Sri Lanka Crypto & Digital Asset Regulation

Other Developments

Tax authorities are treating crypto gains as ordinary income despite the asset class carrying no legal-tender status. The Inland Revenue Department, through the Deputy Minister of Finance's statement to Parliament, has confirmed that cryptocurrency profits fall under general income tax as 'other income' rather than under any bespoke crypto tax category. Separately, an 18 percent value-added tax on digital services took effect on 1 April 2026, and commentary circulating since then suggests this VAT extends registration and reporting duties to crypto exchanges and service providers. That extension has not been confirmed against the tax authority's own gazette or circular text, so it should be treated as a plausible but not yet independently verified reading of the VAT's reach into the sector.

On cross-border movement of value, the restriction on using international foreign-exchange card payments to buy or trade virtual currencies remains in place for resident cardholders, with banks directed not to facilitate such trades. This sits on top of the Central Bank's long-standing position that the rupee is the only legally recognised currency on the island, that cryptocurrency cannot be used to settle payments of any kind, and that any payment in foreign currency needs prior approval under the Foreign Exchange Act. Together these form a consistent official posture: crypto may be held and apparently taxed, but it may not be used to pay for anything, and it may not be bought using outbound card rails.

Cross-Monitor Connections

The amendment bringing Virtual Asset Service Providers inside the financial-business definition is, at its core, an anti-money-laundering measure, and its substance belongs to the broader reporting and financial-crime architecture that sits outside this brief's scope. Readers tracking that architecture should expect the VASP registration detail to surface there rather than here.

Outlook

The near-term question is whether the Financial Intelligence Unit will publish the registration gateway and compliance timeline for Virtual Asset Service Providers now brought within reporting-institution scope, since the amendment act's text on this point was not fully extractable. On the tax side, confirmation directly from the Inland Revenue Department of how the digital-services VAT applies to crypto exchanges would resolve the current reliance on secondary commentary. Absent a dedicated licensing statute, the structural picture is likely to persist: an expanding compliance perimeter around existing providers, with no corresponding path to lawful domestic operation.

2 earlier updates not shown here.

Standing brief · as of 25 August 2026

Written before the update above. Where they differ, the update is the more recent position.

Lead Signal

Sri Lanka's crypto regulatory posture this cycle is defined by a binding negative baseline paired with an emerging, pre-legislative policy shift. No virtual-asset service provider is currently licensed, registered or supervised anywhere in the country, and the Central Bank of Sri Lanka has issued repeated public warnings against cryptocurrency investment; at the same time, the Ministry of Digital Economy is developing a virtual-asset regulatory framework intended to license and supervise VASPs, which was presented to the country's apex AML body in February 2026. This combination -- an in-force absence of licensing alongside an announced-but-undrafted future framework -- is the defining structural fact for any operator or investor assessing Sri Lanka's crypto market this cycle.

Other Developments

A documented large-scale fraud case underlines the consumer-protection gap. A Sri Lankan crypto Ponzi scheme defrauded thousands of victims of over Rs. 500 million over roughly two years, with victims staging protests demanding justice. This sits alongside the Central Bank's repeated public warnings about cryptocurrency investment risk and its confirmation that it has not authorised any crypto-related businesses, leaving investors without regulatory safeguards; the fraud case is a concrete illustration of the exposure that absence of licensing and supervision creates in practice. The case also illustrates a recurring typology in unregulated crypto markets globally: absent licensing creates an information vacuum that fraudulent schemes exploit precisely because there is no supervised venue for legitimate crypto investment activity to channel demand toward instead.

The Foreign Exchange Act's card-based restriction remains the binding cross-border control. The Foreign Exchange Act prohibits the use of debit and credit cards for cryptocurrency transactions, and financial institutions are barred from processing crypto-related payments. This is a binding, in-force restriction under a primary statute, though a primary Central Bank citation for the specific administrative direction implementing it is still awaited in this cycle's evidence base.

Cross-Monitor Connections

Sri Lanka's crypto AML/CFT exposure is tracked as a subscribed slot supplied by the financial-integrity monitor (its D7 and D5 typology domains); this consumer performs no first-party AML/CFT analysis on crypto activity and instead renders that content as supplied. The proposed virtual-asset regulatory framework referenced above is the same underlying development the financial-integrity monitor reads through its D5 lens; readers seeking the AML/CFT-specific analysis of Sri Lanka's proposed VASP framework should consult that monitor's D5 sub-brief rather than expecting it here.

Outlook

The framework's progression from a February 2026 proposal to an actual drafting stage is the single most consequential item to watch, and the open allocation question -- which authority will hold VASP licensing power -- will determine much of what follows. Given the documented Rs. 500 million-plus fraud case, consumer-protection developments are the second item to track. The Foreign Exchange Act's card-based restriction is unlikely to change materially absent a broader liberalisation of the cross-border crypto-payments regime, which has not been signalled this cycle.