Is Crypto Legal in Montenegro?

All exchanges, regardless of fiat handling, are considered "obligated entities" under AML laws and must comply with those provisions.

Custody providers are subject to AML/CTF obligations as "obligated entities."

If the virtual assets held in custody are deemed to be "securities" under Montenegrin law, then a license from the Capital Market Commission (KHOV) for providing investment services (e.g., safekeeping of financial instruments) might be required. This is a case-by-case assessment.

There is no specific "crypto payment processor license".

If the processing involves fiat currency (e.g., converting crypto payments into fiat for merchants), it could fall under the Law on Payment Services and require a license from the CBCG as a payment institution.

If the processing is purely crypto-to-crypto and does not touch fiat or traditional payment rails, the primary obligation would be AML/CTF compliance.

AML/KYC (Anti-Money Laundering / Know Your Customer): This is the most critical requirement for any VASP operating in Montenegro.

Customer Due Diligence (CDD): Implementing robust KYC procedures for all clients.

Ongoing Monitoring: Monitoring transactions and client relationships for suspicious activities.

Reporting: Reporting suspicious transactions (STRs) to the Financial Intelligence Unit (FZPCG).

Risk Assessment: Conducting a comprehensive risk assessment of ML/TF risks.

Internal Controls: Establishing internal policies, procedures, and controls for AML/CTF.

AML Officer: Appointment of a designated AML Officer and providing regular training to staff.

There are no specific capital requirements for being a VASP solely under AML obligations.

However, if a license from the CBCG (for payment services/e-money) or KHOV (for investment services) is required, then specific capital requirements would apply based on those respective laws. For instance, payment institutions have minimum capital requirements (e.g., €20,000 to €125,000 depending on services).

An entity generally needs to be incorporated in Montenegro to conduct business activities and be subject to local regulation.

A registered office and local management/personnel, including a local AML Officer, would typically be expected for AML compliance.

Company Registration: Establish a legal entity (e.g., LLC) in Montenegro with the Central Registry of Commercial Entities (CRPS).

AML Framework Implementation: Develop and implement comprehensive AML/CTF policies, procedures, and controls, appoint an AML Officer, and conduct a risk assessment.

Registration/Notification with FZPCG: As an "obligated entity" under the AML Law, VASPs are expected to register with or notify the Financial Intelligence Unit (FZPCG) of their activities and reporting obligations. The FZPCG provides guidance and oversight for AML compliance.

If payment services are involved (fiat transactions), apply for a payment institution license from the Central Bank of Montenegro (CBCG), following their specific application procedures, which include extensive documentation, business plan, capital verification, and fit-and-proper assessments.

If the virtual assets are deemed securities, apply for the relevant investment services license from the Capital Market Commission (KHOV).

While finding a direct English translation of the latest consolidated law can be challenging, the Financial Intelligence Unit (FZPCG) is the primary authority for its implementation. Their website provides information and guidance

Financial Intelligence Unit of Montenegro (FZPCG): https://www.fzpcg.gov.me/ (Check their "Legislation" or "Activities" section for relevant laws and guidelines).

Responsible for licensing payment institutions and electronic money institutions.

CBCG Official Website: https://www.cbcg.me/ . The relevant law is the Law on Payment Services ("Official Gazette of Montenegro", no. 3/2024).

Responsible for regulating securities and investment services.

KHOV Official Website: https://www.khoc.me/ (Check for information on Investment Funds, Financial Instruments, and Licensing of Investment Companies).

Evolving Landscape: The regulatory landscape for virtual assets is rapidly evolving globally. Montenegro may introduce dedicated VASP licensing in the future, possibly aligning with EU directives like MiCA (Markets in Crypto-Assets).

Law on Prevention of Money Laundering and Terrorism Financing (Zakon o sprječavanju pranja novca i finansiranja terorizma): This is the primary legislation. While an official English translation with a direct URL might be hard to find, the official Montenegrin legal gazette (Službeni list Crne Gore) publishes it. The most relevant amendments were made in 2021 to address virtual assets.

