PVARA Sandbox Form I Part B: Proving You Are Ready to Test
What Form I Part B of the PVARA Sandbox Guidelines requires: technical, integration, operational-financial and consumer-safety evidence, secti...
Read analysis →Read from the published documents themselves. Licensing, compliance, tax, corporate structure, the sandbox and enforcement — provision by provision, with the practical consequence of each one spelled out.
172 articles
What Form I Part B of the PVARA Sandbox Guidelines requires: technical, integration, operational-financial and consumer-safety evidence, secti...
Read analysis →A walkthrough of the Annexure-B sandbox undertaking: insurance, indemnity, records access, the 15-day termination right and every clause parti...
Read analysis →Annexure-B of the PVARA sandbox undertaking sets out over 20 obligations, from a one-hour incident clock to seven-year record retention. A ful...
Read analysis →Form I Part A of the PVARA sandbox application has five sections covering your innovation, technology stack, cybersecurity, legal environment ...
Read analysis →A section-by-section guide to Form I Part A of the PVARA Sandbox Guidelines: the five sub-sections, required formats, and what each attachment...
Read analysis →What a PVARA no-action letter actually covers, its statutory basis, and why the Sandbox Guidelines say plainly that it is not legal immunity.
Read analysis →A PVARA no-action letter means the Authority will not enforce against specified conduct during testing. It is not immunity, and it can be with...
Read analysis →How PVARA can suspend or withdraw sandbox approval mid-test: the two-tier power, the consumer-detriment trigger, and what a public notice mean...
Read analysis →PVARA can pause sandbox testing pending clarification, or withdraw approval by public notice for consumer detriment. How the two powers differ...
Read analysis →What Exit means under PVARA's Sandbox Guidelines: transition to full licensing, discontinuation, or other steps the Authority directs.
Read analysis →The two-week deadline for a PVARA sandbox completion report, and the results, impact assessment and compliance content it must contain.
Read analysis →The two incident-notification deadlines every PVARA sandbox participant signs up to, what each report must contain, and how they differ.
Read analysis →What a PVARA sandbox participant must report during testing, how to request a delayed start, and the duty to flag anything that threatens the ...
Read analysis →How PVARA assesses feasibility and exit strategy for sandbox applicants, and its standing power to cap transaction volumes, user numbers and e...
Read analysis →The four remaining Key Evaluation Criteria for a PVARA sandbox application: risk and compliance, feasibility and exit, financial strength, and...
Read analysis →PVARA's Innovation and Market Impact test for sandbox applicants, broken into its four named factors: novelty, technology, differentiation and...
Read analysis →The sixty-working-day clock on PVARA sandbox evaluations, when it starts, the Authority's extension power, and how it differs from the NOC's o...
Read analysis →The two stages a PVARA sandbox application passes through after filing, when another regulator may be consulted, and what the assessment draws...
Read analysis →How to submit a PVARA sandbox application: Form I's six sections, the fee the Authority may charge, the mandatory self-assessment, and the res...
Read analysis →Why the PVARA sandbox has no fixed application rounds, what the Agile Approach actually promises, and what it does not change about the assess...
Read analysis →What PVARA's Sandbox Guidelines mean by operational readiness: the testing plan, governance structure, risk assessment and scalability an appl...
Read analysis →The first eligibility limb for the PVARA sandbox: the three disqualifying categories for directors, sponsor shareholders, controllers and key ...
Read analysis →The nine defined terms in PVARA's Sandbox Guidelines 2026, explained one by one, and why the Applicant-to-Participant transition is the pivota...
Read analysis →Where the PVARA sandbox comes from in law: section 35 of the Virtual Assets Act 2026, the Sandbox Guidelines 2026, and the seven objectives be...
Read analysis →The named negative indicators in the PVARA Sandbox Guidelines, the two-resubmission limit on incomplete applications, and how approval can lat...
Read analysis →Annexure-A of the PVARA Sandbox Guidelines sets an eight-question self-assessment with named positive and negative indicators — worked through...
Read analysis →Annex A of the PVARA NOC Regulations lists eight statutory forms, A1 through A8, covering application, disclosure, fitness, and ongoing report...
Read analysis →Regulation 19 of the PVARA NOC Regulations sets five grounds for revoking an NOC and a proportionality test — what each ground covers and what...
