Launch a compliant crypto business through the AIFC. RUE structures AFSA-facing applications for exchanges, custody, OTC, and digital asset platforms in Kazakhstan.
Prepared by RUE editorial team · Reviewed by Milana · Updated 12 May 2026
Book Free ConsultationA Kazakhstan crypto license in practice usually means an AIFC authorization supervised by AFSA, not a blanket permit for unrestricted crypto activity across the whole country. RUE helps founders map the correct regulatory perimeter, prepare the application pack, and build the compliance stack needed for licensing and banking.
"As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays."
Regulated United Europe advises on the full Kazakhstan crypto license path through the AIFC: business model mapping, company formation, AFSA application drafting, AML/CFT framework, governance design, compliance staffing, and banking preparation.
We do not sell a generic “license package”. We build a regulator-ready file aligned with your actual model: exchange, custody, brokerage-style intermediation, OTC, tokenization, or a mixed structure requiring scoped legal analysis.
The strongest route for a crypto company in Kazakhstan is usually inside the AIFC under AFSA supervision, with a more defined authorization framework than the general domestic regime.
Kazakhstan sits between Europe, the Caucasus, Central Asia, and parts of the CIS corridor, which is commercially relevant for exchanges, OTC desks, and cross-border fintech groups.
The AIFC Court and International Arbitration Centre add credibility for shareholder disputes, commercial contracts, and enforcement architecture valued by investors and counterparties.
AFSA review is not only about incorporation. Governance, AML/KYC, sanctions controls, custody design, and operational readiness materially affect approval probability and banking outcomes.
A crypto license in Kazakhstan is usually shorthand for obtaining authorization in the Astana International Financial Centre (AIFC) under the supervision of the Astana Financial Services Authority (AFSA). That distinction matters. Kazakhstan does not operate as a single nationwide free-for-all crypto licensing regime for every business model.
In practice, AFSA assesses five things at the same time: legal structure, people, financial resources, internal policies, and technology controls. Founders who treat the process as a company-registration exercise usually lose time in remediation rounds. Founders who prepare a real operating model, documented controls, and credible funding sources move faster.
Below are the core requirements typically relevant to an AIFC crypto license or adjacent digital asset authorization path in 2026. Exact expectations depend on whether you are applying for exchange-style activity, custody, brokerage/intermediation, OTC dealing, or a more novel model routed through a case-by-case analysis.
You normally need an AIFC-registered legal entity with a real registered address and operational substance proportionate to the business. A paper company with outsourced everything is weak both for AFSA review and for bankability.
A practical nuance many competitors miss: local substance is not only a regulator issue. It directly affects bank account onboarding for crypto businesses, because banks test whether the company has real governance, accountable officers, and traceable operating flows.
AFSA will review the competence, integrity, and time commitment of founders, directors, senior managers, and control-function holders. This is effectively a fit-and-proper assessment, even if founders use looser market language such as “Kazakhstan VASP license”.
One role can sometimes cover multiple functions in a very small structure, but this should never be assumed. The regulator’s comfort depends on business complexity, transaction volumes, custody risk, and the independence of control functions.
A serious Kazakhstan AML KYC crypto framework in 2026 goes far beyond a template onboarding policy. You need a documented control system aligned with the AIFC/AFSA perimeter and Kazakhstan AML/CFT obligations, including escalation and evidence trails.
A modern stack often includes vendors such as Sumsub, Veriff, Trulioo, Chainalysis, TRM Labs, or Elliptic. AFSA does not license the vendor itself; it evaluates whether your controls are adequate, documented, and actually embedded into operations.
You should prepare a 3-year business plan with realistic assumptions, not a sales deck. AFSA and banking partners both test whether the business is economically coherent and sufficiently funded.
A practical prudential formula often used in preparation is: Required funding runway ≥ 6 × average monthly operating expenses. Monthly OPEX should include payroll, office, legal, audit, AML/KYT tooling, cloud/security, insurance, and contingency reserve. For higher-risk models, a 9-12 month runway is often more persuasive than the bare minimum.
Technology review is a decisive part of any crypto exchange license Kazakhstan or custody license Kazakhstan project. Generic statements like “we use secure wallets” are not enough.
