Timor-Leste Compliance Report

Generated 2026-09-22

Framework In Development

Regulatory Overview

Regulatory Status: Active legislative/regulatory process underway
Key Regulator(s): Ministry of Finance, Central Bank of Timor-Leste, Operating Authority
Primary Legislation: Lack of Specific Regulation is Not the Same as Legality or Full Freedom: While t, such as Law No. 2/2011 on the Prevention and Combat of Money Laundering and Financing of Terrorism, and any subsequent updates, e.g., Law No. 2/2011, Law on the Central Bank of Timor-Leste: Establishes the BCTL's powers and functi, Consult with local legal counsel specializing in financial services law to obtai, Land Law,, The Civil Registry Code was approved as a draft law by the Council of Ministers, Decree-Law No. 19/2012, of April 25, approving the Statute of Judicial Officers,, Law No. 09/2003 governs Immigration and Asylum and is unrelated to financial ser, Decree-Law No. 19/2012, Timor-Leste's existing legal framework addresses citizenship through Decree-Law, Law No. 09/2003, The 2025 General State Budget Law, enacted to support sustainable development, c, REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003, Enactment of Land Law major step for Development « Government of Timor-Leste, 2025 General State Budget Law Enacted: Commitment to Sustainable Development and
Travel Rule: Not adopted
Tax Reporting: Timor-Leste does NOT have a separate capital gains tax.. Generally, gains from the sale of personal assets by individuals are not subject to a specific capital gains tax.. Implication for Crypto: If an individual buys and sells cryptocurrency as a passive investment, it is unlikely to be subject to capital gains tax in Timor-Leste due to the absence of such a tax.. Exception: If an individual or entity is engaged in crypto trading or mining activities that are considered a business activity, then any profits from these activities would be treated as business income and subject to regular income tax.. Income from Crypto-Related Business Activities: If an individual is professionally mining, trading, staking, or providing crypto-related services (e.g., running an exchange, consulting) as a business, the profits would be subject to Personal Income Tax (PIT).

