CZ Backs ASEAN Crypto License Passporting: What Accounting Firms and CFOs Must Track Now
Changpeng Zhao, co-founder of Binance, used a public appearance at the ASEAN Tech Summit Manila 2026 to endorse a regional crypto license passporting framework for ASEAN, a proposal that, if adopted, would fundamentally reshape how crypto-asset businesses obtain regulatory approval across Southeast Asia and, by extension, how accounting firms and CFOs manage multi-jurisdiction compliance obligations for their digital asset clients.
What Was Said and Where
Speaking on Tuesday during the "One ASEAN, One Digital Economy" fireside chat, Zhao responded to an idea raised by Lito Villanueva, founding chair of FinTech Alliance PH. Villanueva proposed regulatory passporting or license portability: the principle that a firm licensed in one ASEAN member state should be able to enter others through a simplified approval process rather than completing a full licensing application from scratch in each jurisdiction.
Zhao agreed with the direction. He said regulators could still review incoming applicants, but should not require them to repeat the entire licensing exercise. His framing was pragmatic: more licensed platforms competing across borders would improve services and reduce costs for consumers. He acknowledged that cross-border policy coordination is harder to achieve politically than it is technically, describing the underlying technology as straightforward.
The Compliance Architecture Being Proposed
The passporting concept Zhao endorsed sits at the intersection of licensing law, AML/KYC frameworks, and cross-border regulatory recognition. For accounting firms advising crypto-asset businesses and for CFOs running treasury or payments operations that touch multiple ASEAN markets, understanding what passporting would and would not change is essential.
What Passporting Would Change
Under a full passport model, a crypto-asset service provider (CASP) authorised in, say, Singapore would notify its home regulator of the markets it intends to enter and the services it plans to offer. Host-country regulators would receive that notification and could impose conditions, but would not demand a parallel licensing process. The compliance burden shifts from repeated local applications to a single robust home-country authorisation, supplemented by host-country conditions.
For finance and compliance teams, this has direct resource implications. Multi-jurisdiction licensing projects currently require separate legal counsel, separate regulatory filings, separate capital adequacy demonstrations, and, in some cases, separate local entity structures. A passport regime would compress that into a home-licence-plus-notification model, reducing both time and cost.
What Passporting Would Not Change
Passporting does not mean regulatory harmonisation. Host jurisdictions would retain the right to impose local conduct requirements, customer protection rules, and AML/KYC standards. Firms operating under a passport would still need to ensure their transaction monitoring systems, suspicious activity reporting protocols, and customer due diligence processes meet the requirements of every market they serve. For CFOs relying on crypto bookkeeping software to maintain audit trails across multiple jurisdictions, the data architecture challenge does not disappear under a passport regime; it becomes more visible.
Existing ASEAN Frameworks That Inform the Debate
ASEAN does not currently operate a bloc-wide passport for crypto companies, but the region has used mutual recognition and streamlined approvals in adjacent financial sectors. Two existing mechanisms are directly relevant to the passporting conversation.
The ACMF Collective Investment Schemes Framework
The ASEAN Capital Markets Forum (ACMF) operates a Collective Investment Schemes Framework that allows a fund authorised in its home jurisdiction to be offered in participating host jurisdictions through a streamlined authorisation process. The framework was first operationalised across Malaysia, Singapore, and Thailand in 2014. The Philippines joined the ACMF in 2021. This program is narrower than the full crypto passport Zhao and Villanueva discussed: it applies to collective investment schemes, not to service providers, and host-market requirements still apply. But it demonstrates that ASEAN regulators have accepted the principle of mutual recognition in capital markets.
The ACMF Pass
The ACMF also operates the ACMF Pass, which allows eligible investment advisers licensed in one participating jurisdiction to receive fast-track registration to provide advisory services in another without obtaining a full second licence. Again, this is narrower than a crypto-specific passport, and host-market conditions attach, but the structural template is relevant.
Both frameworks show that regulatory architecture for mutual recognition already exists in ASEAN finance. The question for crypto is whether political will and AML standards are sufficiently aligned to extend a similar model to digital asset service providers.
The EU MiCA Parallel
The closest operational analogue to what Zhao described is the passporting mechanism embedded in the EU's Markets in Crypto-Assets Regulation (MiCA). Under MiCA, a CASP authorised by its home-country competent authority can passport its licence across all EU member states by notifying its home regulator of the countries and services it intends to cover. The home regulator then communicates that information to the relevant host-country authorities.
The MiCA passporting model for crypto-asset service providers across the EU is already in active use: ESMA's public CASP register reflects firms that have obtained home-country authorisation and are now passporting services into additional member states. That register and the notification process behind it represent the most mature example of cross-border crypto licensing simplification currently operating at scale.
For accounting firms and CFOs tracking the ASEAN debate, MiCA's passport regime is both a practical reference point and a policy benchmark. It shows what a working model looks like, and it highlights the compliance infrastructure that needs to be in place before passporting can function: common AML standards, a shared supervisory database, and clear rules on which regulator bears primary supervisory responsibility when a firm is active in multiple markets simultaneously.
Accounting and AML Implications for Firms and CFOs
The proposal is still at the advocacy stage. Zhao's comments are influential, but no ASEAN regulatory body has tabled a formal proposal for a crypto passport framework. That said, compliance teams should not wait for formal adoption before assessing the implications. The debate is moving, and firms that understand the structural questions now will be better positioned when concrete proposals emerge.
