Skip to Content
REGULATORY GUIDE 2026 — UPDATED JUNE 2026

PVARA
License & Sandbox Guide — Pakistan 2026

Pakistan Virtual Assets Regulatory Framework 2026

Comprehensive guide to the NOC application process, the Regulatory Sandbox Guidelines 2026, the ten VASP license categories and Schedule I capital requirements, and the compliance obligations for Virtual Asset Service Providers operating in Pakistan under the Virtual Assets Act 2026 (originally the Virtual Assets Ordinance, 2025).

Jul 2025
Law Signed
2026
Sandbox Live
10
License Categories
~35M
Estimated Users
Published: March 2026 Last Updated: June 2026 Version 2.2 By CoinConnect
01

Executive Summary

The Pakistan Virtual Assets Regulatory Authority (PVARA) was established under the Virtual Assets Act 2026 — originally promulgated as the Virtual Assets Ordinance, 2025 (signed 8 July 2025). PVARA is Pakistan's dedicated federal regulator for licensing, supervising, and regulating Virtual Asset Service Providers (VASPs), with full statutory authority to license, supervise, and enforce compliance.

PVARA's core rulebook is now substantially in place. This guide reflects the official documents published to date: the NOC Regulations, the Regulatory Sandbox Guidelines 2026, the Activity-Specific Handbooks 2026, and the Draft Pakistan Virtual Asset Services Regulations 2026 — which define the ten VASP license categories and their Schedule I capital requirements.

Two ways in are open now: the NOC route and the Regulatory Sandbox (which can reduce upfront capital under Regulation 7(5)), with the full VASP licensing framework published in draft. This guide covers the categories, capital, routes, requirements, and the end-to-end process for international exchanges and VASPs seeking to operate legally in Pakistan.

Statutory Regulatory Framework

The Virtual Assets Act 2026 provides comprehensive licensing, AML/CFT compliance, consumer protection, and the Regulatory Sandbox regime.

~35M Estimated Crypto Users

Pakistan ranks among the top countries globally in grassroots crypto adoption, with significant untapped market potential.

First-Mover Opportunity

Ten license categories and Schedule I capital are now defined (draft). Few firms are through the process — early, well-prepared entrants gain a lasting advantage.

FATF Compliance

Framework aligned with FATF recommendations. Mandatory AML/CFT, KYC, Travel Rule, and FMU goAML obligations for all VASPs.

02

Regulatory Timeline

Pakistan's crypto regulatory journey accelerated dramatically in 2025–2026, moving from policy formation to a full licensing framework, banking access, and a live Regulatory Sandbox. Dates below are based on publicly available announcements and official documents.

  1. Feb 2025

    Pakistan Crypto Council (PCC) Announced

    Finance Ministry announces formation of the PCC to develop a crypto policy framework for Pakistan.

  2. Mar 14, 2025

    PCC Formally Launched

    Muhammad Aurangzeb (Finance Minister) as Chairman, Bilal bin Saqib as CEO of the Pakistan Crypto Council.

  3. Apr 7, 2025

    CZ Appointed PCC Strategic Advisor

    Binance founder Changpeng Zhao joins as Strategic Advisor to the Pakistan Crypto Council (PCC) — not PVARA directly.

  4. May 26, 2025

    Bilal bin Saqib Elevated

    Appointed Special Assistant to the PM on Blockchain & Crypto (Minister of State rank).

  5. Jul 8, 2025

    Virtual Assets Ordinance, 2025 Signed

    President Zardari signs the Virtual Assets Ordinance, 2025, establishing PVARA as a statutory authority — later operating as the Virtual Assets Act 2026. Official start of crypto regulation in Pakistan.

  6. Aug 2025

    PVARA Operations Commence

    PVARA holds its inaugural board meeting and begins regulatory operations.

  7. Sep 2025

    NOC Applications Invited

    PVARA invites global crypto firms to apply for No Objection Certificates (NOCs) via pvara.gov.pk.

  8. Dec 2025

    First NOCs Reported Media Reports

    Major global exchanges (including Binance) are reported in media to have received NOCs from PVARA. PVARA does not maintain a public NOC holders list.

