Quick facts

• Primary regulators: National Bank of Kazakhstan and AFSA (Astana International Financial Centre).
• Key laws: Kazakhstan’s Law on Digital Assets and subsequent regulatory instruments governing digital asset activities.
• Special regimes: The AIFC offers a free-zone regime and specific authorizations for payment services and stablecoin issuance; the National Bank runs a domestic sandbox for pilot projects.

Key definitions

Digital asset

Any token, coin or digital representation recognised under Kazakhstan’s digital assets framework.

Virtual Asset Service Provider (VASP)

An entity providing services such as exchange, custody, brokerage, issuance, or transfer of digital assets and subject to licensing, AML/KYC and reporting obligations.

Stablecoin issuer

An entity that issues a fiat-pegged token (for example, a tenge-backed stablecoin) and which must meet reserve, audit and governance requirements under the chosen regulatory pathway.

Legal & regulatory framework

Kazakhstan’s digital assets statute establishes a framework for digital asset circulation and market activities. Recent legislative and regulatory updates have clarified licensing pathways for exchanges, stablecoin issuance and other VASP activities.

Regulators to know

• National Bank of Kazakhstan — domestic regulator for digital-asset activity and operator of regulatory sandbox arrangements.
• Astana International Financial Centre (AIFC) / AFSA — free-zone regulator applying English common law inside the AIFC; issues authorizations for money services and stablecoin activities under AIFC rules.
• Other agencies — tax authorities and financial-monitoring/AML units contribute to licensing, reporting and taxation requirements; international AML standards influence local supervision.

Which authorization do you need?

Choice of license depends on the business model and target market:

• AIFC authorizations (AFSA) — preferred for English-law governance, free-zone benefits and stablecoin/money-service authorizations designed for cross-border activity.
• National Bank / domestic register — required for operators serving the Kazakhstan domestic market under the national regime.
• Sandbox entry — suitable for pilot stablecoin projects and novel tokenisation solutions that need supervised testing before full authorisation.

Eligibility & corporate structure

Common requirements (vary by pathway):

• Local legal entity in the chosen jurisdiction (AIFC company for AFSA routes or Kazakhstan-incorporated company for national routes).
• Fit & proper management, a named MLRO/Compliance officer and demonstrable governance arrangements.
• AML/KYC policies, transaction monitoring and sanctions screening aligned with international standards.
• Operational and IT controls, custody arrangements, segregation of client funds and cybersecurity measures.
• Proof of stablecoin backing (reserve assets, audit reports and safeguarding arrangements) for stablecoin issuers.

Application process — step by step

1. Pre-application scoping — choose the route (AIFC vs national), map services and prepare a project plan.
2. Prepare documentation — business plan, AML policy, compliance manual, technical architecture, officer CVs, shareholder structure, proof of funds/reserves, and financial projections.
3. Submit application — file with the relevant regulator and pay application fees where applicable.
4. Regulatory review — substantive review including background checks, capital adequacy assessment and technical resilience testing.
5. Inspection / sandbox (if required) — some projects will be required to test in a supervised sandbox before full authorisation.
6. License grant & post-authorization — regulator issues terms and ongoing reporting, audits and supervisory contacts commence.

Costs & timelines (typical market ranges)

Note: licensing costs vary widely depending on license type, legal structure, complexity and advisor fees. The following ranges are indicative and should be confirmed per case.

Application & set-up (one-time)

• Company formation & legal setup: USD 5,000–25,000.
• Regulatory application & professional fees (legal/compliance): USD 20,000–120,000+ depending on complexity.
• IT & security (initial): USD 20,000–200,000+ for exchange or custody platforms and security readiness.

Ongoing (annual)

• Compliance & AML program: USD 30,000–150,000 (staffing, monitoring tools, audits).
• Regulatory fees & capital: amounts differ by license and pathway; consult the regulator or an adviser for exact requirements.

Timelines

• Simple VASP authorizations: 3–6 months.
• Complex authorizations (stablecoin issuers, exchange + custody): 6–12 months, which may include technical review and sandbox testing.

Tip: sandbox acceptance can speed testing but does not guarantee final authorisation — use it for technical validation alongside the full licensing process.

Ongoing compliance & supervision

• Regular AML/KYC reporting and suspicious activity reporting in line with national rules and international expectations.
• Periodic audits of reserves (for stablecoins), security penetration testing and remediation plans.
• Transaction monitoring, sanctions screening and customer due diligence for retail and institutional onboarding.
• Regulatory notifications for material changes such as governance, technical incidents or key-person changes.

Regulatory sandbox & pilots

Kazakhstan operates regulatory sandbox programmes for digital asset projects. The sandbox is a practical route for proof-of-concept testing under supervised conditions, especially for stablecoin or market infrastructure pilots.

Risks & practical considerations

• Regulatory change risk — the sector is evolving rapidly; continuous monitoring is essential.
• AML/CTF scrutiny — expect rigorous anti-money-laundering controls and supervisory attention.
• Banking access — banks may apply additional due diligence to VASPs, making banking relationships a gating factor.
• Market access & restrictions — certain activities may be limited; consult legal counsel before marketing services to local retail customers.

Frequently asked questions

Is cryptocurrency legal in Kazakhstan?

Yes — cryptocurrency activity is permitted under licensing and regulatory controls; exchanges and other VASPs must be authorised or operate through approved pilots or the AIFC.

Can I issue a tenge-backed stablecoin?

Yes; there are sandbox pathways and authorisation routes for stablecoin issuance, but issuers must meet reserve, audit and governance requirements.

Should I choose AIFC or the national regime?

Choose AIFC for English-law governance, free-zone benefits and international positioning. Choose the national route if you target the domestic market and prefer local incorporation. Each path has tradeoffs; a jurisdictional scoping exercise is recommended.

Next steps

If you’re planning an AIFC authorization, stablecoin issuance or a Kazakhstan VASP, we can prepare the application pack (business plan, AML program, IT security accreditation and sponsor introductions). Contact us for a regulatory scoping call.

Book a regulatory scoping call