Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Laos LA

Domains (D1–D6)
2
Sources
11
Role actions
8
Horizon <90d
1
Jurisdiction profile
Grey-ListTier BRisk: IncreasingPermissive

Laos has a 2014 AML/CFT law (amended) administered by the Bank of the Lao PDR's Anti-Money Laundering Intelligence Unit.

MoreFATF/APG's 2023 Mutual Evaluation found weak risk understanding, minimal SEZ/casino supervision, and low ML prosecutions. Laos entered FATF increased monitoring (grey list) in February 2025 and was added to the EU and UK high-risk third-country lists in mid-2025, reflecting persistent structural deficiencies concentrated in Special Economic Zones.

Key deficiencies
  • No risk-based supervision or fit-and-proper checks over casinos, banks and reporting entities operating in Special Economic Zones
  • Low volume of money-laundering investigations and prosecutions relative to transnational risk profile
  • No national confiscation policy consistent with ML/TF risk
  • Limited spontaneous financial-intelligence dissemination from FIU to law enforcement
  • State equity participation in the Golden Triangle SEZ creates a direct conflict of interest undermining enforcement will
Recent developments (18m)
  • FATF added Lao PDR to its Jurisdictions Under Increased Monitoring list, 21 February 2025
  • EU Commission added Laos to the high-risk third-country delegated regulation list, 10 June 2025
  • UK HM Treasury's MLR high-risk third-country advisory notice lists Laos following each FATF plenary update through June 2026
  • FATF October 2025 review noted Laos addressed some technical compliance deficiencies on the TF offence (Recommendation 5)
  • UK and US jointly sanctioned a Southeast Asian scam-centre network (Cambodia/Laos/Myanmar nexus) on 14 October 2025
  • OFAC designated a DPRK IT-worker crypto-laundering network on 12 March 2026 naming an operative based in Boten, Laos
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The Bank of the Lao PDR (BOL) has moved to tighten one of the payment rails feeding unlicensed offshore cryptocurrency purchases. A notice dated 31 July 2026, reported in Lao and regional press between 28 and 30 September 2026, directs commercial banks and payment service providers to identify and block card-payment channels and Merchant Category Codes used to buy cryptocurrency on foreign platforms that are not licensed by BOL. The notice is corroborated by two independent tier-three press accounts describing the same dated instrument, though no primary BOL text has been retrieved this cycle, so confidence sits at Probable rather than Confirmed. The measure narrows a specific laundering vector, routing of funds offshore via card rails to unregulated exchanges, but it leaves open whether Laos's two BOL-licensed platforms, Bitqik and the Lao Digital Assets Exchange, are treated differently under the same instrument. That scope gap matters: enforcement directed only at unlicensed platforms can redirect flows toward licensed ones rather than close the exposure, and the public evidence base does not yet say which outcome the notice produces.

This is best read as an episodic enforcement tightening layered onto a structural enabler-jurisdiction profile that has not moved this cycle. Laos's standing financial-integrity posture, weak supervision of casino and Special Economic Zone reporting entities and the absence of an effective beneficial-ownership register, continues unchanged. The card-block notice narrows one access point without addressing that architecture.

Other Developments

FATF grey-list status unchanged. Laos remains on the FATF list of Jurisdictions Under Increased Monitoring per the 19 June 2026 statement, which records that Lao PDR should continue to work on implementing its FATF action plan. The next scheduled plenary review is October 2026, and no outcome had been published as of this cycle's close. FATF has called for continued implementation, not countermeasures; the grey-list designation functions in industry practice as an enhanced-due-diligence risk factor rather than a comprehensive-sanctions trigger.

Beneficial ownership and enabler-jurisdiction exposure carried forward without new findings. No primary source was retrieved this cycle bearing on beneficial-ownership register status or on the Golden Triangle Special Economic Zone's casino-linked exposure. Both remain standing structural findings from prior assessment: Laos continues to lack an independent, effective beneficial-ownership register, and the Golden Triangle SEZ, built and operated under Chinese organised-crime influence, remains a structural money-laundering vulnerability tied to weak risk-based supervision of casino and SEZ reporting entities. Neither finding changed this cycle; both are carried forward as unchanged baseline rather than new signal.