  9. Apr 14, 2026

    SBP Circular No. 10 of 2026 Banking

    State Bank of Pakistan issues Circular No. 10 of 2026 authorizing banks to open accounts for PVARA-licensed VASPs — a landmark for crypto banking in Pakistan.

  10. 2026

    Sandbox Guidelines, Handbooks & Draft VASP Regulations Official

    PVARA publishes the Regulatory Sandbox Guidelines 2026, the Activity-Specific Handbooks 2026, and the Draft Pakistan Virtual Asset Services Regulations 2026 — defining the ten license categories and Schedule I capital requirements.

03

What is PVARA?

Legal Basis

Pakistan Virtual Assets Regulatory Authority

  • Established: Virtual Assets Act 2026 (orig. Ordinance, 2025 — signed 8 Jul 2025)
  • Status: Autonomous Federal Regulatory Body
  • Rulebook: NOC Regulations, Sandbox Guidelines 2026, Activity-Specific Handbooks 2026, Draft VASP Regulations 2026
  • Website: pvara.gov.pk

PVARA Board

  • Chairperson (senior government official)
  • Governor, State Bank of Pakistan
  • Secretary, Ministry of Finance
  • Secretary, Ministry of Law & Justice
  • Secretary, Ministry of IT & Telecom
  • Chairman, SECP
  • Chairman, FBR
  • Director General, FMU
  • Independent / expert members

Exact board composition is set out in the Virtual Assets Act 2026.

PVARA Powers & Functions

Licensing & Supervision

Issue, suspend, and revoke VASP licenses across all virtual asset service categories.

AML/CFT Enforcement

Combat money laundering, terrorist financing, and illicit activities through VASPs.

Consumer Protection

Ensure market integrity and investor safety across virtual asset markets.

Regulatory Sandbox

Allow firms to test innovations under supervision, with a No-Action Relief option during testing.

Shariah Consultation

Consultation with Shariah advisors where applicable for Islamic-finance compliance of virtual asset products.

Policy & Rulemaking

Issue regulations, activity-specific handbooks, guidelines, and circulars governing virtual asset activities in Pakistan.

Legal Definition: Virtual Asset

"A digital representation of value that can be digitally traded or transferred and can be used for payment or investment purposes."

Virtual assets are NOT recognised as legal tender in Pakistan.

04

Pakistan Crypto Market

240M+
Population
~35M
estimated
Crypto Users
Top 5
Global Adoption Rank
60%
Under Age 30

Why Pakistan?

01

Massive Unbanked Population

Only ~21% of adults have formal bank accounts — crypto offers genuine financial inclusion potential.

02

High Remittance Market

$30B+ annual remittances create a natural crypto use case for cross-border transfers.

03

Young Tech-Savvy Demographics

~60% of the population is under 30, with high smartphone adoption and growing digital literacy.

04

First Regulatory Clarity

PVARA provides the legal framework that gives early market entrants a lasting competitive advantage.

Government Policy Initiatives Announced — Verify Status

Bitcoin Strategic Reserve

Government announced plans to explore a national Bitcoin reserve (2025). Implementation status to be confirmed.

Bitcoin Mining Allocation

Surplus electricity announced for Bitcoin mining and AI data centres. Policy stage.

Stablecoin Frameworks

Cooperation announced on stablecoin frameworks. Formal details pending.

SBP Circular No. 10 of 2026

April 14, 2026 — SBP authorised banks to open accounts for PVARA-licensed VASPs. Enacted.

05

License Categories & Capital

The Draft Pakistan Virtual Asset Services Regulations 2026 define ten VASP license categories, each with a minimum paid-up capital set out in Schedule I. This capital is recoverable share capital held in your own company — not a government fee — and the Regulatory Sandbox can reduce it proportionately under Regulation 7(5). Figures are from the draft regulations and should be confirmed at filing.

Draft VASP Regs 2026

Exchange

Exchange, trading, or conversion of virtual assets — spot and OTC trading platforms.

Min. paid-up capital
PKR 1 billion  (~USD 3.57M)

Draft VASP Regs 2026

Custody

Secure storage and wallet services for client virtual asset holdings.

