Crypto Overview in Sri Lanka

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

Cryptocurrency is not legal tender in Sri Lanka, and no virtual asset service provider has been licensed or authorised by the Central Bank of Sri Lanka. At the same time, holding or investing in crypto is not prohibited. In September 2025 the CBSL Governor publicly clarified that there are no legal barriers to individuals investing in cryptocurrency, while reiterating that the absence of regulation means investors bear all risk. The Central Bank has issued a series of public notices warning of these risks, including its April 2021 notice on virtual currency risks, its July 2022 notice during the height of the economic crisis, and a March 2023 notice referencing global exchange failures.

The Central Bank of Sri Lanka Act No. 16 of 2023 grants the CBSL explicit authority to regulate virtual assets, but enabling regulations have not yet been issued. A virtual asset concept paper was presented by the Deputy Minister of Digital Economy to the National Coordinating Committee on AML/CFT in February 2026, signalling that a formal framework is being prepared. The sub-committee driving this work includes approximately 33 members from nearly 15 institutions, and is expected to deliver a white paper for Cabinet consideration ahead of the APG Mutual Evaluation site visit in October 2026.

Tax Treatment

Sri Lanka has no crypto-specific tax legislation, but existing rules under the Inland Revenue Act No. 24 of 2017 apply by interpretation. Capital gains on the disposal of investment assets, including cryptocurrencies, are subject to a 10% Capital Gains Tax under Chapter IV (Sections 36 to 51) of the Act. The Inland Revenue (Amendment) Act No. 2 of 2025, passed by Parliament, proposes raising this rate to 15% from the year of assessment 2026/27; taxpayers should confirm whether this amendment has been gazetted before relying on the current rate. Income from mining, staking, or trading conducted as a business is taxed under the normal business-income schedules. From 1 April 2026, an 18% Value Added Tax applies to non-resident providers of digital services to Sri Lankan customers, which captures international cryptocurrency platforms serving residents. The Inland Revenue Department has not yet issued a dedicated crypto guidance circular, so interpretive treatment continues until a formal framework is gazetted.

Regulatory Oversight

The Central Bank of Sri Lanka is the lead authority, hosting the Financial Intelligence Unit and the FinTech Regulatory Sandbox. The Securities and Exchange Commission of Sri Lanka would assume jurisdiction over any virtual assets deemed to be securities under the SEC Act No. 19 of 2021, but has not issued formal crypto guidance. The Inland Revenue Department administers capital gains and income tax. The Ministry of Digital Economy is the policy lead for the emerging framework and chairs the VASP sub-committee. The Financial Intelligence Unit is conducting a three-phase survey of virtual asset service providers as a precursor to a registration regime under amended FTRA.

Business Environment

Banking Relationships

Banking access for crypto users is constrained by the Foreign Exchange Act Direction No. 03 of 2021, issued in March 2021, which prohibits the use of debit and credit cards issued in Sri Lanka for foreign payments related to cryptocurrency. Authorised dealer banks are barred from facilitating crypto-related foreign exchange transactions, and virtual currencies are not a permitted category of foreign investment under the Foreign Exchange Act. In practice this has pushed activity into peer-to-peer channels and informal remittance corridors. The forex restrictions, originally tightened during the 2022 sovereign default and balance-of-payments crisis, remain in force as part of the IMF Extended Fund Facility programme entered in 2023.

Innovation Support

The CBSL operates a FinTech Regulatory Sandbox, launched in February 2020, which accepts applications on a rolling basis and allows a nine-month live-testing window, extendable by three months, for fintech firms partnered with a CBSL-licensed institution. Applications are reviewed by the Financial Technology Advancement Committee, chaired by a Deputy Governor of the CBSL, within 30 working days. The CBSL has also completed a proof-of-concept for a blockchain-based shared Know Your Customer platform involving ten commercial banks and three technology vendor consortia. The inaugural Sri Lanka Fintech Summit in 2025 advanced discussions on a “Sandbox 2.0” model to remove approval bottlenecks, and included a dedicated roundtable on digital assets and CBDCs, with participants calling for clearer definition of overlapping jurisdictions between the CBSL and the Colombo Stock Exchange. The 2026 budget allocates roughly LKR 30 billion for digitalisation initiatives including the Unique Digital Identity programme.

Crypto License in Sri Lanka

Sri Lanka has no operational licensing or registration regime for virtual asset service providers. The Central Bank of Sri Lanka has issued zero authorisations for cryptocurrency exchanges, custodians, brokers, or advisory services. A registration-based VASP regime is being developed through a structured three-phase approach led by the Financial Intelligence Unit, with the objective of transposing FATF Recommendation 15 on virtual assets ahead of the APG Mutual Evaluation site visit in October 2026.

