BSP VASP Rules Philippines | Crypto Exchange Regulation BSP | Philippines Crypto Casino Payment Flow
Published: April 2026
| Quick Answer: What are BSP-Licensed VASPs?✅ Licensed crypto exchanges regulated by Bangko Sentral ng Pilipinas under Circular 1108📋 Required to follow AML reporting, KYC verification, and BIR tax reporting rules💱 Main gateway between Philippine pesos (PHP) and cryptocurrencyIn simple terms: your exchange sees your money — but not your gameplay. The system is designed for visibility at entry and exit points, not in the middle. |
If you are a Filipino crypto casino player, the most important regulated entities in your activity are not the casinos — they are your BSP-licensed Virtual Asset Service Providers. PDAX, Coins.ph, Maya, BloomX, GCash GCrypto, and the other licensed Filipino exchanges are the regulated infrastructure that connects your Philippine pesos to the cryptocurrency you deposit at offshore casinos. Understanding how this typically works in practice — who the licensed players are, what compliance obligations they carry, and what it means for your transactions — is essential context that most Filipino crypto users skip past.
This guide walks through the BSP VASP framework as it operates in April 2026, identifies the major licensed exchanges, explains compliance obligations, and details how the VASP layer practically affects Filipino crypto casino activity.
| Important disclaimerThis article is for informational purposes only and does not constitute legal, tax, or financial advice. Cryptocurrency activity in the Philippines is regulated by BSP, while gambling activity is regulated by PAGCOR. Offshore platforms operate outside Philippine regulatory protection frameworks. Tax treatment of crypto and gambling income varies depending on classification and individual circumstances. Users are responsible for compliance with applicable laws and reporting obligations. Always consult a qualified Filipino CPA or legal professional before making financial decisions. |
The BSP VASP framework — what it actually is
Bangko Sentral ng Pilipinas (BSP), the Philippine central bank, regulates Virtual Asset Service Providers under a structured licensing framework that has evolved in two major phases.
Origins under Circular No. 944 (2017)
BSP’s original cryptocurrency regulation was Circular No. 944, Series of 2017, establishing Guidelines for Virtual Currency Exchanges. This required cryptocurrency exchanges operating in the Philippines to register with BSP and comply with anti-money laundering rules. The Philippines was among the first Southeast Asian jurisdictions to formally regulate cryptocurrency exchange activity.
Modernisation under Circular No. 1108 (2021)
BSP Circular No. 1108, Series of 2021, replaced the original framework with the modern Guidelines for Virtual Asset Service Providers, aligned with FATF standards. Coverage expanded from just exchanges to broader VASP activities:
- Exchange between virtual assets and fiat currencies
- Exchange between different virtual assets
- Transfer of virtual assets
- Safekeeping or administration of virtual assets
- Participation in financial services related to virtual asset offerings
Capital and operational requirements
- Custodial VASPs — minimum capital ₱50 million (approx. $1.05 million USD)
- Non-custodial VASPs — minimum capital ₱10 million (approx. $210,000 USD)
- Registration fee ₱100,000 | Annual service fee ₱300,000
- Primary operations, offices, and key management must be in the Philippines
- Periodic financial and operational reporting to BSP
VASP moratorium status (April 2026)
BSP imposed a three-year moratorium on new VASP applications in August 2022, originally scheduled to lift September 1, 2025. In August 2025, BSP extended the moratorium based on continued evaluation of the regulatory environment. As of April 2026, BSP continues operating under the extended moratorium, which effectively limits the market to the current roster of licensed VASPs — no new licences are being issued.
| What the moratorium means for Filipino playersThe roster of BSP-licensed VASPs is fixed at the current set. New entrants cannot obtain licences. Existing licensed exchanges (PDAX, Coins.ph, Maya, etc.) operate as the closed group of legitimate Filipino crypto on-ramps. This is good news for users — it means a smaller but well-defined set of legitimate, well-supervised options. |
The BSP-licensed VASP roster as of April 2026
PDAX (Philippine Digital Asset Exchange)
Licensed by BSP in September 2018, PDAX is one of the most prominent Filipino crypto exchanges. It supports over 70 cryptocurrencies with PHP trading pairs. PDAX also powers GCrypto, the cryptocurrency feature within GCash. In 2022, PDAX launched PDAX Prime for broader crypto access. PDAX has become the default exchange for many users, particularly those accessing crypto through GCash.