Min. paid-up capital
PKR 200 million  (~USD 714K)

Draft VASP Regs 2026

Broker-Dealer

Facilitating virtual asset trading on behalf of customers as an intermediary.

Min. paid-up capital
PKR 100 million  (~USD 357K)

Draft VASP Regs 2026

Virtual Asset Derivatives

Crypto futures, options, and other derivative products and services.

Min. paid-up capital
PKR 500 million  (~USD 1.79M)

Draft VASP Regs 2026

Lending & Borrowing

Virtual asset lending and borrowing services.

Min. paid-up capital
PKR 500 million  (~USD 1.79M)

Draft VASP Regs 2026

Management & Investment

Virtual asset management, portfolio, and investment services.

Min. paid-up capital
PKR 200 million  (~USD 714K)

Draft VASP Regs 2026

Transfer & Settlement

Transfer and settlement of virtual assets — the core category for cross-border remittance and stablecoin-payout models.

Min. paid-up capital
PKR 200 million  (~USD 714K)

Draft VASP Regs 2026

Advisory Services

Investment advice on virtual assets — the lowest-capital category.

Min. paid-up capital
PKR 25 million  (~USD 89K)

Draft VASP Regs 2026

Fiat-Referenced Token Issuance

Issuing a token pegged to a fiat currency (e.g. a PKR or USD stablecoin). Carries reserve-asset requirements.

Min. paid-up capital
PKR 1 billion  (~USD 3.57M) + reserves

Draft VASP Regs 2026

Asset-Referenced Token Issuance

Issuing a token backed by another asset or basket (e.g. tokenized gold). Carries reserve-asset requirements.

Min. paid-up capital
PKR 1 billion  (~USD 3.57M) + reserves

Not sure which you need?

A single licence can cover more than one category. We scope the right mix — and the sandbox reduction — to lock up as little capital as possible.

Map my licence & capital →

Schedule I — Minimum Paid-Up Capital (Draft 2026)

License CategoryMin. Paid-Up Capital (PKR)Approx. USD
Advisory ServicesPKR 25 million~$89,000
Broker-DealerPKR 100 million~$357,000
CustodyPKR 200 million~$714,000
Management & InvestmentPKR 200 million~$714,000
Transfer & SettlementPKR 200 million~$714,000
Lending & BorrowingPKR 500 million~$1.79 million
Virtual Asset DerivativesPKR 500 million~$1.79 million
ExchangePKR 1 billion~$3.57 million
Fiat-Referenced Token IssuancePKR 1 billion + reserves~$3.57 million
Asset-Referenced Token IssuancePKR 1 billion + reserves~$3.57 million

Capital is recoverable — and there is no application fee

Paid-up capital is held in your own company and is recoverable on an orderly wind-down — it is not paid to PVARA. PVARA has confirmed there is currently no prescribed application fee; any fees, if introduced, will be published in the Rules. The Regulatory Sandbox can reduce the applicable capital while you test the market. All figures are draft and confirmed at filing.

06

Entry Routes & Licensing Process

Four ways into Pakistan

PVARA provides four entry routes: a No Objection Certificate (NOC), the Regulatory Sandbox (Section 11), a No-Action Relief Letter for novel/pilot models, and the full VASP Licence under the Draft VASP Regulations 2026. Most foreign entrants begin with an NOC or the Sandbox and graduate to a full licence. The phases below outline the typical path.

1

Phase 1: NOC from PVARA

Available Now — Primary First Step

The No Objection Certificate (NOC) from PVARA is the primary first step for most VASPs entering Pakistan. You cannot proceed to SECP registration for a virtual-asset business without first obtaining clearance from PVARA.

NOC APPLICATION REQUIRES:

Detailed business plan for Pakistan operations

Corporate documents and ownership structure

Director and shareholder details

Fit & proper declarations for key individuals

Proof of financial capability

AML/CFT policy and technology infrastructure details

NOC DOES NOT PERMIT:

Commercial launch or operations in Pakistan

Offering services to Pakistan users

Marketing or promotion in Pakistan

2

Phase 2: SECP Registration & Local Presence

After NOC Approval from PVARA

Once PVARA grants the NOC, applicants register with SECP and establish local presence in Pakistan.

