Oman Crypto Licence: FSA VASP Registration and the Draft VARF

Why Look at Oman for Crypto Now?

Oman is an early-stage virtual-asset jurisdiction, not a settled one. The honest case for engaging now is the chance to stage entry against a framework that is coming rather than one that has arrived. A live, AML-led FSA registration already exists, the tax base is light, and demand for an Oman-specific authorisation is low and competition thin, so a well-prepared operator can be early. Candour is the trade-off: the full licensing rules, capital, and fees are not yet published, and banking is hard.^[2]

Honest Differentiator: A Regime in Transition, Not a Finished Product

What is actually live (the AML/CFT registration) and what is merely announced (the full VARF licensing regime) are easy to conflate, and so is the regulator name after the 2024 rename. Precision is the value here: the live instrument, the draft instrument, the regulator split, and the points where a figure is genuinely unknowable because the rule has not been written.

An operator that understands which gate is open today, and which is not, can position ahead of a market that is still being defined.

A Light Tax Base and No Crypto-Specific Tax

Oman applies a 15% headline corporate income tax, with a 3% rate for qualifying small enterprises, and 5% VAT; it has no personal income tax until 1 January 2028, so individual crypto gains are currently untaxed.^[6][20] There is no crypto-specific tax legislation: a virtual-asset business is taxed under the general corporate income tax and VAT rules. This is a more conventional tax position than a zero-tax offshore centre, but it pairs with onshore Gulf credibility rather than offshore reputational drag. Taxation below sets out the full detail, including the Pillar Two top-up tax for large groups.

Mining Build-Out Signals Sovereign Commitment

Separately from VASP licensing, Oman has invested heavily in crypto mining and data-centre capacity in the Salalah Free Zone, with combined facility investment reported above USD 700 million, and on 17 June 2026 launched a national mining pool, Omanhash.om.^[12] That state-backed infrastructure signals a government that views the sector as strategic, which is part of the read-through to an eventual VARF enactment.

Sovereign infrastructure is not, however, a VASP authorisation, and the two should never be conflated; the distinction is drawn out under Mining vs VASP Licensing below.

Where Oman Sits Against Its Gulf Peers

Realistically the comparison is with the UAE, which is several years ahead with multiple live regulators, and against the EU through Cyprus for operators that need a MiCA passport. Oman is not yet competitive with the UAE for a firm that needs a full licence today. It is competitive as an early-mover position for an operator that wants an onshore Gulf footing, a clean FATF standing, and the optionality of being registered before the full framework lands. How Oman Compares sets the three side by side in a comparison table.

Is Crypto Legal in Oman?

Crypto in Oman sits in a regulated grey area: it is neither banned nor fully embraced. It is not legal tender and not protected by Omani banking law, and the Central Bank of Oman has cautioned that holders act at their own risk. Providing virtual-asset services is permitted, provided the firm registers with the FSA and meets the AML/CFT requirements. The position is permissive-but-conditional rather than prohibitionist.

Issued in 2020 and reiterated since, a Central Bank of Oman cautionary notice states that cryptocurrencies are not legal tender, are not protected under the Banking Law (Royal Decree 114/2000), and that no entity is licensed to trade crypto, so users transact at their own risk.^[7] That notice has not been repealed by the later FSA registration regime; the two coexist. The CBO statement governs the monetary and consumer-protection angle, while the FSA registration governs who may provide virtual-asset services as a business.

Reading the FSA registration as overriding the CBO caution would be a mistake: a registered VASP still cannot present crypto as legal tender or rely on banking-law protection for crypto holdings.

Regulatory Transition: From the CMA to the FSA

Of everything about Oman’s virtual-asset regime, the single most important, and most commonly mishandled, fact is the regulator rename. The Capital Market Authority (CMA) no longer exists. Under Royal Decree 20/2024, in force on 25 March 2024, the CMA was abolished and the Financial Services Authority (FSA) took over its functions in full. Every legal reference to the CMA now reads FSA.