Coins.ph
One of the oldest and most established Filipino crypto exchanges, receiving BSP licensing in the original wave. Coins.ph offers PHP-supported crypto services, secure wallet functionality, and broad accessibility. It is frequently the entry point for Filipinos new to cryptocurrency.
Maya
Originally a digital wallet expanded into cryptocurrency, Maya holds BSP VASP licensing and supports crypto purchases alongside its broader payment ecosystem. Integration with everyday payment infrastructure makes it convenient for Filipinos who already use Maya for regular transactions.
BloomX (Bloomsolutions, Inc.)
Licensed by BSP in May 2018, BloomX offers trading for over 250 cryptocurrencies. The platform has a particular focus on remittance applications, leveraging blockchain for cross-border transfers — a use case highly relevant for Filipino overseas workers and their families.
DA5 / SurgePay (Direct Agent 5)
DA5 operates SurgePay, a hybrid digital wallet offering crypto trading alongside remittances and bill payments. It received its VASP licence on January 31, 2023, and combines crypto with traditional payment services reflecting actual Filipino financial patterns.
Moneybees
Provides over-the-counter cryptocurrency transactions through partner outlets and an online trading desk. Licensed in Q1 2020, Moneybees bridges digital assets with traditional cash transactions through its physical-presence model.
GCash GCrypto
Operating through GCash’s partnership with PDAX, GCrypto provides crypto trading directly within the GCash ecosystem. This is the most accessible on-ramp for the broadest Filipino user base — GCash itself has tens of millions of Filipino users.
TopWallet (TopJuan Technologies Corporation)
Provides B2B and B2C financial solutions through its hybrid digital wallet, with VASP licensing for cryptocurrency trading and transfer services.
Other licensed VASPs
BSP’s full list includes additional licensees with varying operational status. Some VASPs that received licences earlier are now inactive or non-operational — examples include COEX STAR (operations ceased) and Coinville (licence cancelled December 2023). Always verify current operational status before using any specific VASP.
The three authorities you need to understand
Bangko Sentral ng Pilipinas (BSP)
BSP regulates the crypto rails — the VASP infrastructure connecting PHP to crypto. BSP has clear authority over Filipino-based crypto exchange activity under Circular 1108. Cryptocurrency trading itself is fully legal under this framework. BSP’s regulatory oversight is the source of legitimacy for all on-ramp and off-ramp activity.
Bureau of Internal Revenue (BIR)
BIR receives reporting inputs from BSP-licensed VASPs, connecting the crypto activity layer to the tax layer. VASP transaction data, including gain calculations and customer KYC details, feeds into BIR’s tax administration system. This is how using a BSP-licensed exchange creates a documented record that BIR can access — even without you filing a separate report.
Anti-Money Laundering Council (AMLC)
AMLC receives Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) from VASPs, conducts cross-platform monitoring, and coordinates between regulatory bodies. AMLC bridges BSP and PAGCOR frameworks by monitoring patterns that might indicate offshore gambling activity using regulated VASP infrastructure. Sustained or unusual patterns can trigger AMLC inquiries that require full documentation to resolve.
PAGCOR (Philippine Amusement and Gaming Corporation)
PAGCOR regulates the gambling layer — not the crypto layer. PAGCOR has authority over Filipino-based online gambling through PIGO licensing. Critically, cryptocurrency is explicitly prohibited at PIGO operators by PAGCOR rule, regardless of BSP’s separate VASP framework. The two regulatory systems are deliberately kept separate by Philippine policy design.
| Key takeaway: BSP regulates your crypto exchange. PAGCOR regulates gambling. BIR taxes both. AMLC monitors patterns across all of them. They are separate but increasingly coordinated. |
What VASPs can and cannot see
This is the most practically important table for Filipino crypto casino players. Understanding where visibility exists determines where your compliance burden is highest.
