Cambodia

Licensing, Authorisation & Market Access

Cambodia's approach to licensing and market access for non-bank and digital-asset payment activity shifted materially this cycle. A prime-ministerial-level decision in August 2026 established an Inter-Ministerial Working Group with a mandate to draft a comprehensive Law on the Management of Virtual Assets/Digital Assets, assessed at moderate confidence and sourced to regional reporting. This is Cambodia's first documented move toward a dedicated statutory framework for virtual and digital assets, as distinct from the sandbox-based and Prakas-level instruments that have governed the space to date; no draft legislative text or implementation timeline has been confirmed, and the interpreter data classifies the expected impact date only at multi-year uncertainty.

In parallel, and likely as an interim measure pending the broader statute, Cambodia introduced a notification requirement for non-bank e-wallet issuers. Companies that are not registered as banking or financial institutions, nor as payment service providers, but that issue e-wallets in connection with their own products, must now notify the National Bank of Cambodia before conducting transactions. This is structured explicitly as a notification-only obligation rather than a licence category, positioning it as a lighter-touch market-access control than the licensing regime that applies to banks and PSPs.

The bank-versus-non-bank distinction is the analytical spine of this module's findings this cycle. Licensed banks and payment service providers continue to operate under Cambodia's existing prudential and payments-licensing framework, which this cycle's material does not indicate has changed. The new notification requirement instead targets a specific gap: non-bank entities issuing e-wallets for their own commercial products, a category that had previously operated with less formal regulatory visibility. This is a market-access control calibrated to bring a specific class of non-bank issuer within the National Bank of Cambodia's monitoring perimeter without imposing the full licensing burden that applies to banks and PSPs, a graduated approach consistent with regulatory practice elsewhere in the region for similar non-bank payment innovation.

The forthcoming virtual-asset law is the more consequential development for market access over the medium term. An Inter-Ministerial Working Group structure, rather than a single ministry or the National Bank of Cambodia acting alone, suggests the eventual statute will need to reconcile digital-asset policy across multiple government functions, which is consistent with the cross-cutting nature of virtual-asset regulation but also introduces coordination risk that could extend the drafting timeline. Market entrants and existing non-bank payment providers assessing Cambodia should treat the current notification-only regime as transitional rather than as a settled long-term licensing framework, and should expect the eventual virtual-asset statute to reshape the market-access landscape for digital-asset-adjacent payment activity materially once enacted.

Instrument-wise, this cycle's findings sit within the prepaid/e-money and general non-bank licensing space rather than touching card schemes, account-to-account rails, or CBDC infrastructure directly, even though Cambodia's broader payments landscape includes an active CBDC-adjacent settlement rail. The notification requirement's narrow targeting of e-wallet issuers for own-product use, rather than all non-bank payment activity generally, suggests Cambodian authorities are proceeding incrementally rather than through a single comprehensive non-bank payments law.

Outlook

The Inter-Ministerial Working Group's drafting mandate is the central item to track for market access over the coming cycles; expect the first concrete milestone to be either a public consultation process or a first draft text, neither of which has yet been confirmed. The interim notification regime for non-bank e-wallet issuers should be watched for whether it evolves into a fuller licensing category once the virtual-asset law is drafted, or remains a standalone lighter-touch instrument. Given the multi-year uncertainty band assessed for the broader statute, market-access clarity for non-bank and digital-asset payment providers in Cambodia is unlikely to firm up in the immediate near term.

Operational Resilience & Critical Infrastructure

Bakong, the National Bank of Cambodia's blockchain-based interbank and retail settlement rail, processed approximately 1 billion transactions valued at USD 135.8 billion in the first half of 2026, with riel-denominated transaction volume rising 120 percent year on year, at high confidence and sourced to National Bank of Cambodia reporting cited via Xinhua. This is a substantial scale of activity for a national payments rail and confirms Bakong's status as critical payments infrastructure for Cambodia: a system processing this volume of value is, by definition, systemically significant to the jurisdiction's financial-market infrastructure, and any operational disruption to Bakong would carry economy-wide consequences well beyond the payments sector narrowly defined.

