SECP Local Entity Setup for Foreign Crypto Exchanges in Pakistan (2026)

1. Why SECP Registration Matters for Crypto Exchanges

Securities and Exchange Commission of Pakistan (SECP) registration is the first operational step a foreign crypto exchange takes after receiving a PVARA No Objection Certificate. Under Regulation 15.4 of the PVARA NOC Regulations 2025, the NOC functions as pre-incorporation regulatory clearance — meaning the NOC opens the path to incorporate in Pakistan but does not itself create a Pakistani legal entity. SECP incorporation is the legal mechanism by which the foreign exchange becomes a Pakistani entity capable of holding a VASP license, opening a corporate bank account, and contracting with Pakistani customers.

The SECP registration choice locks in three things that are expensive to change later: the entity structure (private limited company, branch office, liaison office, or joint venture), the Memorandum of Association language defining what the entity can lawfully do, and the capital structure declared to SECP and registered with the State Bank of Pakistan. Foreign exchanges that treat SECP incorporation as a procedural tick-box typically discover the consequences 6 to 12 months later, when a Memorandum drafted without crypto-specific language is challenged by a bank's compliance committee, or when shares were registered without SBP repatriable status and dividends cannot be expatriated.

This article is the complete operational walkthrough of the SECP registration process for foreign crypto entities under the Companies Act 2017 and the Virtual Assets Act 2026 framework. The deeper SECP service page covering ongoing corporate compliance lives at corporate-setup.

Key Takeaway:
SECP registration is Stage 1 of the six-stage post-NOC operational gauntlet covered at Post-Noc-Pakistan-Operational-Playbook. Done right, it takes 60 to 90 days and costs USD 500 to USD 3,000 in regulatory fees. Done wrong — wrong entity type, weak Memorandum, missed SBP repatriation filing — it creates problems that surface 6 to 12 months later at the banking, FBR, or full VASP licensing stages.

2. The Four Entity Structures — Which One Fits a VASP

The Companies Act 2017 (under which SECP operates) provides four structures available to foreign entities entering Pakistan. Each has materially different implications for what a Pakistani VASP can lawfully do.

Structure	Best For	Key Constraint
Private Limited Company (Pvt Ltd)	Foreign exchange establishing a Pakistani VASP entity — the default for almost all crypto entrants	100% foreign ownership permitted in most sectors; SECP + FBR + SBP filings
Branch Office	Foreign exchange wanting to execute specific contracts in Pakistan without establishing a separate legal entity	BOI approval required; commercial activities restricted to contract scope; not optimal for VASP licensing
Liaison Office	Foreign exchange exploring the Pakistani market without committing to operations	No commercial activities permitted; promotional and research work only; not VASP-compatible
Joint Venture (Pvt Ltd with Pakistani partner)	Foreign exchange entering through a strategic Pakistani partnership	Shared control structure; Pakistani partner's profile affects PVARA Controller approval

Single Member Company (SMC-Pvt Ltd) is a fifth structure introduced by the Companies Act 2017 — a private limited company with a single shareholder. SMCs are not typically suitable for VASP licensing because PVARA's framework expects governance separation between shareholders, directors, and the seven Key Individuals, which is structurally awkward in a single-shareholder vehicle.

3. Why Private Limited Is the Default Choice

In our experience supporting foreign exchanges through Pakistan entry, more than 90% of VASP entrants choose private limited company status. Three structural reasons make Pvt Ltd the default.

Reason 1 — VASP licensing structurally favors separate legal entities

PVARA's NOC Regulations 2025 are drafted on the assumption that the applicant is a Pakistani body corporate with its own governance, its own seven Key Individuals, its own Memorandum, and its own AML/CFT framework. Branch offices and liaison offices are extensions of the foreign parent, not separate entities. While not explicitly prohibited from holding NOCs, branch offices face structural difficulty with the Fit & Proper assessment under Fit-And-Proper-Test-PVARA-Form-A3 because the seven Key Individuals are typically parent-group officers rather than dedicated Pakistani appointments.