Licensing Inventory and Gap Analysis
Accounting firms advising crypto-asset businesses should prompt clients to map their current licensing footprint across ASEAN against the services they provide and the jurisdictions they touch. A passport regime rewards firms with clean, well-documented home-country authorisations. If a client's Singapore or Malaysian licence has outstanding conditions, unresolved AML findings, or capital adequacy gaps, those issues would need to be resolved before any passport benefit could be accessed.
Digital asset accounting software that generates jurisdiction-tagged transaction reports and maintains audit trails by entity is directly relevant here. Multi-entity, multi-jurisdiction clients will need that granularity to demonstrate clean compliance in each market to any host-country regulator reviewing a passport notification.
AML and KYC Standards Across ASEAN Markets
One of the core challenges Zhao acknowledged is that ASEAN member states maintain separate regulatory regimes. Singapore's MAS applies a detailed licensing and AML framework under the Payment Services Act. Malaysia's Securities Commission and Bank Negara Malaysia each have jurisdiction over different aspects of digital asset activity. Thailand's SEC has demonstrated a willingness to pursue enforcement action, as illustrated by Thailand's tightening enforcement posture toward digital asset firms. The Philippines operates its own virtual asset service provider framework under BSP guidance.
These are not equivalent regimes. A passport model would require regulators to agree on minimum standards, particularly around customer due diligence, beneficial ownership verification, and transaction monitoring thresholds. Until that alignment exists, firms should maintain jurisdiction-specific AML policies rather than assuming any regional convergence.
Entity Structure and Intercompany Accounting
Many crypto-asset businesses operating across ASEAN have structured separate legal entities in each jurisdiction, partly to satisfy local licensing requirements. A passport model could, over time, reduce the regulatory necessity for that structure. CFOs should model the accounting implications of potential entity consolidation in advance: transfer pricing documentation, intercompany eliminations, functional currency determinations, and the treatment of crypto assets held across different entity balance sheets all become more complex during structural transitions. Crypto bookkeeping software capable of handling multi-entity, multi-currency consolidation is a prerequisite for managing that process cleanly.
Stablecoins as a Specific Risk Area
Zhao specifically referenced stablecoin services as part of the regional market opportunity a passport framework would unlock. Stablecoins carry distinct accounting and regulatory treatment: reserve composition, redemption rights, and the classification of stablecoin liabilities on an issuer's balance sheet are all live accounting questions under both IFRS and local GAAP frameworks across ASEAN. If passport-enabled stablecoin providers begin operating across multiple ASEAN markets simultaneously, the accounting and AML requirements will be applied in parallel rather than sequentially. Firms advising stablecoin issuers or distributors should begin reviewing how their current workflows would handle simultaneous multi-jurisdiction reporting obligations.
What Accounting Firms Should Monitor
There is no regulatory instrument to act on today. The passporting proposal is at the public advocacy stage, driven by a prominent industry figure. However, a number of concrete developments would signal that formal regulatory movement is underway:
- A formal working group or joint statement from ASEAN finance ministers or central bank governors on digital asset regulatory coordination
- Any revision to the ACMF's mandate to include crypto-asset service providers
- Bilateral mutual recognition agreements between any two ASEAN regulators covering digital assets
- FATF assessments of ASEAN member states that highlight gaps in cross-border supervision of VASPs, which would both create political pressure and identify the minimum standards any passport model would need to meet
Accounting firms with clients in the digital asset space should also track how the EU's MiCA passport model evolves operationally. ESMA's experience building and maintaining the CASP register, and managing cross-border supervisory cooperation, will likely inform any ASEAN equivalent. Firms that are already familiar with MiCA's operational mechanics through EU-based clients will have a meaningful head start when ASEAN regulators begin designing a comparable framework.
Frequently Asked Questions
What is crypto license passporting in the ASEAN context?
License passporting would allow a crypto-asset service provider authorised in one ASEAN member state to offer services in other member states through a simplified notification or fast-track process, rather than completing a full licensing application in each jurisdiction. The concept was publicly endorsed by Binance co-founder Changpeng Zhao at the ASEAN Tech Summit Manila 2026.
Does any ASEAN-wide crypto passport currently exist?
No. ASEAN does not currently operate a bloc-wide passport for crypto companies. The ASEAN Capital Markets Forum operates mutual recognition frameworks for collective investment schemes and investment advisers, but these do not cover crypto-asset service providers. Each ASEAN member state regulates digital assets under its own framework.
How does the EU MiCA passport differ from what is being proposed for ASEAN?
Under MiCA, a crypto-asset service provider authorised in one EU member state can passport its licence across all EU member states by notifying its home regulator. This operates under a single regulatory framework with common AML standards enforced across the bloc. The ASEAN proposal, by contrast, would need to bridge separate national regulatory regimes with different standards, making it structurally more complex to implement.
What should CFOs do now given that no formal ASEAN passport framework exists yet?
CFOs should treat this as an early-stage regulatory development that warrants monitoring rather than immediate structural action. The practical steps now are to audit the firm's current licensing status in each ASEAN market it operates in, identify any outstanding compliance conditions, and ensure that digital asset accounting software can produce jurisdiction-tagged audit trails. Clean compliance at the home-licence level is the prerequisite for any future passport benefit.
How does the passporting debate affect AML and KYC obligations?
Passporting does not remove AML and KYC obligations. Host-country regulators would still impose local conduct and customer protection requirements. Firms would need transaction monitoring and suspicious activity reporting processes that meet the standards of every market they serve, not just their home jurisdiction. Until ASEAN member states converge on common AML minimum standards, firms should maintain jurisdiction-specific compliance policies.
Source: Cointelegraph