KHschema world-payments-v1trajectory: not recorded
Last updated · 14 modules · 76 sourced
findings · 137 sources in the cumulative register
14Modulesbaseline.modules[]
76Findingsmodules[].findings[]
32Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix(sums to 14 rendered modules; click to filter)
Jurisdiction brief
Lead Signal
NBC approved Bank of China Phnom Penh Branch as the designated clearing bank for Bakong-WeChat QR cross-border interoperability. A pending FinCEN notice of proposed rulemaking seeks to capture H-Pay Service PLC, a Cambodia-licensed payment services institution, as a Huione Group successor. Together the two developments capture the defining tension in Cambodia's payments environment this cycle: a domestic instant-payment rail deepening external connectivity while the country's licensing regime continues to be tested by sanctions-evasion attempts routed through it.
Other Developments
Singapore travellers can now pay merchants in Cambodia via KHQR using home mobile-payment apps under the second phase of the Bakong-RoamQR linkage. A second phase of the Cambodia-Laos QR linkage launched in December 2025, and a commercial launch of a Cambodia-India QR payment service is projected for the second half of 2026. Only around 2% of issued Bakong wallets are actively used, and the US dollar still accounts for roughly 70% of transaction value.
The National Bank of Cambodia's Prakas B7-024-735 Prokor permits licensed banks and firms to offer cryptoasset services with prior NBC approval. The US Department of Justice seized backend cloud infrastructure that the Huione Group used to launder proceeds from Southeast Asian scam centres.
FinCEN's Section 311 final rule bars US correspondent accounts for the Cambodia-based Huione Group, effective 17 November 2025. Cambodia's National Risk Assessment, NRA II, issued by CAFIU, rates the country's Payment Service Institutions at Medium money-laundering vulnerability.
Prince Bank suffered a depositor run and suspended branch transactions after October 2025 US-UK sanctions on its parent, Prince Group. Cambodian regulators subsequently placed several Prince Group business interests, including banking and property ventures, into liquidation.
The Cambodia-China retail payment corridor is assessed as improving, with the Bakong-WeChat QR clearing-bank approval deepening bilateral payment access. The Cambodia-Singapore corridor is likewise assessed as improving and opening, reflecting the Bakong-RoamQR Phase 2 rollout. Cambodia's overall jurisdiction risk trajectory is assessed as worsening, with escalating US and UK sanctions on Prince Group and Huione Group elevating correspondent-banking de-risking pressure even as domestic payment-rail interoperability expands. The Instant Payments standing tracker likewise records an improving trajectory, driven by Bakong's expanding cross-border QR interoperability with China, Singapore, and Laos, and its planned India launch. The Stablecoin Frameworks tracker remains stable, with no Cambodia-specific stablecoin framework development recorded this cycle and the permission-based crypto Prakas regime unchanged.
Cross-Monitor Connections
The Huione Group Section 311 action and the pending H-Pay notice of proposed rulemaking carry illicit-finance and AML significance that has been routed to the Financial Intelligence Monitor for AML analysis. The Prince Bank depositor run and the liquidation of Prince Group's Cambodian banking assets are similarly sanctions-driven events whose illicit-finance dimension is assessed as belonging to FIM rather than to this monitor's payments-infrastructure lens.
Outlook
Cambodia's Bakong instant-payment network is scaling cross-border interoperability faster than its correspondent-banking sector can absorb reputational and sanctions risk, creating a bifurcated payments landscape between a modernising domestic rail and a sanctions-exposed banking periphery. The persistence of the H-Pay Service PLC licence despite the Huione Group rebrand demonstrates that Cambodia's payment-services-institution licensing regime has not yet closed the structural gap enabling sanctions-evasion-by-rebrand. Near-term signposts include the outcome of the H-Pay notice-of-proposed-rulemaking comment period and progress toward the projected second-half-2026 commercial launch of the Cambodia-India QR payment corridor.
trust tier: ai_unverified
Regulatory Status
Cambodia's payments regulatory environment this cycle is defined by simultaneous expansion and stress: the National Bank of Cambodia continues to widen Bakong's cross-border QR interoperability with China, Singapore, Laos, and a planned India corridor, while US enforcement action against the Huione Group and its successor H-Pay Service PLC, and sanctions-driven stress at Prince Bank, weigh on the correspondent-banking periphery. NBC approved Bank of China Phnom Penh Branch as the designated clearing bank for Bakong-WeChat QR cross-border interoperability. FinCEN's Section 311 final rule bars US correspondent accounts for the Cambodia-based Huione Group, effective 17 November 2025, and a subsequent notice of proposed rulemaking seeks to capture H-Pay Service PLC as a Huione Group successor. Cambodia's National Risk Assessment, NRA II, issued by CAFIU, rates the country's Payment Service Institutions at Medium money-laundering vulnerability. Prince Bank suffered a depositor run and suspended branch transactions after October 2025 US-UK sanctions on its parent, Prince Group, and several Prince Group business interests were subsequently placed into liquidation.
