Executive summary
Cambodia’s position on Bitcoin is best described as partially opened for regulated crypto services, but still effectively closed for Bitcoin inside the formal financial system. The original 2018 position—set jointly by the National Bank of Cambodia, the securities regulator, and police—treated unlicensed cryptocurrency activities as illegal. The major shift came with NBC’s Prakas on Transactions Related to Cryptoassets on 26 December 2024, which created a framework for banks, payment service institutions, and future licensed cryptoasset service providers. But that opening was narrow: commercial banks remain barred from Group 2 cryptoasset exposure, and licensed providers are expressly prohibited from promoting cryptoassets as a means of payment for goods and services. In practice, that leaves Bitcoin outside the central bank’s currently acceptable perimeter for regulated banking activity, even while stablecoins and tokenized traditional assets have a possible pathway subject to prior approval and later licensing rules. citeturn0search0turn5view4turn5view5turn1search4
The most important structural fact for Cambodian Bitcoin is that Bakong and KHQR already solve many of the payment problems that Bitcoin solves elsewhere. Bakong has grown into a mass retail payment rail backed by the central bank, interoperable across Cambodian banks and payment institutions, and linked to cross-border QR payment corridors with Malaysia, Korea, Singapore, India, Alipay+, Visa, Mastercard, UnionPay, and others. KHQR acceptance now reaches about 4.5 million merchant locations nationwide, making formal digital payments ubiquitous in a way that sharply reduces the case for Bitcoin as an everyday payments tool in Cambodia. citeturn31search6turn31search3turn31search4turn31search2turn31search8turn31search7
Cambodia’s real crypto story since 2018 has therefore been less about mainstream retail Bitcoin use and more about offshore exchanges, informal P2P markets, remittance experimentation with stablecoins, and criminal abuse of crypto rails by scam networks. Cambodia’s own 2025 national money-laundering risk assessment says foreign exchanges such as Binance, OKX, and Huobi/HTX remain the primary entry points for Cambodian users; it also says there were no domestically authorized or supervised VASPs/CASPs at the time of the assessment, despite separate securities-sandbox experiments. The same report rates Cambodia’s virtual-asset sector Medium High Risk, citing scams, fraud, informal remittance channels, cross-border inflows, P2P reliance, and weak blockchain-forensics capability. citeturn20view0
Taxation is the weakest-developed area. I did not locate any dedicated, public GDT or MEF guidance that specifically taxes Bitcoin or other cryptoassets. Cambodia did issue broader capital-gains guidance in 2025, but the officially described covered categories were immovable property, leases, investment property, goodwill, intellectual property, and foreign currency—not cryptoassets explicitly. The practical result is legal and tax ambiguity: general tax rules may apply in principle, but asset-specific official crypto tax guidance remains absent or not publicly accessible in the materials located for 2018–June 2026. citeturn12search1turn12search5
The biggest macroeconomic impact of “Cambodian Bitcoin” has not been monetary substitution. It has been reputational, AML/CFT, and law-enforcement pressure linked to scam compounds and laundering networks. U.S. Treasury, FinCEN, DOJ, Reuters, UN reporting, and Cambodia’s own AML assessment all point to Cambodia as a major node in regional cyber-enabled fraud and crypto-linked laundering ecosystems. Major actions since 2024 include U.S. sanctions on Ly Yong Phat, FinCEN’s 2025 Section 311 action and final rule against Huione Group, the U.S./U.K. 2025 sanctions wave against Prince Group, the April 2026 U.S. sanctions on Kok An’s network, and Cambodia’s own 2026 law targeting online scam centres. citeturn40search0turn23search1turn23search0turn41search2turn41search4turn36news20
Legal and regulatory status
Cambodia’s foundational crypto position was set by a 2018 joint statement from the National Bank of Cambodia, the Securities and Exchange Commission/Regulator, and the General Commissariat of National Police. That statement warned that activities involving named cryptocurrencies and broader virtual currencies were illegal without a license from competent authorities. The joint-statement approach mattered because it framed crypto not only as a financial-regulation issue, but also as a public-order and policing issue. citeturn0search0turn1search0
