Crypto Licensing

Kyrgyzstan Crypto Licence (VASP)

Authorisation is indefinite under Article 29, and more than 200 operators already hold one, on a 10% corporate rate. Outside the jurisdictions we serve.

Talk to us

Why Operators Look at Kyrgyzstan

Kyrgyzstan offers one of Central Asia’s most accessible statutory crypto frameworks: a single Law No. 12 covering exchanges, exchange offices, mining and issuance, with a 10% corporate tax rate, no licence renewal cycle (authorisation is indefinite under Article 29), and a real-world timeline of two to three months. As of early 2026, just over 200 exchange operators and around a dozen trading operators hold FMRS authorisation, so this is a working ecosystem with documented precedent rather than a paper regime.

Expert Comment

Banking, not the licence itself, is the binding constraint for Kyrgyz-licensed VASPs—most domestic banks decline crypto clients, and USD correspondent depth is thin and unstable, with individual Kyrgyz institutions designated for sanctions violations as recently as 2026. A workable stack requires a foreign-held Kyrgyz bank for KGS and RUB, layered with an EU EMI for euro settlement and correspondent stability, and this architectural dependency shifts the decision calculus away from low cost alone toward total-cost-of-banking in an EAEU integration that carries secondary-sanctions exposure Western-facing operators must price in.

Daniel Tomberg CEO & Senior Partner, Tomberg & Partners
In short: Kyrgyzstan suits operators serving CIS, Russian-speaking and EAEU markets that prefer low-cost statutory licensing over EU regulatory prestige. It is not the right choice for operators seeking EU passporting, US dollar correspondent banking depth, or proximity to Western institutional capital.

Unlike Kazakhstan, which confines licensed crypto activity to the Astana International Financial Centre, Kyrgyzstan runs a national onshore framework with no geographic ringfence. Beyond the single statute and the light tax position, the draw is hydropower-backed mining economics (a 10% electricity-cost tax against significant unutilised national capacity) and CIS and EAEU market reach in a Russian-language regional framework no EU or Caribbean jurisdiction can replicate. The trade-off is material: EAEU integration creates secondary-sanctions exposure that operators serving Western counterparties must price into their structuring.

Regulatory Framework

Kyrgyzstan regulates virtual assets through Law No. 12 of 21 January 2022, with implementing rules in Cabinet of Ministers Resolution No. 514 of 16 September 2022 (as amended by Resolution No. 625 of 30 September 2025). The FMRS is the sole licensing and supervisory authority for VASPs; the National Bank governs banking, monetary policy and the digital som CBDC but has no licensing authority over VASPs. Virtual assets are statutorily defined as neither legal tender nor securities, and stablecoin and RWA-token rules are reserved by statute to the President of the Kyrgyz Republic, a detail Western framework comparisons frequently miss.

Recent Developments

The framework is moving quickly. Presidential Decree No. 112 of 13 March 2026 sets minimum ATOC charter capital at KGS 300,000,000 from 01 July 2026; Cabinet Resolution No. 739 of November 2025 replaced the 2018 AML/CFT regulation and the FMRS introduced mandatory sanctions screening of all key officers and UBOs; and Resolution No. 823 of January 2025 added UBO reputation checks and an annual external-audit requirement. Kyrgyzstan also launched a national stablecoin programme and crypto reserve in October 2025.

Licence Types and Activities Covered

Law No. 12 establishes a small set of operational categories, distinguishing exchange offices (AVA, lower capital and scope) from full trading operators (ATOC, with mandatory functional divisions, higher capital and centralised order matching). Mining and issuance sit as parallel certificates rather than sub-categories of exchange activity.