Outlook
Cambodia's jurisdiction-level trajectory is assessed as worsening on correspondent-banking access even as its domestic instant-payment rail continues to modernise; the outcome of the H-Pay notice-of-proposed-rulemaking comment period and the projected second-half-2026 Cambodia-India QR commercial launch are the near-term markers to watch.
14 of 14 modules
Signal
Density
Selections OR within a group, AND across groups. Press / to search.
The National Bank of Cambodia (NBC) holds exclusive statutory authority to license and supervise all banks, financial institutions and payment service providers under the 1999 Law on Banking and Financial Institutions (as amended by the Law on Commercial Banks No.56/NA, 2018) and the 2017 Prakas on Management of Payment Service Providers. A dedicated non-bank Payment Transaction Services Institution licence sits alongside third-party-processor arrangements that must tie-in to a licensed bank. Market access remains open to foreign capital, with recent entrants (SBI Holdings, J Trust, BRED) reflecting continued liberalisation.
Open gap — wpm-int-5Challenger review flagged the cited '51 licensed commercial banks' figure as potentially superseded by a separate T3 source citing 59 commercial banks as of Dec-2024; requires verification against NBC's own register before publication.no under-indexing note recorded
Standing sub-brief295 words · last cycle wpm-2026-07-04
Licensing, Authorisation & Market Access
The National Bank of Cambodia holds exclusive statutory authority to license and supervise banks, financial institutions and payment service providers, under the 1999 Law on Banking and Financial Institutions as amended by Law No.56/NA in 2018 and the 2017 Prakas on Management of Payment Service Providers. Within that regime, the Payment Transaction Services Institution licence for non-bank payment service providers requires minimum capital of roughly KHR 8,000 million (about USD 2 million), with 5% deposited at the central bank, carries a six-year renewable term, and requires National Bank approval for any merger, acquisition or business transfer. This non-bank tier sits alongside bank-tied third-party-processor arrangements under a separate 2010 Prakas, giving Cambodia a dual bank/non-bank licensing architecture rather than a single gatekeeping route. Market access for foreign capital remains open under this framework, illustrated this cycle by Japan's SBI Holdings completing its acquisition and rebrand of a domestic bank unit. On the scale of the underlying banking sector, one cited source counts 51 licensed commercial banks, though a separate lower-tier source puts the figure at 59 as of December 2024; the discrepancy was flagged in review, and confidence in the 51 figure has accordingly been downgraded from High to Assessed pending verification against the central bank's own published register.
Outlook
Cambodia's licensing architecture appears settled rather than in flux this cycle: the core statutory basis, the non-bank licence tier and the foreign-capital-open market-access posture are all standing features rather than new developments this period. The clearest open question is statistical rather than regulatory -- resolving the discrepancy between the 51- and 59-bank counts will matter for accurately sizing the market that any prospective licensee or acquirer is entering, particularly given the continued appetite for foreign entry demonstrated by the SBI transaction.
No periodic updates recorded against this sub-brief.
Conduct and consumer-facing obligations for payment institutions sit across several instruments: the NBC's dedicated Prakas on Resolution of Consumer Complaints, a 2021 circular tightening KYC and tiered daily transaction limits for PSPs and Bakong participants, the 2019 Law on Consumer Protection (administered jointly by the Ministry of Commerce/National Committee for Consumer Protection and NBC for the financial sector), and the 2019 E-commerce Law's chapter on electronic fund transfers, which shifts liability to the institution once a customer has notified loss/theft of a payment instrument.
Open gap — wpm-int-4E-money/prepaid customer-fund redemption and insolvency-priority rules for Cambodian PSPs were not identified in available sources.no under-indexing note recorded
Standing sub-brief210 words · last cycle wpm-2026-07-04
Conduct, Safeguarding & Financial Promotions
The National Bank of Cambodia mandates a standardised complaint-resolution mechanism via its Prakas on Resolution of Consumer Complaints, applicable uniformly across banking, payment and financial institutions. Cambodia's 2019 Law on Electronic Commerce shifts liability to the institution once a customer has notified it that an electronic payment instrument was lost or stolen, under the law's Chapter 9 provisions on electronic fund transfers. A March 2021 National Bank circular layers tiered daily transaction limits on top of this, calibrated to the identification tier or verification stage a Bakong or payment-service-provider customer has completed, giving Cambodia's conduct regime a graduated, KYC-linked fraud-mitigation structure rather than a flat liability rule. No e-money or prepaid customer-fund redemption and insolvency-priority rules for Cambodian PSPs were identified in available sources, a standing gap in the regime's consumer-safeguarding architecture.
Outlook
The conduct layer looks stable rather than actively evolving this cycle, with the complaint, liability-shift and tiered-limit rules functioning as an established baseline. The clearest forward-looking watchpoint is the absence of e-money redemption and insolvency-priority protection: as non-bank payment institutions grow in transaction volume, the lack of a dedicated safeguarding regime for customer funds held by non-banks is likely to become a more visible gap, particularly if any PSP faced financial distress.