| Activity | VASP Visibility |
| PHP → crypto purchase on VASP | ✅ Fully visible |
| Crypto withdrawal to self-custody wallet | ✅ Fully visible |
| Self-custody wallet → offshore casino | ❌ Not directly visible* |
| Activity within offshore casino | ❌ Not visible |
| Casino → self-custody wallet (withdrawal) | ❌ Not directly visible* |
| Self-custody wallet → VASP (return) | ✅ Fully visible |
| Crypto → PHP sale on VASP | ✅ Fully visible |
* VASPs do not directly observe wallet-to-casino activity, though transaction patterns and known wallet associations may still provide indirect visibility.
| Key takeaway: VASPs don’t see your casino activity — but they see everything around it. The on-ramp and off-ramp create a documentary record that AMLC, BIR, and BSP can all access through proper channels. |
VASP compliance obligations: what they mean for your transactions
Mandatory KYC at registration
- Government-issued ID (Philippine passport, UMID, driver’s licence, postal ID)
- Selfie verification matched against ID document
- Address verification through utility bills or bank statements
- Source-of-funds verification for higher transaction volumes
- Filipino Tax Identification Number (TIN) for tax reporting
There is no anonymous or low-KYC option at BSP-licensed VASPs. Every account is fully verified at registration. This is your consumer protection — and the source of your compliance documentation.
Transaction monitoring and AMLC reporting
- Suspicious Transaction Reports (STRs) for transactions meeting specific risk patterns
- Covered Transaction Reports (CTRs) for transactions exceeding threshold amounts
- Customer due diligence for unusual activity
- Cooperation with AMLC investigations and law enforcement requests
- Cross-platform monitoring coordinated with AMLC’s broader surveillance network
FATF Travel Rule compliance
For cross-border crypto transactions exceeding specified thresholds, VASPs must collect detailed sender and recipient information, monitor transfers to high-risk jurisdictions, and report suspicious activity. This specifically applies to crypto leaving Filipino exchanges to offshore destinations. For most retail players with smaller transactions, Travel Rule effects are largely behind-the-scenes — for larger transfers, additional documentation requests may apply.
Tax reporting to BIR
VASPs provide tax-related information to BIR through established reporting channels. Customer transaction data, gain calculations, and KYC details feed into the broader tax administration system. This is automatic — you do not need to trigger it yourself. It happens as part of normal VASP operations.
Account freeze risk during compliance review
If a transaction or pattern triggers an internal compliance flag, VASPs may temporarily restrict account activity pending review. This is not an accusation — it is a compliance process. Accounts with clean documentation and legitimate source-of-funds explanations are typically restored. Accounts that cannot provide adequate documentation face more serious consequences. Maintaining clean records is your defence against extended or permanent restriction.
Consumer protection — VASPs vs offshore casinos
| The protection asymmetry you need to understandBSP-licensed VASPs: regulated environment with consumer protection, dispute resolution, cybersecurity requirements, and regulatory oversight. If something goes wrong, you have recourse.Offshore crypto casinos: not subject to PAGCOR jurisdiction. No Filipino consumer protection applies. If something goes wrong, you have no domestic regulatory recourse.In simple terms: your exchange protects you. Your casino does not. |
The real user flow: step by step
Here is how this typically works in practice for a Filipino crypto casino player using BSP-licensed infrastructure:
- Buy crypto on a BSP-licensed VASP — PHP legally converts to cryptocurrency under regulatory supervision. KYC is already complete. Transaction is recorded.
- Withdraw crypto to self-custody wallet — FATF Travel Rule compliance triggers at this step if the transaction is large enough or to certain jurisdictions.
- Send crypto from wallet to offshore casino — outside VASP direct visibility. Your activity is not being monitored at this step by BSP-licensed infrastructure, though transaction patterns and known wallet associations may still provide indirect visibility.
- Play at offshore casino — entirely outside Filipino regulatory visibility.
- Withdraw winnings from casino to self-custody wallet — also outside VASP direct visibility.
- Send crypto from wallet back to VASP — VASP captures incoming transaction. Round-trip pattern is now visible.
- Sell crypto for PHP on VASP — gain realisation event. VASP reports to BIR through normal channels.
