Bitcoin & Cryptocurrency Regulation in Sri Lanka

There is no law in Sri Lanka that bans owning or investing in Bitcoin and other cryptocurrencies. In September 2025, the CBSL Governor publicly confirmed that, in the absence of specific laws or regulations, there is no legal impediment to a Sri Lankan investing in cryptocurrency or virtual currency. At the same time, crypto is not recognised as legal tender, and the Governor made equally clear that it cannot be used as a means of payment within the country. The Sri Lankan rupee remains the only currency recognised for domestic payments.

This produces a two-sided picture. Buying and holding crypto as an investment is tolerated, but it carries no consumer or investor protection: if a platform fails, an exchange is hacked, or you fall victim to a scam, no Sri Lankan regulator stands behind your funds. The CBSL has stated it has not licensed or authorised any entity to operate crypto exchanges, initial coin offerings (ICOs), mining schemes, or virtual-currency businesses. Treat the entire space as unregulated and use it at your own risk. For background on how this compares globally, see our overview of crypto regulation.

Sri Lanka does not yet have a single, comprehensive crypto law, so several authorities apply existing rules and a new framework is being assembled:

• Central Bank of Sri Lanka (CBSL): the monetary authority responsible for monetary policy, payments, and foreign exchange. It has issued the public warnings on virtual currencies and confirms no crypto business is licensed. Official site: cbsl.gov.lk.
• Securities and Exchange Commission of Sri Lanka (SEC): under the proposed VASP framework discussed during 2026, the SEC is designated as the lead regulator for virtual assets. Official site: sec.gov.lk.
• Financial Intelligence Unit (FIU) of Sri Lanka: handles anti-money-laundering (AML) and counter-terrorist-financing (CFT) supervision under the Financial Transactions Reporting Act, No. 6 of 2006, and operates as an independent unit within the CBSL.
• Inland Revenue Department (IRD): administers taxation, including capital gains and business-income tax that can apply to crypto.

Policy is being coordinated through a VASP Sub-Committee under the national AML/CFT coordinating structure, involving the CBSL, the SEC, the FIU, and the Ministry of Digital Economy. Because the SEC's role as lead regulator is part of a proposed framework not yet fully enacted, treat the institutional picture as transitional and confirm responsibilities with the regulators directly.

The current rules come mainly from foreign-exchange and AML legislation, not a bespoke crypto statute:

• Foreign Exchange Act, No. 12 of 2017: the CBSL's April 2021 public notice confirmed that virtual currencies are not a recognised investment category under this Act and that no crypto business has been authorised under it.
• Directions No. 03 of 2021 (Department of Foreign Exchange): issued under the Foreign Exchange Act, these prohibit the use of Electronic Fund Transfer Cards (EFTCs), including debit and credit cards, for payments related to virtual-currency transactions.
• Financial Transactions Reporting Act, No. 6 of 2006: the basis for the FIU's AML/CFT mandate; proposed amendments to bring VASPs clearly within its scope have been under discussion in 2026.
• Inland Revenue Act, No. 24 of 2017: the general tax law under which crypto gains are treated (see the taxation section below).

A dedicated VASP framework is being drafted to align Sri Lanka with Financial Action Task Force (FATF) standards. As of 2026 it had not been finalised into enacted, gazetted legislation, so the legal landscape should be treated as evolving. Verify the latest position with the CBSL and SEC.

No cryptocurrency exchange is currently licensed or authorised to operate in Sri Lanka, and the CBSL has repeatedly stated it has not given any licence or authorisation to any entity to run virtual-currency schemes, exchanges, ICOs, or mining operations. Banks are also prohibited from processing crypto transactions, and cards cannot be used for crypto-related payments under the 2021 Directions.

That is set to change if the proposed VASP framework is enacted. Through 2025 and 2026, a VASP Sub-Committee, whose fourth meeting was held at the Central Bank on 25 May 2026, has been developing a formal, internationally compliant regime. The reported direction includes designating the SEC as lead regulator, registering and supervising VASPs, requiring registration with the FIU for AML/CFT purposes, classifying virtual assets as a distinct legal category, and formalising the policy through a Cabinet Memorandum and concept paper. Until such law is enacted and a licensing window opens, anyone offering exchange or custody services to the Sri Lankan public is doing so outside any authorised regime, and users have no regulatory recourse.

Sri Lanka has no dedicated cryptocurrency tax code, but that does not make crypto gains tax-free. The Inland Revenue Department treats cryptocurrencies as intangible property, so they fall under the existing rules in the Inland Revenue Act, No. 24 of 2017. In practice this means gains from selling or exchanging crypto can be subject to Capital Gains Tax, with the taxable gain calculated as the difference between the disposal price and the acquisition cost. Crypto received as business income or from activities such as trading or mining may instead be taxed as income.

Rates and reporting rules are changing. Reporting around 2025 to 2026 indicated a capital gains tax rate of about 10 percent for individuals, and an Inland Revenue (Amendment) Bill published in February 2026 was reported to propose changes to capital gains tax rates. Because the figures are evolving and depend on your personal circumstances, do not rely on a single headline number: confirm your obligations directly with the IRD or a qualified Sri Lankan tax adviser. For general background, see our guide to crypto taxes. This page does not provide tax advice.

Anti-money-laundering and know-your-customer obligations sit at the centre of Sri Lanka's emerging approach to crypto. The Financial Intelligence Unit, operating under the Financial Transactions Reporting Act, No. 6 of 2006, is responsible for AML/CFT supervision and has been working to bring virtual asset service providers within its reporting and due-diligence regime.

