Financial Integrity Monitor

Kazakhstan KZ

Domains (D1–D6)
1
Sources
12
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: IncreasingMixed

Kazakhstan is assessed by the Eurasian Group (EAG), not FATF directly, under its 2023 Mutual Evaluation Report.

MoreThe Agency for Financial Monitoring is the FIU/policy lead. Legal-person BO transparency is largely compliant, but legal-arrangement transparency and FI supervision remain weak (R.26 non-compliant). EAEU membership and border-free trade with Russia create structural sanctions-evasion exposure managed unevenly by a domestic Specific Goods Law licensing regime.

Key deficiencies
  • R.26 (regulation and supervision of financial institutions) rated non-compliant in the 2023 EAG MER
  • R.25 (transparency of legal arrangements/trusts) rated partially compliant
  • National risk assessment does not assess cross-border ML risk despite Kazakhstan's role as a Eurasian transit hub
  • R.30/31/34/35/37/39 (LEA responsibilities, investigative powers, guidance, sanctions, MLA, extradition) all rated only partially compliant
Recent developments (18m)
  • UK designated Kazakhstan-born dual national Eduard Khudainatov (Independent Oil & Gas Company) under the Russia sanctions regime, February 2025
  • EU 19th sanctions package (October 2025) imposed a transaction ban on banks in Belarus and Kazakhstan over Russian financial-messaging/payment-system links
  • EU 20th sanctions package (April 2026) designated third-country suppliers in Kazakhstan (with China, UAE, Uzbekistan, Belarus) for providing dual-use goods/weapons systems to the Russian military-industrial complex
  • EU proposed a 21st sanctions package (mid-2026) with trade controls on companies operating outside Russia, including entities in Kazakhstan
  • FATF June 2026 plenary confirmed Kazakhstan remains off the increased-monitoring (grey) list
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Kazakhstan's comprehensive Digital Assets Law regime, in force from 1 May 2026, has brought crypto-exchange licensing and digital-financial-asset trading-platform registration under National Bank of Kazakhstan supervision at the national level, materially expanding the AML/CFT perimeter beyond the pre-existing AIFC channel. Operators handling unsecured digital-asset transactions must now apply customer-identification rules and, for certain transfers, collect and retain sender and recipient information, a Travel-Rule-adjacent obligation confirmed against the primary statute. This is a structural tightening of the compliance architecture, not an episodic enforcement action, and it is the most significant financial-integrity development for Kazakhstan this cycle.

Other Developments

Standing AML/CFT baseline unchanged. Kazakhstan's governing mutual evaluation remains the 2023 EAG-conducted, FATF-endorsed assessment, which rates the country Compliant on 5 and Largely Compliant on 28 of the 40 FATF Recommendations, with Substantially Effective ratings on 7 of 11 Immediate Outcomes. The Financial Monitoring Agency continues to act as the national financial intelligence unit and DNFBP supervisor under the domestic AML/CFT statute. Kazakhstan is not on the FATF grey or black list, and no evidence located this cycle indicates deterioration of this baseline.

Third-party access to the domestic terror-financing list curtailed. Third-party access via OpenSanctions to the AFM's domestic terrorism and extremism-financing list was suspended in 2026, pending an API-key or local-registration requirement. This narrows external verifiability of the sanctions-adjacent data but does not, on the evidence available this cycle, indicate a substantive AML gap; it is a data-transparency development rather than a risk-elevation signal.

Cross-Monitor Connections

The new national digital-asset licensing regime intersects directly with the crypto monitor's coverage of Kazakhstan's parallel AFSA-licensed AIFC channel, and with the world-payments monitor's tracking of the same NBK licensing action under its market-access spine. The coexistence of the AIFC's separate AFSA-licensed regime and the national NBK perimeter within a single jurisdiction creates a structural coordination seam between two supervisory bodies, a watch item that could, over subsequent cycles, generate the kind of arbitrage risk that FIM's enabler-jurisdiction framing is designed to catch, even though it does not yet rise to a material enabler-jurisdiction finding this cycle.