- Withdraw PHP to bank account — loop complete.
| Key takeaway: The system is designed for visibility at entry and exit points — not in the middle. But the entry and exit create a documentary record substantial enough for BIR and AMLC to build a picture of your activity pattern. |
What happens when patterns suggest offshore gambling
BSP-licensed VASPs apply pattern-based monitoring that can detect activity consistent with patterns consistent with offshore gambling behaviour:
- Frequent crypto purchases followed by transfers to non-VASP wallets
- Round-trip patterns where crypto flows out and similar or larger amounts return weeks later
- Withdrawals to wallet addresses associated with known gambling platforms
- Transaction sizes consistently matching recreational gambling deposit patterns
Pattern detection does not automatically result in account action. The flag triggers internal review, possible STR filing to AMLC, and in some cases source-of-funds documentation requests. Most flagged accounts that can demonstrate legitimate activity continue to operate normally. The flagging exists to identify potentially problematic patterns, not to penalise routine crypto activity.
| Practical implicationUse of BSP-licensed VASPs for crypto purchases that eventually fund offshore casino activity is not explicitly prohibited, but is subject to compliance monitoring and risk-based controls. Players who maintain clean transaction records, declare appropriate taxes, and avoid patterns that trigger AML concerns generally operate without issue. Players who try to obscure patterns or operate inconsistently face higher scrutiny and potential account disruption. |
Risk comparison: activity level vs regulatory exposure
| Activity | Risk Level |
| BSP VASP usage (routine) | Low |
| P2P trading (non-VASP) | Medium |
| Using SEC-warned platforms (Binance, OKX, Bybit) | Medium–High |
| Offshore crypto casino activity | Medium–High |
| Undeclared winnings + no records | High |
Biggest mistakes Filipino players make with VASPs
| These are the errors that create the most exposureUsing unlicensed or SEC-warned exchanges (Binance, OKX, Bybit, KuCoin) — no consumer protection, no legitimate documentation for BIRPoor record-keeping — VASPs provide exportable transaction histories; not downloading these regularly is a costly mistakeIgnoring tax exposure — VASP activity creates BIR-visible documentation automatically; not declaring is not invisibleAssuming the middle is invisible — wallet-to-casino is not directly observed but transaction patterns at entry and exit points tell a coherent storyNot responding to source-of-funds requests — ignoring a VASP compliance query can escalate to account freeze or closureUsing multiple VASPs to fragment activity — AMLC conducts cross-platform monitoring; fragmentation is visible and suspicious |
Checklist before using a VASP for crypto casino activity
| Complete this before you startConfirm the exchange is currently BSP-licensed (check the BSP website for the active VASP roster)Complete KYC fully — including TIN submission for tax reportingEnsure transaction history is accessible and exportable from your accountSet up a record-keeping system for PHP amounts paid per crypto purchaseUnderstand your VASP’s source-of-funds policy — know what documentation you will need if askedConfirm you are not on an SEC-warned platform list before transferring any funds |
What the moratorium extension means for the future
Regulatory caution prevails
BSP is maintaining a cautious posture rather than expanding crypto licensing. This aligns with broader Filipino regulatory tightening across gambling and crypto sectors.
Existing licensees benefit from scarcity
With no new entrants, the existing VASP roster effectively limits the market to the current set of licensed providers. Filipino users operate with a fixed, well-supervised group of legitimate on-ramps.
Deeper compliance, not wider access
BSP appears focused on deepening compliance with existing licensees rather than expanding the licensed pool. This produces stronger oversight of the current roster but limits the variety of legitimate options available to Filipino users.
Future framework evolution
When BSP eventually lifts the moratorium — timing uncertain — new entrants will likely face higher capital thresholds and stricter ongoing monitoring than the current Circular 1108 framework requires.
Frequently asked questions
Is Binance legal in the Philippines?
As of August 2025, the Philippine SEC released an investor alert warning Filipinos against engaging with unregistered entities including OKX, Bybit, KuCoin, and Bitget. Binance is similarly not BSP-registered as a VASP. Filipinos can technically access these platforms via P2P services or third-party providers, but doing so operates outside Philippine regulatory protection and creates compliance and tax documentation gaps.
Which BSP-licensed VASP is best for crypto casino-related activity?
