Cambodia (KH)
Lead Signal
Cambodia's first comprehensive baseline review under the World Payments Monitor identifies a jurisdiction whose payments architecture is simultaneously liberalising and destabilising. The dominant story this cycle is the collision between Cambodia's expanding cross-border payments connectivity and a sanctions shock that has reached directly into its banking sector. On 14 October 2025, the U.S. Treasury's Office of Foreign Assets Control designated the Prince Group Transnational Criminal Organization, naming 146 targets including Prince Bank Plc, while the Financial Crimes Enforcement Network issued a Section 311 special measure severing Huione Group from the U.S. financial system over more than $4 billion allegedly laundered between 2021 and 2025; OFAC expanded the designation on 23 June 2026, adding nine individuals and 26 entities. The action, corroborated across a Tier 1 primary source and a Tier 2 follow-on report, constitutes the single largest legal/enforcement event to touch Cambodia's payments sector in this baseline cycle. Its consequences were immediate and structural: Prince Bank experienced a visible deposit-withdrawal wave following the October 2025 designation of its parent, and correspondent banks abroad have generally heightened scrutiny of Cambodian counterparties. Cambodia's correspondent-banking channel rests on a permissive legal base -- the 2007 Foreign Exchange Law allows cross-border transfers via any 'authorised intermediary' bank permanently established in the country, with no other restriction placed on inbound or outbound transfers -- but that permissiveness is now being tested by external de-risking pressure operating independently of domestic law.
Outlook
Cambodia's payments trajectory over the coming cycles will likely be defined by the tension between two escalating tracker lines: cross-border connectivity and commercial consolidation on one side, and sanctions-driven de-risking on the other, both converging on the same banking sector. Watch for the still-pending Crypto Asset Service Provider implementing regulation, which will determine whether Cambodia's permission-based crypto framework translates into an operative licensing market beyond the two currently licensed sandbox exchange platforms. On enforcement, the gap between the new Anti-Technology Fraud Law's prosecutorial powers and the documented shortfall in scam-compound intervention -- state action at only 24 of 86 identified compounds -- will be a key indicator of whether Cambodia's domestic legal reforms are translating into operational effect, particularly as international sanctions pressure continues to escalate following OFAC's June 2026 expansion of the Prince Group designation.
Other Developments
The National Bank of Cambodia retains exclusive statutory authority to license and supervise banks, financial institutions and payment service providers under the 1999 Law on Banking and Financial Institutions as amended in 2018 and the 2017 Prakas on Management of Payment Service Providers. On the digital-money front, the National Bank's December 2024 Prakas on Transactions Related to Cryptoassets came fully into force this cycle, establishing a permission-based, risk-tiered framework that splits crypto-assets into a Group 1 category of backed or tokenised traditional assets and approved stablecoins -- capped at 5% of a bank's CET1 exposure -- and a Group 2 category of unbacked assets such as Bitcoin and Ethereum that remain barred from bank balance sheets. Operational resilience also tightened: the National Bank's Technology and Cyber Risk Management Guidelines were refreshed in 2026, adding board-approval and secondary-data-centre requirements, and the central bank has moved since 2024 from a self-audited compliance posture to conducting its own formal audits. On the commercial side, Japan's SBI Holdings completed its acquisition of SBI LY HOUR Bank, rebranding it as SBI Bank (Cambodia) and extending a $100 million credit facility to the renamed entity, continuing a pattern of foreign consolidation in Cambodia's bank sector even as sanctions risk clouds parts of it. Cambodia's cross-border payments connectivity also expanded rapidly this cycle, with the Bakong/KHQR network now linking Thailand's PromptPay, Vietnam's VietQR, Laos's QR network, Singapore's SGQR, Malaysia's DuitNow, Japan's JPQR, China's UnionPay and India's UPI, and the National Bank of Cambodia formally joined the ASEAN Regional Payment Connectivity initiative on 8 April 2025 as its ninth participating central bank. On the legal front, Cambodia enacted its first dedicated Law on Anti-Technology Fraud on 6 April 2026, granting prosecutors expanded powers against scam-industry organisers, financiers and infrastructure providers, though Amnesty International's June 2026 report found state intervention at only 24 of the 86 scam compounds it had identified, with documented continued abuse after publicised raids.