Read analysis →Regulation 18.1 of the PVARA NOC Regulations sets six duties an NOC holder carries after registration — AML compliance, notification, Form A6,...
Read analysis →Regulation 17 of the NOC Regulations 2025 gives PVARA sixty calendar days to decide an NOC application. What that decision authorises, and wha...
Read analysis →How the Virtual Assets Act ties licensed VASPs to the Income Tax Act, and how PVARA's sandbox separately tests applicants on tax registration ...
Read analysis →Section 65 of the Virtual Assets Act 2026 gives a further thirty-day right of appeal to the Supreme Court after the Virtual Assets Appellate T...
Read analysis →The thirty-day window to appeal a PVARA order, the Tribunal's three-month decision deadline, and the civil-court powers it uses to decide your...
Read analysis →Section 62 of the Virtual Assets Act 2026 creates the Tribunal that hears disputes against PVARA orders. Composition, qualifications and tenur...
Read analysis →Section 61 lets PVARA order websites, apps and payment links blocked. Who can be directed to act, what must be in the order, and the ten-day r...
Read analysis →When PVARA can freeze assets or suspend services without a hearing under section 60 of the Virtual Assets Act 2026, and the statutory thirty-d...
Read analysis →Section 59 gives PVARA reprimand, directive, financial penalty, licence action and disqualification powers — without going to court first. How...
Read analysis →How offences under the Virtual Assets Act reach trial: the Special Court, the special public prosecutor, and the fourteen-day cap on adjournme...
Read analysis →Section 56 restricts investigation to authorised officers. Section 57 requires a court warrant before search or seizure. What that means for a...
Read analysis →Section 55 pierces the corporate veil for consent, connivance, or neglect. What each test means, and why neglect is the widest and hardest to ...
Read analysis →Section 54(3)(b) fines a company three times its profit or loss avoided, or 15% of turnover. The only penalty in the Virtual Assets Act 2026 w...
Read analysis →Every criminal offence in section 54 of the Virtual Assets Act 2026, listed one by one with its imprisonment term and fine ceiling, plus who t...
Read analysis →Section 53 bans undercollateralised algorithmic tokens outright. The collateralisation test, the narrow exception, and what it means for issue...
Read analysis →Who counts as an insider, what counts as inside information, and the three acts section 52 of the Virtual Assets Act 2026 prohibits — explaine...
Read analysis →Section 51 bans conducting an unauthorised Initial Virtual Asset Offering in Pakistan, and section 54(2) sets a three-year, 25 million rupee e...
Read analysis →Section 50(1) bans providing virtual asset services in Pakistan unless a business is both incorporated locally and holds a valid PVARA licence.
Read analysis →Section 45 requires licensees to run internal complaint procedures and lets PVARA set up an independent scheme for smaller crypto customer cla...
Read analysis →Section 44 requires every licensee to identify, manage and disclose conflicts of interest and bars putting its own interests above its custome...
Read analysis →Section 43(2) requires every virtual asset marketing material to carry a risk disclosure and gives PVARA power to set its content, form and li...
Read analysis →Section 43 bans advertising a virtual asset in Pakistan unless the issuer is licensed, and the ban reaches marketers, influencers and platform...
Read analysis →Issuers in Pakistan face ongoing disclosure and reserve attestation duties under section 42(2), separate from the proof-of-reserves duty licen...
Read analysis →Any issuer offering a virtual asset to the public in Pakistan must publish a whitepaper under section 42, unless PVARA has exempted that categ...
Read analysis →Section 41 sets a single honesty and fair-dealing standard for every VASP licensee in Pakistan, sitting alongside a separate fiduciary duty ov...
Read analysis →Derivatives on virtual assets are a licensable Schedule I service in Pakistan, and one of four activities a firm may run before its full VASP ...
Read analysis →Schedule I item 5 licenses crypto lending and borrowing in Pakistan, covering facilitation, arrangement, intermediation and lending as princip...
Read analysis →Schedule I item 4 lists four activities that make a platform an Exchange Service in Pakistan — fiat pairs, crypto pairs, order matching and or...
Read analysis →Schedule I item 3 licenses custody of Virtual Assets and private keys, but excludes software that leaves customers in exclusive control of the...