No periodic updates recorded against this sub-brief.
Cambodia's crypto/stablecoin regime is anchored in the Prakas on Transactions Related to Cryptoassets (Prakas B7-024-735 Prokor), issued 26 December 2024 and effective immediately in early 2025. It replaces the prior informal 2018 NBC/SERC/police ban with a permission-based, risk-tiered framework distinguishing backed 'Group 1' assets (tokenised traditional assets and approved stablecoins) from unbacked 'Group 2' assets (Bitcoin, Ethereum, etc.), which remain barred from bank balance sheets. Only two domestically licensed platforms operate under the NBC/SERC FinTech Regulatory Sandbox, while the Telecommunications Regulator of Cambodia has blocked access to major offshore exchanges. Bakong itself is characterised by the NBC as a payment/tokenised-deposit system rather than a strict CBDC.
Open gap — wpm-int-3Detailed CASP licensing conditions under the Dec-2024 Cryptoassets Prakas remain pending a forthcoming implementing regulation; no forward date available from sources, so no regulatory_horizon item was created.no under-indexing note recorded
Open gap — wpm-int-6Bakong's CBDC classification is contested: NBC officials describe it as a 'quasi CBDC' (account-based), while external taxonomies note both account- and token-based models qualify as CBDC; standing-position language corrected this cycle to avoid over-asserting NBC's own terminology.no under-indexing note recorded
Standing sub-brief252 words · last cycle wpm-2026-07-04
Stablecoins & Digital Money
The National Bank of Cambodia's Prakas on Transactions Related to Cryptoassets, in force since 26 December 2024, classifies cryptoassets into a Group 1 category of backed or tokenised traditional assets and approved stablecoins, split into 1a and 1b sub-tiers, and a Group 2 category of unbacked assets such as Bitcoin and Ethereum that remain barred from bank balance sheets, with Group 1a bank exposure capped at 5% of CET1 capital. The same Prakas creates a new Crypto Asset Service Provider licence category covering the exchange, transfer and safekeeping or administration of cryptoassets, though detailed licensing conditions await a forthcoming separate implementing regulation with no announced date. Bakong, the National Bank's flagship payment platform, continues to be characterised by National Bank officials as a 'quasi' central bank digital currency that is account-based rather than token-based; the National Bank has not been sourced as using the term 'tokenised-deposit system' to describe it, a distinction that is architectural rather than a denial of CBDC status, since both account- and token-based models qualify as CBDC under international taxonomy.
Outlook
Cambodia's crypto framework has moved from an informal 2018 ban to an operative, risk-tiered permission regime, but the regime remains early-stage: the Crypto Asset Service Provider licence exists in name only until its implementing regulation is published, and market access is understood to remain narrow in practice. Watch for the publication date of that implementing regulation as the key trigger for whether licensed crypto activity expands beyond a small number of sandboxed platforms.
No periodic updates recorded against this sub-brief.
NBC has run a dedicated Technology Risk Management (TRM) framework since July 2019, refreshed as the Technology and Cyber Risk Management Guidelines in 2026, covering cybersecurity management, IT services outsourcing, business continuity management and customer personal-data protection for all banking and financial institutions (BFIs). Compliance was initially self-audited/voluntary but NBC began formal TRM audits from 2024. Critical payment infrastructure resilience also rests on the Bakong platform's replicated, permissioned-blockchain architecture and the Cambodian Shared Switch (CSS) for card-based interbank clearing.
Standing sub-brief176 words · last cycle wpm-2026-07-04
Operational Resilience & Critical Infrastructure
The National Bank of Cambodia's Technology and Cyber Risk Management Guidelines, refreshed in 2026, require a board-approved Information Security Policy, dedicated chapters on technology-service outsourcing, business continuity management, customer personal-data protection and IT audit, and a secondary data centre subject to political and geographic risk assessment. The central bank has moved since 2024 from a largely self-audited compliance posture to conducting its own formal compliance audits of institutions' adherence to these guidelines, tightening enforcement of what had previously been a more voluntary regime. Together, the 2026 refresh and the shift to direct supervisory audit represent the most active tightening of Cambodia's operational-resilience framework identified this cycle, positioned as a deliberate response to the operational and cyber risks accompanying rapid digital-payments growth.
Outlook
Expect the National Bank to continue building out direct audit capacity against the refreshed guidelines; the near-term signal to watch is whether audit findings translate into public enforcement actions against individual banks or PSPs, which would mark a further step-change from the guideline's advisory origins toward binding supervisory practice.
No periodic updates recorded against this sub-brief.
Cambodia's scheme layer combines the NBC-operated Cambodian Shared Switch for domestic card interoperability with the KHQR EMV-based unified QR standard (introduced 2020, mandatory for QR-accepting merchants since 2022) and bilateral scheme linkages with international networks (UnionPay International, NAPAS, PromptPay, DuitNow, NPCI/UPI). Third-party processors remain regulated under the 2010 Prakas requiring a tie-in to a licensed bank. No explicit NBC-mandated interchange-fee cap or surcharge regulation was identified; card-scheme compliance operates largely through bilateral scheme-operator agreements layered on top of NBC licensing.