Reason 2 — Banking access requires a separate entity

Under the SBP April 2026 VASP banking circular, Client Money Account opening requires a Pakistani-incorporated entity with its own board resolutions, its own authorized signatories, and its own segregation arrangements separate from the foreign parent. Branch offices typically cannot satisfy the CMA segregation requirements because branch accounts are technically the parent's accounts in Pakistan, not separate legal accounts. Full coverage of the banking framework lives at Crypto-Banking-Pakistan-VASP.

Reason 3 — FBR and Section 285BAA reporting is entity-level

Section 285BAA of the Income Tax Ordinance 2001 imposes reporting obligations on the licensed VASP as a Pakistani taxpayer. The reporting is filed against the Pakistani entity's National Tax Number. Branch offices file consolidated returns with their foreign parent, which doesn't fit the Section 285BAA reporting model designed for standalone entities.

The Structural Choice

Private limited company is the default for one reason that overrides all others: PVARA, SBP, and FBR all expect a Pakistani body corporate as the regulated entity. Branch offices and liaison offices are structurally misaligned with the framework, and the cost of structural misalignment surfaces at banking and full licensing stages — much harder to fix than choosing the right structure on day one.

4. The SECP Registration Process Step-by-Step

SECP registration is end-to-end digital through the SECP eServices portal at eservices.secp.gov.pk. The process has been progressively digitised over the last decade, with the goal of issuing Certificates of Incorporation within 1–3 working days of complete submission for straightforward applications. Foreign crypto exchanges typically take longer — 60 to 90 days end-to-end — because of the additional documentation required for foreign shareholders, capital flow validation, and Memorandum drafting calibrated to VASP activities.

Step 1 — Name reservation

Filed through the SECP eServices portal. The proposed company name must not conflict with existing registered names, must not be misleading or prohibited, and must include the Pvt Ltd or Limited suffix as applicable. For VASP entities, the name typically incorporates the foreign parent's brand plus a Pakistan suffix — for example, [ExchangeName] Pakistan (Pvt) Limited. Reserved name remains valid for 60 days, during which incorporation must be completed.

Step 2 — Documentation preparation

⦁ Memorandum of Association specifying objects of the company aligned with the AML-Registered Services category granted under the NOC
⦁ Articles of Association including governance provisions, share transfer restrictions, and Sharia compliance language at the constitutional level
⦁ Form 1 (Declaration of Compliance) signed by an authorized representative
⦁ Form 21 (Registered Office Notice)
⦁ Form 29 (Particulars of Directors and Officers) listing all directors, the company secretary, and chief executive
⦁ CNICs of Pakistani directors and shareholders plus passports with valid Pakistan visa for foreign directors
⦁ Authority letters or power of attorney for representatives signing on behalf of foreign shareholders

Step 3 — Filing and fee payment

All documents are uploaded through the SECP eServices portal. SECP registration fees are tiered based on authorized share capital. For a foreign crypto VASP with authorized capital of PKR 50 million, total SECP filing fees typically run PKR 60,000 to PKR 100,000 (USD 200 to USD 350). Payment is made online through the SECP portal.

Step 4 — SECP review

SECP's incorporation team reviews submitted documents. Standard review takes 1–3 working days for clean applications. For foreign-shareholder structures, additional verification may take 5–10 working days. If documents are incomplete or non-compliant, SECP issues a deficiency notice with instructions to correct and resubmit.

Step 5 — Certificate of Incorporation

On successful verification, SECP issues a digitally signed Certificate of Incorporation through the eServices portal. The certificate is the legal proof that the Pakistani VASP entity exists and can begin operations. SECP's automated integration with FBR triggers automatic NTN issuance, typically within 5–10 working days of incorporation.

5. Memorandum & Articles of Association for a VASP
The Memorandum of Association is the constitutional document of the Pakistani VASP entity. It defines the company's name, registered office, principal objects, liability clause, and share capital structure. For VASP entities, the Memorandum drafting choices have downstream implications at PVARA licensing, banking, and FBR registration stages.