Custody and/or administration of virtual assets or instruments enabling control over virtual assets.

Participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset.

Exchanges between virtual assets and fiat currencies.

Exchanges between one or more forms of virtual assets.

Collect required originator and beneficiary information.

Transmit this information securely and reliably to the beneficiary VASP (or store it for non-VASP beneficiaries).

Screen transactions for sanctions compliance and suspicious activity.

Respond to requests for information from competent authorities.

Administrative Fines: Significant monetary penalties for legal entities and responsible persons within those entities.

Revocation of Licenses: Suspension or permanent revocation of operating licenses for VASPs.

Criminal Charges: In cases of severe or intentional non-compliance, particularly where money laundering or terrorism financing is involved, criminal charges can be brought against individuals and corporate officers.

The penalties are designed to be proportionate and dissuasive, reflecting the severity of the violation.

Financial Intelligence Unit (FIU) of Montenegro (Uprava za sprečavanje pranja novca i finansiranja terorizma - USPNFT): This is the main supervisory body for AML/CFT compliance, including for VASPs. Their website may contain guidance.

Website: https://www.uspnft.gov.me/ (Content primarily in Montenegrin).

Reference: MONEYVAL Follow-up report and technical compliance re-rating of Montenegro (Adopted: 10 May 2023).

Definition of VASP: Article 2(1)(7) defines a "virtual asset service provider" as a legal entity that, as its regular business activity, provides one or more of the virtual asset services specified in Article 18.

Custody Service: Article 18(1)(2) specifies "custody of digital assets for third parties" as a regulated virtual asset service.

Licensing Authority: The Capital Market Authority (KAP) is responsible for issuing, supervising, and revoking licenses for VASPs (Article 20).

Licensing Conditions (Article 21): Applicants for a VASP license must meet several conditions, including

Legal entity established in Montenegro.

Adequate organizational structure, internal control mechanisms, and risk management systems.

Suitable professional qualifications and reputation of management and key personnel.

Adequate technical and security measures for the safekeeping and protection of digital assets.

Minimum capital requirements and guarantees for covering potential liabilities.

Measures for the protection of client assets.

Possession of a cybersecurity certificate.

Law on Blockchain, Digital Assets and Individual Digital Identifiers (Zakon o blokčejnu, digitalnoj imovini i individualnim digitalnim identitetima) - Official publication in the "Official Gazette of Montenegro," No. 80/23.

While an official English translation by the government may not be directly available online, legal firms often provide summaries. The Montenegrin text is the authoritative source.

Capital Market Authority (KAP) website: https://www.kap.co.me/ (For official announcements and forms related to licensing)

Article 21(1)(9) of the Law on Blockchain, Digital Assets and Individual Digital Identifiers explicitly requires VASPs to implement "measures for the protection of client assets." This typically implies segregation, ensuring that client assets are identifiable and separate from the VASP's own assets, to prevent commingling and protect clients in case of VASP insolvency. While the law doesn't detail how assets must be segregated (e.g., separate wallets, omnibus accounts with clear ledgering), the requirement for "measures for the protection of client assets" is the legal basis.

Article 21(1)(7) of the Law on Blockchain, Digital Assets and Individual Digital Identifiers states that a VASP must meet "minimum capital requirements" and provide "guarantees for the coverage of potential liabilities arising from the provision of virtual asset services."

These "guarantees" can take various forms, including professional indemnity insurance or other financial instruments designed to cover risks such as cyber-attacks, operational failures, or loss of client assets. The specific nature and amount of these guarantees are likely to be detailed in subordinate legislation or regulations issued by the Capital Market Authority.

While cold storage (offline storage) is widely recognized as a best practice for securing a significant portion of digital assets, especially those not actively used for trading, the law does not explicitly mandate it. The VASP is responsible for establishing a robust security framework that includes appropriate hot, warm, and cold storage solutions based on their risk assessment and operational needs. The regulator will assess the adequacy of these measures during the licensing process and ongoing supervision.