Open gap — wpm-int-1No jurisdiction-specific interchange-fee cap or surcharge regulation identified for Cambodia; card-scheme compliance operates via bilateral scheme-operator agreements only.no under-indexing note recorded
Standing sub-brief157 words · last cycle wpm-2026-07-04
Scheme & Network Compliance
KHQR, Cambodia's EMV-based unified national QR standard, has carried mandatory acceptance for QR-accepting merchants since 2022, anchoring domestic scheme interoperability across banks and payment service providers. Non-bank third-party processors operate under a 2010 Prakas requiring a tie-in arrangement with a licensed banking institution, a rule that predates and sits alongside the 2017 Prakas on Payment Service Providers and continues to route non-bank processing activity through a bank counterparty. No jurisdiction-specific interchange-fee cap or merchant surcharge regulation was identified for Cambodia; card-scheme compliance instead operates through bilateral scheme-operator agreements layered on top of the domestic KHQR standard.
Outlook
The scheme layer looks stable, with KHQR's domestic mandate and the third-party-processor tie-in rule functioning as settled infrastructure rather than areas of active change. The absence of a dedicated interchange or surcharge framework is worth tracking as transaction volumes grow, since Cambodia currently relies on scheme-operator bilateral terms rather than domestic rulemaking to govern merchant costs.
No periodic updates recorded against this sub-brief.
Cambodia has rapidly built out cross-border QR/instant-payment linkages anchored on Bakong/KHQR, covering Thailand (PromptPay, live since 2024), Vietnam (NAPAS/VietQR, launched Dec 2023), Laos (two phases, Aug 2023 and Dec 2025), Malaysia (DuitNow, two phases), Singapore (SGQR, phase 1 Nov 2025), Japan (JPQR pilot) and China (UnionPay, Dec 2023), with a further UPI-KHQR interoperability partnership between ACLEDA Bank and India's NPCI International announced Dec 2025. NBC formally joined the ASEAN Regional Payment Connectivity initiative (April 2025). Remittances outside these QR rails continue to be routed through licensed remittance partners subject to NBC reporting thresholds.
Movement — CHANGEDBakong cross-border QR interoperability expanded (China/Singapore/Laos/India pipeline)New cross-border QR clearing/linkage developments this cycle
Standing sub-brief164 words · last cycle wpm-2026-08-05
Payment Corridor Dynamics
NBC approved Bank of China Phnom Penh Branch as the designated clearing bank for Bakong-WeChat QR cross-border interoperability, extending Bakong's reach into China's UnionPay, Alipay, and WeChat Pay ecosystem. Singapore travellers can now pay merchants in Cambodia via KHQR using home mobile-payment apps under the second phase of the Bakong-RoamQR linkage. A second phase of the Cambodia-Laos QR linkage launched in December 2025, and a commercial launch of a Cambodia-India QR payment service is projected for the second half of 2026. Only around 2% of issued Bakong wallets are actively used, and the US dollar still accounts for roughly 70% of transaction value, indicating that de-dollarisation and wallet-activation goals remain largely unmet even as cross-border interoperability expands.
Outlook
The Cambodia-India QR commercial launch, expected in the second half of 2026, is the next milestone in Bakong's regional corridor expansion. Continued monitoring of wallet-activation and dollarisation metrics is warranted, as the underlying figures currently rest on a single, uncorroborated Tier 4 source.
Periodic update · new data 2026-08-11 · run wpm-2026-08-05
Payment Corridor Dynamics
Cambodia's cross-border payment-corridor expansion accelerated on several fronts this cycle. The National Bank of Cambodia approved Bank of China Phnom Penh Branch as the designated clearing bank for Bakong-WeChat QR cross-border interoperability, extending Cambodia's KHQR standard into China's UnionPay, Alipay, and WeChat Pay ecosystem through a licensed bank intermediary, a bank-led clearing arrangement rather than a purely non-bank scheme integration. Separately, the Bakong-RoamQR linkage entered a second phase enabling Singapore travellers to pay merchants in Cambodia via KHQR using their home mobile-payment apps, a nonbank-scheme-led expansion of the same underlying inbound-QR-acceptance model. Regionally, a second phase of the Cambodia-Laos QR linkage launched in December 2025, and NBC's broader cross-border QR programme projects a Cambodia-India commercial launch in the second half of 2026.
Together these developments show Cambodia pursuing an aggressive multi-corridor QR-interoperability strategy spanning both bank-cleared (China) and scheme-led nonbank (Singapore) integration models, consistent with the broader regional trend toward QR-based real-time payment interlinkage. A separate, lower-confidence data point complicates the growth narrative: a single source reports that only around 2 percent of issued Bakong wallets are actively used, with the US dollar still accounting for roughly 70 percent of transaction value, suggesting that cross-border interoperability growth has substantially outpaced domestic wallet activation and de-dollarisation progress. That gap between headline corridor expansion and underlying usage depth is a material caveat on any read of Bakong's cross-border push as evidence of deep domestic instant-payment adoption.
