Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Kazakhstan KZ

Domains covered
8 of 8
Sources
154
Role actions
8
Horizon <90d
2
Jurisdiction profile
FATF status: Largely Compliant Tier: B Risk direction: Increasing Enablement vs enforcement: Mixed

Kazakhstan is assessed by the Eurasian Group (EAG), not FATF directly, under its 2023 Mutual Evaluation Report.

MoreThe Agency for Financial Monitoring is the FIU/policy lead. Legal-person BO transparency is largely compliant, but legal-arrangement transparency and FI supervision remain weak (R.26 non-compliant). EAEU membership and border-free trade with Russia create structural sanctions-evasion exposure managed unevenly by a domestic Specific Goods Law licensing regime.

Key deficiencies
  • R.26 (regulation and supervision of financial institutions) rated non-compliant in the 2023 EAG MER
  • R.25 (transparency of legal arrangements/trusts) rated partially compliant
  • National risk assessment does not assess cross-border ML risk despite Kazakhstan's role as a Eurasian transit hub
  • R.30/31/34/35/37/39 (LEA responsibilities, investigative powers, guidance, sanctions, MLA, extradition) all rated only partially compliant
Recent developments (18m)
  • UK designated Kazakhstan-born dual national Eduard Khudainatov (Independent Oil & Gas Company) under the Russia sanctions regime, February 2025
  • EU 19th sanctions package (October 2025) imposed a transaction ban on banks in Belarus and Kazakhstan over Russian financial-messaging/payment-system links
  • EU 20th sanctions package (April 2026) designated third-country suppliers in Kazakhstan (with China, UAE, Uzbekistan, Belarus) for providing dual-use goods/weapons systems to the Russian military-industrial complex
  • EU proposed a 21st sanctions package (mid-2026) with trade controls on companies operating outside Russia, including entities in Kazakhstan
  • FATF June 2026 plenary confirmed Kazakhstan remains off the increased-monitoring (grey) list
Brief

Lead signal

Lead Signal

Kazakhstan's financial-integrity posture this cycle is defined by a widening split between its sanctions-exposed banking corridor and the increasingly active licensing perimeter the Astana International Financial Centre (AIFC) has built for digital assets. The AIFC Court granted injunctions, dated 15 September 2026 and reported as enforced on 20-21 October 2026, restricting six international exchanges - Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX - from offering unlicensed digital-asset services inside the AIFC, with Apple and Google directed to restrict the relevant apps inside Kazakhstan. The same licensing architecture that produced that enforcement action is also now opening a formal door: Kraken, operating through its local subsidiary Payward Kazakhstan, received in-principle approval from the Astana Financial Services Authority (AFSA) around 28 October 2026 to run a trading platform and hold client digital assets inside the AIFC, though a final licence has not yet been granted.

Read full brief

Lead Signal

Kazakhstan's financial-integrity posture this cycle is defined by a widening split between its sanctions-exposed banking corridor and the increasingly active licensing perimeter the Astana International Financial Centre (AIFC) has built for digital assets. The AIFC Court granted injunctions, dated 15 September 2026 and reported as enforced on 20-21 October 2026, restricting six international exchanges - Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX - from offering unlicensed digital-asset services inside the AIFC, with Apple and Google directed to restrict the relevant apps inside Kazakhstan. The same licensing architecture that produced that enforcement action is also now opening a formal door: Kraken, operating through its local subsidiary Payward Kazakhstan, received in-principle approval from the Astana Financial Services Authority (AFSA) around 28 October 2026 to run a trading platform and hold client digital assets inside the AIFC, though a final licence has not yet been granted.

Read together, these are not contradictory signals but two faces of the same architecture: Kazakhstan is not closing its crypto perimeter, it is defining it, and firms that sit inside the AIFC's licensing track are being distinguished sharply from those that do not. The enforcement action is probable rather than confirmed in its full scope - it is corroborated across two independent trade outlets, but the regulator's own release was not directly retrieved this pass - and the same caveat applies to Kraken's approval, which rests on a single regional outlet rather than AFSA's own register. Both nonetheless point the same direction: a jurisdiction actively building and testing a licensing gate rather than leaving the space unregulated by default.

Other Developments

A gambling-sector AML liability gap moves into consultation. Kazakhstan's Ministry of Tourism and Sports has published a draft order that would impose personal administrative liability on casino, bookmaker and lottery heads, together with their financial-control staff, for anti-money-laundering violations. The draft explicitly cites FATF Recommendation 35 as its reference point, and public discussion is understood to run to 13 November 2026. This is a jurisdiction identifying a specific compliance gap against an international standard and moving to close it through personal accountability rather than entity-level fines alone - a structural response, not an isolated incident.

The standing AML/CTF baseline remains favourable even as the gap is being addressed. Kazakhstan remains off the FATF grey list, and the 2023 EAG mutual evaluation rated it Compliant or Largely Compliant on 33 of the 40 FATF Recommendations. The gambling-sector draft order is best read against that baseline: a jurisdiction with a broadly sound standing AML architecture addressing one identified sectoral weakness, rather than a jurisdiction under systemic pressure.

Cross-Monitor Connections

The AIFC's dual posture toward digital-asset firms - court-ordered exclusion for unlicensed platforms alongside in-principle approval for a licensed applicant - has a direct bearing on how global crypto-infrastructure firms assess Central Asian market entry, a question that sits primarily within the crypto-focused monitor's remit and is flagged here only as a connection point. Equally, the architecture by which Apple and Google were directed to restrict applications inside Kazakhstan is a technology-platform enforcement mechanism with implications beyond financial integrity narrowly defined, relevant to monitors tracking platform-level compliance obligations.

Outlook

The gambling-sector consultation is scheduled to close on 13 November 2026, after which the draft order's final form - and whether the personal-liability provisions survive intact - should become clearer. On the digital-asset side, Kraken's licence remains at the in-principle stage, and whether AFSA converts that into a final licence, and on what timeline, is the next concrete marker to watch. Whether AFSA's own primary-source materials on the six-platform enforcement action and the broader population of platforms exiting or seeking licences in the AIFC become available will materially sharpen the confidence level attached to the current assessment, which rests at present on secondary trade reporting rather than the regulator's own documentation.

Earlier periodic briefs (8)
4 Nov 2026 · fim-2026-11-01

Lead Signal

Kazakhstan's financial-integrity posture is defined by a widening split between its sanctions-exposed banking corridor and the increasingly active licensing perimeter the Astana International Financial Centre (AIFC) has built for digital assets. The AIFC Court granted injunctions, dated 15 September 2026 and reported as enforced on 20-21 October 2026, restricting six international exchanges - Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX - from offering unlicensed digital-asset services inside the AIFC, with Apple and Google directed to restrict the relevant apps inside Kazakhstan. The same licensing architecture that produced that enforcement action is also now opening a formal door: Kraken, operating through its local subsidiary Payward Kazakhstan, received in-principle approval from the Astana Financial Services Authority (AFSA) around 28 October 2026 to run a trading platform and hold client digital assets inside the AIFC, though a final licence has not yet been granted.

Read together, these are not contradictory signals but two faces of the same architecture: Kazakhstan is not closing its crypto perimeter, it is defining it, and firms that sit inside the AIFC's licensing track are being distinguished sharply from those that do not. The enforcement action is probable rather than confirmed in its full scope - it is corroborated across two independent trade outlets, but the regulator's own release was not directly retrieved this pass - and the same caveat applies to Kraken's approval, which rests on a single regional outlet rather than AFSA's own register. Both nonetheless point the same direction: a jurisdiction actively building and testing a licensing gate rather than leaving the space unregulated by default.

Other Developments

A gambling-sector AML liability gap moves into consultation. Kazakhstan's Ministry of Tourism and Sports has published a draft order that would impose personal administrative liability on casino, bookmaker and lottery heads, together with their financial-control staff, for anti-money-laundering violations. The draft explicitly cites FATF Recommendation 35 as its reference point, and public discussion is understood to run to 13 November 2026. This is a jurisdiction identifying a specific compliance gap against an international standard and moving to close it through personal accountability rather than entity-level fines alone - a structural response, not an isolated incident.

The standing AML/CTF baseline remains favourable even as the gap is being addressed. Kazakhstan remains off the FATF grey list, and the 2023 EAG mutual evaluation rated it Compliant or Largely Compliant on 33 of the 40 FATF Recommendations. The gambling-sector draft order is best read against that baseline: a jurisdiction with a broadly sound standing AML architecture addressing one identified sectoral weakness, rather than a jurisdiction under systemic pressure.

Cross-Monitor Connections

The AIFC's dual posture toward digital-asset firms - court-ordered exclusion for unlicensed platforms alongside in-principle approval for a licensed applicant - has a direct bearing on how global crypto-infrastructure firms assess Central Asian market entry, a question that sits primarily within the crypto-focused monitor's remit and is flagged here only as a connection point. Equally, the architecture by which Apple and Google were directed to restrict applications inside Kazakhstan is a technology-platform enforcement mechanism with implications beyond financial integrity narrowly defined, relevant to monitors tracking platform-level compliance obligations.

Outlook

The gambling-sector consultation is scheduled to close on 13 November 2026, after which the draft order's final form - and whether the personal-liability provisions survive intact - should become clearer. On the digital-asset side, Kraken's licence remains at the in-principle stage, and whether AFSA converts that into a final licence, and on what timeline, is the next concrete marker to watch. Whether AFSA's own primary-source materials on the six-platform enforcement action and the broader population of platforms exiting or seeking licences in the AIFC become available will materially sharpen the confidence level attached to the current assessment, which rests at present on secondary trade reporting rather than the regulator's own documentation.

3 Nov 2026 · fim-2026-11-03

Lead Signal

Kazakhstan produced two converging signals on how Astana is managing the maturation of its digital-asset perimeter alongside a still-developing domestic AML architecture. The Astana International Financial Centre (AIFC) Court granted injunctions, dated 15 September 2026 and reported in enforcement terms on 20 to 21 October 2026, barring six unlicensed crypto platforms, including Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX, from offering digital-asset services within the AIFC perimeter, with Apple and Google directed to restrict the relevant applications inside Kazakhstan. Nine other platforms exited voluntarily and seven signalled intent to pursue licensing through the Astana Financial Services Authority (AFSA). Almost simultaneously, Kraken's Kazakhstan subsidiary, Payward Kazakhstan, received AFSA in-principle approval around 28 October 2026 to operate a trading platform and hold client digital assets within the AIFC, though a final licence has not yet been granted. Read together, these are not contradictory signals but two edges of the same regulatory posture: enforcement against unlicensed access paired with an active, functioning path to licensed entry for platforms willing to submit to AFSA supervision.

The second thread is structural rather than enforcement-driven. A draft order from the Ministry of Tourism and Sports would introduce personal administrative liability for casino, bookmaker and lottery operator heads and financial-control staff where anti-money-laundering obligations are breached. Kazakh reporting ties the move explicitly to FATF Recommendation 35 on the availability of effective and dissuasive sanctions, suggesting the draft addresses a previously identified gap between general gambling-sector AML practice and the FATF standard rather than responding to a specific enforcement incident. Public discussion on the draft runs to 13 November 2026.

Other Developments

Gambling-sector AML liability moves toward a named standard. The draft order under public discussion would, if adopted, give Kazakhstan a sanctions regime for gambling-sector AML failures that reaches named individuals rather than only corporate entities, aligning the sector with the FATF Recommendation 35 standard on proportionate and dissuasive sanctions. Kazakhstan's 2023 EAG mutual evaluation rated the country Compliant or Largely Compliant on 33 of 40 FATF Recommendations, and this draft reads as incremental closure of one of the remaining gaps rather than a response to a specific scandal.

AIFC dual-track digital-asset perimeter continues to firm up. The injunction action and the Kraken approval, arriving within weeks of each other, indicate that AFSA and the AIFC Court are operating a coherent two-sided model: active exclusion of platforms operating outside the licensing perimeter, and a live, moving approval pipeline for platforms that seek to enter through it. The voluntary exit of nine additional platforms ahead of enforcement, and the stated intent of seven more to pursue licensing, together suggest the deterrent effect of the injunctions is already shaping market behaviour beyond the six named respondents.

Cross-Monitor Connections

The AIFC crypto-platform enforcement action and the Kraken licensing decision both sit squarely at the intersection of this monitor's digital-asset integrity remit and the payments-infrastructure lens that tracks exchange licensing, market access and product development in the same jurisdiction; a reader following Kazakhstan's digital-asset story will want both the integrity read here and the market-structure read carried elsewhere. The gambling-sector AML liability draft, by contrast, is a pure AML/CTF regime development with no present payments-infrastructure or conflict-finance dimension identified.

Outlook

The gambling-sector draft order is in public discussion until 13 November 2026, as scheduled; whether personal liability survives into the final order, or is softened during consultation, will be the next substantive marker for Kazakhstan's FATF Recommendation 35 posture. On digital assets, the near-term question is whether the seven platforms that signalled intent to seek AFSA licences following the injunctions actually convert that intent into completed applications, and whether Kraken's in-principle approval proceeds to a final licence. Both threads will be read against the backdrop of Kazakhstan's 2023 EAG mutual evaluation baseline, which remains the most recent comprehensive assessment of the country's AML/CFT/CPF framework.

25 Oct 2026 · fim-2026-10-25

Lead Signal

Kazakhstan's digital-asset enforcement architecture moved with the disclosure, on 20 October 2026, of Astana International Financial Centre Court injunctions dated 15 September 2026 against six unlicensed global crypto exchanges, Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX, obtained by the Astana Financial Services Authority to bar them from providing unlicensed digital-asset services within the AIFC perimeter. This sits alongside a separate, non-regulatory development: the National Bank of Kazakhstan, Tether and the Alatau City Authority signed an exploratory, non-binding memorandum of understanding on 7 October 2026 to study a tenge-pegged stablecoin and asset-tokenisation pilot, with no issuer, blockchain, reserve model or launch date yet set. Read together, these two developments describe a jurisdiction simultaneously tightening enforcement against unlicensed offshore platforms operating within its special financial zone and exploring, at a purely exploratory stage, a closer institutional relationship with a major stablecoin issuer.

Other Developments

Kazakhstan's AML/CFT technical-compliance remediation continued through the Eurasian Group's 44th Plenary, held 19 to 23 May 2026, which approved and published Kazakhstan's 1st Regular Follow-up Report tracking progress against Financial Action Task Force Recommendations 6 and 7, both rated Partially Compliant in the 2023 mutual evaluation and concerning targeted financial sanctions on terrorism and proliferation financing respectively. The National Bank's East Kazakhstan branch imposed an administrative fine on "Magnat" LLP, dated 1 October 2026, for breaches of the Law on Currency Regulation and Currency Control, citing Articles 19(2), 19(3) and 218(8); this action was published directly on the regulator's own primary sanctions register. Independent reporting continues to document Kazakhstan's role as a transshipment corridor for Russia-bound dual-use goods, exploiting the country's open-border access within the Eurasian Economic Union customs union, though no new Tier-1 designation of a Kazakhstan-linked entity was identified.