Key Facts

aml Law No. 3/2011 on Prevention and Combat of Money Laundering and Financing of Terrorism (Lei N.º 3/2011 de Prevenção e Combate ao Branqueamento de Capitais e ao Financiamento do Terrorismo): This is the foundational law that establishes the framework for AML/CFT in Timor-Leste. It defines money laundering and terrorist financing offenses, sets out reporting obligations for financial institutions and designated non-financial businesses and professions (DNFBPs), and establishes the Financial Intelligence Unit (FIU). The BCTL is responsible for the overall supervision of financial institutions in Timor-Leste, including ensuring their compliance with AML/CFT requirements. The UIF operates within or in close coordination with the BCTL and is the central national agency responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to law enforcement agencies. While there might not be a separate public website for the UIF, its functions are integral to the BCTL's regulatory mandate. For individuals: Obtain and verify identity using reliable, independent source documents, data, or information (e.g., full legal name, date of birth, nationality, residential address, unique identification number from government-issued ID like passport or national ID card). For legal entities (companies): Obtain and verify the company's name, legal form, proof of existence, powers that regulate and bind the legal person, names of relevant persons holding senior management positions, and identify and verify beneficial owners (those who ultimately own or control more than a certain percentage, typically 25% or 10%). Understanding the Purpose and Intended Nature of the Business Relationship: VASPs must understand why a customer wants to use their services and how they intend to use them. Ongoing Monitoring: Continuously monitor transactions and the business relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes scrutinizing transactions to ensure they are not suspicious.
custody There are no specific licensing requirements for cryptocurrency custodians or digital asset service providers in Timor-Leste. Any entity operating within the financial sector might fall under the general oversight of the Banco Central de Timor-Leste (BCTL), but this would be for traditional financial activities, not specifically for digital asset custody. Segregation of Client Assets Rules: No specific rules mandate the segregation of client digital assets from a custodian's proprietary assets. In traditional financial services, such segregation is a common prudential requirement, but it has not been extended to digital assets through specific legislation. No specific insurance or bonding requirements for cryptocurrency custodians are in place. Traditional financial institutions operating in Timor-Leste might have general insurance requirements, but these would not cover the specific risks associated with digital asset custody. There are no mandates regarding the use of cold storage or specific security protocols for digital assets.
enforcement Issuing Warnings and Advisories: The BCTL has previously issued statements cautioning the public about the risks associated with cryptocurrencies, highlighting their volatile nature, lack of regulatory oversight, and potential for use in illicit activities. These are general advisories rather than enforcement actions against specific entities. Developing Regulatory Frameworks: Efforts are likely underway to understand and potentially regulate digital assets, but these processes often take time and resources. Prioritization: Enforcement efforts in smaller, developing economies often prioritize more traditional forms of financial crime due to limited resources and the nascent stage of crypto adoption.
licensing Lack of Specific Regulation is Not the Same as Legality or Full Freedom: While there are no crypto-specific licenses, any entity operating within Timor-Leste would still be subject to general business laws, tax laws, and potentially, if their activities could be interpreted as traditional financial services, existing financial sector legislation overseen by the Banco Central de Timor-Leste (BCTL). AML/CFT Obligations: Even without specific VASP regulation, Timor-Leste, as a member of the international community, is subject to the recommendations of the Financial Action Task Force (FATF). Its existing Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) laws (such as Law No. 2/2011 on the Prevention and Combat of Money Laundering and Financing of Terrorism, and any subsequent updates) would apply to financial institutions and designated non-financial businesses and professions (DNFBPs). The BCTL and other relevant authorities would expect any entity involved in financial transactions, even those involving virtual assets, to have robust AML/KYC controls in place to prevent illicit activities. No specific licenses are currently required for crypto-specific activities. If a service provider's activities blur the lines with traditional financial services (e.g., holding fiat currency deposits, facilitating fiat-to-fiat transfers through crypto, or providing lending services in fiat backed by crypto), they might inadvertently fall under existing financial services laws and require a license as a financial institution, payment service provider, or money service business from the BCTL. However, for pure crypto-to-crypto activities or non-custodial wallets, there is no direct precedent or requirement. Neither a specific registration nor a licensing regime exists for VASPs. Traditional financial institutions (banks, payment service providers, insurance companies, microfinance institutions) are licensed by the BCTL. Capital Requirements: No specific capital requirements for VASPs as there are no specific licenses. If a business were to seek a traditional financial license (e.g., as a payment service provider), then the BCTL's requirements for that specific license would apply, which include significant capital. AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most critical area. While specific VASP regulations are absent, any business engaging in financial activities, including those involving virtual assets, is strongly advised to implement robust AML/KYC procedures. This includes:
