Service FAQ
Questions Exchanges Ask Before Engaging
Answered from the Virtual Assets Act 2026, the PVARA No Objection Certificate Regulations 2025, and the Sandbox Guidelines 2026 — with section references so you can verify every answer.
What services does CoinConnect provide for crypto exchanges entering Pakistan?
Five pillars. Regulatory and Licensing covers PVARA NOC application, full VASP licence acquisition, AML/CFT framework build and Sharia advisory. Corporate Setup covers SECP incorporation under the Companies Act 2017, registered office, legal documentation and board structuring. Tax and Banking covers FBR registration, tax compliance under Section 66 of the Virtual Assets Act 2026, corporate bank account facilitation and audit support. Launch and Growth covers PR, KOL activation, events and community building. Compliance Infrastructure is our RegTech line, currently in development, covering FBR data conversion, withholding tax automation and NADRA-linked KYC verification.
Can CoinConnect handle the entire PVARA licensing process end to end?
Yes. We run a five-phase process: Discovery, Licensing, Setup, Compliance and Launch. In practice that means readiness gap analysis against every PVARA requirement, preparation and submission of Form A1 with supporting Forms A2 to A5, SECP incorporation once the NOC is granted, FMU goAML registration, FBR enrolment, and then the full VASP licence application. One team owns all five phases, so there is no coordination gap between your lawyer, your accountant and your marketing agency.
What capital is required for a PVARA VASP licence in Pakistan?
It depends on your licence category. The Draft Pakistan Virtual Asset Services Regulations 2026 set minimum paid-up capital ranging from PKR 25 million for Advisory Services up to PKR 1 billion for Exchange Services and token issuance. Custody, Management and Investment, and Transfer and Settlement sit at PKR 200 million; Broker-Dealer at PKR 100 million; Lending and Borrowing and Derivatives at PKR 500 million. These figures are in draft and must be confirmed at filing. Importantly, paid-up capital is share capital held in your own company, not a fee paid to PVARA, and Section 25(4) of the Virtual Assets Act 2026 allows risk-based exemptions for limited-scope or low-risk licensees.
How long does the full Pakistan market entry process take?
The NOC decision has a defined ceiling: Regulation 17.1 requires PVARA to issue or refuse within 60 calendar days following assessment. That clock only starts once your submission is complete, so documentation quality is the main variable. SECP incorporation and FMU goAML registration follow the NOC, and the full VASP licence application must be filed within three months of the VASP licensing regulations being promulgated. Sandbox applicants run on a separate track with a 60 working-day evaluation.
Does CoinConnect handle FBR tax reporting for crypto exchanges?
Yes for registration and advisory, and a conversion product is in development. Section 66 of the Virtual Assets Act 2026 provides that every licensed Virtual Asset Service Provider shall comply with the obligations imposed under the income tax statute it names as the "Income Tax Act, 2001", and any Rules or Regulations issued by the Federal Board of Revenue.
Those FBR rules have not yet been notified, so there is currently no prescribed machine-readable VASP reporting format in Pakistan. Our
Tax and Banking service handles FBR registration, NTN issuance and ongoing tax compliance advisory today. Our
FBR Tax Data Bridge is being built so that when FBR notifies a format, your existing data can be mapped to it rather than rebuilt for it.
You remain the filer of record.
Can crypto exchanges verify Pakistani users against NADRA?
CoinConnect is building a
NADRA KYC Verification API for this. At onboarding it verifies a user's identity against NADRA records and screens them against Pakistani government and law-enforcement databases where authorised, returning a clear, review or blocked decision in real time with an audit-ready evidence trail suitable for PVARA and FMU inspection. A companion service,
Legacy KYC Remediation, runs an exchange's existing Pakistani user base through the same verification in bulk. Both are in development and delivered strictly within the scope of the relevant government data-access authorisations.
Do you work with Web3 startups or only large exchanges?
Both, but the route differs. Established exchanges with conventional products normally take the NOC and full VASP licence path. Web3 startups, stablecoin issuers, tokenisation platforms and DeFi protocols testing novel products usually belong in the
PVARA Regulatory Sandbox under Section 35 of the Virtual Assets Act 2026, which accepts applications year-round via Form I with an Annexure-A self-assessment. The Sandbox is the wrong door if live testing is not genuinely needed to answer a regulatory question — and we will tell you that before you spend money on an application.
What happens if a crypto exchange operates in Pakistan without a PVARA licence?
Section 54(1) makes wilfully providing an unlicensed Virtual Asset Service punishable by imprisonment up to five years, a fine up to PKR 50 million, or both. Section 61 separately empowers PVARA to block websites, apps, advertisements and payment links, with directions issued to app stores, search engines, advertising networks, registrars and payment providers. Section 55 extends personal liability to any director, manager or secretary whose consent, connivance or neglect enabled the offence. Section 43(1) also prohibits advertising a virtual asset whose issuer is unlicensed.
Can an exchange start operating on a PVARA NOC before the full licence is granted?
Partly — and this is the fastest legal route into Pakistan today. Under Regulation 2.3 and Regulation 17.1(a)(iii) of the NOC Regulations 2025, an NOC holder that has completed FMU goAML registration may provide four designated AML-Registered Services — Exchange, Broker-Dealer, Custody, and Virtual Asset Derivatives Services — before obtaining a full licence, subject to PVARA's conditions and until the licence application is finally determined. The other six Schedule I categories require a full licence first. Regulation 19.1(e) allows PVARA to revoke the NOC if the holder fails to progress toward full licensing.
Why use a specialist consultancy instead of a law firm for PVARA licensing?
A law firm will draft your documents. It will not build your AML technology stack, register you on goAML, structure your bank approach, or run your launch campaign. PVARA assessment under Regulation 16.1 explicitly covers operational readiness of the AML/CFT framework, adequacy of technology architecture and monitoring systems, and the applicant's inherent and residual ML/TF risk profile — not just paperwork. Form A4 requires the CEO and MLRO to jointly certify that onboarding, screening, monitoring, blockchain analytics and retention systems are implemented, tested and operational. CoinConnect covers legal, operational, technical and commercial workstreams under one accountable team.