Much of the urgency is driven by Sri Lanka's participation in the FATF Mutual Evaluation process, which assesses how effectively a country counters money laundering and terrorist financing, including risks from virtual assets. The proposed VASP framework is expected to require registered providers to perform customer due diligence (KYC), monitor and report suspicious transactions, and implement international measures such as the FATF travel rule for transfers. For users, the practical takeaway is to expect identity verification on any reputable platform and to be wary of any service that asks for none. Until the framework is law, AML coverage of crypto remains incomplete, which is part of why the CBSL flags money-laundering and terrorist-financing risks in its warnings.

Because no exchange is licensed and banks block crypto transactions, buying crypto in Sri Lanka is possible but comes with real friction. The general steps people follow are:

• Educate yourself first. Understand wallets, private keys, and exchanges, and read the CBSL's warnings so you go in with eyes open.
• Choose a platform. Most users turn to established international exchanges or reputable peer-to-peer (P2P) services; research each platform's security history, fees, and treatment of Sri Lankan users.
• Complete identity verification. Reputable platforms require KYC checks; be wary of anything that does not.
• Fund carefully. Local card and bank funding for crypto is restricted, so settlement is often via P2P. Make sure any movement of funds is consistent with foreign-exchange rules.
• Secure your assets. Move holdings to a wallet you control, enable two-factor authentication, and never share your seed phrase. For larger amounts, consider a hardware wallet.
• Keep records. Save dates, amounts, and prices for every transaction for possible tax reporting.

Crypto cannot be used for domestic payments, and using overseas platforms or P2P channels can raise foreign-exchange compliance questions and offers no recourse through a Sri Lankan regulator. Proceed cautiously and assume you bear the full risk of any loss.

Cryptocurrency mining is not licensed or authorised in Sri Lanka. The CBSL has explicitly stated it has not approved any mining operations or virtual-currency schemes, and there is no dedicated framework that permits, regulates, or incentivises commercial Bitcoin mining.

Practical factors also weigh against mining locally. Sri Lanka has experienced periods of electricity-supply pressure and tariff increases, and proof-of-work mining is highly energy-intensive, so power cost and reliability are real constraints. Anyone considering mining should recognise that mining income could be treated as a taxable activity by the IRD, that hardware imports and electricity use carry their own costs, and that the absence of authorisation leaves the activity legally uncertain. Verify the current position with the CBSL, the IRD, and a qualified local adviser before committing capital.

The most significant shift is the move from blanket warnings toward an organised framework. In September 2025 the CBSL Governor publicly clarified that investing in crypto faces no legal barrier while reiterating that it cannot be used for payments, and signalled that laws would be developed to require virtual asset service providers to register with the FIU and to guard against money laundering.

Through 2026, a VASP Sub-Committee, with its fourth meeting held at the Central Bank on 25 May 2026, advanced a draft framework. Reported outcomes include designating the Securities and Exchange Commission of Sri Lanka as the lead regulator for virtual assets, discussing amendments to the Financial Transactions Reporting Act, and tracking Sri Lanka's FATF Mutual Evaluation, with the next step being a Cabinet Memorandum and concept paper. On tax, an Inland Revenue (Amendment) Bill published in February 2026 was reported to include capital gains tax changes relevant to crypto. None of this is finalised law as of 2026, and timelines can slip, so treat these as developing proposals and confirm the current status with the official sources.

The central risk in Sri Lanka is the lack of regulation and protection. Without licensed exchanges or a complete legal framework, users are exposed to platform failures, hacks, scams, illiquidity when cashing out, and uncertainty over how foreign-exchange and tax rules apply. The CBSL has described virtual currencies as unregulated financial instruments with no regulatory oversight or safeguards in Sri Lanka, warning that investors have no specific legal or regulatory recourse in the event of a dispute, and that crypto carries financial, operational, legal, customer-protection, and security risks. The Central Bank has also issued specific notices about protecting the public from crypto investment scams.

If you choose to participate, treat it as high-risk capital you can afford to lose, use reputable platforms with strong security, keep detailed records, and never act on promises of guaranteed or unusually high returns. Consider speaking with a qualified, independent financial adviser first. Until a VASP framework is enacted, assume there is no safety net.

Because the rules are evolving, always confirm the current position with the named official regulators rather than relying on secondary commentary. The primary official sources are:

• Central Bank of Sri Lanka (CBSL), for public notices on virtual currencies, the Foreign Exchange Act position, and payment rules.
• Securities and Exchange Commission of Sri Lanka (SEC), the proposed lead regulator for virtual assets under the VASP framework.
• Inland Revenue Department (IRD), for capital gains and income tax treatment of crypto.
• Financial Intelligence Unit of Sri Lanka (FIU), for AML/CFT rules and VASP reporting.

You can also compare other jurisdictions through our regulation hub. This page is general information as of 2026 and is not legal, tax, or financial advice; verify your specific situation with the CBSL and the other named regulators or a qualified Sri Lankan professional before acting.

Is cryptocurrency legal in Sri Lanka?

Who is the main crypto regulator in Sri Lanka?

Can I use my Sri Lankan bank account or card to buy crypto?

Do I have to pay tax on crypto in Sri Lanka?

Are crypto exchanges or Bitcoin ATMs licensed in Sri Lanka?

Is Sri Lanka going to regulate cryptocurrency?