Cross-Monitor Connections
Two threads in this cycle extend beyond the World Payments Monitor's remit and are flagged onward to the Financial Intelligence Monitor: the illicit-finance and sanctions-evasion dimensions of the Huione Group and Prince Group cases, including any activity connected to the rebranded 'H-Pay Service PLC', belong to FIM's illicit-finance analysis, while this brief carries only the Sentinel.gi-fed AML/CFT surface and the de-risking impact on correspondent banking access. Separately, Amnesty International's finding that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as human-trafficking victims despite meeting the Palermo Protocol definition raises forced-labour-financing and trafficking dimensions that sit outside this monitor's consumer-protection and authorised-push-payment-fraud scope, and is likewise routed to the Financial Intelligence Monitor.
Legal accessibility by product
overall:Domains
14 regulatory modules · click to expand the full sub-briefLicensing, Authorisation & Market Access
HighThe National Bank of Cambodia holds exclusive statutory authority to license and supervise banks, financial institutions and payment service providers, under the 1999 Law on Banking and Financial Institutions as amended by Law No.56/NA in 2018 and the 2017 Prakas on Management of Payment Service Providers.
Conduct, Safeguarding & Promotions
HighThe National Bank of Cambodia mandates a standardised complaint-resolution mechanism via its Prakas on Resolution of Consumer Complaints, applicable uniformly across banking, payment and financial institutions.
Stablecoins & Digital Money
HighThe National Bank of Cambodia's Prakas on Transactions Related to Cryptoassets, in force since 26 December 2024, classifies cryptoassets into a Group 1 category of backed or tokenised traditional assets and approved stablecoins, split into 1a and 1b sub-tiers, and a Group 2 category of unbacked assets such as Bitcoin and Ethereum that remain barred from bank balance sheets, with Group 1a bank exposure capped at 5% of CET1 capital.
Operational Resilience & Critical Infrastructure
HighThe National Bank of Cambodia's Technology and Cyber Risk Management Guidelines, refreshed in 2026, require a board-approved Information Security Policy, dedicated chapters on technology-service outsourcing, business continuity management, customer personal-data protection and IT audit, and a secondary data centre subject to political and geographic risk assessment.
Scheme & Network Compliance
AssessedKHQR, Cambodia's EMV-based unified national QR standard, has carried mandatory acceptance for QR-accepting merchants since 2022, anchoring domestic scheme interoperability across banks and payment service providers.
Payment Corridor Dynamics
HighCambodia's Bakong/KHQR cross-border QR network has expanded rapidly, now covering live linkages with Thailand's PromptPay (live since 2024), Vietnam's VietQR (operational since December 2023 across 57 Cambodian banks), Laos (a second phase launched December 2025, following an August 2023 first phase), Malaysia's DuitNow, Singapore's SGQR (phase one live since November 2025), Japan's JPQR on a pilot basis, China's UnionPay (operational since December 2023, covering roughly 1.8 million Cambodian merchants), and India's UPI, most recently formalised through a December 2025 partnership between ACLEDA Bank and NPCI International Payments Limited.
Full per-domain detail — all 14 modules
The National Bank of Cambodia (NBC) holds exclusive statutory authority to license and supervise all banks, financial institutions and payment service providers under the 1999 Law on Banking and Financial Institutions (as amended by the Law on Commercial Banks No.56/NA, 2018) and the 2017 Prakas on Management of Payment Service Providers. A dedicated non-bank Payment Transaction Services Institution licence sits alongside third-party-processor arrangements that must tie-in to a licensed bank. Market access remains open to foreign capital, with recent entrants (SBI Holdings, J Trust, BRED) reflecting continued liberalisation.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Licensing, Authorisation & Market Access
The National Bank of Cambodia holds exclusive statutory authority to license and supervise banks, financial institutions and payment service providers, under the 1999 Law on Banking and Financial Institutions as amended by Law No.56/NA in 2018 and the 2017 Prakas on Management of Payment Service Providers. Within that regime, the Payment Transaction Services Institution licence for non-bank payment service providers requires minimum capital of roughly KHR 8,000 million (about USD 2 million), with 5% deposited at the central bank, carries a six-year renewable term, and requires National Bank approval for any merger, acquisition or business transfer. This non-bank tier sits alongside bank-tied third-party-processor arrangements under a separate 2010 Prakas, giving Cambodia a dual bank/non-bank licensing architecture rather than a single gatekeeping route. Market access for foreign capital remains open under this framework, illustrated this cycle by Japan's SBI Holdings completing its acquisition and rebrand of a domestic bank unit. On the scale of the underlying banking sector, one cited source counts 51 licensed commercial banks, though a separate lower-tier source puts the figure at 59 as of December 2024; the discrepancy was flagged in review, and confidence in the 51 figure has accordingly been downgraded from High to Assessed pending verification against the central bank's own published register.
