Cryptoassets Regulatory Intelligence

Pakistan Crypto & Digital Asset Regulation

PK schema crypto-v2.0.0 trajectory: not yet assessed in transition overlaps: Sentinel (AML/CFT), World Payments

Last updated · 9 categories · 44 sourced findings · 47 sources in the cumulative register

Evidence re-verified: ·Position last changed: ·
Record history & provenance ▾

Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

Open in Co-Pilot ↗Build ReportCompare
Framework postureIn transition8 of 9 modules populated · AI-synthesised · Tier-1/2 verified
Lead supervisory authorityThe BlockPrimary statutory & supervisory perimeter
Next milestone (> 2026-10-26)2026-Q4FBR crypto capital-gains tax framework expected
Module coverage & confidence8 / 9 modules assessed0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed

Jurisdiction lead brief

Latest update · 25 October 2026

Lead Signal

Pakistan's virtual-asset regulatory regime remains in a defined transitional phase, anchored by the Virtual Assets Act, 2026 and its implementing Pakistan Virtual Asset Services Regulations 2026. The core licensing requirement is settled in statute: a virtual-asset service provider must be a Pakistani company holding a licence from the Pakistan Virtual Assets Regulatory Authority to conduct virtual-asset services by way of business in or from Pakistan. The transitional mechanism built around that requirement has now passed a key deadline, firms operating before 5 March 2026 were required to file Form I by 5 September 2026 to continue operating pending PVARA's no-objection-certificate decision, and that filing window has closed. The next structural marker is PVARA's expected issuance of the first full licences in the fourth quarter of 2026, which would move firms from transitional no-objection-certificate status onto a fully licensed and supervised footing. Unauthorised operation carries meaningful statutory exposure: a fine of up to PKR 50 million and imprisonment of up to five years attach to conducting virtual-asset services without a licence or valid no-objection certificate.

Key regulatory facts for Pakistan
Regulatory DimensionPakistan Standing Position
JurisdictionPakistan (PK)
Regulatory ScopeCrypto & Digital Asset Regulation (9 modules, 44 sourced findings)
Crypto LicensingPakistan has moved from an unregulated, restriction-adjacent posture to a statutory licensing regime.
Token ClassificationPakistan's token classification regime remains largely unclassified pending PVARA secondary rulemaking.
On-Chain Activity RegimePakistan has publicly announced plans for state-asset tokenization, expanded Bitcoin mining allocation, and a national stablecoin/CBDC pilot, but no dedicated statutory regime for staking, DeFi lending, DEX...
Stablecoin RegimePakistan has no enacted stablecoin-specific statute.
Primary Instruments CitedThe Block, State Bank of Pakistan, The Block, Pakistan Virtual Assets Regulatory Authority (PVARA), PVARA
Last Confirmed / Updated2026-10-25 (47 sources in cumulative register)

#

Pakistan has moved from an unregulated, restriction-adjacent posture to a statutory licensing regime. Parliament passed the Virtual Assets Act, 2026, converting the Pakistan Virtual Assets Regulatory Authority (PVARA) — first constituted by presidential ordinance in July 2025 — into a permanent federal licensing authority for Virtual Asset Service Providers (VASPs), with SBP simultaneously lifting its 2018 restriction on bank facilitation of crypto conditioned on PVARA licensure. Implementing details (e.g., virtual asset zones) remain undesignated, and independent T1 verification of Gazette publication/effective date is still pending.

Open gap — crypto-int-1No PVARA-published numeric prudential own-funds methodology beyond Schedule I minimum capital figures located this cycle; must research direct pvara.gov.pk text.no under-indexing note recorded
Open gap — crypto-int-2Whether PVARA has issued any full (non-NOC) licences as of 25 Oct 2026 remains unconfirmed; vendor commentary targets Q4 2026.no under-indexing note recorded
Horizon · 2026-09-05 (± a quarter)PVARA Transitional Persons NOC deadlineIn force · Tier 1 source
Horizon · 2026-Q4 (± six months)PVARA licence grants/enforcement outcomes post-NOC deadlineAdopted, not yet in force
Horizon · 2026-Q4 (± a quarter)PVARA expected to issue first full VASP licencesAdopted, not yet in force · Tier 3 source
Horizon · 2026-Q4 (± a quarter)PVARA expected to issue first full (non-NOC) VASP licencesAdopted, not yet in force · Tier 3 source
Standing sub-brief · as of 25 August 2026 125 words · last cycle 2026-10-25

Crypto Licensing

The Virtual Assets Act, 2026 requires virtual-asset service providers, including exchanges, custodians, and token-issuance platforms, to obtain a PVARA licence to operate in or target Pakistan. Unlicensed operation carries fines of up to PKR 50 million and imprisonment of up to five years, while unauthorized promotions or offerings carry fines of up to PKR 25 million and imprisonment of up to three years. PVARA's licensing portal is currently accepting No-Objection-Certificate applications only; full exchange licensing is described as coming soon rather than yet operational, making this a transitional rather than fully operational licensing regime.

