New Zealand Compliance Report

Generated 2026-09-22

Comprehensive Framework

Regulatory Overview

Regulatory Status: Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s): Bank of New Zealand Act, Financial Markets Authority
Primary Legislation: AML/CFT Act 2009: https://www.legislation.govt.nz/act/public/2009/0035/latest/DL, Financial Service Providers (Registration and Dispute Resolution) Act 2008: http, There are no specific minimum capital requirements under the AML/CFT Act for VAS, Mandatory and comprehensive for all reporting entities under the AML/CFT Act. Th, Companies Act 1993: https://www.legislation.govt.nz/act/public/1993/0105/latest/, DIA AML/CFT Act guidance., AML/CFT Act, The AML/CFT Act is administered by DIA, which maintains a list of reporting enti, Reporting entities under the AML/CFT Act must enroll with DIA and implement a co, Under the AML/CFT Act, reporting entities must conduct customer due diligence (C, PEP screening is mandated by the AML/CFT Act, requiring reporting entities to ha
Travel Rule: Adopted — Threshold: $2
Tax Reporting: Intention: Was the crypto acquired with the intention of resale? If so, any profit is likely taxable income. Holding for long-term investment (with no intention to deal) may result in capital gains, but this is rare and difficult to prove for highly volatile assets like crypto, especially if there's a pattern of buying and selling.. Frequency and Volume: Regular, high-volume trading activities are strong indicators of being "in the business of dealing" or engaging in a "scheme for profit," making gains taxable.. Organisation and System: If the activity is organised and systematic, similar to a business, it points towards taxable income.. Nature of the Asset: While not definitive, the inherent speculative nature of many cryptocurrencies often leads to them being treated as assets held for profit-making schemes.. Taxable Event: When you dispose of cryptocurrency (sell it for fiat, trade it for another crypto, or use it to buy goods/services), it's a taxable event.

