Cuba: Where Crypto Law and Reality Diverge Completely
Operating a crypto ATM in Cuba is theoretically permitted under Cuban domestic law — the central bank created a VASP licensing framework in 2021–2022, and exactly one license has ever been issued. The decisive obstacle is not Cuban law itself, but the comprehensive US sanctions regime, which prohibits virtually all financial technology operations involving Cuba and exposes any company with US nexus to severe civil and criminal penalties. For General Bytes, which operates a US subsidiary, this is not a theoretical risk — it is a direct jurisdictional exposure.
● Red
|
1
VASP license ever issued under Cuba's own 2021 framework
|
$8.9B
Fine precedent for Cuba-sanctions violations (BNP Paribas)
|
Denial
Default US export-control policy (EAR) for ATM hardware to Cuba
|
Last updated: September 2026
One Framework, One Insuperable Barrier
Cuba established a legal framework for virtual asset operations through BCC Resolution 215/2021, which entered into force on September 15, 2021. It defines virtual assets, creates a VASP licensing regime, and explicitly permits P2P transactions between individuals. Legal persons may only use virtual assets when expressly authorized by the BCC. Virtual assets are classified as intangible property — not legal tender, not foreign currency.¹
BCC Resolution 89/2022 established detailed licensing procedures, creating a "Grupo de Criptoactivos" advisory body and defining one-year renewable licenses. As of March 2026, the BCC has issued exactly one VASP license — to EBIORO UAB, a Lithuanian-registered company (Resolution 8/2025, January 27, 2025). A separate authorization (Resolution 4/2026) permitted 10 private enterprises to use crypto exclusively for cross-border payments through licensed VASPs.²
The critical legal impediment is the US sanctions regime. The Cuban Assets Control Regulations (CACR, 31 CFR Part 515), administered by OFAC, impose a comprehensive embargo prohibiting virtually all transactions between US persons and Cuba. OFAC treats digital assets identically to fiat currency for sanctions purposes.⁴ Cuba remains on the State Sponsors of Terrorism (SSOT) list. The Helms-Burton Act Title III — reactivated on January 31, 2025 — creates private rights of action against any person worldwide trafficking in confiscated Cuban property. A January 29, 2026 Executive Order declared a national emergency with respect to Cuba under IEEPA, further escalating sanctions.³ A second order, Executive Order 14404 of May 1, 2026, escalated matters further by adding secondary-sanctions exposure: foreign financial institutions dealing with key Cuban state entities (including the military-linked conglomerate GAESA) across energy, defense, mining and financial services now risk being cut off from the US financial system themselves — a materially higher-stakes environment for any bank or payment processor a crypto ATM operator would need to rely on.¹⁷
Beyond the financial embargo, physically shipping the ATM hardware itself is separately restricted. Under the Export Administration Regulations (EAR, 15 CFR §746.2), the US Bureau of Industry and Security (BIS) applies a general policy of denial to exports and re-exports of US-origin equipment to Cuba. Narrow license exceptions exist for categories such as medicine, aviation safety, telecommunications and general support for the Cuban people, but none straightforwardly covers ATM hardware — an export license would need to be sought on a case-by-case basis and could be refused outright.¹³
Getting Licensed: Possible in Theory
Cuba's VASP license (Autorización de Proveedor de Servicios de Activos Virtuales) is issued by the Banco Central de Cuba. Foreign legal persons may apply; local incorporation is not strictly required, but operations must be conducted "in and from" Cuban territory. License duration is one year, renewable once — explicitly framed as experimental. Decision timeline: up to 90 working days from receipt of complete documentation.⁵
Application requirements include: corporate bylaws covering VASP activities, business proposal, AML/CFT procedures for submission to the DGIOF (Cuba's Financial Intelligence Unit), organizational structure, initial capital statement, and risk disclosure policies. All documents must be translated into Spanish with certified notarization. Foreign investment establishment requires Council of Ministers authorization under Law 118/2014, with a 60-day decision timeline.⁶
Estimated legal and advisory costs: $30,000–$80,000. Estimated total authorization timeline: 9–18 months. No minimum capital is specified in published regulations — identified as a regulatory gap by legal analysts.¹²