Covered Activities

  • Virtual Asset Trading Operator (ATOC). The full crypto-exchange licence: centralised order matching with in-house custody and clearing across six mandatory functional divisions (listing, trade matching, IT/security, clearing, KYC and internal control). Natural persons may trade only with an FMRS “qualified virtual asset investor” certificate.
  • Virtual Asset Exchange Operator (AVA). The exchange-office category, permitting KGS, foreign-currency, electronic-money and crypto-to-crypto exchanges in the operator’s own name, with no mandatory order book.
  • Mining certificates. Industrial (legal entities, subject to the 10% electricity-cost tax) and private (individuals or sole proprietors).
  • Issuer registration. Permits initial offerings of digital tokens under Article 26, though stablecoin and RWA-token issuance is reserved to the President.

Direct receipt of crypto as payment is prohibited: virtual assets are not means of payment, and crypto receipt by an unlicensed Kyrgyz company is treated as illegal turnover under Article 204 of the Criminal Code. VASP licences are personal to the licensed Kyrgyz entity and non-transferable; foreign entities cannot passport in, so the only route is incorporating locally.

Requirements

VASP authorisation in Kyrgyzstan requires a Kyrgyz legal entity, paid-up charter capital in Kyrgyz som from founders’ own funds, at least one Kyrgyz-resident director, a physical office, FMRS-pre-cleared key officers, and IT infrastructure physically hosted in Kyrgyzstan. The two most common failure points are source-of-funds verification for the paid-up capital and sanctions screening of UBOs and key officers, tightened materially by the FMRS in November 2025.

RequirementDetail
Entity TypeKyrgyz Limited Liability Company (LLC / ОсОО) or Open Joint-Stock Company (OJSC / ОАО)
Min. Directors2; at least one Kyrgyz resident
Foreign Ownership100% foreign ownership permitted
Min. Capital (AVA)KGS 40,000,000 (~USD 460,000), paid in full, non-cash, KGS-denominated
Min. Capital (ATOC)KGS 300,000,000 (~USD 3.4M) from 01 July 2026 per Presidential Decree No. 112/2026
Capital SourceFounders’ own funds only (borrowed, pledged or attracted funds prohibited); held in a Kyrgyz bank with a bank-issued capital-confirmation certificate
Registered OfficePhysical Kyrgyz address; PO box not acceptable
IT LocalisationServers physically located in Kyrgyzstan; two-factor authentication mandatory
Key OfficersDirector, chief accountant and compliance officer, all FMRS pre-cleared including sanctions screening
AML/KYT ToolingState-mandated screening via the Ranex system (sole approved AML/KYT provider)
Authorisation TermIndefinite; no renewal cycle

FMRS pre-clearance applies to directors, chief accountants, compliance officers, founders and UBOs, assessing criminal record, prior regulatory sanctions, financial standing and sanctions exposure under OFAC, OFSI, EU and EAG-relevant designations; the 2025 strengthening made sanctions-clearance lead time, rather than documentation gaps, the common cause of slippage. The substance model is structural (a Kyrgyz-resident director, a physical office and local servers), and the applicable AML law is Law No. 87 of 6 August 2018 with implementing Cabinet Resolution No. 739, under which beneficiary VASPs must obtain originator information for transfers under the Travel Rule.

Application Process

The statutory FMRS review period under Law No. 12 Article 29 is one month from the moment a complete application is filed. End-to-end, including incorporation, capital deposit, document preparation and any deficiency cure, the timeline runs 2 to 3 months for AVA and 3 to 4 months for ATOC applications. The application language is Russian, and the five stages below run partly in parallel. The bespoke compliance documentation, which must cite Kyrgyz statutes rather than rely on generic templates, is the most time-intensive component.

Stage 1 1–2 weeks

Kyrgyz Entity Formation

A Kyrgyz LLC or OJSC is registered at the Ministry of Justice, typically in three business days. Remote incorporation is permitted.

Stage 2 2–3 weeks

Capital Deposit and Bank Confirmation

The full charter capital is deposited in a Kyrgyz bank from founders’ own funds for a capital-confirmation certificate. Usually the slowest stage for foreign founders, as source-of-funds due diligence adds one to three weeks.