Outlook
Cambodia's licensing architecture appears settled rather than in flux this cycle: the core statutory basis, the non-bank licence tier and the foreign-capital-open market-access posture are all standing features rather than new developments this period. The clearest open question is statistical rather than regulatory -- resolving the discrepancy between the 51- and 59-bank counts will matter for accurately sizing the market that any prospective licensee or acquirer is entering, particularly given the continued appetite for foreign entry demonstrated by the SBI transaction.
The National Bank of Cambodia (NBC) holds exclusive statutory authority to license and supervise all banks, financial institutions and payment service providers under the 1999 Law on Banking and Financial Institutions (as amended by the Law on Commercial Banks No.56/NA, 2018) and the 2017 Prakas on Management of Payment Service Providers. A dedicated non-bank Payment Transaction Services Institution licence sits alongside third-party-processor arrangements that must tie-in to a licensed bank. Market access remains open to foreign capital, with recent entrants (SBI Holdings, J Trust, BRED) reflecting continued liberalisation.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia Banking - Cambodia Counsel [T3] Prakas on Management of Payment Transactions Services Institution [T3] How To Get a Bank License in Cambodia? - VDB | LOI [T3]
Conduct and consumer-facing obligations for payment institutions sit across several instruments: the NBC's dedicated Prakas on Resolution of Consumer Complaints, a 2021 circular tightening KYC and tiered daily transaction limits for PSPs and Bakong participants, the 2019 Law on Consumer Protection (administered jointly by the Ministry of Commerce/National Committee for Consumer Protection and NBC for the financial sector), and the 2019 E-commerce Law's chapter on electronic fund transfers, which shifts liability to the institution once a customer has notified loss/theft of a payment instrument.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Conduct, Safeguarding & Financial Promotions
The National Bank of Cambodia mandates a standardised complaint-resolution mechanism via its Prakas on Resolution of Consumer Complaints, applicable uniformly across banking, payment and financial institutions. Cambodia's 2019 Law on Electronic Commerce shifts liability to the institution once a customer has notified it that an electronic payment instrument was lost or stolen, under the law's Chapter 9 provisions on electronic fund transfers. A March 2021 National Bank circular layers tiered daily transaction limits on top of this, calibrated to the identification tier or verification stage a Bakong or payment-service-provider customer has completed, giving Cambodia's conduct regime a graduated, KYC-linked fraud-mitigation structure rather than a flat liability rule. No e-money or prepaid customer-fund redemption and insolvency-priority rules for Cambodian PSPs were identified in available sources, a standing gap in the regime's consumer-safeguarding architecture.
Outlook
The conduct layer looks stable rather than actively evolving this cycle, with the complaint, liability-shift and tiered-limit rules functioning as an established baseline. The clearest forward-looking watchpoint is the absence of e-money redemption and insolvency-priority protection: as non-bank payment institutions grow in transaction volume, the lack of a dedicated safeguarding regime for customer funds held by non-banks is likely to become a more visible gap, particularly if any PSP faced financial distress.
Conduct and consumer-facing obligations for payment institutions sit across several instruments: the NBC's dedicated Prakas on Resolution of Consumer Complaints, a 2021 circular tightening KYC and tiered daily transaction limits for PSPs and Bakong participants, the 2019 Law on Consumer Protection (administered jointly by the Ministry of Commerce/National Committee for Consumer Protection and NBC for the financial sector), and the 2019 E-commerce Law's chapter on electronic fund transfers, which shifts liability to the institution once a customer has notified loss/theft of a payment instrument.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Prakas on Resolution of Consumer Complaints [T1] Cambodia Enacts a New E-commerce Law and a Consumer Protection Law - Tilleke & Gibbins [T3] National Bank of Cambodia issues new guidelines on payment services | SokSiphana&associates [T3]
Cambodia's crypto/stablecoin regime is anchored in the Prakas on Transactions Related to Cryptoassets (Prakas B7-024-735 Prokor), issued 26 December 2024 and effective immediately in early 2025. It replaces the prior informal 2018 NBC/SERC/police ban with a permission-based, risk-tiered framework distinguishing backed 'Group 1' assets (tokenised traditional assets and approved stablecoins) from unbacked 'Group 2' assets (Bitcoin, Ethereum, etc.), which remain barred from bank balance sheets. Only two domestically licensed platforms operate under the NBC/SERC FinTech Regulatory Sandbox, while the Telecommunications Regulator of Cambodia has blocked access to major offshore exchanges. Bakong itself is characterised by the NBC as a payment/tokenised-deposit system rather than a strict CBDC.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Stablecoins & Digital Money
The National Bank of Cambodia's Prakas on Transactions Related to Cryptoassets, in force since 26 December 2024, classifies cryptoassets into a Group 1 category of backed or tokenised traditional assets and approved stablecoins, split into 1a and 1b sub-tiers, and a Group 2 category of unbacked assets such as Bitcoin and Ethereum that remain barred from bank balance sheets, with Group 1a bank exposure capped at 5% of CET1 capital. The same Prakas creates a new Crypto Asset Service Provider licence category covering the exchange, transfer and safekeeping or administration of cryptoassets, though detailed licensing conditions await a forthcoming separate implementing regulation with no announced date. Bakong, the National Bank's flagship payment platform, continues to be characterised by National Bank officials as a 'quasi' central bank digital currency that is account-based rather than token-based; the National Bank has not been sourced as using the term 'tokenised-deposit system' to describe it, a distinction that is architectural rather than a denial of CBDC status, since both account- and token-based models qualify as CBDC under international taxonomy.
