Is Crypto Legal in Slovakia?

Registration, not a dedicated license: Currently, there isn't a specific "crypto custody license" in the traditional financial sense. However, entities providing services related to virtual assets, including custodian wallet providers, are considered "obliged entities" under Slovak AML law.

AML Obligations: This means they must comply with AML/CFT requirements, such as customer due diligence (CDD), transaction monitoring, suspicious activity reporting (SARs), and implementing internal risk management systems.

National Legislation: These obligations stem from Act No. 297/2008 Coll. on measures against the legalization of proceeds of crime and the financing of terrorism (Zákon č. 297/2008 Z. z. o ochrane pred legalizáciou príjmov z trestnej činnosti a o ochrane pred financovaním terorizmu). This Act has been amended multiple times to transpose the 4th, 5th, and 6th EU AML Directives.

Competent Authorities: For AML purposes, the Financial Intelligence Unit (FIU) within the Ministry of Interior is key, but the National Bank of Slovakia (Národná banka Slovenska - NBS) supervises financial institutions, which could include certain crypto-related activities if deemed financial services.

Act No. 297/2008 Coll. (AML Act): Link to Slov-Lex, the Slovak legislative database (in Slovak) (Search for the consolidated version to include amendments).

National Bank of Slovakia (NBS) general information on Virtual Assets (in Slovak): https://www.nbs.sk/sk/dohlad-nad-financnym-trhom/dohlad-nad-virtualnymi-aktivami (This page confirms the application of AML rules and highlights upcoming MiCA).

None specific to crypto custody: There are no national insurance or bonding mandates specifically for crypto custody providers under current Slovak law.

No specific mandate: Slovak law does not currently mandate the use of cold storage for crypto assets. Custodians are expected to implement robust security measures, but the specific technology is not prescribed.

Not explicitly defined for crypto: The concept of a "qualified custodian" as a specifically regulated entity for crypto assets does not exist under current Slovak law. Entities performing custody are primarily defined by their AML obligations.

Publication: MiCA was published in the Official Journal of the European Union on June 9, 2023.

Titles III (asset-referenced tokens) and IV (e-money tokens) will apply from June 30, 2024.

All other titles, including those related to CASPs and custody, will apply from December 30, 2024.

MiCA Text (Official Journal of the European Union): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1114

Mandatory Authorization: Under MiCA (Title V), any entity providing "custody and administration of crypto-assets on behalf of clients" (Article 68) will be considered a Crypto-Asset Service Provider (CASP) and will need to be authorized by the national competent authority. In Slovakia, this will most likely be the National Bank of Slovakia (NBS).

Application Process: CASPs will need to apply for authorization, demonstrating compliance with various organizational, operational, and prudential requirements.

Passporting: Once authorized in Slovakia, a CASP can "passport" its services across the entire EU.

Segregation of Client Assets Rules (Future - MiCA)

Strict Segregation Mandate: MiCA explicitly requires CASPs providing custody services to

"Enter into a client agreement to specify their duties and responsibilities, and to ensure that clients’ rights are clearly established, including those relating to the ownership of the crypto-assets." (Article 68(2)(b))

"Segregate clients’ crypto-assets from their own assets and ensure that crypto-assets held on behalf of clients are not used without the explicit consent of the client." (Article 68(2)(c))

"Keep records and accounts that enable them to immediately distinguish crypto-assets held on behalf of clients from their own assets and from the assets held on behalf of other clients." (Article 68(2)(d))

Similar rules apply to clients' fiat funds (Article 68(2)(e)).

Prudential Safeguards: MiCA (Article 67) mandates that CASPs providing custody services hold prudential safeguards to cover potential liability risks. These safeguards must be one of the following

The amount of these safeguards will depend on the nature and scale of the services provided, with specific calculations outlined in the regulation (e.g., 25% of the CASP's fixed overheads of the preceding year, or a minimum absolute amount).

Security & Operational Resilience: While MiCA doesn't explicitly mandate cold storage, it imposes stringent requirements on CASPs for operational resilience, security, and IT systems (Article 65).