Periodic update · new data 2026-10-18

Crypto Licensing

The Virtual Assets Act, 2026 establishes the foundational licensing requirement for Pakistan's virtual-asset sector: section 50 requires that any entity engaging in a virtual-asset service by way of business in or from Pakistan be a Pakistani company holding a licence from the Pakistan Virtual Assets Regulatory Authority. This requirement is in force and binding. The Act's transitional provisions, under section 70, required firms that had been operating before 5 March 2026 to file Form I by 5 September 2026 in order to continue operating while PVARA determined their no-objection-certificate status; that filing deadline has now passed, meaning the pool of firms eligible for transitional continuation is fixed as of that date.

Under the Pakistan Virtual Asset Services Regulations 2026, a no-objection-certificate holder must apply for a full licence within three months of the licensing regulations' promulgation on 21 August 2026, and PVARA is required to grant or refuse that application within 90 days, extendable by up to 60 days. Taken together with the reported expectation that PVARA will issue its first full licences in the fourth quarter of 2026, this places Pakistan's virtual-asset sector at a defined transitional inflection point: a regime that is in force and procedurally structured, but whose practical supervisory effect has not yet been tested through a completed full-licensing cycle.

The penalty structure attached to unlicensed operation is substantial: a fine of up to PKR 50 million and imprisonment of up to five years for operating a virtual-asset service without a PVARA licence or valid no-objection certificate. This is a meaningful deterrent on paper, though its practical enforcement record has not yet been tested, since the regime itself remains in its early implementation phase.

One specific area of unresolved detail concerns minimum paid-up capital requirements for an Exchange licence under PVARA Schedule I: one secondary compilation reports a figure of PKR 1 billion, while another reports PKR 500 million, and neither has been confirmed against PVARA's own gazetted text. This is a live sourcing gap rather than a resolved regulatory fact, and any capital-planning reliance on either figure should be treated as provisional pending primary-source confirmation.

Outlook

The clearest near-term marker is PVARA's issuance of its first full licences, expected in the fourth quarter of 2026, which would be the first practical test of the 90-day (extendable to 150-day) review process set out in the licensing regulations. Resolution of the conflicting capital-requirement figures against PVARA's own Schedule I text remains an open item that would materially sharpen market-entry planning for prospective exchange licensees.

3 earlier distinct update(s)
Periodic update · new data 2026-10-11

Crypto Licensing

Pakistan's crypto-licensing perimeter has moved from transitional to fully operative within a matter of months. The Virtual Assets Act, 2026 has been in force since 5 March 2026, requiring registration before any entity offers virtual asset services, via a valid PVARA licence held by an incorporated company. The Pakistan Virtual Assets Regulatory Authority's Services Regulations, 2026 and Activity-Specific Regulations, 2026 then came into force on 21 August 2026, the date of their gazette notification, defining ten distinct VASP licence categories together with governance, prudential, conduct, technology and AML/CFT/CPF standards that licensed entities must meet.

The transitional mechanism built into the Act has already run its course. Pre-existing VASPs, those already providing virtual asset services before the new regime took effect, were required under section 70 to file a No-Objection Certificate application by 5 September 2026 or cease operations. Unlicensed operation of virtual asset services after that date is an offence under section 54, and reporting indicates the broader prohibition carries penalties reportedly reaching up to five years' imprisonment and a PKR 50 million fine for unlicensed provision of services, with unauthorised offering or promotion carrying up to PKR 25 million and three years' imprisonment, though the precise statutory pinpoints for these penalty figures rest on secondary legal commentary rather than independently verified gazette text this period.

The practical significance of this sequence is that Pakistan now has a comprehensive, operative VASP licensing framework with a hard compliance deadline already behind it, but no confirmed track record of licence grants or enforcement actions under the new regime exists yet. The regime is therefore best read as newly commenced and untested rather than as a mature supervisory system; the gap between what the law now requires and what the regulator has demonstrably done with that authority is the central uncertainty for any firm assessing its own position relative to the NOC deadline.

Outlook

The period following the passed NOC deadline is the one to watch. The first licence grants or enforcement actions arising from the post-5-September landscape are expected within the current quarter and would clarify how strictly PVARA intends to apply the new regime to the pre-existing VASP population, an outcome flagged as uncertain in the absence of any confirmed enforcement or licensing outcome to date. Minimum paid-up capital figures for each licence category, set out in the regulations' schedule, have also not yet been independently retrieved and remain a gap for firms assessing entry.

Periodic update · new data 2026-10-05

Crypto Licensing

Pakistan's crypto licensing framework now rests on a fully enacted statute, the Virtual Assets Act, 2026, which creates Pakistan Virtual Assets Regulatory Authority, PVARA, as the sole domestic licensing authority for virtual asset services (CLM-PK-001). Section 50 of the Act prohibits any person from engaging in, or holding itself out as engaging in, virtual asset services 'in or from Pakistan' unless that person is incorporated in Pakistan and holds a valid PVARA licence. This is a Tier-1, primary-text finding: the claim traces directly to the Gazette-published Act text rather than to secondary commentary, and it is rated Confirmed.

The regime's transitional mechanics have now moved from pending to active. Section 70 required any person already providing virtual asset services before the Act commenced to submit a no-objection-certificate application by 5 September 2026 or cease operations; continuing to operate past that date without having applied is framed in the statute as an offence (CLM-PK-002). That deadline has now elapsed as of this cycle, which converts what was, in the prior cycle, a forward-looking compliance deadline into a live question of which pre-existing operators did or did not file in time, and what PVARA's posture toward non-filers will be. This claim carries Probable confidence and a Tier-2 press source rather than a primary filing record, so the composed record treats the deadline's passage as established but PVARA's enforcement response to it as unverified.

