Not publishable as-is. 1 of 5 publication_gate checks fail. The renderer displays the gate rather than suppressing it. Legal review and sub-brief approval are informational and are not part of this test.
Sri Lanka
LKschema crypto-v2.0.0trajectory: not yet assessedunregulated gapoverlaps: FIM
Last updated · 8 categories · 14 sourced
findings · 11 sources in the cumulative register
8Categoriesbaseline.
14Findings.claims[]
5Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix(sums to 8 rendered categories; click to filter)
No categories moved this cycle.
Jurisdiction lead brief
Lead Signal
Sri Lanka's crypto regulatory posture this cycle is defined by a binding negative baseline paired with an emerging, pre-legislative policy shift. No virtual-asset service provider is currently licensed, registered or supervised anywhere in the country, and the Central Bank of Sri Lanka has issued repeated public warnings against cryptocurrency investment; at the same time, the Ministry of Digital Economy is developing a virtual-asset regulatory framework intended to license and supervise VASPs, which was presented to the country's apex AML body in February 2026. This combination -- an in-force absence of licensing alongside an announced-but-undrafted future framework -- is the defining structural fact for any operator or investor assessing Sri Lanka's crypto market this cycle.
Other Developments
A documented large-scale fraud case underlines the consumer-protection gap. A Sri Lankan crypto Ponzi scheme defrauded thousands of victims of over Rs. 500 million over roughly two years, with victims staging protests demanding justice. This sits alongside the Central Bank's repeated public warnings about cryptocurrency investment risk and its confirmation that it has not authorised any crypto-related businesses, leaving investors without regulatory safeguards; the fraud case is a concrete illustration of the exposure that absence of licensing and supervision creates in practice. The case also illustrates a recurring typology in unregulated crypto markets globally: absent licensing creates an information vacuum that fraudulent schemes exploit precisely because there is no supervised venue for legitimate crypto investment activity to channel demand toward instead.
The Foreign Exchange Act's card-based restriction remains the binding cross-border control. The Foreign Exchange Act prohibits the use of debit and credit cards for cryptocurrency transactions, and financial institutions are barred from processing crypto-related payments. This is a binding, in-force restriction under a primary statute, though a primary Central Bank citation for the specific administrative direction implementing it is still awaited in this cycle's evidence base.
Cross-Monitor Connections
Sri Lanka's crypto AML/CFT exposure is tracked as a subscribed slot supplied by the financial-integrity monitor (its D7 and D5 typology domains); this consumer performs no first-party AML/CFT analysis on crypto activity and instead renders that content as supplied. The proposed virtual-asset regulatory framework referenced above is the same underlying development the financial-integrity monitor reads through its D5 lens; readers seeking the AML/CFT-specific analysis of Sri Lanka's proposed VASP framework should consult that monitor's D5 sub-brief rather than expecting it here.
Outlook
The framework's progression from a February 2026 proposal to an actual drafting stage is the single most consequential item to watch, and the open allocation question -- which authority will hold VASP licensing power -- will determine much of what follows. Given the documented Rs. 500 million-plus fraud case, consumer-protection developments are the second item to track. The Foreign Exchange Act's card-based restriction is unlikely to change materially absent a broader liberalisation of the cross-border crypto-payments regime, which has not been signalled this cycle.
8 of 8 categories
Signal
Density
Selections OR within a group, AND across groups. Press / to search.
Sri Lanka has no dedicated crypto-asset licensing statute. CBSL has repeatedly stated it has not licensed or authorised any entity to operate cryptocurrency exchanges, ICOs, mining operations, deposit-taking or custody services related to cryptocurrency, and no licensing pathway currently exists for VASPs/exchanges. A narrow, binding prohibition exists on using bank-issued payment cards for crypto-related payments under Foreign Exchange Act Directions.
Standing sub-brief202 words · last cycle 2026-08-21
Crypto Licensing
No virtual-asset service provider is currently licensed, registered or supervised in Sri Lanka. The Central Bank of Sri Lanka has issued repeated public warnings against cryptocurrency investment, and this negative finding is carried at High confidence from a Tier-3 source. Against this binding absence, the Ministry of Digital Economy is developing a virtual-asset regulatory framework intended to license and supervise VASPs and to introduce travel-rule-equivalent requirements; the proposal was presented to the country's apex AML body in February 2026, also at High confidence from a Tier-2 source, though it remains pre-legislative -- distinct from the separately progressing Cyber Security Bill, which the Deputy Minister of Digital Economy has clarified addresses network and technical security rather than data-protection or virtual-asset financial-compliance questions. Sri Lanka's crypto-licensing status is therefore best characterised as an emerging but not yet operative regime: a clear negative baseline paired with a credible but undrafted forward signal.
