By CertiK service

For each security service, see which jurisdictions trigger it and how attractive each market is right now.

Jurisdictions triggering
14
Norms triggering
31
High-maturity markets
6

Top markets for Due Diligence

CountryRegionLead regulatorMaturityNext deadlineDaysScore
BRBrazilLATAMBCBHigh2026-10-3015582.9
DEGermanyEUBundestagHigh63.4
HKHong KongAPACSFCHigh63.4
GBUnited KingdomEUFCAHigh2027-10-2551563.2
SGSingaporeAPACMASHigh60.6
FRFranceEUParlementHigh57.7
AEUnited Arab EmiratesMENACBUAEMedium56.8
ARArgentinaLATAMBCRAMedium56.8
TRTürkiyeMENAnullMedium56.8
USUnited StatesNAIRSMedium51.0
ITItalyEUParlamento ItalianoMedium48.2
ZASouth AfricaAfricaSARSMedium48.2
UYUruguayLATAMParlamentoMedium45.3
KRSouth KoreaAPACFSCLow27.2

Norms that trigger Due Diligence

US1934-06-06
US Securities Exchange Act of 1934 (15 U.S.C. §78a et seq.) — regulates secondary markets, exchanges, brokers/dealers; created the SEC

This statute governs the secondary trading of securities in the U.S. It establishes registration and reporting requirements for exchanges, brokers, dealers, and issuers.

HK2025-11-03
SFC Circulars of 2025-11-03 — expansion of products and global liquidity — VATPs may distribute VA-exposure products, tokenised securities, stablecoins; conduct staking; trust/client accounts; integrate order books with global affiliates for shared liquidity; relax 12-month track-record for professional-only tokens

This guidance expands the scope for licensed Virtual Asset Trading Platforms (VATPs), permitting new products like tokenized securities and stablecoins, staking, and shared global liquidity.

HK2023-05-23
Consultation Conclusions on the Proposed Regulatory Requirements for Virtual Asset Trading Platform Operators Licensed by the Securities and Futures Commission

This document proposes a comprehensive licensing and regulatory framework for centralized virtual asset trading platforms operating in or marketing to Hong Kong. It covers requirements for custody, AML/CFT, token admission, and introduces investor protection measures to allow access for retail investors.

HK2019-08-26
Banking Ordinance (Cap. 155)

This ordinance requires Authorized Institutions (AIs) to maintain adequate systems of control and comply with AML/CFT obligations under the AMLO, including customer due diligence.

AE2024-08-01
CBUAE Payment Token Services Regulation (PTSR) — Circular No. 2 of 2024 (effective Aug 2024) — stablecoin regime; distinguishes Dirham Payment Token (AED-backed, CBUAE-licensed issuer) from Foreign Payment Token (non-AED, CBUAE-registered issuer); licences issuance, custody/transfer, conversion; bans algorithmic stablecoins and privacy tokens as means of payment; 100% reserves; applies UAE-wide except DIFC/ADGM (but reaches VARA entities)

This regulation establishes a licensing and registration framework for payment token (stablecoin) services in the UAE. It covers issuance, custody, and conversion, distinguishing between AED-backed tokens (licensed) and foreign currency-backed tokens (registered).

IT2007-11-21
Italian Legislative Decree 231/2007 — Anti-Money Laundering Decree — transposed EU AML directives; basis for KYC/CDD, monitoring and reporting; brings crypto operators within obligated parties

This decree is Italy's primary anti-money laundering (AML) law, establishing obligations for customer due diligence, record-keeping, and suspicious activity reporting. It explicitly includes crypto-asset service providers as obligated entities.

ZA2001-12-03
Financial Intelligence Centre Act 38 of 2001 (FICA) — base AML/CFT law; since December 2022, CASPs are 'accountable institutions' under Schedule 1 Item 22, with CDD/KYC, monitoring, recordkeeping and suspicious/cash transaction reporting to the FIC; an FSP CASP providing advice/intermediation also registers under Item 12 (double registration possible)

This law designates Crypto Asset Service Providers (CASPs) as 'accountable institutions' under its AML/CFT framework. It imposes duties including customer due diligence (CDD/KYC), transaction monitoring, and reporting to the Financial Intelligence Centre (FIC).

