Remote VASP serving residents in San Marino
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in San Marino with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- ODLTs/VASPs are considered 'financial intermediaries' under San Marino's AML/CFT legislation (Decree 120/2019) and must comply with all related obligations (sm.licensing.odlts-are-considered-financial-intermediaries)
- Must implement robust Customer Due Diligence (CDD) procedures for all clients, identifying and verifying identity and beneficial ownership (sm.licensing.implementing-robust-customer-due-diligence)
- Must conduct risk assessments for business relationships and transactions (sm.licensing.conducting-risk-assessments-for-business)
- Must implement comprehensive internal controls, policies, and procedures for AML/CFT (sm.licensing.implementing-comprehensive-internal-controls-policies)
- Must appoint an AML Officer and a Board-level AML Compliance Officer (sm.licensing.appointing-an-aml-officer-and)
- Must establish a Suspicious Transaction Reporting (STR) mechanism and report to the Financial Intelligence Agency (AIF) (sm.licensing.establishing-a-suspicious-transaction-reporting)
- Must apply a Risk-Based Approach (RBA) assessing ML/TF risks by customer type, services, virtual asset types, geographic areas, and delivery channels (sm.aml.risk-based-approach-rba-vasps-must)
- Must apply Enhanced Due Diligence (EDD) for PEPs, cross-border correspondent relationships, complex/unusual/large transactions, high-risk jurisdictions, and anonymity-favoring technologies (sm.aml.enhanced-due-diligence-edd-apply)
- Natural Persons: obtain and verify identity using reliable independent source documents (name, DOB, address, nationality, ID) (sm.aml.natural-persons-obtain-and-verify)
- Legal Persons: obtain and verify legal name, legal form, address, proof of existence, and authorized individuals (sm.aml.legal-personsarrangements-obtain-and-verify)
- Beneficial Ownership: identify and verify beneficial owners (natural persons holding >25% or exercising control) (sm.aml.beneficial-ownership-bo)
- Conduct ongoing monitoring of business relationships and transactions; keep CDD documents up-to-date (sm.aml.conduct-ongoing-monitoring-of-the)
Key Restrictions
- Must be established in San Marino as a joint-stock company (S.p.A.) or limited liability company (S.r.l.) — no remote foreign-entity model permitted (sm.licensing.must-be-a-joint-stock-company)
- Must have registered office and effective management in San Marino (sm.licensing.must-have-its-registered-office)
- Minimum share capital: €150,000 for low-risk ODLTs not serving the public or holding client assets; €300,000 for ODLTs providing services directly to the public and holding client funds/virtual assets (sm.licensing.150000-for-odlts-that-do, sm.licensing.300000-for-odlts-providing-services)
- BCRA may require higher capital based on complexity, scale, and risk profile (sm.licensing.the-bcra-may-require-a)
- Capital must be fully paid up (sm.licensing.capital-must-be-fully-paid)
- Authorization (ODLT registration) from Banca Centrale della Repubblica di San Marino (BCSM/BCRA) is required before operating (sm.licensing.bcra-circular-no-64-of)
Key Risks
- No licensed DLT service providers existed as of the July 2022 MONEYVAL mutual evaluation, indicating regulatory immaturity and potentially slow/uncertain licensing timelines (sm.enforcement.no-licensed-dlt-service-providers)
- Enforcement actions against unlicensed operators may be discretionary and not widely publicized in a small jurisdiction, creating uncertainty about actual prosecution risk (sm.enforcement.discretionary-enforcementlack-of-high-profile-cases)
- Operating without authorization as a remote VASP serving San Marino residents would constitute unlicensed financial intermediary activity, exposing operator to administrative sanctions and potential criminal liability under Decree 120/2019
- Regulatory framework is still evolving (Law 171/2019, multiple circulars, 2023 VASP regulation) — requirements may shift materially during application process
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 171 of December 17, 2019, "Regulations for Distributed Ledger Technologies and Blockchain for Business" (Legge 171/2019): This law defines DLT, virtual assets, and establishes the framework for Operators in Distributed Ledger Technologies (ODLTs).