Key Facts

aml Anti-Money Laundering and Countering Financing of Terrorism Act 2009: https://www.legislation.govt.nz/act/public/2009/0035/latest/DLM2140700.html Identity Verification Code of Practice 2013 (or current version): Issued by the supervisors, this code provides practical guidance on how to meet customer identity verification requirements. Exchange virtual assets for fiat currency (and vice versa). Exchange one form of virtual asset for another. Provide custodial services for virtual assets. Participate in and provide financial services related to an issuer's offer and/or sale of a virtual asset. Conduct a comprehensive risk assessment: This identifies and assesses the money laundering and terrorism financing risks specific to their business, customers, products, services, delivery channels, and jurisdictions they operate in. Risks associated with the inherent characteristics of virtual assets (e.g., pseudo-anonymity, speed of transfer, global reach) must be specifically addressed. Establish and maintain an AML/CFT Programme: This is a documented programme that outlines the policies, procedures, and controls the VASP has in place to mitigate the risks identified in their risk assessment. It must include measures to:
enforcement Violation Type: Significant breaches of the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act), including failures in customer due diligence, risk assessments, suspicious transaction reporting, and compliance programme. Penalty Amount: NZD $2.3 million. Outcome: Coinstash admitted to the breaches and agreed to pay the penalty. The DIA noted this was the largest financial penalty issued under the AML/CFT Act for a single infringement notice. Entity Targeted: Dasset Limited (now in liquidation). Violation Type: Significant breaches of the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act), including failures in customer due diligence, risk assessments, record-keeping, and the overall compliance programme. Penalty Amount: NZD $1 million. Outcome: Dasset admitted to the breaches and agreed to pay the penalty. The company subsequently went into liquidation in October 2023, though the DIA noted the penalty was not the direct cause. Entity Targeted: James Malcolm Allan (individual). Violation Type: Operating an unregistered financial service provider, making misleading representations about financial products (including crypto-assets), and breaches of the Fair Trading Act 1986 and the Financial Service Providers (Registration and Dispute Resolution) Act 2008. Allan had been promoting investments via social media, purporting to offer high returns from trading shares and crypto-assets. Penalty Amount: Permanent ban from providing financial services and from acting as a director or manager of any financial service provider. A pecuniary penalty of NZD $50,000 was also ordered. Outcome: The FMA successfully obtained orders from the High Court against Allan, resulting in the ban and penalty. This was a significant action against an individual promoting crypto-related investments without proper registration or disclosure. Outcome: Coinstash admitted to the breaches and agreed to pay the penalty. The DIA noted this was the largest financial penalty issued under the AML/CFT Act for a single infringement notice. Outcome: Dasset admitted to the breaches and agreed to pay the penalty. The company subsequently went into liquidation in October 2023, though the DIA noted the penalty was not the direct cause. Outcome: The FMA successfully obtained orders from the High Court against Allan, resulting in the ban and penalty. This was a significant action against an individual promoting crypto-related investments without proper registration or disclosure.
general Department of Internal Affairs (DIA) Role: The DIA supervises a wide range of reporting entities, including those involved in virtual assets, trust and company service providers, real estate agents, accountants, and lawyers. They ensure compliance with the AML/CFT Act and Regulations through supervision, monitoring, and enforcement. Role: While the DIA supervises compliance, the Financial Intelligence Unit (FIU) within the New Zealand Police is the central agency responsible for receiving, analysing, and disseminating suspicious transaction reports (STRs) and prescribed transaction reports (PTRs) from all reporting entities. Conduct Customer Due Diligence (CDD): This includes identifying and verifying the identity of customers and beneficial owners. As part of this, VASPs must screen customers against relevant sanctions lists. Risk Assessment: Develop and maintain a comprehensive risk assessment that identifies and assesses the money laundering and terrorism financing risks, including sanctions risks, that the VASP may reasonably expect to face. AML/CFT Programme: Implement an AML/CFT programme that sets out the policies, procedures, and controls to detect, deter, and mitigate these risks. This programme must detail how sanctions screening is conducted. Ongoing Monitoring: Continuously monitor transactions and customer relationships to detect suspicious activity and ensure ongoing compliance with sanctions obligations. This requires regular (e.g., daily) screening against updated sanctions lists. Reporting Suspicious Activities: If a VASP identifies a customer or transaction linked to a sanctioned entity, or suspects an attempt to evade sanctions, they must file a Suspicious Activity Report (SAR) with the FIU.
