Curacao has published how it expects licensed operators to handle crypto, and the first deadline is weeks away rather than months. Every B2C licensee must have a compliant crypto policy filed with the Curacao Gaming Authority by September 2026. Two further deadlines follow in December 2026 and June 2027, and the regulator has reserved the right to pull any of them forward where it judges the risk warrants it.
Some of it is not a deadline at all. The prohibitions on mixers, tumblers and sanctioned addresses are in force now. If your deposit flow currently accepts funds from those sources, you are already outside the rules while you read this.
This is a practitioner's read of what changed, what it costs, and whether it should change the jurisdiction you pick. It follows on from the wider LOK deadline schedule, which covers the licensing obligations this crypto policy now sits inside.
Crypto is a payment method, not a service you offer
The central distinction is narrow and it catches more operators than it first appears to. You may accept digital assets for deposits and withdrawals. You may not act as an exchange, a payment services provider or a virtual asset service provider.
In practice that rules out swapping or converting assets on a player's behalf, and it rules out holding crypto for a player outside an actual gambling transaction. A wallet balance a player treats as storage rather than a stake is the thing the regulator is describing. It also reaches beyond the licence holder itself to group companies supporting the licensed operation, so moving the function to a sister entity does not solve it.
Player to player transfers are out entirely.
The wallet architecture is now prescribed
Treasury structure stops being an internal preference and becomes a licensing condition.
- Player funds sit in segregated wallets. Not commingled with anything else.
- Player, operational and treasury wallets stay separate. Three distinct pools, not one wallet doing three jobs.
- Withdrawals return to the deposit wallet, in the deposit asset. Deposit in one asset and withdraw in another is closed off, and so is withdrawing to an address the player did not deposit from.
- Personal, employee and owner linked wallets cannot be used operationally. The founder's own wallet as a hot wallet is now a finding.
For a small operator running one wallet and good intentions, this is a rebuild rather than a policy update. Budget engineering time, not just legal time.
Screening runs at both ends
The regulator expects blockchain analytics on deposits and on withdrawals. Chainalysis, Elliptic and TRM Labs are named as the kind of tooling contemplated, but no single provider is mandated, so you are free to choose and free to be judged on the outcome.
Funds connected to sanctioned addresses, mixers or tumblers cannot be accepted. That is a present obligation with no transition window attached to it.
Which assets the regulator wants on your books
The guidance sorts assets into risk lanes rather than banning categories outright. Fiat backed regulated stablecoins are the preferred lane. Privacy coins including Monero and Zcash, along with meme coins, speculative tokens and wrapped assets, attract stricter treatment and a heavier justification burden.
Wrapped assets carry a specific warning. Where the backing or the origin of the underlying asset cannot be verified, a wrapped token can become unusable to you regardless of how liquid it looks. If wrapped Bitcoin is a meaningful share of your deposit mix, that is worth modelling now.
None of this makes a privacy coin illegal to accept. It makes accepting one an evidenced decision you have to defend, which is a different thing and a more expensive one.
The three deadlines
- September 2026. A compliant crypto policy uploaded to the CGA portal. This is the gate everything else hangs off, and it is the one nearly here.
- December 2026. Crypto risk assessments, VASP due diligence, wallet ownership controls, transaction monitoring procedures and staff training.
- June 2027. Wallet segregation, blockchain analytics, reconciliation, withdrawal whitelisting and audit ready records fully operational.
The sequencing is deliberate. September is a document, December is a set of procedures, June is working infrastructure. An operator who treats September as a formality and defers the thinking will find that December arrives with the real work untouched.
What this actually costs
Be honest with yourself about the run rate rather than the one-off. A blockchain analytics subscription is recurring. Wallet segregation means custody engineering and reconciliation that somebody has to own. Staff training is a repeating obligation, not a slide deck you write once. Withdrawal whitelisting changes your support load, because players will contact you about it.
The policy also tracks Financial Action Task Force thinking, including Recommendation 16, the Travel Rule, on originator and beneficiary data. If your compliance programme has been treating the Travel Rule as somebody else's problem, that assumption has a shelf life.