Read analysis →Schedule I item 2 lists five broker-dealer activities and one exemption for trading solely on your own account. Here is how the five limbs and...
Read analysis →Schedule I item 1 licenses Advisory Services under a personalised-recommendation test, with a carve-out for research reports and general marke...
Read analysis →Section 38 of the Virtual Assets Act 2026 lets the government create a Strategic Digital Wallet Company for state custody — barred from servin...
Read analysis →Schedule I item 10 and section 37(2) of the Act licence mining services touching customer assets, while pure mining for one's own account stay...
Read analysis →Section 37 of the Virtual Assets Act 2026 exempts pure mining from licensing, but large operators face a coming registration framework based o...
Read analysis →Section 49 of the Virtual Assets Act 2026 sets a consent standard for customer data, and section 5(2) makes external data protection law overr...
Read analysis →Section 48 of the Virtual Assets Act 2026 requires VASPs to build secure reporting channels and automated interfaces for PVARA's real-time sup...
Read analysis →Section 40(3) of the Virtual Assets Act 2026 sets four data controls VASPs must implement: segregation, need-to-know access, encryption and au...
Read analysis →Section 40(2) of the Virtual Assets Act 2026 lists five categories of sensitive information, from customer records to private keys, that VASPs...
Read analysis →Section 39 of the Virtual Assets Act 2026 lets VASPs store data outside Pakistan under safeguards, but PVARA can override that with immediate ...
Read analysis →Sections 9(1)(e) and 36 of the Virtual Assets Act 2026 give PVARA a national mandate to govern blockchain adoption, not just to license Virtua...
Read analysis →Section 34 of the Virtual Assets Act 2026 sets a cybersecurity and operational-resilience duty for every VASP, with technical standards still ...
Read analysis →Section 33 of the Virtual Assets Act 2026 creates a Significant Issuer tier with enhanced obligations, triggered by thresholds Regulations hav...
Read analysis →Section 3(1)(xxvi) defines the Segregated Reserve that backs Pakistani stablecoins — a structure built to survive the issuer's own insolvency.
Read analysis →Section 32 of the Virtual Assets Act 2026 lets an asset-referenced token back with real-world assets but expressly bans backing it with other ...
Read analysis →Section 31 of the Virtual Assets Act 2026 sets six requirements for issuing a fiat-referenced token, from full reserve backing to insolvency p...
Read analysis →Section 30 of the Virtual Assets Act 2026 restricts token offerings to Pakistani-registered entities meeting prescribed criteria. Section 51 b...
Read analysis →The Virtual Assets Act 2026 defines an Issuer by control, not by role. Section 3(1)(xiii) sets out the test and four activities that do not tr...
Read analysis →Schedule I item 8 licenses Virtual Asset Transfer and Settlement Services in Pakistan, excluding exchange execution. Here is what falls inside...
Read analysis →Staking on behalf of customers is licensable under Schedule I of the Virtual Assets Act 2026, but only in specific circumstances. Here is when...
Read analysis →Section 29 of the Virtual Assets Act 2026 lets PVARA build a compensation scheme for custodial failure. It is a power, not a guarantee — here ...
Read analysis →Section 28 of the Virtual Assets Act 2026 places the custodian of reserve assets under PVARA oversight. Here is what the section requires and ...
Read analysis →Section 27 of the Virtual Assets Act 2026 requires cryptographic proof-of-reserves and an annual segregation audit. Here is what each obligati...
Read analysis →Section 26 of the Virtual Assets Act 2026 sets two custody duties for VASPs and leaves technical key-management standards to Regulations. Here...
Read analysis →Section 25 of the Virtual Assets Act 2026 gives PVARA a baseline duty, an uplift power, add-on requirements and an exemption route. Here is ho...
Read analysis →Section 24(4) of the Virtual Assets Act 2026 bans rehypothecation of customer assets by default. Here is the rule, the consent exception, and ...
Read analysis →Section 24(3) of the Virtual Assets Act 2026 puts VASPs under a fiduciary duty to customers. Here is what that standard requires beyond ordina...
Read analysis →Section 24(2) of the Virtual Assets Act keeps Customer Assets out of a failed VASP's estate, overriding any other law to the contrary — how th...