Outlook
Cambodia's crypto framework has moved from an informal 2018 ban to an operative, risk-tiered permission regime, but the regime remains early-stage: the Crypto Asset Service Provider licence exists in name only until its implementing regulation is published, and market access is understood to remain narrow in practice. Watch for the publication date of that implementing regulation as the key trigger for whether licensed crypto activity expands beyond a small number of sandboxed platforms.
Cambodia's crypto/stablecoin regime is anchored in the Prakas on Transactions Related to Cryptoassets (Prakas B7-024-735 Prokor), issued 26 December 2024 and effective immediately in early 2025. It replaces the prior informal 2018 NBC/SERC/police ban with a permission-based, risk-tiered framework distinguishing backed 'Group 1' assets (tokenised traditional assets and approved stablecoins) from unbacked 'Group 2' assets (Bitcoin, Ethereum, etc.), which remain barred from bank balance sheets. Only two domestically licensed platforms operate under the NBC/SERC FinTech Regulatory Sandbox, while the Telecommunications Regulator of Cambodia has blocked access to major offshore exchanges. Bakong itself is characterised by the NBC as a payment/tokenised-deposit system rather than a strict CBDC.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cryptoassets Regulation Introduced by the National Bank of Cambodia (“NBC”) - DFDL [T3] Prakas on Transactions Related to Cryptoassets - HBS LAW [T3] Cambodia - CBDC Tracker - Human Rights Foundation [T3]
W3HighOperational Resilience & Critical Infrastructure
see this theme across all jurisdictions →5 claimsNBC has run a dedicated Technology Risk Management (TRM) framework since July 2019, refreshed as the Technology and Cyber Risk Management Guidelines in 2026, covering cybersecurity management, IT services outsourcing, business continuity management and customer personal-data protection for all banking and financial institutions (BFIs). Compliance was initially self-audited/voluntary but NBC began formal TRM audits from 2024. Critical payment infrastructure resilience also rests on the Bakong platform's replicated, permissioned-blockchain architecture and the Cambodian Shared Switch (CSS) for card-based interbank clearing.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Operational Resilience & Critical Infrastructure
The National Bank of Cambodia's Technology and Cyber Risk Management Guidelines, refreshed in 2026, require a board-approved Information Security Policy, dedicated chapters on technology-service outsourcing, business continuity management, customer personal-data protection and IT audit, and a secondary data centre subject to political and geographic risk assessment. The central bank has moved since 2024 from a largely self-audited compliance posture to conducting its own formal compliance audits of institutions' adherence to these guidelines, tightening enforcement of what had previously been a more voluntary regime. Together, the 2026 refresh and the shift to direct supervisory audit represent the most active tightening of Cambodia's operational-resilience framework identified this cycle, positioned as a deliberate response to the operational and cyber risks accompanying rapid digital-payments growth.
Outlook
Expect the National Bank to continue building out direct audit capacity against the refreshed guidelines; the near-term signal to watch is whether audit findings translate into public enforcement actions against individual banks or PSPs, which would mark a further step-change from the guideline's advisory origins toward binding supervisory practice.