What the Rename Changed, and What It Did Not

Institutionally the rename was a reorganisation, not a reset of the crypto rules. The FSA inherited the CMA’s mandate over capital markets, insurance, and the accounting and auditing profession, together with the virtual-asset work the CMA had begun.^[13] Crucially, the interim VASP registration that the CMA introduced in 2023 under Decision E/35/2023 carried over intact and is now administered by the FSA. First announced under the CMA in early 2023, the forthcoming VARF likewise continues as an FSA workstream.

So the substantive position, a live AML registration plus a draft full framework, is exactly what it was; only the name on the door changed.

Two Instruments, Two Different Statuses

The transition that matters for an operator is not really the CMA-to-FSA rename; it is the gap between the two virtual-asset instruments:

• Live now: the interim VASP registration. FSA Decision No. E/35/2023, issued in mid-2023, imposes mandatory registration and AML/CFT obligations on virtual-asset service providers. This is operational. Article 8 sets a 30-day period after the required information is complete; expiry without approval is deemed rejection.^[2]
• Draft: the full Virtual Assets Regulatory Framework (VARF). Announced in February 2023, consulted on between 27 July and 17 August 2023, and intended to license every VASP category with a full supervisory and market-abuse regime. As of late 2024 it remained under review and unenacted, and an independent check in mid-2026 found no final regulation, no Official Gazette publication, and no 2026 FSA decision enacting full VASP licensing.^[2][16]

Who Regulates Virtual Assets in Oman

Three bodies share the virtual-asset perimeter: the FSA leads on virtual assets and securities, the Central Bank of Oman covers payments and e-money, and the National Centre for Financial Information is the financial intelligence unit. Getting the right regulator for a given token or activity is the first analytical step, because a payment token, a security token, and a generic virtual asset land in different places.

The FSA and CBO Split

Boundaries between the two regulators turn on what the token does. The FSA regulates virtual assets and securities; the CBO retains payments, e-money, and stored-value facilities. A token that functions as e-money or a payment instrument can fall under the CBO’s National Payment Systems Law (Royal Decree 8/2018 and its Executive Regulation), while a token that is a security falls under the Securities Law (Royal Decree 46/2022) and the FSA’s capital-market rules.^[15] Those rules now include the Executive Regulation of the Securities Law, issued under FSA Decision E/11/2026 with a transitional period that began on 27 July 2026, which also lets the FSA license, through its regulatory sandbox, fintech activities involving innovative instruments that no specific legislation yet governs; the FSA’s announcements of it do not mention virtual assets or the VARF.^[18]

A dual-classification analysis is often needed: the same product can carry features that engage more than one regime, and the FSA registration does not pre-empt the CBO’s jurisdiction over a payment-token element.

Case Law and Property Status

No reported Omani court ruling establishing virtual assets as property, or addressing crypto recovery or enforcement, was found as of mid-2026. Absence of case law is itself a planning fact: an operator cannot rely on a settled judicial position on whether crypto is property under Omani law, and should structure custody, client-asset segregation, and dispute clauses conservatively rather than assume the courts will treat tokens as they would conventional property.

Registration Categories and Activity Perimeter

Interim registration covers a defined set of virtual-asset activities. The full VARF is expected to widen and formalise the perimeter into named licence categories, but those categories do not yet exist. What follows is the live position under Decision E/35/2023, with the proposed VARF scope flagged as proposed.

Activities Covered by the Interim Registration

Decision E/35/2023 reaches the following virtual-asset activities, which mirror the FATF VASP definition:^[2]

• Exchange between virtual assets and fiat currency. Operating an on-ramp or off-ramp between crypto and fiat.
• Exchange between forms of virtual assets. Crypto-to-crypto exchange services.
• Transfer of virtual assets. Moving a virtual asset on behalf of another person.
• Safekeeping and administration of virtual assets. Custody, including control of instruments enabling control over a virtual asset.
• Participation in financial services related to virtual assets. Including issuance and sale of a virtual asset.

Proposed VARF Perimeter (Not Yet Enacted)

Proposals for the forthcoming VARF cover crypto assets, tokens, crypto exchanges, initial coin offerings, and token issuance, custody, and broker and advisory categories, with a full supervisory and market-surveillance regime.^[1] Until it is enacted, none of these proposed licence categories is available, and an operator cannot apply for a VARF licence that does not yet exist. The DeFi, DAO, and NFT perimeter is not defined in any enacted Omani instrument and remains open pending the final rules.