licensing Department of Internal Affairs (DIA): The primary supervisor for most VASPs under the AML/CFT Act 2009. This includes businesses involved in exchanging, transferring, holding, or safekeeping virtual assets. Financial Markets Authority (FMA): Regulates financial markets, financial service providers (FSPs), and financial products. If a VA business offers services that fall under existing financial product definitions (e.g., derivatives, managed investment schemes, investment advice related to VAs), the FMA's licensing and oversight may be triggered. New Zealand Companies Office: Administers company registration. AML/CFT Registration (DIA): Most crypto businesses, including exchanges, custody providers, and payment processors dealing with VAs, are categorised as "reporting entities" under the AML/CFT Act. This requires them to register with the DIA as a reporting entity and comply with comprehensive AML/CFT obligations. This is not a "license" in the traditional sense of permitting operation, but a mandatory registration for AML/CFT compliance. Financial Service Provider (FSP) Licensing (FMA): If a VASP provides services that meet the definition of a "financial service" under the Financial Service Providers (Registration and Dispute Resolution) Act 2008 (FSP Act) – for example, giving financial advice, operating a managed investment scheme involving VAs, or dealing in financial products like VA derivatives – then they will need to license with the FMA. This involves more stringent requirements than just AML/CFT registration. Primary Requirement: AML/CFT Reporting Entity Registration (DIA) Businesses that exchange virtual assets for fiat currency, other virtual assets, or facilitate such exchanges are deemed "reporting entities" under the AML/CFT Act. This includes operating a trading platform. AML/CFT Act 2009: https://www.legislation.govt.nz/act/public/2009/0035/latest/DLM2140748.html
sanctions United Nations Security Council (UNSC) Sanctions: New Zealand is a member of the UN and is legally bound to implement UNSC resolutions under the United Nations Act 1946 and the Terrorism Suppression Act 2002. These resolutions mandate sanctions against certain individuals, entities, and countries. Autonomous Sanctions: New Zealand has the power to impose its own sanctions, independent of UN mandates, under the Autonomous Sanctions Act 2021. This allows NZ to respond to serious international matters that threaten peace and security. Directly Binding: UN sanctions are directly implemented into New Zealand law via the United Nations Act 1946 and the Terrorism Suppression Act 2002. Obligation for VASPs: VASPs are legally required to comply with all UN sanctions. This includes: Asset Freezes: Immediately freezing the assets of individuals or entities designated under UN sanctions. This explicitly includes virtual assets. Prohibition on Funding: Not making funds or economic resources available, directly or indirectly, to designated individuals or entities. Reporting: Reporting any frozen assets or suspicious transactions involving sanctioned parties to the New Zealand Financial Intelligence Unit (FIU) and other relevant authorities (e.g., Police, Department of Internal Affairs - DIA). Designated Entities & Individuals: The Ministry of Foreign Affairs and Trade (MFAT) publishes the official list of individuals and entities designated under UN sanctions that apply in New Zealand.
securities 2025 — The FMA released updated guidance on the classification of digital assets as securities, reinforcing that tokens offering a right to profit or sharing in enterprise operations are deemed securities under SR 2009. 2025 — New licensing requirements for crypto‑exchanges were introduced, mandating registration with the FMA and adherence to AML/CFT obligations. Exchanges must apply for an “FMA licence” (License Type: Crypto‑Exchange) and meet capital adequacy thresholds of NZD 500,000. 2026 — On 1 July 2026, the DIA assumed sole responsibility for New Zealand’s AML/CFT regime from the RBNZ, consolidating oversight under a single authority (Source: AML/CFT Regulation). 2026 — The Financial Market Infrastructures Act 2021 remains the cornerstone for overseeing designated pure payment systems by the RBNZ and joint supervision of other FMIs by the RBNZ and FMA (Source: How we oversee FMI). 2025 — The FMA published a comprehensive licensing framework for financial institutions offering digital asset services, detailing registration processes and compliance obligations (Source: Financial institution licensing and Licensing FAQs). 2025 — Clearstream outlined the withholding tax regime for New Zealand debt securities, specifying a standard 15% NRWT rate for non‑resident beneficial owners and exemptions for Kauri Bonds (Source: Debt securities – rates, eligibility, availability of relief etc.). New Zealand Government Securities Overview New Zealand debt securities statistics
status Cryptocurrency and digital assets are legal in New Zealand, but they are not recognized as legal tender; they are treated as property for tax purposes and as financial products in certain contexts. The primary regulators are the Financial Markets Authority (FMA) for financial market conduct and the Department of Internal Affairs (DIA) as the sole Anti-Money Laundering (AML) supervisor from 1 July 2026, with the Reserve Bank of New Zealand (RBNZ) having previously co-supervised AML/CFT obligations. There is no dedicated "crypto license" regime; instead, businesses dealing in digital assets must comply with the Anti-Money Laundering and Countering Financing of Terrorism Act (AML/CFT Act) as reporting entities, and may require a financial service provider license under the Financial Markets Conduct Act for certain activities. As of the information available, no entities have been granted a specific cryptocurrency license because no such bespoke licensing regime exists; compliance is achieved through registration as reporting entities under AML/CFT law. The practical reality is that crypto businesses can operate, but they face significant AML/CFT compliance burdens, and the regulatory environment is evolving with DIA's consolidation of supervisory authority from July 2026. The Financial