China Crypto Ban & Offshore Compliance Advisory, Practical Strategies for Businesses with Chinese Exposure

Crypto compliance China questions have grown urgent since the joint Notice of 6 February 2026 and the release of the 2026 Draft Financial Law, both of which reaffirmed that domestic cryptocurrency activity remains prohibited across mainland China. For exchanges, founders, token issuers and institutional projects with Chinese users or investors, the practical challenge is no longer interpreting whether the ban exists, it plainly does, but structuring lawful, offshore-facing operations that manage enforcement risk while serving global markets. This advisory converts the latest regulatory position into an operational playbook: how to build offshore-compliant models, deploy technical controls, use Hong Kong as an alternative, and document non-solicitation of mainland participants. Every legal assertion here is grounded in primary regulator sources.

At-a-glance advisory for businesses with China exposure

This page is written for founders, exchange operators, token issuers and institutional teams whose products reach, or might reach, people located in mainland China. It sets out the current legal baseline, an enforcement risk matrix, a step-by-step offshore compliance playbook, and a jurisdictional comparison covering the mainland, Hong Kong and common offshore licensing routes. Effective crypto compliance China strategy depends on segregation of onshore contact points, disciplined KYC geoblocking, and evidenced non-targeting of mainland residents.

What changed in 2026 and why this matters

Two developments reshaped the compliance conversation in 2026. First, on 6 February 2026, Chinese financial regulators issued a joint Notice on further preventing and dealing with cryptocurrency-related risks, reaffirming that virtual currency trading and related onshore business activities remain illegal. Second, the Ministry of Justice published the Draft Financial Law (2026) for public consultation, prompting speculation about whether China might liberalise. It does not. The consultation confirms the domestic prohibition while gesturing toward tightly controlled pathways for real-world-asset (RWA) tokenisation under strict conditions. For businesses, the practical implication is that offshore structuring, technical geofencing and rigorous documentation are now the load-bearing pillars of any credible crypto compliance China approach.

The window for informal, ambiguous engagement with the mainland market has closed; enforcement expectations are explicit, and passive exposure to Chinese users through weak controls now carries measurable risk. This advisory translates those primary documents into concrete operational steps rather than restating the illegality alone. For deeper implementation detail, this page links to companion resources within our China crypto ban & offshore compliance advisory cluster.

Regulatory context: the china crypto ban reaffirmed in 2026

The core of any crypto compliance China analysis begins with the legal baseline. China has, since 2021, treated virtual currency trading as an unlawful financial activity. The 2026 developments did not soften that position, they reinforced and clarified it, while adding structure around emerging areas such as tokenised real-world assets.

The legal baseline, domestic ban reaffirmed

Under the 6 February 2026 joint Notice, the People’s Bank of China and coordinating regulators confirmed that cryptocurrencies are not legal tender, that virtual currency exchange and related intermediary activity remain prohibited onshore, and that offshore platforms providing services to residents in mainland China through the internet are also considered to be conducting illegal financial activity. This last point is critical: the china crypto ban is not confined to physical operations within China’s borders. It reaches offshore actors who direct services into the mainland. The Notice also addresses fiat on-ramps, payment settlement, marketing and technical support, treating each as a potential channel of prohibited activity.

Coordinated statements published via the State Council underscore inter-agency alignment, meaning enforcement can originate from monetary, securities, cyberspace and public-security authorities acting together. Any business assessing crypto compliance China exposure must therefore treat “no onshore footprint” as necessary but not by itself sufficient, the direction and accessibility of services matter equally.

6 Feb 2026 joint Notice, core prohibitions and RWA carve-outs

The Notice restates a wide set of prohibitions and, importantly for institutional players, references controlled conditions around rwa tokenization china. The document distinguishes between speculative virtual-currency activity, which remains banned, and asset-backed tokenisation initiatives that may be permitted only within sanctioned pilot frameworks and under direct regulatory supervision. This is not a general licence for RWA issuance; it is a narrow, conditional carve-out. Firms hoping to tokenise real assets with any Chinese nexus should assume that offshore structuring plus explicit regulatory engagement is required, and that unsanctioned RWA activity marketed to mainland participants falls back within the prohibition. Key elements reaffirmed by the Notice include:

• Trading prohibition: Buying, selling and exchanging virtual currencies as a business remains unlawful onshore.
• Offshore-service reach: Foreign platforms serving mainland residents online are treated as conducting illegal financial activity.
• Payment and settlement bar: Financial institutions and payment providers may not facilitate virtual-currency transactions.
• Marketing and solicitation limits: Advertising or promoting crypto services to mainland users is prohibited.
• Conditional RWA pathway: Tokenisation of real-world assets is permitted only within supervised, sanctioned frameworks.

