D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.
Pakistan operates under the Anti-Money Laundering Act 2010 (as amended), with the Financial Monitoring Unit (FMU) as FIU, State Bank of Pakistan and SECP as sectoral AML/CFT supervisors, and a 2025-created Pakistan Virtual Assets Regulatory Authority (PVARA) for crypto.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Pakistans defining financial-integrity development this cycle is the enactment of the Virtual Assets Act, 2026, which converts the Pakistan Virtual Assets Regulatory Authority (PVARA) from a body first created by a July 2025 presidential ordinance into a permanent, statutory federal authority with licensing and supervisory power over virtual asset service providers. The Act attaches criminal penalties to unlicensed operation and states an objective of FATF-aligned AML/CFT coverage, formally extending the designated-reporting-entity perimeter to licensed VASPs. Read architecturally rather than as a single event, this is a perimeter-closing move: it takes what had been an unregulated space for virtual-asset activity in Pakistan and places a licensing gate in front of it, with the stated intention of bringing VASP activity inside the same reporting obligations that apply to other regulated financial actors. The gazetted statutory text was not directly retrieved this cycle; the finding rests on PVARAs own published material and contemporaneous trade press, which is a gap worth flagging for anyone treating the AML-alignment claim as independently verified rather than self-reported by the new authority.
A second, connected development reinforces the architectural reading: the State Bank of Pakistan issued BPRD Circular Letter No. 10 of 2026, permitting banks to open and maintain accounts for PVARA-licensed virtual asset service providers. This reverses SBPs prior blanket 2018 prohibition on banks servicing crypto firms, but the reversal is conditional and narrow, applying only to entities that hold a PVARA licence. The practical effect is that Pakistans banking sector now has a lawful channel to service crypto firms for the first time in seven years, but that channel runs entirely through the new licensing gate rather than around it, meaning the integrity of the licensing process itself becomes the load-bearing control for this entire segment of exposure. Separately, the Act authorises PVARA to designate special virtual-asset zones intended to attract blockchain companies; no such zone had been designated as of the most recent secondary reporting available this cycle, so this remains a forward-looking horizon item rather than an observed structural change, and its eventual design (permissive versus tightly supervised) will materially affect whether the zones expand or narrow the integrity perimeter just established.
The principal watch item is whether PVARA exercises its zone-designation authority, on current reporting expected around 2027-Q1, and how any such zone is structured relative to the licensing and reporting obligations just established. A second watch item is whether the licensing regime demonstrates operational capacity, actual licensing decisions and supervisory activity, rather than remaining a statutory framework without visible enforcement. Corroboration of the Acts gazetted text against a primary source, rather than PVARAs own site and trade press, would materially strengthen confidence in the AML-alignment claim underpinning this entire assessment.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
Commercial Activity is not yet covered for this jurisdiction in this report.
Virtual asset service providers licensed by PVARA are now designated reporting entities, and banks may open accounts for licensed VASPs under BPRD Circular Letter No. 10 of 2026. Any correspondent or client exposure touching Pakistani VASPs should be assessed against whether the counterparty holds a PVARA licence.
PVARA licensure is now the determinative fact for whether a Pakistani virtual-asset counterparty can lawfully hold a bank account; compliance frameworks referencing Pakistan as a blanket-restricted VASP jurisdiction should be updated to reflect the licensed/unlicensed distinction.
No material change for this persona this cycle
Pakistan remains off both FATF lists as of the June 2026 plenary, and the new statutory VASP framework is a structural risk-reduction move rather than an incident. Board-level financial-crime exposure tied to Pakistan is not currently elevated by this cycle's findings.
Systems servicing Pakistani VASP counterparties should be built to verify PVARA licence status as a gating control, and technical roadmaps should track the still-undesignated virtual-asset zones, which could later carry distinct technical or reporting requirements.
Risk models treating all Pakistani virtual-asset activity as unregulated should be revised; the licensed cohort now sits inside a supervisory perimeter, but the reliability of that perimeter has not been independently corroborated against a primary statutory text this cycle.
No material change for this persona this cycle
The gazetted text of the Virtual Assets Act, 2026 was not directly retrieved this cycle; audit documentation relying on this framework's stated FATF alignment should note that the claim traces to PVARA's own site and trade press pending primary-source corroboration.
Pakistan formalised a statutory VASP licensing and AML-reporting perimeter under the Virtual Assets Act, 2026.
A new licensing gate for Pakistani VASPs changes the risk basis for onboarding and ongoing due diligence.
No material change this cycle.
Pakistan's FATF standing remains stable while its crypto sector moves from unregulated to licensed.
PVARA's licensing framework and prospective virtual-asset zones will shape technical integration requirements for any Pakistan-facing crypto product.
The unregulated-to-licensed transition in Pakistan's crypto sector reduces one exposure vector while creating a new dependency on licensing-process integrity.
No material change this cycle.
The AML-alignment claim underpinning Pakistan's new VASP framework rests on secondary sourcing, not a retrieved primary text.
Illustrative orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) moves cross-border obliged entities within the EU toward direct or indirect AMLA-level supervision, alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, the structural balance between purely national AML supervision and a hybrid EU-level regime shifts. This is architecture-over-incident framing describing a possible structural mechanism at the EU level, not an observed fact about Pakistan, and not a prediction of how any specific evasion typology will respond.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
Illustrative orientation only: where a jurisdiction converts an unregulated virtual-asset space into a licensed perimeter and simultaneously permits banking access conditioned on that licence, the integrity of the licensing process itself becomes the single point on which the wider AML control environment depends. A structural weakness in licensing diligence, rather than any single transaction, would be the mechanism by which risk re-enters the newly banked segment. This is illustrative structural reasoning, not an observed finding about PVARAs actual licensing practice.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material PK-specific signal in Russian sanctions-evasion channels this cycle. |
| T2 · EU AML Package / AMLA | no_change | Not applicable to PK (not EEA/EU). |
| T3 · FATF Grey List | no_change | Pakistan has remained off the FATF grey list since October 2022 through the February 2026 plenary per the most recent dated source found. |
| T4 · Beneficial-Ownership Register Status | watch | SECP continues to expand BO disclosure obligations but no centralised public UBO register exists; pre-window development carried forward as standing status. |
| T5 · Crypto & Digital-Asset Integrity | watch | PVARA's licensing portal and 10-category VASP regime continue to be operationalised, with AML/CFT duties (KYC, travel rule, goAML reporting to FMU) attaching by licence category. |
| T6 · Sanctions Regime Divergence | no_change | Pakistan has no autonomous broad sanctions regime; it implements UN Security Council sanctions via Ministry of Foreign Affairs SROs and NACTA's Proscribed Persons List. |