KYC & AML Requirements for Crypto in Bahrain (CBB)

Bahrain as a MENA Crypto Hub

The Kingdom of Bahrain has become one of the more advanced jurisdictions in the Middle East and North Africa (MENA) for cryptocurrency and digital-asset rules. An early, detailed framework gave exchanges, blockchain firms, and digital-asset service providers a legally clear base from which to serve the wider MENA market.

The Central Bank of Bahrain (CBB) drove that clarity. It issued granular rules that give legal certainty while holding a high compliance bar aligned with international practice.

CBB Crypto-Asset Regulatory Framework

Volume 6: Capital Markets Regulation

CBB crypto-asset rules sit in Volume 6 of the CBB Rulebook, the capital-markets volume. The crypto-asset module landed in 2019 and has been updated as markets shifted. It sets a full licensing and supervisory regime for entities that deal in crypto assets in or from Bahrain.

Scope of Regulation

CBB crypto-asset rules reach:

• Crypto-asset exchanges: Platforms that facilitate the buying, selling, and trading of crypto assets.
• Crypto-asset trading services: Entities that deal in crypto assets on behalf of clients.
• Crypto-asset advisory services: Companies providing investment advice related to crypto assets.
• Crypto-asset portfolio management: Entities managing portfolios of crypto assets for clients.
• Crypto-asset custodial services: Companies providing secure storage and safekeeping of crypto assets.

Licensing Categories

The CBB offers several licensing categories for crypto-asset service providers:

• Category 1: Exchanges operating an organized marketplace for crypto assets.
• Category 2: Entities dealing in crypto assets as principal or agent.
• Category 3: Advisory and portfolio management services.
• Category 4: Custodial services for crypto assets.

Each category carries its own capital, governance, and operational bar. Every category still needs a full KYC and AML program.

KYC Requirements Under CBB Rules

Individual Customer Verification

Crypto-asset licensees must collect and verify:

• CPR (Central Population Register) number: For Bahraini nationals and residents, this is the primary identification number.
• National ID card or passport: Government-issued photo identification.
• Full legal name, date of birth, and nationality.
• Residential address with supporting documentation such as utility bills or bank statements.
• Source of funds and source of wealth declarations, particularly for significant transactions.
• Employment and income information.
• Purpose of the crypto asset relationship and expected transaction patterns.

Legal Entity Verification

Corporate customers must produce:

• Commercial registration (CR) from the Ministry of Industry and Commerce
• Memorandum and articles of association
• Identification and verification of all beneficial owners holding 10% or more
• Identification of authorized signatories and directors
• Audited financial statements for the most recent fiscal year
• Corporate resolution authorizing the crypto-asset account opening
• Group organizational structure where applicable

Enhanced Due Diligence

The CBB requires enhanced due diligence for:

• Politically Exposed Persons (PEPs) and their family members and close associates
• Non-resident customers
• Customers from jurisdictions identified as high-risk by FATF or the CBB
• Unusually large or complex transactions without clear economic purpose
• Correspondent relationships with foreign crypto-asset service providers
• Transactions involving privacy coins or mixing services

Joinble's AI-powered identity verification lets Bahraini crypto licensees apply those tiered due diligence steps without extra overhead. Document validation, biometric checks, and risk-based screening sit in one platform. For KYC essentials, see our guide on what is KYC.

AML/CFT Rulebook Compliance

The CBB AML/CFT Rulebook binds every licensed financial institution, crypto-asset service providers included. Core duties include:

Compliance Program

Every crypto licensee must put in place:

• A board-approved AML/CFT policy that reflects the institution's risk appetite
• A designated Money Laundering Reporting Officer (MLRO) who is senior, experienced, and has direct access to the board
• Written procedures covering customer identification, transaction monitoring, suspicious activity reporting, and record keeping
• Regular risk assessments at both the institutional and customer levels
• Employee training programs covering AML obligations, typologies, and red flag indicators
• Independent audit of the AML program at least annually

Transaction Monitoring

Crypto-asset service providers must run automated systems that watch for suspicious patterns, including:

• Transactions that are inconsistent with the customer's declared profile
• Rapid conversion between crypto assets and fiat currencies
• Transfers to or from wallets associated with sanctioned entities or darknet marketplaces
• Structuring of transactions to avoid reporting thresholds
• Use of multiple accounts or identities by the same beneficial owner
• Unusual patterns in trading volume or frequency

Suspicious Transaction Reporting

Once suspicion is spotted, licensees file a Suspicious Transaction Report (STR) with the CBB's Financial Intelligence Directorate. Filing must be prompt. The tipping-off ban stops licensees from telling the customer that a report has been made.