Stage 3 4–6 weeks (parallel)

Compliance Documentation

The AML, KYC, transaction-monitoring, Travel Rule, business-plan and IT-security policy set runs in parallel. The FMRS expects drafting that cites Kyrgyz statutes and the mandated AML/KYT system.

Stage 4 ≤ 1 month

FMRS Filing and Statutory Review

The FMRS pre-clears key officers, founders and UBOs against fit-and-proper criteria including sanctions screening. The Article 29 review window is one month; a deficiency notice resets the clock.

Stage 5 1–2 weeks

Grant and Operational Onboarding

On grant, the VASP joins the FMRS public register and onboards to the Ranex AML/KYT system. Operations commence once Ranex is live and published rules conform to Resolution No. 823.

Taxation

Kyrgyzstan is a low-rate jurisdiction for crypto businesses: 10% flat corporate income tax, virtual asset sales VAT-exempt, and a 10% mining-electricity tax for industrial miners, under a Tax Code with crypto-specific provisions in force from 2022. It maintains a broad double-tax treaty network but has not signed the BEPS Multilateral Instrument.

TaxRateCrypto Application
Corporate Income Tax10%Standard rate on net profit
VAT12% standardVirtual asset sales VAT-exempt (Tax Code)
Personal Income Tax10% resident / 15% non-residentCrypto gains as ordinary income; crypto-to-crypto swaps not taxable sales
Mining Electricity Tax10%Applied to electricity cost (including VAT and sales tax) for industrial miners
Sales Tax2% (traders) / 3% (others)Applied to crypto sales
Withholding Tax10% services / 5% telecom/freightReduced under DTTs
HTP / Creative Industries Park Residents1–2% turnoverIn lieu of CIT; exempt from export VAT

Resident status in the Kyrgyz High-Tech Park (a separate application from VASP authorisation) replaces standard corporate income tax with a 1–2% turnover tax and exempts the resident from export VAT; crypto businesses with software or blockchain-infrastructure activity frequently qualify. Kyrgyzstan has not implemented the OECD Crypto-Asset Reporting Framework or Pillar Two, so standalone Kyrgyzstan-domiciled VASPs sit outside the GloBE threshold.

Ongoing Compliance & Post-Registration

The licence does not expire and there is no renewal fee, but the licensed entity carries continuous obligations, and failure to meet the monthly reporting cadence is the most common cause of FMRS supervisory action. What stays live after grant:

  • Monthly operational reports to the FMRS covering transaction volumes, onboarding and compliance metrics.
  • Quarterly IFRS financial statements, plus annual audited statements under Resolution No. 823.
  • SAR/STR submissions to the SFIS on a risk basis, and ongoing AML/KYT screening through Ranex.
  • Supervisory reviews, scheduled and unannounced, focused since 2025 on sanctions screening, customer-identification quality and Ranex integration.

Banking

Banking, not the licence, is the binding constraint for Kyrgyz-licensed VASPs. The domestic sector is small, most banks are reluctant to onboard crypto businesses, and USD correspondent depth is thin, constrained further by a 2024–2025 chain of sanctions designations against individual Kyrgyz banks. The workable stack is a foreign-held Kyrgyz bank for KGS, RUB and limited USD flows, supplemented by a licensed EU EMI for euro settlement and broader correspondent access. In a corridor where a single designation can close a rail overnight, the stack depends on knowing which banks and EMIs are onboarding licensed VASPs this quarter, not last year.

Banking is one of our core services. Where a structure we deliver in the jurisdictions we serve needs accounts, we arrange them through banking and EMI relationships we work with directly. Read more about how we approach banking →

FATF Status & International Standing

Kyrgyzstan’s FATF baseline is clean. It is not on the FATF grey list as of 13 February 2026, having been removed from increased monitoring in June 2014 with no re-listing since, and it is a founding member of the Eurasian Group (EAG) and a member of the Egmont Group. The 2024 EAG Enhanced Follow-Up Report re-rated Recommendation 15 (new technologies, covering VASPs) from Partially Compliant to Largely Compliant; remaining under enhanced follow-up reflects reform progress, not a status warning.