Outlook
The Cambodia-India QR corridor's projected second-half-2026 commercial launch is the clearest near-term milestone. Whether Bakong's cross-border expansion begins to close the wallet-activation and dollarisation gap, or continues to run ahead of domestic usage depth, is the key open question for the coming cycle; the current evidence base for usage-depth metrics remains thin and would benefit from independent corroboration beyond the single source available this cycle.
Cambodia's banking/payments industry remains bank-led but increasingly digital-first, dominated commercially by ABA Bank (subsidiary of National Bank of Canada), which overtook ACLEDA Bank in assets and deposits by 2022 and posted a $377.5 million net profit in 2025 on $16.2 billion in total assets. Wing (mobile-money pioneer) converted to a full banking licence as Wing Bank. Foreign entrants continue to consolidate the sector, illustrated by SBI Holdings' 2026 acquisition of a domestic MFI. The sector also carries acute reputational/structural risk from Prince Bank's ownership linkage to the OFAC-sanctioned Prince Group conglomerate.
Standing sub-brief189 words · last cycle wpm-2026-07-04
Industry Structure & Commercial Dynamics
ABA Bank reported 2025 total assets of $16.2 billion, up 17% year-on-year, and net profit of $377.5 million, up 26%, confirming its position as Cambodia's largest commercial bank by assets, deposits, loans and profitability and illustrating a digital-first competitive dynamic increasingly shaping the bank-led payments market. That market-leadership picture sits alongside acute structural risk at Prince Bank Plc, which faces reputational and franchise damage following the 14 October 2025 OFAC Specially Designated Nationals listing of its parent as part of the Prince Group Transnational Criminal Organization sanctions action, a designation that materially affects Cambodia's mid-tier deposit-taking bank landscape. The coexistence of a strengthening digital-first market leader and a sanctions-damaged mid-tier competitor illustrates a bifurcating industry structure this cycle, with capital and customer confidence increasingly concentrated around institutions seen as clear of illicit-finance exposure.
Outlook
Watch whether Prince Bank's sanctions exposure triggers further consolidation -- either a forced sale, government-directed restructuring, or continued deposit attrition toward ABA and other unaffected banks -- and whether this reshapes competitive dynamics among Cambodia's mid-tier banks more broadly as depositors and correspondent counterparties reassess exposure to reputationally damaged institutions.
No periodic updates recorded against this sub-brief.
Cambodia's payments-adjacent legal/enforcement landscape in 2025-2026 has been dominated by transnational scam-compound litigation and sanctions. OFAC designated the Prince Group a Transnational Criminal Organization (Oct 2025, expanded June 2026), sanctioning Prince Bank and dozens of affiliated entities; FinCEN severed Huione Group from the US financial system under Section 311 over c.$4 billion in laundered proceeds. Domestically, Cambodia enacted its first dedicated Law on Anti-Technology Fraud (6 April 2026) and the Commercial Gambling Management Commission has suspended/revoked casino licences tied to scam operations, though Amnesty International's June 2026 report found state intervention at only a minority of identified compounds.
Standing sub-brief213 words · last cycle wpm-2026-07-04
Legal & Litigation
On 14 October 2025, the U.S. Treasury's Office of Foreign Assets Control designated the Prince Group Transnational Criminal Organization, naming 146 targets including Prince Bank Plc, while the Financial Crimes Enforcement Network issued a Section 311 special measure severing Huione Group from the U.S. financial system over more than $4 billion allegedly laundered between 2021 and 2025; OFAC expanded the designation on 23 June 2026, adding nine individuals and 26 entities. Cambodia enacted its first dedicated Law on Anti-Technology Fraud on 6 April 2026, granting prosecutors stronger powers against scam-industry organisers, financiers and infrastructure providers, a direct domestic legislative response to the scam-compound crisis. Despite this new statute and associated casino-licence actions, Amnesty International's June 2026 report found state intervention at only 24 of 86 identified scam compounds, with documented continued abuse after publicised raids, indicating a persistent enforcement-effectiveness gap between Cambodia's legal reforms and their practical implementation.
Outlook
The trajectory here is escalating on two fronts simultaneously: international sanctions pressure, following OFAC's June 2026 expansion of the Prince Group designation, and domestic prosecutorial capacity under the new Anti-Technology Fraud Law. The critical indicator to watch is whether prosecutions under the new law increase materially, or whether the enforcement gap documented by Amnesty International persists despite the expanded legal toolkit.
No periodic updates recorded against this sub-brief.
Cambodia's e-commerce and merchant-acquiring market is early-stage but fast-growing (roughly $300 million in online commerce in 2023, projected CAGR above 25% through 2027), mobile-first (over 70% of e-commerce transactions), and QR-led -- KHQR acceptance has been mandatory for QR-receiving merchants since 2022. Acquiring is typically handled by local banks/PSPs (e.g. ABA's PayWay gateway) holding the merchant relationship and remitting offshore as needed; dedicated domestic payments fintechs such as Clik provide POS/merchant-acquiring infrastructure to tens of thousands of merchants. No jurisdiction-specific high-risk-MCC or chargeback framework distinct from standard scheme rules was identified.
