On-shore VASP in Qatar

Rule 2.1.3(1) of the FSRU states: "A Firm must not undertake a Financial Service or other activity relating to a Virtual Asset."

Current Status: There are no specific licenses for dedicated cryptocurrency custody businesses in Qatar. This is because the QFCRA prohibits firms from engaging in activities related to Virtual Assets, as detailed above.

The QFCRA Glossary defines "Virtual Asset" broadly as "any digital representation of value that can be digitally traded or transferred and used for payment or investment purposes, but does not include digital representations of fiat currencies, securities and other financial assets that are already covered by the QFCRA’s regulatory framework."

Exceptions/Nuances: The prohibition explicitly excludes "digital representations of fiat currencies, securities and other financial assets that are already covered by the QFCRA’s regulatory framework." This means that if a tokenized security (e.g., a security issued on a blockchain) is regulated as a traditional security under QFCRA rules, then a licensed firm within the QFC could potentially custody such a tokenized security under its existing securities custody license. However, this is distinct from general cryptocurrency custody.

The Qatar Central Bank (QCB) has been active in exploring digital currencies, particularly a wholesale Central Bank Digital Currency (CBDC), but this is distinct from regulating private cryptocurrencies.

Law No. (20) of 2019 on Combating Money Laundering and Terrorist Financing: This is the foundational law establishing the AML/CFT framework, defining offenses, obligations for reporting entities, and the powers of regulatory and law enforcement bodies. It aligns Qatar's framework with the latest FATF Recommendations.

Identification and Verification of Customers:

Legal Persons/Arrangements: Obtain and verify the entity's name, legal form, proof of incorporation/establishment, registered address, details of directors/senior management, and the full structure of ownership and control.

Beneficial Ownership Identification: Identify and verify the identity of the beneficial owner(s) – any natural person(s) who ultimately own or control 25% or more of the legal person, or on whose behalf a transaction is being conducted.

Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious activities.

Politically Exposed Persons (PEPs): Implement procedures to determine if a customer or beneficial owner is a PEP. Apply enhanced due diligence (EDD) measures to PEPs, their family members, and close associates.

Enhanced Due Diligence (EDD): Apply EDD for higher-risk scenarios, which often include:

Sanctions Screening: Screen customers and transactions against national and international sanctions lists (e.g., UNSC sanctions).

Report Suspicious Activity: Immediately report any transaction, attempted transaction, or funds where there are reasonable grounds to suspect that they are linked to money laundering or terrorist financing.

Reporting Body: All STRs must be submitted to the Qatar Financial Information Unit (QFIU).

No Tipping-Off: Prohibited from disclosing to the customer or any third party that a suspicious transaction report has been filed or that an investigation is underway.

Customer Identification Data: All records obtained during CDD, including identification documents, verification data, and beneficial ownership information.

Transaction Records: Records of all domestic and international virtual asset transactions, including dates, amounts, types of assets, sender and receiver details (where available), and relevant transaction hashes.

Duration: Records must be maintained for a minimum of five (5) years from the date of the transaction or the end of the business relationship, whichever is later.

Mainland Qatar (Qatar Central Bank - QCB): The QCB issued a prohibition on virtual asset activities for all financial institutions under its supervision in April 2020. This means there are no licensed Virtual Asset Service Providers (VASPs) on the mainland to which the Travel Rule would apply. Any unlicensed VA activity is illegal.

Qatar Financial Centre (QFC) (QFCRA): The QFCRA, which regulates the Qatar Financial Centre, takes an activity-based approach and allows for the licensing of firms engaged in virtual asset activities, subject to strict regulatory requirements. For these licensed entities, FATF Recommendations, including the principles of the Travel Rule, are applicable.

USD/EUR 1,000 (or equivalent QAR): For transfers at or above this amount, the ordering VASP must obtain and transmit basic originator and beneficiary information (name, account number/VA wallet address).

USD/EUR 3,000 (or equivalent QAR): For transfers at or above this amount where the originator or beneficiary is not an existing customer, more comprehensive information, including full physical addresses and dates of birth, is generally required.

Penalties for Non-Compliance:

For individuals or entities operating unlicensed VA services: penalties under Qatar's AML/CTF Law No. 20 of 2019 and other relevant laws, which can include imprisonment and substantial fines.

If a corporate entity subject to Corporate Income Tax (CIT) holds cryptocurrencies as part of its business assets, any capital gains derived from the disposal of these assets would be considered part of the company's taxable income.

Businesses subject to Corporate Income Tax must report their worldwide income, including any profits or gains derived from cryptocurrency activities, as part of their annual tax filings with the General Tax Authority (GTA).

Legal Basis: Qatar implements UN Security Council Resolutions through its domestic legal framework, primarily Law No. 20 of 2019 on Combating Money Laundering and Terrorist Financing. This law mandates compliance with UN sanctions, including the freezing of funds and assets of designated individuals and entities.