On Friday 1 August 2026, the Pakistan Virtual Assets Regulatory Authority (PVARA) officially sanctioned and launched its Regulatory Sandbox for virtual assets, creating a controlled environment where firms can trial crypto-related services under the regulator's supervision before seeking full approval. The launch comes four weeks after PVARA closed public consultation on the draft Pakistan Virtual Asset Services Regulations, 2026: the detailed rulebook that will govern how every Virtual Asset Service Provider (VASP) is licensed and supervised in the country.

The sandbox and the draft regulations are the two most recent pillars of a governance architecture that began with the Virtual Assets Act, 2026 (Act XIII of 2026), which received presidential assent on 4 March 2026, was published in the Gazette of Pakistan on 5 March 2026, and came into force at once. The Act established PVARA as Pakistan's independent federal regulator for virtual assets and VASPs, headquartered in Islamabad, with powers to license, supervise, inspect, and penalise.

The Sandbox: What It Covers and Who Can Apply

PVARA has indicated that the sandbox will facilitate real-world applications across four areas: tokenisation of real-world assets on a blockchain, stablecoins pegged to fiat currency, remittances using virtual assets for cross-border value transfer, and on- and off-ramp infrastructure that lets users move between fiat currency and digital assets. The sandbox is designed for businesses that want to test innovative products before the full licensing regime is operational. PVARA stated that guidelines and the application process will be published on its website shortly.

The sandbox sits alongside two other pre-licensing tools PVARA already offers: No-Action Relief Letters, which give firms written comfort that PVARA will not take enforcement action against a specific proposed activity, and the No Objection Certificate (NOC) process, which is the formal first step toward a full VASP licence.

From NOC to Full Licence: The Five-Step Pathway

PVARA's licensing portal is currently accepting NOC applications. The pathway from application to full authorisation has five stages:

  • Step 1: Application for NOC: Submit a business plan and corporate documents to PVARA. The regulator targets a decision within 60 calendar days of a complete submission.
  • Step 2: Issuance of NOC: Receive preliminary approval and written authorisation to proceed toward full licensing.
  • Step 3: AML Registration: Complete registration with Pakistan's Financial Monitoring Unit (FMU) on its goAML portal, meeting customer due diligence, transaction monitoring, recordkeeping, and suspicious transaction reporting obligations aligned with Financial Action Task Force (FATF) standards.
  • Step 4: Local Incorporation: Establish a subsidiary company in Pakistan under the Companies Act, 2017.
  • Step 5: VASP Licence: Submit the final licence application and receive the formal VASP licence once the final regulations are in force.

The NOC currently covers broker-dealer, custody, exchange, and derivative services. PVARA has stated that detailed steps for full licensing will follow once the final regulations are published.

Ten Licence Categories Under the Draft Regulations

On 11 June 2026, PVARA published the draft Pakistan Virtual Asset Services Regulations, 2026 for public consultation, alongside a General Handbook and ten activity-specific handbooks. The consultation closed on 2 July 2026 at 4:00 PM PKT. The draft proposes ten licence categories:

  • Virtual Asset Exchange services, covering spot and over-the-counter trading
  • Custody and wallet operations for client crypto holdings
  • Broker and broker-dealer services
  • Lending platforms
  • Asset management and investment advisory services
  • Token issuance, including Initial Virtual Asset Offerings
  • Transfer and remittance services using virtual assets
  • Decentralised finance and lending protocol operations
  • Stablecoin issuance
  • Regulatory sandbox participation for early-stage firms

The draft regulations also impose a 100% reserve backing requirement for stablecoin issuers: any firm issuing a Pakistan-facing stablecoin must hold liquid reserves equal to the full value of coins in circulation. Licensed firms must keep customer assets fully segregated from company funds, held in separate accounts so that client crypto cannot be used to pay corporate debts in the event of insolvency.

PVARA is now reviewing all submissions received before the deadline. It will publish a feedback statement summarising the main themes raised and the changes made, after which the final regulations will be notified under the Act.

The September 2026 Deadline for Existing Platforms

Section 70 of the Virtual Assets Act, 2026 contains a transitional provision with immediate practical consequences: any person already providing Virtual Asset Services when the Act commenced on 5 March 2026 must apply to PVARA for a licence within six months - that is, by approximately 5 September 2026 - or cease providing those services. A person who submits a complete application within that window may continue operating while the application is pending, provided they comply with any interim directives PVARA issues and adhere to the Act's core obligations on customer asset protection and anti-money laundering.

Operating without a licence after the deadline is a criminal offence. PVARA's published guidance states that unlicensed VASP activity can attract fines of up to PKR 50 million, imprisonment, and seizure of assets. The Act also help PVARA to impose administrative sanctions, suspend or revoke licences, and apply to court for civil or criminal remedies.

Banking Access and the Tax Question

On 14 April 2026, the State Bank of Pakistan issued BPRD Circular Letter No. 10 of 2026, permitting SBP-regulated entities to open accounts for PVARA-licensed VASPs, subject to licence verification, customer due diligence, and AML/CFT obligations. Banks must maintain separate Pakistani rupee-denominated Client Money Accounts for authorised VASP transactions and are prohibited from investing in or holding virtual assets using their own or customer funds.

On the tax side, the Federal Board of Revenue (FBR) treats cryptocurrency as property, not currency. Mining income is classified as business income and taxed at progressive slab rates; trading profits are capital gains. However, no specific crypto tax rate has been enacted. The FBR and PVARA are reported to be in disagreement over the rate: PVARA favours a lower burden to encourage legal participation, while the FBR is said to be considering rates between 10% and 30%. The Finance Bill 2026 is expected to settle the question. In the meantime, licensed exchanges are required to share user transaction data with the FBR under Pakistan's alignment with the OECD Crypto-Asset Reporting Framework.

What Happens Next

For businesses, the immediate priority is the September 2026 transitional deadline. Any platform currently serving Pakistani users without an NOC or licence application in progress should begin the NOC process now. PVARA's portal is open and accepting applications. For individual traders, the practical step is to verify that any exchange they use is either PVARA-licensed or demonstrably in the NOC pipeline, and to begin keeping detailed records of all crypto purchases and sales in PKR for tax reporting.

What the evidence does not yet establish: the exact date the final Virtual Asset Services Regulations will be published and come into force; the specific capital, custody, and reporting requirements that will apply to each of the ten licence categories; the final crypto tax rate and the taxable events the Finance Bill 2026 will specify; and the detailed eligibility criteria and application procedure for the newly launched Regulatory Sandbox, which PVARA has said will be published on its website shortly.