The licensing architecture beneath the Act is built around ten distinct VASP licence categories rather than a single catch-all authorisation, pointing to an activity-specific design intended to separately capture functions such as mining-related services. Whether all ten categories' implementing rulebooks are now fully in force, or whether some remain in draft, is an open question this cycle does not resolve -- it is carried forward as a tracked gap rather than treated as settled.

Outlook

The near-term signal to watch is enforcement behaviour against the now-passed NOC deadline: whether PVARA moves against operators who did not file, and how quickly the remaining activity-specific rulebooks move from draft to confirmed in-force status. Both would materially sharpen the amber traffic-light rating this module currently carries, which reflects a regime that is statutorily complete but not yet fully operational in its implementing detail.

Periodic update · new data 2026-09-28

Crypto Licensing

The Virtual Assets Act, 2026 establishes that all entities offering virtual-asset services in or from Pakistan must obtain a licence from PVARA, which publishes a public register of authorised VASPs. This is the core licensing requirement under the Act and is Tier-1 sourced directly from PVARA's own publication, assessed at Confirmed confidence. Section 70 of the Act imposes a specific transitional obligation: Transitional Persons who were operating on or before 5 March 2026 must submit a PVARA no-objection-certificate application by 5 September 2026 or cease operations, a deadline that falls within this reporting cycle.

Secondary industry commentary, sourced at Tier 4 confidence, describes PVARA's rulebook as establishing ten distinct VASP licence categories, each attached to Schedule I capital requirements. This granular structural detail has not been independently verified against primary rulebook text this cycle and should be treated as probable rather than confirmed pending that corroboration.

The most significant complicating factor in this module is a reported statement from Pakistan's Finance Secretary asserting that crypto remains illegal under current law, a position that sits in direct tension with PVARA's operative licensing activity, including its published VASP register and the active Transitional Persons deadline. This contradiction was not resolved this cycle. It matters because it bears directly on whether a PVARA licence functions as a genuine legal safe harbour or whether licensed entities remain exposed to a competing executive-branch legal position. The traffic-light assessment for this module is amber precisely because of this contradiction, notwithstanding that the licensing statute itself is comprehensive and operationally live.

Outlook

The Transitional Persons NOC deadline having fallen within this cycle, the volume and outcome of applications submitted by 5 September 2026 will be the first concrete data point on how much of Pakistan's pre-existing crypto activity is converting into PVARA-licensed status versus ceasing operations or continuing informally. Resolution of the Finance Secretary contradiction, in either direction, is the development most likely to move this module's traffic-light assessment next cycle.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (9)
  1. T4The Block — Pakistan's parliament passed the Virtual Assets Act, 2026, converting PVARA into a permanent federal body with the power to license and supervise crypto service providers. retrieved M5 binding in force
  2. T4The Block — Unlicensed virtual asset operations in Pakistan face criminal penalties under the Virtual Assets Act, 2026, including fines up to PKR 50 million and imprisonment up to five years. retrieved M5 binding in force
  3. T1State Bank of Pakistan — SBP's BPRD Circular Letter No. 10 of 2026 authorizes SBP-regulated entities to open bank accounts for entities holding a valid PVARA license or No-Objection Certificate, ending the 2018 restriction on bank facilitation of virtual asset transactions. retrieved M4 binding in force
  4. T4The Block — PVARA has granted formal licenses to major exchanges including Binance and HTX following earlier No Objection Certificates. retrieved M3 non-binding
  5. T3Pakistan Virtual Assets Regulatory Authority (PVARA) — Virtual Assets Act 2026 / S.R.O. 1419(I)/2026 require any VASP to hold a PVARA licence in one of ten activity categories; licensee must be a company incorporated in Pakistan with at least three directors, no PK shareholding requirement stated. M5 binding in force
  6. T3PVARA — Schedule I to S.R.O. 1419(I)/2026 sets minimum paid-up capital from PKR15m (Advisory) to PKR300m (token issuance categories) retrieved M5 binding in force
  7. T3Virtual Assets Act, 2026 — s.54(1): unlicensed VASP activity punishable by up to 5 years' imprisonment and/or a PKR50 million fine; unauthorised promotion up to PKR25m and 3 years M5 binding in force
  8. T3PVARA Schedule I — Minimum paid-up capital for an Exchange licence reported at PKR 1 billion in one compilation and PKR 500 million in another; unconfirmed against PVARA's own gazetted text retrieved M4 non-binding in force
  9. T3PVARA — Virtual Assets Act, 2026, s.70: persons providing virtual asset services on or before 5 March 2026 had to file an NOC application by 5 September 2026 or cease operating; deadline passed M5 binding in force

#

Pakistan's token classification regime remains largely unclassified pending PVARA secondary rulemaking. SECP's position paper and a standing directive on virtual currencies apply general securities-law characterisation to token issuances, while PVARA/finance-ministry statements signal a forthcoming sovereign stablecoin and Sharia-compliance-driven sub-categorisation distinguishing unbacked cryptocurrencies, fiat-backed stablecoins, and tokenized securities.