NBC has run a dedicated Technology Risk Management (TRM) framework since July 2019, refreshed as the Technology and Cyber Risk Management Guidelines in 2026, covering cybersecurity management, IT services outsourcing, business continuity management and customer personal-data protection for all banking and financial institutions (BFIs). Compliance was initially self-audited/voluntary but NBC began formal TRM audits from 2024. Critical payment infrastructure resilience also rests on the Bakong platform's replicated, permissioned-blockchain architecture and the Cambodian Shared Switch (CSS) for card-based interbank clearing.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Technology and Cyber Risk Management Guidelines National Bank of Cambodia [T1] Exploring Technology Risk Management Solutions For Cambodian Banks And Financial Institutions | B2B [T3]
Cambodia's scheme layer combines the NBC-operated Cambodian Shared Switch for domestic card interoperability with the KHQR EMV-based unified QR standard (introduced 2020, mandatory for QR-accepting merchants since 2022) and bilateral scheme linkages with international networks (UnionPay International, NAPAS, PromptPay, DuitNow, NPCI/UPI). Third-party processors remain regulated under the 2010 Prakas requiring a tie-in to a licensed bank. No explicit NBC-mandated interchange-fee cap or surcharge regulation was identified; card-scheme compliance operates largely through bilateral scheme-operator agreements layered on top of NBC licensing.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Scheme & Network Compliance
KHQR, Cambodia's EMV-based unified national QR standard, has carried mandatory acceptance for QR-accepting merchants since 2022, anchoring domestic scheme interoperability across banks and payment service providers. Non-bank third-party processors operate under a 2010 Prakas requiring a tie-in arrangement with a licensed banking institution, a rule that predates and sits alongside the 2017 Prakas on Payment Service Providers and continues to route non-bank processing activity through a bank counterparty. No jurisdiction-specific interchange-fee cap or merchant surcharge regulation was identified for Cambodia; card-scheme compliance instead operates through bilateral scheme-operator agreements layered on top of the domestic KHQR standard.
Outlook
The scheme layer looks stable, with KHQR's domestic mandate and the third-party-processor tie-in rule functioning as settled infrastructure rather than areas of active change. The absence of a dedicated interchange or surcharge framework is worth tracking as transaction volumes grow, since Cambodia currently relies on scheme-operator bilateral terms rather than domestic rulemaking to govern merchant costs.
Cambodia's scheme layer combines the NBC-operated Cambodian Shared Switch for domestic card interoperability with the KHQR EMV-based unified QR standard (introduced 2020, mandatory for QR-accepting merchants since 2022) and bilateral scheme linkages with international networks (UnionPay International, NAPAS, PromptPay, DuitNow, NPCI/UPI). Third-party processors remain regulated under the 2010 Prakas requiring a tie-in to a licensed bank. No explicit NBC-mandated interchange-fee cap or surcharge regulation was identified; card-scheme compliance operates largely through bilateral scheme-operator agreements layered on top of NBC licensing.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia Real Time Payments: Rails, Fees, and the Lightning Network (2026) [T3] NBC Prakas on Third-Party Processors [T1]
Cambodia has rapidly built out cross-border QR/instant-payment linkages anchored on Bakong/KHQR, covering Thailand (PromptPay, live since 2024), Vietnam (NAPAS/VietQR, launched Dec 2023), Laos (two phases, Aug 2023 and Dec 2025), Malaysia (DuitNow, two phases), Singapore (SGQR, phase 1 Nov 2025), Japan (JPQR pilot) and China (UnionPay, Dec 2023), with a further UPI-KHQR interoperability partnership between ACLEDA Bank and India's NPCI International announced Dec 2025. NBC formally joined the ASEAN Regional Payment Connectivity initiative (April 2025). Remittances outside these QR rails continue to be routed through licensed remittance partners subject to NBC reporting thresholds.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Payment Corridor Dynamics
Cambodia's Bakong/KHQR cross-border QR network has expanded rapidly, now covering live linkages with Thailand's PromptPay (live since 2024), Vietnam's VietQR (operational since December 2023 across 57 Cambodian banks), Laos (a second phase launched December 2025, following an August 2023 first phase), Malaysia's DuitNow, Singapore's SGQR (phase one live since November 2025), Japan's JPQR on a pilot basis, China's UnionPay (operational since December 2023, covering roughly 1.8 million Cambodian merchants), and India's UPI, most recently formalised through a December 2025 partnership between ACLEDA Bank and NPCI International Payments Limited. The National Bank of Cambodia formally joined the ASEAN Regional Payment Connectivity initiative on 8 April 2025, becoming the ninth participating ASEAN central bank, a step that substantially formalises bilateral Bakong linkages that were, in several cases, already operating. This corridor build-out is the most active area of positive commercial and product development identified across Cambodia's payments sector this cycle, reflecting a deliberate strategy of regional QR interoperability rather than isolated bilateral deals.
