Labuan (Malaysia) Compliance Report

Generated 2026-09-22

Partially Regulated

Regulatory Overview

Regulatory Status: Some rules exist but significant gaps; draft legislation or limited guidance
Key Regulator(s): Labuan Financial Services Authority, United Nations Security Council
Primary Legislation: Labuan Financial Services and Securities Act 2010 (LFSSA 2010), However, general principles of consumer protection, contractual law, and transpa, Labuan Islamic Financial Services and Securities Act 2010 (LIFSSA 2010), The focus of Labuan FSA's regulation is on the service providers (exchanges, bro, Law No. 394
Travel Rule: Adopted — Threshold: Implemented
Tax Reporting: General Rule (Malaysia & Labuan): Malaysia does not impose a comprehensive Capital Gains Tax on the disposal of shares, securities, or most other capital assets, except for Real Property Gains Tax (RPGT) on the disposal of real property and shares in Real Property Companies (RPCs).. If cryptocurrency is held purely as a personal investment and disposed of for profit, this profit is generally not subject to capital gains tax in Malaysia (and by extension, Labuan, given the absence of a specific Labuan CGT regime).. However, if the trading of cryptocurrency is deemed to be a business activity (e.g., frequent, organized, with a view to generating regular profits, employing capital and resources), then the profits are considered income and subject to income tax (see below). The distinction between a "capital gain" and "trading income" is a matter of facts and circumstances, often determined by "badges of trade" principles.. Labuan Business Activity Tax Act 1990 (LBATA):. If a Labuan entity carries out activities related to cryptocurrency (e.g., trading, mining, operating an exchange, providing digital asset services) and these activities are deemed a "Labuan business activity," the profits derived from such activities are subject to tax under LBATA.

