DeFi protocol frontend in Samoa
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Samoa with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- CDD/KYC: Identify and verify customers (name, address, DOB, nationality, ID number for individuals; entity name, legal form, proof of existence, directors for legal entities) per MLPA 2007 and MLPA Amendment 2021.
- Beneficial Ownership: Identify and verify beneficial owners of legal persons/arrangements.
- Ongoing Monitoring: Continuously monitor transactions against customer risk profile; screen for suspicious activity.
- Enhanced Due Diligence (EDD): Apply for PEPs, customers from high-risk jurisdictions, complex/unusually large transactions, and unusual transaction patterns.
- Suspicious Transaction Reporting (STR): Report any knowledge, suspicion, or reasonable grounds to suspect ML/TF to the FIU without delay, regardless of amount.
- No Tipping-Off: Prohibited from disclosing to customer or third party that an STR has been/will be made.
- Record-Keeping: Maintain all CDD records, transaction records, and identification documents as required under MLPA 2007.
- Risk Assessments: Conduct regular risk assessments as required under AML/CFT framework.
- Registration: Register company with MCIL under Companies Act and obtain a general business license.
- Tax Registration: Register with Ministry of Customs and Revenue (MCR) for Income Tax and VAGST.
Key Restrictions
- Central Bank of Samoa (CBS) has warned that no companies are licensed to deal in cryptocurrencies in Samoa — operating a DeFi frontend may be viewed as unlicensed crypto dealing.
- A local registered office and company registration with MCIL is required.
- The CBS has stated virtual currencies are not legal tender; the frontend must not hold itself out as involving legal tender.
- Fee-taking (e.g., swap fees, frontend fees) likely triggers classification as a reporting entity under the MLPA 2021 Amendment, which explicitly brings VASPs under AML/CFT obligations.
- If the frontend touches fiat currency or cross-border remittances, it may fall under general financial services laws (Financial Institutions Act), which carry stringent requirements.
Key Risks
- Regulatory Ambiguity: No dedicated VASP licensing framework exists — it is unclear whether a DeFi frontend is a 'financial institution' or 'reporting entity' under existing laws; this creates significant legal uncertainty.
- CBS Warnings: The CBS has publicly warned against crypto activities and stated no entities are licensed — operating a frontend could trigger a public cease-and-desist or warning.
- Enforcement Risk: While no crypto-specific enforcement actions have been reported, the broad AML/CFT framework and CBS warnings create enforcement exposure, particularly if the frontend serves Samoan residents without geofencing.
- FATF Compliance Pressure: Samoa aligns with FATF Recommendations; FATF guidance on VASPs and DeFi may prompt future regulatory changes that could retroactively impact operations.
- Consumer Protection Scrutiny: Regulators' primary focus is protecting consumers — a frontend that fails to screen Samoan users or that takes fees without compliance may attract adverse regulatory attention.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Licensing Regime: Not established for VASPs.
Registration Regime: Not established for VASPs.
AML/KYC Requirements: This is the most crucial area where virtual asset service providers would face obligations. Samoa has a robust AML/CFT framework, primarily governed by the Proceeds of Crime Act 2007 and supervised by the Financial Intelligence Unit (FIU).
While not explicitly listing "virtual asset service providers," the definitions of "financial institution" and "designated non-financial businesses and professions (DNFBP)" under the Act are broad enough that entities dealing with virtual assets could be interpreted as subject to AML/CFT obligations if their activities constitute dealing in "funds" or "property."
Customer Due Diligence (CDD) / Know Your Customer (KYC): Identifying and verifying the identity of customers and beneficial owners.
Monitoring Transactions: Screening for suspicious transactions.
Record-Keeping: Maintaining records of transactions and customer identification.
Reporting: Reporting suspicious transactions to the FIU.
Risk Assessments: Conducting regular risk assessments.
Evidence fact ws.licening.local-presence-any-company-registered not found (may have been renamed).
Company Registration: Register the company with the Ministry of Commerce, Industry and Labour (MCIL) under the Companies Act. This involves submitting incorporation documents, articles of association, details of directors and shareholders, and paying fees.
Business License: Apply for a general business license from the MCIL.