Sanctions-Exposure Profile

While the jurisdiction-level status is clean, individual Kyrgyz-registered entities and adjacent payment institutions have been targeted by Western authorities through 2025–2026 over Russia-related evasion concerns, and the Ministry of Justice ordered 50 companies to cease activity over sanctions risks in April 2026. For operators with no Russia-facing flows the impact is manageable; for those with material EAEU exposure, the sanctions environment is the dominant variable in jurisdiction selection.

EU Market Access

A Kyrgyzstan VASP authorisation confers no EU passporting rights, and MiCA contains no third-country equivalence regime. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative, and ESMA’s guidelines (from 27 April 2025) read this restrictively: any EU-targeted marketing, EU-language website content or geo-targeted advertising voids the exemption. Operators seeking systematic EU reach should obtain a separate CASP authorisation in an EU member state, such as Lithuania, Cyprus or Malta, all of which we deliver ourselves.

Advantages and Limitations

Kyrgyzstan trades EU regulatory prestige and Western correspondent banking depth for low-cost statutory licensing, a single-supervisor framework and strong CIS market access. The decision turns on customer-base geography and counterparty profile.

  • Indefinite authorisation with no renewal cycle, cost or lapse risk.
  • Low effective tax rate: 10% CIT, VAT-exempt virtual asset sales, 1–2% turnover for HTP residents.
  • Single-supervisor framework across exchange, exchange office, mining and issuance.
  • EAEU and CIS market reach under one Russian-language legal system, on an established licensee base.
  • × No EU passporting. EU clients require a separate CASP authorisation or the narrow Article 61 reverse-solicitation exemption.
  • × Thin banking depth and limited USD correspondent access.
  • × Sanctions-exposure profile from Russia-related designations of individual Kyrgyz entities through 2025–2026.
  • × Capital localisation in Kyrgyz som, carrying KGS currency risk on the capital amount.

How Kyrgyzstan Compares

Kazakhstan and Labuan are the natural CIS and APAC peers; Estonia is the EU upgrade that frames the trade-off between statutory speed and MiCA passporting access.

FactorKyrgyzstanKazakhstanLabuanEstonia
Licence TypeVASP & ATOC (Law No. 12)AIFC Digital Asset Service ProviderLabuan FSA Digital Token / ExchangeMiCA CASP
RegulatorFMRSAFSA (AIFC)Labuan FSAFinantsinspektsioon
Timeline2–3 months4–12 months4–6 months6–12 months
Min. CapitalKGS 40M–300M (~USD 460K–3.4M)USD 10K–250K by activityRM 300K–1.5M by pathwayEUR 50K–150K by class
Corporate Tax10%0% (AIFC; DATF: 20%)3% on audited net profit (trading)0% retained / 22% distributed
Local PresenceKyrgyz LLC + resident director + local serversAIFC entity + AFSA-approved staffLabuan LE + local officeEstonian OÜ + board member + local AML officer
EU PassportingNoNoNoYes (MiCA)
FATF StatusClearClearClearClear
Best ForCIS / EAEU operators; mining; cost-led licensingInstitutional operators wanting AIFC zero-tax frameworkAPAC offshore positioning at moderate costEU market access via MiCA passport

Compare every crypto jurisdiction side by side →

In short, Kyrgyzstan is the right choice when the customer base is Russian-speaking, CIS or EAEU-resident, mining economics matter, the KGS capital floor is workable, and a fast timeline outweighs EU passporting. Where EU market access is the priority, Estonia (MiCA CASP) or another member state is the structural answer; a zero-tax institutional framework points to Kazakhstan (AIFC); moderate-cost APAC positioning points to Labuan; and where Western correspondent banking depth is the binding requirement, an EU jurisdiction, Hong Kong or Singapore resolves it where the CIS peers will not.