Cross-Monitor Connections

The BOL card-block notice sits at the intersection of payment-rail control and digital-asset-sector oversight: the same instrument that narrows a sanctions-and-laundering-relevant payment channel is also the jurisdiction's most recent crypto-specific enforcement action, so the finding carries directly into the crypto-sector reading of Laos's regime as well as the payments-market reading of the same instrument. Both readings rest on the identical underlying fact and the identical evidentiary gap: the primary BOL text has not been retrieved, and treatment of the two BOL-licensed exchanges remains unconfirmed.

Outlook

The near-term marker to watch is the FATF October 2026 Plenary, which may revise Laos's action-plan items or grey-list status based on progress assessed since the June 2026 statement; no outcome is yet available. Separately, confirmation of the BOL notice's primary text, and in particular whether it exempts the two domestically licensed crypto platforms, would resolve whether this cycle's measure is a genuine narrowing of laundering exposure or a partial, displaceable control. Absent that confirmation, the structural picture, persistent beneficial-ownership opacity and casino/SEZ supervisory weakness, remains the dominant driver of Laos's financial-integrity profile, with this cycle's payment-rail notice read as a modest, unconfirmed-scope tightening rather than a change to that architecture.

weekly_brief_draft · JID LA
Domain intelligence (D1–D6)

D1 Sanctions

Sanctions

Continue reading

The lead development against Laos's sanctions-architecture-and-evasion posture this cycle is a Bank of the Lao PDR notice, dated 31 July 2026 and reported in press between 28 and 30 September 2026, directing commercial banks and payment service providers to identify and block card-payment channels and Merchant Category Codes connected to purchasing cryptocurrency on foreign platforms not licensed by BOL. Two independent tier-three press sources corroborate the same dated instrument, but no primary BOL text has been retrieved this cycle; confidence on the underlying fact sits at Probable. Read through a sanctions-and-evasion lens, the notice targets a specific cross-border payment channel, card-based purchase of crypto assets on unlicensed foreign exchanges, that functions as a route for value to exit the formally regulated banking system without passing through a licensed domestic counterparty. Closing or narrowing such a channel is relevant to sanctions-evasion architecture generally, since unlicensed, unsupervised offshore exchanges are a recurring vector by which designated parties and their facilitators seek to route value around correspondent-banking and scheme-level controls.

The notice carries an important scope gap, however. It does not clarify whether Laos's two BOL-licensed crypto platforms, Bitqik and the Lao Digital Assets Exchange, are exempt from the card-payment block or whether they too fall within its reach. This is a genuine architecture gap rather than a statement about any firm's internal controls: enforcement that targets only unlicensed platforms, while leaving licensed platforms outside its scope or unaddressed, risks displacing rather than closing the underlying laundering or evasion channel, since flows can simply redirect toward the domestically licensed venues. Until the primary instrument is retrieved and its scope against licensed platforms confirmed, the notice should be read as a narrowing of one vector, not a closure of the broader channel.

Separately, and unrelated to this cycle's payment-channel notice, Laos's standing sanctions-relevant structural exposure continues unchanged. The Golden Triangle Special Economic Zone, built and operated under the influence of a Chinese organised-crime figure, remains a structural money-laundering vulnerability tied to weak risk-based supervision of casino and SEZ reporting entities. This is carried forward from prior assessment as an unchanged baseline finding, not a new-cycle development, and is cited here because casino-based and SEZ-based value transfer is itself a recognised sanctions-evasion and layering mechanism in the Mekong sub-region, operating independently of, and prior to, this cycle's card-payment-block notice.

Taken together, the architecture reading is that Laos this cycle produced one incremental tightening, directed at a card-payment channel into unlicensed offshore crypto exchanges, set against a persistent structural backdrop of casino/SEZ-based laundering exposure and the continuing absence of an effective beneficial-ownership register. The incremental measure is real but narrow; it does not alter the structural picture, and its ultimate effect on sanctions-evasion exposure cannot be assessed until the scope question regarding licensed platforms is resolved.

