← Regulations / Palau / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Palau

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Conditional AI-Generated · Unreviewed

Self-custodial wallet is conditionally permitted in Palau without local incorporation, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • No custody / no control over private keys means the entity is unlikely to be classified as a financial institution or VASP under Palau's current framework, so direct AML obligations likely do not attach to the software publisher itself.
  • If, however, the software publisher engages in any ancillary financial activities (e.g., swap/aggregation services embedded in the wallet), those activities could trigger AML/CFT obligations under the AML/CFT Act 2017 and the Financial Intelligence Unit Act 2014.
  • If triggered, CDD would include: full name, date of birth, address, national ID/passport; for entities, certificate of incorporation, directors, registered address, and proof of authority.
  • Beneficial ownership identification required for natural persons holding 25% or more.
  • Ongoing monitoring of transactions and source of funds would be required.
  • No minimum threshold for STRs — any suspicious activity must be reported to the Palau FIU regardless of amount.
  • No tipping-off prohibition applies to STR reporters.

Key Restrictions

  • Must not hold, control, or have access to user private keys or funds to avoid falling under Palau's existing financial services legislation (Financial Institutions Act, Title 30).
  • No specific digital asset license exists — cannot obtain a 'VASP license' even if desired; only general financial services licensing is available.
  • Any embedded financial services (fiat on-ramps, swaps, staking) could reclassify the publisher as a money transmitter requiring licensure under existing financial institutions law.
  • No specific consumer-protection, disclosure, or custody rules apply to non-custodial software; operators must rely on general principles of law (e.g., fiduciary duties, contract law).
  • Palau's Digital Residency Act (2023) signals growing digital economy regulation but does not directly govern non-custodial wallet software.

Key Risks

  • Regulatory ambiguity — Palau has not enacted specific VASP or digital asset custody legislation, creating uncertainty about how non-custodial software publishers would be treated if scrutinized.
  • FATF Recommendation 15 mandates VASP regulation; Palau as an APG member may adopt VASP rules in the future that could catch non-custodial wallet publishers (e.g., if 'control' definitions expand).
  • Embedded financial features (swap, staking, fiat on-ramps) commonly found in modern non-custodial wallets may push the operator into licensable territory without clear guidance.
  • Small financial sector means limited regulatory precedent or guidance for cryptocurrency business models; enforcement posture is uncertain.
  • No clear consumer-protection or disclosure framework means civil liability risk if users suffer losses from software bugs or security flaws.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

General financial services licenses under the Financial Institutions Act (Title 30 of the Palau National Code) could potentially apply if digital assets are interpreted to fall within the scope of "financial instruments" or "financial services." However, the Act was not designed with virtual assets in mind, and specific amendments or interpretations would be necessary.

licensing 60% confidence

No Specific VASP License: As of the latest information, Palau has not enacted specific legislation for the licensing or registration of virtual asset service providers (VASPs) that directly implements FATF Recommendations regarding VASP-specific licenses.

licensing 60% confidence

Reliance on Existing Financial Institutions Act: Cryptocurrency businesses conducting activities that resemble traditional financial services (e.g., money transmission, payments, exchange of value) would likely fall under the purview of Palau's existing financial services legislation, primarily the Palau Financial Institutions Act (Title 27 of the Palau National Code).

licensing 60% confidence

AML/CFT Obligations: Regardless of specific licensing, all entities operating in Palau, especially those handling financial transactions, are subject to the country's AML/CFT framework. The Financial Supervisory Commission (FSC) is the primary regulator for financial institutions and oversees AML/CFT compliance.

licensing 60% confidence

Any entity performing functions akin to a traditional bank, trust company, or money services business with digital assets might be required to register or obtain a license under existing laws, but this would depend on interpretation by the Palau Financial Institutions Commission (PFIC) or other relevant authorities.

licensing 60% confidence

Cryptocurrency Exchanges (Fiat-to-Crypto, Crypto-to-Fiat, Crypto-to-Crypto):

licensing 60% confidence

If interpreted as such, an exchange would need a license for "Money Services Business" or a similar category. This would typically apply if the exchange involves fiat currency or facilitates transfers of value between different parties.

aml 60% confidence

Anti-Money Laundering and Countering the Financing of Terrorism Act of 2017 (AML/CFT Act 2017): This is the overarching legislation that defines money laundering and terrorist financing offenses, establishes reporting obligations, and outlines customer due diligence requirements for financial institutions and DNFBPs. While it may not explicitly mention "virtual assets" in all its original definitions, the broad scope of "funds" or "property" and the country's commitment to FATF recommendations mean it's interpreted to cover virtual assets.

aml 60% confidence

Financial Intelligence Unit Act, 2014: This Act establishes the Palau Financial Intelligence Unit (FIU) and outlines its powers and functions, including receiving and analyzing suspicious transaction reports.

aml 60% confidence

Implementing FATF Recommendation 15 (New Technologies) and its Interpretive Note, which mandates countries to regulate and supervise VASPs for AML/CFT purposes, including licensing or registration.

aml 60% confidence

Identification and Verification of Customers:

aml 60% confidence

Beneficial Ownership Identification and Verification:

aml 60% confidence

Risk-Based Approach to Virtual Asset Transactions:

aml 60% confidence

Reporting Threshold: There is no minimum monetary threshold for reporting. Any transaction (or attempted transaction), regardless of amount, where the VASP has reasonable grounds to suspect it is linked to money laundering, terrorist financing, or other criminal activity, must be reported.

Evidence fact pw.aml.no-tipping-off not found (may have been renamed).

enforcement 40% confidence

Small Financial Sector & Nascent Regulation: Palau is a small island nation with a relatively small financial sector. While it is exploring digital assets (e.g., its national stablecoin initiative with Ripple), its regulatory framework for cryptocurrencies is still evolving. The focus tends to be on establishing foundational Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) compliance rather than large-scale, public enforcement actions against crypto entities.

enforcement 40% confidence

Focus on Development, Not Enforcement (Yet): Palau has been notably proactive in exploring the adoption of digital assets, such as its "Root Name System" initiative and the Palau Stablecoin (PSC) pilot program. This indicates a forward-looking approach, but it also means the regulatory and enforcement infrastructure for complex crypto violations may still be under development.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — publishing non-custodial wallet software in Palau likely does not trigger VASP/MSB classification or AML obligations so long as the publisher never holds, controls, or accesses user private keys or funds, but any embedded financial services (swaps, fiat on-ramps, staking) could reclassify the operator under existing financial institutions law, and Palau's nascent regulatory framework creates significant ambiguity regarding future FATF-driven VASP rules.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?