Montenegro's Law on Blockchain, Digital Assets and Individual Digital Identifiers defines and regulates Virtual Asset Service Providers (VASPs) that offer custody services. Any entity meeting the licensing requirements under this law, including capital, technical, organizational, and fit-and-proper criteria, would effectively be considered a "qualified" provider of digital asset custody services within Montenegro. The law does not differentiate between existing financial institutions and new crypto-native entities, as long as they meet the VASP licensing conditions.

While the law doesn't use the exact term "qualified custodian," it establishes a framework where only licensed and compliant entities can provide custody services, thus ensuring a level of qualification.

Subordinate Legislation and Guidance: The Capital Market Authority (KAP) and the Central Bank of Montenegro (CBCG) are expected to issue detailed bylaws, regulations, and guidance to clarify the implementation of the Blockchain Law, including specific requirements for capital, guarantees, risk management, and cybersecurity for VASPs providing custody services. These will provide the practical details for compliance.

EU Alignment (MiCA): Montenegro is an EU candidate country. The European Union's comprehensive Markets in Crypto-Assets Regulation (MiCA) came into full effect in December 2024 for VASPs. While Montenegro has passed its own law, it will eventually need to harmonize its legislation with MiCA as part of its EU accession process. This could lead to amendments or further refinement of the Montenegrin framework to fully align with MiCA's robust requirements for crypto-asset service providers (CASPs), including those offering custody. MiCA sets very detailed requirements for operational resilience, governance, client asset segregation, and liability for custody providers.

Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets, and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937.

Official EU Legal Text: https://eur-lex.europa.eu/eli/reg/2023/1114/oj

Montenegro's EU Accession Process: General information can be found on the European Commission's website.

Financial Market Authority (FMA) of Montenegro: Responsible for supervising the financial sector, including potential crypto-related activities.

Montenegro is a member of the European Union’s sanctions regime, implementing EU restrictive measures mandated by the Council of the EU.

Payment institutions and money service businesses (MSBs) that facilitate crypto transactions may be subject to licensing under the Law on Financial Services and Supervision.

Transfer of funds or value between persons, including cryptocurrency exchanges and wallet services if classified as payment services.

No specific capital thresholds are outlined for crypto-specific licenses in Montenegro; however, general banking license requirements (e.g., €5 million equity capital) may apply indirectly.

Applications must be submitted to the FMA, including detailed operational plans and anti-money laundering (AML) compliance measures. Processing typically takes 3–6 months.

Entities must demonstrate adequate AML/CFT policies, qualified personnel, and robust internal controls.

As of 2025, no entities have been specifically licensed for cryptocurrency operations by the FMA in Montenegro.

Customer Due Diligence (CDD): Identity verification, beneficial ownership disclosure.

Enhanced Due Diligence (EDD): Required for high-risk customers or transactions.

Suspicious Transaction Reporting (STR): Obligation to report suspicious activities to the FMA within 5 business days.

Record Retention: Maintain records of customer identities and transaction details for at least five years.

PEP Screening: Politically Exposed Persons must be identified and subject to additional scrutiny.

Penalties for violations include fines up to €10 million or imprisonment, depending on the severity of the offense (e.g., money laundering under Article 253 of the Criminal Code).

No specific enforcement cases related to cryptocurrency have been publicly reported in Montenegro as of late 2025.

No explicit tax guidance for virtual assets exists in Montenegro’s legislation. Income from crypto transactions is treated under general income tax rules, while capital gains may be subject to standard VAT exemptions if applicable.

Regulatory Gap: Absence of Montenegrin-specific crypto licensing creates ambiguity.

Risk of Non-compliance: Entities may inadvertently breach EU or UN sanctions without clear local guidance.

Enforcement Uncertainty: Lack of precedent for crypto-related enforcement leaves businesses vulnerable to potential legal action.