Cross-Monitor Connections

The AIFC Court injunctions against the six unlicensed exchanges, and the underlying dual-perimeter licensing structure that distinguishes AIFC-supervised digital-asset business from National Bank-supervised activity outside the AIFC, are the same facts examined from a licensing-classification angle in crypto-sector monitoring and from a payments-infrastructure angle in payments monitoring; each lens surfaces a different operational consequence of the same underlying enforcement action and exploratory stablecoin arrangement. The EAEU transit-corridor finding connects to the broader regional architecture of Russia-sanctions evasion that spans Kazakhstan's neighbours, where Kazakhstan's open-border customs-union status is a structural feature shared across the region rather than a Kazakhstan-specific vulnerability.

Outlook

The principal unresolved question is whether the AIFC Court injunctions produce a published primary document or further penalty beyond the injunction itself; no AFSA or AIFC Court primary release has been located to date, and the current reporting rests on secondary crypto-press corroboration. On the AML/CFT remediation track, the next marker to watch is any further EAG follow-up reporting on Kazakhstan's progress against Recommendations 6 and 7 beyond the 1st Regular Follow-up Report approved in May 2026. The stablecoin exploration with Tether and the Alatau City Authority remains at a study stage with no committed structure, and any movement toward a defined issuer or reserve model would be the next material development on that track.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Kazakhstan has materially expanded the perimeter of activity its anti-money-laundering architecture must now cover. Law No. 259-VIII, dated 16 January 2026, inserted a dedicated chapter on unsecured digital assets into the Law On Digital Assets in the Republic of Kazakhstan, opening circulation of unsecured digital assets nationally from 1 May 2026 through National Bank-licensed exchange operators and registered trading-platform operators that sit outside the Astana International Financial Centre. This is a structural change, not an incident: it creates a second, national-level licensing channel for crypto-asset activity that runs parallel to the established AIFC regime overseen by the Astana Financial Services Authority, and it does so before any independent assessment of the AML/CFT control maturity of that new channel has been published. A July 2026 presidential decree compounds the shift, legalising the use of stablecoins and digital assets in cross-border import and export settlement alongside conventional banking channels, and pairing that liberalisation with an income-tax exemption for crypto-trading income earned on licensed domestic platforms. Read together, the two instruments describe a state-directed effort to bring a previously informal or offshore-facing activity onto licensed domestic rails, while leaving the AML/CFT control question for that newly licensed surface open.

Other Developments

Beneficial-ownership transparency remains procedurally updated but practically unchanged. The Agency of the Republic of Kazakhstan on Financial Monitoring amended its rules for maintaining the register of beneficial owners of legal entities via Order No. 21 of 23 December 2025, which built on the original Order No. 5 of 25 September 2023. Despite this amendment, the OECD's 2026 Anti-Corruption and Integrity Outlook states plainly that the register of beneficial ownership of corporate entities is not available online. A procedural amendment to the rules governing a register is not the same as public accessibility of that register, and the gap between the two continues to define Kazakhstan's beneficial-ownership transparency posture.

The standing AML/CFT regime record remains anchored to the 2023 mutual evaluation. The Eurasian Group's 2023 Mutual Evaluation Report rated Kazakhstan Compliant or Largely Compliant on 33 of the 40 FATF Recommendations, and the jurisdiction is now under the EAG's regular follow-up process, with a first Regular Follow-Up Report covering the 2023-2025 period addressing the technical-compliance deficiencies the original evaluation identified. This is the baseline against which the current cycle's crypto-perimeter expansion should be read: a jurisdiction with a documented, broadly compliant technical framework is now extending that framework's reach into a newly opened national digital-asset licensing channel.

Export-control tightening against Russia-bound re-export remains the standing sanctions-evasion-adjacent posture. New export-licensing rules require licences for a wide range of goods and explicitly ban the re-export of Western-origin items to Russia, a measure reported by a single secondary outlet without independent corroboration from a Kazakhstani government primary text this cycle. This sits alongside separate commentary describing Kazakhstan as one of the central channels enabling Russia to access sanctions-sensitive goods, a characterisation carried at lower source-tier confidence that nonetheless frames the significance of the export-licensing tightening as a mitigating, rather than enabling, development.

Cross-Monitor Connections

The crypto-perimeter expansion under Law No. 259-VIII and the July 2026 cross-border settlement decree sit directly on the boundary between this monitor's D5 typology lens and the crypto monitor's licensing and stablecoin-regime tracking, and also connect to the world-payments monitor's tracking of Kazakhstan's stablecoin and digital-money infrastructure this same cycle. The same underlying instruments are visible from three analytical angles: an AML/CFT control-perimeter question here, a licensing and token-classification question for the crypto monitor, and a payments-infrastructure and market-access question for world-payments. The export-control tightening against Russia re-export also carries a conflict-finance and sanctions-architecture dimension that borders on territory covered by sanctions-focused analysis elsewhere in the fleet, though the thin, single-source sourcing on that point this cycle counsels caution against overweighting it.

Outlook

The near-term test for Kazakhstan's financial-integrity posture is whether the AML/CFT control framework for the newly opened national crypto exchange and trading-platform perimeter is published and independently verifiable, or whether it remains a policy direction without a documented supervisory backbone. The National Bank and the Agency on Financial Monitoring are the two authorities with jurisdiction over that question, and their public output on licensing conditions, customer due diligence requirements, and supervisory expectations for the newly licensed operators will be the clearest signal of whether this liberalisation is accompanied by commensurate control-building. On beneficial ownership, the register's continued unavailability online, despite a December 2025 procedural rule amendment, suggests that further amendments to the maintenance rules alone are unlikely to resolve the transparency gap without a parallel decision to publish the register itself.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Kazakhstan's digital-asset perimeter is the standout development this cycle. The National Bank and the Agency for Regulation and Development of the Financial Market published a draft joint resolution, opened for consultation on 9 October 2026, setting requirements for domestic financial organisations, residents and AIFC participants seeking to issue digital financial assets through a platform operator. Days earlier, on 7 October 2026, Tether signed a non-binding memorandum of understanding with the National Bank and the Alatau City Authority to explore a tenge-pegged stablecoin and asset-tokenisation pilots. Neither development authorises issuance or sets a launch date; both are exploratory. Separately, the National Investment Corporation disclosed that Kazakhstan's National Strategic Crypto Reserve reached 700 million dollars as of 15 September 2026, with roughly 200 million dollars already invested, up from 350 million dollars in March 2026.

Other Developments

EAG follow-up progress. The Eurasian Group's 1st Regular Follow-Up Report, adopted at the EAG Plenary on 29 June 2026, upgraded Kazakhstan's ratings on FATF Recommendations 6, 7, 26 and 24 from Partially Compliant to Largely Compliant. Kazakhstan remains outside the FATF grey and black lists as of the June 2026 plenary and continues under regular, rather than enhanced, follow-up, with a 2nd Regular Follow-up Report already listed among 2026 EAG publications.

Beneficial ownership threshold divergence. Sources disagree on Kazakhstan's operative beneficial-ownership threshold: Open Ownership's general register states a 25 percent threshold, while AML-law incorporation commentary states a 10 percent ownership-or-control threshold for UBO identification. This divergence has not been resolved, and Kazakhstan's beneficial-ownership register itself remains non-public and without structured or API-accessible data.

Illegal-gambling payment enforcement. A six-month campaign reported at Prime Ministerial level saw second-tier banks block roughly 21 million dollars across 402,000 transactions tied to illegal casino platforms between October 2025 and March 2026, with eleven bank employees arrested, forty illegal operators identified, fifteen criminal cases opened and 1,144 mule-linked accounts frozen.

Sanctions-adjacent outreach. Kazakhstan approached OFAC regarding Lukoil's stake in the Caspian Pipeline Consortium following the January 2026 Tengiz/CPC disruptions, against a backdrop of continued secondary-source characterisation of Kazakhstan as a transshipment corridor in Russia's sanctions-evasion architecture.

Cross-Monitor Connections

The digital-asset perimeter build-out connects directly to crypto and world-payments monitoring, where the same draft DFA-issuance resolution and the Tether exploration MoU are tracked as stablecoin and licensing developments. The bank payment-blocking campaign against illegal gambling operators intersects with advennt's enforcement tracking of Kazakhstan's gambling sector. The Lukoil/CPC sanctions outreach and continued transshipment-corridor characterisation are relevant to broader conflict-finance and sanctions-architecture monitoring beyond this cell's immediate scope.

Outlook

The draft DFA-issuance resolution is expected to reach a further stage within the fourth quarter of 2026; its consultation status means the final requirements, and their interaction with the Tether/NBK/Alatau stablecoin exploration, remain unsettled. Kazakhstan's continued regular EAG follow-up status, evidenced by four upgraded Recommendation ratings, points toward a stabilising AML/CFT posture, though this sits alongside an expanding digital-asset surface that increases the jurisdiction's exposure profile, and an unresolved beneficial-ownership threshold question that bears on customer due-diligence practice for firms operating in or through Kazakhstan.

29 Sep 2026 · fim-2026-09-28

Lead Signal

Kazakhstan's financial-integrity architecture moved materially this cycle with the entry into force, on 1 May 2026, of a comprehensive national regulatory framework governing digital-asset circulation, established under the Law 'On Digital Assets in the Republic of Kazakhstan.' The National Bank of Kazakhstan now licenses unsecured-digital-asset exchange operators and registers DFA and trading-platform operators outside the Astana International Financial Centre, bringing a substantial swathe of previously unregulated mainland crypto activity within a formal supervisory perimeter for the first time. This is a confirmed, primary-sourced structural development, and it sits alongside a coordinated 2025-2027 AML/CFT action plan under Government Resolution No. 934, which spans banking, digital assets, foreign trade, real estate and gaming, and mandates a national register of high-risk crypto wallets by the end of 2026.

Other Developments

Data-transparency infrastructure. Personal Data Law amendments (No. 326-VIII, signed 24 June 2026) create a register of entities processing personal data and a separate personal-data-breach register, both effective 25 August 2026, alongside a risk-based classification of controllers into small, medium and large categories. This is not a beneficial-ownership registry reform in the direct sense, but it builds obliged-entity data-sharing infrastructure that is adjacent to, and potentially useful for, KYC and customer due-diligence recordkeeping.

Standing effectiveness gap. The 2023 EAG Mutual Evaluation of Kazakhstan found the jurisdiction compliant or largely compliant on 33 of 40 FATF Recommendations, with substantial effectiveness in risk understanding and FIU-led financial-intelligence use, but it also identified continuing shortcomings in beneficial-owner identification for transactions carried out by natural persons and in domestic PEP identification. This standing finding frames how any new transparency infrastructure, including the Personal Data Law registers above, should be read: it addresses adjacent data infrastructure without directly closing the natural-person beneficial-ownership gap the 2023 evaluation identified.

Perimeter expansion pending. A first-category payment-organisation licensing regime is scheduled to commence October 2026, permitting non-bank entities to hold customer accounts and issue cards without a bank charter. This would expand the AML/CFT obliged-entity perimeter beyond Kazakhstan's currently bank-centric supervisory model.

Cross-Monitor Connections

The national digital-asset licensing framework connects directly to crypto's tracking of Kazakhstan's dual-track licensing architecture (national NBK versus AIFC/AFSA) and to world-payments' tracking of the same first-category payment-organisation regime from a payments-market-structure perspective. The Personal Data Law's new registers also touch advennt's payments-and-money-flow tracking only indirectly, through general data-infrastructure adjacency, and no direct gambling-sector nexus was identified this cycle.

Outlook

The national high-risk crypto-wallet register mandated under Resolution 934 is due by the end of 2026 and will be the next concrete test of whether Kazakhstan's new digital-asset AML/CFT architecture translates into operational capability. The October 2026 first-category payment-organisation regime will also warrant attention as it comes into force, given its direct expansion of the obliged-entity perimeter. Neither development changes the standing 2023 EAG finding on beneficial-ownership identification gaps, which remains the structural constraint against which this cycle's new infrastructure should be assessed.

14 Sep 2026 · fim-2026-09-14

Lead Signal

Kazakhstan's comprehensive Digital Assets Law regime, in force from 1 May 2026, has brought crypto-exchange licensing and digital-financial-asset trading-platform registration under National Bank of Kazakhstan supervision at the national level, materially expanding the AML/CFT perimeter beyond the pre-existing AIFC channel. Operators handling unsecured digital-asset transactions must now apply customer-identification rules and, for certain transfers, collect and retain sender and recipient information, a Travel-Rule-adjacent obligation confirmed against the primary statute. This is a structural tightening of the compliance architecture, not an episodic enforcement action, and it is the most significant financial-integrity development for Kazakhstan this cycle.

Other Developments

Standing AML/CFT baseline unchanged. Kazakhstan's governing mutual evaluation remains the 2023 EAG-conducted, FATF-endorsed assessment, which rates the country Compliant on 5 and Largely Compliant on 28 of the 40 FATF Recommendations, with Substantially Effective ratings on 7 of 11 Immediate Outcomes. The Financial Monitoring Agency continues to act as the national financial intelligence unit and DNFBP supervisor under the domestic AML/CFT statute. Kazakhstan is not on the FATF grey or black list, and no evidence located this cycle indicates deterioration of this baseline.

Third-party access to the domestic terror-financing list curtailed. Third-party access via OpenSanctions to the AFM's domestic terrorism and extremism-financing list was suspended in 2026, pending an API-key or local-registration requirement. This narrows external verifiability of the sanctions-adjacent data but does not, on the evidence available this cycle, indicate a substantive AML gap; it is a data-transparency development rather than a risk-elevation signal.

Cross-Monitor Connections

The new national digital-asset licensing regime intersects directly with the crypto monitor's coverage of Kazakhstan's parallel AFSA-licensed AIFC channel, and with the world-payments monitor's tracking of the same NBK licensing action under its market-access spine. The coexistence of the AIFC's separate AFSA-licensed regime and the national NBK perimeter within a single jurisdiction creates a structural coordination seam between two supervisory bodies, a watch item that could, over subsequent cycles, generate the kind of arbitrage risk that FIM's enabler-jurisdiction framing is designed to catch, even though it does not yet rise to a material enabler-jurisdiction finding this cycle.

Outlook

Watch for whether the National Bank publishes the specific CDD and Travel-Rule thresholds implementing the Digital Assets Law, since the framework-level obligation is confirmed but the operative thresholds were not independently verified this cycle. Also watch whether the AIFC/national supervisory seam identified this cycle develops into a more concrete coordination or divergence event, and whether Kazakhstan's 2023 EAG mutual evaluation baseline is revisited before its next scheduled review.

