Sandbox

No-Action Relief Under PVARA: What It Does and Does Not Give You

What a PVARA no-action letter actually covers, its statutory basis, and why the Sandbox Guidelines say plainly that it is not legal immunity.

“No-action letter” is one of the most misunderstood terms in Pakistan’s virtual asset framework. It sounds like a shield. Read against the actual text of the Sandbox Guidelines 2026 and the Virtual Assets Act, 2026, it is closer to a conditional, revocable promise from one regulator not to pursue one thing, for one period.

This matters because sandbox applicants sometimes treat a no-action letter as the finish line — proof they can now operate freely. The Pakistan Virtual Asset Regulatory Authority (PVARA) has written the opposite intention directly into the Guidelines.

What is a no-action letter under the PVARA sandbox?

A no-action letter is a statement from PVARA that it does not intend to take enforcement action in respect of specified conduct, for the duration of the sandbox test period. The Sandbox Guidelines 2026 define it as:

“‘No-Action Relief’ means a no-action letter issued by the Authority under Section 45 of the Ordinance, indicating that the Authority does not intend to take enforcement action in respect of specified conduct for a defined period.”

Section 14 of the Guidelines, headed “No-Action Relief,” restates the operative promise and immediately qualifies it:

“The Authority may issue a no-action letter to the participants, stating that it does not intend to take enforcement action in respect of specified conduct for the duration of the test period. However, the issuance of a no-action letter shall not constitute a legal immunity, and the Authority reserves the right to withdraw such a letter at any time by providing written notice.”

Three limits sit inside that one sentence: the relief covers specified conduct only, it runs for the test period only, and it is not immunity and can be withdrawn on written notice at any time. Nothing in the Guidelines describes a minimum notice period for withdrawal.

Where does PVARA’s power to issue no-action relief come from?

The Guidelines cite section 45 of “the Ordinance” as the source of this power. The Ordinance referred to throughout the Sandbox Guidelines is the Virtual Assets Ordinance, 2025, which was superseded by the Virtual Assets Act, 2026. The Act’s own section 74 is a savings provision: it states that anything done, or any right, privilege, obligation or liability accrued under the lapsed Ordinance “shall be deemed to have been validly done, taken, made, issued or accrued under the corresponding provisions of this Act.”

The Act’s corresponding sandbox provision sits at section 35, and section 35(3) provides that the Authority “may issue guidance, no-objection statements or no-action communications in accordance with Regulations.” Our reading is that this is the current statutory basis for no-action relief, read across from the lapsed Ordinance under the section 74 savings clause, and that the Guidelines’ own cross-reference to “Section 45 of the Ordinance” has not yet been renumbered to match the Act as passed. This is a drafting gap between two instruments, not a substantive one — but anyone relying on a specific section number in correspondence with PVARA should confirm the current position with the Authority rather than cite the Ordinance number as if it were current law.

What does “specified conduct” actually mean?

The letter is scoped to conduct PVARA names in it, not to the participant’s business generally. Neither the Guidelines nor the Act define how narrowly or broadly that specification must be drawn, which means the practical scope of any given letter depends entirely on its own wording.

This has a direct consequence for drafting a sandbox application. A participant should treat Form I — particularly Part A’s description of the innovation and Part B’s description of the product being tested — as the document that will end up defining what “specified conduct” means in the eventual letter. A vaguely described testing plan invites a narrowly or ambiguously scoped letter; a precisely described one gives PVARA something specific to grant relief against. Our Form I walkthrough sets out what each part of the form requires in detail.

Because the Guidelines say so in explicit terms, and because the letter only binds PVARA’s own enforcement discretion — it cannot bind any other regulator or displace any other law. A no-action letter is a statement of enforcement intent by one authority, not a grant of lawful status.

What a no-action letter does not do, based on the structure of the Act and the Guidelines together:

  • It does not exempt the participant from the prohibitions in Chapter 9 of the Act, including unlicensed provision of virtual asset services under section 50 or market manipulation and insider trading under section 52.
  • It does not displace obligations under the Anti-Money Laundering Act, 2010, which section 46 of the Act applies to licensed virtual asset service providers as if they were financial institutions.
  • It does not bind the State Bank of Pakistan, the Securities and Exchange Commission of Pakistan, the Federal Board of Revenue, or any other regulator with a separate mandate over the same activity.
  • It does not survive its own withdrawal — PVARA can end it at any time by written notice, and the Guidelines set no minimum notice period.
  • It does not extend past the test period. Relief tied to a sandbox test period lapses when that period ends, exits, or is suspended.

How does no-action relief differ from a No Objection Certificate?

They serve different stages and carry different weight. A No Objection Certificate (NOC), under section 19 of the Act, is a precondition to incorporating a company for the purpose of providing virtual asset services — it is required before the applicant even exists as a licensed entity, and it is a step toward a full licence application. No-action relief is issued to an already-approved sandbox participant, and it addresses PVARA’s enforcement posture toward specified conduct during a live test, not the applicant’s right to incorporate or eventually be licensed.

  No Objection Certificate No-Action Letter
Stage Before incorporation, under s.19 of the Act During an approved sandbox test
What it confirms No objection to incorporating for a virtual asset business PVARA does not intend to pursue enforcement over specified conduct
Legal effect A precondition to the incorporation and licensing pathway Not legal immunity; revocable on written notice
Duration Tied to the incorporation and licensing timeline Tied to the sandbox test period

Both instruments sit inside a wider set of entry routes into Pakistan’s virtual asset market; our comparison of sandbox, NOC, no-action and full licence sets all four routes side by side.

Does withdrawal of a no-action letter end the sandbox test itself?

The Guidelines do not say so directly, and the two powers are described in separate sections. Section 13 covers suspension or withdrawal of sandbox approval on grounds of failure to adhere to agreed terms or a serious discrepancy related to consumer detriment. Section 14 covers withdrawal of a no-action letter specifically, without stating a ground beyond PVARA’s own discretion on written notice.

Our reading is that these are two independent levers PVARA can pull separately: a participant could, in principle, remain approved to test while losing no-action relief over specified conduct, which would leave that conduct newly exposed to enforcement action even though the sandbox approval itself continues. A testing plan should not assume the two protections rise and fall together.

How should a participant treat no-action relief in practice?

Treat it as a narrow, time-bound and revocable management of regulatory risk with PVARA specifically — not as a general licence to operate, and not as protection from any regulator other than PVARA. The safest working assumption is that every other law, and every other regulator’s mandate, continues to apply in full during a sandbox test, and that the letter only ever does the one job the Guidelines describe: telling the participant which specified conduct PVARA does not currently intend to act against, for as long as the letter stands.

Anyone weighing whether a no-action letter changes their banking, tax or corporate setup position should treat that as a separate question, answered by the ordinary rules that apply to their entity — not by the fact of holding the letter.

About this analysis

This analysis was prepared by the CoinConnect research desk from the Virtual Assets Act, 2026, the PVARA No Objection Certificate Regulations and the PVARA Sandbox Guidelines 2026, read as published. Where practice is not yet settled or guidance has not been issued, that is stated in the text above.

Regulatory positions change and specific requirements should be verified against the current position published by the relevant authority before you act on them. This is information and analysis, not legal advice, and it does not create an advisory relationship. Take professional advice on your own circumstances.

Entering Pakistan's crypto market?

CoinConnect handles market entry, partnerships, PR and launch for exchanges and Web3 companies moving into Pakistan and South Asia.

Visit CoinConnect