Moldova
Moldova has one anti-money laundering law and three supervisors. The National Bank of Moldova licenses banks, payment firms and insurers and supervises them for AML, the National Commission for Financial Markets covers investment firms and, from March 2027, crypto, and the SPCSB receives reports and supervises gambling. Remote onboarding is allowed under strict rules, but only for Moldovan citizens. Telecom, healthcare, eCommerce, travel and public services follow their own identity rules.
Compliance guides by industry
More countries in this region
Launching in a new market?
Navigate local compliance requirements with confidence. Identomat helps you build verification workflows tailored to your business and the markets you operate in.
Frequrently asked questions
Law No. 308/2017 is the anti-money laundering law. The Office for Prevention and Fight against Money Laundering (SPCSB) is the financial intelligence unit that receives suspicious activity, cash and threshold reports through goAML, and it supervises gambling organisers and traders paid in cash. The National Bank of Moldova supervises banks, payment and e-money firms, life insurers and currency exchange units, and the National Commission for Financial Markets supervises investment firms and will authorise crypto providers from March 2027.
Yes, but under the AML law only Moldovan citizens, and resident companies whose owners, directors and representatives are all citizens, may be identified electronically. Accepted methods are a qualified electronic signature, a live video or photo session with liveness checks of the original identity document, or a qualified trust service provider. Firms supervised by the National Bank must notify it 30 days before launch. An extension to EU citizens is adopted but not yet in effect.
Not yet. Providing virtual asset services in Moldova is prohibited under the AML law, with fines and criminal penalties, and residents may deal with foreign providers only through banks, capped at 50,000 lei a month. Law No. 180/2026, modelled on MiCA, applies from 17 March 2027: firms will need authorisation from the National Commission for Financial Markets before serving anyone, valid only in Moldova. The AML ban had not been repealed as of November 2026.
In practice, yes. Law No. 195/2024 on personal data protection, modelled on the GDPR, has applied since 23 August 2026 and treats biometric data used to identify a person as a special category, processed only under an exception such as explicit consent. The National Bank's e-KYC Regulation requires consent before electronic identification starts, and the government remote identification procedure stores the consent with the evidence file. Fines reach 2,000,000 lei or 2% of turnover, phased in over three years.
Telecom operators, healthcare providers and pharmacies, non-life insurers, online shops and marketplaces, tour operators, hotels and public authorities are not reporting entities under Law No. 308/2017. The exceptions are a hotel running a licensed currency exchange desk and any trader taking 200,000 lei or more in cash for goods. These sectors follow their own identity rules instead, such as mandatory SIM user identification, the health insurance norms and the electronic identification law.