5 Sep 2026 · fim-2026-08-21

Lead Signal

Kazakhstan's Government Resolution No. 934 (2025-2027) is this cycle's most consequential financial-integrity architecture development for the jurisdiction. The resolution launches 44 coordinated AML/CFT initiatives spanning banking, digital assets, foreign trade, real estate, corporate structures, luxury goods, precious metals and gaming services, and its digital-asset provisions are the most concrete: unlicensed virtual-asset-service-provider applications are to be blocked on major app stores, and a national high-risk crypto-wallet register is due by end-2026, explicitly framed as responsive to FATF Recommendation 15. This is assessed-confidence reporting drawn from a single Tier-4 vendor characterization of the resolution; the primary Adilet/Government text has not yet been retrieved, which caps the finding below a higher confidence tier despite its structural significance. Read against FIM's three-pillar AML/CTF/CPF balance, Resolution 934 skews toward AML volume — banking, real estate, corporate structures, luxury goods and precious metals dominate the initiative list — with the digital-asset provisions the standout CTF-adjacent addition via FATF R.15-aligned VASP oversight. No CPF-specific initiative within the 44 is separately evidenced this cycle, which under FIM's enablement-as-signal principle is itself worth noting: the resolution's silence on proliferation-finance-specific measures indicates an absence of dedicated architecture, not necessarily an absence of exposure. Kazakhstan's continuing, if declining, role as a transshipment node in Russia-sanctions evasion via the EAEU's open-border customs architecture sits alongside this as a second structural thread this cycle.

Other Developments

Sanctions-transshipment exposure via the EAEU corridor continues at an assessed-confidence, declining-but-material level. An OLAF-coordinated EU sanctions-circumvention probe named Kazakhstan as a declared-importer node in the re-export of over 760 transport vehicles toward Russia via Turkiye-declared destinations, according to Tier-4 secondary reporting; the underlying primary OLAF/EU-Council text was not retrieved this cycle, so the finding is capped at Assessed. Separately, Tier-3 reporting citing a named think-tank documents that Common High Priority List dual-use goods exports to Russia from Kazakhstan rose over 400 percent in 2022 via the open EAEU border architecture, though those flows have since declined sharply. The same reporting frames Kazakhstan's role as structurally rather than deliberately enabled: the EAEU's customs-free architecture removes scrutiny for intra-bloc trade by design, independent of any Kazakhstani policy choice, and the decline in CHPL export volumes over the past two years is consistent with tightening Western secondary-sanctions pressure on the corridor rather than a Kazakhstani enforcement response specifically.

OFAC's Lukoil general license is a second-order signal worth surfacing for Kazakhstan given the country's minority stakes, held via Lukoil International GmbH, in the Tengiz and Karachaganak fields and the Caspian Pipeline Consortium. OFAC issued and amended general licenses in January 2026 authorising certain administrative transactions and negotiations for the sale of those Lukoil assets — a Tier-4-sourced signal that a structured divestment involving Kazakh energy infrastructure could be rendered permissible under OFAC guidance, though no such transaction has been confirmed this cycle.

Cross-Monitor Connections

The EAEU transshipment finding and the Lukoil general-license signal both carry direct payment-and-trade-flow implications for world-payments' corridor and correspondent-banking coverage of Kazakhstan, and for advennt's payments-and-money-flow assessment insofar as Kazakhstan's centralised gambling bet-routing infrastructure illustrates the same transaction-monitoring logic Resolution 934 anticipates for crypto. The Resolution 934 VASP-app-blocking and wallet-register measures are the clearest connective thread to the crypto monitor's licensing and on-chain-activity coverage of Kazakhstan, since the AML/CFT architecture and the underlying digital-asset licensing regime are two faces of the same 2025-2026 legislative push.

Outlook

The primary gap to close next cycle is sourcing: Resolution 934's provisions rest on a single Tier-4 vendor characterization, and the OLAF transshipment finding rests on a single Tier-4 secondary source relaying a primary EU enforcement action. Retrieval of the primary Adilet/Government resolution text and the underlying OLAF/EU-Council documentation would allow both findings to move beyond Assessed confidence. Watch for confirmation of the national high-risk crypto-wallet register's actual stand-up by end-2026, and for whether declining CHPL dual-use-goods flows via the EAEU corridor continue to fall or stabilise.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

The clearest sanctions-architecture development this cycle is OFAC's 30 June 2026 designation of two Mexican nationals and nine entities tied to a Cartel Jalisco Nueva Generacion fuel-smuggling and tax-evasion scheme, assessed by Treasury as generating tens of millions of dollars annually for the cartel. A concurrent FinCEN supplemental alert on fuel-smuggling and tax-evasion typologies along the southern border indicates a coordinated Treasury-wide response rather than an isolated Office of Foreign Assets Control action, and both sources are Tier 1. Read against the broader 2025-2026 pattern of escalating Treasury cartel-finance actions, this designation is best assessed as part of a structurally expanding illicit-finance architecture rather than an episodic enforcement event, since it extends OFAC's cartel-finance toolkit into fuel-theft and tax-evasion typologies that had previously received less direct sanctions attention than narcotics trafficking itself.

Continue reading

Outside the sanctions-designation frame proper, Kazakhstan's payment-centralisation programme produced an architecture-adjacent development: second-tier banks blocked an assessed twenty-one million US dollars across roughly four hundred and two thousand gambling-related transactions between October 2025 and March 2026, tied to a blacklist of one hundred and ten payment providers. This is domestic AML and de-risking enforcement rather than a sanctions action in the OFAC sense, and it is sourced only to Tier 3 trade press citing parliamentary testimony, capping confidence at Assessed. It is included here because the blacklist-and-block mechanism mirrors the architecture of a sanctions list even though its legal basis is domestic gambling and payments law rather than a sanctions regime, an important distinction for any reader mapping Kazakhstan's enforcement toolkit onto sanctions-architecture expectations.

Outlook

Watch for whether the EU Council or the UK Office of Financial Sanctions Implementation issue a parallel designation against the CJNG-linked network identified by OFAC; no such parallel has been identified this cycle, and its continued absence would be consistent with a pattern of US-led autonomous cartel-finance listings not mirrored by European or UK counterparts, though this absence-of-mirroring signal is not independently verified and should be treated as a low-confidence observation pending further corroboration.

Judgment: No material Kazakhstan-linked sanctions-architecture development identified this cycle. Uncertain
Standing baseline position

Kazakhstan continues to function as a declining but still-material transshipment node for sanctioned/dual-use goods bound for Russia via the EAEU's open-border customs architecture, evidenced by a January 2026 OLAF-coordinated vehicle-export probe and a CGCPS report documenting a 400%+ 2022 spike (since sharply declined) in CHPL dual-use goods exports.

Periodic updates (1)
5 Sep 2026 · fim-2026-08-21

Sanctions Architecture and Evasion

Kazakhstan's sanctions-architecture exposure this cycle centres on its continuing, though declining, role as a transshipment corridor for Russia-bound goods via the Eurasian Economic Union's open-border customs system. An OLAF-coordinated EU investigation named Kazakhstan as a declared-importer node in the re-export of more than 760 transport vehicles toward Russia via destinations declared as Turkiye, per Tier-4 secondary reporting relaying a primary OLAF enforcement action; the primary OLAF/EU-Council text was not retrieved this cycle, so the finding is capped at Assessed confidence rather than treated as directly verified. Separately, Tier-3 reporting citing a named think-tank documents that Common High Priority List dual-use goods exports to Russia from Kazakhstan rose over 400 percent in 2022 via the same open-border architecture, though those flows have since declined sharply. Neither source assesses the Kazakhstani government as systemically complicit; the structural reading is a capacity deficit in EAEU-wide customs scrutiny rather than a deliberate state choice to facilitate evasion. A second, distinct sanctions-adjacent signal this cycle is OFAC's January 2026 general license activity concerning Lukoil International GmbH, relevant to Kazakhstan because Lukoil holds minority stakes in the Tengiz and Karachaganak fields and the Caspian Pipeline Consortium; the general license authorises certain administrative transactions and negotiations for a Lukoil sale, a Tier-4-sourced signal that a structured divestment touching Kazakh energy infrastructure could be rendered permissible under OFAC guidance.

Outlook

The trajectory to watch is whether declining CHPL dual-use-goods flows via the EAEU corridor continue to fall, stabilise, or reverse, and whether the OLAF vehicle-export investigation produces any primary enforcement text naming Kazakhstani entities specifically. Confirmation of a structured Lukoil-asset transaction touching Tengiz, Karachaganak or CPC would be a distinct and separately material development for Kazakhstan's sanctions exposure profile.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

Kazakhstan sits outside the European Union's beneficial-ownership and corporate-transparency perimeter, and no Kazakhstan-specific beneficial-ownership-register development was located in this cycle's research; a gap-register entry notes that no public Kazakhstan beneficial-ownership-register citation was found despite active search. Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency: it comprises three distinct instruments, the directly applicable AML Regulation, Regulation (EU) 2024/1624, the sixth AML Directive requiring per-Member-State transposition, and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and shifts supervision from purely national authorities toward a hybrid EU-level regime through a direct and indirect supervision perimeter. This cycle, the core beneficial-ownership-register provisions of the sixth Directive, Articles 11 through 13 and 15, together with an associated Anti-Money Laundering Authority technical-standards package, fall due on 10 July 2026, arriving amid unresolved infringement proceedings against eleven Member States over the prior 2025 access deadline. The infringement proceedings against eleven Member States illustrate a widening implementation gap that predates and will likely persist through the 2026 deadline convergence, a dynamic relevant to any obliged entity operating cross-border fund structures or high-net-worth-client relationships within the EU, even though it has no direct bearing on Kazakhstan's own regulatory perimeter this cycle. This is a structural-backdrop framing rather than a Kazakhstan-specific finding, and it is flagged as limited signal for this jurisdiction accordingly.

Continue reading

Outlook

Absent a Kazakhstan-specific beneficial-ownership development, the domain remains a coverage gap rather than a confirmed no-change position for this jurisdiction; the EU-side deadline of 10 July 2026 and the pending AMLA technical-standards package are the items to watch for the broader architecture, alongside AMLR's 10 July 2027 direct-application date.

Judgment: No Kazakhstan-specific beneficial-ownership register development identified this cycle. Uncertain
Periodic updates (2)
11 Oct 2026 · fim-2026-10-11

Beneficial Ownership and Corporate Transparency

Kazakhstan sits outside the EU AML Package's direct perimeter: as a non-EEA autonomous jurisdiction, the AML Regulation (Reg (EU) 2024/1624, directly applicable), the sixth AML Directive transposed per EU Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority do not apply to Kazakhstan directly. Globally, this three-instrument package sets the structural direction of beneficial-ownership supervision, with AMLA's direct and indirect supervisory perimeter gradually shifting cross-border obliged-entity oversight from purely national authorities toward a hybrid EU-level regime. In Kazakhstan itself, the directly relevant development this cycle is a disputed domestic threshold question: Open Ownership's general beneficial-ownership register states a 25 percent ownership threshold, while AML-law commentary on incorporation requirements states a 10 percent ownership-or-control threshold for identifying an ultimate beneficial owner. This divergence has not been resolved by the available sources, and Kazakhstan's beneficial-ownership register remains non-public and lacks structured or application-programming-interface accessible data, which limits independent verification of either figure in practice. For firms conducting customer due diligence on Kazakhstani corporate structures, the unresolved threshold question is a direct practical complication: a counterparty's ownership stake that would trigger beneficial-ownership identification under one reading of Kazakhstani practice would not necessarily trigger it under the other. No primary legislative text resolving the divergence was retrieved this cycle, and Financial Action Task Force Recommendation 24, which concerns transparency and beneficial ownership of legal persons, is the relevant international standard against which Kazakhstan's practice is assessed by the Eurasian Group.

Outlook

The beneficial-ownership threshold divergence remains unresolved and stands as a specific research gap for Kazakhstan's transparency architecture: whether the operative standard is 10 percent or 25 percent affects due-diligence practice without being authoritatively settled by the sources available this cycle. Any future consolidation of Kazakhstan's beneficial-ownership register toward structured, API-accessible data, or any clarifying regulatory or statutory statement on the threshold, would materially improve the reliability of beneficial-ownership screening on Kazakhstani entities. Against the global AMLA transition backdrop, Kazakhstan's position outside the EU perimeter means any future alignment would be a matter of voluntary technical convergence rather than binding obligation.

29 Sep 2026 · fim-2026-09-28

Beneficial Ownership and Corporate Transparency

Kazakhstan sits outside the EU AML Package's direct perimeter: it is an autonomous, non-EEA jurisdiction, so the AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority do not apply to it and no 6AMLD transposition tracking is applicable here. Globally, the EU AML Package sets the structural direction for beneficial-ownership transparency and the shift from purely national supervision toward a hybrid EU-level regime under AMLA's direct and indirect supervision; in Kazakhstan, the directly relevant developments this cycle sit elsewhere, in domestic data-infrastructure reform and in the country's own standing mutual-evaluation record.

The most directly relevant development this cycle is the Personal Data Law amendments under Law No. 326-VIII, signed 24 June 2026, which create a register of entities processing personal data and a separate personal-data-breach register, both effective 25 August 2026, together with a risk-based classification of controllers into small, medium and large categories. This is not a beneficial-ownership registry in the FATF Recommendation 24 sense — it does not identify or register the natural persons who ultimately own or control legal entities — but it builds adjacent data-transparency and recordkeeping infrastructure that obliged entities may draw on for KYC and customer due-diligence purposes.

That adjacency matters because of a standing gap identified in Kazakhstan's 2023 EAG Mutual Evaluation Report. The evaluation found Kazakhstan compliant or largely compliant on 33 of 40 FATF Recommendations overall, with substantial effectiveness in risk understanding and in the Financial Intelligence Unit's use of financial intelligence, but it specifically flagged shortcomings in the identification of beneficial owners in the context of transactions carried out by natural persons, and in domestic PEP identification. The new Personal Data Law registers, however useful for general data governance, do not on their own close this natural-person beneficial-ownership identification gap; they sit adjacent to it rather than resolving it.

No development directly reforming Kazakhstan's corporate beneficial-ownership registration regime — as distinct from personal-data registers — was evidenced this cycle. The structural gap identified in 2023 therefore remains the operative baseline against which any future BO-registry reform in Kazakhstan should be measured.

Outlook

Watch for whether Kazakhstan's own AML/CFT reform track, running under Government Resolution No. 934's 2025-2027 action plan, produces any discrete beneficial-ownership-registry measure addressing the natural-person identification gap the 2023 EAG evaluation flagged. No such measure has been evidenced to date. Globally, the AMLA direct/indirect supervision perimeter continues to develop under the EU AML Package, but as a non-EEA jurisdiction Kazakhstan sits outside that perimeter and any future EU-level development there would only be indirectly relevant to Kazakhstan's own regime.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions

Kazakhstan's standing as an enabler jurisdiction is shaped this cycle by a proposed structural correction rather than by a new exposure. A draft order from the Ministry of Tourism and Sports would introduce personal administrative liability for casino, bookmaker and lottery operator heads and financial-control staff where anti-money-laundering obligations are breached, with reporting tying the measure explicitly to FATF Recommendation 35's requirement that AML sanctions be effective, proportionate and dissuasive. The gambling sector is a recurring vector in enabler-jurisdiction analysis precisely because it combines high cash-intensity, cross-border customer bases and, where sanctions attach only at the corporate level, weak individual-level deterrence against AML failures by those actually responsible for compliance decisions. A regime that closes a gap at the level of named individuals, rather than leaving liability diffused across a corporate entity, is structurally significant in a way that a single enforcement case against one operator would not be, because it changes the incentive facing every compliance officer and operator head in the sector going forward, not just the parties to one action.