Key Facts

aml Labuan Financial Services Authority (Labuan FSA) Role: Licenses and regulates all financial services entities in Labuan IBFC, including VASPs. It issues specific guidelines and policies that licensees must adhere to. Bank Negara Malaysia (BNM) - Financial Intelligence Unit (FIU) Role: While Labuan FSA is the primary regulator, BNM's FIU is the body to which suspicious transaction reports (STRs) are submitted. It acts as Malaysia's central agency for receiving, analysing, and disseminating financial intelligence. Website: https://www.bnm.gov.my/financial-intelligence-and-enforcement (for information on FIU and AML/CFT) Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001): This is the cornerstone legislation. It imposes obligations on reporting institutions (which include VASPs) to detect, deter, and report suspicious transactions, and to implement robust AML/CFT measures, including sanctions screening. Description: This is the overarching national legislation in Malaysia that provides the legal framework for combating money laundering and terrorism financing. It defines "reporting institutions" (which include VASPs) and outlines their obligations, including CDD, record-keeping, and STRs. Applicability: Applies to all financial institutions in Malaysia, including those operating within Labuan.
custody Labuan Financial Services and Securities Act 2010 (LFSSA 2010) Labuan Islamic Financial Services and Securities Act 2010 (LIFSSA 2010) Guidelines on Digital Asset Business (LFSA/GL/2020-002, last updated January 2023) Entity Type: Must be incorporated or registered as a Labuan company under the Labuan Companies Act 1990. Physical Presence: Must have a substantive presence in Labuan. Capital Requirements: Maintain adequate paid-up capital and working capital, as determined by LFSA based on the nature, scale, and complexity of the business (Section 4.1.3 & 5.1). Fit and Proper Criteria: Directors, controllers, and key management personnel must meet LFSA's "fit and proper" criteria (Section 4.1.5 & 4.1.6). Business Plan: Submission of a comprehensive business plan detailing services offered, target market, operational procedures, risk management framework, and technology infrastructure.
enforcement Legal Basis: Implemented through the Financial Sanctions Act 2009 and specific Financial Sanctions Orders issued by the Minister of Finance. Legal Basis: While OFAC (U.S.) and EU sanctions are not directly enforceable as Malaysian law, compliance is critical and practically mandatory for Labuan VASPs due to several factors:
licensing Labuan Financial Services and Securities Act 2010 (LFSSA 2010) Guidance Note on the Offering and Trading of Digital Assets in Labuan IBFC (the DA Guidance Note): This is the most crucial document, specifically outlining the regulatory requirements for digital asset businesses. It was initially issued in 2019 and may undergo updates. Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA 2001): The national AML/CFT law applicable to Labuan entities. LFSA's Guidelines on AML/CFT: Specific guidelines issued by LFSA to complement AMLA 2001. Required License: A Labuan company intending to operate a digital asset exchange (i.e., operating a trading platform, brokering, dealing, or acting as an intermediary for digital assets) must obtain a license as a Labuan Digital Asset Exchange or generally fall under the scope of a Labuan Digital Asset Business as defined in the DA Guidance Note. Operate a platform for the primary and secondary trading of digital assets. Facilitate the matching of buy and sell orders. Provide related services like listing new digital assets.
securities Lebanon has no specific statutory framework for cryptocurrency or virtual assets as securities; the Capital Markets Authority (CMA), established under Capital Markets Law No. 161/2011, regulates "financial instruments" and securities business but has not issued any dedicated crypto-asset regulations as of 2025–2026. Faq - CMA The CMA is the sole regulator for capital markets activities, licensing financial intermediation institutions across five activity categories (advising, dealing, managing, arranging, custody), with capital requirements ranging from 150 million to 6 billion Lebanese Pounds depending on the licensed activity. Faq - CMA Licensing is possible for securities-related businesses, and the CMA has actively revoked licenses (e.g., Royal Financials in September 2021) and warned against unlicensed digital platforms in February 2026, but no entity has been licensed specifically to deal in cryptocurrency as a virtual asset class. Home - CMA The CMA has warned it will take legal, administrative, and judicial measures against any person, entity, or digital platform engaging in or promoting investment activities in Lebanon in violation of applicable laws, signaling active enforcement intent in the digital asset space. Home - CMA The Capital Markets Authority (CMA) is an independent and autonomous regulatory body established by the Capital Markets Law No. 161/2011, ratified by the Lebanese Parliament on August 17, 2011; it is a legal entity of public law with administrative and financial autonomy. Faq - CMA The CMA's two main objectives are: (I) promoting and developing the Lebanese Capital Markets, and (II) ensuring the protection of savings invested in Financial Instruments, particularly by protecting investors from fraudulent activities through issuance of regulations aligned with international best practices and proper control and audit of all institutions dealing with financial instruments, per Article 5 of Law No. 161/2011. Faq - CMA The CMA is not part of the Banque du Liban (BDL), but the Chairman of the CMA Board is the Governor of Banque du Liban; this does not affect CMA independence given its independent structure, per Article 4 of Law No. 161/2011. Faq - CMA The CMA Board is composed of seven members chaired by the Governor of Banque du Liban, including three full-time executive board members who are experts in banking, capital markets, and financial affairs, and three part-time members representing ministries and departments directly involved in CMA work: the Director General of the Ministry of Finance, the Director General of the Ministry of Economy and Trade, and the Chairman of the Banking Control Commission, per Article 6 of Law No. 161/2011. Faq - CMA
status The Lebanese regulatory framework for cryptocurrencies and digital assets is currently underdeveloped, posing significant risks to market participants. While there are no specific licenses required for operating in the crypto space, existing financial regulations may indirectly apply. Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements from banking laws could be extended to cryptocurrency exchanges through regulatory guidance or legislation. Enforcement actions against unlicensed crypto activities are limited but could increase if the government issues stricter directives. The tax treatment of cryptocurrencies in Lebanon remains ambiguous, with no clear guidelines on capital gains, income tax, or VAT implications. Key gaps include the absence of explicit crypto regulations, unclear AML/KYC obligations, and undefined tax liabilities, creating substantial regulatory uncertainty. Lebanon's financial regulatory authority, the Central Bank of Lebanon (CBL), oversees banking institutions but has not issued specific rules targeting cryptocurrencies. Existing laws focus on traditional financial services; digital asset activities operate in a legal gray area until formal regulations are enacted.
tax General Rule (Malaysia & Labuan): Malaysia does not impose a comprehensive Capital Gains Tax on the disposal of shares, securities, or most other capital assets, except for Real Property Gains Tax (RPGT) on the disposal of real property and shares in Real Property Companies (RPCs). If cryptocurrency is held purely as a personal investment and disposed of for profit, this profit is generally not subject to capital gains tax in Malaysia (and by extension, Labuan, given the absence of a specific Labuan CGT regime). However, if the trading of cryptocurrency is deemed to be a business activity (e.g., frequent, organized, with a view to generating regular profits, employing capital and resources), then the profits are considered income and subject to income tax (see below). The distinction between a "capital gain" and "trading income" is a matter of facts and circumstances, often determined by "badges of trade" principles. If a Labuan entity carries out activities related to cryptocurrency (e.g., trading, mining, operating an exchange, providing digital asset services) and these activities are deemed a "Labuan business activity," the profits derived from such activities are subject to tax under LBATA. 3% of net audited profit; OR A fixed sum of RM20,000 (Ringgit Malaysia Twenty Thousand) if the Labuan entity meets the substance requirements (e.g., adequate full-time employees, annual operating expenditure) and elects this option. Substance Requirements: For a Labuan entity to qualify for the preferential 3% tax rate or fixed sum, it must comply with substance requirements set by the Labuan Financial Services Authority (LFSA) under the Labuan Business Activity Tax (Requirements for Labuan Business Activity) Regulations 2018. This includes having an adequate number of full-time employees in Labuan and an adequate amount of annual operating expenditure in Labuan, proportionate to the level of activity. Scope: This applies to income from active trading, mining operations, staking rewards, fees from exchange services, etc., if conducted as a Labuan business.
travel rule Lebanon has no specific legal framework governing cryptocurrency, digital assets, or travel-rule compliance requirements as of 2025–2026, and no dedicated crypto-asset legislation has been enacted Lebanon Travel Advisory | Travel.State.gov The Central Bank of Lebanon (Banque du Liban) has issued circulars addressing virtual currencies but has not established a comprehensive licensing or registration regime for Virtual Asset Service Providers (VASPs) Lebanon Travel Advisory - U.S. Department of State No travel-rule implementation exists in Lebanon, and no entities have been licensed to operate as cryptocurrency exchanges or custodians under any specific crypto regulatory framework Lebanon Travel Restrictions - state.gov The country faces severe economic and political instability, with the conflict situation impacting all financial sector operations and regulatory capacity Lebanon travel advice - GOV.UK Practical reality: businesses operating in the crypto space in Lebanon do so without clear regulatory authorization, facing significant legal uncertainty and operational risks related to the broader security situation Lebanon Travel Advisory | Travel.State.gov The Banque du Liban (BDL), Lebanon's central bank, serves as the primary financial regulatory authority, but has not established a dedicated crypto-asset regulatory division or published specific travel-rule guidance Lebanon Travel Advisory - U.S. Department of State The Banking Control Commission of Lebanon (BCCL) operates under the central bank and oversees financial institutions, but no crypto-specific oversight mandate has been formally assigned to this body Lebanon Travel Advisory | Travel.State.gov Lebanon's Financial Intelligence Unit (FIU) — the Special Investigation Commission (SIC) — is the designated authority for anti-money laundering matters, though its crypto-related jurisdiction remains undefined Lebanon Travel Advisory - U.S. Department of State

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-06. View full profile