SECP Registration

Register with the Securities & Exchange Commission

Local Company

Incorporate under the Companies Act 2017

Physical Office

Establish operational infrastructure in Pakistan

FMU Registration

Complete goAML portal registration (mandatory for AML compliance)

3

Phase 3: Full VASP License

Draft VASP Regulations 2026 Published

The full VASP licence is granted under the Draft Pakistan Virtual Asset Services Regulations 2026, which set out the ten license categories, Schedule I minimum paid-up capital, and the conduct standards in the Activity-Specific Handbooks 2026. Capital figures are draft and confirmed at filing. This phase grants permission for full commercial operations.

Schedule I Capital

Meet the minimum paid-up capital for your category (PKR 25M–1B)

Operational Audits

Independent cybersecurity and systems review

Proof of Reserves

Demonstrate adequate asset backing (and reserves for token issuers)

Risk Management

Robust risk management systems

Asset Segregation

Segregated customer asset requirements

Conduct & Disclosure

Meet the Activity-Specific Handbook standards for your licence

07

Requirements

Corporate Requirements (SECP & PVARA)

Company registered under the Companies Act 2017 (SECP requirement)
Principal place of business in Pakistan (PVARA requirement)
Physical office and operational infrastructure
Minimum paid-up capital per Schedule I (by license category)
Resident director — required by SECP Companies Act

Fit & Proper Criteria (Key Individuals)

Directors, CEO, compliance officer & UBOs must pass fit-and-proper checks
Clean criminal record / police clearance (each country of residence)
Foreign documents notarised & apostilled
Employment & qualification verification
No prior regulatory sanctions history

AML/CFT Requirements

Comprehensive KYC/KYB and customer due diligence
Transaction monitoring & the FATF Travel Rule
Sanctions & PEP screening; suspicious-activity reporting
FMU goAML portal registration (mandatory)

Technical Requirements

Robust cybersecurity framework & key management
Business continuity & disaster recovery plans
Data protection measures
Independent third-party security audit
Custody & client-asset safeguarding controls

Capital & Fees — Key Facts

Minimum paid-up capital is set in Schedule I of the Draft VASP Regulations 2026 (PKR 25M–1B by category) — it is recoverable and can be reduced under the Regulatory Sandbox. PVARA has confirmed there is currently no prescribed application fee. As the regulations are in draft, confirm exact figures and any future fees with PVARA before filing.

08

Compliance & Penalties

Penalties for Non-Compliance

Unlicensed Operations

Up to PKR 50M

And/or imprisonment

Unauthorized Token Offerings

Up to PKR 25M

And/or imprisonment

Ongoing Non-Compliance

License Suspension

Or permanent revocation

Penalty amounts are indicative and set out in the Virtual Assets Act 2026 — confirm the exact figures and offences in the Act before relying on them.

Prohibited Activities

Operating without a PVARA license
Market manipulation
Insider trading
Algorithmic stablecoins without safeguards
Unauthorized virtual asset offerings
False or misleading advertising

Sandbox Suspension & Revocation

PVARA may temporarily suspend or permanently revoke Sandbox approval if a participant fails to adhere to agreed parameters, poses consumer detriment, or commits any serious compliance breach. Public notice is required for permanent revocation.

09

Key Bodies & People

Bilal bin Saqib

CEO, Pakistan Crypto Council

Special Asst. to PM on Blockchain & Crypto | Senior crypto-policy figure

Muhammad Aurangzeb

Finance Minister

Chairman, Pakistan Crypto Council

Changpeng Zhao (CZ)

Strategic Advisor — PCC

Binance Founder | Advisor to the Pakistan Crypto Council (PCC), not PVARA

Regulatory Bodies

PVARA

Primary licensing, sandbox, and supervision authority for all virtual asset service providers in Pakistan.

SECP

Company registration and securities oversight for crypto businesses operating in Pakistan.

FMU

AML/CFT compliance monitoring through the mandatory goAML portal for all VASPs.