Useful benchmark standards include ISO/IEC 27001, SOC 2 Type II, and OWASP ASVS. These are not automatic legal substitutes, but they materially strengthen the credibility of your control environment.
A complete application file usually includes far more than incorporation papers. The exact list depends on the activity scope, but a regulator-ready pack commonly contains:
At RUE, we align this document pack with adjacent workstreams such as preparation of compliance documents, legal services, and regulated accounting support so the file is consistent across regulator, bank, and auditor review.
Banking is not legally guaranteed by the license, but it is commercially critical. A credible crypto business in Kazakhstan must prepare for bank and EMI due diligence in parallel with the AFSA process.
Many founders underestimate this point: a technically licensable model can still fail commercially if the banking narrative is weak. We therefore combine AFSA preparation with bank account opening support and, where needed, high-risk banking strategy.
Compare Kazakhstan with other jurisdictions by regulator, permitted activities, review period, fees, capital, local substance and cross-border permissions. A local authorisation in Kazakhstan is distinct from EU MiCA/CASP authorisation and does not grant EU passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Tax efficiency in Kazakhstan depends on legal perimeter, AIFC status, income type, and accounting segregation. The market slogan “0% tax” is incomplete and often misleading. A founder asking about crypto tax Kazakhstan should separate three layers: general Kazakhstan tax rules, AIFC tax incentives, and sector-specific charges such as digital mining burdens.
Outside a qualifying exemption, the standard benchmark for Kazakhstan corporate taxation remains a 20% corporate income tax. However, certain AIFC participants may access tax preferences for qualifying financial and ancillary services under the AIFC regime, often discussed in the market as exemptions available until 1 January 2066. That does not mean every revenue line of every crypto company is automatically taxed at 0%.
The real tax question is not “Is Kazakhstan tax-free?” but rather:
For that reason, tax planning should be done together with licensing structuring, not after incorporation. RUE typically combines the licensing workstream with Kazakhstan crypto tax analysis and ongoing accounting support so the tax position matches the regulated activity and the operating model.
An AFSA authorization is the start of supervision, not the end of the project. A licensed crypto business in Kazakhstan must maintain governance, AML controls, reporting discipline, and technology resilience on a continuous basis.
Short answer: in most commercial cases, a crypto license in Kazakhstan means an authorization path inside the AIFC under AFSA, not a universal nationwide permit for unrestricted crypto operations.
Kazakhstan’s Law on Digital Assets supports distinct regulatory routes. AFSA authorisation remains relevant within the AIFC. From 1 May 2026, the national framework also provides for National Bank licensing of unsecured digital asset exchange operators and registration of digital asset trading-platform and digital financial asset-platform operators. Select the route according to the precise activity and applicable territorial framework.
Outside the AIFC, unsecured digital asset activities remain regulated, but an AIFC-only description is outdated. Since 1 May 2026, the National Bank has administered national licensing and registration routes for specified digital asset operators. Mining remains subject to its own requirements.
RUE structures applications and legal opinions around that perimeter first. It prevents the most common market mistake: building a business plan around a generic “Kazakhstan crypto license” concept that does not match the actual regulator, legal basis, or tax treatment.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
We define whether your model fits exchange, custody, OTC, brokerage-style activity, tokenization, or a mixed structure. This legal perimeter review is the most important first step. Typical duration: 1-3 weeks.
We assess ownership transparency, management suitability, compliance gaps, funding sources, technology stack, and bankability. Weaknesses are fixed before filing. Typical duration: 2-4 weeks.
We incorporate the AIFC entity, prepare constitutional documents, structure shareholding, secure registered office arrangements, and align substance with the planned regulated activity. Typical duration: 1-4 weeks.
We prepare the AFSA-facing file: business plan, financial projections, AML/CFT framework, sanctions controls, governance documents, technology notes, outsourcing and safeguarding policies. Typical duration: 4-10 weeks.
The application is submitted with supporting documents and disclosures for shareholders, directors, and controllers. At this stage, quality and consistency matter more than speed. Typical duration: 1-2 weeks.
