← Regulations / Qatar / Operating Models / CEX

Centralized exchange in Qatar

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in Qatar with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • CDD must be performed on all customers — natural persons (name, address, DOB, nationality, official ID) and legal persons (name, legal form, incorporation proof, ownership/control structure). [qa.aml.natural-persons-obtain-and-verify, qa.aml.legal-personsarrangements-obtain-and-verify]
  • Beneficial ownership identification required for any natural person owning or controlling 25%+ of the entity. [qa.aml.beneficial-ownership-identification-identify-and]
  • Source of funds and source of wealth must be obtained for high-risk customers or transactions. [qa.aml.source-of-funds-and-source]
  • Ongoing transaction monitoring for consistency with customer risk profile; suspicious activity must be reported immediately to the Qatar Financial Information Unit (QFIU). [qa.aml.ongoing-monitoring-continuously-monitor-the, qa.aml.report-suspicious-activity-immediately-report, qa.aml.reporting-body-all-strs-must]
  • PEP screening and enhanced due diligence (EDD) for PEPs, high-risk jurisdictions, complex structures, cross-border VA transfers, and new technologies. [qa.aml.politically-exposed-persons-peps-implement, qa.aml.enhanced-due-diligence-edd-apply, qa.aml.customers-from-high-risk-jurisdictions, qa.aml.cross-border-virtual-asset-transfers]
  • Sanctions screening against UNSC and national lists required. [qa.aml.sanctions-screening-screen-customers-and]
  • Record-keeping for minimum 5 years from transaction or end of relationship (whichever later). [qa.aml.duration-records-must-be-maintained]
  • Travel Rule obligations apply for QFC-licensed VASPs: obtain and transmit originator/beneficiary info for VA transfers ≥ $1,000 (basic) and ≥ $3,000 (full details for non-customers). [qa.travel-rule.usdeur-1000-or-equivalent-qar, qa.travel-rule.usdeur-3000-or-equivalent-qar, qa.travel-rule.collect-and-verify-required-originator, qa.travel-rule.transmit-this-information-securely-to]

Key Restrictions

  • Can only operate within the Qatar Financial Centre (QFC) under a QFCRA license — mainland Qatar (QCB-supervised entities) is entirely prohibited from virtual asset activities under QCB Circular No. 12/2020. [qa.licensing.rule-2131-of-the-fsru, qa.travel-rule.mainland-qatar-qatar-central-bank, qa.travel-rule.qcb-circular-no-122020-on]
  • QFCRA Rule 2.1.3(1) prohibits any QFCRA-licensed firm from undertaking a 'Financial Service or other activity relating to a Virtual Asset' — an exception would require explicit licensing or rule amendments. [qa.licensing.rule-2131-of-the-fsru]
  • Tokenized securities (digital representations of securities already covered by the QFCRA framework) are excluded from the virtual asset prohibition and may be treated under standard client-asset rules. [qa.licensing.exceptionsnuances-the-prohibition-explicitly-excludes]

Key Risks

  • The QFCRA's current FSRU Rule 2.1.3(1) directly prohibits virtual asset activities — any exchange operating would be in violation unless a specific license or exemption is obtained, which may not currently exist as a well-defined pathway.
  • No dedicated crypto custody licensing framework exists; segregation and cold-storage rules are hypothetical for tokenized securities only. [qa.licensing.current-status-there-are-no]
  • No specific insurance/bonding requirements for crypto custody exist, creating prudential uncertainty. [qa.licensing.current-status-there-are-no]
  • Mainland Qatar (QCB) enforces a blanket prohibition on VA activities — any exchange serving mainland residents from a non-QFC entity may face criminal penalties under Law No. 20 of 2019. [qa.travel-rule.for-individuals-or-entities-operating]
  • Travel Rule compliance for QFC-licensed VASPs requires technical implementation (collect, verify, transmit, receive data) — no mandated protocol, but interoperable solutions expected. [qa.travel-rule.technical-implementation-requirements-the-qfcra]

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Rule 2.1.3(1) of the FSRU states: "A Firm must not undertake a Financial Service or other activity relating to a Virtual Asset."

licensing 60% confidence

The QFCRA Glossary defines "Virtual Asset" broadly as "any digital representation of value that can be digitally traded or transferred and used for payment or investment purposes, but does not include digital representations of fiat currencies, securities and other financial assets that are already covered by the QFCRA’s regulatory framework."

licensing 60% confidence

Current Status: There are no specific licenses for dedicated cryptocurrency custody businesses in Qatar. This is because the QFCRA prohibits firms from engaging in activities related to Virtual Assets, as detailed above.

licensing 60% confidence

Exceptions/Nuances: The prohibition explicitly excludes "digital representations of fiat currencies, securities and other financial assets that are already covered by the QFCRA’s regulatory framework." This means that if a tokenized security (e.g., a security issued on a blockchain) is regulated as a traditional security under QFCRA rules, then a licensed firm within the QFC could potentially custody such a tokenized security under its existing securities custody license. However, this is distinct from general cryptocurrency custody.

licensing 60% confidence

Applicability (Hypothetical): If a licensed QFC firm were permitted to custody tokenized securities, then the QFCRA's standard client money and asset rules would apply. These rules are robust and mandate strict segregation of client assets from the firm's own assets.

licensing 60% confidence

Current Status: There are no specific licenses for dedicated cryptocurrency custody businesses in Qatar. This is because the QFCRA prohibits firms from engaging in activities related to Virtual Assets, as detailed above.

