提供虛擬資產服務之事業或人員洗錢防制登記辦法

These Regulations are adopted pursuant to Article 6, paragraph 2 of the Money Laundering Control Act ("the Act").

1Terms used in these Regulations are defined as follows:

21. "Virtual asset": means a digital representation of value with the use of cryptography and distributed ledger technology or other similar technology that can be digitally stored, exchanged, or transferred, and can be used for payment or investment purposes. However, virtual assets do not include digital representations of NTD, foreign currency, currency issued by Mainland China, Hong Kong, or Macao, securities, and other financial assets issued in accordance with laws and regulations.

32. "Enterprise or person providing virtual asset services" ("virtual asset service provider"; "VASP"): means an enterprise or person engaging within Taiwan in the activities listed below on behalf of others.

4A. Exchange between virtual assets and the New Taiwan dollar (NTD), foreign currency, or currency issued by Mainland China, Hong Kong, or Macao.

5B. Exchange between virtual assets.

6C. Transfer of virtual assets.

7D. Safekeeping or administration of virtual assets or providing instruments enabling control over virtual assets.

8E. Participation in and provision of financial services relating to the issuance or sale of virtual assets.

9

1A VASP shall, in accordance with the Act and these Regulations, according to the type(s) of business under Article 2, paragraph 1, subparagraphs 3 to 7, respectively carry out anti-money laundering ("AML") registration with the Financial Supervisory Commission (FSC). If it has not completed registration, it may not operate such business.

2A VASP may not, without having obtained permission or approval, operate any business that requires permission or approval under other laws or regulations.

1Anyone subject to any of the following circumstances may not serve as a responsible person or beneficial owner of a VASP company, limited partnership, or business:

21. Has previously, by a final and unappealable judgment, been convicted of a criminal offense under the Organized Crime Prevention Act or the Fraud Crime Hazard Prevention Act, and has not started serving the sentence, has not completed serving the sentence, or 5 years have not yet elapsed since completion of the sentence, expiration of suspended sentence, or pardon.

32. Has previously, by a final and unappealable judgment, been convicted of a criminal offense of counterfeiting currency, counterfeiting securities, fraud, breach of trust, embezzlement, forgery, offense against privacy, usury, impairment of creditor rights, or violation of the Tax Collection Act, Trademark Act, Copyright Act, or other law regulating business and industry, and has not started serving the sentence, has not completed serving the sentence, or 3 years have not yet elapsed since completion of the sentence, expiration of suspended sentence, or pardon.

43. Has previously, by a final and unappealable judgment, been convicted of a criminal offense under the Anti-Corruption Act, and has not started serving the sentence, has not completed serving the sentence, or 3 years have not yet elapsed since completion of the sentence, expiration of suspended sentence, or pardon.

54. Has previously, by a final and unappealable judgment, been convicted of a specified unlawful activity as defined in Article 3 of the Act, and has not started serving the sentence, has not completed serving the sentence, or 3 years have not yet elapsed since completion of the sentence, expiration of suspended sentence, or pardon.

1A VASP shall complete an application in the format required by the FSC, and submit the following documents to the FSC through the institution designated by FSC, to apply for AML registration:

21. VASP information form.

32. Registration documents of the company, limited partnership, or business.

43. Company articles of incorporation or limited partnership or partnership agreement.

54. Business rules/bylaws and description of business processes.

65. List of shareholders or partners.

76. List of responsible person(s) of the company, limited partnership, or business.

87. List of beneficial owner(s).

98. Statement representing that the responsible person(s) and beneficial owner(s) of the company, limited partnership, or business are free of any circumstance in violation of Article 4 of these Regulations.

1A VASP shall commence operation within 6 months from the date that it completes AML registration with the FSC. If for some legitimate reason it is unable to commence business, it shall, before the expiration of the deadline, apply to the FSC for an extension by submitting an application form through the institution designated by the FSC. An extension may not exceed 6 months and shall be limited to one time only.

2A VASP may not operate until it has become a member of the Taiwan Virtual Asset Service Provider Association (TVASPA).

3If a VASP needs to suspend operations for legitimate reasons after commencing operations, it shall, before suspending operations, apply to the FSC by submitting an application form through the institution designated by the FSC, and may suspend operations only after the FSC has given its consent.

4A VASP that has suspended operations with the consent of the FSC shall, before resuming operations, apply to the FSC by submitting an application form through the institution designated by the FSC, and may resume operations only after the FSC has given its consent.

5Before terminating its virtual asset business, a VASP shall apply to the FSC for revocation of its registration.

1The FSC may refuse registration if a VASP's application case is subject to any of the following circumstances:

21. Any misrepresentation or falsehood is discovered in the content of application documents or related matters.

32. Three months have not yet elapsed after registration was refused by the FSC under Article 5, paragraph 4 or after withdrawal by the VASP itself.

43. Content of the internal control system is not specific enough or cannot be effectively implemented。

54. Content of the business violates laws or regulations.

65. There is a risk that the VASP may be used for money laundering or terrorist financing.

76. Any responsible person or beneficial owner of the company, limited partnership, or business is subject to any circumstance in Article 4.