Periodic update · new data 2026-10-11

Token Classification

Pakistan's token-classification picture remains at the sandbox stage rather than settled statute. PVARA's Regulatory Sandbox Guidelines, 2026 draw a functional distinction between fiat-referenced tokens, digital assets designed to hold a steady value against a single national currency and be redeemable at face value, and asset-referenced tokens, which are not pegged to a single currency in the same way. This classification exists to support sandbox applications for asset-backed token issuance and has not yet been elevated into a settled statutory taxonomy applicable outside the sandbox programme.

Alongside this emerging regulatory classification, a separate religious-law dispute has materially affected the practical status of stablecoin-type tokens in Pakistan. A June 2026 fatwa issued by Jamia Darul Uloom Karachi declared purchases made using cryptocurrencies, including USDT, impermissible under Shariah law. PVARA has publicly contested the fatwa's blanket application to fully-reserved stablecoins, arguing that the fiat-referenced token category it is developing through its sandbox guidance addresses the underlying concerns the fatwa raises. This is a religious ruling, not a binding legal instrument, but it bears directly on market uptake of any token product PVARA might classify as fiat-referenced, since a significant portion of Pakistan's financial services market operates with reference to Shariah-compliance considerations.

The combined effect is a classification regime that is functionally emerging but doctrinally contested: PVARA has a working definition for fiat-referenced tokens, but no settled statutory classification exists outside the sandbox, and the leading religious ruling currently available to the market runs against the entire stablecoin category rather than distinguishing fully-reserved instruments from others.

Outlook

Resolution of the Shariah-compliance dispute, whether through a revised or clarifying religious ruling, through PVARA formally codifying the fiat-referenced token distinction in binding regulation, or through continued parallel operation of the two positions, will determine whether Pakistan's token-classification regime consolidates into a workable statutory framework or remains contested at the point of practical adoption. No further sandbox-stage developments beyond the existing guidelines were identified this period.

C2 · Token Classification — Full Module Record0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign In View Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

Pakistan has publicly announced plans for state-asset tokenization, expanded Bitcoin mining allocation, and a national stablecoin/CBDC pilot, but no dedicated statutory regime for staking, DeFi lending, DEX operation, mining licensing or validator/node operation has been confirmed as in force. Current mining and tokenization initiatives are government-driven MoUs and policy allocations rather than codified private-sector licensing rules.

Periodic update · new data 2026-10-05

On-Chain Activity Regime

Within PVARA's ten-category VASP licensing structure, mining-related services is named as one of the licensable activity classes (CLM-PK-007). This is a Probable-confidence finding sourced to the same Tier-2 press reporting that covered the regime's September launch, rather than to the primary licensing regulations themselves, so the precise scope of what counts as a licensable mining-related service is not yet confirmed from primary text. No equivalent finding exists this cycle for staking, decentralised-exchange operation, or validator activity -- those on-chain activity classes remain entirely unevidenced in the sources retrieved, a gap recorded rather than inferred.

Outlook

This module's signal remains thin and dated rather than settled: a single named licence category, with the other major on-chain activity types unaddressed. Confirmation would require retrieving the primary Virtual Asset Services Regulations text rather than secondary press coverage of the licensing launch.

C3 · On-Chain Activity — Full Module Record0 sub-modules · 180 words · 2 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign InView Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

Pakistan has no enacted stablecoin-specific statute. PVARA and the Finance Ministry have announced intent to launch a sovereign/national stablecoin and have signed an MoU with an affiliate of World Liberty Financial (WLFI) to explore cross-border stablecoin payment infrastructure using the USD1 stablecoin, but issuance authorisation, reserve requirements, redemption rights, and systemic-designation criteria remain unlegislated policy proposals per the seed's CAUTION flag.

C4 · Stablecoins & EMTs — Full Module Record0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign InView Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

Consumer protection for virtual asset activity in Pakistan is emerging through SBP's conditional framework for bank-facilitated VASP accounts, which mandates segregated, non-remunerative client money accounts and bars commingling of client funds, alongside PVARA's Sharia-compliance licensing gate. Standalone marketing-restriction, suitability, or complaint-handling rules specific to VASPs beyond SECP's general securities directive have not been independently confirmed in force.

Standing sub-brief · as of 25 August 2026 89 words · last cycle 2026-10-25

Consumer Protection

The Virtual Assets Act, 2026 empowers PVARA to set standards for investor protection, risk management, and cybersecurity, and to bar manipulation and insider trading among licensed virtual-asset service providers. This is a statutory mandate rather than a fully detailed conduct code; implementing rules giving practical effect to these standards have not yet been located.

Periodic update · new data 2026-10-25

Consumer Protection

Pakistan's virtual-asset consumer-protection framework includes a stated custody-segregation duty: licensed providers are required to segregate customer holdings from the firm's own assets, and may not lend or pledge client holdings without written consent. This duty was stated publicly by PVARA's chairman in press coverage around the launch of the virtual-asset licensing regime in August 2026, a Tier 2 contemporaneous source, though the specific regulatory provision establishing this duty in PVARA's licensing framework has not been independently retrieved from a primary regulatory text.