Continue reading

The draft is at the consultation stage, with public discussion running to 13 November 2026, and the underlying Ministry publication has not itself been directly retrieved this cycle; the available account rests on a single Tier-2 regional media report. This positions the development as probable rather than confirmed, and as a proposal rather than an enacted rule: it is not yet possible to say whether the personal-liability provisions survive consultation in their current form, are narrowed, or are expanded. Kazakhstan's most recent comprehensive AML/CFT/CPF assessment, the 2023 EAG mutual evaluation, rated the country Compliant or Largely Compliant on 33 of 40 FATF Recommendations, a baseline against which this draft reads as an incremental closure of one of the remaining gaps rather than a response to a specific precipitating scandal. Architecture-over-incident framing applies directly here: the significance lies in the structural shift toward individual accountability, not in any single casino's conduct.

The enabler-jurisdiction lens also invites attention to what has NOT changed. No parallel development was identified this cycle in beneficial-ownership transparency, sanctions-list alignment, or conflict-finance exposure for Kazakhstan; the gambling-sector AML liability draft stands as an isolated, sector-specific correction rather than part of a broader legislative package addressing enabler-jurisdiction risk comprehensively. That isolation is itself worth noting: a jurisdiction can make a genuine, FATF-aligned improvement in one narrow sector while leaving its broader enabler profile, including its role as a transit point for sanctions-evasion-adjacent trade given its position between Russia and Western markets, otherwise unaddressed in the same cycle.

Outlook

The consultation period closes 13 November 2026, as scheduled, and the next marker for this domain is whether the Ministry's final order preserves, narrows or drops the personal-liability provisions, and whether the Ministry's own publication becomes available to corroborate the single-source Tier-2 account currently in hand. A confirmed enactment with personal liability intact would mark Kazakhstan's gambling sector as having closed a FATF Recommendation 35 gap identified in the 2023 mutual evaluation cycle; a softened or indefinitely delayed order would leave that gap open heading into any future FATF-linked reassessment.

Judgment: No new enabler-jurisdiction development identified this cycle. Uncertain
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators

Laos's Golden Triangle Special Economic Zone continues to function as a casino-based laundering and trafficking enclave that sits largely beyond ordinary Lao state access, according to Crisis Group and UNODC-cited reporting; millions of dollars are reportedly exchanged in cash for chips in what is described as an open display of money laundering inside the concession area. UNODC has flagged displacement risk, warning that a Cambodian crackdown on scam-centre operations could push criminal activity into Laos's less-supervised zone, a classic enabler-jurisdiction pattern in which enforcement pressure in one node of a regional network redistributes risk to an adjacent, weaker-oversight node rather than eliminating it.

A second, structurally distinct enabler-adjacent development appears inside an otherwise regulated financial system: eleven Kazakhstani financial-sector employees were detained on suspicion of assisting illegal-gambling operators evade the country's new ESU payment-integration and screening controls. This is a professional-facilitator pattern operating from inside a regulated institution rather than from an offshore enabler jurisdiction, and it illustrates that enabler risk is not confined to jurisdictions with weak formal AML frameworks; individual employees inside a system with active, tightening controls remain a persistent weak point. Both developments are Tier 2 to Tier 3 sourced and carry Assessed confidence. Neither development this cycle rises to the scale of a designated sanctions action, but both are structurally significant: one reflects enclave-level state-access limitations characteristic of enabler-jurisdiction risk, the other reflects facilitator risk embedded inside a jurisdiction actively tightening its own controls.

Outlook

Watch for further UNODC or Crisis Group reporting on displacement dynamics between Cambodia and Laos as Cambodian enforcement continues, and for any follow-on Kazakhstani prosecutions or disclosures regarding the detained financial-sector employees that would upgrade the current Assessed-confidence characterisation of that enabler pattern.

domain_sub_briefs · D3 · Cumulative analysis
Periodic updates (2)
3 Nov 2026 · fim-2026-11-03

Enabler Jurisdictions

Kazakhstan's standing as an enabler jurisdiction is shaped by a proposed structural correction rather than by a new exposure. A draft order from the Ministry of Tourism and Sports would introduce personal administrative liability for casino, bookmaker and lottery operator heads and financial-control staff where anti-money-laundering obligations are breached, with reporting tying the measure explicitly to FATF Recommendation 35's requirement that AML sanctions be effective, proportionate and dissuasive. The gambling sector is a recurring vector in enabler-jurisdiction analysis precisely because it combines high cash-intensity, cross-border customer bases and, where sanctions attach only at the corporate level, weak individual-level deterrence against AML failures by those actually responsible for compliance decisions. A regime that closes a gap at the level of named individuals, rather than leaving liability diffused across a corporate entity, is structurally significant in a way that a single enforcement case against one operator would not be, because it changes the incentive facing every compliance officer and operator head in the sector going forward, not just the parties to one action.

The draft is at the consultation stage, with public discussion running to 13 November 2026, and the underlying Ministry publication has not itself been directly retrieved; the available account rests on a single Tier-2 regional media report. This positions the development as probable rather than confirmed, and as a proposal rather than an enacted rule: it is not yet possible to say whether the personal-liability provisions survive consultation in their current form, are narrowed, or are expanded. Kazakhstan's most recent comprehensive AML/CFT/CPF assessment, the 2023 EAG mutual evaluation, rated the country Compliant or Largely Compliant on 33 of 40 FATF Recommendations, a baseline against which this draft reads as an incremental closure of one of the remaining gaps rather than a response to a specific precipitating scandal. Architecture-over-incident framing applies directly here: the significance lies in the structural shift toward individual accountability, not in any single casino's conduct.

The enabler-jurisdiction lens also invites attention to what has NOT changed. No parallel development was identified in beneficial-ownership transparency, sanctions-list alignment, or conflict-finance exposure for Kazakhstan; the gambling-sector AML liability draft stands as an isolated, sector-specific correction rather than part of a broader legislative package addressing enabler-jurisdiction risk comprehensively. That isolation is itself worth noting: a jurisdiction can make a genuine, FATF-aligned improvement in one narrow sector while leaving its broader enabler profile, including its role as a transit point for sanctions-evasion-adjacent trade given its position between Russia and Western markets, otherwise unaddressed in the same cycle.

Outlook

The consultation period closes 13 November 2026, as scheduled, and the next marker for this domain is whether the Ministry's final order preserves, narrows or drops the personal-liability provisions, and whether the Ministry's own publication becomes available to corroborate the Tier-2 account currently in hand. A confirmed enactment with personal liability intact would mark Kazakhstan's gambling sector as having closed a FATF Recommendation 35 gap identified in the 2023 mutual evaluation cycle; a softened or indefinitely delayed order would leave that gap open heading into any future FATF-linked reassessment.

5 Sep 2026 · fim-2026-08-21

Enabler Jurisdictions and Professional Facilitators

Kazakhstan's EAEU customs-free architecture is this cycle's primary enabler-jurisdiction signal: Kazakhstan and Kyrgyzstan share open borders with Russia under the EAEU framework, removing customs scrutiny for intra-bloc trade and thereby enabling the rerouting of dual-use goods documented elsewhere this cycle. Tier-3 reporting assesses this as a capacity-versus-choice question, favouring a capacity deficit in customs-enforcement architecture over deliberate Kazakhstani complicity in sanctions evasion. This is a structural finding in FIM's architecture-over-incident sense: the enabling mechanism is the EAEU's open-border design itself, not a discrete Kazakhstani policy decision or enforcement lapse, and the same reporting notes that the resulting goods flows have sharply declined over the past two years even as the underlying open-border architecture remains unchanged. That combination — a stable enabling structure paired with declining exploitation of it — is itself a notable signal under FIM's enablement-as-signal principle, suggesting that external pressure rather than a change in Kazakhstan's own enabler characteristics is driving the decline. This distinguishes Kazakhstan's enabler profile from jurisdictions where facilitation runs through professional intermediaries such as company-formation agents or trust-and-corporate-service providers; no such professional-facilitator-specific finding was evidenced for Kazakhstan this cycle.

Outlook

Watch for whether the EAEU's structural open-border characteristics are addressed at a bloc level, which would be a Eurasian Economic Union-wide development beyond Kazakhstan's unilateral control, or whether Kazakhstan pursues any unilateral customs-scrutiny tightening independent of its EAEU neighbours. No such initiative has been evidenced this cycle.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

Colombia received a failed-demonstrably designation on counternarcotics obligations in the United States' FY2026 Foreign Relations Authorization Act determination, the first such designation for Colombia in nearly thirty years. The State Department determination, a Tier 1 source, cites record coca cultivation and unmet eradication goals as the basis for the designation. This is a material conflict-finance signal given the well-documented links between coca-cultivation revenue and residual ELN and FARC-dissident factions operating in Colombia's coca-growing regions; a structural deterioration in counternarcotics performance of this scale is generally read as a proxy for weakening state capacity to constrain the revenue base available to these conflict actors, rather than as an isolated policy disagreement between Washington and Bogota. No other conflict-finance-specific development met this cycle's evidentiary bar; the domain is otherwise quiet this cycle, and this designation should be read as the single, high-confidence conflict-finance signal for the period rather than as part of a broader documented trend. The extractive-industry dimension of this domain generated no qualifying development this cycle. Given the FY2026 determination's Tier 1 sourcing and corroboration by Tier 3 trade press, confidence in the underlying designation itself is High, even though the second-order conflict-finance linkage to specific armed groups remains an assessed rather than confirmed judgment.

Continue reading

Outlook

Watch for Colombian government response to the FY2026 determination and for any linked policy or funding consequences, as well as for follow-on reporting connecting coca-revenue trends to specific armed-group financing patterns that would move this signal from a structural policy designation toward a more granular conflict-finance assessment.

Judgment: No conflict-finance development identified this cycle. Uncertain

D5 Crypto / Digital Assets / Financial Innovation

escalatingmaterial_changestanding position

Crypto / Digital Assets / Financial Innovation

Kazakhstan's digital-asset perimeter moved on two fronts this cycle that together describe a dual-track regulatory posture rather than a single enforcement story. The AIFC Court granted injunctions, dated 15 September 2026 and reported in enforcement terms on 20 to 21 October 2026, barring six platforms, Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX, from offering unlicensed digital-asset services within the AIFC, with Apple and Google directed to restrict the relevant applications inside the country. Reporting indicates nine further platforms exited the market voluntarily ahead of or alongside the injunctions, and seven signalled an intent to pursue licensing through the Astana Financial Services Authority. Within roughly the same window, Kraken's Kazakhstan subsidiary, Payward Kazakhstan, received AFSA in-principle approval around 28 October 2026 to operate a trading platform and hold client digital assets inside the AIFC, though the final licence has not yet been issued.

Continue reading

The analytically significant point is the pairing: AFSA and the AIFC Court are simultaneously excluding platforms operating outside the licensing perimeter and advancing applications from platforms seeking to enter through it. This is a coherent regulatory architecture rather than two unrelated events, and it reads as a maturing dual-track model in which unlicensed operation carries a credible enforcement consequence while a functioning, moving approval pipeline exists for compliant entrants. The scale of voluntary exits relative to the six named respondents, nine platforms departing without having been named in the injunction, suggests the deterrent reach of the action extends well beyond its immediate targets, an enablement-and-deterrence signal of the kind this domain treats as analytically significant in its own right, independent of the enforcement count.

Both developments rest on Tier-2 sourcing, corroborated across two independent outlets for the injunction action but resting on a single regional outlet for the Kraken approval, which has not yet been independently confirmed against AFSA's own public register. Both are accordingly carried at a probable rather than confirmed confidence tier. Kazakhstan's 2023 EAG mutual evaluation did not address the digital-asset licensing architecture now in operation at the AIFC in its current form, since the dual-track AFSA model has continued to develop since that assessment; this cycle's developments should be read as evidence of ongoing maturation of a perimeter that sits structurally outside Kazakhstan's mainland financial regulatory framework, operating instead under the AIFC's separate common-law-based regime.

Outlook

The near-term test for this domain is conversion: whether the seven platforms that signalled intent to seek AFSA licensing following the injunctions file and progress applications, and whether Kraken's in-principle approval advances to a final licence as scheduled. A pattern of successful conversions would confirm the dual-track model is functioning as a genuine on-ramp rather than a one-off enforcement episode; continued exits without corresponding licensing applications would suggest the AIFC's digital-asset ambitions are running ahead of operator willingness to submit to its supervisory perimeter. Either outcome will sharpen the read on how the Kazakh digital-asset perimeter compares with other Central Asian and AIFC-adjacent jurisdictions pursuing similar licensing strategies.

Cumulative analysis

Crypto, Digital Assets, and Financial Innovation

Kazakhstan's own digital-asset regulatory perimeter is this cycle's lead crypto development: a comprehensive digital-financial-asset framework entered force on 1 May 2026 under a Tier 1 National Bank of Kazakhstan publication, establishing a dual-track supervisory model in which the National Bank licenses cryptoasset exchanges and digital-financial-asset platform registration while the Agency for Regulation and Development of the Financial Market supervises non-stablecoin digital-financial-asset turnover, with the pre-existing AIFC/AFSA regime continuing in parallel. The framework distinguishes unsecured cryptoassets from digital financial assets for the first time under Kazakhstani law, a genuinely new systemic development rather than an incremental rule change, and it is assessed at High confidence given the direct central-bank primary sourcing. A dedicated digital-asset market regulator is separately expected to begin operations in the second half of 2026, per Tier 3 reporting, which would add a fourth institutional node to an already three-way supervisory perimeter.

Globally, the structural direction of travel for crypto-asset regulation runs through the EU AML Package: crypto-asset service providers become AMLR-obliged entities for the first time ahead of the Regulation's 2027 direct-application date, extending the same beneficial-ownership and customer-due-diligence expectations that apply to traditional financial institutions into the digital-asset sector. For a non-EU jurisdiction such as Kazakhstan, this EU trajectory is relevant mainly as a comparator model rather than a directly applicable obligation.

Outlook

Watch for the digital-asset market regulator's operational start in the second half of 2026 and for the practical interaction between the new National Bank of Kazakhstan and Agency for Regulation and Development of the Financial Market mandates and the pre-existing AIFC/AFSA regime, since overlapping or unclear jurisdictional boundaries between three regulators would itself become a compliance-technology and governance risk worth tracking.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

National (non-AIFC) crypto exchange/trading-platform licensing regime opened 1 May 2026 under Law No. 259-VIII; AML/CFT supervisory architecture materially expanded, control maturity not yet independently assessed.