Out of Scope and Prohibited

• Out of scope. Digital representations of fiat currency, securities, and other financial assets already covered by other frameworks; payments, e-money, and stored-value facilities remain with the CBO.^[15]
• Prohibited. Privacy coins and anonymity-enhancing technology, including mixers, tumblers, and privacy wallets, are prohibited under the Omani approach.^[2]
• Separate prohibition. Gambling is absolutely prohibited under Omani law, independent of the virtual-asset framework.

Requirements for FSA VASP Registration

Article 6 of Decision E/35/2023 prescribes application information and documents, including ownership and management identification, criminal-record certificates, the enterprise risk assessment, AML/CFT policies, and details of a local bank licensed in Oman. The FSA may request further information and documents. See the document list below.^[2]

Local Entity and Substance

Decision E/35/2023 reaches legal persons incorporated in Oman, natural persons with a place of business in Oman, and any legal or natural person offering or conducting VASP services in Oman (Article 5). It does not itself prescribe a local entity or office, but Article 6 asks a legal-person applicant for its commercial-register entry and every applicant for the local bank it will use, so an Omani entity with a physical place of work is the practical route.^[2] Foreign ownership of up to 100% is permitted in most sectors under the Foreign Capital Investment Law (Royal Decree 50/2019), and a standard mainland LLC needs at least one or two shareholders and a physical office.^[14]

Oman’s free zones (Salalah, Sohar, Duqm, Al Mazunah) offer tax holidays and 100% foreign ownership, but they are logistics and industrial zones, not crypto-financial free zones, and the FSA VASP regime is national rather than zone-specific.

Neither a city-level nor a free-zone crypto carve-out therefore exists, which is why this page sits at the country-level Oman URL. Entity formation is covered on the Oman company formation page.

AML/CFT Obligations

Registration must be in place before any virtual-asset activity. The substantive AML/CFT obligations are customer risk assessment, transaction monitoring, internal policies and procedures, suspicious-transaction reporting to the National Centre for Financial Information, record-keeping, and governance and risk-management structures, with periodic reporting to the FSA. Existing VASPs were required to adjust within three months of the decision taking effect.

Royal Decree No. 30/2016 on Combating Money Laundering and Terrorism Financing is the base AML law, and its broad “funds” definition reaches electronic and digital forms.^[2] Know-your-customer procedures are expected as part of the AML/CFT programme even though the decision does not use the term “KYC” explicitly. The compliance detail is expanded under AML/CFT Compliance below.

Application Process, Timeline, and the Sandbox

Article 8 sets a 30-day period after the required information is complete; expiry without approval is deemed rejection.^[2] This is a statutory decision period, not the total time to prepare and complete a registration. No verified end-to-end duration is published here.

The FSA and CBO Fintech Co-Regulatory Sandbox

Oman runs an FSA Fintech Co-Regulatory Sandbox, operated jointly with the Central Bank of Oman, that lets a firm test a developed and operational solution under regulatory oversight. Applicants are notified within 30 working days of a complete application, and the sandbox is open to local or foreign, and to licensed or unlicensed, firms.^[4][5] Separately, under the CBO’s own Fintech Regulatory Sandbox, an applicant should commence live testing within 15 days of final approval.^[8]

Testing a genuinely developed product against regulatory expectations is what the sandbox is for, not a shortcut to a full authorisation: it does not substitute for the FSA registration where the activity is in scope, and scaling commercially still routes back through the registration regime, and ultimately the VARF once enacted.

Required Documents

Article 6 of Decision E/35/2023 expressly lists the information and documents for VASP registration. The summary below follows that provision; additional information, documents or originals may be requested by the FSA.^[2]

Entity, Ownership, and Governance Records

Provide the applicant’s name, address and place of business; identifying details and verification documents for beneficial owners, shareholders with more than 10% ownership, and people with management functions; and certificates of no criminal conviction for founders, directors or members of the board of partners. Legal-person applicants must also provide a copy of their commercial-register entry.^[2]

AML/CFT and Operational Records

Describe the proposed VASP services and systems. Include the enterprise risk assessment and policies and procedures for compliance with the AML/CFT law and the instructions. Article 6 also requires information on the bank the VASP will deal with, which must be a local bank licensed in Oman. Additional information, documents and originals may be requested.^[2]

Costs, Fees, and Capital

Headline regulatory numbers an operator would normally compare, the registration fee, the licence fee, the minimum capital, are not published for Oman VASPs as of September 2026. We do not invent them. What can be budgeted with confidence is the cost of forming the entity, building the AML programme and reaching audit readiness. The table below states what is known and, just as importantly, what is not.