BCRA Circular No. 64 of 15 September 2020, "Disciplining the activities of Operators in Distributed Ledger Technologies": This circular provides detailed implementation rules for Law 171/2019, specifying the requirements for obtaining authorization (registration) as an ODLT.
BCRA Circular No. 67 of 11 May 2021, "Amendments and additions to Circular No. 64 of 15 September 2020": This circular introduced updates and clarifications to the initial implementing regulations.
Decree No. 120 of 21 August 2019, "Provisions against money laundering and terrorist financing": This AML/CFT law is applicable to ODLTs and virtual asset service providers (VASPs).
Exchanges (Virtual Asset Exchange Providers): Entities operating a platform for the exchange of virtual assets for fiat currencies, or between one or more forms of virtual assets. This falls squarely under the ODLT/VASP authorization requirement.
Custody Providers (Virtual Asset Custody Providers): Entities that provide services for the safekeeping or administration of virtual assets or instruments enabling control over virtual assets on behalf of natural or legal persons. This also requires ODLT/VASP authorization.
Transferring virtual assets.
Must be a joint-stock company (Società per Azioni - S.p.A.) or a limited liability company (Società a responsabilità limitata - S.r.l.) established in San Marino.
Must have its registered office and effective management in San Marino.
€150,000 for ODLTs that do not provide direct services to the public, do not hold client funds/virtual assets, and whose activity carries a low risk profile as assessed by the BCRA.
€300,000 for ODLTs providing services directly to the public (including VASPs like exchanges and custody providers) and holding client funds or virtual assets.
The BCRA may require a higher capital amount based on the complexity, scale, and risk profile of the proposed activities.
Capital must be fully paid up.
ODLTs are considered "financial intermediaries" under San Marino's AML/CFT legislation (Decree 120/2019) and are subject to all related obligations.
Implementing robust Customer Due Diligence (CDD) procedures for all clients (identifying and verifying identity, beneficial ownership).
Conducting risk assessments for business relationships and transactions.
Implementing comprehensive internal controls, policies, and procedures for AML/CFT.
Appointing an AML Officer and a Board-level AML Compliance Officer.
Establishing a Suspicious Transaction Reporting (STR) mechanism and reporting to the Financial Intelligence Agency (AIF).
Banca Centrale della Repubblica di San Marino (BCRSM) - The Central Bank of the Republic of San Marino. It is the primary financial regulator responsible for licensing, supervision, and ongoing oversight of virtual asset service providers.
Risk-Based Approach (RBA): VASPs must implement a risk-based approach to AML/CFT, meaning they should:
Enhanced Due Diligence (EDD): Apply EDD in higher-risk situations, including but not limited to:
Natural Persons: Obtain and verify identity using reliable, independent source documents, data, or information (e.g., name, date of birth, place of birth, address, nationality, official identification number/document type).
Legal Persons/Arrangements: Obtain and verify legal name, legal form, address, proof of existence, powers that regulate and bind the legal person/arrangement, and names of individuals authorized to act on its behalf.
Conduct ongoing monitoring of the business relationship and transactions undertaken throughout the course of that relationship.
No Licensed DLT Service Providers (as of last major assessment): A key finding from the MONEYVAL (Council of Europe anti-money laundering body) "Fifth Round Mutual Evaluation Report on San Marino" published in July 2022 stated:
Discretionary Enforcement/Lack of High-Profile Cases: In smaller jurisdictions, enforcement actions, if they occur, might not always be widely publicized, especially if they are against smaller, unlicensed operations or result in administrative warnings rather than significant public penalties. It's also possible that San Marino hasn't experienced high-profile crypto-related financial crimes or major non-compliance incidents warranting significant public enforcement.
MONEYVAL Report (July 2022):
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP serving San Marino residents is not permitted as a foreign unlicensed entity; the operator must establish a San Marino-licensed ODLT (S.p.A. or S.r.l.) with local registered office/management, minimum capital of €150,000–€300,000, and full AML/CFT compliance under BCRA/BCSM supervision, though no licensed DLT providers existed as of 2022 indicating regulatory immaturity.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?