SBP

Banking oversight. SBP Circular No. 10 of 2026 (Apr 14, 2026) authorises banks to open accounts for PVARA-licensed VASPs.

FBR

Federal Board of Revenue — tax compliance including Section 285BAA virtual asset reporting for all VASPs.

SBP Circular No. 10 of 2026 — April 14, 2026

The State Bank of Pakistan authorised commercial banks to open and maintain accounts for PVARA-licensed Virtual Asset Service Providers. This is a landmark development — previously, banking access was one of the biggest operational barriers for crypto companies in Pakistan. See our Tax & Banking services for support with bank account facilitation.

10

Current Market Status

Reported NOC Activity Per Media Reports

BinanceReported NOC

World's largest crypto exchange — reported in media to have received a PVARA No Objection Certificate.

HTX (Huobi)Reported

Major Asian exchange — reported in media as progressing through the PVARA process.

Important: PVARA does not maintain a public NOC holders list; the above is based on media reports. NOC holders are NOT permitted to operate commercially — they must complete full licensing first.

10
License Categories (Draft)
0
Full Licenses Issued
LIVE
Sandbox Now Open
11

Regulatory Sandbox 2026

LIVE

Official PVARA Regulatory Sandbox Guidelines 2026

PVARA has launched its Regulatory Sandbox under the Regulatory Sandbox Guidelines 2026 (issued under the Virtual Assets Act 2026). The Sandbox provides a structured, controlled environment for innovative Virtual Asset startups and VASPs to test novel products and services under PVARA supervision — without a full license from day one, and with reduced, proportionate capital under Regulation 7(5).

Year-Round
Applications
Agile Approach
60 Days
Assessment
Working days
LoA Issued
Outcome
Letter of Approval
Full License
Exit Path
Or wind-down

Sandbox Objectives

Implement PVARA's mandate to enable supervised testing of virtual asset innovation
Enable responsible testing of innovative VA products and services in a controlled environment
Promote financial innovation while ensuring investor protection and market integrity
Allow testing under reduced, proportionate capital (Reg 7(5)) before full Schedule I capital
Define clear procedures for intake, assessment, onboarding, supervision, and exit
Coordinate with domestic and international regulatory authorities as needed

No-Action Relief

PVARA may issue a No-Action Letter to approved sandbox participants, stating it does not intend to take enforcement action for specified conduct during the testing period.

Important: A No-Action Letter is not legal immunity. PVARA reserves the right to withdraw it at any time with written notice.

Undertaking Required

Upon approval, participants must submit a formal Undertaking (Annexure-B) committing to sandbox terms, consumer protection, AML/CFT obligations, data security, and PVARA's full access rights.

  • Notify PVARA promptly of any material incident
  • Submit a detailed incident report within the required window
  • Retain transaction records for the statutory period
  • Obtain insurance coverage for client indemnification

All applicants must satisfy the following criteria before PVARA will consider a sandbox application:

01

Fit & Proper

No history of fraud, financial crime, regulatory breaches, bankruptcy, or designation as a proscribed person among directors or key management.

02

Testing Plan

Clearly defined objectives, duration, KPIs, and target users. Must include a sandbox exit plan (transition to full licensing or orderly wind-down).

03

Risk & Governance

Complete governance structure with identifiable UBO, enterprise risk assessment, KYC/screening, complaint handling, and AML/CFT safeguards.

04

Consumer Protection

Data security measures, dispute resolution mechanism, client asset safeguarding policies, fraud liability management, and complete risk disclosure.

05

Cybersecurity

System controls, private key protection, operational resilience, and data privacy compliance. Cross-border supervision protocols where applicable.

06

Scalability Readiness

Demonstrate technical, financial, and human resource capacity to scale the proposed business model after successful testing.

Foreign Applicants

International companies not locally incorporated will be required to incorporate in Pakistan and register with local tax authorities as a condition of receiving sandbox approval.

Agile Approach: Applications are accepted year-round. No fixed intake windows — submit anytime during the year.

01

Submit Application

Complete Form I with full innovation description, blockchain/tech stack details, cybersecurity strategy, regulatory analysis, and risk management table.

