Crypto-funded debit card in Pakistan
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is not permitted in Pakistan.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD/KYC per SBP BPRD Circular No. 04 of 2022 — mandatory for VASPs (customer identification, verification, beneficial ownership determination)
- Risk-based approach to CDD — enhanced due diligence for higher-risk customers/transactions per SBP CDD/KYC Regulations 2022
- PEP screening — enhanced CDD, senior management approval, source-of-wealth determination
- Sanctions screening against UN and national sanctions lists
- Suspicious Transaction Reporting (STR) to the Financial Monitoring Unit (FMU) under AMLA 2010 — for any unusual or suspicious attempted/completed transaction
- No-tipping-off prohibition — VASPs and employees cannot disclose STR filings to customers or third parties
- Record-keeping: customer CDD records and transaction records (amount, currency, date, originator/beneficiary) for prescribed periods under AMLA 2010 and AML Regulations 2015
- Travel Rule (FATF Rec 16) — implicit alignment expected under SBP CDD/KYC framework, though explicit VASP guidance may still be pending
Key Restrictions
- SBP BPRD Circular No. 03 of 2018 prohibits ALL banks, MFBs, PSOs/PSPs from dealing in, facilitating, or maintaining accounts for virtual-currency-related activities — this blocks crypto-funded debit card issuance because fiat settlement requires a bank or PSO/PSP partner
- No regulated financial institution in Pakistan can process fiat transactions linked to crypto — cardholders cannot fund fiat balances via crypto off-ramps through the formal banking system
- Stablecoins are not classified as e-money, payment tokens, or securities — no EMI license path exists for crypto-to-fiat conversion instruments
- No current licensing framework for VASPs — only proposed drafts exist; no entity can lawfully obtain a license today to operate a crypto-to-fiat card program
- Even if a foreign-issued card were offered to Pakistani residents, the local banking prohibition prevents reload/off-ramp settlement in the formal system
Key Risks
- De facto prohibition — attempting to operate would likely be blocked by banks/PSPs refusing to partner due to SBP Circular No. 03 of 2018
- Enforcement precedent — FIA has targeted Binance Pakistan for scam and money-laundering allegations; any crypto-related fiat channel risks criminal enforcement
- Regulatory ambiguity — no legal clarity on stablecoins or crypto-to-fiat conversion means any structure operates in a legally grey area with no regulatory protection
- Tax compliance risk — crypto gains must be reported as capital gains (15% if held >1 year; slab rates if <1 year) or business income; failure to declare could trigger FBR scrutiny
- FATF-driven framework is in proposal stage only — no current license pathway; operating before a framework exists would be unlawful
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
A standing prohibition by the State Bank of Pakistan (SBP) for regulated financial institutions to deal in or facilitate virtual assets.
SBP BPRD Circular No. 03 of 2018: Issued on April 06, 2018, this circular explicitly prohibits all banks, Microfinance Banks (MFBs), and Payment System Operators (PSOs)/Payment Service Providers (PSPs) from:
Dealing in Virtual Currencies/Coins/Tokens (VCs/VCOs/VCTs).
Facilitating any transaction involving VCs/VCOs/VCTs.
Maintaining accounts of individuals/entities involved in VCs/VCOs/VCTs.
Implication: This circular effectively creates a de facto ban on any regulated financial institution in Pakistan from engaging with or facilitating cryptocurrency activities. This means that:
Cryptocurrency exchanges, custody providers, and payment processors cannot legally operate with bank accounts in Pakistan or integrate with the traditional financial system.
Any individual or entity involved in crypto transactions faces significant challenges in dealing with their funds through regulated financial channels.
Exchanges: No license. Cannot lawfully connect to the banking system.
Custody Providers: No license. Cannot lawfully connect to the banking system.
Payment Processors (Crypto-related): If processing fiat for crypto, no license and prohibited for regulated entities. If purely crypto-to-crypto, it operates outside the formal financial system but still in a legally ambiguous and high-risk environment.
Ongoing discussions and proposed legislative efforts, primarily driven by the need to comply with Financial Action Task Force (FATF) recommendations, to eventually introduce a regulatory framework.
No Explicit Classification: Pakistani law does not explicitly classify stablecoins as e-money, payment tokens, or securities.
Not Legal Tender: The State Bank of Pakistan has explicitly stated that virtual currencies/coins/tokens are not legal tender.
E-money/Payment Token: If a stablecoin were designed to maintain parity with the Pakistani Rupee (PKR) and facilitate payments, it could hypothetically be viewed through the lens of SBP's Electronic Money Institutions (EMI) regulations. However, stablecoins are not currently authorized EMIs.