Custodians must "implement robust IT systems, security arrangements and protocols in accordance with international standards" (Article 68(2)(f)) and "have a policy on the recovery of crypto-assets, and communicate that policy to clients" (Article 68(2)(g)). These provisions effectively necessitate sophisticated and secure storage solutions, which for many institutions will include significant use of cold storage for the bulk of client assets.

MiCA directly defines the requirements for a "provider of custody and administration of crypto-assets on behalf of clients" (Article 3(1)(10) and Article 68). An authorized CASP meeting these criteria will effectively serve as a "qualified custodian" within the EU framework.

No separate national custody legislation: Slovakia is not expected to introduce its own separate, comprehensive custody legislation for crypto assets outside of MiCA. As an EU regulation, MiCA is directly applicable and sets the harmonized standard.

Designating the Competent Authority: Officially designating the National Bank of Slovakia (NBS) as the authority responsible for authorizing and supervising CASPs under MiCA.

Adjusting National Law: Making necessary amendments to existing financial market legislation (e.g., to integrate references to MiCA, establish national penalties for non-compliance, and clarify supervisory powers).

Issuing Guidance: The NBS will likely issue specific guidance or secondary legislation to help CASPs understand and comply with MiCA requirements in the Slovak context.

Cryptocurrency activity in Slovakia is not subject to a dedicated, comprehensive licensing framework as of the latest available information; the existing regulatory approach is fragmented across general financial and AML legislation. Slovakia | EUR-Lex

The primary regulator for financial services, including any crypto-related activities that fall within existing definitions, is the National Bank of Slovakia (Národná banka Slovenska), operating under the broader EU financial regulatory framework. Slovakia - EUR-Lex

There is no specific "crypto license" regime in Slovakia; no entity has been granted a dedicated virtual asset license because such a license does not exist under current law. Slovakia - Justice and Home Affairs

The practical reality is that crypto businesses must navigate general business registration, AML obligations, and tax rules without a clear, tailored authorisation pathway, creating significant legal uncertainty. IMMC.SWD(2023)809 final

While EU-level initiatives like MiCA are in progress, Slovakia has not yet enacted national implementing legislation that would establish a formal licensing system for crypto-asset service providers. IMMC.SWD(2023)824 final

The primary regulatory body for financial services in Slovakia is the National Bank of Slovakia (NBS), which oversees banking, capital markets, and payment services; it is the designated competent authority under EU financial regulations. Slovakia - EUR-Lex

The core financial legislation includes the Slovak Act on Banks (No. 483/2001 Coll.), the Act on Securities and Investment Services (No. 566/2001 Coll.), and the Act on Payment Services (No. 492/2009 Coll.), all of which predate the crypto era and do not specifically address virtual assets. Slovakia | EUR-Lex

Slovakia's legal framework is transposed from EU directives, including the 4th and 5th Anti-Money Laundering Directives (2015/849/EU and 2018/843/EU), which extend AML obligations to virtual currency exchange platforms and custodian wallet providers. Slovakia - Justice and Home Affairs

As an EU member state, Slovakia is subject to the Financial Action Task Force (FATF) recommendations and participates in Moneyval, the Council of Europe's anti-money laundering evaluation body; Slovakia's mutual evaluation report was adopted in 2019. IMMC.SWD(2023)809 final

The European Commission's 2023 Staff Working Document on combating money laundering and terrorist financing lists Slovakia as having partial compliance with FATF Recommendation 15 (new technologies), indicating gaps in the regulation of virtual assets. IMMC.SWD(2023)809 final

Slovakia has not established a national register for virtual asset service providers (VASPs) under a dedicated law, although AML Act amendments require such providers to register with the Financial Intelligence Unit (FIU) for AML purposes. C_2010198EN.01000101.xml

No specific capital requirements, governance rules, or prudential standards for crypto-asset service providers exist in Slovak law, as the prevailing framework does not categorise them as regulated financial institutions beyond AML. IMMC.SWD(2023)824 final

