SBP-regulated fintech via Exchange Companies and Raast; no standalone VASP license
Pakistan regulates digital financial services primarily through the State Bank of Pakistan (SBP) under the framework for Exchange Companies and the Raast instant payment system, rather than a standalone Virtual Asset Service Provider (VASP) license. The SBP mandates that fintech and payment service providers operate as authorized intermediaries or exchange companies, subject to strict capital, audit, and reporting requirements.
The regulatory stance emphasizes anti-money laundering compliance, with the Financial Monitoring Unit (FMU) requiring banks holding customer accounts to file Currency Transaction Reports for interoperable and PSP-mediated transfers. Recent directives have facilitated inward remittances, allowed digital disbursements via Raast, and established a registry of digital service providers to ensure oversight.
While the SBP has launched PRISM+ for real-time interbank settlement and issued guidelines for Islamic banking and primary dealers, there is no explicit legal framework for crypto-asset trading or issuance. Consequently, activities outside the authorized Exchange Company and banking channels remain restricted or unregulated, with the SBP maintaining a cautious, compliance-focused approach to digital finance.
Anti-Money Laundering Act, 2010 (2010)
Establishes the legal basis for AML/CFT compliance, including reporting obligations for financial institutions and designated non-financial businesses and professions (DNFBPs) such as exchange companies.
[11]Regulatory Framework for Exchange Companies (Undated (Amended 2026))
Governs the operations of authorized exchange companies, including inward remittances, digital disbursements via Raast, and forward sale transactions.
[7]Exchange Company License
Required for entities facilitating foreign exchange and remittances; must secure prior departmental approval and complete Raast onboarding for digital disbursements.
[7]Digital Service Provider Registration
Entities acting as intermediaries for foreign digital service providers must be listed in the SBP's official registry and meet strict documentation and audit requirements.
[8][3]Primary Dealer Status
For government securities trading; requires Board-approved business plans and specific capital/IT infrastructure.
[12][10]Interoperable fund transfers and PSP-mediated payments require the bank holding the customer's account to file Currency Transaction Reports (CTRs) with the FMU, placing sole reporting responsibility on the custodian bank.
[11]Foreign digital service providers' intermediaries are prohibited from engaging in inward remittance-related businesses.
[3]Remittance of royalty, franchise, and technical service fees is capped at 8% of net local sales for specified sectors, excluding the financial industry.
[13]The SBP is actively modernizing payment infrastructure with PRISM+ and promoting digital inclusion through Raast, while maintaining strict AML/CFT oversight via the FMU and Exchange Company framework.
[5][9][7]Regulatory focus remains on facilitating legitimate cross-border flows for IT freelancers and home remittances, with no indication of a standalone crypto-asset licensing regime.
[6]Email alerts for Pakistan updates
New circulars, rules and guidance — a digest in your inbox, same day.