Serbia

The regime is backed by a criminal-law enforcement mechanism rather than purely administrative sanction: the NBS has issued a public warning notice reiterating that providing virtual currency services without a prior NBS licence is prohibited and constitutes a criminal offence under the Criminal Code. That same warning notice establishes a distinct market-entry constraint for foreign firms -- a company intending to serve the Serbian market must first establish a Serbian entity and obtain an NBS licence before providing virtual currency services through a branch or representative office. This functions as a de facto localisation requirement rather than a passporting or equivalence mechanism, and it is cross-referenced within the cross-border transfer module of this record as the same underlying restriction viewed from a market-access angle.

One further exclusion from the licensing perimeter concerns mining: the statute is understood to exclude acquisition of digital assets by mining from its licensing scope, though this finding currently rests on secondary reporting (CoinDesk) rather than a directly verified primary-statute citation, and is therefore held at Probable rather than Confirmed confidence pending closer textual corroboration.

Supervisory practice took time to mature operationally. An NBS report covering 2021 noted that the first virtual-currency service-provider licence applications had been filed by year-end but that no licence had yet been issued -- a historical, non-normative marker of the regime's early ramp-up rather than an ongoing constraint, and treated accordingly without a forced regulatory-stage classification.

A metadata inconsistency was noted but not treated as substantive: run-level source-tier counts recorded zero Tier-1/Tier-2/Tier-3 sources despite the source register independently confirming correct Tier-1/Tier-2 tiering for the NBS and Securities Commission pages actually cited by Confirmed claims in this module. This is understood as a research-pipeline counting artefact rather than a genuine sourcing gap, and no confidence downgrade was applied on that basis.

Outlook

The licensing architecture itself shows no signs of near-term structural change; it is the most settled and best-evidenced module in this baseline. The principal open items are evidentiary rather than substantive: independent verification of the mining exclusion against primary statute text, and continued monitoring of licensing throughput now that the regime has moved past its initial 2021 ramp-up period. The foreign-provider restriction remains a durable feature of the regime and a recurring reference point wherever cross-border market access to Serbian users is assessed.

This taxonomy is well-anchored in primary statute text, but it was built without reference to the MiCA-style asset-referenced-token/e-money-token/utility-token distinctions that have since become the comparative benchmark for EU and EU-candidate jurisdictions. As a result, categories that map cleanly onto MiCA terminology -- NFTs in particular, and stablecoin-analog instruments more generally -- have no dedicated statutory treatment and were not addressed by any secondary NBS or Securities Commission guidance identified this cycle.

Outlook

The core three-way taxonomy is stable and enforced, and no legislative change to it is indicated in this cycle's evidence. The open question going forward is whether Serbia's EU-candidacy trajectory will drive a future alignment exercise bringing NFT and stablecoin-analog classification into a MiCA-comparable framework, or whether these categories will continue to be handled, if at all, through the existing hybrid-asset joint-competence mechanism rather than new bespoke categories.

No statutory provisions addressing staking, staking-as-a-service, DeFi lending arrangements, decentralised exchange operation, or validator/node-operator activity were identified. This is treated as a structural absence characteristic of the statute's vintage rather than a research failure in this pass, and is a known under-indexing vector for jurisdictions where no regulator has yet spoken to newer on-chain activity categories.

Outlook

Absent any indication of imminent secondary legislation addressing staking, DeFi, or validator activity, this module's coverage is likely to remain confined to tokenization and mining for the foreseeable near term. Any expansion would most plausibly emerge alongside broader EU-candidacy alignment work referenced elsewhere in this cycle's research, rather than as a standalone domestic initiative.

No reserve-asset requirement analogous to MiCA's ART/EMT reserve rules was identified for stablecoin-type tokens, nor any express redemption-right provision for token or virtual-currency holders comparable to MiCA's Title IV, nor any systemic-stablecoin designation regime. These are treated as structural absences to monitor rather than confirmed negative findings requiring further immediate research, since Serbia's regime was not designed with a MiCA-equivalent stablecoin taxonomy in mind.