Principal Objects Clause — VASP-specific drafting

The principal objects clause must align with the AML-Registered Services categories under PVARA's NOC Regulations 2025. The Memorandum should explicitly enable the four service categories the VASP intends to provide:

⦁ Exchange services — operating a platform for the trading of virtual assets for fiat or other virtual assets
⦁ Broker-dealer services — facilitating customer transactions in virtual assets
⦁ Custody services — holding virtual assets on behalf of customers
⦁ Virtual asset derivative services — where the entity intends to provide futures, options, or perpetual products subject to Sharia compliance review

A Memorandum that only mentions general technology or fintech activities without specifically referencing virtual assets, cryptocurrency, or the AML-Registered Services categories will face additional scrutiny during PVARA licensing review and bank onboarding. Amending a Memorandum post-incorporation requires shareholder resolution, SECP filing, and additional fees — materially more expensive than drafting it correctly on day one.

Sharia Compliance Language

Pakistan is the only major crypto jurisdiction globally that requires entity-level Sharia compliance arrangements for licensed VASPs. The Articles of Association should include language committing the company to:
⦁ Maintain a Sharia compliance arrangement, including retention of a Sharia advisor or panel
⦁ Submit products and services for Sharia review before retail launch
⦁ Document treatment of riba (interest), gharar (excessive uncertainty), and maysir (speculation) within the product set
⦁ Conduct periodic Sharia audit and certification
Sharia compliance at the constitutional level is structurally cheaper than retrofitting it later. Foreign exchanges that incorporate without Sharia language typically face Articles amendments at the Phase 2 stage when the Sharia board is appointed, adding 30–60 days of unnecessary work.

The Drafting Decision That Matters Most
The single biggest Memorandum drafting decision for VASPs is whether to define the principal objects narrowly (just the AML-Registered Services categories you intend to provide now) or broadly (the full universe of virtual asset activities). Narrow drafting is cleaner for the PVARA review but constrains future product expansion. Broad drafting requires more justification at PVARA but supports product roadmap. Our default recommendation: draft to the broad framing of virtual asset services and intermediation, then specify the operational categories in the NOC application.

6. Capital Structure — Authorized, Paid-Up, and the PKR 50M Floor

The Companies Act 2017 does not mandate a minimum paid-up capital for private limited companies. The legal minimum is PKR 1, and the technical minimum for SECP fee purposes is PKR 100,000 (approximately USD 350 at 2026 exchange rates). For practical VASP operations, however, capital structure becomes one of the operational gating factors at the banking, PVARA, and FBR stages — meaning the formal SECP minimum has limited relevance.

The Two Capital Concepts

⦁ Authorized capital — the maximum capital the company is empowered to issue, declared in the Memorandum. SECP registration fees are tiered based on this number
⦁ Paid-up capital — the actual amount injected by shareholders. The number reported in financial statements, the number SBP cares about for repatriation, and the number PVARA and banks evaluate for financial soundness

The practical PKR 50 million floor for VASPs

While neither PVARA nor the Companies Act mandates a specific minimum, the practical floor for a Pakistani VASP entity is PKR 50 million (approximately USD 175,000) paid-up capital. This number reflects three operational realities:

1. Banking onboarding — Pakistani banks evaluate paid-up capital as part of the financial soundness review during VASP onboarding. Entities with paid-up capital below PKR 50 million face significantly tougher banking applications. Some banks have informal floors at higher levels (PKR 100M or 200M).
2. PVARA Fit & Proper assessment — the entity-level financial soundness criterion under the NOC Regulations 2025 references the requirement to demonstrate financial capacity to undertake the proposed business model. Below PKR 50M, the regulator may ask for additional comfort, particularly for foreign-parent-funded entities.
3. 12-month operational runway — operational expenses for a typical Pakistan VASP (rent, salaries for Pakistan-based Key Individuals, professional fees, regulatory fees, technology costs) run PKR 25–50 million annually. Capital below this level forces the entity to rely on inter-company funding flows that complicate SBP foreign exchange compliance.