Outlook

Watch for whether the National Bank publishes the specific CDD and Travel-Rule thresholds implementing the Digital Assets Law, since the framework-level obligation is confirmed but the operative thresholds were not independently verified this cycle. Also watch whether the AIFC/national supervisory seam identified this cycle develops into a more concrete coordination or divergence event, and whether Kazakhstan's 2023 EAG mutual evaluation baseline is revisited before its next scheduled review.

weekly_brief_draft · JID KZ
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Kazakhstan's Digital Assets Law No.193-VII, in force from 1 May 2026, establishes a comprehensive national licensing perimeter for crypto-asset activity. Operators of unsecured digital-asset exchanges must obtain a National Bank of Kazakhstan licence, while digital-financial-asset trading platforms complete NBK registration. This regime applies outside the AIFC, whose AFSA-licensed channel continues to operate as a parallel supervisory track. From a financial-integrity perspective, the significance of this development is architectural: it closes what had previously been a licensing gap for exchange operators outside the AIFC and, in doing so, extends the AML/CFT perimeter to a category of firm that had not previously been subject to a clear national licensing requirement.

The compliance-relevant obligation attached to this regime is a customer-due-diligence and Travel-Rule-adjacent requirement: operators handling unsecured digital-asset transactions must apply customer-identification rules and, for certain transfers, collect and retain sender and recipient information. This obligation is confirmed against the primary statute text, though the exact thresholds triggering the sender/recipient information requirement were not independently verified this cycle, a gap flagged in the underlying research. For firms operating in or servicing the Kazakhstani market, this means the compliance baseline includes CDD and a partial Travel Rule obligation now, with the precise scope of that obligation still to be clarified in subsequent guidance or amendment.

A structural feature worth foregrounding under the crypto lens is the coexistence of two supervisory channels within one jurisdiction: the national NBK perimeter and the AIFC's AFSA-licensed regime. This is not itself evidence of regulatory arbitrage, but it is the kind of dual-track structure that FIM's enabler-jurisdiction analysis treats as a coordination seam worth monitoring, since a firm operating across both channels could in principle face inconsistent supervisory expectations, or a gap could emerge between the two regimes' respective AML/CFT requirements. No evidence located this cycle indicates such a gap has yet materialised in practice; the seam is a watch item, not a finding.

Outlook

The most consequential open question for this domain is whether the National Bank will publish specific CDD and Travel-Rule thresholds implementing the Digital Assets Law, since the framework-level obligation is now confirmed but its operative scope remains undefined pending further guidance. A secondary watch item is whether the AIFC/national supervisory seam evolves into either formal coordination between AFSA and the NBK or a more visible divergence in AML/CFT expectations between the two channels. Kazakhstan's crypto-asset licensing tightening should be read as increasing the country's regulatory-perimeter maturity relative to the pre-May-2026 baseline, which strengthens rather than weakens its financial-integrity standing on this dimension.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 3 items tracked without a confirmed date.
3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLROHigh

National Digital Assets Law brings unsecured digital-asset operators into CDD/Travel-Rule scope from 1 May 2026.

MLROs overseeing exposure to Kazakhstani crypto-asset counterparties should note that CDD and partial sender/recipient information requirements are now confirmed in force, though exact thresholds remain unverified pending further guidance.

2 evidence refs
ComplianceHigh

Kazakhstan's crypto-asset licensing perimeter closed a national-level gap outside the AIFC as of 1 May 2026.

Compliance functions with Kazakhstani crypto-asset exposure should map counterparties against the new NBK licensing/registration requirement and note the AIFC/national dual-track structure as a coordination watch item, not yet a confirmed gap.

2 evidence refs
LegalPossible

No material change this cycle.

No material change for this persona this cycle

BoardAssessed

Kazakhstan's AML/CFT baseline remains stable at 2023 EAG mutual-evaluation levels, with no grey-list exposure.