87. Any responsible person of the company, limited partnership, or business is not a fit and proper person to effectively carry on the business of a VASP.

9

1After a VASP is registered, the FSC may void or revoke its AML registration in any of the following circumstances:

21. The VASP has failed to apply to the FSC for revocation of registration before terminating its virtual asset business.

32. The VASP has failed to commence operations within 6 months after completing AML registration. This does not apply, however, if it has applied for an extension under the proviso to paragraph 1 of Article 6 and the FSC has granted consent.

43. It unilaterally suspends operations for 3 consecutive months or longer without having obtained consent from the FSC.

54. It fails to apply for amendment to application content or related matters in accordance with Article 9, paragraph 1.

65. Any circumstance under subparagraph 1 of the preceding article.

76. Any circumstance under subparagraph 3 to 7 of the preceding article, and the VASP has not taken the remedial action requested by the FSC within the specified timeframe.

87. Violation of the Act, the Fraud Crime Hazard Prevention Act, Counter-Terrorism Financing Act, these Regulations, or the Regulations Governing Anti-Money Laundering and Countering the Financing of Terrorism for Enterprises or Persons Providing Virtual Asset Services, and the VASP has not taken the remedial action requested by the FSC within the specified timeframe, or where the circumstances are severe and likely to impede the continued sound operation of the VASP.

1If a VASP wishes to make any change to any of the content set out in its application documents or related matters as listed below, it shall, prior to the change, submit its application to the FSC through the institution designated by the FSC, and may make the change only after the FSC has given approval:

21. Name of the VASP.

32. Responsible person(s), partner(s), or beneficial owner(s).

43. Branch or entity business location.

54. Number and location(s) of automated service facilities/equipment.

65. Acquisition from or assignment to another person of business or assets in full or in major part.

76. Merger, consolidation, or demerger.

87. Addition or reduction of lines of business.

98. Other matters as required by the FSC.

1A VASP's operation of business shall comply with laws and regulations, its articles of incorporation, internal control system, and TVASPA self-regulatory rules.

2A VASP's internal control system shall ensure that the virtual assets in relation to which it provides services have no legality issues.

1A VASP may handle the receipt and payment of fiat currency involved in virtual asset transactions in accordance with business needs, and with the consent of the customer, deposit the customer's fiat currency in a special deposit account of the same currency opened by the VASP with a financial institution.

2A VASP shall place in trust a customer's deposited fiat currency or obtain a full performance guarantee from the bank with respect thereto.

3The term "place in trust" in the preceding paragraph means entering into a trust deed with the financial institution where it opens the special deposit account under paragraph 1 to designate the special deposit account as a trust account.

4The term "obtain a full performance guarantee from the bank" in paragraph 2 means entering into a full performance guarantee agreement with the bank under which the bank assumes the VASP's performance guarantee responsibility to the customer.

5The provisions of Articles 23 and 25 to 27 herein apply mutatis mutandis to a VASP keeping customer fiat currency on deposit in accordance with this article.

1A VASP shall adopt relevant policies and procedures to ensure continuity in its business operations.

2A VASP shall establish an appropriate information security management system, taking into account the type, quantity, and nature of the information maintained or processed, as well as the scale and nature of the information/communication system.

3A VASP shall establish a stable and secure information system that is consistent with the scale and nature of the business operated, and adopt appropriate measures and procedures to ensure the availability, accuracy, confidentiality and security of data and its transmission, exchange or processing.

4A VASP shall put in place policies and procedures around the management and confidentiality of material non-public information involved in its operations.

5A VASP shall have adequate and qualified information security personnel.

A VASP shall establish procedures for handling customer complaints, and fairly and promptly handle all disputes with customers in connection with virtual asset services.

1A VASP shall disclose the following by prominently displaying it on its website or by other means of public announcement designated by the FSC:

21. The reference number and date of the AML registration approval document. If there is a physical location or automated service equipment, the relevant registration certificate(s) shall be announced.

32. Company articles of incorporation or limited partnership or partnership agreement.

43. The content of its business and services.

54. Fee policy.

65. Business continuity policy.

76. Information security policy.

87. Conflict of interest prevention policy.

98. Customer protection measures.

10

1VASPs shall keep relevant records of the virtual asset services they handle for their customers, and keep them available for audit and inspection.

2The service records mentioned in the preceding paragraph shall be kept for 5 years from the termination of the service relationship. However, in the event of any dispute, they shall be kept until the dispute is extinguished.

1A virtual asset exchanger shall publicly announce matters including the virtual assets in relation to which it provides exchange services, the method of determining the exchange price, and the exchange quantity on its website or by other means of public announcement designated by the FSC.

2The matters to be publicly announced under the preceding paragraph shall include a hyperlink to the virtual asset white paper webpage. The content of the white paper shall include:

31. Information about the issuer.

42. Description of the issuance plan.

53. Issue quantity, price, and other conditions of subscription.

64. Information about the public offering and admission to trading of the virtual asset.

75. Information about the virtual asset project.

86. Information on the rights and obligations attached to the virtual asset.

9

1A virtual asset exchanger shall adopt and publicly announce its virtual asset exchange rules and incorporate them into its internal control systems.