No dedicated licensing regime exists for virtual asset service providers in Slovakia; the National Bank of Slovakia has not issued any licenses for crypto exchanges, custodians, or brokers, and the number of licensed entities is zero under any crypto-specific framework. Slovakia - EUR-Lex

Activities that involve traditional financial instruments, such as security tokens that qualify as transferable securities, may require a license under the Act on Securities and Investment Services (No. 566/2001 Coll.), issued by the NBS, but this applies only if the token is legally classified as a security. Slovakia | EUR-Lex

For crypto-assets that function as payment instruments, the Act on Payment Services (No. 492/2009 Coll.) might apply, requiring an e-money or payment institution license from the NBS, but this has not been systematically clarified for all crypto activities. Slovakia - Justice and Home Affairs

The application process for any financial license in Slovakia is conducted through the NBS, with a statutory timeframe of six months for decision-making, but this applies to traditional financial activities, not to pure crypto businesses. Slovakia - EUR-Lex

Minimum capital requirements for payment institutions and e-money institutions are set at €125,000 and €350,000 respectively under relevant EU directives, transposed into Slovak law, but these are not crypto-specific thresholds. IMMC.SWD(2023)809 final

In practice, crypto businesses in Slovakia operate without any regulatory authorisation from the NBS, instead registering as ordinary commercial companies with the Slovak Business Register, unless they offer products that fall under existing financial regulation. IMMC.SWD(2023)824 final

The upcoming Markets in Crypto-Assets Regulation (MiCA), which will introduce a licensing regime for crypto-asset service providers across the EU, has not yet been transposed into Slovak national law, and no timeline for national implementation has been published. IMMC.SWD(2023)824 final

The Act on Protection against Legalisation of Proceeds of Criminal Activity and Financing of Terrorism (Act No. 297/2008 Coll., as amended) is the primary AML framework in Slovakia, transposing EU directives. Slovakia - EUR-Lex

Under the 5th AML Directive (2018/843/EU), virtual currency exchange platforms and custodian wallet providers are classified as "obliged persons" and must conduct customer due diligence (CDD), including identifying and verifying the identity of customers, beneficial owners, and any person acting on behalf of a customer. Slovakia - Justice and Home Affairs

Enhanced due diligence (EDD) is required for high-risk customers, including politically exposed persons (PEPs), cross-border correspondent relationships, and transactions involving high-risk third countries, as per EU AML standards implemented in Slovak law. C_2010014EN.01000101.xml

Obliged entities must report suspicious transactions to the Slovak Financial Intelligence Unit (FIU), a unit within the Department of Criminal Income Legalisation at the Ministry of Interior, as mandated by Act No. 297/2008 Coll. Slovakia - EUR-Lex

Record-keeping requirements oblige entities to retain all CDD information and transaction records for at least five years after the end of a business relationship, in line with EU AML directives. IMMC.SWD(2023)809 final

Beneficial ownership identification is mandatory, and Slovakia has established a central register of beneficial owners, although the European Commission has noted deficiencies in the accuracy and accessibility of this register. IMMC.SWD(2023)809 final

PEP screening is not automated by regulation; individual case-by-case assessment is required, consistent with EU Directive 2015/849, but there is no national supervisory guidance specifically tailored to crypto-asset service providers. C_2010198EN.01000101.xml

The Financial Intelligence Unit of Slovakia has issued administrative fines for AML non-compliance since 2019, but no published enforcement actions specifically targeting crypto-asset businesses have been identified. IMMC.SWD(2023)809 final

The European Commission's 2023 report notes that Slovakia's supervisory authorities, including the National Bank of Slovakia, have not yet taken punitive actions against VASPs for AML failures, due to the absence of a clear regulatory perimeter. IMMC.SWD(2023)809 final

In 2022, Slovak police investigated a cryptocurrency investment fraud scheme, but this was a criminal matter under general fraud laws, not a regulatory enforcement action by the NBS or FIU. Slovakia - Justice and Home Affairs

The National Bank of Slovakia issued public warnings in 2021 and 2022 about unregulated crypto exchange platforms, reminding consumers that such entities are not under NBS supervision, but no fines or license revocations followed because no license was ever granted. Slovakia - EUR-Lex

