Existing crypto firms face shutdown risk
Pakistan’s Virtual Assets Regulatory Authority (PVARA) has set a hard deadline of September 5, 2024, for all crypto companies currently serving customers in the country to register for a license or cease operations. Any firm providing virtual asset services on or before March 5 is considered a transitional entity and must obtain a no-objection certificate (NOC) by the September cutoff. This requirement applies to exchanges, custody providers, broker-dealers, and even mining-related businesses operating within Pakistan’s borders.
The urgency is clear: failing to submit an application by the deadline means companies must immediately stop offering services. PVARA has warned that continuing to operate after September 5 without having applied will be treated as an offense under Section 70 of the Virtual Assets Act 2026. The regulatory authority’s move comes just months after Pakistan’s parliament passed the Virtual Assets Act in March, formally establishing PVARA as the statutory regulator for the sector.
The licensing portal opened after a public consultation held from June 11 to July 2.
PVARA threatens penalties for late registrants
The consequences of missing the registration window are severe. According to decrypt.co, any company that continues operations after September 5 without submitting an application will be in violation of national law and subject to penalties outlined in Section 70 of the new act. For many local and international firms, this presents an immediate compliance challenge: either begin the licensing process now or risk legal action and forced shutdown.
For some operators, this is a stark shift from previous years when oversight was minimal and enforcement inconsistent.
The regulatory framework also introduces a notable contrast: while it opens doors for new entrants via a regulatory sandbox, it simultaneously tightens its grip on existing players with strict deadlines and operational requirements. The headline date is September 5, but the context is messier—firms that miss out may find re-entry difficult as enforcement ramps up.
See Also
What crypto companies must do now
To comply with PVARA’s rules, applicants must first be registered under Pakistan’s Companies Act 2017 and meet minimum paid-up capital requirements—though exact figures have not been specified publicly. Directors and key staff are required to pass “fit and proper” tests, ensuring that only vetted professionals can participate at decision-making levels. Additionally, companies must implement anti-money laundering (AML) protocols and robust cybersecurity measures before they can even apply for an NOC.
Once approved for a no-objection certificate, firms face additional steps: they must register with Pakistan’s Financial Monitoring Unit and incorporate a local subsidiary before submitting their final license application. This multi-stage process underscores how seriously Pakistani authorities are taking oversight of virtual asset service providers (VASPs), especially compared to previous regulatory ambiguity.
Strict rules on customer asset segregation
Under the new regime, licensed providers are required to keep customer holdings strictly segregated from their own assets. This means exchanges and custodians cannot lend out or pledge user funds without obtaining explicit written consent from clients—a measure aimed at preventing misuse of customer assets similar to issues seen in other jurisdictions’ crypto failures.
These requirements extend across all licensed activities covered by PVARA’s framework: exchanges, custody services, broker-dealer functions, lending platforms, derivatives trading desks, asset management firms, token issuers, and mining-related businesses all fall under these same obligations. The scope is broad but the message is consistent—customer protection sits at the heart of Pakistan’s approach.
Cybersecurity and AML controls mandated
Beyond asset segregation, PVARA’s framework mandates comprehensive governance standards—including market conduct rules, operational resilience protocols, cybersecurity defenses, and anti-money laundering/counter-terrorism financing (AML/CFT) controls. These requirements are not optional; failure to comply could result in license revocation or criminal prosecution under Pakistani law.
The rollout follows a public consultation period held between June 11 and July 2—a relatively short window that nonetheless drew input from both domestic stakeholders and international observers. While some see this rapid pace as necessary given Pakistan’s history with unregulated crypto activity, others note that such compressed timelines may challenge smaller startups hoping to enter the market through PVARA’s new licensing portal or regulatory sandbox option.
It remains uncertain how many existing firms will successfully transition into fully licensed entities by the September deadline; however, one thing is clear: Pakistan’s crypto landscape will look very different come autumn 2024.
What the data may reveal next
If existing virtual asset service providers in Pakistan fail to submit their no-objection certificate applications by the September 5 deadline set by PVARA, they must cease operations immediately or risk committing an offense under Section 70 of the Virtual Assets Act 2026; how many firms will comply or exit by that date remains unclear.