A stated segregation-and-no-pledging duty of this kind is a standard feature of mature virtual-asset consumer-protection frameworks internationally, and its articulation by the regulator's own chairman at the launch of the licensing regime indicates this is intended as a foundational feature of Pakistan's regime rather than an afterthought. However, the gap between a regulator's public statement of a duty and that duty's codified, binding textual form matters for compliance certainty: firms structuring custody arrangements need the underlying regulatory text, not only a public statement, to confirm the precise scope of what segregation requires, what forms of written consent suffice for any permitted use of client holdings, and what consequences attach to a breach.

No information was found regarding a compensation scheme, complaint-handling mechanism, or disclosure-document regime for retail virtual-asset consumers in Pakistan, which should be read as an absence in available reporting rather than a confirmed absence of any such mechanism in PVARA's broader regulatory framework.

Outlook

Confirmation of the custody-segregation and no-pledging duty from PVARA's own regulatory text, rather than from a chairman's public statement, would resolve the current sourcing gap and allow a firmer assessment of its precise scope and enforcement mechanism. As PVARA moves toward issuing full licences in the fourth quarter of 2026, the practical operation of this custody duty for newly licensed firms will be the first real test of whether the stated protection translates into an enforceable, observed market practice.

3 earlier distinct update(s)
Periodic update · new data 2026-10-18

Consumer Protection

Pakistan's virtual-asset consumer-protection framework includes a stated custody-segregation duty: licensed providers are required to segregate customer holdings from the firm's own assets, and may not lend or pledge client holdings without written consent. This duty was stated publicly by PVARA's chairman in press coverage around the launch of the virtual-asset licensing regime in August 2026, a Tier 2 contemporaneous source, though the specific regulatory provision establishing this duty in PVARA's licensing framework has not been independently retrieved from a primary regulatory text.

A stated segregation-and-no-pledging duty of this kind is a standard feature of mature virtual-asset consumer-protection frameworks internationally, and its articulation by the regulator's own chairman at the launch of the licensing regime indicates this is intended as a foundational feature of Pakistan's regime rather than an afterthought. However, the gap between a regulator's public statement of a duty and that duty's codified, binding textual form matters for compliance certainty: firms structuring custody arrangements need the underlying regulatory text, not only a public statement, to confirm the precise scope of what segregation requires, what forms of written consent suffice for any permitted use of client holdings, and what consequences attach to a breach.

No information was found this cycle regarding a compensation scheme, complaint-handling mechanism, or disclosure-document regime for retail virtual-asset consumers in Pakistan, which should be read as an absence in available reporting rather than a confirmed absence of any such mechanism in PVARA's broader regulatory framework.

Outlook

Confirmation of the custody-segregation and no-pledging duty from PVARA's own regulatory text, rather than from a chairman's public statement, would resolve the current sourcing gap and allow a firmer assessment of its precise scope and enforcement mechanism. As PVARA moves toward issuing full licences in the fourth quarter of 2026, the practical operation of this custody duty for newly licensed firms will be the first real test of whether the stated protection translates into an enforceable, observed market practice.

Periodic update · new data 2026-10-05

Consumer Protection

PVARA's chair has publicly stated, via press coverage of the regime's launch, that licensed virtual-asset service providers will be required to keep customer holdings segregated from the firm's own assets, will be barred from lending or pledging client holdings without written consent, and will not be permitted to touch client assets if the platform fails (CLM-PK-012). This is recorded as a Probable-confidence finding: the underlying statement is attributed to the regulator's chair through secondary press reporting, and the specific custody-rule clause in PVARA's own rulebook that would give this principle legal force has not been retrieved in primary form. The composed record treats the custody-segregation principle itself as reported, while leaving open whether, and how precisely, it is codified. No crypto-specific market-abuse regime or complaints-handling mechanism has been located under the Virtual Assets Act, 2026, and that absence is tracked as an open gap rather than a negative finding about the regime's design.

Outlook

The custody-segregation principle, if and when confirmed against primary rule text, would be a materially significant consumer-protection development given its direct bearing on client-asset risk in the event of platform failure. Until the primary clause is retrieved, this module's rating remains provisional.

Periodic update · new data 2026-09-28

Consumer Protection

Chapter 7 of the Virtual Assets Act, 2026 requires licensees to conduct their business honestly, fairly and professionally, and in the best interests of customers. This conduct-of-business standard is the primary consumer-protection provision identified this cycle, and it is sourced from secondary legal-commentary description of the Act rather than from primary gazette text, which limits confidence to Probable rather than Confirmed.

No further granular consumer-protection detail, such as specific disclosure requirements, complaint-handling mechanisms, or compensation-scheme provisions, was retrieved this cycle beyond this general conduct standard. The standard itself is meaningful in that it establishes a statutory basis for consumer-protection enforcement against licensed VASPs, but its practical scope and enforcement mechanism remain undetailed on the evidence available.

