Launching a fintech in Cambodia

TL;DR

• A fintech in Cambodia is not a corporate form: it is an ordinary company (usually a Co. Ltd.) plus a licence from the relevant regulator. For payments and e-money, that regulator is the NBC (National Bank of Cambodia), which grants the Payment Service Institution (PSI) licence.
• The ecosystem is dominated by Bakong, the NBC’s payment backbone, and the KHQR standard: any payment fintech plugs into it rather than building from scratch. NBC supervision is strong and the licence is demanding (high capital, prudential file).
• Crypto-assets are tightly restricted: Prakas B7-024-735 of 26 December 2024 lets certain commercial banks and payment institutions handle tokenized assets and stablecoins (Group 1) under prior NBC approval, but prohibits unbacked crypto-assets (Group 2, e.g. Bitcoin). Securities and crowdfunding fall under the SERC.

Overview: Bakong, KHQR and strong oversight

Cambodia is one of the most advanced mobile-payment markets in Southeast Asia, but also one of the most regulated. Two building blocks shape the market:

• Bakong: the NBC’s interbank payment system (often described as a near-CBDC infrastructure). It enables real-time transfers in riel and dollars between banks, microfinance institutions and licensed payment institutions.
• KHQR: the national unified payment QR code, interoperable across everyone connected to Bakong. A payment fintech does not deploy its own closed QR — it integrates with KHQR.

The practical consequence: you do not build a fintech in a vacuum. You operate under the NBC’s eye, you plug into Bakong/KHQR, and you comply with a prudential framework designed to protect deposit-holders and the stability of the riel.

The regulators and the licences

NBC — the Payment Service Institution (PSI) licence

The NBC licenses and supervises Payment Service Institutions under the Law on the Organization and Conduct of the National Bank of Cambodia and the Prakas on Management of Payment Service Institutions (2017). The PSI licence covers payment activities: holding payment accounts (e-wallets), deposits/withdrawals to a payment account, transfers and remittances, payment-transaction processing, e-money issuance, money changing, and short-term credit tied to payments.

Historically, non-financial players could operate through a simple third-party processor approval. The 2017 framework tightened access in favour of better-capitalised, genuinely supervised institutions.

NBC — banking, microfinance and lending

If your fintech does lending or microfinance (lending, credit-backed BNPL, neobank), you fall not under the PSI regime but under the NBC’s banking or microfinance approvals, which carry much higher minimum capital (commercial bank, specialised bank, MFI, MDI). It is a separate regime, detailed in the NBC’s Prakas on Minimum Registered Capital of Banking and Financial Institutions. Settle this upstream: lending to the public without the proper approval is a regulatory offence.

SERC — securities, the exchange and crowdfunding

The SERC (Securities and Exchange Regulator of Cambodia, serc.gov.kh) regulates securities, the Cambodia Securities Exchange (CSX), public offerings, derivatives and crowdfunding. An investment fintech, a crowdfunding platform, or one that issues/distributes tokenized financial instruments (legally securities) falls under the SERC — possibly in addition to a payment leg supervised by the NBC.

Crypto-assets / digital assets — a very restrictive NBC framework

This is the most sensitive point. Prakas B7-024-735 of 26 December 2024 (“on Transactions Related to Cryptoassets”), issued by the NBC, sets the current regime:

• Any commercial bank or payment institution wishing to exchange, transfer or safekeep crypto-assets must obtain prior NBC authorisation.
• The Prakas distinguishes:
  • Group 1a — tokenized traditional assets (securities, bonds, loans, tokenized commodities);
  • Group 1b — stablecoins with an effective stabilisation mechanism backed by traditional assets;
  • Group 2 — all other crypto-assets, i.e. unbacked assets (e.g. Bitcoin).
• Group 2 crypto-assets are prohibited for commercial banks, whether for their own account or for customers. Only Group 1 is open, under prudential conditions.
• Quantified prudential limits cap exposure: per analyses of the Prakas, Group 1a exposure must not exceed 5% of Common Equity Tier 1 (CET1) and Group 1b exposure 3% of CET1.