Periodic updates (7)
3 Nov 2026 · fim-2026-11-03

Crypto / Digital Assets / Financial Innovation

Kazakhstan's digital-asset perimeter moved on two fronts that together describe a dual-track regulatory posture rather than a single enforcement story. The AIFC Court granted injunctions, dated 15 September 2026 and reported in enforcement terms on 20 to 21 October 2026, barring six platforms, Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX, from offering unlicensed digital-asset services within the AIFC, with Apple and Google directed to restrict the relevant applications inside the country. Reporting indicates nine further platforms exited the market voluntarily ahead of or alongside the injunctions, and seven signalled an intent to pursue licensing through the Astana Financial Services Authority. Within roughly the same window, Kraken's Kazakhstan subsidiary, Payward Kazakhstan, received AFSA in-principle approval around 28 October 2026 to operate a trading platform and hold client digital assets inside the AIFC, though the final licence has not yet been issued.

The analytically significant point is the pairing: AFSA and the AIFC Court are simultaneously excluding platforms operating outside the licensing perimeter and advancing applications from platforms seeking to enter through it. This is a coherent regulatory architecture rather than two unrelated events, and it reads as a maturing dual-track model in which unlicensed operation carries a credible enforcement consequence while a functioning, moving approval pipeline exists for compliant entrants. The scale of voluntary exits relative to the six named respondents, nine platforms departing without having been named in the injunction, suggests the deterrent reach of the action extends well beyond its immediate targets, an enablement-and-deterrence signal of the kind this domain treats as analytically significant in its own right, independent of the enforcement count.

Both developments rest on Tier-2 sourcing, corroborated across two independent outlets for the injunction action but resting on a single regional outlet for the Kraken approval, which has not yet been independently confirmed against AFSA's own public register. Both are accordingly carried at a probable rather than confirmed confidence tier. Kazakhstan's 2023 EAG mutual evaluation did not address the digital-asset licensing architecture now in operation at the AIFC in its current form, since the dual-track AFSA model has continued to develop since that assessment; the developments should be read as evidence of ongoing maturation of a perimeter that sits structurally outside Kazakhstan's mainland financial regulatory framework, operating instead under the AIFC's separate common-law-based regime.

Outlook

The near-term test for this domain is conversion: whether the seven platforms that signalled intent to seek AFSA licensing following the injunctions file and progress applications, and whether Kraken's in-principle approval advances to a final licence as scheduled. A pattern of successful conversions would confirm the dual-track model is functioning as a genuine on-ramp rather than a one-off enforcement episode; continued exits without corresponding licensing applications would suggest the AIFC's digital-asset ambitions are running ahead of operator willingness to submit to its supervisory perimeter. Either outcome will sharpen the read on how the Kazakh digital-asset perimeter compares with other Central Asian and AIFC-adjacent jurisdictions pursuing similar licensing strategies.

25 Oct 2026 · fim-2026-10-25

Crypto, Digital Assets, and Financial Innovation

Kazakhstan sits outside the EU AML Package's direct perimeter entirely; the AMLR, 6AMLD and AMLA Regulation structure a European Union supervisory architecture that does not extend to Kazakhstan's domestic digital-asset regime. In Kazakhstan, the directly relevant developments sit instead within the dual AIFC/national licensing structure: the Astana International Financial Centre Court issued injunctions dated 15 September 2026, disclosed 20 October 2026, barring six global crypto exchanges, Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX, from providing unlicensed digital-asset services within the AIFC's legal perimeter. The Astana Financial Services Authority obtained the orders, and the restraint applies only within the AIFC's own legal perimeter rather than across the whole of Kazakhstan, reflecting the jurisdiction's two parallel supervisory tracks: AFSA within the AIFC, and the National Bank of Kazakhstan outside it.

Alongside this enforcement action, a separate and non-regulatory development has emerged: the National Bank, Tether, and the Alatau City Authority signed an exploratory, non-binding memorandum of understanding on 7 October 2026 to study a tenge-pegged stablecoin and an asset-tokenisation pilot. No issuer, blockchain platform, reserve structure, or launch date has been set, and the arrangement remains at the study stage. On the technical-compliance side, Kazakhstan's AML/CFT regime registered a parallel development: the Eurasian Group's 44th Plenary, held 19 to 23 May 2026, approved and published Kazakhstan's 1st Regular Follow-up Report, which tracks the country's progress against Financial Action Task Force Recommendations 6 and 7, both rated Partially Compliant in the 2023 mutual evaluation and concerning targeted financial sanctions on terrorism and proliferation financing. The exploratory stablecoin discussion and the formal enforcement action against unlicensed exchanges together describe a jurisdiction pursuing enforcement against informal offshore platform access while separately exploring a closer institutional stablecoin relationship, two distinct postures operating on different tracks within the same digital-asset space.

For illustrative orientation only, one can sketch how the eventual maturation of the AIFC's crypto-licensing enforcement posture might interact with any future stablecoin pilot: were the exploratory Tether arrangement to progress toward an actual pilot, the AIFC's demonstrated willingness to pursue injunctive relief against unlicensed offshore exchanges suggests any resulting pilot structure would likely be built to operate squarely within the AIFC's own licensing perimeter rather than outside it, given the enforcement precedent establishes. This is an illustrative reading of the two developments together, not a prediction or a statement of what will occur.

Outlook

The most immediate open question is whether the AIFC Court injunctions produce any further published judgment text or penalty beyond the injunction itself; no AFSA or AIFC Court primary document has been located to confirm this beyond secondary crypto-press reporting. On the stablecoin track, the Tether-NBK-Alatau MoU remains exploratory, and any movement toward a committed issuer, reserve model or launch date would be the next material marker. The EAG's ongoing follow-up reporting cycle on Kazakhstan's Recommendation 6 and 7 remediation is a further marker to watch, as subsequent follow-up reports would indicate whether the technical-compliance deficiencies identified in the 2023 mutual evaluation are closing.

18 Oct 2026 · fim-2026-10-18

Crypto, Digital Assets, and Financial Innovation

Kazakhstan's digital-asset perimeter underwent a structural expansion this cycle that financial-integrity analysis must track closely, because the expansion runs ahead of visible AML/CFT control-building. Law No. 259-VIII, dated 16 January 2026, inserted a dedicated chapter on unsecured digital assets into the existing Law On Digital Assets in the Republic of Kazakhstan. The practical effect is to open circulation of unsecured digital assets at the national level, outside the Astana International Financial Centre, from 1 May 2026, through two new categories of regulated actor: exchange operators licensed by the National Bank of Kazakhstan, and registered trading-platform operators. Until this change, the principal licensed channel for digital-asset activity in Kazakhstan ran through the AIFC and its regulator, the Astana Financial Services Authority, which has operated under a framework referencing FATF Recommendations and the assessment methodology of the Eurasian Group. The new national channel sits outside that AIFC perimeter entirely, which means a second supervisory architecture, with its own customer due diligence, licensing, and monitoring requirements, is now being built in parallel to the one the EAG's 2023 Mutual Evaluation Report assessed.

The significance of this from an illicit-finance-risk perspective is that the AML/CFT control maturity of the newly opened national perimeter has not yet been independently assessed. The 2023 Mutual Evaluation Report and its 2023-2025 follow-up process evaluated the AML/CFT system as it stood before this expansion; a new licensing channel for exchange operators and trading platforms, opened in May 2026, falls outside the period that assessment covered. This is precisely the kind of structural development that architecture-over-incident analysis is designed to surface: no enforcement failure or illicit-finance incident has yet occurred in connection with the new channel, but the expansion of the regulatory perimeter itself, absent a published and verifiable AML/CFT control framework for the new entrants, constitutes a material increase in the jurisdiction's digital-asset risk surface that merits monitoring independent of any incident.

Compounding this, a July 2026 presidential decree authorised the use of digital assets and stablecoins in cross-border import and export settlement, operating alongside Kazakhstan's conventional banking channels for cross-border payment. This decree was paired with a personal income-tax exemption for digital-asset trading income, conditional on the trading occurring on licensed, domestically regulated platforms. The combined effect of the licensing expansion and the cross-border settlement authorisation is to create, in a single calendar year, both a broader set of licensed actors able to handle digital-asset flows and an explicit cross-border use case for those flows in trade settlement. Cross-border settlement channels that route through stablecoins rather than the conventional correspondent-banking system warrant particular attention from an AML/CFT perspective, because they can, depending on how the licensed operators implement customer due diligence and transaction monitoring, either integrate smoothly into existing financial-crime controls or create a less-scrutinised parallel channel. The source material available this cycle describes the policy direction and the tax treatment clearly but does not establish which of these two outcomes the implementation has produced.

It is worth stating plainly what has not been found this cycle: no primary National Bank instrument setting out the customer due diligence, transaction-monitoring, or supervisory-reporting obligations applicable to the newly licensed national exchange and trading-platform operators has been independently retrieved. The policy architecture — who may apply for a licence, and what activity it permits — is reasonably well evidenced through secondary commercial commentary, but the AML/CFT control layer that would normally accompany such a licensing expansion has not yet surfaced in the public record reviewed this cycle. This is a gap in the available evidence, not a finding that the control layer does not exist; AFM and the National Bank may have issued implementing rules that have not yet been located.

Outlook

The key indicator to watch going forward is whether the Agency of the Republic of Kazakhstan on Financial Monitoring, the National Bank, or another competent authority publishes AML/CFT-specific implementing rules for the national (non-AIFC) exchange and trading-platform licensing channel, and whether the EAG's ongoing follow-up process on Kazakhstan's 2023 Mutual Evaluation Report begins to reference the new channel directly. A second indicator is the volume and nature of licences actually issued under Law No. 259-VIII since 1 May 2026, since the materiality of any AML/CFT control gap scales with the size of the newly licensed sector. Finally, the cross-border stablecoin settlement mechanism authorised by the July 2026 decree is worth tracking for any subsequent National Bank guidance on reporting thresholds or travel-rule-equivalent requirements, since none has yet been located and its absence or presence will materially shape the risk profile of that channel.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

Kazakhstan's digital-asset perimeter expanded on two fronts this cycle, anchored in the subject jurisdiction's own regulatory environment rather than any external framework. First, the National Bank of the Republic of Kazakhstan and the Agency for Regulation and Development of the Financial Market published a draft joint resolution, opened for consultation on 9 October 2026, setting requirements for Kazakhstani financial organisations and residents, and AIFC participants, seeking to issue digital financial assets through a platform operator. The draft has not been adopted, and its primary text on the relevant government portal was not independently retrieved this cycle; the finding rests on secondary trade-press reporting of the National Bank's own press release. Second, on 7 October 2026, Tether signed a non-binding memorandum of understanding with the National Bank and the Alatau City Authority to explore a tenge-pegged stablecoin and asset-tokenisation pilots. The MoU is explicitly exploratory: it does not authorise issuance, set a reserve design, or establish a launch date. Alongside these regulatory and commercial-partnership developments, the National Investment Corporation, a National Bank subsidiary, disclosed that Kazakhstan's National Strategic Crypto Reserve reached 700 million dollars as of 15 September 2026, with approximately 200 million dollars already invested, up from 350 million dollars in March 2026. Taken together, these three developments indicate state-level engagement with digital assets proceeding on parallel regulatory, commercial-partnership and sovereign-investment tracks simultaneously, rather than a single coordinated initiative.

Outlook

The draft DFA-issuance resolution's path toward adoption, expected within the fourth quarter of 2026 on current signals, is the clearest marker to watch: its eventual terms will determine whether Kazakhstan's AIFC and national digital-asset perimeters converge or remain separately regulated. The Tether exploration MoU carries no committed timeline, and whether it progresses beyond a study phase toward an actual tenge-pegged stablecoin product remains an open question. The continued growth of the National Strategic Crypto Reserve, more than doubling since March 2026, signals an expanding sovereign exposure to digital assets that will bear on Kazakhstan's broader financial-integrity risk profile as the reserve's scale increases.

29 Sep 2026 · fim-2026-09-28

Crypto / Digital Assets / Financial Innovation

Kazakhstan's own crypto-regulatory perimeter changed materially this cycle. On 1 May 2026, a comprehensive national regulatory framework governing digital-asset circulation entered force under the Law 'On Digital Assets in the Republic of Kazakhstan.' The National Bank of Kazakhstan now licenses unsecured-digital-asset exchange operators and registers digital-financial-asset (DFA) and trading-platform operators that sit outside the Astana International Financial Centre. This is a confirmed, primary-sourced development directly from the National Bank's own publication, and it represents the most significant single change to Kazakhstan's digital-asset supervisory architecture in this cycle, extending formal AML/CFT-relevant oversight to a segment of the market that had previously operated under the AIFC's separate regime alone or without any registered supervisory touchpoint.

This new national licensing framework sits inside, and is reinforced by, a broader coordinated AML/CFT effort. Government Resolution No. 934 adopts a 44-initiative action plan for 2025-2027 spanning banking, digital assets, foreign trade, real estate and gaming. Among its digital-asset-specific measures, the resolution mandates a sectoral AIFC digital-asset risk assessment, establishment of a national register of high-risk crypto wallets by the end of 2026, and the blocking of unlicensed VASP mobile applications. This is reported with probable rather than confirmed confidence, resting on vendor/compliance commentary rather than the primary resolution text, but it describes a coherent programme of work rather than an isolated measure, and it is consistent with the direction the National Bank's own May 2026 licensing action already signalled.

Together, these two developments indicate that Kazakhstan's digital-asset AML/CFT architecture is moving from a partial, AIFC-centric footprint toward a genuinely national supervisory perimeter, with specific forthcoming deliverables — the high-risk-wallet register, the AIFC risk assessment, and VASP app-blocking — that will test whether the expanded licensing perimeter translates into operational AML/CFT capability rather than remaining a licensing exercise alone.

Outlook

The national high-risk crypto-wallet register, due under Resolution 934 by the end of 2026, is the most concrete near-term deliverable to watch: it would be the first operational AML/CFT tool built specifically for Kazakhstan's newly-licensed digital-asset exchange sector. The sectoral AIFC digital-asset risk assessment mandated by the same resolution, expected around Q4 2026, should also clarify how the national NBK regime and the AIFC's own regime are intended to interact from an AML/CFT risk-assessment perspective. Primary retrieval of Resolution 934's full text remains a gap and would sharpen confidence in the specific commitments described here.

14 Sep 2026 · fim-2026-09-14

Crypto / Digital Assets / Financial Innovation

Kazakhstan's Digital Assets Law No.193-VII, in force from 1 May 2026, establishes a comprehensive national licensing perimeter for crypto-asset activity. Operators of unsecured digital-asset exchanges must obtain a National Bank of Kazakhstan licence, while digital-financial-asset trading platforms complete NBK registration. This regime applies outside the AIFC, whose AFSA-licensed channel continues to operate as a parallel supervisory track. From a financial-integrity perspective, the significance of this development is architectural: it closes what had previously been a licensing gap for exchange operators outside the AIFC and, in doing so, extends the AML/CFT perimeter to a category of firm that had not previously been subject to a clear national licensing requirement.

