Under the new rules, financial institutions can open accounts for firms that either possess a full license or are in the process of securing one, provided they have received a No Objection Certificate. However, onboarding comes with stringent obligations: banks must independently verify licenses and apply enhanced compliance checks aligned with anti-money laundering and counter-terror financing standards.
The directive also introduces strict operational controls. Banks are required to create segregated client money accounts in Pakistani rupees specifically for crypto-related transactions. These accounts cannot generate interest, accept cash deposits, or be used as collateral—ensuring that customer funds remain isolated and protected.
Additionally, financial institutions are prohibited from mixing client funds with operational balances or engaging in crypto trading using their own capital or customer deposits. Risk monitoring has also been tightened, with banks expected to update their profiling systems to reflect exposure to virtual asset service providers and report suspicious activity to regulators.
This regulatory pivot follows the passage of the Virtual Assets Act, 2026, enacted on March 6, which formally established the oversight authority. The law introduces tough penalties for unlicensed crypto operations, including fines of up to PKR 50 million and prison sentences of up to five years.
Together, these changes signal Pakistan’s transition from outright restriction to controlled adoption—opening the door for institutional crypto growth under a tightly regulated framework.