Authorized capital — Why higher is cheaper than you think

SECP registration fees scale with authorized capital but at a relatively modest rate. The difference between authorized capital of PKR 50 million versus PKR 200 million in SECP fees is typically PKR 20,000–40,000 (USD 70–140). Setting authorized capital higher than initial paid-up — for example, PKR 200M authorized with PKR 50M paid-up — gives the entity headroom to inject additional capital without amending the Memorandum, which costs significantly more than the initial fee differential.

7. Directors, Foreign Shareholders & Security Clearance

Director minimums under Section 154

The Companies Act 2017 requires a minimum of two directors for a private limited company. Both can be foreign nationals. Pakistani citizenship is not required. Pakistani residency is not required at the Companies Act level (though it becomes practically necessary for banking and PVARA engagement, as covered at Resident-Director-PVARA-Pakistan).

Foreign director security clearance — Ministry of Interior

All foreign directors of a Pakistani company must obtain security clearance from the Ministry of Interior under Section 460 of the Companies Act 2017. The clearance is filed post-incorporation and typically takes 4 to 8 weeks. Failure to secure clearance can lead to director disqualification and forced share transfer under the company's pre-agreed undertaking.

Documentation required for security clearance:

⦁ Passport with valid Pakistan visa (multiple-entry business visa typical)
⦁ Criminal record clearance from country of residence (apostilled where required)
⦁ Education and qualification certificates (notarised)
⦁ Detailed CV with role history
⦁ Letter of consent to act as director
⦁ Photograph (passport format)

The 90-day Absence Rule

Section 174 of the Companies Act 2017 provides that if a director is absent from Pakistan for 90 consecutive days, an alternate director may be appointed to act in their place during the absence. The alternate director must be acceptable to the Board and is typically required to be available locally.
For foreign exchanges with primarily non-resident director structures, the 90-day rule activates the moment a regulator requires an in-person meeting or a board resolution requiring physical signature in Pakistan. Pre-identifying an alternate director at incorporation is materially cheaper than scrambling under the 90-day rule six months in. This is one of the structural reasons most foreign exchanges end up with at least one Pakistan-based director from day one — covered in depth at Resident-Director-PVARA-Pakistan.

100% Foreign Ownership

SECP permits 100% foreign ownership in most sectors, and virtual asset services do not fall within sectors restricted to Pakistani majority ownership. Foreign exchanges can incorporate Pakistani entities with all shares held by foreign shareholders, subject to the SBP repatriable share registration covered in Section 8 below.

8. SBP Repatriable Share Registration (Chapter XX)

If shareholders include foreign individuals or corporates and the foreign exchange intends to repatriate dividends, capital gains, or eventual disinvestment proceeds, the shares must be registered on a repatriable basis with the State Bank of Pakistan. This is filed under Chapter XX of the SBP Foreign Exchange Manual through the company's authorized dealer (a commercial bank) using prescribed forms within 30 days of share issuance.

What Repatriable Registration Permits

⦁ Dividend repatriation — annual or interim dividends declared from after-tax profits, subject to 15% withholding tax under double-taxation treaties or domestic rates
⦁ Capital repatriation on disinvestment — proceeds of share sale, subject to capital gains tax and SBP clearance
⦁ Profit repatriation in case of company winding-up — net proceeds after creditor settlement

What happens if registration is missed

Shares issued to foreign shareholders without Chapter XX registration default to non-repatriable status. Non-repatriable shares can still hold all the rights of any other share — voting, dividend, etc. — but the foreign shareholder cannot expatriate dividends or capital outside Pakistan through the formal banking system. The only path to convert non-repatriable to repatriable post-issuance is a complex SBP application that may or may not succeed and can take 6–12 months.

Missing the 30-day SBP repatriable registration filing is the single most expensive procedural error in foreign-exchange Pakistan entry. We have seen entities discover the gap two years into operations when they try to pay an initial dividend and find the bank declines to process the outbound transfer. The fix, where possible, costs USD 15,000 to USD 40,000 in legal and SBP fees plus 6–12 months of dividend deferral. Make sure your corporate counsel handles this filing as a non-negotiable item within 30 days of share issuance.