The compliance-relevant obligation attached to this regime is a customer-due-diligence and Travel-Rule-adjacent requirement: operators handling unsecured digital-asset transactions must apply customer-identification rules and, for certain transfers, collect and retain sender and recipient information. This obligation is confirmed against the primary statute text, though the exact thresholds triggering the sender/recipient information requirement were not independently verified this cycle, a gap flagged in the underlying research. For firms operating in or servicing the Kazakhstani market, this means the compliance baseline includes CDD and a partial Travel Rule obligation now, with the precise scope of that obligation still to be clarified in subsequent guidance or amendment.

A structural feature worth foregrounding under the crypto lens is the coexistence of two supervisory channels within one jurisdiction: the national NBK perimeter and the AIFC's AFSA-licensed regime. This is not itself evidence of regulatory arbitrage, but it is the kind of dual-track structure that FIM's enabler-jurisdiction analysis treats as a coordination seam worth monitoring, since a firm operating across both channels could in principle face inconsistent supervisory expectations, or a gap could emerge between the two regimes' respective AML/CFT requirements. No evidence located this cycle indicates such a gap has yet materialised in practice; the seam is a watch item, not a finding.

Outlook

The most consequential open question for this domain is whether the National Bank will publish specific CDD and Travel-Rule thresholds implementing the Digital Assets Law, since the framework-level obligation is now confirmed but its operative scope remains undefined pending further guidance. A secondary watch item is whether the AIFC/national supervisory seam evolves into either formal coordination between AFSA and the NBK or a more visible divergence in AML/CFT expectations between the two channels. Kazakhstan's crypto-asset licensing tightening should be read as increasing the country's regulatory-perimeter maturity relative to the pre-May-2026 baseline, which strengthens rather than weakens its financial-integrity standing on this dimension.

5 Sep 2026 · fim-2026-08-21

Crypto / Digital Assets / Financial Innovation

Government Resolution No. 934 (2025-2027) is Kazakhstan's most significant digital-asset AML/CFT development this cycle. The resolution launches 44 coordinated initiatives spanning banking, digital assets, foreign trade, real estate, corporate structures, luxury goods, precious metals and gaming services; its digital-asset-specific measures include blocking unlicensed virtual-asset-service-provider applications on major app stores and building a national high-risk crypto-wallet register due by end-2026, explicitly aligned with FATF Recommendation 15. This is Tier-4-sourced, assessed-confidence reporting from a single vendor characterization of the resolution; the primary Adilet/Government text has not yet been retrieved, which is the principal reason this finding is held at Assessed rather than a higher confidence tier despite its evident structural significance. Read against FIM's three-pillar balance, the resolution's crypto provisions are CTF-adjacent architecture — travel-rule-style VASP oversight and a wallet-risk register — layered onto a broader AML initiative set that otherwise concentrates on conventional banking, real estate and trade-based typologies. No dedicated RegTech-vendor announcement accompanying the wallet-register build-out was located this cycle, leaving open whether the register will be built on in-house National Bank or AFM infrastructure or procured externally. The resolution's gaming-services inclusion is notable for cross-monitor purposes but is not separately evidenced beyond its listing among the 44 initiative areas.

Outlook

The wallet-register's actual stand-up by end-2026 is the key verification point for next cycle, as is retrieval of the primary resolution text to confirm the 44-initiative count and the specific app-store-blocking mechanism described in secondary reporting. Confirmation from a Tier-1 or Tier-2 source would allow this finding to move beyond Assessed confidence.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

Kazakhstan's Unified Betting Accounting System has deployed an AI-driven screening capability that identified approximately four hundred and thirty-three thousand users and blocked more than one hundred thirty-five thousand of them from betting activity by early June 2026, screening against debtor and self-exclusion registries. This is an active-defence, perpetual-eligibility-screening model applied at national scale to a high-risk sector, and it is assessed, on Tier 3 sourcing, as running ahead of any visible domestic model-risk-management standard for the underlying algorithmic screening system. That gap, an active-defence deployment operating without a visible governance framework for the model itself, is a genuine compliance-technology finding: comparator expectations set by FinCEN and the Financial Conduct Authority generally require documented model-risk-management practices, including validation, bias testing, and periodic review, before or alongside deployment of screening tools at this scale, and no evidence of an equivalent domestic standard was located this cycle. No comparator jurisdiction's model-risk-management standard has been mapped against Kazakhstan's deployment in this cycle's research, so the governance-gap characterisation should be read as an assessed judgment rather than a confirmed regulatory finding. The underlying screening volume figures themselves are sourced to Tier 3 trade press only, capping confidence at Assessed pending a primary regulator publication.

Continue reading

Outlook

Watch for any Kazakhstani regulatory guidance on algorithmic or AI-driven compliance-screening governance that would close the currently logged model-risk-management gap, and for whether the screening system's scale, now covering several hundred thousand users, prompts scrutiny of false-positive rates or due-process safeguards for blocked individuals, neither of which has been evidenced in this cycle's material.

Judgment: No RegTech/compliance-technology development identified for Kazakhstan this cycle. Uncertain

D7 AML/CTF Regime

stableactivestanding position

AML/CTF Regime

The principal AML/CTF regime development this cycle is a draft order from the Ministry of Tourism and Sports that would introduce personal administrative liability for casino, bookmaker and lottery operator heads and financial-control staff where anti-money-laundering obligations are breached. Reporting ties the measure directly to FATF Recommendation 35, which requires that countries ensure a range of effective, proportionate and dissuasive sanctions, criminal, civil or administrative, are available to deal with natural or legal persons that fail to comply with AML/CFT requirements. The draft's focus on named individuals rather than corporate entities alone addresses what the underlying reporting frames as a specific, previously identified gap in the gambling sector's sanctions architecture.

Continue reading

This development should be read against Kazakhstan's 2023 EAG mutual evaluation, which rated the country Compliant or Largely Compliant on 33 of 40 FATF Recommendations, a relatively strong baseline by regional standards. A gap concentrated in one sector's sanctions regime is consistent with a jurisdiction that has substantially built out its core AML/CFT architecture but retains sector-specific weaknesses, in this instance the gambling sector's exposure to cash-intensive, high-velocity transactions that can obscure illicit proceeds absent robust deterrence aimed at the individuals making day-to-day compliance decisions. The three-pillar balance this monitor applies across AML, CTF and CPF findings favours noting explicitly that this development is an AML-pillar correction; no corresponding CTF or CPF development was identified for Kazakhstan this cycle, and the draft order's own framing is confined to AML violations.

The draft is currently at the consultation stage, with public discussion scheduled to run to 13 November 2026, and the evidentiary basis for this cycle's account is a single Tier-2 regional media report; the Ministry's own publication of the draft has not yet been directly retrieved. The claim is therefore carried at a probable confidence tier, not confirmed, and the structural significance of the development (a shift toward individual AML accountability in a historically under-scrutinised sector) should be read as a proposal under active consultation rather than as settled law. Architecture-over-incident framing is directly applicable: the significance is the structural mechanism being proposed, a named-individual liability standard tied explicitly to an FATF recommendation, rather than any single enforcement incident prompting it.

Outlook

The consultation period runs to 13 November 2026, as scheduled, and the next substantive marker for this domain is the content of the final order, specifically whether personal liability provisions for gambling-sector heads and compliance officers survive, are narrowed, or are dropped during consultation. Corroboration from the Ministry's own publication, rather than secondary reporting alone, would also strengthen the confidence tier on this development in a subsequent cycle. A finalised order with personal liability intact would represent a concrete, FATF-Recommendation-35-aligned closure of a gap identified against Kazakhstan's 2023 mutual evaluation baseline.

Judgment: Kazakhstan remains off the FATF grey list (33 of 40 Recommendations Compliant/Largely Compliant per the 2023 EAG MER) and is now addressing a specific gambling-sector R.35 gap via consultation. Probable
Cumulative analysis

AML/CTF Regime

Kazakhstan's AML/CFT regime showed confirmed improvement this cycle. The Eurasian Group's 1st Regular Follow-Up Report, published following adoption at the EAG Plenary on 29 June 2026, upgraded Kazakhstan's ratings on Financial Action Task Force Recommendations 6, 7, 26 and 24 from Partially Compliant to Largely Compliant. Kazakhstan remains outside both the FATF grey list and the FATF black list as of the June 2026 plenary, and continues to be subject to the Eurasian Group's regular, rather than enhanced, follow-up process; a 2nd Regular Follow-up Report is already listed among the Eurasian Group's planned 2026 publications, indicating the regular follow-up track is expected to continue rather than escalate. This improving trajectory sits alongside a separate and unresolved domestic question: Kazakhstani sources diverge on the operative beneficial-ownership threshold, with Open Ownership citing 25 percent and AML-law commentary citing 10 percent for identifying an ultimate beneficial owner at incorporation, a divergence relevant to Recommendation 24 compliance that the Eurasian Group's follow-up process has not yet been shown to resolve. Separately, a six-month enforcement campaign reported at Prime Ministerial level saw second-tier banks block roughly 21 million dollars across 402,000 transactions tied to illegal casino platforms between October 2025 and March 2026, with eleven bank employees arrested and 1,144 mule-linked accounts frozen, indicating active enforcement capacity against financial-institution-facilitated illicit payment flows running in parallel with the compliance-rating improvements.

Outlook

The 2nd Regular Follow-up Report already scheduled among the Eurasian Group's 2026 publications will be the next formal marker of Kazakhstan's trajectory on the remaining Recommendations not yet upgraded to Largely Compliant. Continued regular, rather than enhanced, follow-up status indicates the Eurasian Group does not currently regard Kazakhstan's compliance gaps as warranting intensified monitoring, though the unresolved beneficial-ownership threshold question remains a specific point that could affect a future Recommendation 24 assessment.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

Kazakhstan's EAG 1st Regular Follow-Up Report (29 June 2026) upgraded Recommendation 6, 7 and 26 ratings from Partially Compliant to Largely Compliant; a 2nd Regular Follow-up Report is listed for 2026; Kazakhstan remains outside FATF grey/black lists.

Periodic updates (1)
3 Nov 2026 · fim-2026-11-03

AML/CTF Regime

The principal AML/CTF regime development is a draft order from the Ministry of Tourism and Sports that would introduce personal administrative liability for casino, bookmaker and lottery operator heads and financial-control staff where anti-money-laundering obligations are breached. Reporting ties the measure directly to FATF Recommendation 35, which requires that countries ensure a range of effective, proportionate and dissuasive sanctions, criminal, civil or administrative, are available to deal with natural or legal persons that fail to comply with AML/CFT requirements. The draft's focus on named individuals rather than corporate entities alone addresses what the underlying reporting frames as a specific, previously identified gap in the gambling sector's sanctions architecture.

This development should be read against Kazakhstan's 2023 EAG mutual evaluation, which rated the country Compliant or Largely Compliant on 33 of 40 FATF Recommendations, a relatively strong baseline by regional standards. A gap concentrated in one sector's sanctions regime is consistent with a jurisdiction that has substantially built out its core AML/CFT architecture but retains sector-specific weaknesses, in this instance the gambling sector's exposure to cash-intensive, high-velocity transactions that can obscure illicit proceeds absent robust deterrence aimed at the individuals making day-to-day compliance decisions. The three-pillar balance this monitor applies across AML, CTF and CPF findings favours noting explicitly that this development is an AML-pillar correction; no corresponding CTF or CPF development was identified for Kazakhstan, and the draft order's own framing is confined to AML violations.

The draft is currently at the consultation stage, with public discussion scheduled to run to 13 November 2026, and the evidentiary basis for the account is a single Tier-2 regional media report; the Ministry's own publication of the draft has not yet been directly retrieved. The claim is therefore carried at a probable confidence tier, not confirmed, and the structural significance of the development (a shift toward individual AML accountability in a historically under-scrutinised sector) should be read as a proposal under active consultation rather than as settled law. Architecture-over-incident framing is directly applicable: the significance is the structural mechanism being proposed, a named-individual liability standard tied explicitly to an FATF recommendation, rather than any single enforcement incident prompting it.

Outlook

The consultation period runs to 13 November 2026, as scheduled, and the next substantive marker for this domain is the content of the final order, specifically whether personal liability provisions for gambling-sector heads and compliance officers survive, are narrowed, or are dropped during consultation. Corroboration from the Ministry's own publication, rather than secondary reporting alone, would also strengthen the confidence tier on this development in a subsequent cycle. A finalised order with personal liability intact would represent a concrete, FATF-Recommendation-35-aligned closure of a gap identified against Kazakhstan's 2023 mutual evaluation baseline.

D8 Commercial Activity

no_changeno_changestanding position

Commercial Activity

No integrity-infrastructure-vendor commercial transaction specific to the financial-integrity function was located for Kazakhstan this cycle. The closest adjacent commercial development, the exploratory memorandum of understanding signed 7 October 2026 by Tether, the National Bank of Kazakhstan and the Alatau City Authority to study a tenge-pegged stablecoin and asset-tokenisation pilot, is carried and analysed in full under the crypto-sector digital-asset lens rather than duplicated here as a financial-integrity commercial-activity finding in its own right. No consideration, equity stake or financial terms were disclosed in connection with that memorandum, consistent with its framing as a non-binding exploratory study rather than a concluded transaction.

Continue reading

From a financial-integrity architecture perspective, the absence of a disclosed commercial transaction this cycle is itself worth noting rather than treating as a null finding: the enforcement action against six unlicensed global exchanges within the AIFC perimeter, covered under the digital-assets domain, demonstrates that commercial crypto activity is occurring in Kazakhstan's market at meaningful scale, even though none of it this cycle took the form of a disclosed, terms-specified transaction subject to financial-integrity commercial-activity review.

Outlook

The principal matter to watch on this track is whether the exploratory Tether-NBK-Alatau arrangement, or any successor arrangement building a stablecoin or tokenisation pilot, eventually produces a disclosed commercial transaction with defined terms, consideration or equity structure that would bring it squarely within a financial-integrity commercial-activity review rather than remaining at the exploratory-MoU stage it currently occupies.

Judgment: No integrity-infrastructure commercial transaction identified this cycle. Uncertain
Regulatory horizon
In Force Pending2026-Q4 · ±quarter

First-category payment organisation licensing regime

From October 2026, first-category payment organisations may operate under an NBK licence, combining payment services with limited banking-adjacent operations.
2 dated · 3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Kazakhstan moves to impose personal AML liability on gambling-sector compliance heads.

A draft order citing FATF Recommendation 35 would make casino, bookmaker and lottery heads and financial-control staff personally liable for AML violations, under consultation to 13 November 2026. This narrows the margin for delegated accountability in that sector.

1 evidence refs
Compliance

A gambling-sector AML gap identified against FATF Recommendation 35 is moving into consultation.

The draft order targets a specific, previously identified obliged-entity gap rather than general AML policy; firms with gambling-sector exposure in Kazakhstan should note the consultation window closes 13 November 2026.

1 evidence refs
Legal

AIFC Court enforcement against six unlicensed exchanges extends to app-store-level restriction.