AFSA review is iterative. Expect follow-up questions, clarification requests, and remediation rounds on governance, AML, technology, or financial assumptions. Typical duration: 6-20+ weeks depending on complexity.
After authorization, we support banking/EMI onboarding, final staffing, audit preparation, compliance tooling deployment, and launch controls. Banking is parallel but not guaranteed. Typical duration: 2-8+ weeks.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
Yes. Authorised digital-asset business can operate under the AIFC regime or the applicable national regime. Since 1 May 2026, the National Bank has administered national licensing and registration routes for specified digital-asset operators. Each route has its own scope and conditions. a single unrestricted nationwide regime. In practical licensing terms, most regulated crypto business models are structured through the AIFC under AFSA supervision. Outside that perimeter, the circulation of unsecured digital assets is restricted and must be assessed under the broader Kazakhstan legal framework.
This is why the correct question is not simply “Is crypto legal?” but which activity, where, and under which legal basis. Exchange, custody, OTC, token issuance, and mining do not sit in the same regulatory bucket.
Yes, subject to the applicable permission. Outside the AIFC, the National Bank licenses unsecured digital-asset exchange operators and registers digital-asset trading-platform and digital-financial-asset platform operators under the national framework introduced from 1 May 2026. way most founders mean it. If you are asking about a regulated exchange, custody provider, or similar client-facing crypto service, the main compliant route is generally the AIFC authorization path. Outside the AIFC, the legal treatment is much narrower and more restrictive.
Mining, software development, analytics, and some technology support services may exist outside the AIFC under different rules, but they are not equivalent to holding an AIFC crypto license.
For the AIFC route, the key regulator is AFSA. The Astana Financial Services Authority supervises authorizations within the Astana International Financial Centre. This is the answer relevant to most founders searching for a Kazakhstan crypto license.
Other state bodies may be relevant for mining, taxation, AML enforcement, energy, or corporate matters, but they do not replace AFSA for the main AIFC authorization route.
A realistic range is usually 3-9 months, and complex cases can take longer. Any fixed promise like “8 weeks guaranteed” should be treated cautiously.
The main variables are application quality, novelty of the business model, responsiveness to regulator questions, and whether the team already has governance, funding, and technology documentation in place.
There is no single market-wide number that fits every Kazakhstan crypto license case. Capital expectations depend on the activity scope, risk profile, and operating model. Founders should be skeptical of articles quoting one universal minimum.
A practical planning formula is:
Where monthly OPEX includes payroll, office, audit, legal, AML/KYT tooling, IT/security, and contingency. For exchange and custody models, a stronger runway often improves both regulator comfort and banking outcomes.
Yes, foreign shareholders can generally participate, subject to full transparency and fit-and-proper review. The key issues are not nationality but disclosure, source of funds, sanctions screening, and governance credibility.
You should expect to provide:
Complex offshore layering without a commercial rationale can create both regulator and bank concerns.
No, banking is not guaranteed. A license materially improves credibility, but banks and EMIs run their own risk assessments.
They usually review:
This is why RUE treats banking as a parallel workstream and not as an automatic by-product of licensing. See also our crypto business bank account support page.
The default benchmark is not zero. Kazakhstan’s general corporate income tax benchmark is 20%, while certain AIFC participants may access tax incentives for qualifying activities. The actual outcome depends on legal status, income type, and separate accounting.
In addition to income tax analysis, you should review:
For a deeper breakdown, founders should combine licensing work with Kazakhstan crypto tax planning.
No. Digital mining is a separate regulatory and economic track and should not be confused with an AIFC crypto services authorization.
Mining issues usually involve energy, infrastructure, sector-specific obligations, and tax treatment. Exchange, custody, OTC, and wallet models involve a different regulator focus: client onboarding, safeguarding, AML, governance, and technology controls.
Check the AFSA public register. That is the most reliable public verification tool for AIFC-authorized entities.
You should confirm:
Public register: publicreg.myafsa.com
The most common red flags are weak ownership disclosure, generic AML documents, no local substance, unrealistic financials, and poor technology governance.
Other frequent issues include:
These problems are usually preventable with a proper pre-application readiness review.
