The SECP released proposed changes to its Anti-Money Laundering, Combating Financing of Terrorism and Countering Proliferation Financing Regulations on April 24, 2026, opening a 14-day public consultation window. The amendments would formally require investors to verify their identities through IBAN checks processed via the Raast instant payment platform and NADRA's national biometric database, and would restrict all investment transactions to IBAN-verified bank accounts or e-wallets. The stated goal is an auditable financial trail that reduces the risk of untraceable or unauthorized transactions moving through Pakistan's capital markets.

How the Verification Stack Works

The proposed system layers three existing pieces of infrastructure. Raast, the State Bank of Pakistan's interoperable instant payment network, connects to NADRA's identity authentication systems to confirm that a bank account belongs to the person claiming it. The National Clearing Company of Pakistan Limited (NCCPL), already designated as an SECP-notified entity, handles the IBAN check on the capital markets side and has built this capability into its customer onboarding API. The biometric layer goes further than fingerprints alone: the framework explicitly includes facial recognition to account for the fingerprint quality variability that affects a portion of Pakistan's 220 million-plus population. NADRA's Nishan Pakistan unified verification platform provides the facial recognition alternative. More than 60 percent of Pakistani adults already access digital financial services partly through Raast infrastructure, meaning the new rules build on an established user base rather than introducing unfamiliar tooling.

This is not an entirely new architecture. SECP's Circular 06 of 2023 piloted digital onboarding through the Central Depository Company's Asaan Connect platform. The new amendments, which SECP describes as part of its broader "Paper to Platform" digital reform agenda, would convert what was optional under that pilot into a mandatory baseline. NCCPL had already launched NCC BioVerify, a mobile biometric verification app for capital market investors, ahead of the formal rule change.

The commission was explicit about one thing that the digital tooling does not change: accountability. "Regulated Persons will continue to bear full responsibility for KYC, due diligence, transaction monitoring, and AML compliance," SECP stated, according to reporting from ProPakistani. The automation handles verification mechanics, but regulated entities cannot delegate their legal obligations to a platform.

Why This Matters Beyond Securities Markets

Pakistan ranked third globally in retail crypto activity as of early 2026, ahead of Germany and Japan, with roughly 40 million residents actively trading digital assets. That figure represents about 17 percent of the national population, a scale that puts Pakistan's regulatory choices in a different category from most emerging markets.

The SECP amendments sit inside a much broader regulatory construction project. Parliament passed the Virtual Assets Act 2026 earlier this year, establishing the Pakistan Virtual Assets Regulatory Authority (PVARA) with an 11-member board that includes the SBP Governor, the SECP Chairperson, and senior federal secretaries. In April 2026, the State Bank reversed its 2018 blanket prohibition on crypto services, allowing banks to open accounts for VASPs that hold a valid PVARA license, subject to enhanced due diligence. For any exchange or wallet provider seeking that banking access, demonstrating AML and KYC compliance is the entry requirement. The SECP's proposed framework signals what that bar looks like at the securities layer.

The global stakes of Pakistan's regulatory posture were underscored in December 2025, when Pakistan signed a memorandum of understanding with Binance covering up to two billion dollars in state asset tokenization as well as a national stablecoin initiative. That agreement indicates that major international exchanges are already embedded in Pakistan's regulatory ambitions, making the credibility of the AML and KYC framework a matter of direct commercial consequence.

For developers building onboarding flows or compliance tooling for the Pakistani market, the practical takeaway is direct: IBAN verification through Raast and NADRA facial recognition are becoming the baseline expectation, not an optional enhancement.

The FATF Dimension

Pakistan was removed from the Financial Action Task Force grey list in October 2022 after roughly four years of mandated reforms. As FATF documentation makes clear, grey list status restricts a country's access to international capital and raises correspondent banking costs. India lobbied at the June 2025 FATF summit in France to seek Pakistan's re-listing following the Kashmir attacks, and that pressure remains a live concern for Islamabad's financial regulators.

Every public layer of AML infrastructure that SECP strengthens is, in part, a signal to FATF evaluators that Pakistan's post-2022 reforms are structural rather than cosmetic. The timing of these amendments and their emphasis on transaction traceability reflect that political context as much as they reflect domestic market development goals.

Regional Standing

Across South Asia, Pakistan is currently ahead of its neighbors on formal virtual asset regulation. India maintains a heavy crypto tax regime alongside an ambiguous legal status for digital assets. Bangladesh prohibits crypto trading outright. Sri Lanka has no clear virtual asset framework. The combination of PVARA, the SBP banking access circular, and SECP's proposed AML tightening gives Pakistan the most structurally complete regulatory framework for digital assets in the subcontinent. Full enforcement maturity is still years away, but the architecture is taking shape faster than most observers expected.

The consultation window closes approximately 14 days from the April 24 publication date. Final rules have not been announced.