9. NTN, Sales Tax & Post-Incorporation Registrations

SECP incorporation alone does not make the entity operationally compliant. Several federal and provincial registrations follow within the first 30–60 days of incorporation.

SECP's integration with FBR triggers automatic NTN issuance, typically within 5–10 working days of incorporation. The NTN is the unique tax identifier required for:

⦁ All banking relationships and account opening

⦁ FMU goAML registration (covered at [link to /blog/fmu-goaml-vasp-pakistan])

⦁ Section 285BAA reporting obligations under the Income Tax Ordinance 2001

⦁ Withholding tax obligations on supplier and employee payments

⦁ Vendor and customer onboarding requiring tax identifier exchange

Depending on the registered office location and the services provided to Pakistani customers, VASPs may have provincial sales tax obligations:

⦁ Sindh Revenue Board (SRB) for Karachi-based entities

⦁ Punjab Revenue Authority (PRA) for Lahore and Punjab-based entities

⦁ Khyber Pakhtunkhwa Revenue Authority (KPRA) for KP-based entities

⦁ Balochistan Revenue Authority (BRA) for Balochistan-based entities

Whether crypto exchange fees attract provincial sales tax remains an evolving question in mid-2026. Conservative practice is to register with the relevant Revenue Board and file nil returns where the position is unclear, rather than risk a back-tax assessment.

Crypto exchanges with technology export elements (for example, providing infrastructure services to non-Pakistani users) may register with the PSEB to access tax incentives and other benefits available to technology exporters. The registration is optional but can provide material tax savings for entities with significant foreign customer revenue.

End-to-end SECP incorporation typically takes 60 to 90 days for foreign crypto exchanges. The variance depends on documentation quality, foreign director security clearance timing, and capital flow complexity.

Phase	Duration	What Happens
Pre-application preparation	2–4 weeks	Memorandum and Articles drafting, foreign shareholder documentation, capital flow planning, name reservation
SECP filing and review	1–2 weeks	Documentation upload through eServices, SECP review, deficiency response if any, Certificate of Incorporation issuance
NTN issuance (automatic)	1–2 weeks	FBR receives SECP-issued data and issues NTN automatically
Foreign director security clearance	4–8 weeks	Ministry of Interior processing, parallel to incorporation, completed post-incorporation
SBP repatriable share registration	2–4 weeks	Authorized dealer (bank) files within 30 days of share issuance
Provincial sales tax registration	1–2 weeks	Registered office's provincial Revenue Board
End-to-end completion	Total 60–90 days	All registrations complete, entity operationally ready for next post-NOC stages

Realistic Total Cost

Cost Category	Range (USD)	Notes
SECP registration fees	USD 200–500	Tiered on authorized capital; PKR 50M–200M tier typical
Memorandum and Articles drafting (legal)	USD 2,500–8,000	Pakistani corporate law firm; varies with VASP-specific drafting complexity
Foreign director security clearance	USD 500–1,500	Per foreign director; covers documentation, notarisation, apostille
SBP repatriable registration	USD 300–800	Through authorized dealer bank; modest fees plus legal review
Notarisation, apostille, translation	USD 800–2,500	Foreign documents must be apostilled and translated where original is non-English
NTN, sales tax, and provincial registrations	USD 200–600	Government fees plus filing support
Paid-up capital injection	USD 175,000 minimum	PKR 50 million practical floor for VASP operations
Total formation cost (excluding paid-up capital)	USD 4,500–14,000	Conservative midpoint: USD 8,000

This is Stage 1 cost only. The full six-stage post-NOC operational cost envelope, including banking, FMU registration, Sharia advisor, and Pakistan-based leadership, runs USD 380,000 to USD 1,280,000 over 6 to 12 months. Detailed breakdown at Post-Noc-Pakistan-Operational-Playbook.