The decisive regulatory change arrived with NBC’s Prakas on Transactions Related to Cryptoassets, signed on 26 December 2024. The Prakas defines “cryptoassets,” classifies them into Group 1 and Group 2, lets commercial banks and payment service institutions provide certain cryptoasset-related services only with prior NBC authorization, creates a licensing pathway for cryptoasset service providers, requires risk-governance and quarterly reporting, and imposes fines for non-compliance. At the same time, Article 12 bars commercial banks from direct or indirect Group 2 exposure, and Article 21 prohibits CASPs from providing services that would promote or support cryptoassets as a means of payment for goods and services. NBC can impose fines of up to KHR 500 million per transaction for some breaches and daily fines for failures to report or correct violations. citeturn1search2turn5view3turn5view4turn5view5turn5view6
That architecture has one crucial implication for Bitcoin. While the official text is framed in category language rather than naming Bitcoin line-by-line in the portions retrieved, both the category logic of the Prakas and expert legal summaries point in the same direction: tokenized traditional assets and some stablecoins may fit Group 1, but unbacked cryptoassets such as Bitcoin fall into Group 2, which regulated banks cannot hold. So Cambodia did not “legalize Bitcoin” in banking; it created a cautious route for regulated institutions to touch only the safer part of the crypto spectrum. citeturn5view1turn5view4turn1search4turn1search0
Cambodia’s own AML authorities confirm that the framework was still in transition through 2025 and into 2026. CAFIU’s 2025 National Risk Assessment says that, as assessed, there was a complete absence of licensed VASPs operating within Cambodia, because no domestic entities were yet authorized or supervised by NBC or SERC. The same report says the NBC was drafting a Prakas on authorization and licensing of CASPs/VASPs and that SERC was drafting a broader digital-asset-business regime. This is the clearest official sign that the legal framework had moved from blanket prohibition to staged authorization, but had not yet matured into a broad live licensing market by the report’s cut-off. citeturn20view0
Regulatory timeline
| Date | Event | Why it mattered |
|---|---|---|
| July 2018 | Joint NBC–securities regulator–police statement warns that unlicensed cryptocurrency activity is illegal. citeturn0search0turn1search0 | Established Cambodia’s original restrictive stance. |
| April 2022 | SERC issues its first FinTech Regulatory Sandbox guideline for securities-sector innovation. citeturn20view0 | Created a testing route for digital-asset products in the securities perimeter. |
| August 2023 | SERC replaces the first guideline with a more comprehensive sandbox guideline. citeturn20view0 | Expanded and formalized securities-sector experimentation. |
| January 2024 | SERC grants the first sandbox license. citeturn20view0 | First concrete regulatory test authorization in Cambodia’s digital-asset space. |
| December 2024 | NBC adopts Prakas on Transactions Related to Cryptoassets. citeturn1search2turn5view5turn5view6 | Opened a regulated path for banks/PSIs/CASPs, but not for Bitcoin-as-payment. |
| February 2026 | CAFIU publishes Cambodia’s second National Risk Assessment, rating virtual assets Medium High Risk and saying no domestic VASPs were yet authorized/supervised. citeturn20view0 | Officially documented risk profile, market structure, and licensing gap. |
| April 2026 | Cambodia’s parliament passes its first dedicated cybercrime law targeting scam centres, money laundering, data harvesting, and recruitment. citeturn36news20 | Strengthened the enforcement toolkit around crypto-enabled fraud ecosystems. |
timeline
title Cambodian crypto and Bitcoin regulatory milestones
2018 : Joint statement by NBC, securities regulator, and police warns against unlicensed cryptocurrency activity
2022 : SERC issues first FinTech Regulatory Sandbox guideline
2023 : SERC updates sandbox with more comprehensive guideline
2024 : First sandbox license granted by SERC
: NBC adopts Prakas on Transactions Related to Cryptoassets
2026 : CAFIU rates VA/VASP sector Medium High Risk
: Parliament passes dedicated anti-scam cybercrime lawThe timeline above is drawn from Cambodian official and quasi-official sources: the 2018 joint statement, NBC’s 2024 cryptoasset Prakas, the 2025 National Risk Assessment, and Reuters reporting on Cambodia’s 2026 anti-scam law. citeturn0search0turn1search2turn20view0turn36news20
Central bank guidance, enforcement, and the Bakong banking nexus
