Self-custodial wallet / non-custodial software in Tuvalu
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is permitted in Tuvalu with no licensing burden.
Verdict Details
- Permitted
- yes
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to a pure software publisher (self-custodial wallet) because the entity never holds, controls, or has access to user funds — it does not qualify as a 'financial institution' or 'designated non-financial business or profession' under the Money Laundering and Proceeds of Crime Act 2017.
- If the wallet publisher ever engages in the conversion of virtual assets to fiat or manages third-party funds, it could be re-interpreted as a financial service, triggering AML obligations including CDD, ongoing monitoring, record keeping, and STRs to the Tuvalu Financial Intelligence Unit (FIU).
Key Restrictions
- No specific restrictions on software publishing for self-custodial wallets under current Tuvaluan law — no dedicated VASP or crypto-specific regulation exists.
- No geofencing or consumer-protection/disclosure rules specific to non-custodial wallet software currently apply in Tuvalu.
- General company registration (Companies Act 1991 or International Companies Act 1993) is required only if the publisher establishes a local entity, which is not mandatory for a non-custodial software publisher.
Key Risks
- Regulatory ambiguity: if Tuvalu's TFSA or legislation evolves to adopt FATF's 'virtual asset service provider' definition (Recommendation 15), a software publisher could be retrospectively captured as a VASP even without custody.
- Extremely limited enforcement capacity and no precedent — operators face uncertainty about how regulators would classify non-custodial software.
- Reputational / FATF grey-list risk: Tuvalu's AML framework is under development; operators relying on Tuvalu as a base may face international correspondent-banking friction.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No specific cryptocurrency/VASP licenses currently exist. Unlike jurisdictions with mature crypto regulations (e.g., Malta, Singapore, Estonia), Tuvalu has not introduced bespoke licenses for these activities.
General Financial Services Licences (Potential for Interpretation): It is possible that certain activities, particularly those involving the conversion of virtual assets to fiat currency or managing third-party funds (even if denominated in virtual assets), could be interpreted by regulators as falling under existing general financial services laws, such as those governing money transmission, offshore banking, or investment services. However, this would require a specific legal interpretation by the Tuvalu Financial Services Authority (TFSA) or the Ministry of Finance, and there's no public guidance to suggest this is routinely applied to pure crypto businesses.
For virtual assets, neither a specific registration nor a specific licensing regime exists.
Money Laundering and Proceeds of Crime Act 2017: The primary legislation for AML/CTF, which would apply to any entity engaged in financial activities, including those involving virtual assets. This act defines "financial institutions" and "designated non-financial businesses and professions" that have AML obligations. While virtual assets aren't specifically named for licensing purposes, their handling could bring an entity under the scope of these definitions for AML purposes, especially if it involves traditional financial flows.
Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF) Legislation:
Customer Due Diligence (CDD): Identifying and verifying the identity of customers and beneficial owners.
Ongoing Monitoring: Monitoring customer transactions for suspicious activity.
Record Keeping: Maintaining records of customer identification and transactions.
Suspicious Transaction Reporting (STR): Reporting suspicious activities to the Tuvalu Financial Intelligence Unit (FIU).
Tuvalu Financial Intelligence Unit (FIU): The body responsible for receiving and analyzing suspicious transaction reports.
Lack of Dedicated Crypto Legislation/Regulators: Tuvalu does not appear to have dedicated legislation or a specific regulatory body focused solely on cryptocurrency supervision or enforcement as seen in major financial jurisdictions.
Focus on AML/CFT (if any): Any financial oversight would primarily fall under anti-money laundering and combating the financing of terrorism (AML/CFT) frameworks. The Tuvalu Financial Intelligence Unit (TFIU) would be the most relevant body for financial intelligence and potentially coordinating investigations into financial crimes, including those involving digital assets. However, their actions, especially concerning specific entities and penalties, are rarely publicized with the level of detail requested for a jurisdiction of this size.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Yes — a publisher of self-custodial wallet software can operate in Tuvalu with no specific license or AML obligations, because the non-custodial model does not trigger VASP/financial-institution classification under current law, though regulators could re-interpret the activity if the publisher handles conversions or third-party funds.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?