All major BSP-licensed VASPs operate under the same regulatory framework, so compliance treatment is essentially identical. Practical choice comes down to user experience: PDAX has the broadest cryptocurrency selection, Coins.ph is most established, Maya integrates with broader payment infrastructure, GCash GCrypto offers the most convenient access for existing GCash users.
Will my VASP account be closed if I use it for crypto casino activity?
Generally no, if you operate within reasonable patterns. VASPs apply pattern-based monitoring rather than blanket prohibition on activity that might be related to offshore gambling. Account closures typically result from specific compliance failures (failure to provide source-of-funds documentation when requested, unusual patterns) rather than from routine crypto-casino-adjacent activity.
Does USDT create different visibility than BTC on a Filipino VASP?
Both are subject to the same KYC, AML reporting, and transaction monitoring framework. The currency type does not significantly change visibility. USDT may attract slightly different internal attention due to offshore activity associations, but routine USDT purchases for legitimate purposes do not automatically flag accounts.
Could BSP eventually regulate offshore crypto casinos directly?
Unlikely under the current regulatory architecture. BSP regulates VASPs (crypto infrastructure), not gambling platforms. Offshore casino regulation would fall to PAGCOR, but PAGCOR regulates Filipino-based gambling rather than offshore operators. The current framework leaves offshore crypto casinos in a regulatory gap that neither agency is currently addressing directly.
The bottom line
BSP-licensed VASPs are the most important regulated entities in any Filipino crypto casino activity flow. They provide the legal on-ramp from Philippine pesos to cryptocurrency, operate under BSP’s Circular 1108 framework, comply with AMLC reporting and FATF Travel Rule requirements, and create substantial documentation connecting your crypto activity to your verified Filipino identity. BIR accesses this documentation through standard reporting channels — automatically, not just when you file.
Understanding the VASP layer matters for specific practical reasons: it tells you which exchanges to use (only the BSP-licensed roster), what compliance obligations apply at the on-ramp and off-ramp of your activity, why transaction patterns matter (monitoring is real and increasingly sophisticated), and why the regulatory environment is more interconnected than simple ‘just crypto’ or ‘just gambling’ framings suggest.
The practical advice is consistent: use BSP-licensed VASPs for all crypto activity. Maintain clean documentation of every transaction. Export your transaction histories quarterly. Declare appropriate taxes. Consult Filipino accountants and legal professionals for situation-specific guidance. The VASP framework is sophisticated, the moratorium has stabilised the market, and Filipino crypto users benefit from working within this framework rather than around it.
| Final checklist summaryUse only BSP-licensed VASPs — verify current status on BSP’s published rosterComplete KYC fully on every exchange you use, including TINExport transaction histories quarterly from every VASP accountKeep records of PHP amounts paid per crypto purchase (your cost basis)Declare crypto and gambling income in your annual BIR filingRespond promptly to any source-of-funds documentation requests from your VASPConsult a Filipino CPA for any year with significant crypto casino activity |
| Responsible Gaming & Legal NoticeThis article is for informational purposes only and does not constitute legal, tax, or financial advice. Cryptocurrency activity in the Philippines is regulated by BSP, while gambling activity is regulated by PAGCOR. Offshore platforms operate outside Philippine regulatory protection frameworks. Tax treatment of cryptocurrency and gambling income may be subject to income tax depending on classification and activity. Authorities including BIR, BSP, and AMLC may update guidance. Users are responsible for compliance with all applicable laws and reporting obligations. Always consult a qualified Filipino CPA or legal professional before making financial decisions.PAGCOR-licensed PIGO platforms are the only legally regulated online gambling option for Filipino residents. Offshore crypto casino use sits outside PAGCOR’s jurisdiction without Filipino consumer protection. Gambling may be addictive. Play only what you can afford to lose. 21+ only at PAGCOR-licensed platforms.Support resources:PAGCOR 24-hour helpline (launching 2026): 1800-1888-7777 (toll-free, confidential)Bridges of Hope, Life Change Recovery Center, Milestone Health and Wellness CenterNational Center for Mental Health crisis line: 1553 (toll-free, 24/7)DOH MentalHealthPH: 09989681456 |