Outlook
Expect continued corridor expansion, with the India-UPI and Singapore-SGQR linkages the newest and least tested at scale; the key indicator to watch is transaction volume growth across these corridors relative to the older Thailand and Vietnam links, which will show whether newer linkages are achieving comparable usage or remain largely symbolic markers of regional integration.
Cambodia has rapidly built out cross-border QR/instant-payment linkages anchored on Bakong/KHQR, covering Thailand (PromptPay, live since 2024), Vietnam (NAPAS/VietQR, launched Dec 2023), Laos (two phases, Aug 2023 and Dec 2025), Malaysia (DuitNow, two phases), Singapore (SGQR, phase 1 Nov 2025), Japan (JPQR pilot) and China (UnionPay, Dec 2023), with a further UPI-KHQR interoperability partnership between ACLEDA Bank and India's NPCI International announced Dec 2025. NBC formally joined the ASEAN Regional Payment Connectivity initiative (April 2025). Remittances outside these QR rails continue to be routed through licensed remittance partners subject to NBC reporting thresholds.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia strengthens regional monetary footprint through QR payment links - Khmer Times [T3] The Role of Technology in ASEAN's Regional Payment ... [T3]
Cambodia's banking/payments industry remains bank-led but increasingly digital-first, dominated commercially by ABA Bank (subsidiary of National Bank of Canada), which overtook ACLEDA Bank in assets and deposits by 2022 and posted a $377.5 million net profit in 2025 on $16.2 billion in total assets. Wing (mobile-money pioneer) converted to a full banking licence as Wing Bank. Foreign entrants continue to consolidate the sector, illustrated by SBI Holdings' 2026 acquisition of a domestic MFI. The sector also carries acute reputational/structural risk from Prince Bank's ownership linkage to the OFAC-sanctioned Prince Group conglomerate.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Industry Structure & Commercial Dynamics
ABA Bank reported 2025 total assets of $16.2 billion, up 17% year-on-year, and net profit of $377.5 million, up 26%, confirming its position as Cambodia's largest commercial bank by assets, deposits, loans and profitability and illustrating a digital-first competitive dynamic increasingly shaping the bank-led payments market. That market-leadership picture sits alongside acute structural risk at Prince Bank Plc, which faces reputational and franchise damage following the 14 October 2025 OFAC Specially Designated Nationals listing of its parent as part of the Prince Group Transnational Criminal Organization sanctions action, a designation that materially affects Cambodia's mid-tier deposit-taking bank landscape. The coexistence of a strengthening digital-first market leader and a sanctions-damaged mid-tier competitor illustrates a bifurcating industry structure this cycle, with capital and customer confidence increasingly concentrated around institutions seen as clear of illicit-finance exposure.
Outlook
Watch whether Prince Bank's sanctions exposure triggers further consolidation -- either a forced sale, government-directed restructuring, or continued deposit attrition toward ABA and other unaffected banks -- and whether this reshapes competitive dynamics among Cambodia's mid-tier banks more broadly as depositors and correspondent counterparties reassess exposure to reputationally damaged institutions.