The Board-level financial-crime risk profile for Kazakhstan is unchanged and stable; the material development this cycle is a compliance-architecture tightening for crypto-asset activity rather than a deterioration in country risk.

2 evidence refs
CTOAssessed

Kazakhstan's national crypto-exchange licensing regime now requires CDD/Travel-Rule-adjacent controls for unsecured digital-asset transfers.

Technical teams supporting crypto-asset infrastructure touching Kazakhstan should anticipate a customer-identification and sender/recipient information-retention requirement, with exact technical thresholds still pending regulatory clarification.

2 evidence refs
RiskAssessed

AIFC/national supervisory seam flagged as a structural watch item for Kazakhstan.

The coexistence of AFSA-licensed AIFC and national NBK crypto-asset supervision within one jurisdiction is a coordination seam worth tracking for emerging arbitrage risk, though no gap has yet materialised in evidence.

2 evidence refs
OperationsPossible

No material change this cycle.

No material change for this persona this cycle

AuditPossible

Third-party access to AFM's domestic terror-financing list curtailed in 2026, narrowing external verifiability.

Audit functions relying on OpenSanctions-sourced AFM data should note the dataset's suspension pending API-key/local-registration requirements; this is a data-access change, not evidence of a substantive control gap.

1 evidence refs
Decision lens
MLRO

National Digital Assets Law brings unsecured digital-asset operators into CDD/Travel-Rule scope from 1 May 2026.

Compliance

Kazakhstan's crypto-asset licensing perimeter closed a national-level gap outside the AIFC as of 1 May 2026.

Legal

No material change this cycle.

Board

Kazakhstan's AML/CFT baseline remains stable at 2023 EAG mutual-evaluation levels, with no grey-list exposure.

CTO

Kazakhstan's national crypto-exchange licensing regime now requires CDD/Travel-Rule-adjacent controls for unsecured digital-asset transfers.

Risk

AIFC/national supervisory seam flagged as a structural watch item for Kazakhstan.

Operations

No material change this cycle.

Audit

Third-party access to AFM's domestic terror-financing list curtailed in 2026, narrowing external verifiability.

Shared evidence: 4 refs
Scenario sketches

AMLA direct/indirect supervision transition — illustrative structural orientation

As the EU's AML Package matures, the shift from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State 6AMLD transposition, could illustratively reshape the supervisory and evasion landscape for entities operating cross-border into or out of the EU/EEA. A jurisdiction such as Kazakhstan, which sits outside this perimeter entirely, would not be directly supervised by AMLA, but illustratively could see indirect effects if EU-based correspondent or counterparty institutions tighten their own due diligence on non-EEA jurisdictions as AMLA harmonises supervisory expectations within the bloc. This is architecture-over-incident framing: a structural EU-internal transition, not a Kazakhstan-specific development.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material KZ-specific dark-fleet, tech-procurement or commodity-rerouting signal was located this cycle; run scope was JID-bound to KZ.
T2 · EU AML Package / AMLAno_changeNot applicable to KZ, which is outside the EU/EEA and not bound by AMLR/6AMLD/AMLA.
T3 · FATF Grey Listno_changeKazakhstan is not on the FATF grey or black list as of the 19 June 2026 plenary; 2023 EAG mutual evaluation remains standing.
T4 · Beneficial-Ownership Register Statusno_changeNo KZ-specific beneficial-ownership registry development was located this cycle; coverage logged as thin.
T5 · Crypto & Digital-Asset Integritymaterial_changeKazakhstan's comprehensive digital-assets regulatory framework came into force 1 May 2026, bringing crypto-exchange licensing and DFA/stablecoin platform registration under National Bank supervision nationally, alongside a parallel AFSA-licensed AIFC channel.
T6 · Sanctions Regime Divergenceno_changeKazakhstan is not itself subject to international sanctions; no autonomous-listing divergence event affecting KZ was located this cycle.
Registers