Draft Financial Law (2026), consultation highlights and timeline

The Draft Financial Law, released for public consultation in 2026, consolidates financial-sector rules and signals continuity rather than reversal. It is expressly a consultation document and is subject to change; nothing in the published text removes the domestic prohibition on virtual-currency trading. Industry observers expect the final instrument to strengthen supervisory coordination and clarify sanctions rather than open retail crypto markets. Because the draft remains subject to consultation, businesses should treat any forward-looking assumption as provisional and monitor the official timeline through the Ministry of Justice portal.

Enforcement trends, mainland authorities and typical actions

Understanding crypto compliance China obligations requires understanding how the rules are enforced. Enforcement in the mainland is multi-agency and increasingly technical, drawing on financial supervisors, securities regulators, cyberspace administration and public-security bodies. The reaffirmed position in the 2026 Notice gives these agencies a clear mandate to pursue both onshore intermediaries and offshore platforms with mainland-facing services.

Typical enforcement actions observed in official announcements and coordinated regulator statements include the freezing of payment channels used to settle virtual-currency transactions, blocking or takedown of platforms accessible from within China, investigation of local agents and promoters, and referral of matters involving fraud or unlawful fundraising to criminal authorities. The China Securities Regulatory Commission has issued guidance and enforcement signals affecting cross-border securities and token activity, particularly where instruments resemble securities offerings marketed to mainland investors. For cross-border crypto compliance, the recurring enforcement theme is the presence of an onshore connection: a payment rail, a marketing agent, a local server, or a demonstrable pattern of accepting mainland users.

Where those connections exist, the risk rises sharply regardless of where the corporate entity is domiciled.

Risk matrix by activity

Different activities carry different levels of exposure. The following risk matrix helps prioritise mitigation for the highest-risk touchpoints in any offshore crypto compliance programme.

• User onboarding (high risk): Accepting registrations from mainland-resident users without geoblocking or residency exclusion is a primary enforcement trigger.
• Token sales (high risk): Selling tokens to mainland participants, especially where tokens resemble securities, attracts both financial and securities enforcement attention.
• Custody (medium risk): Holding assets for mainland users implies an ongoing service relationship that can be characterised as illegal financial activity.
• Fiat on/off ramps (high risk): Using mainland payment channels or facilitating RMB settlement directly implicates the payment-settlement prohibition.
• Advertising and solicitation (high risk): Chinese-language marketing, mainland influencer campaigns or local agents evidence targeting and are treated as prohibited promotion.

Callout, High-risk activities: Chinese-language marketing directed at the mainland, acceptance of RMB payment rails, local agents or promoters, and onboarding without geoblocking are the four fastest routes to enforcement exposure. Eliminate these first.

Offshore licensing pathways explained

Because the mainland market is closed to virtual-currency business, offshore crypto compliance is the operative discipline for firms with any China nexus. The objective is to serve permitted global markets from a properly licensed offshore vehicle while excluding, technically and contractually, users located in mainland China. Offshore licensing pathways vary in regulatory stringency, banking access and reputational weight. At one end sit robust regimes such as Hong Kong’s licensing framework and Singapore’s payments regime; at the other sit lighter-touch registration jurisdictions such as the BVI or Seychelles, which offer speed and lower cost but weaker banking and counterparty confidence.

Selecting the right vehicle is a function of the firm’s product, its target markets, its need for institutional banking relationships, and its tolerance for regulatory scrutiny. For a structured decision framework, see our offshore crypto licence comparison resource.

Why Hong Kong is the immediate operational alternative

Hong Kong has emerged as the leading hong kong crypto alternative for firms exiting or avoiding mainland exposure. The Securities and Futures Commission operates a licensing regime for virtual-asset trading platforms, and the Hong Kong Monetary Authority supervises the banking and fiat on-ramp environment, including its evolving stablecoin framework. Hong Kong offers proximity, a mature legal system, credible banking relationships and a regulator-endorsed pathway, advantages that lighter offshore jurisdictions cannot match. Critically, operating from Hong Kong does not permit servicing mainland residents; the china crypto ban applies to mainland users irrespective of an operator’s Hong Kong licence. Hong Kong is an alternative market and operational base, not a backdoor into the mainland.

For step-by-step setup guidance, consult our Hong Kong crypto licensing guide.

How to build an offshore-compliant model for China exposure

The following numbered playbook sets out a defensible approach to offshore crypto compliance for firms with actual or potential mainland exposure. Each step is designed to reduce enforcement risk and to generate the documentary evidence needed to demonstrate non-solicitation of mainland participants.

