DeFi protocol frontend in Ukraine

Law of Ukraine "On Virtual Assets" (Закон України "Про віртуальні активи"): Link to Ukrainian Parliament (Verkhovna Rada) website - official legislative acts (You may need to use a translation tool for the full text).

As of late 2023/early 2024, this secondary legislation has not yet been fully adopted, meaning the actual process for obtaining a license is largely suspended or not fully operational. The focus of the government has been on wartime priorities.

Evidence fact ua.licensing.exchange-services-between-virtual-assets-and not found (may have been renamed).

Transfer of virtual assets. (This includes payment processors that handle virtual assets).

Custody and/or administration of virtual assets or instruments enabling control over virtual assets. (This covers custody providers).

Participation in and provision of financial services related to the issuance/sale of virtual assets.

For exchanges (providers of exchange services between virtual assets and fiat): Potentially around UAH 10 million (approx. $250,000 - $300,000, subject to exchange rate fluctuations).

For other VASP activities (e.g., custody, transfer): Potentially around UAH 5 million (approx. $125,000 - $150,000).

VASPs will be subject to the Law of Ukraine "On Preventing and Countering Legalization (Laundering) of Criminal Proceeds, Terrorist Financing and Financing the Proliferation of Weapons of Mass Destruction."

Law of Ukraine No. 361-IX "On Preventing and Counteracting Legalization (Laundering) of Criminal Proceeds, Terrorist Financing and Financing the Proliferation of Weapons of Mass Destruction" (dated December 6, 2019, with subsequent amendments).

This is the foundational AML/CFT law in Ukraine, bringing the country's framework closer to FATF recommendations and the EU's 4th and 5th AML Directives. It designates "virtual asset service providers" as "reporting entities" (subjects of primary financial monitoring).

Identification and Verification:

For Individuals: Obtain and verify the customer's identity, including full name, date of birth, place of birth, address, identification number (where applicable), and details of the identity document (series, number, date of issue, issuing authority). Verification must be based on reliable, independent source documents, data, or information.

For Legal Entities: Obtain and verify the legal entity's name, registration number, legal form, legal address, contact details, and identify the management structure.

Beneficial Owner (UBO) Identification: Identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer. This is crucial for both individuals (e.g., if acting on behalf of another) and legal entities.

Understanding the Business Relationship:

Conduct ongoing monitoring of the business relationship and transactions undertaken throughout the course of that relationship to ensure consistency with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring the source of funds and the destination of virtual assets.

Enhanced Due Diligence (EDD):

Customers who are Politically Exposed Persons (PEPs), their family members, or closely associated persons.

Transactions involving high-risk jurisdictions.

Complex, unusually large, or unusual patterns of transactions that have no apparent economic or lawful purpose.

Non-face-to-face business relationships without adequate safeguards.

Transactions above specific thresholds (e.g., equivalent of UAH 400,000 for certain types of operations, though suspicion requires reporting even below this).

Mandate: The Law "On Virtual Assets" mandates that any entity providing virtual asset services, including custody services, must obtain a permit (дозвіл). This permit functions similarly to a license.

Definition of VASP: Article 1 of the Law defines a "Virtual Asset Service Provider" (VASP) as a legal entity that, as part of its business activities, performs one or more of the following services for or on behalf of another natural or legal person:

Issuing Authority: The NSSMC is generally responsible for issuing these permits. For virtual assets secured by monetary values, the NBU would be the responsible authority.

Exchange between virtual assets and assets that ensure value.

Transfer of virtual assets.

Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets. (This directly covers custody).

Participation in and provision of financial services related to the offer and/or sale of virtual assets by an issuer.

Legal Basis: Criminal Code of Ukraine (Кримінальний кодекс України), Code of Administrative Offenses of Ukraine (Кодекс України про адміністративні правопорушення).