On September 21st, 2021, the Estonian Ministry of Finance published a draft law to amend the Money Laundering and Terrorist Financing Prevention Act (the AML Act). The law is now undergoing inter-agency consultations, but it is set to go into force on February 1, 2022.
The deadline for regulated crypto firms to put their operations and paperwork into conformity with New Estonian AML Act is March 18th, 2022. In this post, we examine the Ministry of Justice’s most recent modifications, which were announced on December 21st, and provide a full explanation of the significant changes.
The high points
The New Estonian AML Act affects virtual currencies and are aimed at Estonian Virtual Assets Service Providers (VASPs), such as crypto exchanges and wallets. Decentralized platforms, initial coin offerings (ICOs), and some other services will be included in the VASP category if the law is enacted.
Since 2020, VASPs have been subject to the same regulations as financial institutions. As a result, they must adhere to the AML Act and verify their users’ identities. In addition, VASPs can only operate in Estonia if they obtain the Financial Intelligence Unit (FIU).
Estonia is one of the first jurisdictions to change its legislation to comply with the FATF’s Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers.
The modifications include the FATF Travel Rule, tighter license requirements, and an expansion of the AML Act’s reach to include new virtual currency businesses. We’ve compiled a list of the most significant changes.
Before: The term only included virtual currency exchanges and wallet services.
After: Definition of the term “virtual currency service” in New Estonian AML Act is expanded to include:
As a result, the following firms are now considered VASPs and must adhere to AML duties and license requirements:
Businesses should use the FATF’s functional approach to each definition to determine if they are VASPs.
Businesses must assess the services they provide under this method, rather than relying primarily on the words they use to define themselves. For example, they must consider what transactions are carried out to deliver their service, who the participants are, and how the ownership of the currency changes as a result of the transaction.
Before: A VASP license cost €3,300, and a minimum share capital of €12,000 was required.
After: The proposed rule calls for a higher licensing price, as well as certain extra provider fees. What has changed is as follows:
Before: Businesses were obliged to disclose information about their service, internal rules and processes, and more under the AML Act (see the entire list in section 70 of the Act).
After: To obtain a license, businesses must offer further information and papers. These are some of them:
The whole list may be found on page 70 of the proposed legislation. If a provider wants to use subsidiaries, the same information must be filed for them as well.
Updated requirements for the management board
Before: The FIU wanted verification of the board of directors’ education, professional experience, and previous positions, among other things.
After: These obligations for the management board and contact individuals are spelled out in the new rule. The two primary demands are as follows:
As mentioned in previous editions, members of the management body cannot have a bad business reputation or an unresolved criminal term.
Grounds for license refusal
Before: A business could be denied a license due to a lack of AML procedures, payment account(s) in Estonia, and more.
After: The amendments introduce additional grounds for VASP licensing refusal. These include:
The whole list may be seen on page 72 of the proposed legislation. The FIU chooses whether or not to grant a license within 60 working days of receiving the necessary papers and information.
Within two years of an existing license being revoked or the FIU refusing to issue a license, a firm, members of its management body, or holders of a qualifying holding will not be allowed to apply for a new license.
Before: A license might be canceled if a person repeatedly fails to comply with the FIU’s demands or if non-compliance is not handled within a certain time limit (the AML Act, section 75).
After: Additional grounds for revocation are introduced, including:
The Act’s sections 75 (1st and 2nd parts) include a complete list of causes for license revocation. The FIU will cancel VASPs’ licenses if they do not bring their activities into accordance with the proposed modifications and submit all required papers.
Before: The Travel Rule applied only to banks and other financial institutions.
After: The FATF Travel Rule must be followed by VASPs. When executing a virtual currency exchange or transfer, providers must collect data about the originator and beneficiary of the transaction and communicate it with all parties involved.
The information that VASPs must gather about the originator vary somewhat depending on whether the originator is a natural or legal person. It comprises the following for natural persons:
For legal persons, it includes:
VASPs must collect the same information on both natural and legal persons as they do on the transaction’s receiver. It contains the name of the user as well as the payment account or virtual currency wallet identity.
VASPs will be required to keep records acquired in accordance with the Travel Rule for a period of time.
The goal of these changes is to lower the dangers associated with virtual currency. The management board is responsible for bringing their company into conformity by March 18th and submitting an audit report by August 15th, 2022.
Noncompliance with the AML Act might result in the cancellation of a license for those who ignore the new regulations.
The amended New Estonian AML Act also adds three new offenses:
These violations can lead to a fine of up to 300 fine units (one fine unit equals €4) for a natural person and a fine of up to €400,000 for a legal person.
We’ll keep an eye on the changes and update this post after the Act goes into force. For more information about anti-money laundering rules in Estonia and other jurisdictions you are interested in, please contact our specialists. You can also see our offers in the category “Ready-made companies” and “Licenses for sale”.