Current Reality: Stablecoins, like other cryptocurrencies, are simply considered "virtual assets" which are not recognized or regulated.
None: As there is no specific regulatory framework for stablecoins, there are no established reserve requirements outlined in Pakistani law for stablecoin issuers.
None: Similarly, there are no specific licensing requirements for stablecoin issuers in Pakistan. Issuing stablecoins is not a recognized or licensed activity.
Anti-Money Laundering Act, 2010 (AMLA 2010): This is the overarching legislation that criminalizes money laundering and provides the legal basis for AML/CFT measures in Pakistan. It mandates reporting obligations for financial institutions and designated non-financial businesses and professions (DNFBPs).
SBP CDD / KYC Regulations, 2022 (BPRD Circular No. 04 of 2022): This is a critical development. The State Bank of Pakistan, through its Banking Policy & Regulations Department (BPRD), issued comprehensive Customer Due Diligence (CDD) / Know Your Customer (KYC) Regulations, 2022. These regulations explicitly define and include "Virtual Asset Service Providers" (VASPs) as a type of entity that must comply with AML/CFT requirements, effectively bringing them under the regulatory ambit.
Key Aspect: These regulations define a VASP, consistent with FATF definitions, and mandate that they adhere to all the CDD/KYC obligations applicable to other financial institutions.
VASPs must adopt a risk-based approach to CDD. This means applying enhanced CDD measures for higher-risk customers, products, services, transactions, or geographic areas.
Factors determining risk include customer type, jurisdiction, type of virtual asset, transaction value/volume, and delivery channels.
Politically Exposed Persons (PEPs): Implement enhanced CDD measures for PEPs, including obtaining senior management approval for establishing business relationships, taking reasonable measures to establish the source of wealth and funds, and conducting ongoing enhanced monitoring.
Sanctions Screening: Screen customers and transactions against national and international sanctions lists (e.g., UN Security Council sanctions lists).
"Travel Rule" (FATF Recommendation 16): While the SBP CDD/KYC Regulations 2022 implicitly align with FATF standards, explicit guidance on the "Travel Rule" for VASPs (requiring the collection and transmission of originator and beneficiary information for crypto transfers above a certain threshold) may still be developing or need further specific directives. However, as Pakistan adheres to FATF standards, VASPs should anticipate and prepare for full implementation of this rule.
Trigger: Any transaction (attempted or completed) that appears unusual, lacks a clear economic or lawful purpose, is inconsistent with the customer's known profile, or raises suspicion of money laundering or terrorist financing.
Reporting Mechanism: Reports are filed electronically through the FMU's secure reporting portal.
"No Tipping Off": VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR has been or will be filed.
Entity Targeted: Binance Pakistan (and implicitly, individuals running scam schemes facilitated through Binance). Violation Type: Alleged involvement in multi-million dollar cryptocurrency scam, money laundering, illegal financial transactions, non-compliance with local regulations. The FIA issued a formal notice to Binance's Global Head of Growth for its alleged role in facilitating fraudulent transactions that led to significant financial losses for Pakistani citizens. Penalty Amount: No direct fine was publicly levied against Binance by Pakistani authorities. The "penalty" was primarily investigative pressure, a formal inquiry, and a demand for cooperation, which could have led to further action or reputational damage. The FIA initiated criminal proceedings against individuals involved in the scam. Outcome: The FIA launched an inquiry and issued a formal notice to Binance, demanding details and cooperation. Binance subsequently stated its commitment to cooperate with the FIA and local authorities. The FIA also identified and initiated action against 11 individuals alleged to be masterminds of a multi-million dollar fraud scheme involving Binance. The action highlighted the government's serious concerns about unregulated crypto activities. While Binance itself wasn't fined, the action put significant pressure on the exchange and warned the public.
If the capital asset (crypto) is held for one year or less, the gain is taxed at the individual's normal income tax slab rates.
Income from Business: If an individual or entity is frequently trading cryptocurrencies, mining them as a commercial enterprise, or providing crypto-related services (e.g., operating an exchange, providing consultancy), such activities could be classified as a "business."
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — SBP Circular No. 03 of 2018 prohibits all regulated financial institutions from processing or facilitating any crypto-related transactions, making it impossible to operate a crypto-funded debit card program that requires fiat settlement through the formal banking system; no VASP licensing framework exists yet, and no legal path exists for stablecoin issuance or EMI licensing for crypto-to-fiat conversion.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?