No orders have been issued to shut down or suspend any crypto business in Slovakia as of the latest available data, even for non-compliance, because the legal basis for such action has not been established in national law. IMMC.SWD(2023)824 final

No tax guidance has been issued for virtual assets by the Slovak Ministry of Finance or the Financial Administration (Finančná správa) as a specific policy document; existing rules apply by analogy. Slovakia | EUR-Lex

Under the Slovak Income Tax Act (Act No. 595/2003 Coll.), gains from the sale of cryptocurrency are generally taxable as other income (Section 8) for individuals, or as business income for entrepreneurs, at the standard income tax rates of 19% or 25%. Slovakia - EUR-Lex

Cryptocurrency is not classified as currency or money for tax purposes; instead, it is treated as a non-financial asset, falling within the scope of taxable transfers of property. IMMC.SWD(2023)824 final

Value Added Tax (VAT) on cryptocurrency exchange is not applied, in line with the EU Court of Justice ruling in case C-264/14 (Hedqvist), which determined that exchanging traditional currency for bitcoin and vice versa is a VAT-exempt supply of services; this interpretation is generally accepted by Slovak tax authorities. Slovakia - EUR-Lex

No specific tax regime has been enacted for mining rewards; they are theoretically taxable as income in kind at the moment of receipt, but no administrative guidance exists to clarify valuation and timing. C_2010014EN.01000101.xml

Businesses dealing in cryptocurrency must register for corporate income tax under the standard regime, and losses from crypto trading can be offset against gains, but no special tax-loss harvesting rules apply to crypto assets. IMMC.SWD(2023)809 final

The most significant gap is the absence of a national crypto-specific legal framework; businesses operate in a grey area where the NBS, FIU, and tax authority have overlapping but incomplete jurisdiction, creating compliance uncertainty. Slovakia | EUR-Lex

The AML framework, transposed from EU directives, imposes obligations on VASPs but does not define them operationally, leaving ambiguous whether a "platform" or "wallet provider" includes all business models, such as DeFi protocols, NFTs, or mining pools. IMMC.SWD(2023)809 final

Registration with the FIU for AML purposes does not constitute any form of regulatory approval; it introduces supervisory expectations without granting rights, causing confusion among businesses who may believe registration equals licensing. Slovakia - EUR-Lex

The lack of NBS guidance on the classification of tokens (utility, payment, or security) exposes businesses to retroactive reclassification risk, where a token initially treated as a utility could later be deemed a security, triggering licensing requirements retroactively. Slovakia - EUR-Lex

FATF's mutual evaluation of Slovakia, published in 2019, flagged that VASPs are not supervised for AML compliance as a distinct category; this was acknowledged by authorities as a gap needing correction, but no national-law implementation has been announced. IMMC.SWD(2023)809 final

Supervisory asymmetries exist: the NBS oversees traditional financial institutions but has no statutory mandate over crypto businesses, while the FIU has AML jurisdiction but no prudential or conduct powers, leaving consumer protection risks unaddressed. IMMC.SWD(2023)824 final

Since no licenses have been granted, any business claiming Slovak crypto authorisation is misleading; the absence of enforcement actions against unlicensed platforms creates a false sense of regulatory approval, which is a compliance risk if MiCA is later implemented without grandfathering provisions. Slovakia - Justice and Home Affairs

About the national database/Slovakia- N-Lex

Slovakia - EUR-Lex - European Union

e16109 - EN - EUR-Lex - European Union

Slovakia - Justice and Home Affairs

C_2010014EN.01000101.xml - EUR-Lex - European Union

Act No. 297/2008 Coll. on Protection Against Legalisation of Proceeds of Crime and Against Financing of Terrorism (AML Act): This is the primary legislation in Slovakia governing AML/CFT. It has been amended multiple times, most notably by Act No. 397/2019 Coll., which transposed the 5AMLD and extended its scope to virtual assets and VASPs.

Directive (EU) 2018/843 (5th Anti-Money Laundering Directive - 5AMLD): This directive extended AML/CFT obligations to VASPs for the first time.

