DeFi protocol frontend in Taiwan
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Taiwan with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- VASP registration with the FSC under the Guiding Principles for Management of Virtual Asset Service Providers (2023), which is being formalized into a dedicated VASP Act expected 2025-2026
- Implement robust internal control systems for AML/CTF under the Regulations Governing Anti-Money Laundering and Countering Terrorism Financing for Virtual Asset Service Providers (effective July 1, 2021)
- Report suspicious transactions to the FSC
- Conduct customer due diligence (CDD) on all users
- Segregation of client virtual assets (internal control system requirement under VASP AML Regulations Article 11)
- Travel Rule obligations for transfers of virtual assets (per FSC guidance)
- Information security management system required (per FSC exchange guidelines)
- Record-keeping and audit compliance obligations
Key Restrictions
- If the frontend takes fees or otherwise earns revenue from the activity, it likely qualifies as a VASP engaging in 'exchange between one or more forms of virtual assets' and must register with the FSC
- Geofencing of Taiwanese residents may be required — operators that serve Taiwanese users without VASP registration face enforcement risk
- A local entity (incorporated in Taiwan) is required for VASP registration — foreign operators must establish a local presence
- Frontend operators that merely provide an interface to permissionless smart contracts without taking custody or fees may fall outside current VASP definitions, but regulatory guidance is still evolving
- Customer asset segregation requirements apply if the operator takes custody of user assets
Key Risks
- Regulatory ambiguity — the VASP guidelines are being formalized into a dedicated law; classification of non-custodial frontends remains unclear until the VASP Act is enacted (expected 2025-2026)
- Enforcement risk — Taiwan has active enforcement against crypto-related fraud (ACE Exchange founder arrest, Pi Network pyramid scheme prosecutions, Telegram-based investment fraud arrests), and regulators may treat unregistered fee-taking frontends as operating illegally
- If the frontend is deemed a VASP and operates without registration, operators could face criminal liability for fraud, money laundering, or operating an unregistered financial service
- The FSC has indicated plans for capital requirements, detailed custody rules, and investor protection obligations in the upcoming special law — future compliance costs are unknown
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FSC — VASP guidelines and oversight — dedicated law under legislative review
Guiding Principles for Management of Virtual Asset Service Providers (2023) — VASP registration and conduct guidelines (being formalized into law, expected 2025-2026)
VASP: VASP Registration under FSC guidelines (3-6 months). Dedicated VASP law under legislative review. Approach influenced by Japan and Singapore models. MaiCoin and BitoPro are major local players.
EXCHANGE: VASP registration with FSC; information security management required. Self-regulatory organizations among exchanges. Stablecoin framework under development.
Financial Supervisory Commission (FSC): The primary financial regulator in Taiwan responsible for overseeing financial institutions and has extended its oversight to VASPs regarding AML/CTF.
Regulations Governing Anti-Money Laundering and Countering Terrorism Financing for Virtual Asset Service Providers (虛擬通貨平台及交易業務事業防制洗錢及打擊資恐辦法)
Issued by the FSC, effective July 1, 2021.
These regulations require VASPs to implement robust internal control systems for AML/CTF, report suspicious transactions, and conduct due diligence.
Segregation of Client Assets Rules:
Comprehensive VASP Special Law: The FSC has publicly announced its intention to establish a dedicated and comprehensive regulatory framework for virtual assets, moving beyond just AML/CTF.
In September 2023, the FSC outlined its plans for a new "special law" for virtual assets, which will cover aspects such as:
Exchange between virtual assets and fiat currencies.
Exchange between one or more forms of virtual assets.
Entity Targeted: David Pan (潘奕hofer), founder of ACE Exchange, and approximately 10 other individuals. Violation Type: Fraud, money laundering, operating an illegal pyramid scheme, organized crime. The group allegedly used fake tokens (NFTC, MOCT) to defraud investors out of hundreds of millions of New Taiwan Dollars. Penalty Amount: Assets worth over NT$200 million (approximately US$6.4 million) were frozen, including real estate, luxury cars, and cryptocurrency. The investigation is ongoing, and final penalties (imprisonment, further asset forfeiture) will be determined by the courts. Outcome: Key individuals, including the founder of a prominent Taiwanese exchange, were arrested. Assets were frozen, and legal proceedings are underway. This was a major blow to investor confidence and highlighted the risks within the unregulated parts of the crypto market.
Outcome: Key individuals, including the founder of a prominent Taiwanese exchange, were arrested. Assets were frozen, and legal proceedings are underway. This was a major blow to investor confidence and highlighted the risks within the unregulated parts of the crypto market.
Entity Targeted: Numerous individuals and groups promoting "Pi Network" as a guaranteed high-return investment or operating multi-level marketing (MLM) schemes based on its unlisted cryptocurrency. Violation Type: Fraud, operating illegal pyramid schemes (violation of the Multi-level Marketing Supervision Act), misleading advertising. Penalty Amount: Varies per case, but includes arrests, asset seizures (though often smaller sums of cash, not directly crypto), and fines/imprisonment upon conviction. Specific aggregate amounts for all Pi Network-related crackdowns are hard to tally as they are localized efforts. Outcome: Numerous arrests across Taiwan, public warnings issued by authorities regarding the risks of Pi Network and similar speculative "investments," helping to protect potential victims.
Entity Targeted: Individuals involved in online romance scams and investment fraud predominantly using Telegram, convincing victims to invest in fake cryptocurrency platforms. Violation Type: Fraud, money laundering. Penalty Amount: Arrests, freezing of bank accounts, and seizure of assets (e.g., millions of NTD in illicit gains). Specific fines and prison sentences are determined post-conviction. One operation in 2023 alone saw NT$110 million (US$3.5 million) in illicit gains seized. Outcome: Multiple arrests, significant amounts of illicit funds frozen or seized, raising public awareness about online investment scams.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend that takes fees or exercises control likely qualifies as a VASP requiring FSC registration, local incorporation, and full AML/CTF compliance, while a purely non-custodial, fee-free interface may operate in a regulatory grey area until the dedicated VASP Act is enacted.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?