2A virtual asset exchanger shall take reasonable measures to protect customer rights and interests, and expeditiously and fairly execute exchanges of virtual assets for customers.

3A virtual asset exchanger shall publicly announce in real time transaction-related information on the virtual assets in relation to which it provides exchange services, including transaction prices and quantities, and shall keep relevant records.

4Exchange records under the preceding paragraph shall be kept for 5 years from the time of completion of exchange. However, in the event of any dispute, they shall be kept until the dispute is extinguished.

Unless otherwise provided in this Section, the provisions of the preceding Section apply to virtual asset trading platforms.

1A virtual asset trading platform shall establish review standards and review procedures for admitting virtual assets to trading, as well as those for removing virtual assets from trading, and incorporate them into its internal control systems.

2The review standards under the preceding paragraph shall include the following items:

31. The content of the virtual asset white paper.

42. Background information of the virtual asset issuer and its responsible person(s).

53. The legal compliance status and supervisory/regulatory status of the virtual asset.

64. The supply, demand, market conditions, and liquidity of the virtual asset and the responsibleness of its price.

75. The technology relating to the virtual asset.

86. The development of the virtual asset.

97. The enforceability of any rights represented by the virtual asset.

1A virtual asset trading platform shall establish and publicly announce its virtual asset trading rules and incorporate them into its internal control systems.

2The trading rules under the preceding paragraph shall include the following:

31. Website(s) or venue(s) where the trading services are provided.

42. Business days and trading hours.

53. Trade process.

64. Trade instruction method.

75. Execution principles and methodology.

86. Trade verification procedures.

97. Clearing and settlement arrangements.

108. Situations in which trades can be cancelled or amended and cancellation or amendment methods.

A virtual asset trading platform shall establish mechanisms to prevent unfair market transactions and measures such as for detecting and alerting to anomalies in price and volume and incorporate them into its internal control systems.

A virtual asset transferor shall establish and publicly announce its virtual asset transfer rules and incorporate them into its internal control systems.

A virtual asset custodian shall segregate customer assets in its custody from its proprietary assets.

1A virtual asset custodian shall not agree with a customer that the ownership of the customer's virtual assets in the custodian's custody be transferred to the virtual asset custodian.

2A virtual asset custodian receiving a customer's virtual assets shall keep them in segregated custody from its proprietary virtual assets and shall not agree with a customer that the customer's virtual assets be commingled in custody with the custodian's virtual assets.

A virtual asset custodian shall not use a customer's assets except, in accordance with the customer's instructions, to dispose of the customer's assets, to offset the customer's expenses and debts, or for other causes permitted by the FSC.

1A virtual asset custodian shall, with respect to the custody of customer assets, adopt and publicly announce explicit custody policies and procedures and incorporate them into its internal control systems.

2The custody policies and procedures under the preceding paragraph shall include at least the following matters:

31. Policies and procedures to prevent and mitigate the risk of loss, theft, or inaccessibility of customer assets.

42. The ratio at which the virtual asset custodian stores customer virtual asset positions in cold wallets and hot wallets.

53. Specifications and procedures for access to, and private key management of, cold and hot wallets.

64. Procedures for handling any incidents involving customer rights and interests in their assets.

7The ratio for positions in cold wallets and hot wallets mentioned in subparagraph 2 of the preceding paragraph shall be separately prescribed by the FSC.

1A virtual asset custodian shall, with respect to customer assets in its custody, faithfully record each individual customer's name, wallet address, asset amounts, quantities, and all dispositions including transfers in and transfers out, and shall keep the records and provide them to the customer.

2The records mentioned in the preceding paragraph shall be kept for 5 years from the time of termination of the custody business relationship. However, in the event of any dispute, they shall be kept until the dispute is extinguished.

3A virtual asset custodian shall establish measures for regular and frequent reconciliations of customer assets in its custody, for which it shall engage a certified public accountant to issue a report at least once every year for public announcement.

1A virtual asset underwriter shall, on its website or by other means of public announcement designated by the FSC, make public announcements of its underwriting of virtual assets. The matters to be publicly announced shall include a hyperlink to the virtual asset white paper.

2The provisions of Article 16, paragraphs 2 and 3 apply mutatis mutandis to the circumstances under this paragraph.

1A virtual asset underwriter shall establish and publicly announce its virtual asset underwriting rules, establish review standards and review procedures for the virtual assets it underwrites, and incorporate them into its internal control systems.

2The provisions of Article 19, paragraph 2 apply mutatis mutandis to the review standards under the preceding paragraph.

A VASP that, before the entry into force of these Regulations, had already completed a legal compliance statement in accordance with Article 17 of the Regulations Governing Anti-Money Laundering and Countering the Financing of Terrorism for Enterprises Handling Virtual Currency Platform or Transaction issued on 30 June 2021 shall carry out AML registration with the FSC by 31 March 2025 and shall complete the AML registration by 30 September 2025. A VASP that has not carried out registration with the FSC or has not completed the registration by such deadline may not continue to operate business.

These Regulations shall enter into force from 30 November 2024.