Outlook

The development to watch is whether PVARA publishes implementing regulations that give the Chapter 7 conduct standard operational teeth, such as specific disclosure or complaint-handling requirements, and whether the primary gazette text of the Act is retrieved to confirm the secondary-commentary description of this provision.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (8)
  1. T4The Block — SBP's April 2026 rules require banks facilitating licensed VASPs to establish segregated, non-remunerative Client Money Accounts in Pakistani rupees, prohibiting cash deposits/withdrawals, use as collateral, and commingling with VASP operational balances. retrieved M4 binding in force
  2. T3CoinDesk — Banks remain barred from investing, trading, or holding virtual assets using their own funds or customer deposits, even when facilitating licensed VASPs. retrieved M4 binding in force
  3. T1SECP — SECP's directive prohibits promotional or dealing activity in virtual currencies/tokens absent proper authorization, functioning as a marketing-restriction backstop under general securities law. retrieved M3 binding in force
  4. T1State Bank of Pakistan (SBP) — SBP-regulated entities may open segregated Client Money Accounts (CMAs) for PVARA NOC-holding or licensed VASPs; CMAs must be strictly segregated from other VASP account types; commingling prohibited. retrieved M4 binding in force
  5. T2PVARA — Licensed VASPs must keep customer holdings separate from their own, may not lend or pledge client holdings without written consent, and may not touch client assets if the platform fails. M5 binding in force
  6. T2Pakistan Virtual Asset Services Regulations, 2026 — licensed VASPs to segregate customer asset holdings from the firm's own assets and prohibit lending or pledging customer assets without written consent M4 binding in force new
  7. T3PVARA — Licensed VASPs must segregate customer holdings from the provider's own assets and may not lend or pledge client assets without written consent retrieved M4 binding in force
  8. T2PVARA licensing framework — Licensed providers to segregate customer holdings from the firm's own assets and prohibits lending/pledging of client holdings without written consent M4 binding in force

#

No Pakistan-specific statutory guidance on the income-tax, capital-gains, VAT/GST, withholding, or reporting treatment of virtual-asset transactions was located in Federal Board of Revenue (FBR) or Finance Division materials reviewed for this run; the Finance Bill 2026 and federal budget documents reviewed do not reference virtual-asset taxation.

Horizon · 2026-Q4 (± six months)FBR crypto capital-gains tax framework expectedProposed · Tier 4 source
Horizon · 2026-Q4 (± six months)FBR crypto capital-gains tax framework expectedProposed · Tier 4 source
C6 · Tax Treatment — Full Module Record0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign InView Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

Pakistan's cross-border virtual-asset transfer regime is nascent. SBP's 2018-era restriction on outward remittance to overseas crypto/forex trading platforms remains a historical reference point of uncertain current applicability, while PVARA's 2026 MoU with an affiliate of World Liberty Financial signals openness to regulated cross-border stablecoin settlement. No dedicated cross-border travel-rule or reporting-threshold regime specific to virtual assets has been confirmed in force.

Periodic update · new data 2026-10-25

Cross-Border Transfer

Pakistan's cross-border virtual-asset framework is anchored by an effects-based territorial test paired with a safe harbour, both set out in the Pakistan Virtual Asset Services Regulations 2026. Regulation 3(4) establishes that virtual-asset activity is treated as carried on in Pakistan where it targets, solicits, promotes to, or onboards persons located in Pakistan, including through the use of Pakistani-rupee payment rails. This is a materially broad jurisdictional trigger, since it captures foreign operators actively marketing into the Pakistani market even without a physical presence there. Regulation 3(5) provides a counterbalancing safe harbour: a foreign operator that does not market to, onboard, or support Pakistani-rupee payment rails for Pakistan-based users falls outside the scope of the Pakistani licensing requirement on the basis of passive accessibility alone. Together, these two provisions draw a clear, if not yet judicially tested, line between active market participation and passive cross-border accessibility.

Separately, Regulation 100 imposes a counterparty due-diligence obligation on PVARA-licensed firms: before establishing a material transfer relationship with a foreign virtual-asset-service-provider counterparty, a Pakistan-licensed firm must conduct risk-based due diligence on that counterparty's Travel Rule and anti-money-laundering controls, with the relationship reviewed annually and upon heightened-risk indicators. This duty functions as the practical link between Pakistan's territorial framework and its anti-money-laundering architecture, requiring licensed firms to actively vet the compliance posture of any foreign counterparty handling transfers connected to Pakistan.

No reciprocal-access or mutual-recognition framework between Pakistan and any other jurisdiction's virtual-asset regime was identified. This is an architecture-over-incident finding: Pakistan has built a unilateral territorial and counterparty-diligence framework, but has not yet, on current evidence, entered into any bilateral or multilateral recognition arrangement that would ease cross-border licensing friction for firms operating across Pakistan and another jurisdiction's regime simultaneously.

Outlook

The practical operation of the Regulation 3(4) effects-based test will be tested as more foreign virtual-asset operators assess their exposure to Pakistani licensing requirements based on their marketing and onboarding practices. The Regulation 100 counterparty due-diligence duty will take on greater practical significance once PVARA's full licensing phase is complete and licensed firms begin actively applying it to real counterparty relationships, expected from the fourth quarter of 2026 onward.

Periodic update · new data 2026-10-18

Cross-Border Transfer

Pakistan's cross-border virtual-asset framework is anchored by an effects-based territorial test paired with a safe harbour, both set out in the Pakistan Virtual Asset Services Regulations 2026. Regulation 3(4) establishes that virtual-asset activity is treated as carried on in Pakistan where it targets, solicits, promotes to, or onboards persons located in Pakistan, including through the use of Pakistani-rupee payment rails. This is a materially broad jurisdictional trigger, since it captures foreign operators actively marketing into the Pakistani market even without a physical presence there. Regulation 3(5) provides a counterbalancing safe harbour: a foreign operator that does not market to, onboard, or support Pakistani-rupee payment rails for Pakistan-based users falls outside the scope of the Pakistani licensing requirement on the basis of passive accessibility alone. Together, these two provisions draw a clear, if not yet judicially tested, line between active market participation and passive cross-border accessibility.