Read analysis →Section 24(1) of the Virtual Assets Act requires VASPs to hold customer virtual assets and fiat in accounts separate from the firm's own — wha...
Read analysis →Regulation 14.1(d) requires PVARA applicants to make audit rights over AML vendors legally enforceable, including across borders — what that m...
Read analysis →PVARA's NOC Regulations name CDD, sanctions screening, monitoring and MLRO duties as AML-critical, and set four conditions before they can go ...
Read analysis →PVARA's NOC Regulations set a seven-year minimum for AML/CFT records and require them to be auditable, retrievable and tamper-evident.
Read analysis →PVARA's NOC Regulations require VASPs to screen every customer and transaction for sanctions matches, then freeze and report designated person...
Read analysis →Section 47 of the Virtual Assets Act sets Pakistan's Travel Rule: originator and beneficiary data, FATF alignment, and a record-retention floor.
Read analysis →Regulations 11.2, 11.3 and 11.6 of the NOC Regulations set two distinct report types a VASP must file, and the readiness test attached to both.
Read analysis →Regulation 11.1 of the NOC Regulations requires VASPs to detect suspicious activity in real time or near real time. What that standard means f...
Read analysis →Regulation 10 of the NOC Regulations lists four triggers for enhanced due diligence — high-risk jurisdictions, PEPs, complex transactions and ...
Read analysis →Regulation 9 of the NOC Regulations sets five CDD elements a VASP must complete before any AML-registered service, from identity checks to ong...
Read analysis →Regulation 8A of the NOC Regulations sets five formatting rules for every document a VASP submits to PVARA — language, version control, pagina...
Read analysis →Regulation 8 of the NOC Regulations lists nine components an AML/CFT framework must have, from board-approved policy to outsourcing risk manag...
Read analysis →Section 46 of the Virtual Assets Act deems licensed VASPs financial institutions under AMLA 2010 — the deeming clause and its three baseline d...
Read analysis →When a company, not a person, holds 20% or more of a VASP, PVARA looks straight through it to the natural persons behind it — here is what mus...
Read analysis →Once a VASP is registered, acquiring or increasing control needs PVARA's written approval first — here is what Regulation 7.3 and Section 22(d...
Read analysis →Section 20(4) of the Virtual Assets Act makes fit and proper an ongoing duty, not a one-time check — the self-notification rule and what a lap...
Read analysis →Section 20 of the Act splits fit and proper assessment between PVARA and the applicant itself — here is exactly who assesses which roles.
Read analysis →Regulation 6.3 bars three categories of person from serving as a Key Individual at a PVARA applicant, with one narrow discharge exception.
Read analysis →Regulation 5.2 lets a PVARA applicant combine Compliance Officer and MLRO where justified by size and complexity — here is what that actually ...
Read analysis →Regulation 5.1 of PVARA's NOC Regulations lists eight roles every applicant must appoint, from CEO to Head of Information Security.
Read analysis →Regulation 4 of PVARA's NOC Regulations sets four specific AML/CFT duties for a VASP applicant's board, scaled by a proportionality test.
Read analysis →Regulation 3.1 sets out seven objectives behind PVARA's No Objection Certificate Regulations, from AML/CFT standards to the phased licensing p...
Read analysis →Six Schedule I virtual asset service categories stay locked behind a full Section 17 licence and are not opened up by a PVARA NOC, per Regulat...
Read analysis →Regulation 2.3 lists four AML-Registered Services a PVARA Applicant may provide before a full VASP licence, and the conditions attached to them.
Read analysis →Regulation 2.2 of the NOC Regulations explains the two distinct permissions a PVARA No Objection Certificate grants at the same time.
Read analysis →When the PVARA No Objection Certificate Regulations 2025 took effect, who they bind, and what an NOC actually authorises under Section 15.
Read analysis →Regulation 16.1 lists six criteria PVARA assesses in an NOC application, plus its power to interview Key Individuals and inspect the Applicant.
Read analysis →Regulation 15.4 of the NOC Regulations explains what a PVARA no-objection certificate legally satisfies: pre-incorporation clearance, not a VA...
Read analysis →Regulation 15.3 of the NOC Regulations lists three duties after a PVARA NOC: goAML registration, local incorporation, and the three-month lice...