1. Legal risk mapping and jurisdiction decision matrix. Begin by mapping every point of mainland exposure: where are your users physically located, what is the residency and nationality profile of your investors, and how are your tokens or products classified under Chinese policy? Identify payment rails, marketing channels, servers and agents that touch the mainland. This diagnostic produces a jurisdiction decision matrix balancing target markets, banking needs and regulatory stringency, and it establishes the baseline against which every subsequent control is measured. Without accurate exposure mapping, later controls address the wrong risks.
2. Choose an offshore licensing vehicle and regulator. Select the licensing route that fits your product and risk appetite. A Hong Kong SFC-regulated entity offers credibility and banking access but demands substantive compliance investment; a Singapore payments licence suits payment-oriented models; BVI or Seychelles registration offers speed and lower cost with weaker banking and reputational standing. Match the regulator’s stringency to your institutional counterparties’ expectations. Firms serving institutional clients or seeking bank partners should favour the more robust regimes despite higher cost and longer timelines. Document the rationale for the choice.
3. Structure corporate and contractual barriers. Build clear separation between offshore operating entities and anything onshore. Use gateway entities, segregate intellectual property and data, and ensure no operational, technical or personnel footprint sits in the mainland. Contracts should specify governing law, service jurisdiction and eligibility exclusions. Corporate structuring should demonstrably isolate the licensed offshore entity from mainland activity, so that no agent, server or subsidiary creates an onshore connection that regulators could characterise as illegal financial activity within China.
4. Implement KYC geoblocking and technical controls. Deploy layered kyc geoblocking china measures: geolocation at registration and login, IP filtering, VPN and proxy detection, device and SIM signals, and residency declarations verified against documents. Combine automated blocking with manual review of anomalies. Conduct vendor due diligence on identity-verification and geolocation providers, and record configuration decisions. Technical controls must be evidenced through logs and audits, the ability to demonstrate that mainland users were actively excluded is central to any credible crypto compliance China defence. See our KYC geoblocking & technical controls for China resource.
5. Apply token sale and investor restrictions. For fundraising and token distribution, exclude mainland participants through whitelisting, accredited-investor workflows and jurisdictional disclaimers. Screen subscribers against residency and nationality criteria, apply blacklisting of prohibited jurisdictions, and include contractual eligibility warranties and exclusion clauses. Where a mainland participant is mistakenly onboarded, escrow or repurchase mechanisms allow remediation. These token sale restrictions china measures protect issuers against the classification of tokens as prohibited virtual currency marketed into the mainland. See token sale compliance in China exposure.
6. Control banking and fiat on/off ramps. Fiat flows are a primary enforcement channel. Avoid mainland payment rails and RMB settlement, and select banking partners and correspondent arrangements comfortable with your compliance posture. Apply AML screening, transaction monitoring and source-of-funds checks at every ramp. Because payment intermediation is expressly prohibited under the 2026 Notice, fiat controls are non-negotiable. For banking strategy, see fiat on/off ramps and banking for crypto.
7. Maintain ongoing compliance, monitoring and contingency playbooks. Compliance is continuous. Monitor geoblocking effectiveness, review onboarding samples, refresh sanctions and residency screening, and keep audit trails demonstrating non-solicitation in China. Prepare an enforcement-response playbook covering platform takedown requests, regulator engagement, user communications and remediation of any inadvertently onboarded mainland users. A rehearsed contingency process materially reduces the operational and reputational damage of any incident and evidences good faith. See our crypto enforcement case studies (China exposure).

Jurisdictional comparison, mainland ban vs Hong Kong vs common offshore licences

The table below summarises the practical differences between operating models. It is intended as an orientation tool; jurisdiction selection should always follow the risk mapping in Step 1 of the playbook and a detailed review of current regulator requirements.

The comparison illustrates the central trade-off in offshore crypto compliance: robust regimes such as Hong Kong and Singapore demand more time and cost but deliver banking access and institutional trust, while lighter jurisdictions offer speed at the expense of credibility. None of these options permits servicing mainland residents, the china crypto ban applies to users located in the mainland regardless of the operator’s licence. For firms weighing conversion potential against operational burden, the hong kong crypto alternative typically offers the best balance for serious, long-horizon businesses, while lighter jurisdictions may suit early-stage projects that can migrate later. A full decision matrix is available in our offshore crypto licence comparison resource.

Who can operate offshore and what you must demonstrate

Eligibility for lawful offshore operation depends on the activity, the chosen regulator and the strength of the firm’s exclusion controls. The common thread across every category of operator is the ability to evidence that mainland residents are not targeted or served. The following checklists set out what different actors must demonstrate as part of a defensible crypto compliance China programme.

For exchanges

Exchanges seeking to operate offshore should be prepared to demonstrate a comprehensive compliance and infrastructure posture. This means functioning KYC and AML programmes with enhanced due diligence, segregated technical infrastructure with no mainland servers or data residency, effective geoblocking, and appropriate governance including local directors and operational staff in the licensing jurisdiction. Regulators such as the SFC expect substantive local substance rather than a nameplate presence. Exchanges must also maintain transaction-monitoring systems, sanctions screening, and audit trails demonstrating exclusion of mainland-resident users. The ability to produce logs showing that Chinese IP ranges and residency declarations were blocked is a practical prerequisite for defending the firm’s position.