Outlook

The principal open question for the sanctions-and-evasion reading is whether the BOL notice's primary text, once retrieved, confirms that licensed domestic platforms are excluded from, or alternatively brought within, its card-payment-block scope; this will determine whether the measure genuinely narrows the laundering channel or displaces it internally. The FATF October 2026 Plenary is also a marker to watch, since any revision to Laos's action-plan items could bear on how its grey-list status is read alongside this payment-channel tightening. Absent new primary-source confirmation, the structural exposure tied to the Golden Triangle SEZ and the absence of an effective beneficial-ownership register remains the dominant driver of Laos's sanctions-evasion risk profile, with this cycle's card-block notice read as a modest, scope-unconfirmed tightening layered on top of that unchanged architecture.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Laos's standing restrictions on cryptocurrency trading, exchange services and card-based crypto purchases, in place since BOL's October 2018 restrictions, were incrementally tightened this cycle by a BOL notice dated 31 July 2026 and reported in press between 28 and 30 September 2026. The notice directs commercial banks and payment service providers to identify and block payment channels and Merchant Category Codes used to purchase cryptocurrency on foreign platforms that BOL has not licensed. Two independent tier-three press accounts corroborate the same dated instrument; no primary BOL text has been retrieved this cycle, which caps confidence at Probable rather than Confirmed, and the underlying instrument itself has not yet been directly reviewed.

From a financial-innovation and digital-asset-integrity standpoint, the development is best characterised as a payment-rail control layered onto an existing restrictive posture, rather than a new licensing or market-structure change. BOL is not creating a new category of regulated activity; it is directing regulated payment intermediaries, banks and payment service providers, to interdict a specific channel, card-based purchase of crypto assets, where the counterparty exchange is unlicensed and offshore. This is consistent with a jurisdiction that treats cryptocurrency activity as presumptively restricted outside a narrow licensed channel, and that is now extending enforcement attention to the payment infrastructure that enables access to unlicensed offshore venues, rather than to the exchanges themselves directly.

The notice's most significant open question, from an integrity standpoint, is whether it exempts or otherwise addresses the two platforms BOL has itself licensed, Bitqik and the Lao Digital Assets Exchange. This is an unresolved scope gap in the public evidence base rather than a finding about either platform's own compliance posture. If licensed platforms are unaffected by the card-payment block, flows previously directed to unlicensed offshore exchanges could migrate toward the licensed domestic venues, which would represent a genuine narrowing of extraterritorial laundering exposure even without a change to the licensed platforms' own obligations. Conversely, if the block is intended to apply irrespective of platform licensing status, the measure would represent a broader tightening of card-based access to crypto purchase generally. The public record does not yet resolve which reading applies, and no primary instrument text was available this cycle to settle it.

Outlook

The clearest marker for this domain going forward is retrieval and confirmation of the BOL notice's primary text, specifically its treatment of the two BOL-licensed crypto platforms relative to the card-payment block on unlicensed foreign platforms. That confirmation would materially sharpen the financial-integrity reading of this measure, from an unconfirmed-scope payment-rail control to either a targeted narrowing of offshore flows or a broader restriction on card-based crypto purchase generally. Until then, the measure should be read as an incremental tightening consistent with Laos's existing restrictive posture toward cryptocurrency activity, rather than as a structural change to the licensing or supervisory framework governing the sector.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force Pending2026-Q4 · ±quarter

FATF October 2026 Plenary review of Laos's action plan

The October 2026 Plenary may revise Laos's grey-list status or action-plan items depending on progress assessed since the 19 June 2026 statement.
1 dated · 3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

BOL ordered banks and payment providers to block card-based crypto purchases on unlicensed foreign platforms from 31 July 2026.

Payment-channel blocking obligations of this kind are relevant to SAR-trigger review for customer activity flagged under the new card/MCC controls; the scope relative to BOL-licensed platforms remains unconfirmed, which limits the precision of any threshold guidance that can be drawn this cycle.

2 evidence refs
Compliance

A new BOL payment-rail control narrows access to unlicensed offshore crypto platforms, with scope against domestically licensed platforms unresolved.

Obliged entities operating card or payment rails into Laos face a new blocking requirement whose precise perimeter, particularly treatment of BOL-licensed exchanges, is not yet confirmed in the public record, creating an interim period of policy ambiguity.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Laos remains grey-listed by FATF pending an October 2026 Plenary review, alongside a new, narrowly scoped payment-channel control on unlicensed crypto platforms.

The jurisdiction's overall financial-integrity standing has not shifted materially this cycle; the FATF Plenary outcome in October 2026 is the near-term event that could change that standing.

