← Regulations / Taiwan / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Taiwan

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Conditional AI-Generated · Unreviewed

Self-custodial wallet is conditionally permitted in Taiwan without local incorporation, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • No AML obligations attach — the operator never holds, controls, or has access to user funds, so it does not meet the definition of a VASP under the FSC's VASP AML Regulations (Article 2, Paragraph 4)
  • If the software publisher were deemed to provide 'custody or administration of virtual assets or instruments enabling control over virtual assets' (e.g., through integrated hosted key recovery or custodial backend services), it would trigger VASP registration and AML obligations including: establish internal control systems for AML/CTF, report suspicious transactions, conduct customer due diligence, and implement travel rule procedures

Key Restrictions

  • The operator must not offer any service that involves holding, controlling, or having access to user private keys or funds — this includes hosted key recovery, custodial backup services, or any intermediary custody layer
  • If the software integrates any fiat on/off-ramp, exchange, or staking service controlled by the publisher, that service may be treated as VASP activity requiring registration with the FSC
  • Consumer protection and disclosure rules (e.g., FSC VASP conduct guidelines) apply only if the publisher qualifies as a VASP — pure non-custodial software is outside the current regulatory perimeter

Key Risks

  • Regulatory ambiguity: the boundary between non-custodial software publishing and VASP activity is not explicitly defined in Taiwanese law — future legislation (VASP Special Law expected 2025-2026) could widen the definition to include wallet publishers
  • Enforcement precedent shows aggressive prosecution of crypto-related fraud in Taiwan (ACE Exchange, Pi Network pyramid schemes, Telegram investment scams) — prosecutors may scrutinize any perceived control over user funds
  • If the software includes any revenue-sharing, token-gating, or premium features that touch fiat or crypto flows, the publisher may be retroactively classified as a VASP
  • No dedicated safe harbor or de minimis exemption exists for non-custodial software publishers under current FSC guidelines

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

FSC — VASP guidelines and oversight — dedicated law under legislative review

licensing 20% confidence

VASP: VASP Registration under FSC guidelines (3-6 months). Dedicated VASP law under legislative review. Approach influenced by Japan and Singapore models. MaiCoin and BitoPro are major local players.

licensing 20% confidence

CUSTODY: Customer asset segregation required under FSC guidelines

licensing 20% confidence

FSC Guidelines and Oversight: The FSC issues guidance (e.g., VASP Application Guidance, AML/CFT Notes, Travel Rule Guidance) and FAQs (latest published November 21, 2025) covering VASP definitions, registration, compliance obligations like AML/CFT systems, audits, and record-keeping, plus supervisory powers including enforcement and risk-based monitoring.

aml 60% confidence

Current State: There is no specific, dedicated "digital asset custody license" in Taiwan. However, engaging in "custody or administration of virtual assets or instruments enabling control over virtual assets" is defined as a Virtual Asset Service Provider (VASP) activity under Article 2, Paragraph 4 of the VASP AML Regulations.

aml 60% confidence

Therefore, any entity providing custody services is considered a VASP and must comply with the FSC's VASP AML Regulations, including registration with the FSC, establishing internal control systems, and adhering to AML/CTF obligations. This is a registration and compliance requirement rather than a comprehensive licensing regime for prudential supervision of custody specifically.

aml 60% confidence

Reference: VASP AML Regulations, Article 2, Paragraph 4.

aml 60% confidence

These regulations require VASPs to implement robust internal control systems for AML/CTF, report suspicious transactions, and conduct due diligence.

enforcement 85% confidence

Entity Targeted: David Pan (潘奕hofer), founder of ACE Exchange, and approximately 10 other individuals. Violation Type: Fraud, money laundering, operating an illegal pyramid scheme, organized crime. The group allegedly used fake tokens (NFTC, MOCT) to defraud investors out of hundreds of millions of New Taiwan Dollars. Penalty Amount: Assets worth over NT$200 million (approximately US$6.4 million) were frozen, including real estate, luxury cars, and cryptocurrency. The investigation is ongoing, and final penalties (imprisonment, further asset forfeiture) will be determined by the courts. Outcome: Key individuals, including the founder of a prominent Taiwanese exchange, were arrested. Assets were frozen, and legal proceedings are underway. This was a major blow to investor confidence and highlighted the risks within the unregulated parts of the crypto market.

enforcement 60% confidence

Entity Targeted: Numerous individuals and groups promoting "Pi Network" as a guaranteed high-return investment or operating multi-level marketing (MLM) schemes based on its unlisted cryptocurrency. Violation Type: Fraud, operating illegal pyramid schemes (violation of the Multi-level Marketing Supervision Act), misleading advertising. Penalty Amount: Varies per case, but includes arrests, asset seizures (though often smaller sums of cash, not directly crypto), and fines/imprisonment upon conviction. Specific aggregate amounts for all Pi Network-related crackdowns are hard to tally as they are localized efforts. Outcome: Numerous arrests across Taiwan, public warnings issued by authorities regarding the risks of Pi Network and similar speculative "investments," helping to protect potential victims.

enforcement 90% confidence

Entity Targeted: Individuals involved in online romance scams and investment fraud predominantly using Telegram, convincing victims to invest in fake cryptocurrency platforms. Violation Type: Fraud, money laundering. Penalty Amount: Arrests, freezing of bank accounts, and seizure of assets (e.g., millions of NTD in illicit gains). Specific fines and prison sentences are determined post-conviction. One operation in 2023 alone saw NT$110 million (US$3.5 million) in illicit gains seized. Outcome: Multiple arrests, significant amounts of illicit funds frozen or seized, raising public awareness about online investment scams.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a pure non-custodial wallet publisher that never holds, controls, or accesses user private keys or funds is not classified as a VASP in Taiwan and faces no AML or licensing obligations, but any feature involving custody, key recovery, or financial intermediation would trigger VASP registration and AML/CTF compliance under FSC guidelines.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?