licensing 60% confidence

Current Status: There is no specific regulatory definition for a "qualified custodian" for cryptocurrencies or digital assets in Qatar.

travel-rule 95% confidence

Mainland Qatar (Qatar Central Bank - QCB): The QCB issued a prohibition on virtual asset activities for all financial institutions under its supervision in April 2020. This means there are no licensed Virtual Asset Service Providers (VASPs) on the mainland to which the Travel Rule would apply. Any unlicensed VA activity is illegal.

travel-rule 60% confidence

Qatar Financial Centre (QFC) (QFCRA): The QFCRA, which regulates the Qatar Financial Centre, takes an activity-based approach and allows for the licensing of firms engaged in virtual asset activities, subject to strict regulatory requirements. For these licensed entities, FATF Recommendations, including the principles of the Travel Rule, are applicable.

travel-rule 60% confidence

QCB Circular No. 12/2020 on Virtual Assets (April 28, 2020): While direct URL to the circular on the QCB website can be difficult to find in English due to dynamic content and language barriers, it is widely referenced in industry reports. The QCB website (www.qcb.gov.qa) is the authoritative source for its circulars.

travel-rule 60% confidence

USD/EUR 1,000 (or equivalent QAR): For transfers at or above this amount, the ordering VASP must obtain and transmit basic originator and beneficiary information (name, account number/VA wallet address).

travel-rule 60% confidence

USD/EUR 3,000 (or equivalent QAR): For transfers at or above this amount where the originator or beneficiary is not an existing customer, more comprehensive information, including full physical addresses and dates of birth, is generally required.

travel-rule 60% confidence

Collect and verify required originator and beneficiary information for virtual asset transfers.

travel-rule 60% confidence

Transmit this information securely to the beneficiary VASP (or to the beneficiary directly in the case of unhosted wallets).

travel-rule 60% confidence

Technical Implementation Requirements: The QFCRA mandates that licensed firms (including VASPs) have robust systems and controls in place to:

travel-rule 80% confidence

Penalties for Non-Compliance: The QFCRA has extensive enforcement powers, which include:

aml 60% confidence

Law No. (20) of 2019 on Combating Money Laundering and Terrorist Financing: This is the foundational law establishing the AML/CFT framework, defining offenses, obligations for reporting entities, and the powers of regulatory and law enforcement bodies. It aligns Qatar's framework with the latest FATF Recommendations.

aml 60% confidence

Qatar Financial Centre Regulatory Authority (QFCRA) Rulebook: For entities licensed within the Qatar Financial Centre (QFC), the QFCRA Rulebook, particularly its AML/CFT Rulebook, provides specific and comprehensive requirements. The QFC has been more explicit in classifying and regulating virtual asset activities.

aml 60% confidence

Natural Persons: Obtain and verify the customer's name, permanent address, date of birth, nationality, and official identification document number (e.g., QID, passport).

aml 60% confidence

Legal Persons/Arrangements: Obtain and verify the entity's name, legal form, proof of incorporation/establishment, registered address, details of directors/senior management, and the full structure of ownership and control.

aml 60% confidence

Beneficial Ownership Identification: Identify and verify the identity of the beneficial owner(s) – any natural person(s) who ultimately own or control 25% or more of the legal person, or on whose behalf a transaction is being conducted.

aml 60% confidence

Source of Funds and Source of Wealth: For high-risk customers or transactions, obtain information on the source of funds (where the funds came from for a specific transaction) and the source of wealth (the overall economic activity that generates the customer's total net worth). This is particularly crucial in the virtual asset space.

aml 60% confidence

Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious activities.

aml 60% confidence

Report Suspicious Activity: Immediately report any transaction, attempted transaction, or funds where there are reasonable grounds to suspect that they are linked to money laundering or terrorist financing.

aml 60% confidence

Reporting Body: All STRs must be submitted to the Qatar Financial Information Unit (QFIU).

aml 60% confidence

Politically Exposed Persons (PEPs): Implement procedures to determine if a customer or beneficial owner is a PEP. Apply enhanced due diligence (EDD) measures to PEPs, their family members, and close associates.

aml 60% confidence

Enhanced Due Diligence (EDD): Apply EDD for higher-risk scenarios, which often include:

aml 60% confidence

Customers from high-risk jurisdictions.

aml 60% confidence

Cross-border virtual asset transfers.

aml 60% confidence

Sanctions Screening: Screen customers and transactions against national and international sanctions lists (e.g., UNSC sanctions).

aml 60% confidence

Duration: Records must be maintained for a minimum of five (5) years from the date of the transaction or the end of the business relationship, whichever is later.

enforcement 50% confidence

Legal Basis: Qatar implements UN Security Council Resolutions through its domestic legal framework, primarily Law No. 20 of 2019 on Combating Money Laundering and Terrorist Financing. This law mandates compliance with UN sanctions, including the freezing of funds and assets of designated individuals and entities.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange could theoretically operate under a QFCRA license within the Qatar Financial Centre (QFC), but the QFCRA's FSRU Rule 2.1.3(1) currently prohibits firms from undertaking virtual asset activities, creating substantial legal uncertainty; mainland Qatar (QCB) maintains a blanket prohibition, so any operation must be structured within the QFC and would require QFCRA licensing with full AML/CTF, Travel Rule, and client-asset obligations.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?