Open gap — wpm-int-2No dedicated high-risk-MCC or chargeback framework distinct from standard card-scheme rules identified for the Cambodian merchant-acquiring market.no under-indexing note recorded
Standing sub-brief143 words · last cycle wpm-2026-07-04
Merchant Acquiring & Risk
Cambodia's merchant-acquiring market is structured around local bank and PSP-held merchant relationships, exemplified by ABA Bank's PayWay gateway, layered on top of mandatory KHQR acceptance in force since 2022. No bespoke high-risk merchant-category-code or chargeback framework distinct from standard international card-scheme rules was identified for the Cambodian market, suggesting acquiring risk management here still runs largely on imported scheme rulebooks rather than domestic bespoke rules. This gap sits alongside a fast-growing, mobile-first, QR-led acquiring environment, where bank-affiliated gateways coexist with independent fintech acquirers serving the country's rapidly digitising merchant base.
Outlook
As transaction volumes and merchant digitisation continue to grow, the absence of a bespoke high-risk-MCC or chargeback framework is likely to become more consequential, particularly if fraud losses concentrate in specific merchant categories; watch for any National Bank move toward a dedicated acquiring-risk framework as transaction volumes scale.
No periodic updates recorded against this sub-brief.
Product innovation in Cambodia centres on the NBC-led Bakong/KHQR/FAST triad: Bakong (blockchain-based instant payment and tokenised-deposit platform, launched Oct 2020), KHQR (unified EMV QR standard, July 2022) and the FAST payment system. Innovation extends to a dedicated tourist-facing Bakong app (Aug 2024), a NBC/SERC FinTech Regulatory Sandbox hosting licensed crypto exchanges, and policy scaffolding via the Financial Technology Development Policy 2023-2028 and the National Financial Inclusion Strategy 2019-2025.
Standing sub-brief124 words · last cycle wpm-2026-08-05
Product Innovation & Market Development
The National Bank of Cambodia's Prakas B7-024-735 Prokor permits licensed banks and firms to offer cryptoasset services with prior NBC approval, a permission-based regime that continues to operate unchanged this cycle. The US Department of Justice seized backend cloud infrastructure that the Huione Group used to launder proceeds from Southeast Asian scam centres, underscoring that enforcement pressure on Huione-linked infrastructure extends beyond the licensed payment-services entity itself.
Outlook
The crypto Prakas regime and the DOJ's infrastructure seizure sit in parallel tracks: continued NBC permissioning of licensed crypto activity on one hand, and continued US dismantling of Huione-linked backend infrastructure on the other, with no indication this cycle that the two tracks are converging into a single Cambodia-specific crypto-policy response.
Periodic update · new data 2026-08-11 · run wpm-2026-08-05
Product Innovation & Market Development
Two developments this cycle define Cambodia's product-innovation picture in digital assets. First, Cambodia operates a permission-based crypto-asset licensing framework under Prakas B7-024-735 Prokor, permitting NBC-licensed banks and firms to offer crypto-asset services subject to prior National Bank approval; this represents a structural product-access framework for crypto/digital-asset offerings within the banking sector, though the description rests on a single, lower-confidence source this cycle and would benefit from independent verification against the primary NBC text. Second, and more consequentially, US authorities intervened directly at the infrastructure layer: the Department of Justice seized backend cloud-computing infrastructure that the Huione Group used to move and conceal proceeds from Southeast Asian scam-centre fraud. This is a law-enforcement infrastructure action rather than a product launch, but it is directly relevant to the product-innovation domain because it targets the technical backend supporting crypto/payment services rather than only the corporate entity operating them, illustrating that infrastructure-level enforcement is now an operative risk category for any crypto-adjacent product built on shared or outsourced backend infrastructure in this market.
Outlook
Cambodia's permission-based crypto framework and the scope of NBC's approval process for individual crypto-asset service offerings remain the key gaps to watch; independent, higher-tier confirmation of the Prakas B7-024-735 framework's operative detail would materially improve confidence in assessing product-development conditions for licensed crypto-asset services in this market.
Consumer protection for payments sits at the intersection of the 2019 Law on Consumer Protection (National Committee for Consumer Protection), NBC's Prakas on Resolution of Consumer Complaints, the 2019 E-commerce Law's liability provisions for lost/stolen payment instruments, and a 2021 NBC circular tightening KYC and transaction-limit rules to curb digital-payment fraud. Enforcement gaps remain acute in the adjacent scam-compound/APP-fraud context: Amnesty International's June 2026 report found that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as trafficking victims despite meeting the Palermo Protocol definition.