Does this change which licence you should hold
For some operators it should, and for others it very much should not.
The argument for Curacao was never that it was cheap. It was that the name carries weight with payment providers, banks and game suppliers, which converts directly into commercial doors opening. A regulator publishing a specific, dated, technically detailed crypto regime strengthens that argument rather than weakening it, because it is exactly the kind of supervision a payment partner wants to see behind a merchant. We set out how that acceptance dynamic works in the guide to crypto casino payments.
The counter-argument is equally real. If you are a crypto-first operator whose deposit mix leans on privacy coins, whose treasury is one wallet, and whose margin does not carry an analytics subscription plus a custody rebuild, Curacao has just become materially more expensive to hold. Anjouan, Tuvalu, Vanuatu and Tobique all carry AML obligations of their own, so this is not a choice between compliance and no compliance. It is a choice about how prescriptive and how expensive that compliance is, weighed against how much the licence name is worth to your payment relationships. The five regimes sit side by side on the licence comparison.
The wrong reaction is to move jurisdiction to escape a rulebook. Regulators talk to each other, payment providers notice a licence that changed shortly before a deadline, and the direction of travel across every offshore regime is the same one. The right reaction is to decide which licence you want to be holding in 2028 and build to that standard now.
What to do in the next four weeks
- Audit your deposit flow against the present prohibitions. Mixers, tumblers and sanctioned addresses are banned today, not in September.
- Map your wallets. Write down every address the business touches and who controls it. Most operators find something on this list they had forgotten.
- Draft the crypto policy to your own operation, not from a template. A generic document that names no assets, no tooling and no owner is the kind that comes back.
- Price the June 2027 build now. If the infrastructure is unaffordable, you want to know that while you still have time to change jurisdiction properly rather than in a panic.
Rakemont drafts crypto policies and AML programmes to a licensee's actual operation and files them, and advises on whether Curacao remains the right holding for a given deposit mix. Where it is not, we license in Anjouan, Tuvalu, Vanuatu and Tobique and can run the transition without a gap in cover. A fixed written quote is issued before any work begins, and an NDA can come first.
If you hold a Curacao B2C licence and the September policy is not drafted, that is the conversation to have this month rather than next.
Frequently asked questions
What is the first Curacao crypto deadline?
September 2026, when every B2C licensee must have a compliant crypto policy uploaded to the Curacao Gaming Authority portal. December 2026 then covers risk assessments, VASP due diligence, wallet ownership controls, transaction monitoring and staff training, and June 2027 covers full technical implementation. The regulator can require earlier compliance where it considers the risk high enough.
Can Curacao licensees still accept cryptocurrency?
Yes. Crypto remains permitted as a deposit and withdrawal method under the B2C licence. What is no longer permitted is acting as an exchange, payment services provider or virtual asset service provider, which rules out swapping or converting assets for players and holding crypto for them outside gambling transactions.
Are privacy coins banned under the new Curacao rules?
No, but they are placed in a higher risk category alongside meme coins, speculative tokens and wrapped assets, and require stricter treatment and stronger justification. The regulator directs licensees towards fiat backed regulated stablecoins as the preferred option. Accepting a privacy coin becomes an evidenced decision you must be able to defend.
What wallet structure does Curacao now require?
Player funds must be held in segregated wallets, and player, operational and treasury wallets must be kept apart. Withdrawals must return to the same wallet and the same asset used for the deposit, player to player transfers are prohibited, and personal, employee or owner linked wallets cannot be used for operational flows.
Does this make Curacao the wrong licence for a crypto casino?
It depends on your deposit mix and your margin. The rules raise the cost of holding a Curacao licence, particularly for operators leaning on privacy coins or running a single wallet. Against that, a regulator with a detailed published crypto regime strengthens the licence with payment providers and suppliers, which is the main reason to hold Curacao in the first place.
What happens if an operator misses the deadlines?
The obligations sit under the National Ordinance on Games of Chance and form part of the licensing conditions, so non-compliance is a supervisory matter for the Curacao Gaming Authority rather than a private commercial one. The prohibitions on mixers, tumblers and sanctioned addresses are already in force and carry no transition period.