securities Timor-Leste does not have a specific legal framework governing cryptocurrency or digital asset securities as of 2025–2026, and no dedicated crypto legislation has been enacted by the National Parliament. The country's regulatory infrastructure for financial services remains underdeveloped, with the Central Bank of Timor-Leste (BCT) and the Tax Authority of Timor-Leste (ATTL) being the primary authorities with indirect oversight over financial and fiscal matters. No licensing regime exists for cryptocurrency exchanges, custodians, or digital asset service providers, and no entities have been licensed to operate in this space. The practical reality is that crypto activity occurs in a legal vacuum without clear prohibitions or permissions, though the government's limited capacity and incomplete legislation create significant compliance and enforcement risks. Timor-Leste - United States Department of State Timor-Leste's financial and regulatory environment is characterized by incomplete and unclear legislation, inadequate regulatory mechanisms, corruption, insufficient personnel capacity, and deficient infrastructure, as reported by businesses operating in the country. Timor-Leste - United States Department of State The Government of Timor-Leste has been implementing a fiscal and economic reform process to bring its system into compliance with international best practices as it seeks to join the Association of Southeast Asian Nations (ASEAN), though no specific crypto or digital asset legislation has been introduced as part of these reforms. Timor-Leste - United States Department of State The Tax Authority of Timor-Leste (ATTL) is the autonomous agency responsible for tax administration, with its official website at attl.gov.tl, and it is currently focused on implementing Value Added Tax (VAT) as part of tax administration reform, with no mention of virtual asset tax treatment or crypto regulation. Autoridade Tributária Timor-Leste – ATTL Timor-Leste's government, through its autonomous agency, the National Petroleum and Minerals Authority (ANPM), contracts with foreign firms for oil and gas exploration, and the country's regulatory focus remains on petroleum, agriculture, construction, telecommunications, and tourism rather than digital assets or financial technology. Timor-Leste - United States Department of State The Private Investment Law No.14/2011, particularly Article 14, allows foreigners to be granted the right to private property for investment and reinvestment projects, subject to Constitutional limits, but this law does not address digital assets or virtual currency securities. Timor-Leste - United States Department of State Timor-Leste's National Strategic Development Plan, approved by the National Parliament in 2011, focuses on using petroleum revenues to support non-petroleum economic development and becoming a middle-income country by 2030, but it contains no provisions for cryptocurrency or digital asset regulation. Timor-Leste - United States Department of State Timor-Leste is applying for full membership to ASEAN and previously served as President of the Community of Portuguese Speaking Countries from 2014-2016, indicating regional integration efforts, but there is no FATF or Moneyval assessment specifically addressing crypto regulation in Timor-Leste within the provided sources. Timor-Leste - United States Department of State
stablecoin No specific classification for stablecoins. Electronic Money (E-money): If a stablecoin is pegged to a fiat currency (e.g., USD, AUD, or IDR, which are commonly used in Timor-Leste) and primarily functions as a means of payment, representing a claim on the issuer for an equivalent amount of fiat currency, it could be interpreted as a form of electronic money. URL (BCTL Legislation page, usually a PDF linked from here): https://www.bancocentral.tl/pt/publicacoes/legislacao/ (You'd look for "Lei dos Serviços de Pagamento" here). Instrução do BCTL No. 001/2022 – Instituições de Moeda Eletrónica (Electronic Money Institutions): This instruction further details the licensing, operational, and prudential requirements for e-money institutions. URL (BCTL Legislation page): https://www.bancocentral.tl/pt/publicacoes/legislacao/ (Look for "Instrução do BCTL No. 001/2022") Securities: If a stablecoin represents an ownership interest in an underlying asset pool, provides dividend-like payments, or grants other rights typically associated with securities, it might be deemed a security, though Timor-Leste's capital markets are extremely limited. There is no specific securities regulator beyond the BCTL's general oversight of financial stability. No specific reserve requirements for stablecoins. For E-money Issuers: If a stablecoin were classified as e-money, issuers would be subject to the reserve and prudential requirements specified in the Instrução do BCTL No. 001/2022 – Instituições de Moeda Eletrónica and potentially other BCTL directives. These typically include:
status Timor-Leste has no specific legal framework governing cryptocurrencies, digital assets, or virtual asset service providers as of 2025–2026, based on all available official government sources. Government of Timor-Leste The existing regulatory landscape addresses land ownership, civil registration, judicial officers, immigration, citizenship, and the labour code, with no mention of virtual assets or crypto regulation in any official government publication. Enactment of Land Law major step for Development « Government of Timor-Leste There is no designated regulator, no licensing regime, and no registration obligation for cryptocurrency businesses in Timor-Leste. Meeting of the Council of Ministers on February 4th 2026 « Government of Timor-Leste The practical reality is that cryptocurrency operates in a legal vacuum, with no official recognition, prohibition, or guidance from Timorese authorities. History « Government of Timor-Leste The Central Bank of Timor-Leste (Banco Central de Timor-Leste, BCTL) is the principal financial