11. Five Common SECP Application Failures

1. Memorandum drafted without VASP-specific principal objects. A Memorandum that only mentions general technology or fintech activities faces additional scrutiny at PVARA review and bank onboarding. Amending post-incorporation costs USD 3,000–8,000 plus 30–60 days. Draft to virtual asset services on day one.
2. Missed SBP repatriable share registration within 30 days. Non-repatriable shares lock the foreign shareholder out of formal dividend or capital repatriation through Pakistani banks. Conversion post-issuance is complex and uncertain. Make the 30-day Chapter XX filing non-negotiable.

3. Inadequate paid-up capital relative to operational profile. Entities incorporating with PKR 1 million paid-up capital face banking, PVARA, and FBR friction at every subsequent stage. The PKR 50 million practical floor is not in any rule, but every operational stage assumes it.

4. Foreign director security clearance delayed past 90 days. Foreign directors without clearance can be disqualified from acting, freezing board decisions. Initiate clearance applications within 7 days of incorporation, not after the entity is fully operational.

5. Single-shareholder structure (SMC-Pvt Ltd) misaligned with PVARA governance expectations. PVARA's NOC Regulations expect governance separation between shareholders, directors, and Key Individuals. SMC structures create awkward governance that complicates Form A3 reviews. Use standard Pvt Ltd with at least two shareholders.

12. The CoinConnect + Corporate Counsel Workflow

SECP incorporation is partly legal work and partly operational regulatory work. Pakistani corporate law firms handle the legal drafting (Memorandum, Articles, board resolutions) and the SECP filings; CoinConnect handles the operational regulatory integration with PVARA, banking, FBR, and the full post-NOC gauntlet.

Where corporate counsel adds value
⦁ Memorandum and Articles drafting calibrated to VASP activities and Sharia compliance
⦁ SECP eServices filing and deficiency response
⦁ Foreign shareholder documentation including apostille and notarisation coordination
⦁ Board resolution drafting for authorised signatories, capital injections, and post-incorporation decisions
⦁ Ongoing corporate compliance — annual filings, AGM resolutions, statutory registers

Where CoinConnect adds value
⦁ Entity-structure decision (Pvt Ltd vs branch vs JV) aligned with VASP licensing strategy
⦁ Capital structure planning aligned with banking and PVARA expectations
⦁ Coordination across SECP, FBR, SBP, and provincial Revenue Boards in parallel
⦁ Memorandum and Articles drafting input on AML-Registered Services scope alignment
⦁ Project management of the six-stage post-NOC gauntlet with SECP incorporation as Stage 1

Engagement options for end-to-end Pakistan market entry — including SECP incorporation, banking, FMU registration, FBR setup, and Sharia advisor coordination — live at services.

Sources Cited
⦁ Companies Act 2017 (Sections 153, 154, 174, 435, 460). secp.gov.pk.
⦁ Companies Incorporation Regulations 2017. secp.gov.pk.
⦁ Foreign Companies Incorporation Regulations 2018. secp.gov.pk.
⦁ PVARA No Objection Certificate Regulations 2025 (Regulations 5, 15.4 — Key Individuals, NOC scope). pvara.gov.pk.
⦁ Virtual Assets Ordinance 2025 / Virtual Assets Act 2026. pakistancode.gov.pk.
⦁ SBP Foreign Exchange Manual, Chapter XX (repatriable share registration). sbp.org.pk.
⦁ SBP VASP Banking Circular, April 2026. sbp.org.pk.
⦁ Income Tax Ordinance 2001 as amended by Finance Act 2025–26 (Section 285BAA, NTN framework). fbr.gov.pk.
⦁ Board of Investment (BOI) regulations for branch and liaison offices. boi.gov.pk.
⦁ SECP Promoters Guide (current digital incorporation procedure). secp.gov.pk.


Article prepared by CoinConnect's regulatory advisory team. Last reviewed against published SECP, PVARA, SBP, and FBR sources as of 8 May 2026. This article is general analysis and not legal, regulatory, tax, or corporate advice. SECP and PVARA frameworks evolve; verify the current position of any specific regulation with the issuing authority before relying on it for material decisions.