AML and KYC: Formally Structured, Practically Opaque
Licensed VASPs are classified as obligated entities under Decreto-Ley No. 317/2013 and must register with the DGIOF, implement full Customer Due Diligence, file Suspicious Transaction Reports directly with the FIU, maintain records for a minimum of five years, and screen against global and domestic sanctions lists.⁷
Specific numeric thresholds for crypto ATM transactions have not been published. In practice, given the VASP framework, all transactions through a licensed VASP would require full customer identification — effectively eliminating anonymous use.⁸
A significant transparency concern: the US State Department has consistently noted that actual numbers of STRs filed by Cuban institutions are "not available." Cuba's opaque banking system hampers monitoring of AML effectiveness. No Mutual Legal Assistance Treaty exists between Cuba and the United States.⁹
Banking: Practically Impossible
Cuba's banking system is entirely state-controlled, comprising 8–9 state-owned commercial banks. No major international banks operate in Cuba. The system is virtually closed and almost entirely disconnected from the global financial system.¹⁰
Cuba's SSOT designation triggers automatic de-risking by virtually all international correspondent banks. BNP Paribas paid $8.9 billion in 2014 for violations including Cuba sanctions; UBS was fined over $100 million for processing dollar transactions with Cuba. Even if a local Cuban bank account is opened, transferring funds internationally is extraordinarily difficult. Cuba entered China's CIPS payment system in 2025, providing limited alternative processing, but this does not resolve the fundamental isolation from Western financial infrastructure.¹¹
The Next 24 Months: Domestic Expansion, Escalating Sanctions
Cuba's domestic regulatory trajectory shows cautious, experimental expansion — additional VASP licenses under evaluation, potential extension of the crypto payment pilot beyond 10 enterprises, and crypto taxation rules expected within 12–24 months. Guideline No. 37 of Cuba's 2021–2026 socioeconomic policy mandates advancing the study of cryptocurrency use in the economy.¹⁴
The counterbalancing force is decisive. The Trump administration's maximum pressure campaign has reversed all Biden-era relaxations: the January 2026 national emergency declaration, the May 2026 secondary-sanctions order (EO 14404), reactivation of Helms-Burton Title III, an expanded Cuba Restricted List (247 entities as of mid-2025), and strengthened NSPM-5 (June 2025) signal that US sanctions will intensify, not relax, over the next 12–24 months.¹⁵
Beyond sanctions, Cuba's collapsing infrastructure makes even physical ATM operation impractical: daily blackouts exceeding 15–20 hours, unreliable internet (87.5% of users on 3G), a state telecommunications monopoly, GDP contraction, and an average monthly state salary equivalent to approximately $13 at informal exchange rates. The total addressable market is estimated at 100,000–200,000 crypto users in a country of 11 million.¹⁶
The only scenario in which Cuba market entry could become viable would require removal from the SSOT list, significant OFAC relaxation, Congressional modification of the Helms-Burton Act, and stabilization of Cuba's power grid and internet infrastructure. None of these conditions appear likely within the next 24 months.
Sources and references:
1. BCC Resolution 215/2021 & LexLatin & Banco Central de Cuba, 2. BCC Resolution 89/2022 & LexLatin & OnCubaNews, 3. OFAC CACR 31 CFR Part 515 & Baker McKenzie & Congress.gov & Wikipedia, 4. OFAC & AML Watcher, 5. BCC Resolution 89/2022 & CubaHeadlines & QvaPay, 6. Negolution & Manimama & Mincex, 7. Decreto-Ley 317/2013 & LexLatin & Manimama, 8. Lightspark & Cryptocurrency, 9. U.S. Department of State, 10. Wikipedia & Expat Focus & Jarnias Cyril, 11. Jarnias Cyril & AML Watcher & BNP Paribas reporting, 12. General Bytes Internal Cost Analysis & MINCEX, 13. Bureau of Industry and Security (EAR Section 746.2, Cuba export controls) & Baker McKenzie, 14. OnCubaNews & QvaPay, 15. Wikipedia & Congress.gov & Orrick & The White House & Federal Register — Updating the Cuba Restricted List (247 entities, effective July 14, 2025), 16. CubaHeadlines & Brave New Coin & OnCuba News, 17. The White House — Executive Order 14404 & Holland & Knight — New IEEPA Executive Order Expands Cuba Sanctions Risks.
Legal Disclaimer: This blog article by GENERAL BYTES is for informational purposes only and does not constitute formal legal, financial, or investment advice. Cuba's regulatory and sanctions landscape is subject to rapid change; always consult with specialized legal counsel before considering market entry.