Remote VASP serving residents in Russia
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Russia with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Register with Bank of Russia as a digital exchange/exchanger or DFA operator
- Comply with Rosfinmonitoring AML/CFT supervision under Federal Law No. 115-FZ
- Retail users must pass a Bank of Russia competency test before being served
- Report transactions over 600,000 RUB/year to tax authorities
- Implement de-anonymization procedures and transaction monitoring for all customers
- Exchanges and exchangers with monthly turnover ≥3.5 million RUB can serve users directly; smaller ones must route through licensed intermediaries
- Mandatory KYC via intermediaries
Key Restrictions
- Foreign-incorporated entity without Russian legal status is prohibited from serving Russian residents — local incorporation required
- No domestic payments with cryptocurrency allowed
- Retail annual purchases capped at 300,000 RUB (~$3,700–$3,800) per intermediary
- Only Bank of Russia-approved 'highly liquid' cryptos may be offered to retail
- Criminal liability (fines of $1,300–$13,000, up to 4–7 years imprisonment) for unlicensed operations organizing digital currency circulation
- International trade crypto payments permitted since 2024 as a sanctions exception only
Key Risks
- Criminal enforcement exposure for any unlicensed cross-border servicing of Russian residents — penalties include imprisonment
- Sanctions-related risks: operating a remote VASP from abroad to serve Russian residents may expose the operator to secondary sanctions from Western jurisdictions
- Regulatory landscape in flux — comprehensive bill 'On Digital Currency and Digital Rights' still pending (draft stage), with a proposed 2026 framework that could materially change requirements
- Tax reporting obligations (600,000 RUB threshold) create a compliance burden for operators who must track and report resident activity
- Travel Rule not yet adopted, but FATF expectations still technically apply due to Russia's FATF suspension — future adoption could add cost
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Local Presence: Entities must have Russian legal status; foreign platforms without licenses are prohibited for domestic operations.
Exchanges: Licensed entities with Russian legal status (crypto exchanges, brokers, fiduciary managers) are required. Banks and brokers can obtain crypto exchange licenses via a simplified notification process tied to existing financial permits, subject to prudential requirements set by the Bank of Russia.
Payment Processors/Exchangers: Exchangers (for crypto-fiat or crypto-crypto conversions) require inclusion in the Bank of Russia's register. Those with monthly turnover ≥3.5 million rubles can serve users directly; below that, they must use licensed intermediaries. Platforms without Russian licenses are illegal.
Criminal liability for unlicensed operations: Entities organizing digital currency circulation without Bank of Russia approval face fines ($1,300–$13,000), up to 4–7 years imprisonment, or forced labor; applies to exchanges and large operators.
Bank of Russia register for exchangers/depositories and prudential rules: Licensing/notification for exchanges; competency tests: Implicit in .
AML/KYC: Implied through mandatory intermediary routing, de-anonymization procedures, transaction monitoring, and tax reporting. Retail users must pass a Bank of Russia competency test; residents report foreign wallets/transactions to tax authorities.
Compliance with KYC, competency tests for retail (via intermediaries), and reporting thresholds (e.g., transactions >600,000 RUB/year to tax authorities).
Retail limits: Annual purchases capped at 300,000 RUB (~$3,700–$3,800) via one intermediary; requires knowledge test. Qualified investors (e.g., high income >20M RUB/year, finance master's) face no limits.
Prohibitions: No domestic payments with crypto; reporting mandatory for large transactions. International trade exception since 2024.
Rosfinmonitoring (Federal Financial Monitoring Service): Handles anti-money laundering (AML) and counter-terrorism financing (CFT); monitors transaction data from crypto providers.
2020 Law on Digital Financial Assets (DFAs): Legalizes crypto transactions but prohibits use as payment for domestic goods/services; mandates reporting of transactions over 600,000 rubles to tax authorities.
2024 Law: Permits digital currency payments in international trade to bypass sanctions, creating an exception to the domestic ban.
Exchanges and exchangers with monthly turnover ≥3.5 million rubles can serve users directly, while smaller ones must use licensed intermediaries; all must be licensed or registered with the Bank of Russia. (https://forklog.com/en/the-end-of-shadow-trading-russias-forthcoming-crypto-market-rules/; https://crypto.news/russia-clears-draft-laws-to-tighten-crypto-trading-and-limit-retail-participation/)
Bank of Russia approves "highly liquid" cryptos for retail and enforces via registry maintenance.
Adoption and effective date: No adoption or effective date; Russia's FATF suspension requires it to still meet standards in theory, but no evidence of legislative action specific to the Travel Rule for VASPs exists in available data.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP cannot serve Russian residents from abroad without a Russian-licensed entity; foreign platforms are prohibited, and unlicensed operations carry criminal liability including imprisonment, though a comprehensive regulatory framework is still being finalized (proposed 2026).
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?