Current Status

Phase 1 of the FIU’s VASP survey involved identifying existing operators through newspaper advertisements and publicly available information. Phase 2 consists of a targeted questionnaire to existing VASP operators, gathering data on business models, transaction volumes, and AML/CFT controls; this phase is currently in progress. Phase 3 will establish a prudential regulatory framework, to be presented to Cabinet as a white paper by the sub-committee chaired by the Deputy Minister of Digital Economy. Until that framework is enacted, no entity can obtain a domestic VASP licence. Sri Lankan users access international platforms directly, typically through peer-to-peer channels given the card-based foreign-payment restrictions under FX Direction No. 03 of 2021.

Why No Framework Yet

Three structural factors have delayed a formal VASP regime. First, the 2022 sovereign default and ensuing IMF Extended Fund Facility programme have required disciplined foreign exchange and financial integrity policies that are difficult to reconcile with open crypto capital flows. Second, the CBSL and the Securities and Exchange Commission of Sri Lanka have overlapping jurisdictions: the CBSL governs payment and monetary stability matters, while the SEC SL would regulate virtual assets classified as securities under the SEC Act No. 19 of 2021, and the boundary between those categories is unresolved. Third, the Ministry of Digital Economy’s role as policy lead for the emerging framework is relatively recent, and inter-agency coordination across approximately 15 institutions adds time to the legislative drafting process. The upcoming APG Mutual Evaluation in October 2026 is now the principal external deadline compelling action, since failure to transpose FATF Recommendation 15 carries re-greylisting risk.

What Operators Should Know

Firms wishing to position for a future VASP registration should engage with the FIU’s Phase 2 questionnaire to establish a compliance record and demonstrate AML/CFT readiness. Any entity operating a FinTech product can apply to the CBSL FinTech Regulatory Sandbox, provided it partners with a CBSL-licensed financial institution and undergoes independent third-party verification. The expected legislative path is a registration-based VASP regime under amendments to the Financial Transactions Reporting Act No. 6 of 2006, complemented by sector guidance from the Securities and Exchange Commission of Sri Lanka and the Inland Revenue Department. An 18% VAT on non-resident digital service providers supplying Sri Lankan customers came into effect from 1 April 2026, so international platforms with material SL user bases should assess their VAT registration obligations under this rule independently of the VASP framework.

Market Characteristics

Adoption Patterns

Cryptocurrency interest accelerated sharply during the 2022 economic crisis, when sovereign default, currency collapse, triple-digit inflation, and strict forex controls drove demand for offshore savings vehicles and stablecoin-denominated dollar exposure. The number of Sri Lankan crypto users is estimated at roughly 420,000, or close to two percent of the population, although the absence of licensed local on-ramps means actual activity is difficult to measure precisely. Peer-to-peer trading, diaspora remittances from Gulf workers, and dollar-proxy stablecoin savings dominate practical use cases. Domestic digital payment alternatives, in particular the LankaPay network, have expanded contactless and QR rails as a regulator-preferred substitute.

Industry Focus

There is no licensed domestic exchange industry. The most visible local activity sits in fintech firms applying to the CBSL sandbox, blockchain infrastructure pilots such as the shared KYC platform, and a small community of developers and educators. Activity is structurally constrained by the foreign exchange controls and the absence of banking rails for virtual asset service providers, which means most commercial momentum is in compliance preparation, software services for overseas firms, and policy advocacy rather than in retail trading venues.

Regulatory Evolution

Sri Lanka’s regulatory direction is being shaped by three converging forces. First, the IMF programme and broader macro-stabilisation effort following the 2022 default require disciplined foreign exchange and financial integrity policies. Second, Sri Lanka is preparing for its third Mutual Evaluation by the Asia/Pacific Group on Money Laundering, with the site visit scheduled for October 2026; the country exited the FATF grey list in 2019 and the EU list in 2020 after extensive reforms, and failure to transpose FATF Recommendation 15 on virtual assets is a recognised re-listing risk driving the current three-phase VASP programme. Third, the Ministry of Digital Economy is positioning the country as a regional fintech and digital services hub, drawing on international templates including Singapore, the Philippines, and Malaysia. The most likely outcome is a registration-based VASP regime under amended FTRA, complemented by sector guidance from the SEC SL and the Inland Revenue Department, rather than an outright ban or an unregulated free-for-all.