The currency composition of this growth is analytically significant in its own right. Riel-denominated volume rising 120 percent year on year, materially outpacing total transaction growth, indicates that Bakong's expansion is not simply a function of more transactions moving through the rail, but of a genuine shift in currency composition toward domestic-currency settlement. This is directly relevant to Cambodia's longstanding dedollarisation policy objective: a payments rail that channels an increasing share of retail and interbank value into riel-denominated form is, functionally, a policy instrument for reducing dollarisation, independent of whatever explicit dedollarisation measures the National Bank of Cambodia may pursue through other channels.

From an operational-resilience perspective, a rail processing USD 135.8 billion in a six-month window represents a meaningful concentration of payments-system dependency on a single blockchain-based infrastructure. The material available this cycle does not include any operational-incident, outage, or resilience-testing disclosure for Bakong; the finding this cycle is one of scale and growth rather than of any documented resilience event. That absence of adverse resilience findings should not be read as an affirmative resilience assurance, it simply reflects that no such finding was surfaced in the sources reviewed this cycle.

Bakong's continued scale-up also has structural implications for Cambodia's broader payments architecture. A rail of this size and growth trajectory increasingly functions as core national payments infrastructure alongside, rather than merely as an adjunct to, the traditional correspondent-banking and card-network channels. Institutions and infrastructure providers with exposure to Cambodia's payments ecosystem should treat continued Bakong volume growth as an indicator of where transaction-processing dependency within the jurisdiction is concentrating, with corresponding implications for business-continuity and third-party-risk assessment of any relationship that touches Bakong-connected rails, whether directly or through downstream bank and PSP participants.

This cycle's material does not extend to Bakong's cross-border linkage arrangements, which sit outside this module's scope this cycle; the operational-resilience finding here is confined to the scale and currency-composition data disclosed in the National Bank of Cambodia's biannual reporting as cited by regional press. The absence of any disclosed technology-stack detail, incident history, or third-party dependency mapping for Bakong in the sources reviewed this cycle is itself a notable gap for operational-resilience assessment purposes: volume and value figures establish the scale of dependency, but do not by themselves establish the robustness of the infrastructure against disruption. Firms with material payments exposure to Cambodia should treat this as an open assessment item rather than inferring resilience from scale alone. The National Bank of Cambodia's decision to publish half-year volume and value figures at this level of granularity is itself a transparency practice worth noting from an operational-resilience-disclosure perspective.

Outlook

The central question for the coming cycles is whether the 120 percent year-on-year riel-denominated growth rate proves durable through the second half of 2026, which would reinforce the dedollarisation reading of Bakong's expansion, or whether it reflects a temporary surge tied to specific factors not identified in this cycle's material. Continued volume growth at anything approaching this cycle's pace would further entrench Bakong's status as critical national payments infrastructure, with corresponding operational-resilience stakes; any future disclosure of an operational incident or resilience test result for Bakong would be a materially more significant finding than continued volume growth alone, given the systemic dependency the rail's scale now represents.

Payment Corridor Dynamics

Cambodia's cross-border payment-corridor expansion accelerated on several fronts this cycle. The National Bank of Cambodia approved Bank of China Phnom Penh Branch as the designated clearing bank for Bakong-WeChat QR cross-border interoperability, extending Cambodia's KHQR standard into China's UnionPay, Alipay, and WeChat Pay ecosystem through a licensed bank intermediary, a bank-led clearing arrangement rather than a purely non-bank scheme integration. Separately, the Bakong-RoamQR linkage entered a second phase enabling Singapore travellers to pay merchants in Cambodia via KHQR using their home mobile-payment apps, a nonbank-scheme-led expansion of the same underlying inbound-QR-acceptance model. Regionally, a second phase of the Cambodia-Laos QR linkage launched in December 2025, and NBC's broader cross-border QR programme projects a Cambodia-India commercial launch in the second half of 2026.

Together these developments show Cambodia pursuing an aggressive multi-corridor QR-interoperability strategy spanning both bank-cleared (China) and scheme-led nonbank (Singapore) integration models, consistent with the broader regional trend toward QR-based real-time payment interlinkage. A separate, lower-confidence data point complicates the growth narrative: a single source reports that only around 2 percent of issued Bakong wallets are actively used, with the US dollar still accounting for roughly 70 percent of transaction value, suggesting that cross-border interoperability growth has substantially outpaced domestic wallet activation and de-dollarisation progress. That gap between headline corridor expansion and underlying usage depth is a material caveat on any read of Bakong's cross-border push as evidence of deep domestic instant-payment adoption.