Bakong — the unavoidable integration

Once licensed, a payment fintech integrates with Bakong for interoperability (interbank transfers, KHQR). It is both a practical market requirement and an advantage: you inherit a national rail in riel and dollars instead of building an isolated acceptance network.

General setup and foreign ownership

The foundation is an ordinary trading company, almost always a Private Limited Company (Co. Ltd.): limited liability, minimum share capital of KHR 4,000,000 (~USD 1,000) on the register, 100% foreign ownership allowed for the commercial activity. The 7 setup steps are in the Co. Ltd. guide, and the choice of structure in the structures comparison.

The fintech path layers on top of that foundation:

1. Incorporate at the MoC (business object covering the payment / financial-services activity), obtain the TIN and VAT account at the GDT, pay the patent tax (see the patent tax guide).
2. Build the regulatory capital required by the NBC (far above a Co. Ltd.’s minimum share capital) and prepare the deposit with the NBC.
3. File the licence application with the NBC (PSI, or banking/MFI approval depending on the activity): shareholders and beneficial owners, “fit and proper” directors, business plan, AML/CFT programme, IT security, risk governance.
4. Integrate with Bakong/KHQR and launch once the licence is granted.

Tax

A fintech has no special tax regime: it falls under Cambodia’s ordinary company tax rules. For rates and obligations in detail, see the patent tax guide and the Co. Ltd. guide.

• Tax on Income (TOI): standard rate 20% on taxable profit.
• Patent tax annually by taxpayer category, due by 31 March.
• VAT: some financial services may be VAT-exempt, but the scope depends on the exact nature of the service (commissions, fees, technical services). Settle this with a tax adviser: do not assume “everything is exempt”.
• Withholding tax on certain payments (royalties, services, interest, payments to non-residents): common for a fintech that licenses technology or pays foreign providers.

Common pitfalls

FAQ

Do I need a special licence to launch a fintech in Cambodia?

Yes, but it depends on the activity. The company itself is an ordinary Co. Ltd.; on top of it you need the relevant regulator’s licence: the NBC for payments/e-money (the PSI licence) or for banking/microfinance, the SERC for securities and crowdfunding. MoC registration alone is never enough for a regulated financial activity.

What is the minimum capital for a Payment Service Institution?

Several legal analyses report capital around KHR 8,000 million (≈ USD 2 million), with 5% deposited at the NBC and a 6-year licence. Other sources cite differentiated amounts (≈ USD 500,000 for a payment service provider, ≈ USD 1.5 million for an e-money issuer). The exact amount and its breakdown are to be confirmed directly with the NBC and in the Prakas in force. Do not commit to a figure read online.

Can I set up a crypto exchange in Cambodia?

Not freely. Prakas B7-024-735 (26 Dec 2024) opens crypto activities only to already-regulated commercial banks and payment institutions, under prior NBC authorisation, and only on Group 1 (tokenized assets and backed stablecoins). Unbacked crypto-assets (Group 2, e.g. Bitcoin) are prohibited for banks. A retail exchange for unbacked crypto does not fit this framework. For tokens that are legally securities, the SERC is also competent.

Can a foreigner own 100% of a Cambodian fintech?

Yes for the underlying trading company (100% foreign ownership allowed). The NBC/SERC licence is assessed on prudential criteria — capital, integrity and competence of directors, operational soundness and AML/CFT — regardless of nationality. A well-capitalised, well-governed foreign project is admissible.

Must I integrate with Bakong?

In practice, yes for a payment fintech. Bakong (NBC) and the unified KHQR code provide market interoperability. Connecting is both expected by the regulator and advantageous: you reach a national rail in riel and dollars without building an isolated acceptance network.

How long does licensing take?

Expect several months beyond company formation (8–15 business days). NBC review covers capital, directors, business plan, AML/CFT and IT security. Plan for specialised support (a regulatory firm) and a significant compliance budget from the outset.