UY2017-12-20
Uruguay Law No. 19,574 (Ley Integral contra el Lavado de Activos) — base AML/CFT law; defines obligated entities, CDD/KYC, monitoring and reporting duties; PSAVs are obligated entities (LAV reinforces AML focus for financial services)

This is Uruguay's foundational Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) law. It defines obligated entities and their duties for customer due diligence (CDD), monitoring, and suspicious transaction reporting.

SG2023-08-15
MAS Stablecoin Regulatory Framework (SCS) — finalized 15 August 2023 — applies to single-currency stablecoins (SGD or G10) issued in Singapore; 100% high-quality reserves with monthly independent attestation + annual audit; segregation, par redemption, disclosures

This framework applies to single-currency stablecoins (SCS) issued in Singapore and pegged to the Singapore Dollar or any G10 currency. It establishes requirements for reserve assets, capital, redemption, and disclosure.

KoFIU — Korea Financial Intelligence Unit (under FSC) — FIU receiving and analysing STRs; administers VASP registration

This text describes the role of the KoFIU in administering South Korea's AML/CFT framework. This includes receiving Suspicious Transaction Reports (STRs), Customer Due Diligence (CDD), and managing the registration of Virtual Asset Service Providers (VASPs).

GB2023-06-08
FCA FG23/3 — Finalised non-handbook guidance on cryptoasset financial promotions — practical application including store-of-value claims, rates of return, on/off-ramp

This guidance clarifies rules for communicating or approving financial promotions for qualifying cryptoassets in the UK. It focuses on ensuring promotions are fair, clear, and not misleading, covering various models like stablecoins and yield products.

GB2025-11-01
Bank of England — Proposed regulatory regime for sterling-denominated systemic stablecoins (CP 2025) — systemic GBP stablecoins get dual supervision: prudential by BoE + conduct/AML by FCA; Special Administration Regime for orderly wind-down

This consultation paper proposes a regulatory regime for sterling-denominated systemic stablecoins in the UK. It focuses on prudential requirements like backing assets, capital, and redemption rights to ensure financial stability.

AR2025-03-14
CNV General Resolution No. 1058/2025 — FULL PSAV REGULATION; imposes registration, cybersecurity, asset custody, AML, and risk-disclosure duties; requires ANNUAL SYSTEMS AUDIT; sets adequacy deadlines; CNV may suspend/revoke registrations; unregistered PSAVs may be judicially blocked

This regulation establishes a mandatory registration regime for Virtual Asset Service Providers (VASPs) in Argentina. It imposes comprehensive duties including AML, cybersecurity, asset segregation, and public proof-of-reserves.

DE2017-06-30
BDSG — Bundesdatenschutzgesetz (German Federal Data Protection Act) — domestic GDPR complement; governs personal data in KYC/onboarding

This is Germany's Federal Data Protection Act, which complements the GDPR. It governs the processing of personal data, impacting crypto services during KYC and client onboarding.

DE2023-10-17
EU DAC8 Directive 2023/2226 — implements OECD CARF in EU; automatic exchange of crypto-asset tax information

This directive establishes a framework for the mandatory automatic exchange of tax-relevant information on crypto-assets among EU Member States. It requires crypto-asset service providers to perform due diligence on users and report their transaction data to national tax authorities.

DE2018-06-08
WpPG — Wertpapierprospektgesetz (German Securities Prospectus Act) — companion of EU Prospectus Regulation; applies to public offerings of security tokens

This act governs the requirement to prepare, have approved by the regulator, and publish a prospectus for public offerings of securities, including security tokens.

