Regulatory Evolution — From Ban to Framework
Pakistan's crypto regulatory journey mirrors many emerging markets: initial prohibition, followed by pragmatic reversal as adoption outpaced enforcement. In April 2018, the State Bank of Pakistan (SBP) issued a circular prohibiting banks and financial institutions from facilitating crypto transactions, effectively cutting off formal banking for crypto businesses and leaving Pakistani users operating in a grey zone.
Despite the SBP ban, Pakistan consistently ranked among the world's top five countries for crypto adoption by peer-to-peer trading volume, with platforms like Paxful and LocalBitcoins serving millions of Pakistani users. Remittance flows — Pakistan receives among the world's largest inbound remittances — drove substantial peer-to-peer crypto usage as users sought to avoid formal transfer fees.
The turning point came in 2023 when the SBP revised its position following pressure from the SECP, FATF compliance considerations, and recognition that prohibition was ineffective. The SECP published its draft Virtual Assets Regulatory Framework, signalling Pakistan's shift from prohibition to regulated oversight. This shift aligned with Pakistan's successful exit from the FATF Grey List in 2022, which required demonstrating effective supervision of designated non-financial businesses and professions including VASPs.
By 2024-2026, SECP had advanced VASP registration requirements and Pakistan was actively developing regulatory infrastructure for crypto exchanges, wallet providers, and crypto payment services operating within or targeting Pakistani consumers.
Key milestone: Pakistan exited the FATF Grey List in October 2022 after passing 34 out of 34 action items, including effective virtual asset supervision commitments — a prerequisite for the current regulated framework.
SECP Virtual Asset Rules — Registration Requirements
The Securities and Exchange Commission of Pakistan (SECP) is the designated competent authority for virtual assets in Pakistan, following the model adopted by many FATF-member jurisdictions assigning VASP oversight to the securities regulator. The SECP Virtual Assets Regulatory Framework sets out who must register, what compliance obligations apply, and the consequences of operating without registration.
Under the SECP rules, a Virtual Asset Service Provider (VASP) includes any natural or legal person conducting as a business one or more of the following activities: exchange between virtual assets and fiat currencies; exchange between one or more forms of virtual assets; transfer of virtual assets; safekeeping or administration of virtual assets or instruments enabling control; and participation in or provision of financial services related to an issuer's offer or sale of a virtual asset.
SBP & Banking Access — The Key Challenge
Despite the SECP regulatory framework, banking access remains the most significant practical challenge for crypto businesses in Pakistan. The State Bank of Pakistan (SBP) has been cautious in extending bank account access to VASP-registered entities, and Pakistani commercial banks often remain reluctant to onboard crypto businesses even where SECP registration is in place.
The practical reality for crypto businesses targeting Pakistani users is that fiat on/off ramp options remain limited compared to more mature regulated markets. Most Pakistani crypto users continue to use peer-to-peer exchanges or informal remittance channels for fiat conversion. Registered VASPs with strong AML documentation and demonstrated SECP compliance have the best prospects for securing banking relationships with larger Pakistani banks such as HBL, UBL, and MCB Bank.
Solutions being adopted by operators include: maintaining primary banking in UAE, UK, or Singapore and serving Pakistani users via digital payment corridors; partnering with Pakistani fintech companies licensed by the SBP under the Electronic Money Institutions (EMI) regime; and utilising mobile money services (JazzCash, Easypaisa) for fiat settlement where the operator and MSP have established agreements.
AML/CFT Compliance — FATF Implementation
Pakistan's AML/CFT framework has been substantially strengthened as a result of the FATF Grey List period (2018–2022). The Anti-Money Laundering Act 2010 (as amended) and the Anti-Terrorism Act 1997 form the primary legislative basis, supplemented by SECP's specific VASP regulations implementing FATF Recommendation 15.
The Financial Monitoring Unit (FMU) is Pakistan's Financial Intelligence Unit, responsible for receiving Suspicious Transaction Reports (STRs) from VASPs and other reporting entities. All registered VASPs must file STRs with the FMU and maintain transaction records for a minimum of five years. The FMU has MoUs with multiple international FIUs under the Egmont Group framework, enabling international information exchange.
For crypto businesses, key compliance obligations include:
- Customer Due Diligence (CDD) for all account holders with CNIC/NICOP verification
- Enhanced Due Diligence (EDD) for Politically Exposed Persons (PEPs) and high-risk customers
- Real-time screening against UN Security Council, EU, and Pakistan's proscribed persons lists
- Travel Rule compliance for transfers exceeding the PKR threshold
- Annual AML risk assessments and independent audits
Tax Treatment — FBR Position & Capital Gains
The Federal Board of Revenue (FBR) has formally recognised crypto assets as taxable property in Pakistan. Capital gains from crypto disposals are taxed at a flat rate of 15% for individual taxpayers under the Income Tax Ordinance 2001, making Pakistan's CGT rate relatively straightforward compared to jurisdictions with complex tiered systems.
For corporate entities, crypto trading profits are treated as ordinary business income and taxed at the standard corporate income tax rate (currently 29% for companies, with SME reliefs available). Crypto mining income is treated as business income. The FBR has issued guidance requiring disclosure of crypto holdings in annual tax returns, and failure to report carries penalties.
Pakistan has implemented withholding tax requirements on certain crypto-related payments. Exchanges operating in Pakistan are expected to implement withholding tax collection mechanisms as the regulatory framework matures. Tax planning for Pakistan market entry should include analysis of whether holding structures in treaty-partner jurisdictions (UK, UAE, China) can provide relief on corporate-level profits.
Operating in Pakistan — Practical Guide
For crypto businesses considering entry into the Pakistani market, the regulatory environment in 2026 is more permissive than at any previous point, but significant practical challenges remain. SECP registration is achievable for well-prepared applicants with strong AML documentation, local management, and a clear business model. The timeline for SECP VASP registration is typically three to six months for complete applications.
Market opportunity is substantial: Pakistan's 15M+ crypto users represent a large and growing base, per capita crypto penetration is rising rapidly, and remittance corridor demand for crypto-based transfer solutions is significant. Pakistan is the fifth-largest recipient of remittances globally (approximately USD 27 billion annually), creating persistent demand for efficient cross-border crypto payment services.
Key operational recommendations for Pakistan market entry: engage a local Pakistani law firm experienced in SECP filings; appoint a Pakistan-resident compliance officer from the outset; document FATF-standard AML procedures before filing; pursue bank relationships proactively by presenting SECP registration and full AML documentation; and maintain the offshore corporate structure for treasury and banking while using the Pakistani entity solely for regulated local operations.