D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Kazakhstan is assessed by the Eurasian Group (EAG), not FATF directly, under its 2023 Mutual Evaluation Report.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Kazakhstan's Digital Assets Law No.193-VII, in force from 1 May 2026, establishes a comprehensive national licensing perimeter for crypto-asset activity. Operators of unsecured digital-asset exchanges must obtain a National Bank of Kazakhstan licence, while digital-financial-asset trading platforms complete NBK registration. This regime applies outside the AIFC, whose AFSA-licensed channel continues to operate as a parallel supervisory track. From a financial-integrity perspective, the significance of this development is architectural: it closes what had previously been a licensing gap for exchange operators outside the AIFC and, in doing so, extends the AML/CFT perimeter to a category of firm that had not previously been subject to a clear national licensing requirement.
The compliance-relevant obligation attached to this regime is a customer-due-diligence and Travel-Rule-adjacent requirement: operators handling unsecured digital-asset transactions must apply customer-identification rules and, for certain transfers, collect and retain sender and recipient information. This obligation is confirmed against the primary statute text, though the exact thresholds triggering the sender/recipient information requirement were not independently verified this cycle, a gap flagged in the underlying research. For firms operating in or servicing the Kazakhstani market, this means the compliance baseline includes CDD and a partial Travel Rule obligation now, with the precise scope of that obligation still to be clarified in subsequent guidance or amendment.
A structural feature worth foregrounding under the crypto lens is the coexistence of two supervisory channels within one jurisdiction: the national NBK perimeter and the AIFC's AFSA-licensed regime. This is not itself evidence of regulatory arbitrage, but it is the kind of dual-track structure that FIM's enabler-jurisdiction analysis treats as a coordination seam worth monitoring, since a firm operating across both channels could in principle face inconsistent supervisory expectations, or a gap could emerge between the two regimes' respective AML/CFT requirements. No evidence located this cycle indicates such a gap has yet materialised in practice; the seam is a watch item, not a finding.
The most consequential open question for this domain is whether the National Bank will publish specific CDD and Travel-Rule thresholds implementing the Digital Assets Law, since the framework-level obligation is now confirmed but its operative scope remains undefined pending further guidance. A secondary watch item is whether the AIFC/national supervisory seam evolves into either formal coordination between AFSA and the NBK or a more visible divergence in AML/CFT expectations between the two channels. Kazakhstan's crypto-asset licensing tightening should be read as increasing the country's regulatory-perimeter maturity relative to the pre-May-2026 baseline, which strengthens rather than weakens its financial-integrity standing on this dimension.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
AML/CTF Regime is not yet covered for this jurisdiction in this report.
MLROs overseeing exposure to Kazakhstani crypto-asset counterparties should note that CDD and partial sender/recipient information requirements are now confirmed in force, though exact thresholds remain unverified pending further guidance.
Compliance functions with Kazakhstani crypto-asset exposure should map counterparties against the new NBK licensing/registration requirement and note the AIFC/national dual-track structure as a coordination watch item, not yet a confirmed gap.
No material change for this persona this cycle
The Board-level financial-crime risk profile for Kazakhstan is unchanged and stable; the material development this cycle is a compliance-architecture tightening for crypto-asset activity rather than a deterioration in country risk.
Technical teams supporting crypto-asset infrastructure touching Kazakhstan should anticipate a customer-identification and sender/recipient information-retention requirement, with exact technical thresholds still pending regulatory clarification.
The coexistence of AFSA-licensed AIFC and national NBK crypto-asset supervision within one jurisdiction is a coordination seam worth tracking for emerging arbitrage risk, though no gap has yet materialised in evidence.
No material change for this persona this cycle
Audit functions relying on OpenSanctions-sourced AFM data should note the dataset's suspension pending API-key/local-registration requirements; this is a data-access change, not evidence of a substantive control gap.
National Digital Assets Law brings unsecured digital-asset operators into CDD/Travel-Rule scope from 1 May 2026.
Kazakhstan's crypto-asset licensing perimeter closed a national-level gap outside the AIFC as of 1 May 2026.
No material change this cycle.
Kazakhstan's AML/CFT baseline remains stable at 2023 EAG mutual-evaluation levels, with no grey-list exposure.
Kazakhstan's national crypto-exchange licensing regime now requires CDD/Travel-Rule-adjacent controls for unsecured digital-asset transfers.
AIFC/national supervisory seam flagged as a structural watch item for Kazakhstan.
No material change this cycle.
Third-party access to AFM's domestic terror-financing list curtailed in 2026, narrowing external verifiability.
As the EU's AML Package matures, the shift from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State 6AMLD transposition, could illustratively reshape the supervisory and evasion landscape for entities operating cross-border into or out of the EU/EEA. A jurisdiction such as Kazakhstan, which sits outside this perimeter entirely, would not be directly supervised by AMLA, but illustratively could see indirect effects if EU-based correspondent or counterparty institutions tighten their own due diligence on non-EEA jurisdictions as AMLA harmonises supervisory expectations within the bloc. This is architecture-over-incident framing: a structural EU-internal transition, not a Kazakhstan-specific development.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material KZ-specific dark-fleet, tech-procurement or commodity-rerouting signal was located this cycle; run scope was JID-bound to KZ. |
| T2 · EU AML Package / AMLA | no_change | Not applicable to KZ, which is outside the EU/EEA and not bound by AMLR/6AMLD/AMLA. |
| T3 · FATF Grey List | no_change | Kazakhstan is not on the FATF grey or black list as of the 19 June 2026 plenary; 2023 EAG mutual evaluation remains standing. |
| T4 · Beneficial-Ownership Register Status | no_change | No KZ-specific beneficial-ownership registry development was located this cycle; coverage logged as thin. |
| T5 · Crypto & Digital-Asset Integrity | material_change | Kazakhstan's comprehensive digital-assets regulatory framework came into force 1 May 2026, bringing crypto-exchange licensing and DFA/stablecoin platform registration under National Bank supervision nationally, alongside a parallel AFSA-licensed AIFC channel. |
| T6 · Sanctions Regime Divergence | no_change | Kazakhstan is not itself subject to international sanctions; no autonomous-listing divergence event affecting KZ was located this cycle. |