Regulatory AlertsOman: crypto & digital assets regulation
RegulatedOman: VASPs must register with CMA under 2023 AML/CFT instructions
- Lead regulator
- Capital Market Authority (CMA)
- Also involved
- Central Bank of Oman (CBO) (banking/payment interfaces) · Financial Services Authority (FSA) (if applicable to broader financial services)
- Core law
- Instructions on Registration of Virtual Asset Service Providers and AML/CFT Requirements (2023)
- Entry capital
- —
- Approval timeline
- —
- Customer assets
- —
- Data protection
- Personal Data Protection Law (2022) · Personal Data Protection Authority (PDPA)
- Sandbox
- No
The Capital Market Authority (CMA) is the primary regulator for virtual asset service providers (VASPs) in Oman. Under binding instructions issued in June 2023, all VASPs must register with the CMA and comply with anti-money laundering and counter-terrorist financing (AML/CFT) requirements. The regulatory stance is one of formal registration rather than a discretionary licensing regime with specified capital floors.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Exchange / trading platform | RegistrationVASP Registration[1] Mandatory registration for exchange services under 2023 instructions | — | — | CMA |
| Custody of client assets | RegistrationVASP Registration[1] Custody is a VASP activity requiring registration | — | — | CMA |
| Token issuance / public offering | Uncertainverify with regulator Token issuance may fall under securities laws; VASP registration may apply if it involves services | — | — | — |
| Broker-dealer / OTC desk | RegistrationVASP Registration[1] Broker-dealer activities likely constitute VASP services requiring registration | — | — | CMA |
| Stablecoin issuance | Uncertainverify with regulator No specific stablecoin regime identified; may be treated as VASP or payment instrument | — | — | — |
| Crypto payments acceptance | Uncertainverify with regulator Crypto payments may involve CBO oversight; VASP registration may also apply | — | — | — |
| Mining / staking services | Uncertainverify with regulator Mining/staking not explicitly mentioned; may be unregulated or require VASP registration if service-oriented | — | — | — |
| Advisory / portfolio management | Uncertainverify with regulator Advisory services may require CMA authorization if deemed investment advice | — | — | — |
New — what changed recently
- 2023-06Instructions on Registration of Virtual Asset Service Providers and AML/CFT Requirements — CMA mandated registration for all VASPs and imposed AML/CFT compliance requirements.[1]
Market-entry checklist
- 1Register with CMA as VASPSubmit registration application to the Capital Market Authority under the 2023 instructions.
- 2Implement AML/CFT FrameworkEstablish robust anti-money laundering and counter-terrorist financing policies as required by CMA.
- 3Align Operations with InstructionsEnsure all existing operations comply with the new registration and compliance mandates.
- 4Consult CBO for Payment ServicesIf offering payment services, verify if Central Bank of Oman licenses are also required.