Company formation is a mainland cost rather than a VASP regulatory fee and is shown for context only. No VASP registration fee, VARF licence fee, or minimum-capital figure has been published by the FSA.

The CBO payment service provider (PSP) route is separate from FSA VASP registration. Its category-based licensing policy lists base capital of OMR 100,000, OMR 200,000 and OMR 500,000 for Categories 1, 2 and 3 respectively, plus a security deposit of 5% of base capital capped at OMR 100,000.^[26] A separate generic PSP terms document still states OMR 500,000 and an annual fee of OMR 5,000.^[17] Confirm the category and applicable conditions with CBO before budgeting a payment business; none of these amounts establishes a VASP capital floor or fee.

Taxation

Corporate income tax in Oman runs at a 15% headline rate, with a reduced 3% rate for qualifying small taxpayers, alongside 5% VAT, no personal income tax before 2028 and no crypto-specific tax. A virtual-asset business is taxed under the general corporate income tax and VAT rules. The one moving part for large groups is the OECD Pillar Two top-up tax, effective from 1 January 2025.

Corporate Tax and VAT

At 15%, the headline rate is the standard corporate position, and a qualifying small taxpayer can access a 3% rate. VAT was introduced on 16 April 2021 at 5%, with financial services commonly exempt or zero-rated, so the VAT treatment of a specific virtual-asset service needs a line-by-line analysis rather than a blanket assumption.

There is no cryptocurrency-specific tax statute: an Omani crypto business is taxed as any other corporate, on its profits under the corporate income tax and on its taxable supplies under VAT.^[6]

No Personal Income Tax Until 2028

Oman levies no personal income tax until 1 January 2028, so an individual’s crypto gains are currently untaxed at the personal level, and corporate capital gains are taxed within the 15% corporate income tax rather than under a separate capital-gains regime.^[9] From 2028, Royal Decree 56/2025 taxes residents on worldwide income, and non-residents on income earned in Oman, at 5% above OMR 42,000 a year; its closed list of taxable sources includes gains on shares, sukuk and real estate but does not mention virtual assets, so the treatment of individual crypto gains depends on executive regulations that had not been issued by September 2026.^[20] A 10% withholding tax can apply to certain royalties and service fees paid to foreign companies, which is a planning point for cross-border service and licensing arrangements.

Pillar Two and CARF

Oman introduced an OECD Pillar Two top-up tax via Royal Decree 70/2024, effective 1 January 2025, charged through an Income Inclusion Rule on Oman parent entities and directly on Oman-located entities of multinational groups with consolidated revenue of at least EUR 750 million; standalone Omani crypto operators below that threshold are unaffected.^[21] On the OECD Crypto-Asset Reporting Framework, Oman is not among the jurisdictions committed to first exchanges in 2027, 2028 or 2029 on the OECD list updated 14 September 2026, though it signed the Addendum to the CRS Multilateral Competent Authority Agreement on 2 December 2025, signalling intent to implement the updated common reporting standard.^[10]

CARF is therefore a probable future obligation to plan for, not a current one.

Incorporation in Oman does not by itself rule out the EU’s DAC8 crypto-reporting directive: a crypto-asset operator that is tax-resident in, managed from, or has a regular place of business or a branch in an EU member state can still fall within it, subject to the directive’s exemptions where reporting is completed elsewhere.^[25]

AML/CFT Compliance and Ongoing Obligations

The interim registration is, at heart, an AML/CFT regime. Continuing obligations amount to the AML programme itself: customer due diligence, transaction monitoring, suspicious-transaction reporting to the financial intelligence unit, record-keeping, governance, and periodic reporting to the FSA. Because there is no full prudential licence yet, there is no prudential-return or capital-monitoring overlay of the kind a mature regime imposes.

