Bosnia crypto regulation starts with a state anti-money laundering (AML) law that Bosnia and Herzegovina’s Parliamentary Assembly adopted on February 16, 2024. That law lists providers of services related to virtual currencies among its obligated entities. Their AML supervision is split among three bodies: the securities commissions of Republika Srpska (RS) and the Federation of Bosnia and Herzegovina (FBiH), and Brčko District’s finance directorate.

Republika Srpska’s Securities Commission keeps a register of providers but does not issue approvals to operate. In the Federation, a preliminary draft law dated July 2026 covers virtual asset service providers (VASPs), according to the Federal Ministry of Finance, and it would set minimum founding capital at 100,000 KM. KM is the convertible mark, the country’s currency. The result is one country, three supervisors and one state AML law, with licensing still at the draft stage.

Key Takeaways

  • The state AML law was adopted on February 16, 2024 and published in Official Gazette of BiH 13/2024.
  • The law lists 6 services that make a business a provider of services related to virtual currencies, from custody to issuer offers.
  • 3 bodies supervise those providers for AML compliance, one each for RS, FBiH and Brčko District.
  • Crypto service providers must identify and monitor clients on occasional transactions above 1,000 KM, single or linked.
  • In a notice dated May 27, 2026, Republika Srpska’s Securities Commission said it keeps a register and issues no approvals to operate.
  • The Federation’s July 2026 preliminary draft from the Federal Ministry of Finance would require 100,000 KM in founding capital and set fines of 15,000 KM to 200,000 KM for a legal-person provider.
  • The European Council granted Bosnia and Herzegovina candidate status in December 2022.

Is crypto legal in Bosnia and Herzegovina?

Per the Official Gazette of BiH, the state AML law gives crypto a legal definition. The law defines virtual currency as a digital representation of value that no central bank or public body issues or guarantees.

It has no legal status as money or currency, but people and companies accept it as a means of exchange and can transfer, store and trade it electronically. The state law defines crypto and assigns supervision of the firms that offer it to entity and district bodies, but the entities do not stand behind its value.

Republika Srpska, its Securities Commission and other public bodies do not guarantee the value of virtual currencies and bear no liability for losses users suffer in crypto transactions. The Federation’s amendment carries the same clause for the Federation, its securities commission and other public bodies.

Who regulates crypto in Bosnia and Herzegovina?

3 bodies supervise crypto service providers for AML purposes under the state law. They are the Securities Commission of Republika Srpska, the Securities Commission of FBiH and Brčko District’s finance directorate (tax administration).

According to the Bosnian text of the law, these are the Komisija za hartije od vrijednosti RS, the Komisija za vrijednosne papire FBiH and the Direkcija za finansije BDBiH. A crypto regulation by jurisdiction view usually stops at the country line, but in Bosnia and Herzegovina the working unit for crypto supervision is the entity. Each jurisdiction adds its own legal basis on top of the state law, as the table shows.

Source: Official Gazette of BiH, Securities Commission of Republika Srpska, Parliament of the Federation of BiH, Federal Ministry of Finance (FBiH), CMS, 2024 to 2026

Why it matters: Bosnia and Herzegovina’s state AML law gives supervision of crypto providers to three separate bodies rather than one national regulator. A provider active in more than one part of the country therefore deals with more than one supervisor, and the record-keeping rules it meets may differ from one entity to the next.

Why it matters: Bosnia and Herzegovina’s state AML law gives supervision of crypto providers to three separate bodies rather than one national regulator. A provider active in more than one part of the country therefore deals with more than one supervisor, and the record-keeping rules it meets may differ from one entity to the next.

The 2024 State AML Law and Crypto Service Providers

Both houses of the Parliamentary Assembly adopted the AML law at urgent sessions, on December 21, 2023 and February 16, 2024. On its entry into force, the earlier AML law published in gazette issues 47/14 and 46/16 ceased to apply. The new law enters into force on the eighth day after its publication in the gazette.

The law defines a provider of services related to virtual currencies as a person offering one or more of 6 services on behalf of another person. They are safekeeping or administration of virtual currencies by custodial wallet providers, running a trading platform, exchanging virtual currency for legal tender, exchanging one virtual currency for another, transferring virtual currency for third parties, and financial services tied to an issuer’s offer or sale.

Those providers appear on the list of obligated entities next to investment fund management companies, factoring companies and organizers of games of chance. The milestones below place the law between the EU candidacy and the Federation’s draft.

Set against the crypto rules by country we track, Bosnia and Herzegovina put AML duties in force before any market licensing and left market licensing to the entities.

You get one weekly briefing with only the stories that matter. If the market is quiet, we skip it.

AML and Client Identification Duties

Bosnia and Herzegovina’s AML law requires crypto service providers to identify and monitor clients on occasional transactions above 1,000 KM, whether the amount moves in one transaction or several linked ones. Authorized exchange offices face the same 1,000 KM trigger for occasional transactions.

Pegging crypto providers to the exchange-office threshold treats a crypto desk like a currency counter for due-diligence purposes. In the Federation, a provider that fails to take the measures the AML rules require faces the penalty provisions set for obligated entities.

Republika Srpska: The Securities Commission Register

Republika Srpska’s Securities Commission keeps a register of providers of services related to virtual currencies under Article 260b of the entity’s securities market law. A person not entered in that register may not provide those services. The registration procedure sits in a rulebook published in RS gazette issues 4/23, 82/24 and 112/25.

