Bitcoin & Cryptocurrency Regulation in Sri Lanka

There is no law in Sri Lanka that bans owning or investing in Bitcoin and other cryptocurrencies. At the same time, crypto is not recognised as legal tender and operates largely outside the regulated financial system. The Sri Lankan rupee remains the only currency recognised for domestic payments, and the Central Bank of Sri Lanka has made clear that crypto cannot be used as a means of payment within the country.

This creates a two-sided picture. Buying and holding crypto as an investment is generally tolerated, but it carries no consumer or investor protection: if a platform fails, an exchange is hacked, or you fall victim to a scam, no domestic regulator stands behind your funds. The CBSL has stated that it has not authorised or licensed any entity to operate crypto exchanges, initial coin offerings, mining schemes, or virtual-currency advisory services. Treat the entire space as unregulated and use it at your own risk.

Sri Lanka does not yet have a dedicated, comprehensive cryptocurrency law. Instead, several authorities apply existing rules to crypto activity, and a new framework is being built:

• Central Bank of Sri Lanka (CBSL): Oversees monetary policy, payments, and foreign exchange. It has issued multiple public notices warning of the risks of using and investing in virtual currencies and confirming that no crypto business is licensed.
• Financial Intelligence Unit (FIU): Handles anti-money-laundering (AML) and counter-terrorist-financing (CFT) supervision under the Financial Transactions Reporting Act. The FIU has moved to identify and survey virtual asset service providers (VASPs) operating in the country.
• Securities and Exchange Commission (SEC): May have jurisdiction where a digital asset behaves like a security or investment product.
• Inland Revenue Department (IRD): Administers taxation, including potential tax on gains and crypto-related business income.

A national policy and prudential framework for VASPs is being developed by a dedicated subcommittee under the country's AML/CFT coordinating body, chaired by the CBSL Governor and involving the Ministry tasked with the digital economy. The roadmap is widely reported to include registering VASPs, classifying virtual assets as a distinct legal category, and implementing AML measures such as the international "travel rule." Much of this effort is tied to aligning Sri Lanka with global Financial Action Task Force (FATF) standards. As of mid-2026, this framework had not been finalised into enacted, gazetted legislation, so the legal landscape should be treated as transitional and subject to change.

No cryptocurrency exchange is licensed or authorised to operate in Sri Lanka, and banks are prohibited from processing crypto-related transactions. The CBSL has specifically said that electronic fund transfer cards, including debit and credit cards, may not be used for payments connected to cryptocurrency. This is reinforced by the country's foreign-exchange regime, which restricts how rupees can be converted and moved abroad.

Because of these restrictions, Sri Lankan users who buy crypto typically rely on:

• International exchanges accessed online, where funding and withdrawals can be difficult given local banking limits.
• Peer-to-peer (P2P) trading, where buyers and sellers transact directly, often arranging local-currency settlement between themselves.

Both routes carry meaningful risk. P2P deals expose users to fraud, chargeback abuse, and counterparties who do not deliver. Using overseas platforms can raise compliance questions under foreign-exchange rules and offers no recourse through a Sri Lankan regulator. Anyone trading should keep careful records, be cautious of "guaranteed return" offers, and assume there is no safety net if something goes wrong.

Sri Lanka does not have an established, regulated network of Bitcoin ATMs. Because no crypto exchange or related service is licensed and banks are kept away from crypto, there is no legal framework supporting cash-to-crypto kiosks of the kind found in some other countries. Travellers and residents should not expect to find reliable, compliant Bitcoin ATMs on the ground.

If any kiosk advertising crypto cash services does appear, approach it with extreme caution: it would be operating in a legal grey area at best, with no oversight and a high potential for inflated fees or fraud. For most people in Sri Lanka, online platforms and P2P arrangements remain the practical, if unregulated, options rather than physical ATMs.

Cryptocurrency mining is not licensed or authorised in Sri Lanka. The Central Bank has explicitly stated that it has not approved any mining operations or virtual-currency schemes, and there is no dedicated framework that permits, regulates, or incentivises commercial Bitcoin mining on the island.