Separately, Regulation 100 imposes a counterparty due-diligence obligation on PVARA-licensed firms: before establishing a material transfer relationship with a foreign virtual-asset-service-provider counterparty, a Pakistan-licensed firm must conduct risk-based due diligence on that counterparty's Travel Rule and anti-money-laundering controls, with the relationship reviewed annually and upon heightened-risk indicators. This duty functions as the practical link between Pakistan's territorial framework and its anti-money-laundering architecture, requiring licensed firms to actively vet the compliance posture of any foreign counterparty handling transfers connected to Pakistan.

No reciprocal-access or mutual-recognition framework between Pakistan and any other jurisdiction's virtual-asset regime was identified this cycle. This is an architecture-over-incident finding: Pakistan has built a unilateral territorial and counterparty-diligence framework, but has not yet, on current evidence, entered into any bilateral or multilateral recognition arrangement that would ease cross-border licensing friction for firms operating across Pakistan and another jurisdiction's regime simultaneously.

Outlook

The practical operation of the Regulation 3(4) effects-based test will be tested as more foreign virtual-asset operators assess their exposure to Pakistani licensing requirements based on their marketing and onboarding practices. The Regulation 100 counterparty due-diligence duty will take on greater practical significance once PVARA's full licensing phase is complete and licensed firms begin actively applying it to real counterparty relationships, expected from the fourth quarter of 2026 onward.

Periodic update · new data 2026-10-11

Cross-Border Transfer

Pakistan's cross-border and banking-access position for virtual-asset businesses has shifted materially with SBP Circular No. 10 of 2026, dated 14 April 2026. The circular permits regulated banks to open accounts, including segregated Client Money Accounts, for PVARA-licensed VASPs, subject to licence verification and AML/CFT controls. This replaces a banking-access restriction that had been in place since 2018, under which banks had been effectively unable to service crypto-related businesses, and represents a material liberalisation of the formal banking gateway available to licensed virtual-asset operators.

The circular is structured around licence verification: a bank's willingness to open an account for a VASP is conditioned on that VASP holding a valid PVARA licence, tying the newly reopened banking channel directly to the licensing perimeter established under the Virtual Assets Act, 2026 and the Services and Activity-Specific Regulations that came into force on 21 August 2026. For a VASP that has completed the NOC process and holds or is pursuing a PVARA licence, the circular supplies a defined route into the regulated banking system; for an entity that has not obtained a licence, the pre-existing practical exclusion from banking services continues to apply, since the circular's protection is conditioned on licensed status.

Beyond the banking-access gateway itself, no cross-border transfer-specific rules, such as outbound remittance limits for virtual-asset transactions or foreign-exchange treatment of VASP-to-VASP cross-border flows, were independently retrieved this period. The circular addresses domestic banking access for licensed entities rather than the mechanics of cross-border virtual-asset transfer itself.

Outlook

How banks implement the licence-verification requirement in practice, and whether any further SBP guidance addresses cross-border transfer mechanics specifically rather than domestic account access, are the open questions for this module. The interaction between the banking-access gateway and the broader NOC/licensing timeline, now that the 5 September 2026 deadline has passed, will determine how many VASPs are actually able to make use of the reopened banking channel in the near term.

Periodic update · new data 2026-10-05

Cross-Border Transfer

Section 4 of the Virtual Assets Act, 2026 gives PVARA an explicit mandate to prescribe, by regulation, the conditions under which a virtual-asset service conducted outside Pakistan is, or is not, deemed to be offered or marketed to persons inside Pakistan (CLM-PK-017). This is, in substance, an enabling provision for a reverse-solicitation and extraterritorial-reach test: a mechanism that will determine whether an offshore platform serving Pakistani customers without actively soliciting them falls inside or outside PVARA's licensing perimeter. The provision itself is part of the enacted, in-force Act text, so the existence of the mandate is well-evidenced. What is not yet evidenced is the content of the implementing regulation itself -- the actual conditions PVARA will set. The claim's underlying secondary-source commentary, which would have elaborated on how the test is expected to operate in practice, could not be retrieved this cycle: the source attempted was unreachable at the network level, leaving the claim resting on the Act's own enabling text alone rather than on any interpretive gloss. This is recorded as a Probable-confidence, Tier-3-sourced finding, and the composed record treats only the existence of the forthcoming test -- not its substance -- as established.

This matters structurally because until the implementing regulation is published, no offshore virtual-asset business can assess with confidence whether its existing relationship with Pakistani users would bring it inside PVARA's licensing perimeter. The gap is compounded by an unresolved question already on record: whether PVARA licensing, once obtained, would carry any cross-border or passporting recognition in other jurisdictions -- a question this cycle's sources do not address in either direction.

Outlook

The implementing regulation under section 4 is the single most consequential unretrieved document in this jurisdiction's cross-border posture. Its eventual content will determine how restrictively Pakistan treats offshore virtual-asset services reaching Pakistani users without a local establishment, and will interact directly with the Travel Rule and remittance-adjacent obligations that sit within the world-payments monitor's remit. Until that text is retrieved, the module's rating remains amber on the strength of the enabling provision alone.