1 evidence refs
CTO

BOL's card-block notice targets payment-channel infrastructure, not platform licensing, leaving unresolved how BOL-licensed exchanges are affected.

Any payment or card-processing integration touching Laos-linked crypto purchase flows should anticipate MCC-level blocking controls on unlicensed foreign platforms, with the treatment of licensed domestic platforms still unconfirmed in the public record.

2 evidence refs
Risk

An episodic payment-rail tightening against unlicensed offshore crypto platforms sits atop an unchanged structural enabler-jurisdiction exposure in Laos.

The structural risk picture, weak casino/SEZ supervision and absent beneficial-ownership register, has not moved; the new payment-channel control is a narrow, scope-unconfirmed mitigant against one laundering vector, not a change to the underlying exposure concentration.

4 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

The evidentiary basis for the BOL card-block notice rests on secondary press reporting; the primary instrument has not been retrieved.

Control-testing scope for any card/MCC-blocking requirement derived from this notice should account for the fact that primary BOL text confirming the measure's precise scope, including treatment of licensed platforms, has not yet been independently verified.

2 evidence refs
Decision lens
MLRO

BOL ordered banks and payment providers to block card-based crypto purchases on unlicensed foreign platforms from 31 July 2026.

Compliance

A new BOL payment-rail control narrows access to unlicensed offshore crypto platforms, with scope against domestically licensed platforms unresolved.

Legal

No material change this cycle.

Board

Laos remains grey-listed by FATF pending an October 2026 Plenary review, alongside a new, narrowly scoped payment-channel control on unlicensed crypto platforms.

CTO

BOL's card-block notice targets payment-channel infrastructure, not platform licensing, leaving unresolved how BOL-licensed exchanges are affected.

Risk

An episodic payment-rail tightening against unlicensed offshore crypto platforms sits atop an unchanged structural enabler-jurisdiction exposure in Laos.

Operations

No material change this cycle.

Audit

The evidentiary basis for the BOL card-block notice rests on secondary press reporting; the primary instrument has not been retrieved.

Shared evidence: 2 refs
Scenario sketches

AMLA direct/indirect supervision transition and cross-border obliged-entity evasion response

Illustrative scenario for analytical orientation only: as the EU AML Package moves cross-border obliged entities from purely national AML supervision toward AMLA direct or indirect supervision under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, evasion architecture that previously relied on jurisdiction-shopping between national EU supervisors could face a more consolidated supervisory perimeter. This is an illustrative structural mechanism, not an observed development bearing on Laos this cycle, and is included as standing orientation on the EU supervisory architecture rather than as a Laos-specific finding.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material change found bearing on Laos this cycle.
T2 · EU AML Package / AMLAno_changeLaos is outside the EEA/EU framework; not applicable.
T3 · FATF Grey Listno_changeLaos remains on the FATF grey list as of 19 June 2026; October 2026 Plenary outcome pending.
T4 · Beneficial-Ownership Register Statusno_changeNo update this cycle; Laos continues to lack an effective BO register per the 2023 MER.
T5 · Crypto & Digital-Asset Integritymaterial_changeBOL's 31 July 2026 notice ordering banks and payment providers to block card-based purchases of crypto on BOL-unlicensed foreign platforms.
T6 · Sanctions Regime Divergenceno_changeNo Laos-specific designation, delisting or divergence event found this cycle.
Registers

Enforcement actions

  • FATF added Lao PDR to its Jurisdictions Under Increased Monitoring ('grey') list following a high-level political commitment by Laos to work with FATF and APG on an 8-point action plan covering risk understanding, SEZ/casino supervision, FIU output, and confiscation policy. 21 Feb 2025
  • The UK and US jointly sanctioned a network operating illegal scam centres across Southeast Asia that trick global victims and traffic and torture forced-labor workers; a £12 million London mansion tied to the network was frozen. 14 Oct 2025
  • OFAC designated six individuals and two entities, including a Laos-based DPRK IT-worker leader and associated cryptocurrency addresses across Ethereum and Tron, for facilitating a scheme that generated nearly $800 million in 2024 to fund DPRK WMD and ballistic-missile programs. 12 Mar 2026
  • The European Commission updated Delegated Regulation (EU) 2016/1675 to add Laos among high-risk third-country jurisdictions with strategic AML/CFT deficiencies, aligning the EU list with FATF's increased-monitoring designation. 10 Jun 2025