Cambodia's banking/payments industry remains bank-led but increasingly digital-first, dominated commercially by ABA Bank (subsidiary of National Bank of Canada), which overtook ACLEDA Bank in assets and deposits by 2022 and posted a $377.5 million net profit in 2025 on $16.2 billion in total assets. Wing (mobile-money pioneer) converted to a full banking licence as Wing Bank. Foreign entrants continue to consolidate the sector, illustrated by SBI Holdings' 2026 acquisition of a domestic MFI. The sector also carries acute reputational/structural risk from Prince Bank's ownership linkage to the OFAC-sanctioned Prince Group conglomerate.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
ABA Bank Remains Top Cambodian Bank In 2025, Supports Country's Economic Growth - Cambodia Investment Review [T3] PRINCE BANK PLC. | Sanctions Finder [T3]
Cambodia's payments-adjacent legal/enforcement landscape in 2025-2026 has been dominated by transnational scam-compound litigation and sanctions. OFAC designated the Prince Group a Transnational Criminal Organization (Oct 2025, expanded June 2026), sanctioning Prince Bank and dozens of affiliated entities; FinCEN severed Huione Group from the US financial system under Section 311 over c.$4 billion in laundered proceeds. Domestically, Cambodia enacted its first dedicated Law on Anti-Technology Fraud (6 April 2026) and the Commercial Gambling Management Commission has suspended/revoked casino licences tied to scam operations, though Amnesty International's June 2026 report found state intervention at only a minority of identified compounds.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Legal & Litigation
On 14 October 2025, the U.S. Treasury's Office of Foreign Assets Control designated the Prince Group Transnational Criminal Organization, naming 146 targets including Prince Bank Plc, while the Financial Crimes Enforcement Network issued a Section 311 special measure severing Huione Group from the U.S. financial system over more than $4 billion allegedly laundered between 2021 and 2025; OFAC expanded the designation on 23 June 2026, adding nine individuals and 26 entities. Cambodia enacted its first dedicated Law on Anti-Technology Fraud on 6 April 2026, granting prosecutors stronger powers against scam-industry organisers, financiers and infrastructure providers, a direct domestic legislative response to the scam-compound crisis. Despite this new statute and associated casino-licence actions, Amnesty International's June 2026 report found state intervention at only 24 of 86 identified scam compounds, with documented continued abuse after publicised raids, indicating a persistent enforcement-effectiveness gap between Cambodia's legal reforms and their practical implementation.
Outlook
The trajectory here is escalating on two fronts simultaneously: international sanctions pressure, following OFAC's June 2026 expansion of the Prince Group designation, and domestic prosecutorial capacity under the new Anti-Technology Fraud Law. The critical indicator to watch is whether prosecutions under the new law increase materially, or whether the enforcement gap documented by Amnesty International persists despite the expanded legal toolkit.
Cambodia's payments-adjacent legal/enforcement landscape in 2025-2026 has been dominated by transnational scam-compound litigation and sanctions. OFAC designated the Prince Group a Transnational Criminal Organization (Oct 2025, expanded June 2026), sanctioning Prince Bank and dozens of affiliated entities; FinCEN severed Huione Group from the US financial system under Section 311 over c.$4 billion in laundered proceeds. Domestically, Cambodia enacted its first dedicated Law on Anti-Technology Fraud (6 April 2026) and the Commercial Gambling Management Commission has suspended/revoked casino licences tied to scam operations, though Amnesty International's June 2026 report found state intervention at only a minority of identified compounds.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
U.S. and U.K. Take Largest Action Ever Targeting Cybercriminal Networks in Southeast Asia | U.S. Department of the Treasury [T1] Cambodia’s crackdown on online scams shows that nobody is above the law [T3] Cambodia’s Scam Crackdown and the Victims It Left Behind [T3]
Cambodia's e-commerce and merchant-acquiring market is early-stage but fast-growing (roughly $300 million in online commerce in 2023, projected CAGR above 25% through 2027), mobile-first (over 70% of e-commerce transactions), and QR-led -- KHQR acceptance has been mandatory for QR-receiving merchants since 2022. Acquiring is typically handled by local banks/PSPs (e.g. ABA's PayWay gateway) holding the merchant relationship and remitting offshore as needed; dedicated domestic payments fintechs such as Clik provide POS/merchant-acquiring infrastructure to tens of thousands of merchants. No jurisdiction-specific high-risk-MCC or chargeback framework distinct from standard scheme rules was identified.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Merchant Acquiring & Risk
Cambodia's merchant-acquiring market is structured around local bank and PSP-held merchant relationships, exemplified by ABA Bank's PayWay gateway, layered on top of mandatory KHQR acceptance in force since 2022. No bespoke high-risk merchant-category-code or chargeback framework distinct from standard international card-scheme rules was identified for the Cambodian market, suggesting acquiring risk management here still runs largely on imported scheme rulebooks rather than domestic bespoke rules. This gap sits alongside a fast-growing, mobile-first, QR-led acquiring environment, where bank-affiliated gateways coexist with independent fintech acquirers serving the country's rapidly digitising merchant base.
Outlook
As transaction volumes and merchant digitisation continue to grow, the absence of a bespoke high-risk-MCC or chargeback framework is likely to become more consequential, particularly if fraud losses concentrate in specific merchant categories; watch for any National Bank move toward a dedicated acquiring-risk framework as transaction volumes scale.