C7 · Cross-Border & Travel Rule — Full Module Record0 sub-modules · 180 words · 7 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign InView Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

AML/CFT obligations for Pakistani virtual asset service providers are captured under the crypto consumer's subscription to the Financial Integrity Module (FIM) aml_ctf baseline and are not duplicated here. Contextually, SBP's April 2026 circular conditions bank facilitation of VASPs on enhanced due diligence, KYC, AML, CFT and counter-proliferation-financing compliance, and the Virtual Assets Act, 2026 empowers PVARA to address money laundering and terrorist financing risks associated with virtual assets.

C8 · AML/CFT Regime — Full Module Record0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

Unlock with Free Pass / Sign InView Pro & Firm Plans (£39 / £199)View Open Exemplar (Gibraltar)

#

## Commercial Activity Two distinct commercial developments mark Pakistan's virtual-asset sector this cycle. Binance and HTX, having received PVARA no-objection certificates in December 2025, are reported as of October 2026 to be continuing their progression toward full virtual-asset-service-provider licences under PVARA's framework. This is a pending-regulatory market-entry event involving two internationally active exchange operators moving through the same no-objection-certificate-to-full-licence pathway that governs the broader market, rather than a bespoke arrangement specific to either firm. No transaction values apply to this development, as it is a regulatory-status progression rather than a commercial transaction, and no primary filing from either exchange has been independently retrieved; the finding rests on consistent secondary reporting. Separately, PVARA has disclosed exploratory engagement with Pakistan's Ministry of Finance on sovereign debt tokenization, specifically proposals for digital Eurobond issuances and tokenization of Naya Pakistan Certificates. This is an announced, early-stage commercial-contract-type disclosure involving the virtual-asset regulator and a government ministry directly, rather than a private commercial transaction. No financial terms have been publicly disclosed in connection with this exploration, and it should be treated as not publicly disclosed pending further detail on structure, scale, or timeline. Both developments indicate a sector moving from initial regulatory market entry toward deeper institutional and governmental engagement, though neither has yet produced a concluded transaction, a primary-source filing from the private parties involved, or disclosed financial terms. — Outlook: The Binance and HTX progression toward full licensing should be watched for confirmation of an actual licence grant, which would be a concrete marker of PVARA's licensing pathway functioning for internationally active exchange operators specifically. The PVARA-Ministry of Finance sovereign debt tokenization exploration remains at a disclosed-interest stage, and its next marker would be any public confirmation of a concrete issuance structure, pilot transaction, or disclosed financial terms, none of which has yet been reported.

Periodic update · new data 2026-10-25

Commercial Activity

Two distinct commercial developments mark Pakistan's virtual-asset sector. Binance and HTX, having received PVARA no-objection certificates in December 2025, are reported as of October 2026 to be continuing their progression toward full virtual-asset-service-provider licences under PVARA's framework. This is a pending-regulatory market-entry event involving two internationally active exchange operators moving through the same no-objection-certificate-to-full-licence pathway that governs the broader market, rather than a bespoke arrangement specific to either firm. No transaction values apply to this development, as it is a regulatory-status progression rather than a commercial transaction, and no primary filing from either exchange has been independently retrieved; the finding rests on consistent secondary reporting.

Separately, PVARA has disclosed exploratory engagement with Pakistan's Ministry of Finance on sovereign debt tokenization, specifically proposals for digital Eurobond issuances and tokenization of Naya Pakistan Certificates. This is an announced, early-stage commercial-contract-type disclosure involving the virtual-asset regulator and a government ministry directly, rather than a private commercial transaction. No financial terms have been publicly disclosed in connection with this exploration, and it should be treated as not publicly disclosed pending further detail on structure, scale, or timeline.

Both developments indicate a sector moving from initial regulatory market entry toward deeper institutional and governmental engagement, though neither has yet produced a concluded transaction, a primary-source filing from the private parties involved, or disclosed financial terms.

Outlook

The Binance and HTX progression toward full licensing should be watched for confirmation of an actual licence grant, which would be a concrete marker of PVARA's licensing pathway functioning for internationally active exchange operators specifically. The PVARA-Ministry of Finance sovereign debt tokenization exploration remains at a disclosed-interest stage, and its next marker would be any public confirmation of a concrete issuance structure, pilot transaction, or disclosed financial terms, none of which has yet been reported.

Sources and findings (3)
  1. T3Fasset — a USD 68 million Series C round at a USD 1 billion valuation, reported as accounting for roughly 91% of Pakistan's Q3 2026 reported startup funding total retrieved M3 non-binding new
  2. T3Binance / HTX — PVARA operates a No-Objection Certificate (NOC) and VASP licensing framework for foreign crypto exchanges; publicly available PVARA notices reviewed as of October 2026 did not confirm the individual licence status of specific named exchanges. retrieved M3 non-binding
  3. T3PVARA — Sovereign debt tokenization (digital Eurobond issuances, Naya Pakistan Certificate tokenization) with the Ministry of Finance retrieved M3 non-binding
No categories match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 9 module(s), 44 finding(s), 47 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 25 Oct 2026: not upheld (17 confirmed against the cited source; 1 contradicted by the cited source; 6 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.