Outlook

The Cambodia-India QR corridor's projected second-half-2026 commercial launch is the clearest near-term milestone. Whether Bakong's cross-border expansion begins to close the wallet-activation and dollarisation gap, or continues to run ahead of domestic usage depth, is the key open question for the coming cycle; the current evidence base for usage-depth metrics remains thin and would benefit from independent corroboration beyond the single source available this cycle.

Product Innovation & Market Development

Two developments this cycle define Cambodia's product-innovation picture in digital assets. First, Cambodia operates a permission-based crypto-asset licensing framework under Prakas B7-024-735 Prokor, permitting NBC-licensed banks and firms to offer crypto-asset services subject to prior National Bank approval; this represents a structural product-access framework for crypto/digital-asset offerings within the banking sector, though the description rests on a single, lower-confidence source this cycle and would benefit from independent verification against the primary NBC text. Second, and more consequentially, US authorities intervened directly at the infrastructure layer: the Department of Justice seized backend cloud-computing infrastructure that the Huione Group used to move and conceal proceeds from Southeast Asian scam-centre fraud. This is a law-enforcement infrastructure action rather than a product launch, but it is directly relevant to the product-innovation domain because it targets the technical backend supporting crypto/payment services rather than only the corporate entity operating them, illustrating that infrastructure-level enforcement is now an operative risk category for any crypto-adjacent product built on shared or outsourced backend infrastructure in this market.

Outlook

Cambodia's permission-based crypto framework and the scope of NBC's approval process for individual crypto-asset service offerings remain the key gaps to watch; independent, higher-tier confirmation of the Prakas B7-024-735 framework's operative detail would materially improve confidence in assessing product-development conditions for licensed crypto-asset services in this market.

AML/CFT & Financial Crime

This cycle's AML/CFT signal for Cambodia is carried through the Sentinel.gi feed. Sentinel-sourced reporting confirms that FinCEN's Section 311 final rule barring US correspondent accounts for Huione Group took effect November 17, 2025, and that FinCEN has since proposed extending that special measure to capture H-Pay Service PLC, a Cambodia-licensed payment services institution reported to have assumed Huione Pay PLC's business role. Separately, Cambodia's own National Risk Assessment (NRA II), a primary Cambodia Financial Intelligence Unit document, rates the country's Payment Service Institutions at Medium money-laundering vulnerability. Consistent with WPM's scope boundary, this brief attributes these findings to the Sentinel feed and the primary CAFIU source respectively rather than conducting independent illicit-finance analysis; readers seeking deeper typology or enforcement-theory analysis of the underlying scam-finance network should refer to Sentinel's own reporting and to financial-integrity-monitor coverage of the same entities.

Outlook

The operative watch item is FinCEN's NPRM process for the H-Pay Service PLC expansion, which will determine whether Cambodia's payment-services licensing regime continues to permit rebrand-based continuity for a previously designated entity's US correspondent-banking access; resolution is anticipated around the third quarter of 2026.

Correspondent Banking, Settlement & Access

Cambodia's correspondent-banking exposure this cycle is concentrated at a licensed bank directly tied to a sanctioned corporate parent. Prince Bank, a Cambodian bank linked to the Prince Group, reportedly suffered a depositor run and suspended branch transactions following the October 2025 US-UK sanctions action against its parent conglomerate, and several Prince Group Cambodian banking and property ventures have since been placed into liquidation. Both findings rest on single, lower-confidence sources this cycle and should be read as directionally indicative rather than statistically confirmed. The bank-versus-nonbank distinction that anchors this module's analytical spine is visible here in stark form: it is a licensed bank's correspondent access and depositor confidence that is directly and visibly exposed to sanctions contagion, in contrast to the nonbank payment-services institution layer, addressed under this brief's AML/CFT module, where the exposure runs through licensing-regime permeability rather than correspondent-account loss. A bank facing a sanctions-driven depositor run has fewer immediate substitution options for retail liquidity than a nonbank payment institution might have for transaction routing, making the correspondent-banking channel the more acute near-term access risk in this specific case.

Outlook

Whether Prince Bank's reported liquidity stress stabilises or deepens, and whether the liquidation of related Prince Group banking and property ventures expands to affect additional counterparties, are the key correspondent-banking developments to track; both currently rest on single-source reporting and would benefit from independent confirmation in the coming cycle.