Outlook
The critical open question is which authority -- the Central Bank, a securities regulator, or a new dedicated body -- will hold VASP licensing power once the proposed framework moves to drafting; this allocation decision is not yet established in this cycle's evidence and materially affects the practical licensing timeline.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and findings (3)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — CBSL has not given any licence or authorization to any entity or company to operate cryptocurrency exchanges, ICOs, mining operations, deposit-taking or custody services related to cryptocurrency.retrieved M5bindingin force
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — Electronic Fund Transfer Cards (EFTCs) such as debit cards and credit cards are not permitted to be used for payments related to cryptocurrency transactions, under Directions No. 03 of 2021 issued pursuant to the Foreign Exchange Act, No. 12 of 2017.retrieved M4bindingin force
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — No comprehensive crypto-asset licensing statute exists in Sri Lanka; a broader payments-and-settlements legislative modernisation has been discussed without yet producing a crypto-specific licensing framework.retrieved M5non-bindingour coverage gap, expected to resolve on a re-run
CBSL uses the umbrella terms 'virtual currencies' and 'cryptocurrency' without a statutory sub-classification distinguishing security tokens, e-money tokens, asset-referenced tokens, utility tokens, stablecoins or NFTs. There is no securities-law or banking-law taxonomy applied to crypto-assets in Sri Lanka.
Absence reason not determinableNo sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.
no periodic updates on record for this sub-brief
Sources and findings (1)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — CBSL refers to cryptocurrencies broadly as 'virtual currencies' that are unregulated investment instruments not recognized as an asset-class in Sri Lanka, without differentiating token types.retrieved M4non-binding
CBSL notices reference mining and ICO activity only to state that no such operations have been authorised; there is no specific regulatory treatment for staking, DeFi lending, DEX activity, node operation, validator activity, or tokenization in Sri Lanka.
Absence reason not determinableNo sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.
no periodic updates on record for this sub-brief
Sources and findings (2)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — CBSL has not authorized any Initial Coin Offerings (ICOs) or mining operations involving virtual currencies in Sri Lanka.retrieved M3bindingin force
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — No CBSL or statutory framework addresses staking, DeFi lending, DEX operation, node operation, validator activity, or tokenization in Sri Lanka.retrieved M3non-bindinga fact about the regime
No stablecoin-specific legal framework exists in Sri Lanka. There is no issuance authorisation regime, reserve requirement, redemption-right guarantee, disclosure regime, or systemic-designation mechanism for stablecoins under CBSL or any other Sri Lankan authority.
Absence reason not determinableNo sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.
no periodic updates on record for this sub-brief
Sources and findings (1)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — No stablecoin issuance authorisation, reserve requirement, redemption right, disclosure, or systemic designation regime exists in Sri Lanka.retrieved M4non-bindinga fact about the regime
CBSL has issued repeated public warnings (2018, 2021, 2022, 2023, 2024) disclosing financial, operational, legal and security risks of crypto investment, and urging promoters of crypto investment schemes to refrain from such activity. There is no statutory custody-segregation, complaint-handling, or suitability/appropriateness regime specific to crypto-assets; the warnings function as risk-disclosure/marketing-caution advisories rather than binding consumer-protection rules.
Standing sub-brief164 words · last cycle 2026-08-21
Consumer Protection
The Central Bank of Sri Lanka has issued multiple public warnings about cryptocurrency investment risk and has not authorised any crypto-related businesses, leaving investors without regulatory safeguards; both facts are carried at High confidence. Concretely illustrating the resulting exposure, a Sri Lankan crypto Ponzi scheme defrauded thousands of victims of over Rs. 500 million over roughly two years, with victims staging protests demanding justice, also at High confidence from a named Tier-2 source. Together these findings describe a consumer-protection environment with no crypto-specific protective instrument at all: the only protective measure evidenced this cycle is the Central Bank's repeated warning-issuance practice, which is advisory rather than a binding safeguard, and provides no restitution mechanism for victims of schemes such as the one documented here.