Outlook

This module carries the most significant structural gap in the composed record: stablecoin-specific oversight in Serbia is, in substance, general token oversight. Any material change here would most likely follow from Serbia's broader EU-candidacy alignment trajectory rather than a standalone stablecoin-specific legislative initiative, and this module should be watched for developments tied to that wider alignment process rather than treated as an area of imminent domestic reform.

On the custody side, the NBS requires prescribed record-keeping by virtual-currency service providers holding user money and/or virtual currencies, under a dedicated Decision on the Contents and Form of Records Kept by such providers (RS Official Gazette No 49/2021) -- a Tier-1-sourced obligation. Separately, and outside any binding legal obligation, the NBS maintains a public advisory practice discouraging citizens from investing in virtual currencies or engaging in virtual-currency transactions, citing high value fluctuations and the absence of any central-bank or public-authority guarantee; this is treated as non-binding supervisory communication rather than a legal requirement.

A more contested question concerns complaint-handling. Secondary sources describe mandatory complaint-handling procedures for digital-asset service providers under the Law on Digital Assets, which would represent a materially different picture from a simple absence-of-provisions framing. All cited evidence for this point is Tier-4, and primary statute-text confirmation is required before it can be asserted as a positive finding; this item remains an open research gap rather than a composed claim in this cycle. No dedicated statutory suitability or appropriateness-assessment obligation for digital-asset advisory or portfolio-management services was identified either, and this too remains an open item for further research.

Outlook

The disclosure and custody strands of consumer protection are well-anchored and unlikely to see near-term change. The principal open item is the complaint-handling question: resolving whether the Law on Digital Assets does in fact impose a mandatory complaint-handling obligation, as several secondary sources suggest, would meaningfully change this module's completeness and is the most consequential single verification task carried forward from this cycle.

No primary Ministry of Finance or Tax Administration source addressing capital-gains taxation, income-tax characterisation of mining or staking rewards, VAT/GST treatment, or withholding-tax treatment of digital-asset transactions was reached in this pass. This sits alongside consistent, but Tier-4-only, secondary reporting describing a flat capital-gains rate on digital-asset disposal profit under the Personal Income Tax Law with reinvestment relief, separate secondary reporting describing mining-reward income-tax treatment with a disagreement between two differing rates depending on the source consulted, and a single secondary source describing VAT-exemption for virtual-currency transactions with a possible carve-out for certain utility tokens. None of these points meet the primary-source bar required to be asserted as confirmed findings in this cycle, and all remain open research gaps pending Tier-1 confirmation.

Outlook

Tax treatment is the module most in need of primary-source research before this record's tax picture can be considered settled. The capital-gains rate question in particular has been escalated for human primary-source verification given how consistently it is reported across multiple secondary sources, and its resolution -- together with clarification of mining/staking income characterisation and VAT treatment -- is the leading candidate for material change in a future cycle.

Beyond this restriction, no dedicated statutory travel-rule mechanism specific to digital-asset transfers -- distinct from the general AML/CFT framework owned by the financial-integrity monitor's AML/CFT module -- was identified under the Law on Digital Assets. Similarly, no dedicated cross-border digital-asset transfer reporting threshold distinct from the general virtual-currency holder reporting obligation under NBS Decision 49/2021 was identified. Both gaps are treated as structurally thin by design in this module across the broader jurisdictional estate, rather than as evidence of an incomplete research pass.

Outlook

The foreign-provider market-entry restriction is a stable and durable feature of Serbia's regime and is unlikely to change absent a broader shift toward passporting arrangements, which would most plausibly arise only in connection with deeper EU-candidacy alignment. Any substantive travel-rule or cross-border-reporting development specific to digital assets is more likely to surface first through the financial-integrity monitor's AML/CFT coverage than through this module.