Markets Authority (FMA) is New Zealand's financial markets regulator, responsible for enforcing financial market conduct laws and overseeing financial service providers, including those dealing in digital assets where they fall within the definition of financial products. Financial Markets Authority The Department of Internal Affairs (DIA) is New Zealand's sole Anti-Money Laundering supervisor for all reporting entities under the Anti-Money Laundering and Countering Financing of Terrorism Act from 1 July 2026, consolidating AML/CFT supervision under a single authority. Statement on the Kiwi Access Card | Financial Markets Authority The primary legislation governing AML/CFT compliance is the Anti-Money Laundering and Countering Financing of Terrorism Act (AML/CFT Act), which requires reporting entities to implement customer due diligence, record-keeping, and suspicious transaction reporting. Statement on the Kiwi Access Card | Financial Markets Authority
tax Intention: Was the crypto acquired with the intention of resale? If so, any profit is likely taxable income. Holding for long-term investment (with no intention to deal) may result in capital gains, but this is rare and difficult to prove for highly volatile assets like crypto, especially if there's a pattern of buying and selling. Frequency and Volume: Regular, high-volume trading activities are strong indicators of being "in the business of dealing" or engaging in a "scheme for profit," making gains taxable. Organisation and System: If the activity is organised and systematic, similar to a business, it points towards taxable income. Nature of the Asset: While not definitive, the inherent speculative nature of many cryptocurrencies often leads to them being treated as assets held for profit-making schemes. Taxable Event: When you dispose of cryptocurrency (sell it for fiat, trade it for another crypto, or use it to buy goods/services), it's a taxable event. Income Treatment: If you acquired the crypto with an intention to sell it for a profit, or if your activities constitute a business of dealing, any gain is taxable income. This includes short-term speculation, day trading, and most active trading strategies. Cost Base: The cost base of the crypto (purchase price + transaction fees) is deducted from the sale price to determine the gain or loss. Methodologies: IRD prefers the First-In, First-Out (FIFO) method for calculating the cost of crypto sold. They also accept Weighted Average Cost (WAC) for fungible tokens. Specific Identification (matching specific purchased tokens to specific sales) can be used if records are robust. Last-In, First-Out (LIFO) is generally not accepted.
travel rule Cryptocurrency and virtual asset service providers are legal in New Zealand, but the country has not implemented a bespoke licensing regime specifically for crypto; instead, virtual asset activities fall under the broader Anti-Money Laundering and Countering Financing of Terrorism (AML/CFT) Act 2009, which applies to "reporting entities" rather than separately licensed crypto firms. AML/CFT | Financial Markets Authority The primary regulator for AML/CFT compliance—which includes travel-rule obligations—is the Department of Internal Affairs (DIA), which, from 1 July 2026, is the sole supervisor of all reporting entities under the AML/CFT Act, replacing the previous multi-agency supervisory model that included the Reserve Bank of New Zealand (RBNZ) and the Financial Markets Authority (FMA). AML-CFT Homepage - dia.govt.nz There is no separate "crypto license" in New Zealand; however, businesses providing virtual asset services must register as reporting entities with the DIA under the AML/CFT Act 2009 and comply with the full suite of obligations, including the travel rule (customer due diligence, wire transfer information requirements) as set out in the Act. Anti-money laundering and countering financing of terrorism - Reserve Bank of New Zealand As of 2025–2026, no entity has been granted a crypto-specific license because such a license does not exist; instead, the DIA registers reporting entities across sectors, and zero entities have been separately "licensed" for crypto under any bespoke regime. AML/CFT - Reporting Entities | Financial Markets Authority The practical reality is that New Zealand is transitioning to a single-supervisor model, with DIA issuing comprehensive guidance in July 2026, but as of 2025, crypto firms are expected to self-assess their reporting entity status and comply with the AML/CFT framework, including travel-rule obligations, without a dedicated crypto-industry-specific rulebook. New Era for AML/CFT regulation as DIA Launches Comprehensive Guidance Suite (1 July 2026) The primary law governing digital asset compliance in New Zealand, including travel-rule obligations, is the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (the AML/CFT Act), which applies to all "reporting entities" and establishes the framework for customer due diligence, record keeping, and reporting obligations relevant to virtual asset transfers. AML/CFT legislation - Reserve Bank of New Zealand The AML/CFT Act 2009 has been amended over time, including through the Anti-Money Laundering and Countering Financing of Terrorism (Amendments) Act 2023, which expanded the scope of the regime, and the regime remains operational under the same Act. AML / CFT Anti-money laundering and countering financing of terrorism Amended The Department of Internal Affairs (DIA) (Te Tari Taiwhenua) is the sole AML/CFT supervisor for all reporting entities from 1 July 2026, previously having supervised only some sectors (such as gambling and non-financial businesses), and the DIA maintains an official website for its AML/CFT functions. AML-CFT Homepage - dia.govt.nz

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-06. View full profile