NBC’s guidance since 2024 is internally consistent even if it looks contradictory at first glance. The central bank is not embracing open-ended crypto banking; it is ring-fencing it. Banks need prior approval. Risk governance must sit at board and senior-management level. Group 2 exposure is prohibited. Reporting is mandatory. Promotion of cryptoassets as a payment method for goods and services is prohibited. This is a central bank trying to permit a narrow, supervised segment of crypto while preserving monetary control, payment-system integrity, and AML/CFT defensibility. citeturn5view3turn5view4turn5view5turn5view6
Enforcement has also been selective and mostly tied to broader prudential or AML failures rather than retail Bitcoin use. Reuters reported in July 2024 that NBC told it Huione Pay was not allowed to deal or trade crypto and that NBC would not hesitate to impose corrective measures. Later materials summarizing an NBC press release stated that Huione Pay’s payment-service license had been revoked in September 2024 and liquidation was completed in 2025. That does not prove a clean, crypto-only enforcement theory, but it does show that the central bank was willing to act against a payment institution drawn into the crypto-and-scam nexus. citeturn22news41turn42search4turn42search1
Bakong is the critical policy backdrop. Cambodia is highly dollarized, and NBC has long used payment-system reform to deepen formal finance, lower frictions, and support riel usage. Bakong functions as a central-bank-led retail payment backbone rather than as an open crypto network. Official NBC materials say Bakong was launched in October 2020 and had 598,090 registered customers by end-2023, with about 19.5 million accounts connected through the system. NBC also states that KHQR merchant acceptance reached about 4.5 million merchants by 2025–2026, and cross-border QR corridors now link Cambodia with major regional systems. Academic analysis of Bakong emphasizes that it was designed specifically for a highly dollarized economy and as a policy instrument of payment modernization, not as cryptocurrency liberalization. citeturn8search4turn31search6turn31search3turn28search1turn42search5
This means Bitcoin and Bakong are not complements in Cambodia’s main retail-payment lane; they are mostly substitutes, and Bakong has the official lane. Because CASPs are prohibited from promoting cryptoassets as a means of payment for goods and services, and because KHQR already gives merchants and consumers near-universal interoperable QR payments, Bitcoin’s plausible Cambodian niches are narrower: savings/speculation, offshore transfers, informal P2P conversion, and fraud/laundering abuse. That conclusion is partly an inference, but it is a strong one grounded in the NBC rules and Bakong’s scale. citeturn5view5turn31search6turn31search3turn20view0
Adoption proxy chart
xychart-beta
title "Bakong registered customers"
x-axis ["2020","2021","2022","2023"]
y-axis "Thousands of registered customers" 0 --> 650
bar [45.57,288.43,523.64,598.09]NBC’s 2023 Annual Report shows Bakong registered-customer growth from roughly 45.6 thousand in 2020 to 598.1 thousand in 2023. Public, official time-series data of similar quality for Bitcoin ownership in Cambodia were not located; the best public country estimate found was Triple-A’s 2024 estimate of about 580,000 crypto owners, or 3.4% of the population. citeturn8search4turn25search2
Market structure, exchanges, adoption, merchants, and remittances
CAFIU’s 2025 National Risk Assessment is the best official snapshot of actual market structure. It says Cambodian users mainly access crypto through foreign and unregulated exchanges such as Binance, OKX, and Huobi, while P2P traders and informal brokers using social media play a central role in converting fiat to virtual assets. It also says users commonly rely on self-custody wallets such as MetaMask and Trust Wallet, or custodial wallets tied to foreign platforms. That description is important because it means the real Cambodian Bitcoin market is mostly offshore and extra-territorial, not domestic and licensed. citeturn20view0
Adoption evidence is sparse and uneven. Triple-A estimates around 580,000 Cambodians owned cryptocurrency in 2024, equal to 3.4% of the population. A 2025 Cambodian academic survey of 258 respondents who already had crypto experience found the sample was concentrated in Phnom Penh, skewed toward ages 18–30, and largely salaried employees—but because the sample was self-selected through social media and not nationally representative, it should be treated as suggestive rather than definitive. The safest conclusion is that Cambodian crypto use appears urban, digitally literate, and concentrated among younger, connected users, but the country still lacks robust public demographic statistics on Bitcoin specifically. citeturn25search2turn27search2