Ongoing AML/CFT Obligations

A registered VASP must maintain an AML/CFT policy suite, a customer risk-assessment methodology, transaction-monitoring procedures, suspicious-transaction reporting processes, a compliance or MLRO function, and governance and risk-management frameworks, with periodic reporting to the FSA.^[2] The base statute is Royal Decree No. 30/2016 on Combating Money Laundering and Terrorism Financing, whose broad “funds” definition reaches digital forms and which carries penalties under Article 52.

Record-keeping periods depend on the record. Under Article 35 of the VASP Instructions, customer due diligence, account, and correspondence records are kept for at least 10 years after the relationship ends or after an occasional transaction; records of executed or attempted transactions for at least 10 years after the transaction; suspicious-transaction reports for at least 10 years after reporting; and risk assessments for at least 5 years after the assessment or its update.^[2] Under Article 44 of the AML law, the competent authorities may require records to be kept for longer.^[24]

Suspicious transactions are reported to the National Centre for Financial Information, Oman’s financial intelligence unit. Audited IFRS financial statements are expected for the corporate entity.

Travel Rule and Sanctions

FATF Recommendation 15 alignment underpins Decision E/35/2023, so a Travel Rule expectation applies in principle, although a specific Oman Travel-Rule de minimis threshold is not separately published as of June 2026. A prudent operator should build Travel Rule capability and a documented sanctions-screening process into the AML programme from the outset rather than wait for a published threshold.

We treat Travel Rule tooling and a named analytics vendor as part of the baseline build, because banks and counterparties ask for them even where the local rule is silent on the figure.

Advertising and Enforcement

Publicly, the FSA has warned against unlicensed digital-asset, commodity, and crowdfunding platforms and their marketing, and urges the public to verify firms on the FSA register. There is no dedicated VARF marketing rulebook yet, in contrast to the detailed marketing regulations some Gulf peers have issued, so the marketing perimeter for a registered VASP is governed by general conduct expectations and the prohibition on operating, or promoting, an unregistered virtual-asset business rather than by a bespoke advertising code.

Operational Resilience and Security Expectations

Oman imposes no DORA-equivalent ICT and operational-resilience statute on VASPs, and the EU’s DORA does not apply because Oman is outside the EU. Expectations that do apply flow from the general governance and risk-management duties in Decision E/35/2023 and the Central Bank of Oman’s security rules for payments, rather than from a dedicated digital-resilience rulebook.

In practical terms, a registered VASP should maintain a governance framework with named accountability for cybersecurity, key and wallet management, business continuity, and third-party technology risk, even though the specifics are not prescribed by an Omani digital-resilience statute. Wallet-security design, hot and cold segregation, incident response, and disaster recovery should be documented and tested to recognised international standards, partly because the forthcoming VARF is expected to add an ICT module, and partly because banking counterparties and analytics vendors assess these controls during onboarding.

Building to that bar now means the firm is not re-engineering its security posture when the full framework lands. Any ICT module under the VARF remains to be confirmed once the framework is enacted.

Banking for Crypto Businesses in Oman

Banking is usually the real gating constraint for an Omani crypto build, more so than the registration itself. The Central Bank of Oman has licensed no crypto entity and has stated that crypto is not legal tender and is not protected by banking law, so Omani commercial banks approach a crypto applicant conservatively. A registration does not, by itself, secure a bank account.

The structural reality is the same one that constrains regulated crypto firms globally: a firm often approaches several institutions before securing one full-service relationship, and onboarding diligence can run like deal diligence over a number of weeks. In Oman specifically, a domestic commercial bank serving a locally incorporated, FSA-registered VASP applies conservative know-your-business checks, source-of-funds scrutiny, and case-by-case correspondent-risk review.

Correspondent banking is often the harder problem: a Gulf-regional bank that reaches global payment networks through a larger correspondent may decline crypto exposure structurally, to protect that correspondent relationship, rather than on the merits of the applicant.

Pairing the Omani operating entity with banking arranged through more crypto-mature hubs is the workable approach. In practice that means routing fiat via a crypto-native electronic money or payment institution in a crypto-mature centre, segregating client safeguarding at a separate institution, maintaining a backup operating bank, and, where the structure supports it, pairing the Omani entity with a relationship at a regulated affiliate in a crypto-mature Gulf hub.