02

Self-Assessment Checklist

Submit the Annexure-A self-assessment covering scope, scalability, technology security, genuine innovation, consumer benefit, readiness, and ML/TF preparedness.

03

Initial Screening

PVARA reviews application completeness. Incomplete applications are returned with a limited number of resubmissions permitted. Applications accepted year-round.

04

Assessment Phase

Comprehensive evaluation within 60 working days. PVARA may seek input from other regulators and request additional information during assessment.

05

Letter of Approval (LoA)

Successful applicants receive a Letter of Approval (LoA) with specific terms, conditions, and testing parameters. No-Action Relief may be issued for the testing period.

06

Testing Phase & Exit

Operate in the sandbox for the approved period and submit progress reports as agreed. At conclusion, submit a completion report; PVARA determines transition to full licensing or wind-down.

Form I — Required Submission Sections

Innovation summary with VA and blockchain details
Blockchain / DLT architecture description
Cybersecurity plan: threat model, mitigation, audits
Legal / regulatory compliance analysis (ML/TF/PF)
Risk management table (financial, operational, cyber)
Financial readiness / budgets; KPIs / KRIs
Consumer protection and user safety measures
Exit strategy and scaling plan
Team background, company history, funding docs
Contact and entity information
💡

Innovation & Market Impact

  • Novel product or service not currently offered in Pakistan
  • New application of existing or groundbreaking technology
  • Significant improvement on existing offerings
  • Transitions an informal/high-risk market into a regulated ecosystem
🛡️

Risk Management & Compliance

  • Review of systemic, operational, ML/TF/PF risks
  • Cybersecurity, data protection, and consumer protection frameworks
  • Shariah advisor consultation where applicable
  • FATF and AML/KYC framework alignment
🗺️

Feasibility & Exit Strategy

  • Technical and operational readiness, team expertise
  • Clear testing parameters and success criteria
  • Exit plans: wind-down if unsuccessful or license if successful
  • Authority may impose limits on volumes, users, or exposure
💰

Financial Strength

  • Demonstrated financial capacity for the proposed business model
  • Budget and funding commitments for the test phase
  • KPIs and KRIs clearly defined
  • Insurance coverage for client indemnification
📋

Tax Law Compliance

  • Compliance with applicable Pakistani tax laws
  • Complete financial records as required by law
  • No engagement in or facilitation of tax evasion
  • International applicants: incorporate locally upon sandbox approval
👥

Consumer & Investor Benefit

  • Increases transparency, lowers costs, or improves efficiency
  • Enhances financial inclusion or digital financial access
  • Identifies and mitigates risks: ML/TF, volatility, fraud, cyber
  • Clear risk disclosures to all test users

Ready to Apply for the PVARA Regulatory Sandbox?

Applications are open year-round. Our team can help you prepare a strong Form I application, self-assessment checklist, and undertaking — maximising your chances of approval.

12

Next Steps

Ready to Enter Pakistan's Crypto Market?

01

Eligibility & Route Assessment

We map the right entry route (NOC, Sandbox, No-Action, or full licence), the license category, and the Schedule I capital plan for your model.

02

Application Support

Full documentation preparation and submission to PVARA (NOC or Sandbox), pre-tested before filing. End-to-end managed.

03

Local Setup & Compliance

SECP registration, AML framework, banking via SBP Circular No. 10, and ongoing regulatory compliance.

Disclaimer

This guide is for informational purposes only and does not constitute legal, financial, or regulatory advice. It is based on publicly available information from official sources including pvara.gov.pk and PVARA's published documents (NOC Regulations, Regulatory Sandbox Guidelines 2026, Activity-Specific Handbooks 2026, and the Draft Pakistan Virtual Asset Services Regulations 2026). The VASP Regulations and Schedule I capital figures are in draft and may change before finalisation. PVARA has confirmed there is currently no prescribed application fee. NOC recipient information is based on media reports only — PVARA does not maintain a public NOC holders list. References to SBP Circular No. 10 of 2026 should be verified against the official circular. User and market statistics are estimates. Readers should consult qualified professionals and verify current requirements directly with PVARA before making any business decisions.