Standing sub-brief161 words · last cycle wpm-2026-07-04
Consumer Protection & APP Fraud
Cambodia's consumer-protection architecture layers the National Bank's Prakas on Resolution of Consumer Complaints, the 2019 Consumer Protection Law, the 2019 E-commerce Law's liability-shift rules for lost or stolen payment instruments, and the 2021 tiered-KYC transaction-limit circular into a reasonably comprehensive framework on paper. That framework sits in sharp tension with enforcement reality in the scam-compound context: Amnesty International's June 2026 report found that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as human-trafficking victims, despite meeting the Palermo Protocol definition, an acute victim-recognition gap that sits alongside the broader authorised-push-payment and fraud-enablement concerns documented elsewhere in this brief.
Outlook
The standing consumer-protection instruments are unlikely to change materially in the near term, but the victim-recognition gap identified by Amnesty International is a live reputational and policy pressure point; watch for whether Cambodian authorities begin formally recognising scam-compound victims as trafficking victims, which would carry significant downstream implications for prosecutorial strategy and international cooperation.
No periodic updates recorded against this sub-brief.
Sentinel.gi payments-context position: Cambodia was removed from the FATF grey list in February 2023 after completing a multi-year action plan addressing strategic AML/CFT deficiencies identified in 2019, underpinned by AML/CFT legislation strengthened in June 2020. Notwithstanding this formal exit, Cambodia's payments and banking sector faces acute, ongoing illicit-finance exposure from the scam-compound economy, evidenced by FinCEN's Section 311 action against Huione Group and OFAC's Transnational Criminal Organization designation of Prince Group and its banking affiliate Prince Bank.
Movement — CHANGEDFinCEN Huione/H-Pay Section 311 escalation; NRA II PSI Medium ratingNew Sentinel-fed AML findings
Standing sub-brief119 words · last cycle wpm-2026-08-05
AML/CFT & Financial Crime
This module's intelligence is sourced from the Sentinel.gi feed. FinCEN's Section 311 final rule bars US correspondent accounts for the Cambodia-based Huione Group, effective 17 November 2025. A subsequent FinCEN notice of proposed rulemaking seeks to capture H-Pay Service PLC, a Cambodia-licensed payment services institution, as a Huione Group successor, extending the same special-measure logic to the rebranded entity. Cambodia's National Risk Assessment, NRA II, issued by CAFIU, rates the country's Payment Service Institutions at Medium money-laundering vulnerability.
Outlook
The outcome of the H-Pay notice-of-proposed-rulemaking comment period is the near-term marker to watch; for underlying illicit-finance analysis of the Huione/H-Pay enforcement chain, see the Sentinel feed and the Financial Intelligence Monitor rather than this module.
Periodic update · new data 2026-08-11 · run wpm-2026-08-05
AML/CFT & Financial Crime
This cycle's AML/CFT signal for Cambodia is carried through the Sentinel.gi feed. Sentinel-sourced reporting confirms that FinCEN's Section 311 final rule barring US correspondent accounts for Huione Group took effect November 17, 2025, and that FinCEN has since proposed extending that special measure to capture H-Pay Service PLC, a Cambodia-licensed payment services institution reported to have assumed Huione Pay PLC's business role. Separately, Cambodia's own National Risk Assessment (NRA II), a primary Cambodia Financial Intelligence Unit document, rates the country's Payment Service Institutions at Medium money-laundering vulnerability. Consistent with WPM's scope boundary, this brief attributes these findings to the Sentinel feed and the primary CAFIU source respectively rather than conducting independent illicit-finance analysis; readers seeking deeper typology or enforcement-theory analysis of the underlying scam-finance network should refer to Sentinel's own reporting and to financial-integrity-monitor coverage of the same entities.
Outlook
The operative watch item is FinCEN's NPRM process for the H-Pay Service PLC expansion, which will determine whether Cambodia's payment-services licensing regime continues to permit rebrand-based continuity for a previously designated entity's US correspondent-banking access; resolution is anticipated around the third quarter of 2026.
Sources and findings (8)
T?FIM (sentinel.gi) per-JID baseline profile — Cambodia — Cambodia operates under the 2020 AML/CFT Law and 2021 CDD Directive, supervised by CAFIU (FIU), the National Bank of Cambodia, and the Ministry of Economy and Finance. Delisted from the FATF grey list in February 2023, but casino, real estate, DNFBP and virtual-asset supervision remain weak amid a cash-based, dollarized economy that enables large-scale scam-compound and crypto-laundering infrastructure operating with apparent elite protection.
T2FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-006) — Enforcement: OFSI / FCDO — Hu Xiaowei, Wang Xiaoyan, additional Prince Group-linked individuals and UK companies/properties
T3FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: OFAC — Senator Kok An, Heng Feng Cambodia Bank, K99 Group, Bolai, and 25 other individuals/entities
Correspondent banking access in Cambodia is governed at the FX level by the 2007 Foreign Exchange Law, which places no restriction on cross-border transfers provided they are routed through an 'authorised intermediary' bank permanently established in Cambodia. Major domestic banks lean on parent-group correspondent networks (e.g. ABA Bank via National Bank of Canada). The sector faces acute de-risking pressure following the October 2025 OFAC designation of Prince Bank and the associated Prince Group/Huione sanctions, which triggered visible public deposit anxiety and heightened correspondent-bank scrutiny of Cambodian counterparties generally. NBC has also built a Financial Transparency Corridor (FTC) digital infrastructure to support advance agreements between domestic BFIs and partner-country counterparts.
