocol
- Criminal complaints and cease-and-desist orders possible for unlicensed operation — SEC has threatened these against non-compliant platforms
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SEC Philippines — Securities token oversight, warnings against unlicensed offerings
BSP Circular 1108 (2021) — VASP licensing framework
VASP: VASP License from BSP (Circular 1108/2021). PHP 50M (~$900K USD) minimum capitalization. 6-12 months. BSP imposed moratorium on new VASP licenses in 2022 to assess existing licensees; partially lifted 2024. Coins.ph and PDAX are major licensed operators. 60% Filipino ownership may apply.
EXCHANGE: VASP license — PHP 50M minimum capitalization. High crypto adoption driven by remittances and gaming/play-to-earn (Axie Infinity).
Crypto asset service providers (CASPs) must register with the Philippine Securities and Exchange Commission (SEC) and maintain a minimum capital of ₱100 million with physical incorporation in the Philippines
Strict compliance with anti-money laundering (AML) procedures is mandatory
CASPs must submit regular reports to the SEC and the AML Council with detailed documentation 30 days prior to any activity
Oversight splits: BSP handles custody, exchanges, on/off-ramps, and payment roles via Circular 1108; Securities and Exchange Commission (SEC) governs issuance, marketing, and trading under its Crypto-Asset Service Provider (CASP) regime.
New VASP licenses are frozen indefinitely as of 2025, prioritizing existing licensees.
Entity: Binance (world’s largest crypto exchange).
Penalty: Geo-blocking; users given 90 days to exit the platform, with website and app access restricted via coordination with telecom providers.
Entities: OKX, Bybit, KuCoin, Kraken, MEXC, Bitget, Phemex, CoinEx, BitMart, Poloniex (actively marketing to and serving Filipino users).
Violation: Operating without SEC licenses/registrations under CASP Rules and Guidelines (Memorandum Circulars No. 4 and No. 5, effective July 2025); providing/soliciting crypto trading services without authorization.
Penalty: Public advisory (August 1-4, 2025); threats of cease-and-desist orders, criminal complaints, website/app blocking via NTC, takedown requests to Google/Meta. Telecoms (PLDT, Smart, Globe) began blocking; list not exhaustive.
Entities: ~50 platforms including Coinbase, Gemini, and overlaps like OKX/Bybit/KuCoin (unlicensed virtual asset service providers/VASPs).
Violation: Operating without BSP authorization (BSP Circular No. 1108 for VASP regulations); non-compliance with AMLA via AMLC oversight.
Penalty: NTC directive to ISPs for website/mobile app blocks (effective by December 25, 2025 via PLDT/Smart/Globe); part of broader risk controls for money laundering/terrorist financing.
AMLA/AMLC for VASPs: https://fincrimecentral.com/sec-philippines-crypto-platforms-compliance/; https://www.lightspark.com/knowledge/is-crypto-legal-in-philippines
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi protocol frontend serving Philippine residents is a regulated activity (VASP/CASP) requiring BSP or SEC authorization with local incorporation and high minimum capital (₱50M–₱100M), but new VASP licenses are frozen as of 2025, and the SEC is actively blocking unlicensed platforms via telecom-level enforcement, so compliant entry is currently very difficult.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?