For token issuers and founders

Token issuers and founders must demonstrate that their fundraising expressly excluded mainland participants and that tokens were not marketed into China. Required evidence includes token sale exclusions for Chinese participants, clear disclosure documentation, jurisdictional disclaimers, and escrow or repurchase arrangements to remediate any inadvertent mainland onboarding. Founders should retain records of non-solicitation in China and structure fundraising through offshore entities with clear contractual safeguards, ensuring the offering does not fall within token sale restrictions china that would classify the instrument as prohibited virtual currency.

For institutional and RWA tokenisation

Institutional projects and those pursuing rwa tokenization china must demonstrate asset provenance, sound custodial arrangements and, critically, the relevant regulatory approvals. Because the 2026 Notice permits RWA tokenisation only within sanctioned, supervised frameworks, institutional actors should assume direct regulatory engagement is required for any China nexus, alongside offshore structuring. Evidence of underlying asset ownership, independent custody, valuation methodology and, where applicable, participation in an approved pilot are essential. Unsanctioned RWA activity marketed to mainland participants falls back within the prohibition. See RWA tokenisation: China & offshore pathways.

KYC geoblocking, IP controls, and technical segmentation for crypto compliance china

Technical controls are where crypto compliance China strategy succeeds or fails. Policies and contracts are necessary, but regulators and counterparties look for demonstrable, auditable technical enforcement. The following checklists set out the architecture and vendor considerations that underpin credible exclusion of mainland users.

Architecture checklist

A defensible technical architecture layers multiple exclusion signals so that no single point of failure allows mainland access. Recommended controls include:

• IP and CDN-level blocking: Block mainland IP ranges at the edge and configure the CDN to deny mainland-origin requests.
• Geolocation at key events: Verify location at registration, login and transaction, not only at first visit.
• VPN and proxy detection: Deploy tooling to identify and challenge connections routed through anonymising services.
• Mobile SDK controls: Enforce location and device checks within mobile applications, including SIM and locale signals.
• Residency verification: Cross-check declared residency against identity documents during KYC and re-verify periodically.
• Logging and auditability: Retain immutable logs of blocked attempts and configuration changes to evidence enforcement.

Vendor and data residency considerations

Third-party vendors introduce both capability and risk. When selecting identity-verification, geolocation and monitoring providers, firms should conduct documented due diligence covering accuracy, coverage of Chinese IP ranges, and data-handling practices. Contracts should include clauses on data residency, sub-processing, audit rights and service levels for geoblocking effectiveness. Data should not be routed through or stored in the mainland, and vendors should be able to support independent audits. Periodic testing, attempting access from simulated mainland environments, validates that controls function as configured. Because kyc geoblocking china controls are only as strong as their weakest vendor dependency, ongoing vendor oversight is a core part of the compliance lifecycle rather than a one-time onboarding task.

Detailed vendor-vetting and audit templates are covered in our KYC geoblocking & technical controls for China resource.

Callout, Quick wins for immediate mitigation: Block mainland IP ranges today, remove all Chinese-language marketing targeting the mainland, add residency-exclusion warranties to your terms, and turn on VPN detection at login. These four measures reduce exposure quickly while a fuller programme is built.

Immediate next steps for crypto compliance china

A sound crypto compliance China programme starts with an honest exposure audit and moves quickly to enforceable controls. Begin by mapping every mainland touchpoint, then implement the quick-win mitigations, select an appropriate offshore vehicle, and build the documentary trail that demonstrates non-solicitation of mainland residents. The following short checklist orients your first actions: (1) run the legal risk-mapping diagnostic; (2) deploy immediate geoblocking and remove mainland-facing marketing; (3) choose your licensing jurisdiction using the comparison above; and (4) formalise ongoing monitoring and an enforcement-response playbook. For deeper detail, explore the linked cluster resources on Hong Kong licensing, offshore comparisons, KYC geoblocking, token-sale compliance and RWA structuring.

Sources

• People’s Bank of China, joint Notice on further preventing and dealing with cryptocurrency-related risks (6 February 2026)
• Ministry of Justice, PRC, Draft Financial Law (public consultation, 2026)
• China Securities Regulatory Commission, regulatory notices and enforcement announcements
• State Council of the People’s Republic of China, official gazette and joint regulator statements
• Hong Kong Securities and Futures Commission, digital-asset and licensing guidance
• Hong Kong Monetary Authority, payment, banking supervision and stablecoin guidance
• Financial Stability Board, cross-border crypto regulatory guidance
• International Monetary Fund, cross-border crypto and financial-stability analysis