What gets an applicant onboarded is a clean package: a regulator-recognised authorisation (the FSA registration), a documented AML programme with a named analytics vendor and Travel Rule capability, Gulf or EEA-resident key persons, and clean ultimate-beneficial-owner chains away from FATF grey-list domiciles.

Article 6 requires information on a local bank licensed in Oman that the VASP will deal with. An overseas EMI or payment account does not replace that application requirement.^[2]

A registration without banking access is a certificate on the wall: see the Banking service for the placement methodology and the high-risk-merchant pathway for adjacent operational accounts.

FATF Status and International Standing

MENAFATF, the FATF-style regional body for the Middle East and North Africa, counts Oman as a member, and Oman is not on the FATF grey list or black list. Its joint FATF and MENAFATF Mutual Evaluation Report was published on 19 December 2024, after which Oman was placed in enhanced follow-up, a post-evaluation follow-up track that is frequently, and wrongly, conflated with grey-listing.

According to the FATF, Oman has significantly improved its legal, operational and supervisory AML/CFT framework through robust technical compliance, but in some areas more time is needed for reforms to affect effectiveness: seven of the 11 immediate outcomes were rated moderate. Following the assessment, Oman was placed in enhanced follow-up and reports back to MENAFATF.^[3] Enhanced follow-up is a separate process from the FATF’s “Jurisdictions under Increased Monitoring” grey list.

For a crypto operator, the practical read is positive: an Oman authorisation does not sit behind a grey-list reputational discount, which matters for correspondent banking and counterparty onboarding. FATF Recommendation 15 alignment underpins the Omani VASP registration, which is why a Travel Rule expectation applies even though a specific threshold is not separately published.

Market Access: No EU or GCC Passport

An Oman authorisation is a domestic permission. Oman is outside the EU, so there is no MiCA passport, and there is no GCC-wide crypto passport, so each Gulf state licenses separately. Serving clients in the UAE, Bahrain or the EU requires separate local authorisation in those markets, which an Oman registration does not confer.

For an operator with a material EU client base, the route is a separate MiCA CASP authorisation in an EU member state; Cyprus is a common choice for that. MiCA contains no third-country equivalence regime, so an Oman registration cannot be passported into the EU, and the only narrow non-licensed channel is the reverse-solicitation exemption under MiCA Article 61, which covers only services provided at the client’s own exclusive initiative, a test ESMA’s guidelines construe narrowly;^[23] see Reverse Solicitation Under MiCA for what counts as solicitation.

Decision E/35/2023 itself reaches persons who offer or provide a virtual-asset service in Oman, so providing into Oman triggers the registration regardless of where the demand originates. An operator targeting the UAE market should look at the UAE regimes directly, including ADGM, VARA in Dubai, and the federal framework, covered in the Abu Dhabi (ADGM) and Dubai and UAE guides.

Mining vs VASP Licensing: A Critical Distinction

Oman actively hosts crypto mining, and it is easy to mistake a mining approval for a virtual-asset-services authorisation. They are entirely separate. A mining authorisation, or participation in the national mining pool, does not authorise exchange, custody, transfer or any other VASP activity, and a VASP registration does not authorise mining.

Oman has invested heavily in mining and data-centre infrastructure in the Salalah Free Zone, with reported investment across the principal facilities exceeding USD 700 million, and a designated “first licence for sustainable crypto-mining in Oman” allocated substantial electricity capacity.^[11][12] On 17 June 2026, Enegix Global, the pool’s technology partner, announced Omanhash.om as the national mining pool launched by the Ministry of Transport, Communications and Information Technology and described it as the sole official and mandatory pool for licensed miners, subject to the approved regulatory framework; no government text stating that exclusivity was found.^[12] Hashrate Index put Oman at about 3.0% of global Bitcoin hashrate in the second quarter of 2026 and 2.8% in the third.^[19] This mining build-out is governed by national mining policy and free-zone arrangements, not by the FSA virtual-asset registration. Miners who also want to operate an exchange, custody or transfer business need to register with the FSA separately for the VASP activity. Treating a mining approval as a VASP authorisation is one of the more common and costly errors in this market, and is listed under Common Mistakes below.

