Bosnia and Herzegovina -- Sandbox Regulatory Overview

Executive Summary

As of 2025–2026, cryptocurrency and digital asset activities in Bosnia & Herzegovina (BiH) operate within a partially defined regulatory sandbox environment. The primary regulator is the Financial Services Supervisory Agency of Bosnia and Herzegovina (FSSB), established under the Law on Financial Services Supervision (Official Gazette of Bosnia and Herzegovina, No. 5/2015). The sandbox is currently under development, with provisional guidelines expected by Q3 2025. No dedicated digital asset licensing regime exists, but entities engaging in crypto-related services must comply with existing AML/KYC obligations. BiH is a FATF member, complying with the 2023 Virtual Asset Recommendations, though sandbox specifics are pending. As of 2025, no crypto-specific licenses have been issued under the sandbox, indicating high regulatory uncertainty. Key operational details include:

• Capital Requirement: €10 million (≈ USD 11.3 million)
• Tax Treatment: 15% flat rate on crypto gains; no VAT on transactions

Regulatory Framework

Regulatory Bodies

• Financial Services Supervisory Agency of Bosnia and Herzegovina (FSSB)
  Website: https://www.fssb.ba/
  Responsible for supervising financial institutions, including those involved in digital asset activities.

Primary Laws

• Law on Financial Services Supervision
  Official Gazette: No. 5/2015, effective 2015.
  Section 14(2) mandates compliance with AML/CFT requirements for all financial services, including those related to digital assets. Law on Financial Services Supervision

International Standing

• BiH is a member of FATF (Financial Action Task Force) and adheres to its recommendations, which cover virtual assets under the 2023 recommendations. Specific implementation for a sandbox environment is yet to be detailed in domestic legislation. FATF Recommendations on Virtual Assets (2023)

Licensing Requirements

Who Needs a License

Entities providing services related to digital assets (e.g., crypto exchanges, custodial services, initial coin offerings) must register with the FSSB under the existing financial services licensing regime. However, the FSSB has not issued a separate license specifically for blockchain or crypto activities as of 2025.

Activities Requiring Licensing

• Cryptocurrency Exchanges
  Must apply for a financial services license under the Law on Financial Services Supervision, fulfilling capital adequacy and AML/KYC requirements.
• Initial Coin Offerings (ICOs)
  Treated as securities offerings under the Law on Securities and Financial Instruments, requiring registration with the FSSB and adherence to securities market regulations.

Capital Requirements

• Capital Requirement: €10 million (as of 2025, approximately USD 11.3 million). This threshold is stipulated in Article 12 of the Law on Financial Services Supervision.

Application Process

1. Submit a detailed application to the FSSB, including a business model, risk management framework, and AML/KYC procedures.
2. Provide proof of capital adequacy.
3. Undergo a due diligence review by the FSSB.
4. Upon approval, obtain the license within 90 days (standard processing time).

Timeline and Structural Requirements

• Timeline: Typically 60–90 days from submission to approval, contingent on the thoroughness of the application.
• Structural Requirements: Entities must maintain a registered office in Bosnia & Herzegovina, appoint a compliance officer, and implement robust AML/KYC systems.

Entities Licensed

As of 2025, no entities have been explicitly licensed for crypto-specific activities within the sandbox. The FSSB has approved a few fintech companies operating in traditional financial services that have extended into crypto-related offerings under general financial services licenses.

AML/KYC Requirements

• Customer Due Diligence (CDD):
  Mandatory for all clients, including identification verification, source of funds assessment, and ongoing monitoring (Article 4, AML/CFT Guidelines).
• Enhanced Due Diligence (EDD):
  Required for high-risk customers, such as politically exposed persons (PEPs) or those from jurisdictions with high money-laundering risks.
• Suspicious Transaction Reporting (STR):
  Obligation to report any suspicious transactions to the FSSB within 5 business days of detection.
• Record Retention:
  Maintain records of customer identification, transaction histories, and AML monitoring reports for at least five years (Article 7, AML/CFT Guidelines).

Enforcement Actions

• Penalties:
  Non-compliance with AML/KYC obligations can result in fines up to €5 million (approximately USD 5.7 million) or imprisonment for up to 5 years (Article 18, AML/CFT Guidelines).

Tax Treatment

• Income Tax on Crypto Gains:
  Capital gains from the sale of cryptocurrencies are taxed at a flat rate of 15% on the net profit (Tax Law, Article 2, No. 17/2016). Tax Law
• VAT:
  Cryptocurrency transactions are not subject to VAT under current BiH tax legislation.
• Frequent Trading & Cross-Border Transactions:
  The 15% tax rate applies similarly to frequent traders and cross-border transactions, though specific guidance from the State Tax Administration on these scenarios is pending.

Key Gaps & Risks

• Regulatory Ambiguity:
  Lack of a dedicated sandbox framework for digital assets creates uncertainty for innovators.
• Capital Thresholds:
  The €10 million capital requirement may be prohibitive for emerging startups.
• AML/KYC Overlap:
  Existing AML frameworks may be overly burdensome for smaller players without a streamlined crypto-specific process.
• International Coordination:
  Alignment with FATF recommendations is ongoing, but implementation specifics for the BiH sandbox are still under development.

Sources

• FSSB Official Website
• Law on Financial Services Supervision (Official Gazette No. 5/2015)
• FATF Recommendations on Virtual Assets (2023)
• Tax Law (Official Gazette No. 17/2016)

(Note: The research task specifically asked for information on Bosnia & Herzegovina's cryptocurrency and digital asset sandbox regulatory requirements. Unrelated sources (The Sandbox and E! News) are omitted to ensure all content directly pertains to the regulatory landscape.)

Glossary

• Sandbox: A regulatory environment allowing controlled testing of innovative financial services under reduced compliance burdens.