Merchant acceptance is where the contrast with Bakong is starkest. I did not locate any official Cambodian registry showing large-scale merchant acceptance of Bitcoin, while NBC repeatedly documents millions of KHQR merchant locations and cross-border usage built on the Bakong rail. Because NBC’s Article 21 forbids CASPs from promoting cryptoassets as payment for goods and services, and because KHQR has already achieved scale, the evidence supports the view that formal merchant acceptance of Bitcoin in Cambodia is marginal at best and mostly informal or anecdotal. citeturn5view5turn31search6turn31search3
Remittances are more nuanced. Cambodia receives material remittance inflows—6.1% of GDP in 2024 by World Bank data—and CAFIU specifically notes that USDT and USDC are increasingly used for remittances and cross-border settlements. But it is notable that the official example is stablecoins, not Bitcoin, and that the same report links those channels to AML/CFT vulnerabilities and informal P2P markets. Meanwhile, NBC is aggressively expanding formal cross-border QR rails using Bakong and partner payment systems. The implication is that the strongest crypto remittance use-case in Cambodia is likely stablecoin-based and informal, while the state’s preferred answer is Bakong-linked regulated interoperability. citeturn28search2turn20view0turn31search4turn31search8turn31search3
Platforms and P2P markets
| Platform / market | Cambodia status | KYC posture | Fiat on/off ramps | Assessment |
|---|---|---|---|---|
| SERC sandbox firms such as Royal Group Exchange, WNK System, XP Experience Point, CTX-98, KMC Kinesis Money, Eurasia Digital Asset Exchange | Allowed only inside the securities-sector FinTech sandbox for trial businesses such as digital-asset trading, derivatives, wallet management, and in RGX’s case P2P trading. CAFIU still says no domestic VASPs/CASPs were yet authorized/supervised as live operators. citeturn15search1turn20view0 | Public retail KYC disclosures were not located. | Public consumer fiat-rail details were not located. | Regulatory experimentation exists, but do not confuse sandbox status with full operating license. |
| Binance | Named by Cambodia’s NRA II as a primary entry point for Cambodian users, but operates outside Cambodian jurisdiction. citeturn20view0 | Exchange-wide KYC / identity verification required for full functionality. citeturn33search4turn33search8 | Platform advertises card, bank transfer, and P2P options on a platform-wide basis; Cambodia-specific banking rails were not clearly documented in the materials located. citeturn33search4turn33search8 | Major offshore access point; unlicensed domestically. |
| OKX | Named by Cambodia’s NRA II as a primary entry point for Cambodian users; offshore relative to Cambodia. citeturn20view0 | OKX states advanced identity verification is required to trade, deposit, and withdraw. citeturn34search1turn34search4 | OKX offers P2P/C2C trading and card/third-party channels on a platform-wide basis. citeturn34search11turn34search9turn34search7 | Major offshore access point; unlicensed domestically. |
| HTX / Huobi | Named by Cambodia’s NRA II as a primary entry point for Cambodian users; offshore relative to Cambodia. citeturn20view0 | HTX says KYC unlocks trading permissions and fiat access. citeturn35search0turn35search7 | HTX offers C2C/P2P, cards, and bank transfer on a platform-wide basis. citeturn35search5turn35search8 | Major offshore access point; unlicensed domestically. |
| Informal P2P / social-media brokers | Officially described by CAFIU as central to Cambodian fiat-to-virtual conversions. citeturn20view0 | None to highly variable. citeturn20view0 | Cash, bank transfer, and ad hoc mobile-payment style settlement are plausible, but public standardized disclosure is absent. citeturn20view0 | High-friction, high-risk, and hardest to supervise. |
| Huione Crypto / Huione ecosystem | FinCEN says Huione Group included a Cambodian VASP component and was a major laundering node; not a legitimate retail option. citeturn23search1turn23search0 | FinCEN found absent or ineffective AML/KYC policies among Huione components. citeturn23search1 | Network mixed fiat payment services, crypto services, and online illicit-market infrastructure. citeturn23search1turn41search2 | Treat as a high-risk criminal-finance case, not a normal exchange. |
Scams, money laundering, and enforcement history