Common Mistakes in Kyrgyzstan Applications

FMRS practice and the 2025 supervisory tightening have produced a recurring set of failure points, observed across the licensed VASP cohort rather than theoretical risks.

  • Treating sanctions screening as a documentation item rather than a clearance gate. Screening key officers and UBOs adds 2–3 weeks; pre-screen against OFAC, OFSI and EU lists at scoping stage, not at filing.
  • Funding paid-up capital from non-own-funds sources. Article 29 prohibits borrowed or pledged funds, and the bank’s source-of-funds due diligence will surface a loan structure and reject the file.
  • Using generic AML templates that don’t reference Kyrgyz statutes. Reviewers expect manuals that cite Law No. 12, Law No. 87 and Resolutions 514, 739 and 823 and integrate with Ranex.
  • Underestimating server-localisation enforcement. Cloud-only foreign architectures fail inspection; Kyrgyz-hosted primary infrastructure is required, with foreign disaster recovery only as backup.
  • Filing before the bank capital-confirmation certificate is in hand, which triggers a deficiency notice that pauses the statutory review clock.

Frequently Asked Questions

What is the difference between AVA and ATOC?

AVA (Virtual Asset Exchange Operator) is the exchange-office category for over-the-counter and bilateral fiat-to-crypto conversion in the operator’s own name, with a KGS 40 million capital floor. ATOC (Virtual Asset Trading Operator) is the full crypto-exchange category for centralised order matching with custody, clearing and listing, with a KGS 300 million floor from 01 July 2026 and six mandatory functional divisions. Most CIS-focused OTC desks are AVA; centralised order-book exchanges are ATOC.

Can a Kyrgyzstan VASP serve EU clients?

A Kyrgyzstan licence grants no EU market access or passporting rights, and MiCA contains no third-country equivalence regime. MiCA Article 61 permits third-country firms to serve EU clients only on the client’s own genuinely unsolicited initiative, and ESMA’s guidelines (from 27 April 2025) read this narrowly: any EU-targeted marketing, EU-language website content or geo-targeted advertising voids it. Operators seeking systematic EU reach need a separate CASP authorisation in an EU member state. See Reverse Solicitation Under MiCA.

Does the Kyrgyz licence expire and need renewal?

No. Article 29 of Law No. 12 grants VASP authorisations on an indefinite basis, with no expiry date and no renewal fee. The licence does carry continuous obligations: monthly operational reports, quarterly IFRS statements, an annual external audit under Resolution No. 823, and ongoing AML/KYT screening through Ranex. The most common cause of supervisory action is failure to meet the monthly reporting cadence, not expiry. The licence is non-transferable.

What AML and KYT tooling must a Kyrgyz VASP use?

The FMRS designated the state system Ranex as the sole approved AML and KYT (know-your-transaction) provider for all Kyrgyz-licensed VASPs in 2025. Kyrgyz VASPs cannot use third-party tools as their primary screening layer; internal tooling can run alongside Ranex but cannot replace it, and Travel Rule transmission, sanctions screening and behavioural monitoring all flow through it.

Does a Kyrgyzstan virtual-asset licence cover tokenised securities or RWA?

There is no dedicated pathway. The regime is focused on exchanges and, increasingly, stablecoin and reserve initiatives; tokenised-asset provisions are still emerging, so a token that is a security would answer to conventional securities law. Where the vehicle is a fund, route via fund licensing.

Is Kyrgyzstan the right home for your licence?

We will tell you straight whether this regime fits your business and your customer base. And where the answer is an EU CASP route instead, we deliver crypto licensing in Lithuania, Cyprus, Malta, Gibraltar, Poland and Switzerland ourselves, end to end, with one accountable team.

Banking & Payments

A company and a licence still need a bank account

Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.

Explore banking & payments →

Tomberg & Partners

Tell us what you need to build.

Speak with our team about formation, licensing, banking, or the operating structure your business needs.

Book a free consultation