The Virtual Assets Act, 2026, the two licensing tracks, and the 5 September 2026 filing deadline.
Any person who was providing virtual asset services in Pakistan on or before 5 March 2026 is a Transitional Person under Section 70 of the Virtual Assets Act, 2026. A Transitional Person must submit a No Objection Certificate application to PVARA by 5 September 2026, or cease operations.
Two things about that obligation are routinely misread. It attaches to the activity actually carried on, not to how a business describes itself in its own materials — a platform that calls itself a technology provider while matching orders is dealing in virtual assets. And it is not displaced by authorisation elsewhere: a licence from VARA in Dubai, MiCA authorisation in the European Union, or registration in any other jurisdiction has no bearing on whether a Pakistani filing is required.
Operating as a Virtual Asset Service Provider without PVARA licensing is a criminal offence under the Act. Stated penalties include fines of up to PKR 50 million, imprisonment, and seizure of assets.
The Virtual Assets Act, 2026 is Pakistan's first comprehensive legal framework for virtual assets. It did not replace an earlier licensing regime, because there was none — the position before it was an absence of dedicated authorisation rather than a different set of rules. The ordinance was promulgated in July 2025 and the Act in March 2026.
PVARA is the independent federal regulator constituted under the Act, responsible for licensing, supervision, inspection and enforcement, with AML/CFT obligations aligned to FATF standards. Its application portal is open for the Regulatory Sandbox, No Objection Certificates and VASP Licences.
PVARA operates two licensing tracks. The Regulatory Sandbox, the No Objection Certificate and the VASP Licence are three application types the portal accepts — they are not three alternative routes to authorisation, and treating them as parallel options is a common early error.
For firms testing an innovative product under supervision before seeking a licence: sandbox application, admission, controlled testing within an agreed scope, duration and customer limit, sandbox exit against defined criteria, then the licence application. This track suits a genuinely novel model where the regulatory treatment is not yet settled. It does not suit a business that already knows what it is and simply wants to trade — that firm is choosing a longer path for no benefit.
For firms incorporating a licensed entity in Pakistan, and the track every Transitional Person is on: NOC application, issuance of the NOC, registration with the Financial Monitoring Unit and other applicable regulatory compliances, incorporation of a subsidiary under the Companies Act 2017, then the VASP licence application.
Schedule I of the Act sets out eleven categories. An applicant may apply for one or more, and minimum paid-up capital is prescribed by category, so the combination selected drives the capital requirement and the supervisory expectations that follow.
| # | Category | Scope |
|---|---|---|
| 1 | Advisory Services | Advising on virtual assets, including investment advice, portfolio composition and the merits of particular virtual assets. |
| 2 | Broker-Dealer Services | Receiving and transmitting orders, and dealing in virtual assets on own account or on behalf of clients. |
| 3 | Custody Services | Safekeeping, holding or controlling virtual assets, or the means of access to them, on behalf of clients. |
| 4 | Exchange Services | Operating a platform for the exchange of virtual assets for fiat currency or for other virtual assets. |
| 5 | Lending and Borrowing Services | Facilitating the lending or borrowing of virtual assets between clients or on own account. |
| 6 | Virtual Asset Derivatives Services | Dealing in, arranging or operating a platform for derivatives referencing virtual assets. |
| 7 | Virtual Asset Management and Investment Services | Managing virtual assets or portfolios of virtual assets on a discretionary basis on behalf of clients. |
| 8 | Virtual Asset Transfer and Settlement Services | Transferring virtual assets between addresses or accounts, and providing settlement of such transfers. |
| 9 | Asset-Referenced Token Issuance Services | Issuing tokens that purport to maintain a stable value by reference to another asset, basket or right. |
| 10 | Fiat-Referenced Token Issuance Services | Issuing tokens that purport to maintain a stable value by reference to a single fiat currency. |
| 11 | Mining Related Virtual Asset Services | Providing mining, validation or related infrastructure services in respect of virtual assets. |
The application requires a detailed business plan setting out the proposed services; corporate documents including certificate of incorporation and memorandum and articles of association; details of directors, shareholders and beneficial owners; fit and proper declarations for key personnel; proof of financial capability and source of funds; a draft AML/CFT policy framework; and technology infrastructure and security documentation.
PVARA states it aims to process complete applications within 30 to 60 business days. Incomplete filings take longer, and the most common cause of delay is a business plan whose described activities do not match the licence categories selected.
