Skip to content
Asset Haus
Jurisdictions & Licensing

Kazakhstan Digital Asset Custody: Institutional Infrastructure Guide (2026)

Kazakhstan digital asset custody: AIFC and onshore routes, KASE-BitGo, banking law reform, and what institutional managers should verify first.

By Asset Haus ResearchPublished Updated 8 min read

On this page (5)

Kazakhstan has built one of the more developed digital asset custody frameworks in Central Asia. Banking law reform, the maturing AIFC framework, and government-backed infrastructure projects have created defined routes to institutional custody. For asset managers structuring tokenized deals with Kazakh entities or Central Asian investors, the regulatory pathway is clearer than it was, but licensing, AML, and group-structure questions still need jurisdiction-specific legal analysis before custody can be treated as settled.

Status note: this guide summarizes developments reported up to its original April 2026 publication. Capital figures, rule details, and target dates below should be confirmed against current AFSA and ARDFM publications and with qualified local counsel before they are relied on.


The Regulatory Landscape: Three Frameworks, One Direction

1. ARDFM (Onshore Kazakhstan)

In December 2025, Kazakhstan's banking law was amended to formally recognize digital financial assets. Three categories are defined: stablecoins, asset-backed tokens (including tokenized real estate and securities), and financial instruments in digital form.

The practical result: Kazakhstan-licensed banks can now provide digital asset custody under their existing banking license. No new license required for custody of the defined asset classes. The National Bank oversees stablecoins; ARDFM oversees all other DFA types.

This is significant. Many jurisdictions either restrict banks from holding digital assets or require separate licensing. Kazakhstan has taken the opposite approach: custody of the defined asset classes is within scope of a standard banking authorization.

2. AIFC (Offshore Hub)

The Astana International Financial Centre operates under English common law with its own financial regulator (AFSA). For international deals, the AIFC framework is the preferred structure.

AFSA's custody license requirements, as reported in the January 2026 update (confirm against the current AFSA rulebook):

RequirementDetail
Base capital$500,000
Liquidity≥25% of annual operating expenditure
PersonnelCEO, Finance Officer, Compliance Officer, MLRO + Deputy
Asset segregationMandatory — client assets held separately
ReconciliationAt minimum every 25 business days
AuditAnnual independent audit
Client reportingMinimum semi-annual

Institutional LPs often benchmark custodians against international standards such as IOSCO's recommendations on the custody of client assets. Ask how a given AFSA licensee meets them rather than assuming equivalence.

The AIFC pathway is well-defined. In-Principle Approval can be obtained before capital is fully deployed. A parallel ARDFM application under the new banking law provides a domestic fallback while AIFC licensing progresses.

3. Government-Backed Infrastructure

Three developments in Q1 2026 indicate the government is building institutional rails, not just passing laws:

KASE-BitGo Partnership (March 30, 2026): The Kazakhstan Stock Exchange signed a 3-year agreement with BitGo to build digital asset custody infrastructure. BitGo is the custodian of record for multiple institutional crypto funds globally. This is not a pilot — it is a production infrastructure commitment.

National Custodial Service (announced target: May 2026 — check current status): The National Bank is building a state-run custodial service on the Central Depository. This creates a public-sector custodian option alongside private sector alternatives. For regulated Kazakh entities, this provides a backstop.

State Digital Asset Fund: Kazakhstan's sovereign wealth apparatus was reported to be allocating $700M to digital assets (combined FX reserves + National Fund). Government participation as an allocator is a signal for institutional managers, not a substitute for their own diligence.


Cross-Border Structuring: The Kazakhstan x UAE x US Matrix

For deals involving multiple jurisdictions, three variables determine the structuring approach:

1. US Exposure via a US-Listed or US-Regulated Parent

Where a Kazakh custody entity sits in a group with a US-listed or US-regulated parent, counsel should map which US rules could reach the group's activities and whether US-person clients are in scope. The relevant rules depend on the registered entity: SEC Rule 15c3-3, for example, is a customer-protection rule for registered broker-dealers, while the custody rule under the Investment Advisers Act applies to registered advisers. The usual mitigation is entity separation: the custody activity sits in the locally licensed Kazakh entity, not in a US entity or subsidiary, with a formal legal opinion confirming separation before go-live.