Read analysis →Section 23 of the Virtual Assets Act lists five grounds for varying, suspending or revoking a VASP licence, the hearing right, and the SECP wi...
Read analysis →Section 22 of the Virtual Assets Act sets six duties every VASP licensee owes PVARA at all times: capital, compliance, reporting, approvals, s...
Read analysis →Section 21(4) of the Virtual Assets Act requires PVARA to publish a register of licensees showing name, licence number, services and status.
Read analysis →Section 21(3) of the Virtual Assets Act scopes each licence to named services and keeps it in force indefinitely, unless suspended or revoked.
Read analysis →Section 21 of the Virtual Assets Act lets PVARA grant a provisional or limited-scope licence case by case — what that means and its limits.
Read analysis →Section 20(6) of the Virtual Assets Act requires a Pakistan registered office and a resident Key Individual with real decision-making power.
Read analysis →Section 19(4) of the Virtual Assets Act sets out the licence application, its non-refundable fee rule, and what documents PVARA can demand.
Read analysis →Section 19 of the Virtual Assets Act 2026 requires an NOC before incorporation begins, not after — what that sequencing means for founders.
Read analysis →Section 17 of the Virtual Assets Act 2026 names the agencies PVARA must share data with, and the approval route for foreign regulators.
Read analysis →Sections 16 and 69 of the Virtual Assets Act 2026 bind every PVARA official to a Code of Conduct and to Pakistan Penal Code liability as a pub...
Read analysis →Section 14 of the Virtual Assets Act 2026 lists eleven revenue sources and nine permitted uses for the PVARA Fund, audited yearly by the Audit...
Read analysis →Regulation 11.4–11.6 of the NOC Regulations sets when a foreign VASP registers on goAML, and when the role passes to the licensed local entity.
Read analysis →Section 19(1) of the Virtual Assets Act blocks SECP incorporation until PVARA issues an NOC. The correct sequence for founders entering Pakist...
Read analysis →Section 13 of the Virtual Assets Act 2026 governs how PVARA creates posts, hires staff through a competitive process, and borrows officials fr...
Read analysis →Section 9(2) of the Virtual Assets Act 2026 lists fourteen distinct powers held by PVARA, from rule-making to sandbox operation. Here is each ...
Read analysis →Section 9(1)(f) lets PVARA classify any asset or business by what it actually does, not what it is called. Here is exactly what that power cov...
Read analysis →Section 9(1) lists nine functions PVARA must perform, from licensing to investment attraction. Here is each one, quoted directly, with what it...
Read analysis →Section 12 sets the Managing Director's term, role and voting position, while section 10 lets the board delegate powers to that office. Here i...
Read analysis →Section 11 sets the PVARA Chairperson's qualifications, term limits and removal standard. Here is exactly what the Act requires, quoted direct...
Read analysis →Sections 7 and 8 set out who sits on PVARA's governing body, how long they serve, and the quorum needed to make a valid decision. Here is the ...
Read analysis →Section 5 makes the Virtual Assets Act override other laws, with two exceptions: foreign exchange rules and data protection. Here is exactly h...
Read analysis →Section 4 lets PVARA pursue enforcement outside Pakistan and sets rules for cross-border cooperation. Here is what the Act grants and what it ...
Read analysis →The Act names a Shariah Advisory Committee for PVARA but does not spell out its mandate. Here is exactly what the text says, and what it leave...
Read analysis →The Act uses Rules and Regulations as distinct instruments with different makers. Knowing which is which tells you where a requirement will co...
Read analysis →Whether your token is a Fiat-Referenced Token turns on two short definitions in section 3(1). Most stablecoin analysis gets decided here, not ...
Read analysis →Section 3(1)(xv) lists ten roles that make someone a Key Individual, and catches part-time, acting and outsourced appointments on identical te...
Read analysis →The Act defines Issuer by control, not by involvement. An express carve-out protects marketers, brokers and developers who never touch supply ...
Read analysis →PVARA is autonomous but not unsupervised. Three provisions place the Cabinet Division above it, and each one touches something a licensee care...
Read analysis →How Pakistan's Virtual Assets Act 2026 defines customer and Customer Assets, and why those two terms drive segregation, custody, audit and ins...
Read analysis →Who counts as a Controller of a Pakistani VASP, how the 20% threshold works, and why the significant influence catch-all captures more people ...