The assessment applies to directors, shareholders and key personnel across five heads: character and integrity, with no criminal record for financial crimes; adequate education, experience and competence; financial soundness, with no history of bankruptcy or insolvency; no previous regulatory sanction or disqualification; and transparent disclosure of all beneficial ownership and control structures.
The fifth is where applications most often stall. Offshore holding structures assembled for tax or investor reasons frequently obscure ultimate control, and a structure that satisfies a company registry does not necessarily satisfy a regulator asking who ultimately controls the licensed entity. That question is better answered before filing than during review.
The sequence, not the processing time. The NOC is not the finish line. It is preliminary approval, and it gates everything behind it: FMU registration, then incorporation, then the licence application. A firm that plans around a 30 to 60 business day NOC window and assumes it can trade at the end of it has misread the framework.
Incorporation comes after the NOC, not before. This is counter-intuitive to anyone used to regimes where a local entity is the entry ticket. Incorporating early accelerates nothing, and it commits the applicant to a corporate structure before PVARA has seen the business plan — which is precisely the wrong order if the review raises questions about control or category selection.
Category selection is a capital decision. Because minimum paid-up capital is prescribed per category, selecting categories broadly to preserve optionality raises the capital requirement and widens the supervisory perimeter. Precision here is worth more than flexibility.
An existing licence elsewhere is not a shortcut. Recognition of a VARA, MiCA or other authorisation is not a feature of this framework. Documentation prepared for another regulator can support a Pakistani filing, but it does not substitute for one.
For a Transitional Person, the day after the deadline is not a grace period. The statutory position is that operations cease absent a filing, and continued activity becomes unlicensed operation with the criminal exposure the Act attaches to it. A business uncertain whether it falls within scope should resolve that question now rather than after the date, because the assessment of scope is itself the thing that takes time.
Any person providing virtual asset services on or before 5 March 2026 is a Transitional Person under Section 70 of the Virtual Assets Act, 2026, and must submit a No Objection Certificate application by 5 September 2026 or cease operating. The obligation attaches to the activity actually carried on, not to how the business describes itself, and not to whether it holds a licence elsewhere.
A No Objection Certificate is preliminary approval confirming PVARA has no objection to the proposed virtual asset business. It is not a licence and does not authorise trading. It is the gateway document: registration with the Financial Monitoring Unit and incorporation of a Pakistani subsidiary both sit behind it, and the VASP licence application follows only after those steps are complete.
PVARA states it aims to process complete applications within 30 to 60 business days. Incomplete filings take longer. The processing window is rarely the constraint that matters — the sequence behind the NOC, comprising Financial Monitoring Unit registration, incorporation under the Companies Act 2017 and then the licence application itself, governs when a business can actually operate.
Yes. A VASP licence applicant must be a company registered in Pakistan under the Companies Act 2017. The sequencing catches foreign applicants out: incorporation comes after the No Objection Certificate is issued, not before it, so an entity that incorporates early has not accelerated anything and may have committed to a structure before PVARA has seen the business plan.
The fit and proper assessment applies to directors, shareholders and key personnel, and tests five things: character and integrity with no financial crime record; adequate education, experience and competence; financial soundness with no history of bankruptcy or insolvency; no previous regulatory sanction or disqualification; and transparent disclosure of all beneficial ownership and control structures. The last is where offshore holding structures create difficulty.
Operating as a Virtual Asset Service Provider in Pakistan without PVARA licensing is a criminal offence under the Virtual Assets Act, 2026. Stated penalties include fines of up to PKR 50 million, imprisonment and seizure of assets. For a Transitional Person, the exposure begins the day after the 5 September 2026 deadline passes without a filing.
Schedule I of the Virtual Assets Act, 2026 sets out eleven licence categories, and an applicant may apply for one or more. Minimum paid-up capital is prescribed by category, so the combination selected determines the capital requirement. Selecting categories accurately at the outset matters more than most applicants expect, because the activity mix drives both capital and the supervisory expectations that follow.
For scope assessments, NOC preparation and PVARA licensing strategy, and for cross-border structuring where a Pakistani filing sits alongside VARA, MiCA or other regimes:
Response within 24 hours.
This page is general information on a framework that is actively developing, current as at 24 August 2026. It is not legal advice and does not create a solicitor-client or barrister-client relationship. Verify all dates and requirements against pvara.gov.pk before acting.