Centralized exchange in Palau
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Palau with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD required under AML/CFT Act 2017: obtain and verify full legal name, date of birth, residential address, national ID/passport for individuals; legal name, legal form, proof of existence, registered address, directors for entities.
- Beneficial ownership identification required — identify natural persons holding 25% or more ownership or control.
- Understand purpose and intended nature of business relationship.
- Ongoing transaction monitoring — scrutinize transactions for consistency with customer profile, risk profile, and source of funds.
- Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusually large transactions, and certain virtual asset transactions.
- Suspicious Transaction Reporting (STR) — no minimum threshold; all suspicious transactions (or attempts) must be reported to the Palau FIU.
- No tipping-off — VASPs and employees must not disclose STR submissions to customers or third parties.
- Recordkeeping: customer CDD records and transaction records (amounts, asset types, dates, wallet addresses) must be retained.
- Risk-based approach to virtual asset transactions — assess risks by asset type, volume, counterparty wallets, and geography.
- Travel Rule obligations: FATF Recommendation 15 applies; Palau is an APG member committed to FATF standards on VASPs, requiring originator/beneficiary information transmission for virtual asset transfers.
Key Restrictions
- No specific VASP or digital asset custody license exists; operators must rely on interpretation under the Financial Institutions Act (Title 30) — exchange activities are 'highly likely' to be considered money transmission/financial services requiring a license.
- No specific rules for digital asset segregation, cold storage, insurance/bonding, or qualified custodian definitions — reliance on general trust/fiduciary principles.
- Must obtain a license under the Financial Institutions Act if digital assets are interpreted as 'financial instruments' — application depends on PFIC interpretation.
- Local entity required — the Financial Institutions Act governs entities operating in/from Palau; a foreign entity offering services to Palau residents without local presence faces high legal uncertainty.
Key Risks
- Extreme regulatory ambiguity — no VASP-specific law exists; the applicability of the Financial Institutions Act to crypto exchanges is untested and depends on PFIC interpretation.
- Nascent enforcement environment — Palau is still developing its digital asset framework; enforcement priorities are unclear but APG/FATF pressure is increasing.
- Economic size risk — Palau is a small jurisdiction with limited regulatory capacity; the focus is on the stablecoin pilot, not on comprehensive exchange regulation.
- Reputational risk — operating in a jurisdiction with a nascent framework may attract scrutiny from partner banks, correspondent banks, and international regulators.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No specific digital asset custody license exists.
General financial services licenses under the Financial Institutions Act (Title 30 of the Palau National Code) could potentially apply if digital assets are interpreted to fall within the scope of "financial instruments" or "financial services." However, the Act was not designed with virtual assets in mind, and specific amendments or interpretations would be necessary.
Any entity performing functions akin to a traditional bank, trust company, or money services business with digital assets might be required to register or obtain a license under existing laws, but this would depend on interpretation by the Palau Financial Institutions Commission (PFIC) or other relevant authorities.
No Specific VASP License: As of the latest information, Palau has not enacted specific legislation for the licensing or registration of virtual asset service providers (VASPs) that directly implements FATF Recommendations regarding VASP-specific licenses.
Reliance on Existing Financial Institutions Act: Cryptocurrency businesses conducting activities that resemble traditional financial services (e.g., money transmission, payments, exchange of value) would likely fall under the purview of Palau's existing financial services legislation, primarily the Palau Financial Institutions Act (Title 27 of the Palau National Code).
Cryptocurrency Exchanges (Fiat-to-Crypto, Crypto-to-Fiat, Crypto-to-Crypto):
These activities are highly likely to be considered money transmission services or similar financial services under the Palau Financial Institutions Act.
If interpreted as such, an exchange would need a license for "Money Services Business" or a similar category. This would typically apply if the exchange involves fiat currency or facilitates transfers of value between different parties.
No specific rules for digital asset segregation.
In the absence of specific digital asset regulations, general principles of trust law and fiduciary duties, as applied to traditional financial services, would likely be the most relevant. These principles typically require the segregation of client funds/assets from the firm's operational assets to protect clients in case of insolvency. However, there is no explicit mandate tailored for virtual assets.