Movement — CHANGEDPrince Bank depositor run/liquidationNew correspondent-banking stress event
Standing sub-brief113 words · last cycle wpm-2026-08-05
Correspondent Banking, Settlement & Access
Cambodia's correspondent-banking access sits on a bank-versus-non-bank fault line: licensed banks retain nostro relationships that non-bank payment-services institutions structurally lack, and that asymmetry is now under direct stress. Prince Bank suffered a depositor run and suspended branch transactions after October 2025 US-UK sanctions on its parent, Prince Group. Cambodian regulators subsequently placed several Prince Group business interests, including banking and property ventures, into liquidation.
Outlook
The Prince Bank episode illustrates how sanctions on a single conglomerate parent can cascade into correspondent-banking-access stress for licensed Cambodian banks, a channel distinct from the non-bank PSP licensing gap driving the Huione/H-Pay enforcement track; both nonetheless compound the same jurisdiction-level de-risking pressure.
Periodic update · new data 2026-08-11 · run wpm-2026-08-05
Correspondent Banking, Settlement & Access
Cambodia's correspondent-banking exposure this cycle is concentrated at a licensed bank directly tied to a sanctioned corporate parent. Prince Bank, a Cambodian bank linked to the Prince Group, reportedly suffered a depositor run and suspended branch transactions following the October 2025 US-UK sanctions action against its parent conglomerate, and several Prince Group Cambodian banking and property ventures have since been placed into liquidation. Both findings rest on single, lower-confidence sources this cycle and should be read as directionally indicative rather than statistically confirmed. The bank-versus-nonbank distinction that anchors this module's analytical spine is visible here in stark form: it is a licensed bank's correspondent access and depositor confidence that is directly and visibly exposed to sanctions contagion, in contrast to the nonbank payment-services institution layer, addressed under this brief's AML/CFT module, where the exposure runs through licensing-regime permeability rather than correspondent-account loss. A bank facing a sanctions-driven depositor run has fewer immediate substitution options for retail liquidity than a nonbank payment institution might have for transaction routing, making the correspondent-banking channel the more acute near-term access risk in this specific case.
Outlook
Whether Prince Bank's reported liquidity stress stabilises or deepens, and whether the liquidation of related Prince Group banking and property ventures expands to affect additional counterparties, are the key correspondent-banking developments to track; both currently rest on single-source reporting and would benefit from independent confirmation in the coming cycle.
Within the trailing 12 months, Cambodia's payments/fintech commercial activity has been dominated by SBI Holdings' completed acquisition and rebranding of a domestic bank, ACLEDA Bank's cross-border UPI partnership with India's NPCI International, Wing Bank's digital-app relaunch, and continued cross-border QR product rollouts (Singapore, Laos phase 2). Cumulative fintech investment in Cambodia is estimated at approximately $120 million between 2022 and 2025, concentrated in payments and digital lending.
Standing sub-brief203 words · last cycle wpm-2026-07-04
May 2026: Japan's SBI Holdings completed its acquisition of SBI LY HOUR Bank PLC, rebranding the entity as SBI Bank (Cambodia) PLC and extending a $100 million credit facility to the renamed bank; the underlying acquisition consideration itself was not publicly disclosed. December 2025: ACLEDA Bank Plc announced a partnership with NPCI International Payments Limited enabling UPI acceptance in Cambodia and KHQR acceptance in India, extending KHQR's cross-border footprint into a major emerging-market payment rail; deal terms were not publicly disclosed. April 2026: Wing Bank launched 'Jib Jib,' a reinvented digital banking app emphasising rewards and personalisation, continuing the competitive product-refresh dynamic among Cambodia's leading digital-first banks. Read together, these three events -- a completed foreign bank acquisition, a cross-border scheme partnership, and a consumer-app relaunch -- span Cambodia's trailing twelve months of commercial activity and illustrate continued foreign and domestic investment despite the sector's concurrent sanctions exposure.
Outlook
Expect continued foreign-capital interest in Cambodian bank targets following the SBI transaction, continued cross-border scheme partnerships extending KHQR's international footprint, and ongoing product-refresh competition among digital-first banks; the key near-term marker is whether any further M&A activity discloses full deal consideration, which none of this cycle's events did.
No periodic updates recorded against this sub-brief.
Filters combine as OR inside a group and AND across
groups.
Editorial metadata
Provenance only. Nothing below gates publication or affects the render.
Editorial metadata for Cambodia
Field
Value
trust.lawyer_review.status
never_reviewed
trust.lawyer_review.reviewer
not recorded
trust.content_source
ai_generated
Provenance and declared absence
Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.
Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.
Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.