Directive (EU) 2015/849 (4th Anti-Money Laundering Directive - 4AMLD): The foundational directive.

Directive (EU) 2018/1673 (6th Anti-Money Laundering Directive - 6AMLD): Further harmonized criminal offenses and penalties for money laundering.

Virtual currency exchange services: Providers exchanging virtual currencies for fiat currencies, or vice versa, or between one or more forms of virtual assets.

Custodian wallet providers: Entities that provide services to safeguard private cryptographic keys on behalf of their customers, to hold, store, and transfer virtual assets.

Providers of other services related to virtual assets: This can be broadly interpreted to include other services like issuance, transfer, or administration of virtual assets.

Natural Persons: Full name, date of birth, place of birth, permanent address, nationality, type and number of identity document, and the issuing authority. Identity must be verified using reliable, independent sources (e.g., government-issued ID).

Legal Entities: Company name, registered address, registration number, identification of directors/management, and verification of their authority.

Identify the natural person(s) who ultimately own or control the customer, or on whose behalf a transaction is being conducted. This usually means individuals holding 25% or more of the shares/voting rights, or otherwise exercising control.

Verification of the UBO's identity.

Gather information about the reason for the customer seeking services from the VASP and the expected nature of their activity.

Continuously scrutinize transactions throughout the course of the business relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.

Politically Exposed Persons (PEPs): Customers who are or have been entrusted with prominent public functions, their family members, or close associates.

High-risk jurisdictions: Customers or transactions involving countries identified as having strategic AML/CFT deficiencies by FATF or the European Commission.

Complex or unusually large transactions: Or transactions with an unusual pattern, without an apparent economic or lawful purpose.

New or developing technologies: Including virtual assets, where the risks may not be fully understood.

Non-face-to-face business relationships: Where there is no physical meeting with the customer.

Source of Funds (SoF) and Source of Wealth (SoW): VASPs must take reasonable measures to establish the source of funds and wealth involved in high-risk relationships or transactions.

Obligation to Report: Any transaction, attempted transaction, or activity where the VASP suspects or has reasonable grounds to suspect that funds are proceeds of criminal activity or are linked to terrorist financing.

Timing: Reports must be submitted promptly, usually immediately, once a suspicion arises.

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that a suspicious activity report has been, or will be, filed.

Copies of documents obtained for CDD (identification, verification, UBO).

Evidence of the measures taken to establish the purpose and nature of the business relationship.

Records of transactions, including amounts, currencies, dates, sender and recipient information (including virtual asset addresses where applicable), and any other relevant details.

Records of internal and external reports (e.g., suspicious transaction reports).

Retention Period: Generally, these records must be kept for five years from the date of the last transaction or the end of the business relationship, whichever is later. This period can be extended upon request by competent authorities.

The NBS is the main financial supervisory authority in Slovakia. It supervises financial institutions and other obliged entities, including those operating in the virtual asset space, particularly if they fall under broader financial services licensing. The scope of their supervision for VASPs can depend on the specific type of service offered and whether it falls under traditional financial licensing requirements or specific VASP registration.

The FIU in Slovakia is part of the Presidium of the Police Force of the Slovak Republic (Prezídium Policajného zboru Slovenskej republiky), under the Ministry of Interior.

The FIU is responsible for receiving, analyzing, and disseminating suspicious transaction reports and plays a crucial role in combating money laundering and terrorist financing. While not a direct supervisory body for compliance in the same way as NBS, it is the central point for STRs and works closely with supervisory authorities and law enforcement.

Ministry of Interior (which oversees the Police Force): https://www.minv.sk/?policia (direct FIU unit page might not be publicly prominent on the main police site).

Current (Partial - AML/CTF Focused): The immediate focus is on Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF) obligations, requiring virtual asset service providers (VASPs) to register and comply with reporting duties. Consumer protection largely comes in the form of warnings issued by the central bank.

National Bank of Slovakia (Národná banka Slovenska - NBS): The NBS is the primary supervisory authority for many financial institutions in Slovakia, including some VASPs. They issue guidance and oversee compliance.