Outlook
Whether any consumer-protection provision is incorporated into the proposed virtual-asset regulatory framework as it moves toward drafting is the key item to watch; absent that, victims of crypto-related fraud in Sri Lanka have no crypto-specific regulatory recourse.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and findings (3)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — CBSL has highlighted, through press releases issued in 2018, 2021, 2022, 2023 and 2024, the significant financial, operational, legal and security-related risks and customer protection concerns posed to users of cryptocurrency.retrieved M4non-binding
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — CBSL urges those engaged in promoting and facilitating the promotion of investing and trading in cryptocurrency to refrain from such activities considering the wide range of risks to the public.retrieved M3non-binding
T1 · Financial Intelligence Unit, Central Bank of Sri LankaFinancial Intelligence Unit, Central Bank of Sri Lanka — No statutory custody-segregation, complaint-handling, or suitability/appropriateness regime exists specific to crypto-asset service providers in Sri Lanka.retrieved M3non-bindinga fact about the regime
No crypto-specific tax guidance from Sri Lanka's Inland Revenue Department (IRD) was identified. General Inland Revenue Act provisions may in principle apply to crypto-related income or gains, but no confirmed primary-source ruling, circular, or IRD guidance specific to cryptocurrency taxation (capital gains, income tax, VAT/GST, withholding, or reporting obligations) could be located.
Absence reason not determinableNo sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.
no periodic updates on record for this sub-brief
Sources and findings (1)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — No IRD-issued guidance specific to the income-tax or capital-gains treatment of cryptocurrency transactions in Sri Lanka has been identified.retrieved M4non-bindinga fact about the jurisdiction
Cross-border crypto flows are constrained indirectly through Foreign Exchange Act mechanisms rather than a crypto-specific cross-border regime. Purchasing virtual currencies from abroad is treated by CBSL as a violation of Foreign Exchange Regulations because VCs are not a permitted investment category, and card-based foreign-currency payments for VC transactions are barred. No dedicated crypto travel-rule, sanctions-nexus, or reporting-threshold regime exists.
Standing sub-brief153 words · last cycle 2026-08-21
Cross-Border Transfer
The Foreign Exchange Act prohibits the use of debit and credit cards for cryptocurrency transactions, and financial institutions are barred from processing crypto-related payments. This is a High-confidence, binding, in-force restriction under a primary statute, though this cycle's evidence base still awaits a primary Central Bank citation specifically implementing the restriction at the administrative level. The practical effect is that card-rail access for crypto purchases and cross-border crypto-linked payments is closed off through the regulated banking and card system, pushing any crypto-related cross-border activity toward channels outside the formally supervised payments perimeter.
Outlook
Corroborating this restriction against a primary Central Bank circular or directive, rather than relying on secondary reporting, is the priority action for this domain. Whether the restriction is revisited alongside the proposed virtual-asset regulatory framework, or maintained as a standing control independent of any future VASP licensing regime, is the item to watch going into the next cycle.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and findings (3)
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — Purchasing virtual currencies from abroad would lead to a violation of Foreign Exchange Regulations, as VCs are not identified as a permitted investment category under the Foreign Exchange Act No. 12 of 2017.retrieved M4bindingin force
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — Electronic Fund Transfer Cards (debit/credit cards) are not permitted to be used for payments in foreign currency related to virtual currency transactions, under Foreign Exchange Regulations in Sri Lanka.retrieved M4bindingin force
T1 · Central Bank of Sri LankaCentral Bank of Sri Lanka — No crypto-specific cross-border travel-rule or sanctions-screening obligation for virtual-asset transfers has been enacted in Sri Lanka.retrieved M3non-bindinga fact about the regime
AML/CFT content for crypto is subscribed from the FIM aml_ctf module per fleet doctrine and is not duplicated here. For disambiguation context only: CBSL's Financial Intelligence Unit has issued crypto-scam public-awareness material, and CBSL's 2026 Policy Agenda notes ongoing amendments to core AML/CFT/CPF laws ahead of Sri Lanka's third FATF Mutual Evaluation. No crypto-specific VASP AML obligations (travel rule, sanctions screening) have been identified as enacted.
Absence reason not determinableNo sub-brief exists and the JID records no gap or review marker explaining why. The renderer will not invent a reason.
no periodic updates on record for this sub-brief
No categories match.
Filters combine as OR inside a group and AND across
groups.
Publication gate
Blocking. 1 failing check(s).
schema_valid
FAIL
min_quoted_text_present
waived — floor 0%
egress_verified
pass
every_practical_object_has_source_id
n/a — no subject in this jurisdiction
source_tier_integrity_ok
pass
jurisdiction_source_floor_met
pass
tier_a_b_national_primary_pct
100.0
aggregator_only_jurisdiction_count
0
manual_override
Editorial metadata
Provenance only. Nothing below gates publication or affects the render.
Editorial metadata for Sri Lanka
Field
Value
trust.lawyer_review.status
never_reviewed
trust.lawyer_review.reviewer
no reviewer on record
trust.content_source
ai_generated
Provenance and declared absence
Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.
Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.
Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.