The injunctions direct Apple and Google to restrict the relevant apps inside Kazakhstan, indicating the AIFC's enforcement reach extends beyond the platforms themselves to distribution channels, relevant to liability and nexus assessments for digital-asset clients.

1 evidence refs
Board

Kazakhstan's digital-asset licensing perimeter is actively distinguishing licensed from unlicensed market participants.

Enforcement against six unlicensed exchanges alongside in-principle approval for Kraken signals a functioning, tested licensing gate rather than an unregulated or static market, relevant to strategic assessment of Central Asian digital-asset exposure.

2 evidence refs
CTO

AIFC enforcement mechanism includes direction to app-store operators to restrict unlicensed exchange apps.

The technical enforcement vector used against the six excluded exchanges operates at the app-distribution layer inside Kazakhstan, a relevant consideration for platform architecture and geofencing decisions.

1 evidence refs
Risk

Kazakhstan's AML baseline remains favourable while one sectoral gap and a maturing crypto-licensing regime both develop in parallel.

The country remains off the FATF grey list with a strong 2023 EAG rating, even as a gambling-sector AML gap and an active digital-asset licensing gate both generate new findings this cycle; these are two distinct, non-escalatory developments rather than a single deteriorating trend.

3 evidence refs
Operations

New AIFC digital-asset enforcement and licensing outcomes affect counterparty screening in Kazakhstan.

Screening and onboarding workflows involving digital-asset counterparties active in or around the AIFC should reflect the distinction between the six excluded platforms and Kraken's in-principle-approved status.

2 evidence refs
Audit

Underlying regulator documentation for both the gambling-sector draft order and the AIFC enforcement action has not yet been directly retrieved.

Current assessments rest on secondary press and trade-outlet reporting rather than the Ministry's or AFSA's own primary materials, which is a relevant consideration for the evidentiary basis of any control-testing scope relying on these findings.

2 evidence refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material change this cycle in Kazakhstan-linked Russia sanctions-evasion architecture.
T2 · EU AML Package / AMLAno_changeNot applicable: Kazakhstan is outside the EEA and not bound by AMLR/6AMLD/AMLA.
T3 · FATF Grey Listno_changeKazakhstan remains off the FATF grey list; 2023 EAG MER rated it Compliant/Largely Compliant on 33 of 40 Recommendations. New draft order addressing R.35 gambling-sector gap entered consultation.
T4 · Beneficial-Ownership Register Statusno_changeNo Kazakhstan-specific beneficial-ownership register development identified this cycle.
T5 · Crypto & Digital-Asset IntegrityescalatingAFSA/AIFC Court enforcement against six unlicensed exchanges and Kraken's in-principle AFSA approval mark continued maturation of Kazakhstan's dual-track crypto licensing perimeter.
T6 · Sanctions Regime Divergenceno_changeNo material change this cycle; Kazakhstan's secondary-sanctions-evasion transit-point role unchanged from prior commentary.
Registers

Enforcement actions

  • 24 Feb 2025
  • 23 Oct 2025
  • 23 Apr 2026
  • 30 Jun 2026
  • 7 Jul 2026
  • 1 Oct 2026
  • UK designated Khudainatov under the Russia (Sanctions) (EU Exit) Regulations 2019 for owning/controlling Independent Oil & Gas Company, active in the Russian energy sector strategically significant to the Russian government, with trust-services sanctions also imposed. 24 Feb 2025
  • The EU's 19th Russia sanctions package imposed a transaction ban on four banks based in Belarus and Kazakhstan due to their connections to Russian financial-messaging and payment systems (Mir/SBP-adjacent infrastructure). 23 Oct 2025
  • The EU's 20th Russia sanctions package designated entities in Kazakhstan identified as third-country suppliers of critical high-tech items providing dual-use goods or weapons systems to the Russian military-industrial complex. 23 Apr 2026

Sanctions changes

  • 24 Feb 2025
  • 23 Oct 2025
  • 23 Apr 2026
  • 30 Jun 2026
  • UK listed Kazakhstan-born dual national Eduard Khudainatov under the Russia sanctions regime, with an asset freeze and additional trust-services sanction, reflecting UK use of third-country/dual-national nexus designations to reach Russia-linked energy wealth structured through Kazakhstan. 24 Feb 2025
  • EU's 19th sanctions package placed a transaction ban on banks in Belarus and Kazakhstan tied to Russian financial-messaging/payment-system connections, extending EU restrictive measures beyond Russia proper into the Central Asian financial corridor. 23 Oct 2025
  • EU's 20th sanctions package designated Kazakhstan-based entities as suppliers of dual-use goods/weapons systems to Russia's military-industrial complex, alongside a first-ever activation of the EU anti-circumvention tool against a neighbouring third country (Kyrgyzstan). 23 Apr 2026

Regulatory horizon (register)

  • AMLR / 6AMLD application date
  • First-category payment organisation licensing regime
  • National Bank/ARDFM draft resolution on DFA issuance
  • Draft gambling-sector AML personal liability order
  • EU 21st Russia sanctions package trade controls on Kazakhstan entities
  • EAG follow-up report on Kazakhstan's 2023 MER progress
  • AIFC/AFSA VASP sandbox-to-full-licensing transition