Tax Registration: Register with the Ministry of Customs and Revenue (MCR) for tax purposes (e.g., Income Tax, VAGST).
Proceeds of Crime Act 2007 (as amended): This is the primary legislation for AML/CFT in Samoa. Any entity operating in Samoa, especially if dealing with monetary value or funds, would fall under its purview for AML/CFT compliance.
Financial Intelligence Unit (FIU) Samoa: The FIU is responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) and other financial information to combat money laundering and terrorist financing. They would be the enforcement body for AML/CFT compliance.
Capital Requirements: No specific capital requirements for VASPs. For traditional financial institutions licensed under the Financial Institutions Act, substantial capital requirements exist, but these are not currently applied to crypto businesses directly.
Payment Processors: If a payment processor facilitates transactions involving virtual assets, it would not fall under a specific VA license. If it also deals with fiat currency and cross-border remittances, it might fall under the general financial services laws, which are stringent.
Central Bank of Samoa (CBS):
The CBS has issued warnings and advisories regarding cryptocurrencies. While they don't provide a licensing framework, their stance is crucial. You can find their official statements and publications on their website.
Money Laundering Prevention Act 2007 (MLPA 2007): This is the principal AML/CFT legislation. It mandates reporting entities (which typically include VASPs, even if not explicitly named, under broader definitions of financial institutions or through specific guidance/regulations) to implement measures to prevent money laundering and terrorist financing. This includes identifying and freezing assets of designated persons and entities.
Money Laundering Prevention Amendment Act 2021: This crucial amendment specifically expanded the scope of the MLPA 2007 to include Virtual Asset Service Providers (VASPs) as "financial institutions" or "reporting entities," bringing them under the AML/CFT obligations. This aligns Samoa with FATF Recommendation 15 on new technologies.
Money Laundering Prevention Regulations 2008: These regulations provide more detailed rules and procedures for implementing the MLPA.
Financial Intelligence Unit Act 2007: Establishes the Financial Intelligence Unit (FIU) and outlines its powers and functions.
Beneficial Ownership: Identifying and verifying the identity of the beneficial owner(s) of the customer, and taking reasonable measures to understand the ownership and control structure of legal persons and arrangements.
Ongoing Monitoring: Continuously monitoring the business relationship, including scrutiny of transactions undertaken throughout the course of that relationship, to ensure that the transactions are consistent with the VASP’s knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Enhanced Due Diligence (EDD): Applying EDD for higher-risk customers, business relationships, and transactions. This includes situations involving:
Reporting Obligation: If a VASP knows, suspects, or has reasonable grounds to suspect that funds or transactions (regardless of amount) are linked to money laundering, terrorism financing, or other criminal activity, it must report these suspicions to the FIU without delay.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR has been or will be made, or that an investigation is being conducted.
CDD Records: All records obtained through CDD procedures (e.g., identification documents, verification data).
Issuing Public Warnings and Advisories: Highlighting the risks associated with cryptocurrencies, stating they are not legal tender, and advising against their use for domestic transactions or investment.
Clarifying Regulatory Status: Emphasizing that no local entities are licensed or authorized to deal in cryptocurrencies within Samoa's jurisdiction.
Central Bank of Samoa (CBS) - Public Notice on Virtual Currencies (2018, reaffirmed consistently):
Entity Targeted: General Public / Unregulated Crypto Businesses. Violation Type: N/A (Advisory, not an enforcement action against a specific entity). Penalty Amount: N/A.
Outcome: Advised the public that virtual currencies are not legal tender in Samoa, warned of high risks (volatility, scams, money laundering), and stated that no companies are licensed by the CBS to deal in cryptocurrencies in Samoa. This sets the foundational regulatory stance.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A DeFi protocol frontend is not covered by a dedicated licensing framework in Samoa, but the Money Laundering Prevention Amendment Act 2021 explicitly classifies VASPs as reporting entities subject to full AML/CFT obligations (CDD, STR, record-keeping, risk assessments), and CBS warnings advise against unregulated crypto dealing; operating requires local incorporation, a business license, AML compliance under FIU supervision, and carries significant regulatory ambiguity risk.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?