Sanctions changes

  • OFAC listed a DPRK IT-worker facilitation network including a Laos-based operative (Yun Song Guk, active in Boten since 2023) and multiple blockchain addresses used to launder DPRK proliferation-financing proceeds. 12 Mar 2026
  • UK HM Treasury, coordinated with US OFAC, sanctioned a Southeast Asian scam-centre network with Cambodia/Laos/Myanmar operational nexus, freezing a £12 million London property tied to the network. 14 Oct 2025
  • The EU Commission added Laos to its AMLD IV high-risk third-country delegated regulation (Art. 9), a jurisdiction-level AML/CFT risk listing rather than an asset-freeze sanction, effective from mid-2025. 10 Jun 2025

Regulatory horizon (register)

  • FATF next Plenary review of Lao PDR action-plan progress
  • EU high-risk third-country list next periodic revision
  • 10th Lao National Socio-Economic Development Plan (2026-2030)

Active schemes

  • [CRITICAL] Golden Triangle SEZ Casino & Scam-Compound Complex
  • [HIGH] DPRK IT-Worker Crypto Revenue Laundering via Boten
  • [CRITICAL] Mekong Region Scam-Compound Crypto Laundering Pipeline
  • [HIGH] SEZ Autonomous-Zone Corporate Opacity Structuring
Sources
  1. FATF / Asia-Pacific Group on Money Laundering (APG)
  2. FATF
  3. European Commission
  4. US Department of the Treasury, OFAC
  5. UK HM Treasury / FCDO
  6. UK Government (FCDO/Home Office/HM Treasury)
  7. Bloomberg Businessweek
  8. UNODC
  9. Chainalysis
  10. OCCRP
  11. UK HM Treasury
Coverage gaps
The Lao government holds a 20% equity stake in the Golden Tr…
The Lao government holds a 20% equity stake in the Golden Triangle SEZ and has taken no enforcement action against Zhao Wei/Kings Romans entities despite their 2018 OFAC Transnational Criminal Organization designation, per the 2023 APG mutual evaluation report.
FATF's action-plan item 2 (risk-based supervision of casinos…
FATF's action-plan item 2 (risk-based supervision of casinos, banks and SEZ reporting entities, including fit-and-proper checks) remains open as of the June 2026 statement, more than a year after Laos's grey-listing.
FATF action-plan items 5-7 (demonstrating an increase in ML …
FATF action-plan items 5-7 (demonstrating an increase in ML investigations/prosecutions, developing a national confiscation policy, and seizing/confiscating proceeds of crime) remain unaddressed through the June 2026 review cycle.
This baseline could not locate an accessible English-languag…
This baseline could not locate an accessible English-language native Lao government primary source (Bank of Laos AMLIU publications, National Assembly gazette) beyond the joint UK-Laos law-dissemination announcement; the baseline instead relies on multilateral (FATF/APG, UNODC) and foreign-government (US, UK, EU) reporting.

Evidence

Confidence-tiered claims

BOL issued a notice dated 31 July 2026 (reported 28-30 September 2026) directing commercial banks and payment service providers to identify and block payment channels and Merchant Category Codes used to purchase cryptocurrency on foreign platforms not licensed by BOL. SRC-fim-LA-001
Probable · 1 source
The BOL notice does not clarify whether the two domestically BOL-licensed crypto platforms (Bitqik, Lao Digital Assets Exchange) are exempted from the card-payment block, leaving a supervisory gap on licensed-platform treatment. SRC-fim-LA-001
Uncertain · 1 source
Laos remains on the FATF Jurisdictions Under Increased Monitoring list as of the 19 June 2026 statement; the next scheduled plenary is October 2026 and had not published an outcome as of this cycle's close. SRC-fim-GLOBAL-003
Probable · 1 source
Laos continues to lack an independent, effective beneficial-ownership register per the FATF/APG 2023 Mutual Evaluation Report findings carried forward from prior cycles. SRC-fim-LA-006
Probable · 1 source
Casino-linked money-laundering exposure in the Golden Triangle SEZ, built and operated under Chinese organised-crime influence, remains a standing structural vulnerability rather than a new-cycle event. SRC-fim-LA-006
Probable · 1 source