regulatory authority, but no official source confirms any mandate over virtual assets or digital currencies. Government of Timor-Leste The primary laws enacted in Timor-Leste address immovable property ownership through the Special Regime for the Ownership of Immovable Property, enacted June 1, 2017, commonly called the "Land Law," which was approved by the National Parliament on February 6, 2017. Enactment of Land Law major step for Development « Government of Timor-Leste The Civil Registry Code was approved as a draft law by the Council of Ministers on February 4, 2026, governing registration of civil facts—it contains no provisions relating to digital assets. Meeting of the Council of Ministers on February 4th 2026 « Government of Timor-Leste Decree-Law No. 19/2012, of April 25, approving the Statute of Judicial Officers, was amended in 2026 to align with justice sector reforms—it contains no digital asset provisions. Meeting of the Council of Ministers on February 4th 2026 « Government of Timor-Leste
tax Generally, gains from the sale of personal assets by individuals are not subject to a specific capital gains tax. Implication for Crypto: If an individual buys and sells cryptocurrency as a passive investment, it is unlikely to be subject to capital gains tax in Timor-Leste due to the absence of such a tax. Exception: If an individual or entity is engaged in crypto trading or mining activities that are considered a business activity, then any profits from these activities would be treated as business income and subject to regular income tax. Income from Crypto-Related Business Activities: If an individual is professionally mining, trading, staking, or providing crypto-related services (e.g., running an exchange, consulting) as a business, the profits would be subject to Personal Income Tax (PIT). PIT Rates: Timor-Leste's PIT is generally structured with a simplified flat rate for most residents. As of recent information, a common rate for employment income and certain business incomes is 10%. Higher income thresholds may have different rates or additional levies, but for most individuals, the 10% rate is applicable for business income. Income from Mining/Staking Rewards: If an individual mines or stakes cryptocurrency and receives rewards, these could be considered taxable income at the time of receipt (based on market value) if the activity is considered a business or a source of regular income. Salaries/Wages Paid in Crypto: If an employer pays an employee in cryptocurrency, the market value of the crypto at the time of payment would be considered taxable income for the employee, subject to PIT. Airdrops/Forks: The tax treatment of Airdrops or Forks is undefined. If they are considered a form of income, they could potentially be taxable at their market value upon receipt, especially if related to a business activity.
travel rule There is no dedicated cryptocurrency or digital asset law in Timor-Leste as of 2025–2026, and no authority has been designated to implement FATF-style travel-rule requirements for virtual asset service providers (VASPs). The primary AML/CFT framework is established under Law No. 17/2011 (Anti-Money Laundering and Combating the Financing of Terrorism), which creates the Financial Intelligence Unit (FIU) and sets obligations for financial institutions—but this law predates specific virtual asset provisions and contains no travel-rule requirements for VASPs. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003 [Note: Immigration and Asylum Act cited only for context; it does not govern AML/CFT.] The FIU is established under Law No. 17/2011, Article 30, not the Immigration and Asylum Act. As of the 2023 APG Mutual Evaluation Report, the FIU has not issued specific guidance on virtual assets or travel-rule compliance. Timor-Leste Travel Advisory | Travel.State.gov The practical reality is that crypto businesses operate in a legal vacuum: there is no regulator with explicit VASP competence, no registration pathway, and no enforcement precedent specific to digital assets. Timor-Leste Travel Advice & Safety | Smartraveller Businesses considering operations in Timor-Leste face significant legal uncertainty regarding travel-rule compliance, as the concept has not been incorporated into any domestic statute or regulation. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC The Central Bank of Timor-Leste (Banco Central de Timor-Leste, BCTL) is the monetary authority and financial regulator, established under Law No. 5/2011 (Central Bank Law). Its mandate includes licensing and supervising banks, payment institutions, and other financial institutions under the Financial Sector Legal Framework (Law No. 13/2019). No legislation grants it explicit authority over cryptocurrency or digital asset businesses. Timor-Leste International Travel Information The Ministry of Finance oversees fiscal policy and financial sector matters under the Financial Sector Legal Framework (Law No. 13/2019) and relevant decree-laws, but has not issued any regulations specific to virtual assets or digital asset service providers. Timor-Leste Travel Advisory | Travel.State.gov The Financial Intelligence Unit (FIU) is established as an autonomous body under Law No. 17/2011, Article 30. Its mandate covers receiving, analyzing, and disseminating suspicious transaction reports (STRs) from reporting entities defined in the AML/CFT Law. As of the 2023 APG Mutual Evaluation Report, the FIU has not issued specific guidance on virtual assets or travel-rule obligations. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003 [Note: Immigration and Asylum Act cited only for historical context; FIU is established under Law 17/2011.] No single authority has been publicly designated to supervise VASPs for AML/CFT purposes or to implement the FATF Travel Rule (Recommendation 16) as applied to virtual assets. The 2023 APG Mutual Evaluation Report assesses Timor-Leste's compliance with FATF Recommendation 15 (virtual assets) as part of its mutual evaluation. Timor-Leste Travel Advice & Safety | Smartraveller

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-06. View full profile