Cambodia’s official AML assessment rates the virtual-asset sector Medium High Risk and explicitly attributes that to scams, fraud schemes, informal remittance channels, illicit cross-border inflows, absence of licensing, dependence on P2P transfers, and weak blockchain-forensics capability. That assessment aligns with the pattern visible in Reuters, UN, and U.S. Treasury/DOJ actions: crypto in Cambodia has been heavily entangled with the region’s industrial-scale scam-centre economy. citeturn20view0turn38news33turn37search0
The first major modern external enforcement wave hit in September 2024, when OFAC sanctioned Cambodian tycoon Ly Yong Phat, L.Y.P. Group, and associated properties for human trafficking and forced labor tied to cyber and virtual-currency scams. In July 2024, Reuters had already reported that Huione Pay received more than $150,000 in crypto from a wallet linked to the Lazarus group, leading NBC to reiterate that the company was not allowed to deal in crypto. In May and October 2025, FinCEN first identified and then fully severed Huione Group from the U.S. financial system, alleging at least $4 billion in illicit proceeds laundered between August 2021 and January 2025, including funds from DPRK cyber heists and crypto investment scams. citeturn40search0turn22news41turn23search1turn23search0
The second major enforcement wave came in October 2025, when U.S. Treasury and the U.K. sanctioned the Prince Group network as a transnational criminal organization. DOJ simultaneously unsealed an indictment against Chen Zhi and filed what it described as a civil forfeiture action against approximately 127,271 bitcoin worth about $15 billion then in U.S. custody, allegedly tied to Cambodian forced-labor scam compounds running crypto investment fraud. In early 2026, U.S. prosecutions connected to Cambodia-based scam centers continued, including sentencing in cases involving tens of millions of dollars in laundered proceeds, while the DOJ’s Scam Center Strike Force announced further seizures, website takedowns, and recruitment-channel seizures linked to Cambodia. citeturn41search2turn39search1turn39search4turn39search6turn39search5turn39search0
Inside Cambodia, pressure finally translated into a more explicit domestic legal response in April 2026, when parliament passed a dedicated law targeting scam centres, money laundering, unauthorized data collection, and scam recruitment. Government-aligned reporting said investigations had already hit hundreds of locations and sent dozens of suspects to court, but Amnesty International’s June 2026 assessment argued the crackdowns remained incomplete and often ineffective, alleging police collusion and continued operation of many scam compounds. The result is a mixed enforcement picture: far more action than before, but still significant doubts about reach, consistency, and elite protection. citeturn36news20turn24search2turn24search4turn37news35
Notable incidents and enforcement actions
| Date | Actors | What happened | Outcome |
|---|---|---|---|
| July 2018 | NBC, securities regulator, police | Joint warning against unlicensed crypto activities. citeturn0search0turn1search0 | Set baseline prohibition. |
| July 2024 | Huione Pay, Lazarus-linked wallet, NBC | Reuters found Huione Pay received >$150k in crypto linked to DPRK hackers; NBC said the company was not allowed to deal in crypto. citeturn22news41 | Public central-bank reprimand; case amplified AML concerns. |
| September 2024 | OFAC, Ly Yong Phat / L.Y.P. Group | U.S. sanctions tied to trafficking and forced labor in cyber/virtual-currency scam centres. citeturn40search0 | Assets blocked for U.S. persons; Cambodia-linked scam economy moved into sanctions spotlight. |
| May 2025 | FinCEN, Huione Group | FinCEN proposes Section 311 action, calling Huione a primary money-laundering concern. citeturn23search1 | Proposed cut-off from U.S. financial system. |
| October 2025 | FinCEN, OFAC, U.K. FCDO, Huione Group, Prince Group | Huione severed from U.S. financial system; Prince Group sanctioned as TCO. citeturn23search0turn41search2 | Major international isolation of two Cambodia-linked networks. |
| October 2025 | DOJ, Chen Zhi / Prince Group | U.S. indictment and civil forfeiture action against ~127,271 BTC linked to Cambodian scam compounds. citeturn39search1turn39search4 | Largest cited bitcoin forfeiture action in this Cambodia context. |
| April 2026 | Cambodian parliament / Ministry of Justice | First dedicated cybercrime law targeting scam centres, laundering, recruitment, and data harvesting. citeturn36news20 | Stronger domestic statutory basis for crackdown. |
