Remote VASP serving residents in Brunei
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is not permitted in Brunei.
Verdict Details
- Permitted
- no
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD/KYC under AMLO 2011 and AMBD AML/CFT Guidelines for Financial Institutions — collect and verify identity of customers (natural persons and legal entities), beneficial ownership, purpose of business relationship.
- Risk-based approach: Simplified CDD for low-risk, Enhanced CDD (EDD) for higher-risk customers (PEPs, cross-border relationships, high-risk jurisdictions).
- Ongoing transaction monitoring to ensure consistency with customer risk profile.
- Suspicious Transaction Reporting (STR) to the Brunei Financial Intelligence Unit (FIU) within AMBD for any known or suspected ML/TF transactions.
- Record-keeping: retain customer identification and transaction records for at least 5 years after end of relationship or transaction date.
- Internal AML/CFT policies, appointment of a Money Laundering Reporting Officer (MLRO), ongoing employee training, and independent audits of the AML program.
- Travel Rule obligations: obtain and hold originator and beneficiary information (name, address, account number or wallet address) for transactions at or above BND 1,500 (or equivalent in virtual assets), including linked transactions.
- No tipping-off prohibition.
Key Restrictions
- Cryptocurrency is illegal in Brunei as of 2025 — fiat-to-crypto or crypto-to-fiat exchange is an unauthorized, illegal activity, not a licensed regulated activity.
- No dedicated VASP licensing regime exists; there is no lawful pathway for a remote VASP to serve residents from abroad.
- Virtual assets are not recognized as legal tender in Brunei.
- Any entity performing financial activities involving fiat requires licensing under the Money-Changing and Remittance Businesses Order, 2011 (for fiat exchange/transfer activities), but crypto activities fall outside this framework.
- If a virtual asset is deemed a security, the Securities Market Order, 2001 applies, requiring capital-market services licenses.
Key Risks
- Operating without a license in Brunei carries high enforcement risk — AMBD/BDCB has consistently warned the public against virtual currency risks and issued public statements treating VASPs as subject to AML/CFT obligations.
- The regulator (BDCB, formerly AMBD) takes a conservative approach; unlicensed cross-border crypto services face legal and reputational exposure.
- No clear regulatory pathway for foreign VASPs to obtain authorization; any attempt to serve Brunei residents remotely would be operating illegally under current law.
- Penalties for non-compliance with AML/CFT obligations include substantial fines, imprisonment for individuals, and potential public sanctions with severe reputational damage.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific VA Licensing Regime: There is no dedicated law or regulation in Brunei that specifically defines, regulates, or licenses virtual asset service providers (VASPs) for activities like operating crypto exchanges, providing crypto custody, or processing crypto payments.
In Brunei, cryptocurrency is illegal as of 2025, so any exchange facilitating fiat-to-crypto or crypto-to-fiat transactions is conducting an unauthorized, illegal activity rather than a licensed or permissible regulated activity.
VAs Not Legal Tender: Cryptocurrencies are not recognized as legal tender in Brunei.
AMBD Warnings: AMBD has consistently warned the public about the risks associated with investing in virtual currencies and participating in Initial Coin Offerings (ICOs), highlighting their speculative nature, volatility, lack of underlying value, and the absence of regulatory protection.
AML/KYC Requirements: Brunei has robust Anti-Money Laundering and Counter-Financing of Terrorism (AML/CFT) laws. Any financial institution, or entity performing financial activities, would be subject to strict AML/CFT obligations, including:
Conservative Approach: Brunei's regulators are generally conservative. Operating in an unregulated space with high risk, without specific guidance from AMBD, carries significant legal and reputational risks.
Anti-Money Laundering and Counter-Terrorism Financing Order, 2011 (AMLO 2011): This is the foundational law that establishes the AML/CFT framework in Brunei. It defines reporting institutions, sets out obligations, and empowers AMBD as the supervisory authority.
AMBD AML/CFT Guidelines for Financial Institutions: While often general, AMBD has clarified that these guidelines, issued under the AMLO 2011, apply to VASPs. These guidelines provide detailed instructions on implementing the requirements of the AMLO 2011.
The Brunei Darussalam Central Bank (BDCB), formerly AMBD, has issued public statements and maintains guidance clarifying that virtual asset activities and VASPs fall within the scope of regulated financial activities for AML/CFT purposes, emphasizing compliance with the AMLO 2011 and FATF Recommendations, including Recommendation 15 concerning virtual assets.
Evidence fact bn.aml.identification-and-verification-idv-of not found (may have been renamed).
Customer Identification Records: Copies of identity documents, verification data, and any information obtained during the CDD process.
Transaction Records: Details of all transactions, including sender and receiver information, virtual asset types, amounts, dates, and transaction identifiers (e.g., blockchain hashes).
Duration: Records must be retained for at least five (5) years after the business relationship ends or after the date of the transaction. This ensures that records are available for audit, investigation, and analysis by competent authorities.
Implement robust internal AML/CFT policies, procedures, and controls.
In Brunei, AML/CFT reporting obligations are triggered for transactions of BND 15,000 or more (or equivalent in other currencies or virtual assets), whether in a single transaction or several linked transactions.
Evidence fact bn.travel-rule.penalties-for-non-compliance not found (may have been renamed).
Fines: Substantial monetary penalties for institutions and individuals.
Imprisonment: Individuals involved in serious breaches or deliberate non-compliance can face terms of imprisonment.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — cryptocurrency exchange and VASP activities are effectively illegal in Brunei as of 2025; there is no licensing pathway for a remote VASP to lawfully serve residents, and cross-border crypto service would constitute unauthorized illegal activity with exposure to AML/CFT enforcement penalties.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?