Practical factors also weigh against mining locally. Sri Lanka has experienced periods of electricity-supply pressure and tariff increases, and proof-of-work mining is highly energy-intensive, so power cost and reliability are real constraints. Ideas often floated for the region, such as solar-powered rigs or renewable energy to lower costs and emissions, remain largely aspirational rather than backed by clear policy. Anyone considering mining should recognise that mining income could be treated as a taxable business activity, that hardware imports and electricity use may carry their own costs, and that the absence of authorisation leaves the activity legally uncertain. Verify the current position with the CBSL, the IRD, and a qualified local adviser before committing capital.

Remittances from Sri Lankans working abroad are a vital source of foreign exchange, so the appeal of crypto for cross-border transfers, potentially faster and cheaper than some traditional channels, is easy to understand. In theory, Bitcoin and stablecoins let a worker overseas send value home in minutes without a conventional money-transfer operator.

In practice, the obstacles are significant. Crypto cannot be used for domestic payment in Sri Lanka, banks will not process crypto transactions, and converting received crypto into usable rupees usually means relying on unregulated P2P channels. That introduces exchange-rate volatility, the risk of fraud on the cash-out leg, and possible tension with foreign-exchange regulations. Licensed money-transfer providers and the official remittance system remain the compliant route. Crypto-based remittances may grow if a clear VASP framework is enacted, but until then they sit in a risky, unregulated space and should not be assumed to be a safe or lawful substitute.

Whether crypto is a sensible investment is a personal decision that depends on your goals, time horizon, and tolerance for loss; nothing here is a recommendation to buy or sell. What is specific to Sri Lanka is the extra layer of risk created by the regulatory environment.

Beyond the well-known volatility of crypto markets, Sri Lankan investors face no domestic investor protection or compensation scheme, difficulty funding and withdrawing through local banks, reliance on overseas or P2P platforms with limited recourse, and potential tax on any gains. Crypto-investment scams are also a recurring theme in the Central Bank's warnings. If you choose to participate, treat it as high-risk capital you can afford to lose, use reputable platforms and strong security, keep detailed records, and never invest on promises of guaranteed or unusually high returns. Consider speaking with a qualified, independent financial adviser first.

Because no exchange is licensed and banks block crypto transactions, buying crypto in Sri Lanka is possible but comes with real friction and risk. The general steps people follow are:

• Educate yourself first. Understand how wallets, private keys, and exchanges work, and read the CBSL's warnings so you go in with eyes open.
• Choose a platform. Most users turn to established international exchanges or reputable P2P services; research each platform's security history, fees, and treatment of Sri Lankan users.
• Complete identity verification. Reputable platforms require KYC (know-your-customer) checks; be wary of anything that does not.
• Arrange funding carefully. Local card and bank funding is restricted, so settlement is often via P2P. Confirm any movement of funds is consistent with foreign-exchange rules.
• Secure your assets. Move holdings to a wallet you control, enable two-factor authentication, and never share your seed phrase. For larger amounts, consider a hardware wallet.
• Keep records. Save dates, amounts, and prices for every transaction in case they are needed for tax reporting.

Because this happens outside a regulated framework, proceed cautiously and assume you bear the full risk of any loss.

The central risk in Sri Lanka is the lack of regulation and protection. Without licensed exchanges or a complete legal framework, users are exposed to platform failures, hacks, scams, illiquidity when cashing out, and uncertainty over how foreign-exchange and tax rules apply to them. The Central Bank's repeated warnings underline that anyone using crypto does so entirely at their own risk.

The outlook, however, is one of gradual formalisation. Authorities have begun identifying VASPs, a national framework is being drafted with AML/CFT and FATF compliance at its core, and proposals to bring virtual-asset providers under the country's financial-reporting and registration regime have been put forward. If these efforts result in enacted law, Sri Lanka could move toward licensed, supervised crypto services and clearer tax and investor-protection rules. None of this is guaranteed or final, and timelines may slip. For now, the safest approach is to stay informed, rely on official sources such as the CBSL, FIU, SEC, and IRD, and treat all activity as unregulated until the legal position is settled. This section is informational only and not legal, tax, or financial advice.

Is cryptocurrency legal in Sri Lanka?

Can I use my Sri Lankan bank account or card to buy crypto?

Do I have to pay tax on crypto in Sri Lanka?

Are crypto exchanges or Bitcoin ATMs licensed in Sri Lanka?

Is Sri Lanka planning to regulate cryptocurrency?