Advantages and Limitations

Oman is a staged-entry decision rather than a conventional licence-shopping decision. Its case rests on early positioning, clean international standing, mining infrastructure, and a light tax base. Its constraints are equally concrete: the full operating framework is not yet live, capital and fee schedules remain unpublished, and an Oman registration creates no cross-border passport.

• ✓ Early onshore Gulf position. The interim AML/CFT registration offers a route for operators willing to enter an emerging regime before the full framework lands.
• ✓ Clean FATF standing. Oman is in MENAFATF enhanced follow-up, not on the FATF grey list.
• ✓ Mining and data-centre build-out. The jurisdiction is making sovereign-scale infrastructure commitments that may suit mining-adjacent operators.
• ✓ Light personal-tax base. The structure combines a 15% headline corporate-tax rate with no personal income tax until 2028, and then 5% only above OMR 42,000 a year.
• × No full operating licence as of September 2026. The live UAE regimes through ADGM and VARA are several years ahead. Mitigation: use Oman only where staged entry and interim registration fit the near-term operating plan.
• × No EU market access. An Oman registration does not passport into the EU. Mitigation: operators needing EU access require a separate MiCA CASP authorisation, such as through Cyprus.
• × Published economics remain incomplete. The full framework's capital and fee schedules are not yet available. Mitigation: maintain a contingency budget and do not treat the interim registration cost as the eventual licence cost.
• × Higher uncertainty than a live offshore regime. Operators prioritising cost and speed may find a live offshore registration such as the BVI more predictable, although the BVI has been on the FATF grey list since June 2025, which weighs on banking and counterparty onboarding. Mitigation: compare the operating model, target market, and banking path before choosing on headline cost alone.

How Oman Compares

Set honestly, the comparison places Oman against the UAE, which is several years ahead with multiple live regulators, against Cyprus as the EU MiCA route for operators that need a passport, and against the BVI as a low-cost offshore registration regime. Oman’s distinguishing feature in this set is that, as of September 2026, its full licensing regime is not yet live, which is a real disadvantage and the source of its early-mover opportunity.

Compare every crypto jurisdiction side by side →

UAE figures cover the VARA and ADGM regimes; see the Abu Dhabi (ADGM) and Dubai and UAE guides for the full picture. The BVI sits on the FATF grey list as of early 2026, which is reflected in the warn cell above; the others are clean, with Oman in MENAFATF enhanced follow-up, a monitoring track that is not grey-listing.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Common Mistakes in Oman Crypto Planning

Because Oman is an emerging regime undergoing a regulator transition, the recurring errors here are different from those in a mature market. They cluster around mistaking what is live for what is merely announced, and around confusing the several authorities and authorisations involved.

• Assuming a full VASP licence is available now. Only the interim AML/CFT registration is live; the full VARF is not yet enacted, so there is no full VASP licence to apply for; planning should target the registration, with the VARF as a future upgrade.
• Confusing the CMA with the FSA. The CMA was abolished and replaced by the FSA under Royal Decree 20/2024 on 25 March 2024, and the FSA is now the crypto regulator.
• Treating a crypto-mining approval as a VASP authorisation. Mining approvals in the Salalah Free Zone, and participation in the Omanhash.om national pool, are separate from VASP licensing; running an exchange, custody or transfer business still needs the FSA registration.
• Assuming the CBO licenses crypto. It does not. The Central Bank of Oman warns that crypto is not legal tender and regulates only payments, e-money, and stored value; the FSA is the virtual-asset regulator.
• Planning to issue or service privacy coins. Privacy coins and anonymity tools (mixers, tumblers, privacy wallets) are prohibited under the Omani approach, so building a product around them is a dead end.
• Expecting an Oman authorisation to passport into the UAE or wider GCC. There is no GCC crypto passport; each state licenses separately, so cross-border GCC or EU service needs separate local authorisation.
• Underestimating banking friction. A registration does not guarantee an Omani bank account; the banking case is the constraint that most often determines whether the build is viable, and it should be prepared in parallel, not after.

Frequently Asked Questions

References