Read analysis →How Pakistan's Virtual Assets Act 2026 defines blockchain and DLT, the four properties a ledger must show, and why the definition matters for ...
Read analysis →Section 2(2)(f) of the Virtual Assets Act 2026 lets PVARA exclude any digital asset from the Act. What the residual exclusion means for planning.
Read analysis →Pakistan's Virtual Assets Act 2026 carves most NFTs out of regulation — but not all. The payment-or-investment test and the substance test dec...
Read analysis →Central bank digital currency is expressly outside the Virtual Assets Act 2026. What section 2(2)(c) excludes, and what it does not.
Read analysis →Which digital assets fall outside PVARA to the SBP or SECP under the Virtual Assets Act 2026, and how PVARA classifies borderline instruments.
Read analysis →Section 2(2)(a) of Pakistan's Virtual Assets Act 2026 excludes closed-loop tokens only if seven conditions are met. We read each one, and the ...
Read analysis →How Pakistan's Virtual Assets Act 2026 reaches offshore crypto exchanges through the "in or from Pakistan" test — and where the boundary remai...
Read analysis →Section 1 of the Virtual Assets Act 2026 brings it into force at once across Pakistan. What that means for the lapsed 2025 Ordinance and exist...
Read analysis →The step-by-step route for an offshore crypto exchange already serving Pakistani users: NOC, goAML, incorporation, licence and the transitiona...
Read analysis →Section 66 of the Virtual Assets Act 2026 sends every licensed VASP to the FBR. What the Act says on crypto tax in Pakistan, and what it leave...
Read analysis →Section 31 of the Virtual Assets Act 2026 sets six requirements for issuing a fiat-referenced token in Pakistan, plus a ban on algorithmic sta...
Read analysis →How the PVARA sandbox works: eligibility, Form I, the 60-working-day assessment, testing obligations, no-action relief and how participation e...
Read analysis →Every criminal and administrative penalty under the Virtual Assets Act 2026 — ceilings, prison terms, sections 54 and 59, and who decides what.
Read analysis →The Virtual Assets Act 2026 sets no number for VASP minimum capital. Here is what section 25 requires, what is left to Regulations, and what t...
Read analysis →PVARA's fit and proper test under section 20 and NOC Regulation 6: the four limbs, who it binds, and the three automatic disqualifiers.
Read analysis →How goAML registration works under PVARA's NOC Regulations 2025: which entity registers, what it unlocks, and when the local company takes ove...
Read analysis →The full PVARA licensing process from NOC application to full VASP licence, with the 60-day decision window and three-month licensing deadline...
Read analysis →Setting up a crypto company in Pakistan: why PVARA's No-Objection Certificate must precede SECP incorporation, and the correct legal sequence ...
Read analysis →A VASP is any person who, as a business, provides virtual asset services to third parties on a professional basis. The statutory test, limb by...
Read analysis →Section 3 of the Virtual Assets Act 2026 defines a virtual asset, and section 2 carves six things out of it. The definition and its boundaries...
Read analysis →Schedule I to the Virtual Assets Act 2026 lists ten categories of licensable virtual asset service. Each category, its scope and its exemptions.
Read analysis →Virtual assets are lawful but regulated in Pakistan, and are not legal tender. What the Virtual Assets Act 2026 permits, restricts and crimina...
Read analysis →The route to a virtual asset licence in Pakistan runs NOC, incorporation, then licence application. Every step, document and deadline in the s...
Read analysis →A PVARA No Objection Certificate must be obtained before incorporation. What the NOC permits, what it requires, and the sixty-day decision win...
Read analysis →A section-by-section map of Pakistan's Virtual Assets Act 2026: all twelve chapters, 74 sections and Schedule I, with what each one actually r...
Read analysis →PVARA is Pakistan's Virtual Assets Regulatory Authority, established under section 6 of the Virtual Assets Act 2026. Its status, mandate and p...
Read analysis →The Virtual Assets Act 2026 establishes PVARA to licence and supervise virtual asset businesses in Pakistan. What it covers, who it binds, and...
Read analysis →Section 50 of the Virtual Assets Act 2026 bars unlicensed virtual asset services in Pakistan. Here is the scope test, and exactly who falls in...
Read analysis →