DE2017-06-23
GwG — Geldwäschegesetz (Anti-Money Laundering Act) — central AML/CFT law; after FinmadiG, CASPs and ART issuers are explicitly obliged entities (§2 GwG) with KYC, monitoring and FIU reporting duties

This is Germany's central Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) law. It defines obliged entities, including crypto-asset service providers, and mandates risk management, customer due diligence (KYC), monitoring, and reporting obligations.

DE2023-05-22
Regulation on enhanced due diligence requirements for the transfer of crypto assets (Crypto Asset Transfer Regulation - KryptoWTransferV)

This regulation establishes enhanced due diligence requirements for the transfer of crypto-assets. It focuses on anti-money laundering (AML) obligations.

SFN Security Manual

This guidance outlines the technical and security framework for Brazil's National Financial System Network (RSFN). It covers data communication, accredited IT service providers (PSTIs), and systems like the Pix instant payment network.

BR2025-11-10
BCB Resolution No. 520 of 2025

This resolution establishes a licensing framework for Virtual Asset Service Providers (VASPs) in Brazil. It defines VASP categories, operational rules, governance, and asset segregation requirements.

BR2026-01-22
BCB Normative Instruction No. 701 of 2026 — technical-certification requirements by independent qualified firms for crypto-asset intermediation/custody licenses (anchors Res. 520 arts. 20 and 23)

This norm details the requirements for a mandatory technical certification by an independent firm. This certification is a prerequisite for entities seeking to provide crypto-asset intermediation and custody services in Brazil.

BR2025-11-10
BCB Resolution No. 521 of 2025

This regulation integrates Virtual Asset Service Providers (VASPs) into Brazil's foreign exchange market framework. It establishes rules and reporting requirements for international payments and transfers involving virtual assets.

SFN Services Catalog

This document is a catalog of technical specifications, manuals, and implementation timelines for services on Brazil's National Financial System Network (RSFN). It includes standards for systems like the Instant Payment System (SPI) and Pix.

SFN Network Manual

This guidance outlines technical and security standards for Brazil's National Financial System Network (RSFN). It covers IT service providers (PSTIs), the Pix instant payment system, and communication protocols.

BR2008-08-08
CVM Instruction No. 471 of 2008

This instruction from 2008 regulates a simplified registration procedure for public offerings of traditional securities. It delegates the preliminary analysis of offerings to authorized self-regulatory entities.

BR2025-11-10
BCB Resolution No. 519 of 2025

This resolution establishes the authorization and licensing process for Virtual Asset Service Providers (VASPs) and other financial brokerage firms in Brazil.

BR2022-12-31
BCB Resolution No. 277 of 2022 — FX market rules (amended by Res. 521 to include crypto operations)

This resolution regulates the Brazilian foreign exchange (FX) market. It was amended to include virtual asset services, establishing an authorization regime for VASPs to operate within the FX framework.

FR2024-10-15
French Ordonnance n° 2024-937 of 15 October 2024 — extends AML/CFT (LCB-FT) regime to CASPs; transposes EU TFR 2023/1113 into French law; enhanced due diligence for crypto transfers

This ordinance extends the French AML/CFT regime to Crypto-Asset Service Providers (CASPs). It transposes the EU's Transfer of Funds Regulation (TFR) into national law, mandating due diligence for crypto transfers.

TR2024-07-02
Law on Amendments to the Capital Markets Law (Law No. 7518)

This law establishes a comprehensive licensing and supervision framework for Crypto-Asset Service Providers (CASPs) in Türkiye. It empowers the Capital Markets Board to regulate their activities, with technical criteria for IT systems set by TÜBİTAK.

Banking Law (Law No. 5411)

This law regulates the establishment, activities, corporate governance, and supervision of traditional banking and financial institutions in Turkey.

TR2025-02-25
MASAK Travel Rule Guidelines (Effective February 25, 2025)

This guidance clarifies AML/CFT obligations for Crypto Asset Service Providers (CASPs). It covers customer identification, enhanced due diligence, and Travel Rule implementation.