Role: The central bank and financial market supervisor. Currently, it issues warnings to the public about the risks associated with cryptocurrencies and provides guidance on financial market regulations. Under MiCA, the NBS is expected to be a primary competent authority for supervising CASPs and issuers of crypto-assets, especially those not deemed "significant" by the European Securities and Markets Authority (ESMA).

Role: Responsible for supervising compliance with AML/CTF legislation. This includes the registration of VASPs and the receipt of suspicious transaction reports.

Website: https://www.minv.sk/?financna-spravodajska-jednotka (Section within the Ministry of Interior website)

Date: Originally enacted in 2008, it has been significantly amended over time, particularly to transpose EU Anti-Money Laundering Directives (e.g., AMLD5 and AMLD6).

Relevance: This is the primary national legislation that currently regulates virtual asset service providers (VASPs) in Slovakia. It defines VASPs (e.g., exchanges, custodians) as obliged entities and subjects them to AML/CTF requirements, including client due diligence, suspicious transaction reporting to the FIU, and mandatory registration with the FIU.

Reference: Available in Slovak legislative databases, e.g., Slov-Lex (https://www.slov-lex.sk/) – search for "zákon č. 297/2008 Z. z."

Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA)

Date: Published in the Official Journal of the EU on June 9, 2023.

Rules for asset-referenced tokens (ARTs) and e-money tokens (EMTs) apply from 30 June 2024.

Rules for other crypto-assets and CASPs apply from 30 December 2024.

Relevance: MiCA is an EU Regulation, meaning it is directly applicable in all EU member states, including Slovakia, without the need for national transposition. It will fundamentally reshape the regulatory landscape for crypto-assets and services. It introduces

Licensing requirements for Crypto-Asset Service Providers (CASPs).

Rules for the issuance and admission to trading of various crypto-assets.

Operating conditions for CASPs regarding governance, consumer protection, and operational resilience.

Measures to prevent market manipulation and insider trading.

Legality: Crypto trading and the operation of crypto exchanges are legal in Slovakia. There is no ban on holding or trading cryptocurrencies.

AML/CTF Registration: Currently, entities offering virtual asset services (such as operating crypto exchanges, providing fiat-to-crypto exchange services, or offering crypto custody) are classified as Virtual Asset Service Providers (VASPs). They are subject to the AML Act (Act No. 297/2008 Coll.) and must

Register with the Financial Intelligence Unit (FIU) of the Ministry of Interior.

Implement robust AML/CTF policies and procedures.

Conduct customer due diligence (KYC).

Report suspicious transactions to the FIU.

No specific operating license (pre-MiCA): Before MiCA's full implementation, there is no specific licensing regime in Slovakia for crypto exchanges beyond the AML registration requirements. This means they are not currently supervised by the NBS for prudential or conduct-of-business rules in the same way traditional financial institutions are.

Consumer Trading: Individuals can legally buy, sell, and hold cryptocurrencies. However, they do so at their own risk, and the NBS frequently issues warnings highlighting the volatility, lack of regulatory protection, and potential for fraud.

Taxation: Profits from cryptocurrency trading are generally subject to income tax in Slovakia, similar to capital gains. There are specific rules regarding the holding period and types of income.

Future under MiCA: From December 2024, crypto exchanges (which will be categorized as Crypto-Asset Service Providers - CASPs) will need to obtain a license from the National Bank of Slovakia (or another competent authority in the EU) to operate within Slovakia. This license will come with stringent requirements regarding capital, governance, operational resilience, and consumer protection, significantly increasing regulatory oversight beyond current AML obligations.

Adopted: Yes, Slovakia has adopted the FATF Travel Rule principles into its national law. This was primarily achieved through amendments to its AML/CFT legislation, transposing the 5th EU AML Directive (Directive (EU) 2018/843), which extended AML obligations to virtual asset service providers (VASPs).

EU Context: The upcoming Markets in Crypto-Assets (MiCA) Regulation, expected to apply fully in the EU by late 2024/early 2025, will further standardize and strengthen the Travel Rule implementation across all EU member states, including Slovakia. MiCA incorporates the FATF Travel Rule requirements directly within its framework for crypto-asset transfers.