Record Keeping

KYC files, transaction records, and compliance correspondence must be kept for at least five years from the end of the business relationship or the date of the transaction, whichever is later.

Sandbox Framework

The CBB runs a Regulatory Sandbox that has drawn crypto and blockchain startups to Bahrain. Inside the sandbox, firms can:

• Test innovative products and services with real customers under controlled conditions
• Benefit from temporary regulatory relief on certain operational requirements
• Receive guidance and feedback from CBB regulators throughout the testing period
• Transition to full licensing upon successful completion of the sandbox program

Sandbox participants still need baseline KYC and AML measures that match their risk profile. The CBB works with each participant to set proportionate duties for the test phase.

Several well-known crypto firms have moved from Bahrain's sandbox into full licensing. That path has shown the program works as a route into regulated operation.

Travel Rule Implementation

Bahrain moved early on the FATF Travel Rule (Recommendation 16) for virtual-asset transfers. Originator and beneficiary data must be obtained, held, and transmitted for crypto transfers above defined thresholds.

Key Requirements

• Originator information: Name, account number (wallet address), and physical address, national ID number, or date and place of birth.
• Beneficiary information: Name and account number (wallet address).
• Threshold: The CBB has aligned with FATF's recommended threshold, though it may apply the rule to transactions below the threshold on a risk-sensitive basis.
• Technology solutions: Licensees must implement technical solutions to transmit Travel Rule data between counterpart VASPs. Several industry protocols and platforms have emerged to facilitate this.

Travel Rule compliance means spend on technology and on counterparty due diligence. Crypto firms must confirm that receiving institutions can accept and process Travel Rule data before they send transfers.

Bahrain's Strategic Position

Bahrain's crypto-rule set offers several strategic pluses:

• Regulatory clarity: Clear rules reduce legal uncertainty and attract institutional participation.
• Regional gateway: Licensed entities in Bahrain can access the broader GCC market from a well-regulated base.
• Government support: The Bahrain Economic Development Board (EDB) actively promotes the Kingdom as a fintech and crypto hub.
• Talent ecosystem: Growing pool of compliance and technology talent supported by government training initiatives.
• International recognition: Bahrain's regulatory framework is recognized by global institutions and facilitates cross-border partnerships.

Joinble's identity verification platform backs crypto firms that set up in Bahrain. Document verification, biometric matching, and compliance screening are in place so CBB standards can be met from day one. Learn more about KYC fundamentals.

Penalties for Non-Compliance

The CBB holds a wide enforcement toolkit:

• Financial penalties proportionate to the severity and duration of the violation
• License suspension or revocation for serious breaches
• Personal sanctions against directors and compliance officers
• Public disclosure of enforcement actions
• Referral to criminal authorities for suspected money laundering or terrorism financing

Frequently Asked Questions

What is the CBB's crypto-asset regulatory framework?

The CBB oversees crypto-asset service providers through Volume 6 of its Rulebook. That volume covers licensing categories for exchanges, trading services, advisory services, portfolio management, and custodial services. Every licensee must meet full KYC and AML duties.

What licensing categories are available for crypto companies in Bahrain?

Four main CBB categories exist: exchanges (Category 1), dealing services (Category 2), advisory and portfolio management (Category 3), and custodial services (Category 4). Capital, governance, and compliance bars differ by category.

What KYC documents must Bahraini crypto companies collect?

Individuals need a CPR number, national ID or passport, proof of address, source of funds, and employment information. Legal entities must supply commercial registration, beneficial ownership details, and audited financial statements.

How does Bahrain implement the FATF Travel Rule for crypto?

Crypto-asset service providers in Bahrain must obtain and transmit originator and beneficiary information for crypto transfers above FATF-recommended thresholds. Licensees need technical tools to pass Travel Rule data between counterpart VASPs.

Does Bahrain offer a regulatory sandbox for crypto companies?

Yes. The CBB sandbox lets crypto and blockchain firms test innovative services under supervision. Participants must apply baseline KYC measures and can move to full licensing after a successful run.

Why is Bahrain considered a MENA crypto hub?

Bahrain combines regulatory clarity, government support, a regional location, and a full licensing regime that has drawn global crypto firms. The CBB's early rule-making and the sandbox program have been central to that reputation.