RESEARCH: Brunei Cryptocurrency and Digital Asset Sanctions Regulatory Requirements

Executive Summary

Cryptocurrency and digital asset activities in Brunei are subject to the country’s anti-money laundering (AML) and counter-terrorism financing (CFT) regulatory framework, supervised by the Financial Intelligence Unit (FIU) under the Ministry of Finance. Brunei does not maintain an autonomous sanctions list; instead, it implements United Nations (UN) sanctions. Consequently, crypto service providers must comply with UN sanctions and may need a license from the Central Bank of Brunei Darussalam (CIOB) for certain financial activities. As of 2025–2026, no specific licenses for cryptocurrency exchanges have been issued, but entities offering crypto-related services are expected to obtain the relevant financial services licenses. The practical reality involves rigorous AML/KYC checks, continuous transaction monitoring, and adherence to international sanctions, with enforcement primarily through fines and potential criminal prosecution for non-compliance.

Regulatory Framework

Regulatory Bodies

• Financial Intelligence Unit (FIU), Brunei: Oversees AML/CFT compliance and receives reports from obliged entities. Website: https://www.fiu.gov.bn/
• Central Bank of Brunei Darussalam (CIOB): Issues licenses for financial institutions and enforces AML/CFT rules. Website: https://www.ciob.gov.bn/
• Ministry of Finance: Enacts and enforces financial regulations, including sanctions implementation.

Primary Laws

• Cross-Border Transactions (Amendment) Ordinance, 2022 (Section 5): Mandates AML/CFT obligations for entities engaged in cross-border transactions, including those involving virtual assets.
• Money Laundering and Terrorist Financing Act, 2016 (Act 11): Provides the legal basis for AML/CFT enforcement, defining offenses and penalties.

International Standing

• FATF Status: Standard Monitoring (as of June 2025). Brunei is considered compliant with FATF recommendations.
• UN Sanctions: Brunei fully complies with UN Security Council resolutions and implements them domestically.

Licensing Requirements

Entities Requiring Licenses

• Virtual Asset Service Providers (VASPs): Exchanges, wallets, and other services dealing in cryptocurrencies.
• Payment Institutions: Entities facilitating crypto payments.

Capital Requirements

• No specific capital thresholds are stipulated for crypto-related licenses in Brunei’s regulations. The CIOB may impose risk-based capital adequacy requirements.

Application Process

1. Submit an application to the CIOB detailing the nature of the activity, risk management framework, and ownership structure.
2. Provide evidence of compliance with AML/CFT obligations and UN sanctions screening.
3. Pay the prescribed application fee (not quantified in the sources).

Timeline & Structural Requirements

• Processing typically takes 30–90 days, contingent on the completeness of the submission.
• Applicants must demonstrate physical presence in Brunei and appoint a local authorized representative.

Licensing Status (2025–2026)

• No licenses explicitly issued for cryptocurrency exchanges as of the latest data. Entities offering crypto services must seek a general financial services license, which may cover virtual asset activities if risk assessments deem them appropriate.

AML/KYC Requirements

• Customer Due Diligence (CDD): Mandatory for all VASPs, including identity verification, source of wealth, and beneficial ownership identification.
• Enhanced Due Diligence (EDD): Required for high-risk customers, such as politically exposed persons (PEPs) or those from high-risk jurisdictions.
• Transaction Monitoring: Continuous monitoring of crypto transactions for suspicious activity, with thresholds defined by the risk profile of the customer.
• Record Retention: All AML/CFT records must be retained for a minimum of five years.
• Sanctions Screening: Real-time screening against the UN sanctions list and other international watchlists.

Enforcement Actions

• Penalties: Non-compliance can result in fines up to BND 100,000 (approximately USD 74,000) and/or imprisonment for up to five years.
• Case Example: No specific enforcement cases involving crypto are cited in the primary sources; however, general AML violations can lead to enforcement actions by the FIU.

Tax Treatment

• Crypto Gains Taxation: Brunei does not issue specific guidance on the taxation of cryptocurrency gains. Income from crypto activities is generally treated under the Income Tax Ordinance, 2009, but the exact treatment for virtual assets remains ambiguous.
• Capital Gains: No explicit capital gains tax on crypto transactions is mentioned in the sources.
• VAT: No VAT is applied to crypto services, but this may change based on future legislative updates.

Key Gaps & Risks

• Regulatory Ambiguity: The absence of dedicated legislation for cryptocurrencies leaves room for interpretation and potential regulatory arbitrage.
• Sanctions Implementation: While UN sanctions are adhered to, the lack of a domestic sanctions list may complicate enforcement against sanctioned entities.
• Risk-Based Approach: The effectiveness of risk assessments for crypto services depends on the robustness of the underlying AML/CFT frameworks and the expertise of the supervisory bodies.
• International Cooperation: Collaboration with international bodies (e.g., FATF, UN) is crucial for updating sanctions lists and AML/CFT standards in line with global developments.

Sources

• EES
• Guide to Brunei's Sanctions List — Castellum.AI
• Brunei AML & Sanctions Compliance · ANQA Compliance
• Financial Impact of Regulatory Sanctions on French Listed Companies
• Brunei AML & Sanctions Compliance · ANQA Compliance
• EES
• Guide to Brunei's Sanctions List — Castellum.AI