Taiwan Passes Omnibus Crypto Law: Licensing and Stablecoin Rules Now in Force

Taiwan's legislature passed a wide-ranging virtual asset law on 1 July 2026, introducing mandatory licensing for crypto service providers and a purpose-built regulatory framework for stablecoins. For accounting firms, auditors, and CFOs with exposure to Taiwan-based clients or cross-border digital asset flows, the law creates concrete compliance obligations that take effect under the new statute rather than the previous patchwork of guidance.

What the Law Actually Does

The legislation is Taiwan's first comprehensive, standalone statute governing virtual assets. Before it passed, oversight was fragmented across anti-money-laundering rules administered by the Financial Supervisory Commission (FSC) and a series of non-binding guidelines. The new law consolidates that oversight into a single legal instrument.

Mandatory VASP Licensing

Any entity providing virtual asset services in Taiwan must now obtain a licence from the FSC. The statute covers the standard spectrum of activities: exchange, brokerage, custody, and transfer services. Operating without a licence once the transition window closes will constitute a criminal offence under the new text, not merely an administrative infraction.

The licensing gate matters for accounting and audit engagements. Firms onboarding a Taiwan-based crypto client, or auditing a group entity that operates a VASP in Taiwan, will need to verify licensure status as part of their due-diligence and going-concern assessment procedures. The FSC is the competent authority for both issuing licences and imposing sanctions.

Stablecoin-Specific Requirements

Taiwan joins a small but growing group of jurisdictions that have carved out stablecoins as a distinct regulatory category rather than folding them into general virtual asset rules. The law sets reserve and disclosure requirements for stablecoin issuers operating in or from Taiwan. Issuers must hold reserves backing the outstanding supply and are subject to ongoing reporting to the FSC.

This matters for client portfolios that include stablecoin issuance or treasury operations denominated in Taiwan-domiciled stablecoins. The reserve-backing requirement has direct accounting implications: how reserves are held, classified, and disclosed on financial statements will need to align with both the FSC's prudential expectations and applicable accounting standards. Firms advising clients on stablecoin treasury structures in Taiwan should revisit those engagements in light of the new rules.

For context on how stablecoin misuse has drawn regulatory attention globally, the stablecoin AML risk exposure in illicit finance cases documented in the Huione Group enforcement action illustrates why regulators across the Asia-Pacific are treating stablecoin oversight as a priority.

AML and KYC Obligations Under the New Statute

The law formalises and strengthens the AML and KYC obligations that were previously grounded only in FSC guidance. Licensed VASPs must implement customer due diligence, transaction monitoring, and suspicious transaction reporting in line with Financial Action Task Force standards. Taiwan has been a FATF observer and the new statute reflects a deliberate alignment with FATF's virtual asset recommendations.

Travel Rule Implementation

The statute includes provisions implementing the FATF Travel Rule for virtual asset transfers, requiring originator and beneficiary information to accompany transactions above the prescribed threshold. This is operationally significant for any VASP processing cross-border transfers involving Taiwan-based counterparties. Accounting and compliance teams at firms serving such clients should confirm that their clients' transfer systems can generate and receive the required data fields.

Implications for Audit and Assurance Engagements

From an audit perspective, the shift from guidance to statute changes the materiality calculus. A client that was previously operating under informal FSC guidance without a formal licence was in a grey area. Under the new law, unlicensed operation is a statutory breach. Auditors assessing going concern, legal contingencies, or regulatory risk disclosures for Taiwan-exposed entities will need to update their risk frameworks accordingly.

The approach Taiwan has taken parallels what other regulators have pursued. A comparison with how the FCA's finalised UK crypto framework handles VASP authorisation shows that mandatory licensing regimes typically come with prescribed transition periods, after which unlicensed operation triggers enforcement rather than remediation.

Stablecoin Accounting: Key Considerations

Reserve Classification and Disclosure

Where a client issues or holds significant quantities of a Taiwan-regulated stablecoin, the reserve assets backing that stablecoin will need to be classified correctly on the balance sheet. Depending on the nature of the reserve (cash, government securities, or other liquid instruments), the classification will interact with IFRS 9 or local GAAP requirements. The FSC's reserve requirements may also create a de facto constraint on how those assets can be deployed, which affects liquidity disclosures.

Audit Evidence for Reserve Backing

Auditors of stablecoin issuers will need to obtain sufficient appropriate evidence that reserves exist, are unencumbered, and match the outstanding supply. The new statutory requirement does not automatically generate an audit trail; the issuer must build the internal controls and documentation that make that evidence available. Firms should flag this to issuer clients as early as possible in the reporting cycle.

What Firms Should Do Now

The law passed on 1 July 2026. Transition periods for existing operators will be defined by FSC implementing regulations, which have not yet been fully published. That creates a narrow window for firms to act before the compliance clock starts running.

• Identify all Taiwan-based or Taiwan-serving VASP clients and confirm whether they intend to apply for a licence or wind down regulated activities.
• Review any stablecoin-related treasury or issuance structures for alignment with the reserve and disclosure requirements.
• Update AML/KYC due-diligence checklists for Taiwanese counterparties to reflect the new statutory baseline rather than the old guidance.
• Brief audit teams on the changed legal status of unlicensed virtual asset activity when assessing contingent liabilities and going-concern factors.
• Monitor FSC for implementing regulations, which will specify transition timelines, licence application procedures, and stablecoin reserve eligibility criteria.

The broader trend toward comprehensive licensing regimes in Asia-Pacific means Taiwan's law is unlikely to be an isolated development. Firms with regional practices should treat this as the start of a compliance build-out, not a one-time checkbox exercise. Our crypto compliance and reporting resource hub covers the evolving licensing landscape across multiple jurisdictions.

Source: Decrypt