Active schemes

  • 'False transit' re-export of sanctioned goods via Kazakhstan
  • Aviation dual-use parts procurement route via Kazakhstan
  • Ruble-to-crypto off-ramp exchanges serving Kazakhstan corridor
  • CPC blended-crude carveout for Kazakh-Russian oil co-mingling
Sources
  1. https://www.fatf-gafi.org/en/countries/detail/Kazakhstan.html
  2. https://www.fatf-gafi.org/content/dam/fatf-gafi/fsrb-mer/Kazakhstan-EAG-Mutual-Evaluation-2023.pdf.coredownload.inline.pdf
  3. https://www.zigram.tech/resources/kazakhstan-aml-under-resolution-934/
  4. https://eurasianet.org/new-report-documents-how-central-asian-states-abet-russian-sanctions-busting
  5. https://www.mayerbrown.com/en/insights/publications/2026/01/russiaukraine-sanctions-update--month-of-january-2026
  6. https://caspianpost.com/kazakhstan/why-kazakhstan-turned-to-ofac-over-lukoil
  7. https://www.fatf-gafi.org/en/publications/High-risk-and-other-monitored-jurisdictions/increased-monitoring-june-2026.html
  8. https://afsa.aifc.kz/afsa-and-afm-agree-on-joint-work-in-aml-and-cft/
  9. https://adilet.zan.kz/rus/docs/Z2300000193
  10. https://www.fatf-gafi.org/en/publications/Mutualevaluations/Kazakhstan-MER-2023.html
  11. https://adilet.zan.kz/rus/docs/V2300032392
  12. https://www.opensanctions.org/datasets/kz_afmrk_sanctions/
  13. https://www.knowyourcountry.com/country-reports/kazakhstan/
  14. https://nationalbank.kz/en/news/informacionnye-soobshcheniya/19193
  15. https://www.bakermckenzie.com/en/insight/publications/2026/07/kazakhstan-new-amendments-to-personal-data-legislation
  16. https://npck.kz/en/central-asia-fintech-summit-2026-shaping-the-future-of-finance/
  17. https://eurasiangroup.org/en/news
  18. https://eurasiangroup.org/files/uploads/files/1st_Regular_FUR_of_Kazakhstan_eng.pdf
  19. https://eurasiangroup.org/en/mutual-evaluation-reports
  20. https://www.cryptotimes.io/2026/10/07/tether-kazakhstan-central-bank-sign-mou-to-explore-tenge-stablecoin-and-tokenization/
  21. https://www.trend.az/casia/kazakhstan/4232788.html
  22. https://www.openownership.org/en/map/country/kazakhstan/
  23. https://casinobeats.com/2026/07/07/kazakhstan-govt-says-banks-have-blocked-21m-worth-of-illegal-casino-transactions/
  24. https://lansinginstitute.org/2025/12/01/kazakhstans-expanding-role-in-russias-sanctions-evasion-architecture/
  25. https://www.oecd.org/en/publications/anti-corruption-and-integrity-outlook-2026_0c8910f8-en/kazakhstan_4d5d0dcc-en.html
  26. https://www.rfunews.com/articles/kazakhstan-shuts-down-military-and-dual-use-supplies-feeding-russias-war
  27. https://uppersetup.com/en/blog/digital-assets-and-mining-in-kazakhstan-2026-national-bank
  28. https://en.cryptonomist.ch/2026/10/20/kazakhstan-crypto-injunction/
  29. https://nationalbank.kz/en/sanction/sankcii-i-mery-vozdeystviya
  30. Kursiv Media Kazakhstan
  31. Cryptonomist
  32. The Times of Central Asia
  33. FATF
  34. Bondstone Law
  35. Mutual Evaluation of Kazakhstan
  36. 1 Mutual Evaluation Report of the Republic of Kazakhstan 2023
  37. UNODC and Partners strengthen cooperation in combating money laundering and terrorism financing in Kazakhstan
  38. Kazakhstan's measures to combat money laundering and terrorist financing
  39. Kazakhstan
  40. Assessments
  41. Mutual Evaluations
  42. UNODC and Kazakhstan's Agency on Financial Monitoring improve effectiveness of Anti-Money Laundering and Countering the Financing of Terrorism system
  43. Consolidated assessment ratings
  44. UNODC and the state authorities of the Republic of Kazakhstan enhance cooperation in combating money laundering and terrorist financing.
  45. In ‘False Transit’ Loophole, Russia’s War Machine Is Supplied Through Kazakh Companies and Belarusian Warehouses | OCCRP
  46. Russia’s Airlines Skirt Sanctions to Keep Boeing, Airbus Jets Flying
  47. UK sanctions guidance for Kazakh businesses - GOV.UK
  48. Sanctions and Evasion Updates: Insights from OCCRP
  49. EU adopts 20th package of sanctions against Russia - Finance
  50. Kazakhstan Will Not ‘Blindly Follow’ Sanctions on Russia, Official Says - Bloomberg
  51. EU Plans Massive 21st Sanctions Package to Target Russian Banks and Crypto | OCCRP
  52. Estonian Premier Urges EU Ban on Transit Through Russia - Bloomberg
  53. Russia-linked cryptocurrency services and sanctions evasion
  54. 19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium
  55. Sanctions Programs and Country Information | Office of Foreign Assets Control
  56. Recent Actions | Office of Foreign Assets Control
  57. Home | Office of Foreign Assets Control
  58. Sanctions List Service | Office of Foreign Assets Control
  59. Where is OFAC's Country List? What countries do I need to worry about in terms of U.S. sanctions? | Office of Foreign Assets Control
  60. OFAC Related Press Releases | Office of Foreign Assets Control
  61. Sanctions List Search Tool | Office of Foreign Assets Control
  62. Sanctions List Updates
  63. Iran-related Designations; Russia-related Designation Removal; Ukraine-related Designation Removal | Office of Foreign Assets Control
  64. What Are Sanctions? OFAC & Crypto Compliance - Chainalysis
  65. Crypto Sanctions: 2026 Crypto Crime Report
  66. 2025 Crypto Regulatory Round-Up
  67. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  68. Elliptic's 2026 regulatory and policy outlook: 5 crypto trends to expect in 2026
  69. Experts Call for Greater International Collaboration on Crypto-Regulation | OCCRP
  70. TRM Labs Resources | Crypto Investigations, Compliance, and Policy Insights
  71. EU's 20th Russia Sanctions Package
  72. How crypto regulation changed in 2025: a global review
  73. Unofficial translation
  74. Guidance on Beneficial Ownership and Transparency of Legal Arrangements
  75. Beneficial Ownership Regulations and Company Registries in Southeast Asia
  76. Entrepreneur Code of the Republic of Kazakhstan Unofficial translation
  77. Guidance-Beneficial-Ownership-Transparency-Legal- ...
  78. BEST PRACTICES ON BENEFICIAL OWNERSHIP FOR LEGAL PERSONS OCTOBER 2019
  79. Best Practices on Beneficial Ownership for Legal Persons
  80. FATF guidance TRANSPARENCY AND BENEFICIAL OWNERSHIP October 2014
  81. Guidance on Beneficial Ownership of Legal Persons
  82. Law on Combating Legalization (Laundering) of Illegally ...
  83. UNODC Strengthens Kazakh Government Agencies In Combating Money Laundering and Return of Stolen Assets
  84. Enforcement Actions | FinCEN.gov
  85. UNODC and Agency for Financial Monitoring of Kazakhstan discuss new two-year plan under Anti-Money Laundering and Counter-Financing of Terrorism project
  86. United States Department of the Treasury Financial Crimes Enforcement Network - Home | FinCEN.gov
  87. Special Measures | FinCEN.gov
  88. Jurisdictions under Increased Monitoring - 13 February 2026
  89. "Black and grey" lists
  90. Jurisdictions under Increased Monitoring - 19 June 2026
  91. High-Risk Jurisdictions subject to a Call for Action - 13 February 2026
  92. High-risk and other monitored jurisdictions
  93. High-Risk Jurisdictions subject to a Call for Action - 19 June 2026
  94. Outcomes FATF Plenary, 17-19 June 2026
  95. Outcomes FATF Plenary, 11-13 February 2026
  96. FATF changes its grey listing criteria to further focus on risk
  97. Jurisdictions under Increased Monitoring - 13 June 2025
  98. Anti-money laundering and countering the financing of terrorism at international level - Finance
  99. European Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  100. High risk third countries and the international context content of anti-money laundering and countering the financing of terrorism - European Commission
  101. EU methodology for the identification of high-risk third countries - Finance
  102. Commission adds Russia to list of high-risk jurisdictions to strengthen international fight against financial crime
  103. Commission updates list of high-risk countries to strengthen international fight against financial crime - Finance
  104. Money Laundering Advisory Notice: June 2026 - GOV.UK
  105. Protecting the EU’s financial system - Finance - European Commission
  106. Anti-Money Laundering and Terrorist Financing Directive 4 - Finance
  107. Putin’s pipeline: How the Kremlin outmaneuvered Western oil companies to wrest control of vast flows of Kazakhstan’s crude - ICIJ
  108. Frequently asked questions about the Caspian Cabals investigation - ICIJ
  109. Russian Harmful Foreign Activities Sanctions | Office of Foreign Assets Control
  110. 1216 | Office of Foreign Assets Control
  111. Behind closed doors, Kazakhstan challenges decades-old deal with $160 billion claim against Big Oil - ICIJ
  112. 1020 | Office of Foreign Assets Control
  113. Frequently Asked Questions - Newly Added | Office of Foreign Assets Control
  114. Loopholes undermine sanctions: the Russian Shipping Forecast | Global Witness
  115. Guidance on third country processed oil product measures - GOV.UK
  116. Best Practices Travel Rule Supervision June 2025
  117. From trading bans to total embrace, a global guide to crypto regulation
  118. FSB thematic review 2025: Global crypto regulation remains fragmented despite market growth
  119. Targeted Report on Stablecoins and Unhosted Wallets Peer-to-Peer Transactions
  120. FATF urges stronger global action to address Illicit Finance Risks in Virtual Assets
  121. FATF Updates on Recommendation 15 Implementation in Jurisdictions With Materially Important Virtual Asset Sectors | TRM Labs
  122. Crypto regulatory affairs: Hong Kong opens access to global liquidity pools
  123. State of Crypto 2025: The readiness of the digital asset ...
  124. The UK Sanctions List - GOV.UK
  125. OFSI Consolidated List Search
  126. FCDO - UK Sanctions List Search - GOV.UK
  127. OFSI Annual Review 2024 to 2025: Effective Sanctions - GOV.UK
  128. Russia sanctions: statutory guidance - GOV.UK
  129. Office of Financial Sanctions Implementation – News and updates from the Office of Financial Sanctions Implementation
  130. Starter guide to UK sanctions - GOV.UK
  131. Russia: list of designations and sanctions notices - GOV.UK
  132. 1 Financial Sanctions Notice 24/02/2025 Russia Introduction
  133. Oil giants ignored red flags, enriched elite for Kazakhstan pipe dream - ICIJ
  134. ICIJ's guide to Russian wealth hidden offshore - ICIJ
  135. Pandora Papers - ICIJ
  136. Browse by country Kazakhstan | ICIJ Offshore Leaks Database
  137. Offshore havens and hidden riches of world leaders and billionaires exposed in unprecedented leak - ICIJ
  138. Pandora Papers: An offshore data tsunami - ICIJ
  139. About the Pandora Papers - ICIJ
  140. Pandora Papers reporting from across Europe - ICIJ
  141. ICIJ releases new Pandora Papers data from two offshore service providers - ICIJ
  142. Paradise Papers firm Asiaciti managed millions for a carousel of millionaires and fraudsters
  143. FATF / Eurasian Group (EAG)
  144. Council of the European Union
  145. European Commission
  146. UK HM Treasury / OFSI
  147. UK FCDO
  148. OCCRP / Buro Media / Verstka
  149. Bloomberg
  150. Elliptic
  151. ICIJ
  152. European Commission (DG FISMA)
  153. HM Treasury
  154. UNODC Regional Office for Central Asia
Coverage gaps
fim-int-2026-07-07-G001: Kazakhstan-specific FIU enforcement…
fim-int-2026-07-07-G001: Kazakhstan-specific FIU enforcement statistics (STR volumes, ML prosecutions, confiscation outcomes) beyond the 2023 EAG MER are not available in English-language primary sources within the research window. [resolved]
fim-int-2026-07-07-G002: No confirmed OFAC SDN designation p…
fim-int-2026-07-07-G002: No confirmed OFAC SDN designation parallel to the UK/EU listings against Kazakhstan-linked entities has been independently verified this cycle, leaving the extent of US alignment uncertain. [resolved]
fim-int-2026-07-07-G003: Kazakhstan's domestic Specific Good…
fim-int-2026-07-07-G003: Kazakhstan's domestic Specific Goods Law licensing regime's actual enforcement outcomes (denials, seizures, prosecutions) against dual-use re-export shell companies are not documented in the available source set. [resolved]
fim-int-2026-07-07-G004: Gray-market cryptocurrency mining e…
fim-int-2026-07-07-G004: Gray-market cryptocurrency mining enforcement outcomes in Kazakhstan since 2022 are not corroborated by a second independent source category beyond investigative reporting. [resolved]
fim-int-2026-07-07-G005: The EAG follow-up report on Kazakhs…
fim-int-2026-07-07-G005: The EAG follow-up report on Kazakhstan's 2023 Mutual Evaluation Report progress, expected 2026-Q4 into 2027-Q1, has not yet been published, leaving R.26 and R.25 remediation status unverified. [resolved]
fim-int-2026-08-05-G001: No Tier-1 europa.eu/amla.europa.eu …
fim-int-2026-08-05-G001: No Tier-1 europa.eu/amla.europa.eu primary source located for AMLD6/AMLA this cycle despite active search. [resolved]
fim-int-2026-08-05-G002: No Kazakhstan public beneficial-own…
fim-int-2026-08-05-G002: No Kazakhstan public beneficial-ownership register citation located this cycle. [resolved]
fim-int-2026-08-05-G003: No EU/UK parallel designation ident…
fim-int-2026-08-05-G003: No EU/UK parallel designation identified to corroborate or refute the T6 sanctions-divergence signal against OFAC's CJNG action. [resolved]
fim-int-2026-08-05-G004: The NomadPay-Kremlev ownership alle…
fim-int-2026-08-05-G004: The NomadPay-Kremlev ownership allegation lacks documentary corroboration in Kazakh public registries; single-source T3 reporting only. [resolved]
fim-int-2026-08-21-G001: No KZ-specific beneficial-ownership…
fim-int-2026-08-21-G001: No KZ-specific beneficial-ownership registry development located this cycle (D2). [resolved]
fim-int-2026-08-21-G002: No KZ-specific conflict-finance or …
fim-int-2026-08-21-G002: No KZ-specific conflict-finance or extractive-industry development located this cycle (D4). [resolved]
fim-int-2026-08-21-G003: Primary text of Government Resoluti…
fim-int-2026-08-21-G003: Primary text of Government Resolution No. 934 not yet retrieved from Adilet/government source; current sourcing relies on a single Tier-4 vendor characterization. [resolved]
fim-int-2026-08-21-G004: Mexico and Colombia (Tier-D watch) …
fim-int-2026-08-21-G004: Mexico and Colombia (Tier-D watch) yielded no fresh primary-source material this cycle; logged as awaiting primary source rather than asserted null. [resolved]
fim-int-2026-09-14-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No KZ-specific beneficial-ownership registry development was located this cycle. [resolved]
fim-int-2026-09-14-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G002 ({'scheme': 'financial_integrity', 'value': 'D3'}): No enabler-jurisdiction dynamics beyond the AIFC/national supervisory seam were located this cycle. [resolved]
fim-int-2026-09-14-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G003 ({'scheme': 'financial_integrity', 'value': 'D5'}): Exact CDD/travel-rule thresholds under the Digital Assets Law were not independently verified this cycle. [resolved]
fim-int-2026-09-14-G004: Tier D watch jurisdictions (KH/LA/M…
fim-int-2026-09-14-G004: Tier D watch jurisdictions (KH/LA/MX/CO) were out of scope for this JID-bound dispatch. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): Primary text of Government Resolution No. 934 was not directly retrieved this cycle; reliance is on Tier-3 vendor commentary. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D1'}): D1 sanctions architecture, D3 enabler jurisdictions and D4 conflict finance showed thin coverage for KZ this cycle; no dedicated primary sources were retrieved. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D2'}): Primary consolidated Adilet text of the Personal Data Law amendments (No. 326-VIII) was not directly retrieved; reliance is on a Tier-3 law-firm summary. [resolved]
fim-int-2026-10-11-G001: Primary National Bank / Open Legal …
fim-int-2026-10-11-G001: Primary National Bank / Open Legal Acts portal text of the draft DFA-issuance resolution was not independently retrieved this cycle; only secondary trade-press reporting of the NBK press release was available. [resolved]
fim-int-2026-10-11-G002: Operative beneficial-ownership thre…
fim-int-2026-10-11-G002: Operative beneficial-ownership threshold for Kazakhstan (10% vs 25%) could not be resolved from the available sources this cycle. [resolved]
fim-int-2026-10-11-G003: D3 (enabler jurisdictions), D4 (con…
fim-int-2026-10-11-G003: D3 (enabler jurisdictions), D4 (conflict finance) and D6 (compliance technology) coverage was thin this cycle; no KZ-specific primary-sourced development identified in any of the three. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): AML/CFT supervision regime for the newly opened National Bank-licensed crypto exchange/trading-platform operators outside the AIFC has not been independently verified against a primary National Bank instrument this cycle. [resolved]
fim-int-2026-10-18-G002: Tier D jurisdictions (KH, LA, MX, C…
fim-int-2026-10-18-G002: Tier D jurisdictions (KH, LA, MX, CO) were not researched this cycle, as this run is dispatch-bound to Kazakhstan only. [resolved]
fim-int-2026-10-25-G001: No AFSA/AIFC Court primary document…
fim-int-2026-10-25-G001: No AFSA/AIFC Court primary document located confirming the six-exchange injunction beyond T3 crypto-press corroboration. [resolved]
fim-int-2026-10-25-G002: No beneficial-ownership register de…
fim-int-2026-10-25-G002: No beneficial-ownership register development for Kazakhstan located this cycle (D2 thin coverage). [resolved]
fim-int-2026-10-25-G003: No conflict-finance development for…
fim-int-2026-10-25-G003: No conflict-finance development for Kazakhstan located this cycle (D4 thin coverage). [resolved]
fim-int-2026-11-01-G101 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G101 ({'scheme': 'financial_integrity', 'value': 'D1'}): Domains D1 (Sanctions), D2 (Beneficial Ownership), D3 (Enabler Jurisdictions baseline), D4 (Conflict Finance), D6 (Compliance Technology) carry thin coverage this cycle. [open]
fim-int-2026-11-01-G102: Tier-D jurisdiction watch (KH/LA/MX…
fim-int-2026-11-01-G102: Tier-D jurisdiction watch (KH/LA/MX/CO) out of scope for this single-JID bound run. [open]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): AFSA's own primary-source list of the nine platforms that exited voluntarily and the seven seeking licences was not retrieved this cycle. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): Ministry's own publication of the draft gambling-sector AML liability order was not retrieved; only secondary press reporting available. [open]
fim-int-2026-11-01-G003: D1-D4 and D6 domains carried thin o…
fim-int-2026-11-01-G003: D1-D4 and D6 domains carried thin or no Kazakhstan-specific coverage this cycle; no new material identified. [open]
FIM-GAP-001 (D2): Kazakhstan's 2023 EAG Mutual Evaluation ra…
FIM-GAP-001 (D2): Kazakhstan's 2023 EAG Mutual Evaluation rated Recommendation 26 (regulation and supervision of financial institutions) as non-compliant, the lowest possible rating, alongside partially-compliant ratings across supervisory sanctions, guidance, and cross-border cooperation recommendations (R.30, R.31, R.34, R.35, R.37, R.39).
FIM-GAP-002 (D1): Kazakh officials have publicly signalled p…
FIM-GAP-002 (D1): Kazakh officials have publicly signalled prioritisation of domestic economic interests over full alignment with Western Russia sanctions, constraining enforcement against transit and dual-use re-export schemes documented by investigative reporting and reflected in successive EU sanctions-package designations of Kazakhstan-linked entities.
FIM-GAP-003 (D2): Publicly available, recent (18-month windo…
FIM-GAP-003 (D2): Publicly available, recent (18-month window) Kazakhstan-specific FIU enforcement statistics (STR volumes, ML prosecutions, confiscation outcomes) are not readily accessible in English-language primary sources beyond the 2023 MER and periodic UNODC technical-assistance updates.
FIM-GAP-004 (D5): Kazakh authorities have struggled to enfor…
FIM-GAP-004 (D5): Kazakh authorities have struggled to enforce against gray-market cryptocurrency mining operators who register businesses abroad to exploit regulatory loopholes, despite crackdown attempts prompted by power-grid strain from the post-China-ban mining influx.

Evidence

Confidence-tiered claims

Kazakhstan's ratings for R.6, R.7 and R.26 upgraded from Partially Compliant to Largely Compliant [Source 1]
Probable · 1 source
Not on FATF grey or black list as of June 2026 plenary; remains under EAG regular follow-up [Source 1]
Probable · 1 source
Requirements for KZ financial organisations, residents and AIFC participants to issue digital financial assets via a platform operator [Source 1]
Probable · 1 source
Tenge-pegged stablecoin and asset-tokenisation pilots [Source 1]
Probable · 1 source
$700 million (~$200m invested) as of 15 September 2026, up from $350m in March 2026 [Source 1]
Probable · 1 source
~$21,000,000 across 402,000 transactions; 11 bank employees arrested; 40 illegal operators identified; 15 criminal cases opened; 1,144 mule-linked accounts frozen [Source 1]
Probable · 1 source
25% (Open Ownership general register) vs 10% (AML-law incorporation UBO threshold) [Source 1]
Disputed · 1 source
Lukoil's Caspian Pipeline Consortium stake following January 2026 Tengiz/CPC disruptions [Source 1]
Uncertain · 1 source
Register amended procedurally (Order No. 21, 23 Dec 2025) but remains unavailable online [Source 1]
Probable · 1 source
Export-licensing requirements and explicit ban on re-exporting Western-origin goods to Russia, in force since approx. December 2025 [Source 1]
Probable · 1 source
Opened unsecured digital-asset circulation nationally from 1 May 2026 via National Bank-licensed exchange operators and registered trading-platform operators, outside the AIFC [Source 1]
Probable · 1 source
Compliant or Largely Compliant on 33 of 40 FATF Recommendations per EAG 2023 MER; under regular follow-up with a 1st Regular Follow-Up Report covering 2023-2025 [Source 1]
Probable · 1 source
Legalised stablecoin/digital-asset use in cross-border import/export settlement alongside banking channels, paired with a crypto-trading income-tax exemption on licensed domestic platforms [Source 1]
Probable · 1 source
AIFC Court injunctions dated 15 September 2026, disclosed 20 October 2026, bar Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX from providing unlicensed digital-asset services within the AIFC perimeter. [Source 1]
Probable · 1 source
EAG's 44th Plenary (19-23 May 2026) approved and published Kazakhstan's 1st Regular Follow-up Report tracking R.6/R.7 technical-compliance deficiencies from the 2023 mutual evaluation. [Source 1]
Probable · 1 source
Kazakhstan continues to be documented as a transshipment corridor for Russia-bound dual-use (CHPL) goods and energy flows, exploiting EAEU customs-union proximity; no new Tier-1 designation of a Kazakhstan entity this cycle. [Source 1]
Probable · 1 source
The National Bank's East Kazakhstan branch imposed an administrative fine on 'Magnat' LLP, dated 1 October 2026, for breach of the Law on Currency Regulation and Currency Control, Art. 19(2)/(3) and Art. 218(8). [Source 1]
Probable · 1 source
consultation [Source 1]
Probable · 1 source
enforced [Source 1]
Probable · 1 source
pending_final_licence [Source 1]
Probable · 1 source
Draft order would impose personal administrative liability on casino, bookmaker and lottery heads and financial-control staff for AML violations, citing FATF Recommendation 35; consultation to 13 November 2026. [Source 1]
Probable · 1 source
Injunctions (dated 15 September 2026, enforcement reported 20-21 October 2026) restrict Coinbase, HTX, BingX, Bitcoin.com, BitMart and WEEX from offering unlicensed digital-asset services in the AIFC; Apple/Google directed to restrict the relevant apps inside Kazakhstan. [Source 1]
Probable · 1 source
Kraken received AFSA in-principle approval around 28 October 2026 to operate a trading platform and hold client digital assets in the AIFC; final licence not yet granted. [Source 1]
Probable · 1 source