Regulatory AlertsAruba: crypto & digital assets regulation
Partially regulatedAruba: VASPs regulated under AML Ordinance via CBA; no specific crypto license yet
- Lead regulator
- Centrale Bank van Aruba (CBA)
- Also involved
- Public Prosecution Service (enforcement) · FIU (suspicious transaction reporting)
- Core law
- State Ordinance on the Prevention and Combating of Money Laundering and Terrorism Financing (2024)
- Entry capital
- —
- Approval timeline
- —
- Customer assets
- Not explicitly segregated by specific crypto law; general AML rules apply
- Data protection
- Personal Data Protection Act (AV) · Autoriteit Persoonsgegevens (AP) Aruba
- Sandbox
- No
Aruba regulates crypto activities primarily through its Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) framework. The Centrale Bank van Aruba (CBA) is the primary supervisor for financial institutions and designated non-financial businesses. While there is no dedicated 'crypto license', Virtual Asset Service Providers (VASPs) are subject to strict AML/CFT obligations, including customer due diligence and ongoing monitoring. The regulatory stance is evolving towards stricter oversight, aligning with international FATF standards.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Exchange / trading platform | LicenceAML/CFT Registration / Supervision[1] VASPs are designated non-financial businesses subject to CBA supervision for AML/CFT compliance. | — | — | Centrale Bank van Aruba (CBA) |
| Custody of client assets | LicenceAML/CFT Registration / Supervision[1] Custody services fall under VASP definition, requiring AML/CFT registration and supervision. | — | — | Centrale Bank van Aruba (CBA) |
| Token issuance / public offering | Uncertainverify with regulator Securities law may apply if tokens are securities; AML rules apply if VASP. | — | — | — |
| Broker-dealer / OTC desk | LicenceAML/CFT Registration / Supervision[1] Broker-dealer activities involving virtual assets are subject to AML/CFT supervision. | — | — | Centrale Bank van Aruba (CBA) |
| Stablecoin issuance | Uncertainverify with regulator No specific stablecoin regime; general VASP/AML rules may apply if payment function. | — | — | — |
| Crypto payments acceptance | LicenceAML/CFT Registration / Supervision[1] Crypto payment services are treated as VASPs under the AML/CFT Ordinance. | — | — | Centrale Bank van Aruba (CBA) |
| Mining / staking services | Uncertainverify with regulator Mining/staking may not be a VASP activity unless providing exchange/custody services. | — | — | — |
| Advisory / portfolio management | Uncertainverify with regulator Advisory services may require financial advisory license if deemed investment advice. | — | — | — |
New — what changed recently
- 2024-02-08State Ordinance on the Prevention and Combating of Money Laundering and Terrorism Financing — Reinforced AML/CFT requirements for designated non-financial businesses, including VASPs, with stricter customer due diligence and monitoring obligations.[1]
Market-entry checklist
- 1Register with CBA for AML/CFT supervisionSubmit application to Centrale Bank van Aruba as a designated non-financial business provider.
- 2Implement robust AML/CFT policiesEstablish risk-based customer due diligence, identity verification, and ongoing monitoring procedures.
- 3Appoint a Compliance OfficerDesignate a qualified individual responsible for AML/CFT compliance and reporting.
- 4Register with the FIUSet up mechanisms to report suspicious transactions to the Financial Intelligence Unit.
- 5Ensure data protection complianceAlign customer data handling with the Personal Data Protection Act (AV) and AP guidelines.