Kazakhstan Digital Asset Custody: Institutional Infrastructure Guide (2026)

Kazakhstan has become the most sophisticated digital asset custody jurisdiction in Central Asia — ahead of most EU member states in regulatory clarity. A convergence of banking law reform, AIFC framework maturation, and government-backed infrastructure investments has created a functioning institutional custody pathway. For asset managers structuring tokenized deals with Kazakh entities or Central Asian investors, the regulatory barrier has largely been removed. Execution risk remains, but it is manageable.

---

The Regulatory Landscape: Three Frameworks, One Direction

1. ARDFM (Onshore Kazakhstan)

In December 2025, Kazakhstan's banking law was amended to formally recognize digital financial assets. Three categories are defined: stablecoins, asset-backed tokens (including tokenized real estate and securities), and financial instruments in digital form.

The practical result: Kazakhstan-licensed banks can now provide digital asset custody under their existing banking license. No new license required for custody of the defined asset classes. The National Bank oversees stablecoins; ARDFM oversees all other DFA types.

This is significant. Most jurisdictions either prohibit banks from holding digital assets or require separate licensing. Kazakhstan has done the opposite: custody is explicitly within scope of a standard banking authorization.

2. AIFC (Offshore Hub)

The Astana International Financial Centre operates under English common law with its own financial regulator (AFSA). For international deals, the AIFC framework is the preferred structure.

AFSA's custody license requirements (January 2026 update):

Requirement	Detail
Base capital	$500,000
Liquidity	≥25% of annual operating expenditure
Personnel	CEO, Finance Officer, Compliance Officer, MLRO + Deputy
Asset segregation	Mandatory — client assets held separately
Reconciliation	At minimum every 25 business days
Audit	Annual independent audit
Client reporting	Minimum semi-annual

AFSA is one of a small number of jurisdictions globally that has fully implemented IOSCO's custody recommendations. This matters for institutional LPs who require custodians to meet specific international standards.

The AIFC pathway is well-defined. In-Principle Approval can be obtained before capital is fully deployed. A parallel ARDFM application under the new banking law provides a domestic fallback while AIFC licensing progresses.

3. Government-Backed Infrastructure

Three developments in Q1 2026 confirm the government is building institutional rails, not just passing laws:

KASE-BitGo Partnership (March 30, 2026): The Kazakhstan Stock Exchange signed a 3-year agreement with BitGo to build digital asset custody infrastructure. BitGo is the custodian of record for multiple institutional crypto funds globally. This is not a pilot — it is a production infrastructure commitment.

National Custodial Service (Target: May 2026): The National Bank is building a state-run custodial service on the Central Depository. This creates a public-sector custodian option alongside private sector alternatives. For regulated Kazakh entities, this provides a backstop.

State Digital Asset Fund: Kazakhstan's sovereign wealth apparatus is allocating $700M to digital assets (combined FX reserves + National Fund). Government as LP validates the asset class for institutional managers.

---

Cross-Border Structuring: The Kazakhstan x UAE x US Matrix

For deals involving multiple jurisdictions, three variables determine the structuring approach:

1. US Exposure via NASDAQ-Listed Parent

Freedom Holding Corp (FRHC) is NASDAQ-listed with a Kazakhstan banking subsidiary. When a Kazakh entity has a US-listed parent, SEC custody rules (Rule 15c3-3) potentially apply to any US-person clients. The mitigation is entity separation: the custody entity should be Freedom Bank KZ (Kazakh-regulated), not a US entity or subsidiary. A formal legal opinion confirming entity separation is essential before go-live.

2. UAE Positioning (ADGM/VARA)

The UAE has two custody licensing regimes: ADGM (Abu Dhabi) and VARA (Dubai). Both are functional. For deals structured through UAE entities, the positioning question is critical: is the UAE entity a custodian, or a technology vendor?

If technology vendor: minimal licensing requirements. If custodian: full ADGM/VARA licensing required.

AssetHaus's positioning in these deals is technology and integration vendor. The client entity holds the custody license. This distinction eliminates licensing complexity on the AssetHaus side while supporting client licensing processes.

3. AML/KYC Stack

Kazakhstan's AML framework is aligned with FATF Recommendation 15 (virtual assets). Resolution No. 934 (2025-2027) added 44 specific measures including on-chain monitoring requirements and a national high-risk crypto wallet registry (targeted by end of 2026).

For any digital asset custody operation, the minimum AML stack:

• KYC provider (e.g., Sumsub — already deployed by Freedom Holding)
• On-chain analytics (Chainalysis, Elliptic, or Crystal)
• Travel Rule compliance for transfers >$1,000
• Real-time wallet screening against sanctions lists
• Integration with Kazakhstan FIU (Financial Monitoring Committee) reporting

This stack cannot be phased in. Regulators expect it from day one.

---

Risk Assessment

Risk	Level	Mitigation
Regulatory reversal	LOW	Tokayev personal commitment; NASDAQ-listed parent incentive alignment
AIFC license timeline	MEDIUM	Dual-track ARDFM + AIFC; In-Principle Approval as interim
SEC scrutiny via FRHC	MEDIUM	Entity separation legal opinion; US person exclusion
AML gap at launch	MEDIUM	Sumsub + Chainalysis deployed pre-launch, not post
Competition (KASE-BitGo, national custodian)	MEDIUM	First-mover for private-sector institutional custody; complementary to public infrastructure
Data localization	LOW	On-premise or Kazakhstan-hosted private cloud deployment

Overall: MEDIUM risk. The regulatory environment is the strongest it has been. Primary risk factors are execution (licensing timelines, compliance build) not fundamental regulatory barriers.

---

What This Means for Deal Structuring

The custody question is answered. Asset managers evaluating Kazakhstan exposure can now structure deals with custody as a solved problem rather than an open regulatory question.

The practical sequencing for a $5M-$25M tokenized deal with Kazakh entities:

1. Determine issuance entity: AIFC or ARDFM jurisdiction
2. Confirm parent company exposure: does a US-listed parent create SEC firewall requirements?
3. Map AML stack: which chain analytics provider, what FATF travel rule implementation
4. License track: AIFC In-Principle Approval timeline (typically 3-6 months) vs. ARDFM banking law provision (immediate, for licensed banks)
5. Architecture: on-premise vs. Kazakhstan-hosted private cloud based on data localization requirements

All five variables can be packaged into a pre-deal regulatory memo before engagement begins. The work is defined; it is not exploratory.

---

Conclusion

Kazakhstan's Q4 2025 — Q1 2026 regulatory developments represent a structural shift, not an incremental update. A jurisdiction that was opaque on digital asset custody 18 months ago now has:

• Banking law explicitly authorizing DFA custody
• AIFC framework aligned with IOSCO international standards
• Stock exchange-level institutional custody infrastructure (KASE-BitGo)
• Government capital committed to the asset class ($700M sovereign allocation)

The window for structuring first-mover deals in this corridor — before the infrastructure is commoditized — is 12-18 months.

---

AssetHaus Software DAO LLC provides full-service tokenization structuring for mid-market assets. This brief is for informational purposes. It does not constitute legal or investment advice. Formal legal opinions should be obtained from licensed counsel in each relevant jurisdiction.