No specific insurance or bonding requirements for digital asset custodians.
No specific cold storage mandates.
No specific definition of a "qualified custodian" for digital assets.
AML/CFT Obligations: Regardless of specific licensing, all entities operating in Palau, especially those handling financial transactions, are subject to the country's AML/CFT framework. The Financial Supervisory Commission (FSC) is the primary regulator for financial institutions and oversees AML/CFT compliance.
Anti-Money Laundering and Countering the Financing of Terrorism Act of 2017 (AML/CFT Act 2017): This is the overarching legislation that defines money laundering and terrorist financing offenses, establishes reporting obligations, and outlines customer due diligence requirements for financial institutions and DNFBPs. While it may not explicitly mention "virtual assets" in all its original definitions, the broad scope of "funds" or "property" and the country's commitment to FATF recommendations mean it's interpreted to cover virtual assets.
Financial Intelligence Unit Act, 2014: This Act establishes the Palau Financial Intelligence Unit (FIU) and outlines its powers and functions, including receiving and analyzing suspicious transaction reports.
Implementing FATF Recommendation 15 (New Technologies) and its Interpretive Note, which mandates countries to regulate and supervise VASPs for AML/CFT purposes, including licensing or registration.
Identification and Verification of Customers:
Beneficial Ownership Identification and Verification:
Purpose and Intended Nature of Business Relationship:
Ongoing Due Diligence:
Enhanced Due Diligence (EDD):
Risk-Based Approach to Virtual Asset Transactions:
Reporting Threshold: There is no minimum monetary threshold for reporting. Any transaction (or attempted transaction), regardless of amount, where the VASP has reasonable grounds to suspect it is linked to money laundering, terrorist financing, or other criminal activity, must be reported.
Content of Report: STRs must contain all relevant information, including the identity of the customer, details of the transaction, the grounds for suspicion, and any supporting documentation.
Evidence fact pw.aml.no-tipping-off not found (may have been renamed).
Evidence fact pw.aml.protection-for-reporters not found (may have been renamed).
Customer Records: All records obtained through CDD procedures (identification documents, verification records, beneficial ownership information, business relationship purpose).
Transaction Records: Details of all transactions, including amounts, types of virtual assets, dates, and parties involved (including originating and beneficiary wallet addresses).
Small Financial Sector & Nascent Regulation: Palau is a small island nation with a relatively small financial sector. While it is exploring digital assets (e.g., its national stablecoin initiative with Ripple), its regulatory framework for cryptocurrencies is still evolving. The focus tends to be on establishing foundational Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) compliance rather than large-scale, public enforcement actions against crypto entities.
Primary Regulatory Body: The primary body responsible for financial intelligence and AML/CFT oversight in Palau is the Palau Financial Intelligence Unit (FIU). Their work often involves suspicious transaction reports (STRs) and cooperation with international bodies like the Asia/Pacific Group on Money Laundering (APG), but individual enforcement actions with public details like specific penalties against crypto entities are not commonly published.
Focus on Development, Not Enforcement (Yet): Palau has been notably proactive in exploring the adoption of digital assets, such as its "Root Name System" initiative and the Palau Stablecoin (PSC) pilot program. This indicates a forward-looking approach, but it also means the regulatory and enforcement infrastructure for complex crypto violations may still be under development.
Money Laundering and Proceeds of Crime Act (Title 31 of the Palau National Code): This act outlines AML/CFT obligations. As a member of the Asia/Pacific Group on Money Laundering (APG), Palau is committed to implementing the FATF Recommendations, which include virtual assets and virtual asset service providers (VASPs) within their scope. Any entity performing VASP functions (which can include custody) would be expected to comply with these general AML/CFT requirements.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange could potentially operate in Palau under the existing Financial Institutions Act (Title 30) if the PFIC interprets exchange activities as money transmission requiring a license, but with no VASP-specific legislation, no custody segregation rules, and reliance on general trust/fiduciary principles alongside AML/CFT obligations under the 2017 Act.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?