No specific licenses for cryptocurrency exchanges or wallet providers have been issued by the FMA as of 2025. Law on Financial Services and Supervision (Official Gazette of Montenegro No. 23/2015)

Entities providing crypto services may indirectly fall under payment institution licensing, lacking clear capital or operational thresholds. Montenegrin Criminal Code, Article 253 et seq., Official Gazette of Montenegro No. 47/2006

Law on Financial Services and Supervision (Official Gazette of Montenegro No. 23/2015)

Montenegrin Criminal Code, Article 253 et seq., Official Gazette of Montenegro No. 47/2006

Sanctions List Integration: Montenegro's regulatory framework incorporates the EU's Consolidated Common List of Sanctioned Persons and Entities (EU Specially Designated Nationals and Blocked Persons list), ensuring alignment with broader European sanctions policies.

Legislative Basis: The regulatory measures are underpinned by Montenegro's Financial Sanctions Act, which mirrors EU directives on the economic aspect of sanctions. Yugoslavia Through Documents ([EC Declaration Concerning Strengthening of Sanctions Against Serbia and Montenegro)]((https://brill.com/view/book/9789004638952/B9789004638952_s313.xml))

Digital Asset Service Providers (DASPs): DASP operators, including wallets and payment processors, are required to register with the FIU and comply with operational transparency requirements. Guide to Montenegro's Sanctions List — Castellum.AI

Customer Identification: All licensed entities must perform thorough customer due diligence, including identity verification and source of wealth assessment. Regulatory Delegation as Cooperative Control: The U.S. Sanctions Framework and Compliance Consolidation in Cross-Border M&As

Ongoing Monitoring: Continuous monitoring of transactions is mandatory to detect suspicious activities, with reporting obligations triggered by thresholds set by the FIU.

Penalties for Non-Compliance: Violations of licensing or AML/KYC obligations can result in fines up to €1 million or imprisonment, depending on the severity and frequency of breaches. Laying low in Budva. Montenegrin sanctions on Russian oligarch...

Sanctions Enforcement: Entities found to be facilitating transactions with sanctioned persons face immediate license suspension and potential asset freezes. Sanctions against Montenegro. Infographics

Regulatory Harmonization: Ongoing challenges include ensuring consistent application of EU sanctions lists across national jurisdictions and adapting swiftly to evolving global sanction regimes.

Technological Advancements: The rapid evolution of blockchain technology necessitates regular updates to regulatory frameworks to address new privacy and security concerns. Adaptive Sanctions Intelligence Graph (ASIG): A Graph AI Framework for ISO 20022-Enabled Global Sanctions Compliance

Yugoslavia Through Documents ([EC Declaration Concerning Strengthening of Sanctions Against Serbia and Montenegro

Guide to Montenegro's Sanctions List — Castellum.AI

Regulatory Delegation as Cooperative Control: The U.S. Sanctions Framework and Compliance Consolidation in Cross-Border M&As

Adaptive Sanctions Intelligence Graph (ASIG): A Graph AI Framework for ISO 20022-Enabled Global Sanctions Compliance

Special State Prosecutor's Office (SDT - Specijalno državno tužilaštvo)

Entity Targeted: Do Kwon (and his associate Hon Chang Joon). Violation Type (Montenegro Specific): Forgery of documents (using fake Costa Rican and Belgian passports for illegal entry and travel).

Note: The underlying reasons for international attention were massive alleged cryptocurrency fraud and capital markets violations (from South Korea and the United States), leading to extradition requests.

Do Kwon: Sentenced to four months in prison.

Hon Chang Joon: Sentenced to four months in prison.

Note: This was for the document forgery charge. The extradition proceedings are separate and ongoing.

Local Conviction: June 19, 2023 (subsequently upheld on appeal)

Extradition Saga: Ongoing since arrest.

Do Kwon and his associate were convicted in Montenegro for using forged passports and served their sentences.

A complex and protracted legal battle ensued regarding extradition requests from both South Korea and the United States. Montenegrin courts have issued conflicting rulings on his extradition, leading to multiple appeals and political interventions, delaying a final decision for over a year. As of mid-2024, the extradition process remains highly contested and unresolved, with the Montenegrin Supreme Court recently annulling prior extradition decisions.

AP News - Do Kwon, a South Korean cryptocurrency fugitive, is arrested in Montenegro for using a fake passport