2. UAE Positioning (ADGM/VARA)

The UAE has two custody licensing regimes: ADGM (Abu Dhabi) and VARA (Dubai). Both are functional. For deals structured through UAE entities, the positioning question is critical: is the UAE entity a custodian, or a technology vendor?

Whether a technology vendor needs a licence depends on what it actually does — in particular, whether it holds or controls client keys or assets. An entity that does provide custody needs the relevant ADGM or VARA permission. Counsel should confirm the classification for each entity in the structure.

Asset Haus acts as a technology and integration provider, not a custodian: in the structures it supports, custody sits with an appropriately licensed entity, and licensing questions are handled with qualified counsel. The digital asset custody infrastructure guide covers how to evaluate the custody layer itself.

3. AML/KYC Stack

Kazakhstan's AML framework is aligned with FATF Recommendation 15 (virtual assets). Resolution No. 934 (2025-2027) added 44 specific measures including on-chain monitoring requirements and a national high-risk crypto wallet registry (targeted by end of 2026).

For any digital asset custody operation, the minimum AML stack:

  • KYC and identity verification provider
  • On-chain analytics (Chainalysis, Elliptic, or Crystal)
  • Travel Rule compliance for transfers >$1,000
  • Real-time wallet screening against sanctions lists
  • Integration with Kazakhstan FIU (Financial Monitoring Committee) reporting

This stack cannot be phased in. Regulators expect it from day one.


Risk Assessment

RiskLevelMitigation
Regulatory changeMEDIUMTrack ARDFM and AFSA rule changes; keep compliance rules configurable rather than hard-coded
AIFC license timelineMEDIUMDual-track ARDFM + AIFC; In-Principle Approval as interim
US regulatory reach via a US-listed parent (where applicable)MEDIUMEntity-separation legal opinion; US-person scoping
AML gap at launchMEDIUMKYC provider and on-chain analytics deployed pre-launch, not post
Competition (KASE-BitGo, national custodian)MEDIUMPosition as complementary to public infrastructure; differentiate on service and integration
Data localizationLOWOn-premise or Kazakhstan-hosted private cloud deployment

Overall: MEDIUM risk. The regulatory direction has been supportive. The main risk factors are execution (licensing timelines, compliance build), not a fundamental regulatory barrier — subject to confirming the current rules at the time of structuring.


What This Means for Deal Structuring

The custody question is clearer, not closed. Asset managers evaluating Kazakhstan exposure now have defined licensing routes to assess, but custody still needs entity-specific legal analysis, a licensing timeline, and an operational build before it can be treated as settled.

The practical sequencing for a tokenized deal with Kazakh entities:

  1. Determine issuance entity: AIFC or ARDFM jurisdiction
  2. Confirm parent company exposure: does a US-listed parent create SEC firewall requirements?
  3. Map AML stack: which chain analytics provider, what FATF travel rule implementation
  4. License track: AIFC In-Principle Approval timeline vs. the ARDFM banking-law route for already-licensed banks — confirm current processing times with AFSA, ARDFM, and local counsel
  5. Architecture: on-premise vs. Kazakhstan-hosted private cloud based on data localization requirements

All five variables can be scoped in a pre-deal regulatory memo prepared with qualified local counsel — the kind of coordination covered by a legal setup engagement.


Conclusion

Kazakhstan's Q4 2025 — Q1 2026 regulatory developments represent a structural shift, not an incremental update. A jurisdiction that was opaque on digital asset custody 18 months ago now has:

  • Banking law explicitly authorizing DFA custody
  • An AIFC framework with defined custody licensing requirements
  • Stock exchange-level institutional custody infrastructure (KASE-BitGo)
  • Reported government capital allocated to the asset class ($700M)

Sponsors evaluating this corridor should confirm the current status of each item above with AFSA, ARDFM, and local counsel before relying on it. Examples of how custody and registry decisions play out in other jurisdictions are in our case studies.


Asset Haus provides tokenization infrastructure for private capital markets: platform deployment, legal setup coordination with qualified counsel, compliance architecture, and registry and transfer workflows. Asset Haus is not a custodian, bank, broker-dealer, or law firm; custody and other regulated activities sit with appropriately licensed entities. This brief is for informational purposes. It does not constitute legal or investment advice. Formal legal opinions should be obtained from licensed counsel in each relevant jurisdiction.

Tags

  • regulatory
  • custody
  • Kazakhstan
  • AIFC
  • market-intelligence
  • Central Asia
  • tokenization