Enforcement actions

  • UK designated Khudainatov under the Russia (Sanctions) (EU Exit) Regulations 2019 for owning/controlling Independent Oil & Gas Company, active in the Russian energy sector strategically significant to the Russian government, with trust-services sanctions also imposed. 24 Feb 2025
  • The EU's 19th Russia sanctions package imposed a transaction ban on four banks based in Belarus and Kazakhstan due to their connections to Russian financial-messaging and payment systems (Mir/SBP-adjacent infrastructure). 23 Oct 2025
  • The EU's 20th Russia sanctions package designated entities in Kazakhstan identified as third-country suppliers of critical high-tech items providing dual-use goods or weapons systems to the Russian military-industrial complex. 23 Apr 2026

Sanctions changes

  • UK listed Kazakhstan-born dual national Eduard Khudainatov under the Russia sanctions regime, with an asset freeze and additional trust-services sanction, reflecting UK use of third-country/dual-national nexus designations to reach Russia-linked energy wealth structured through Kazakhstan. 24 Feb 2025
  • EU's 19th sanctions package placed a transaction ban on banks in Belarus and Kazakhstan tied to Russian financial-messaging/payment-system connections, extending EU restrictive measures beyond Russia proper into the Central Asian financial corridor. 23 Oct 2025
  • EU's 20th sanctions package designated Kazakhstan-based entities as suppliers of dual-use goods/weapons systems to Russia's military-industrial complex, alongside a first-ever activation of the EU anti-circumvention tool against a neighbouring third country (Kyrgyzstan). 23 Apr 2026

Regulatory horizon (register)

  • EU 21st Russia sanctions package trade controls on Kazakhstan entities
  • EAG follow-up report on Kazakhstan's 2023 MER progress
  • AIFC/AFSA VASP sandbox-to-full-licensing transition

Active schemes

  • [HIGH] 'False transit' re-export of sanctioned goods via Kazakhstan
  • [HIGH] Aviation dual-use parts procurement route via Kazakhstan
  • Ruble-to-crypto off-ramp exchanges serving Kazakhstan corridor
  • CPC blended-crude carveout for Kazakh-Russian oil co-mingling
Sources
  1. FATF / Eurasian Group (EAG)
  2. Council of the European Union
  3. European Commission
  4. UK HM Treasury / OFSI
  5. UK FCDO
  6. OCCRP / Buro Media / Verstka
  7. Bloomberg
  8. Elliptic
  9. ICIJ
  10. European Commission (DG FISMA)
  11. HM Treasury
  12. UNODC Regional Office for Central Asia
Coverage gaps
Kazakhstan's 2023 EAG Mutual Evaluation rated Recommendation…
Kazakhstan's 2023 EAG Mutual Evaluation rated Recommendation 26 (regulation and supervision of financial institutions) as non-compliant, the lowest possible rating, alongside partially-compliant ratings across supervisory sanctions, guidance, and cross-border cooperation recommendations (R.30, R.31, R.34, R.35, R.37, R.39).
Kazakh officials have publicly signalled prioritisation of d…
Kazakh officials have publicly signalled prioritisation of domestic economic interests over full alignment with Western Russia sanctions, constraining enforcement against transit and dual-use re-export schemes documented by investigative reporting and reflected in successive EU sanctions-package designations of Kazakhstan-linked entities.
Publicly available, recent (18-month window) Kazakhstan-spec…
Publicly available, recent (18-month window) Kazakhstan-specific FIU enforcement statistics (STR volumes, ML prosecutions, confiscation outcomes) are not readily accessible in English-language primary sources beyond the 2023 MER and periodic UNODC technical-assistance updates.
Kazakh authorities have struggled to enforce against gray-ma…
Kazakh authorities have struggled to enforce against gray-market cryptocurrency mining operators who register businesses abroad to exploit regulatory loopholes, despite crackdown attempts prompted by power-grid strain from the post-China-ban mining influx.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.