Pakistan has moved from talking about crypto regulation to enforcing it. On August 23, 2026, the Pakistan Virtual Assets Regulatory Authority (PVARA) switched on its licensing portal, starting a hard countdown for every crypto firm already doing business in the country: register by September 5, or stop operating.
Pakistan has taken an important step toward formalising its virtual asset ecosystem.
Following the enactment of the Virtual Assets Act, 2026, the State Bank of Pakistan has issued BPRD Circular Letter No. 10 of 2026, enabling regulated entities to open and maintain bank accounts… pic.twitter.com/cuUhwSiCfS
— Pakistan Virtual Assets Regulatory Authority (@PakistanVARA) April 14, 2026
The Sept. 5 deadline, explained
The rule applies to what PVARA calls “transitional persons” — companies that were providing virtual asset services in Pakistan on or before March 5, 2026, the date the Virtual Assets Act, 2026 formally took effect. Those firms now have until September 5 to file for a No Objection Certificate (NOC) through the new portal.
Miss the deadline, and it’s not just a lapsed registration. PVARA has cited Section 70 of the Virtual Assets Act, 2026, which makes operating without a filed application a criminal offense. For any exchange, custodian, or broker with Pakistani users, that’s a real legal cliff, not a formality.
The portal also opened two other doors: applications for a full VASP license, and placement into a regulatory sandbox for firms that want to trial new products under supervision before going live.
PVARA Chairman Bilal bin Saqib laid out the reasoning in a televised address on August 23, framing the regime as investor protection first — pulling the market under the rule of law — but also as an economic opening. He argued that regulated stablecoins and tokenization could create new channels for export financing, remittances, and credit access for smaller Pakistani businesses.
11 license categories, six hard requirements
The Virtual Assets Act, 2026 doesn’t treat “crypto” as one business. It carves the industry into 11 distinct license categories: exchanges, custody, broker-dealer services, advisory services, lending and borrowing, derivatives, discretionary asset management, transfer and settlement, mining infrastructure, asset-pegged token issuance, and single fiat-pegged token issuance. Firms can apply for more than one category at once if their business spans several.
Whatever category a firm falls into, six requirements apply across the board:
Incorporation in Pakistan under the Companies Act, 2017 — meaning offshore exchanges serving Pakistani users now need a real local subsidiary, not just a website. Minimum paid-up capital, with thresholds set per license type. A fit-and-proper test for directors and key personnel. Documented AML systems covering customer due diligence, transaction monitoring, and suspicious activity reporting. Formal cybersecurity controls. And a business continuity plan.
Once a firm clears the NOC stage, it must register with Pakistan’s Financial Monitoring Unit and stand up its local subsidiary before it can even submit a full license application. Binance and HTX have already gone through the earlier stage of this process, having received preliminary NOCs.
Licensed firms also face strict custody rules: customer assets must be held separately from company funds, and cannot be lent out or pledged without the customer’s written consent.
Banks are now allowed back in
The licensing portal isn’t happening in isolation — it follows a change on the banking side that made the whole framework workable. In April 2026, the State Bank of Pakistan issued BPRD Circular Letter No. 10 of 2026, ending an eight-year-old restriction and allowing regulated banks to open and maintain accounts for PVARA-licensed VASPs and their customers.
That access comes with conditions, not a blank check. Banks must obtain and keep a copy of a firm’s valid PVARA license before onboarding it, and must set up separate, PKR-denominated, non-interest-bearing Client Money Accounts to hold VASP customer funds — commingling with a bank’s own money is prohibited, and cash transactions or using these accounts as collateral aren’t allowed either. Banks are also required to build VASP-specific risk profiling into their AML/CFT programs, monitor these relationships on an ongoing basis, and report suspicious activity to the Financial Monitoring Unit under Pakistan’s Anti-Money Laundering Act, 2010. Notably, the circular does not let banks trade, invest in, or hold virtual assets themselves — the door opens for VASPs’ customers, not for banks’ own balance sheets.
Together, the two moves read as a single policy arc: first give licensed crypto firms a legal banking home, then force every firm actually operating in the market to get licensed or leave. Bilal bin Saqib called the banking circular “a foundational step in bringing virtual assets into the formal financial system of Pakistan.”
Why it matters for the region
Pakistan has one of the largest crypto-holding populations in Asia, and until this year it operated in a legal gray zone — widely used, but without licensed exchanges, banked accounts, or a functioning enforcement authority. The combination of a working licensing portal, a real criminal-liability deadline, and banks that can now legally service this sector marks one of the more concrete regulatory build-outs anywhere in Asia this year, alongside similar licensing pushes in Hong Kong, the UAE, and South Korea. For international exchanges, the message is blunt: local incorporation is no longer optional if you want to keep serving Pakistani users past September 5.
Primary sources:
- PVARA Licensing Portal — official application page
- Virtual Assets Act, 2026 (full text, PDF)
- PVARA Legal Framework / Regulations
- State Bank of Pakistan — BPRD Circular Letter No. 10 of 2026
- State Bank of Pakistan — Circulars index