| April 2026 | OFAC, Kok An network | Treasury sanctions Cambodian senator Kok An and associated scam-centre network. citeturn40search4turn41search4 | Expanded sanctions pressure into politically connected Cambodian networks. |
| April–June 2026 | DOJ Scam Center Strike Force; Amnesty International | DOJ seizes/freeze assets and disrupts Cambodia-linked scam infrastructure; Amnesty says many Cambodian scam compounds still operating. citeturn39search0turn39search2turn37news35 | Shows simultaneous escalation of pressure and persistent enforcement gaps. |
Taxation, macroeconomic effects, and assessment
The taxation picture remains murky. I found no dedicated public Cambodian tax guidance that clearly states how Bitcoin gains, trading income, or crypto-to-crypto exchanges are taxed for individuals or firms. Cambodia did issue broader guidance on capital gains in 2025, but the categories described in summaries of the official Prakas covered six classes of assets and did not expressly include cryptoassets. That does not mean crypto is tax-free; it means the public crypto-specific rulebook is still underdeveloped or not publicly available in the sources located. citeturn12search1turn12search5
From a macro perspective, Cambodia is unusually resistant to Bitcoin-as-money because it is already a dual-currency, digitally intermediated economy. The World Bank puts Cambodia’s GDP at $46.35 billion in 2024 and personal remittances at 6.1% of GDP. CAFIU says banking assets reached $92.35 billion, or 199.9% of GDP, by end-2024. Meanwhile, Bakong/KHQR has scaled to millions of merchant endpoints and cross-border QR corridors. In a country like this, Bitcoin does not arrive to fill a payments vacuum; it competes with an already-functioning, state-backed digital-payment stack and with entrenched USD usage. citeturn28search2turn20view0turn31search6turn31search3
The economic upside of crypto for Cambodia appears limited and selective. The official case for allowing some cryptoasset services seems to be innovation, custody, exchange, and perhaps safer integration of stablecoin-like instruments into supervised finance. But the downside has been large: reputational damage, sanctions exposure, illicit-capital concerns, pressure on the banking system’s credibility, and the possibility that scam-centre economics distort local investment, tourism, and financial intermediation. Cambodia’s own justice minister said the scam-centre problem had damaged the economy, tourism, and investment, and the 2025 NRA warns that money laundering can undermine the attractiveness of the financial sector. citeturn36news20turn18view0
The bottom-line analytical judgment is therefore this: Bitcoin in Cambodia is legal enough to be accessible offshore, but not legitimate enough to become a mainstream formal financial product or payment rail on current evidence. Stablecoins have a better chance of entering the regulated perimeter. Bakong dominates retail digital payments. Offshore exchanges and informal P2P channels remain the actual user route. And the country’s defining crypto imprint on the global stage has been shaped less by grassroots Bitcoinization than by regional scam-centre and laundering enforcement. citeturn20view0turn5view5turn31search6turn23search1turn41search2
Open questions and limitations
The largest data gap is taxation: no clear asset-specific GDT/MEF guidance for Bitcoin was located in publicly accessible official materials through June 2026. citeturn12search1turn12search5
The second major gap is licensed-market clarity. Official materials simultaneously show SERC sandbox experiments and CAFIU’s statement that no domestic VASPs/CASPs were yet authorized or supervised. The most conservative reading is that sandbox authorizations are not equivalent to full live licenses, but official public registers remain incomplete. citeturn15search1turn20view0
The third gap is user and merchant data. Public, Cambodia-specific Bitcoin time series, wallet counts, and merchant-acceptance data are very limited. The best public quantitative signals are a country ownership estimate from Triple-A and Bakong/KHQR statistics from NBC, which are much stronger for formal digital payments than for Bitcoin itself. citeturn25search2turn8search4turn31search6
The fourth gap is enforcement transparency inside Cambodia. International sanctions, Reuters reporting, and U.S. court actions are rich in detail; Cambodian public records on investigations, prosecutions, confiscations, and final judgments in crypto-linked scam cases are far thinner in the materials located. Amnesty’s June 2026 critique underscores that gap. citeturn39search1turn40search4turn37news35