The regulator does not issue approvals to operate; it keeps the register and is solely competent to supervise compliance with AML and counter-terrorist financing rules. Its oversight reaches firms established in Republika Srpska and outside firms that provide the services through a branch there.

Register versus license: Entry in the RS register is a precondition for providing crypto services, yet the regulator issues no approvals to operate. A register entry records a provider for AML supervision, which is a different status from a license to operate.

Do you need a license to run a crypto exchange in Bosnia?

In Republika Srpska, a provider must be entered in the Securities Commission’s register, and the regulator issues no approvals to operate. The Federation’s preliminary draft would require an operating license from the Commission and bar unlicensed persons from providing virtual asset services. That draft is not yet law.

Federation of BiH and Brčko District Rules

An amendment adopted by the Parliament of the Federation of Bosnia and Herzegovina adds Article 54a to the Law on Foreign Exchange Operations, under which the Securities Commission of FBiH keeps records of and supervises crypto service providers. Under the amendment, the regulator must adopt an act setting how it keeps those records and supervises providers for AML compliance.

The law firm CMS reports in its guide updated on September 8, 2026 that the FBiH commission has yet to adopt that rulebook. A provider that fails to take the required AML measures can be deleted from the records for one year, and a repeat offense brings permanent deletion. Implementing regulations are due within six months of the amendment’s entry into force.

For Brčko District, the state law names the district’s finance directorate (tax administration) as AML supervisor of crypto providers. CMS reports that Brčko District’s securities commission has adopted a rulebook on keeping records of crypto service providers.

Pending Bills: The Federation’s Draft VASP Law

A preliminary draft law on providers of services related to virtual assets from the Federal Ministry of Finance, dated July 2026, would make the Federation’s securities commission their supervisor. Paragraf Lex reported that the ministry put the draft to public consultation until September 1, 2026.

Under Article 9 of the draft, a provider seated in the Federation would need an operating license from the Commission, while firms seated in RS or Brčko District could operate through an organizational unit in the Federation with a license. Persons that are not licensed providers could not offer virtual asset services or advertise in a way that misleads users.

Article 17 would set minimum founding capital at 100,000 KM, paid in cash. Article 75 would fine a legal-person provider 15,000 KM to 200,000 KM for offenses including operating without a valid license, failing to keep separate client accounts or failing to report a suspicious transaction. The chart sets those draft amounts beside the state law’s client-check trigger.

By the numbers: The Federation’s July 2026 preliminary draft would require 100,000 KM in founding capital and fine a non-compliant legal-person provider 15,000 KM to 200,000 KM. Those figures stay on paper until the Federation’s parliament adopts the law, and the text can still change before then.

By the numbers: The Federation’s July 2026 preliminary draft would require 100,000 KM in founding capital and fine a non-compliant legal-person provider 15,000 KM to 200,000 KM. Those figures stay on paper until the Federation’s parliament adopts the law, and the text can still change before then.

Bosnia Crypto Regulation: What the Rules Mean for Exchanges and Users

Every crypto exchange covered by the state law must run client checks on occasional transactions above 1,000 KM. Its AML supervisor depends on where it operates: the securities commission in Republika Srpska or FBiH, or the finance directorate in Brčko District. We read the gazette text, the RS regulator’s notice and the Federation’s draft in the original language, because a register entry and a license are easy to blur in translation. The paperwork differs by entity:

  • In Republika Srpska: entry in the Securities Commission’s register before providing services.
  • In FBiH: records and supervision by the Securities Commission under the foreign exchange law, and an operating license if the preliminary draft becomes law.
  • In Brčko District: AML supervision by the district’s finance directorate.

No public guarantee: Both entity texts say public bodies do not guarantee the value of virtual currencies and bear no responsibility for losses from crypto transactions. A register entry is an AML record, not a promise that a provider is safe.

Bosnia and Herzegovina, MiCA and the EU Candidacy

The European Council granted Bosnia and Herzegovina candidate status in December 2022, and in December 2023 it decided to open accession negotiations once the necessary degree of compliance with the membership criteria is achieved. The Federation’s preliminary draft states that it partially aligns with Regulation (EU) 2023/1114, the EU’s Markets in Crypto-Assets rules (MiCA).

MiCA applies from December 30, 2024, with Titles III and IV applying from June 30, 2024. MiCA is EU law, so for a candidate country its pull runs through alignment, and in Bosnia and Herzegovina that alignment appears in the Federation’s entity-level draft.

How is crypto taxed in Bosnia and Herzegovina?

None of the crypto provisions quoted here sets a tax rate. From the state AML law to the Federation’s draft, they cover definitions, registration, supervision, client checks and penalties. A holder’s tax position has to be checked against the tax rules of the entity or district where they live.

Check the tax position locally: A tax adviser in the relevant entity or district can confirm how crypto income is treated before any transaction.

Conclusion

Bosnia and Herzegovina’s Parliamentary Assembly adopted the state AML law on February 16, 2024. Under it, crypto service providers answer to three AML supervisors: the securities commissions of Republika Srpska and FBiH and Brčko District’s finance directorate. Republika Srpska runs a register that grants no approvals to operate, while the Federation’s draft would add a license backed by 100,000 KM in minimum capital.

The next markers are the FBiH commission’s rulebook under Article 54a and the draft law’s path through the Federation’s parliament. Until those texts settle, exchanges, custodians and users face different paperwork in each part of the country.