The key amendments to Slovak AML law that brought virtual asset service providers under the AML/CFT regime, including Travel Rule-like obligations, came into effect on 1 March 2020. This was through Act No. 397/2019 Coll., which amended the primary AML Act.

Slovakia's AML law, consistent with the 5AMLD and FATF guidance, generally requires the collection and transmission of originator and beneficiary information for all virtual asset transfers executed by a VASP, regardless of the amount.

For transactions involving a VASP and an unhosted (self-hosted) wallet, the VASP is typically required to collect information about the customer (and potentially the unhosted wallet owner if the amount exceeds a certain threshold) when the transaction value is €1,000 or more.

For VASP-to-VASP transfers, the Travel Rule applies to all transfers, with no de minimis threshold for collecting and transmitting the required information.

Entities that exchange virtual currencies for fiat currencies (and vice versa).

Entities that exchange one or more virtual currencies for one or more other virtual currencies.

Custodial wallet providers (entities that provide services to safeguard private cryptographic keys on behalf of their customers, to hold, store, and transfer virtual currencies).

Entities providing transfer services for virtual assets.

Other services that facilitate the issuance, sale, or transfer of virtual assets.

Information Collection: VASPs must collect and verify specific information about both the originator and beneficiary of a virtual asset transfer

Originator: Name, account number (or virtual asset wallet address), physical address, national identity number (or customer identification number), date and place of birth.

Beneficiary: Name, account number (or virtual asset wallet address).

Information Transmission: The originating VASP must transmit the collected originator and beneficiary information to the beneficiary VASP immediately and securely with the virtual asset transfer.

Information Retention: VASPs must retain the collected information for a period of 5 years after the business relationship ends or after an occasional transaction.

Due Diligence: Perform customer due diligence (CDD) on their clients, which includes identifying and verifying their identity and understanding the nature of their business.

Monitoring and Reporting: Monitor transactions for suspicious activity and report any suspicious transactions to the Financial Intelligence Unit (FIU) of the Presidium of the Police Force (Finančná spravodajská jednotka Prezídia Policajného zboru).

Fines: Significant administrative fines can be imposed on both legal entities (VASPs) and responsible individuals. Fines for legal entities can range from thousands to millions of Euros, depending on the severity and recurrence of the breach.

Withdrawal of License/Registration: The National Bank of Slovakia or other competent authorities may revoke or suspend the operating license or registration of a VASP.

Criminal Charges: In cases of serious or intentional breaches, particularly those linked to actual money laundering or terrorist financing, criminal charges may be brought against individuals involved.

Reputational Damage: Non-compliance can lead to significant reputational damage, loss of customer trust, and exclusion from the financial system.

Slovak-Lex (official legislative portal): https://www.slov-lex.sk/pravne-predpisy/SK/ZZ/2008/297/ (Slovak language, consolidated text)

NBS Information on Virtual Currencies (Slovak): https://www.nbs.sk/sk/spotrebitel/financne-trhy/virtualne-meny (Mentions regulatory oversight and AML obligations for virtual asset service providers.)

FATF Recommendations: The international standard for AML/CFT. Recommendation 15 (New Technologies) and 16 (Wire Transfers, now extended to Virtual Assets) are particularly relevant.

FATF Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers (June 2019, updated March 2021): Provides detailed guidance on applying the Travel Rule. https://www.fatf-gafi.org/publications/fatfrecommendations/guidance-rba-virtual-assets.html

EU 5th AML Directive (Directive (EU) 2018/843): The directive that mandated EU member states to bring VASPs under their AML/CFT regimes.

Official Journal of the European Union: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32018L0843

EU Markets in Crypto-Assets (MiCA) Regulation (Regulation (EU) 2023/1114): While not fully effective yet, MiCA will be the overarching EU regulation for crypto-assets, including robust Travel Rule provisions.

Regulator Name: National Criminal Agency (NAKA) – specifically the National Unit for Combating Financial Crime.

Entity Targeted: An organized criminal group involving multiple individuals suspected of operating a sophisticated investment fraud scheme and subsequent money laundering using cryptocurrencies. Violation Type: Investment fraud, money laundering, unauthorized business activities, establishment, masterminding, and support of a criminal group. The scheme involved luring victims into fake crypto investment platforms.

Criminal charges filed against multiple individuals.

Seizure of assets: During the operation, authorities seized financial assets, movable property, and real estate worth approximately €15 million. This includes accounts, cryptocurrencies, and other assets believed to be proceeds of crime.

Date: Raids and arrests occurred in late 2023 (e.g., December 2023), with investigations ongoing since prior to that.

Outcome: Multiple individuals arrested and charged. Assets seized. Criminal proceedings are ongoing. This represents one of the largest financial crime operations in Slovakia involving cryptocurrencies.

Polícia SR (Official Police Statement): https://www.facebook.com/policiaslovakia/posts/pfbid0251iGk2rK4y9W8Wz2o76qF8RCHWpYwQdD71k8GvV1wL5GjQz1P4wK4yJgW2p8l/ (Link to Facebook post by Polícia SR, official channel, dated 18.12.2023)

TASR (News Agency): https://www.teraz.sk/slovensko/naka-zasahovala-pri-rozsiahlej-tres/761168-clanok.html (News article from 18.12.2023)

Entity Targeted: Individuals involved in an international scheme impersonating banks and investment companies to defraud victims, often directing them to fake crypto investment platforms or phishing for personal data to access their crypto wallets. Violation Type: Internet fraud, unauthorized access to computer systems, data theft, and potential money laundering.

Arrests and charges against suspects.

Seizures: Specific amounts are difficult to quantify publicly as investigations are often international and involve multiple victims. However, reports indicate damages in the hundreds of thousands to millions of euros across various victims.

Date: Ongoing investigations and arrests have been reported throughout 2022 and 2023. For instance, an arrest in Slovakia linked to a larger international phishing operation was reported in March 2023.

Outcome: Suspects identified and apprehended. International cooperation between law enforcement agencies (e.g., Europol, Eurojust) is common in these cases. Criminal proceedings are underway.

Europol (General cooperation for cybercrime, relevant to Slovak context): While not a specific Slovak action, Europol often assists NAKA in such international cases. https://www.europol.europa.eu/media-press/newsroom/news/romanian-criminal-gang-dismantled-involved-in-cryptocurrency-fraud-worth-eur-2-million (Example of a related Europol case in Romania from October 2023, illustrating the type of regional cooperation NAKA engages in).

Regulator Name: National Bank of Slovakia (Národná banka Slovenska - NBS).

Entity Targeted: General public, but implicitly targets any unlicensed entities or scammers operating without proper authorization or misrepresenting their services. Violation Type: Operating without required licenses (e.g., for investment services or financial advisory), offering fraudulent investment opportunities, misrepresentation of crypto products, or not adhering to AML/CFT obligations (though the latter is harder for the NBS to enforce directly against unlicensed foreign entities). Penalty Amount: No direct monetary penalty specified for the warning itself. The "penalty" is more in the form of reputational damage for entities named (if any) and increased public awareness leading to fewer victims.

Date: NBS has issued numerous warnings throughout the last 3 years, for example

September 2023: Warning about financial services without NBS authorization.

May 2022: General warning regarding cryptocurrency risks.

March 2021: Warning against specific entities offering unlicensed services.

Outcome: Increased public awareness, reduced risk for consumers (if warnings are heeded), and a clear signal from the regulator regarding unauthorized activities. These warnings often precede or accompany police investigations.

NBS Official Website (Example of an investor warning from 2023): https://www.nbs.sk/sk/informacie-pre-media/tlacove-spravy/2023/investicne-sluzby-bez-povolenia-nbs (Dated 22.09.2023, focuses on unlicensed investment services, often linked to crypto)

NBS Official Website (General warning about virtual currencies from 2022): https://www.nbs.sk/sk/informacie-pre-media/tlacove-spravy/2022/virtulne-meny-vynimocne-rizikove (Dated 09.05.2022, highlights risks)