Cambodia's e-commerce and merchant-acquiring market is early-stage but fast-growing (roughly $300 million in online commerce in 2023, projected CAGR above 25% through 2027), mobile-first (over 70% of e-commerce transactions), and QR-led -- KHQR acceptance has been mandatory for QR-receiving merchants since 2022. Acquiring is typically handled by local banks/PSPs (e.g. ABA's PayWay gateway) holding the merchant relationship and remitting offshore as needed; dedicated domestic payments fintechs such as Clik provide POS/merchant-acquiring infrastructure to tens of thousands of merchants. No jurisdiction-specific high-risk-MCC or chargeback framework distinct from standard scheme rules was identified.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia Payments Guide: Bakong, ABA, Wing & the NBC Framework (2026) · Kaadxpay [T3]
Product innovation in Cambodia centres on the NBC-led Bakong/KHQR/FAST triad: Bakong (blockchain-based instant payment and tokenised-deposit platform, launched Oct 2020), KHQR (unified EMV QR standard, July 2022) and the FAST payment system. Innovation extends to a dedicated tourist-facing Bakong app (Aug 2024), a NBC/SERC FinTech Regulatory Sandbox hosting licensed crypto exchanges, and policy scaffolding via the Financial Technology Development Policy 2023-2028 and the National Financial Inclusion Strategy 2019-2025.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Product Innovation & Market Development
The Bakong Tourists app, launched in August 2024, allows foreign visitors to link international cards from Visa, Mastercard and UnionPay and transact via Bakong without needing a local bank account, extending Cambodia's instant-payment rail to the inbound tourism segment. This sits within a broader Financial Technology Development Policy 2023-2028, which aims to attract fintech investment and improve the regulatory environment, including for Cambodia's as-yet-undeveloped crowdfunding and peer-to-peer lending sectors. Together these initiatives extend the Bakong/KHQR/FAST triad that continues to anchor Cambodia's product-innovation agenda, layering tourist-facing access and policy scaffolding on top of the core domestic instant-payments infrastructure.
Outlook
Watch for concrete regulatory developments under the Financial Technology Development Policy for the still-undeveloped crowdfunding and peer-to-peer lending sectors, which represent the clearest gap between stated policy ambition and implemented rules; the tourist-app model, by contrast, appears stable and likely to expand gradually alongside continued growth in inbound visitor volumes.
Product innovation in Cambodia centres on the NBC-led Bakong/KHQR/FAST triad: Bakong (blockchain-based instant payment and tokenised-deposit platform, launched Oct 2020), KHQR (unified EMV QR standard, July 2022) and the FAST payment system. Innovation extends to a dedicated tourist-facing Bakong app (Aug 2024), a NBC/SERC FinTech Regulatory Sandbox hosting licensed crypto exchanges, and policy scaffolding via the Financial Technology Development Policy 2023-2028 and the National Financial Inclusion Strategy 2019-2025.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
National Bank of Cambodia Introduces "Bakong" for Streamlined Tourist Payments - The Better Cambodia [T3] Cambodia Financial Technology Development Policy 2023-2028 - What To Know About The Kingdom's Fintech Policy | B2B [T3]
Consumer protection for payments sits at the intersection of the 2019 Law on Consumer Protection (National Committee for Consumer Protection), NBC's Prakas on Resolution of Consumer Complaints, the 2019 E-commerce Law's liability provisions for lost/stolen payment instruments, and a 2021 NBC circular tightening KYC and transaction-limit rules to curb digital-payment fraud. Enforcement gaps remain acute in the adjacent scam-compound/APP-fraud context: Amnesty International's June 2026 report found that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as trafficking victims despite meeting the Palermo Protocol definition.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Consumer Protection & APP Fraud
Cambodia's consumer-protection architecture layers the National Bank's Prakas on Resolution of Consumer Complaints, the 2019 Consumer Protection Law, the 2019 E-commerce Law's liability-shift rules for lost or stolen payment instruments, and the 2021 tiered-KYC transaction-limit circular into a reasonably comprehensive framework on paper. That framework sits in sharp tension with enforcement reality in the scam-compound context: Amnesty International's June 2026 report found that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as human-trafficking victims, despite meeting the Palermo Protocol definition, an acute victim-recognition gap that sits alongside the broader authorised-push-payment and fraud-enablement concerns documented elsewhere in this brief.
Outlook
The standing consumer-protection instruments are unlikely to change materially in the near term, but the victim-recognition gap identified by Amnesty International is a live reputational and policy pressure point; watch for whether Cambodian authorities begin formally recognising scam-compound victims as trafficking victims, which would carry significant downstream implications for prosecutorial strategy and international cooperation.
Consumer protection for payments sits at the intersection of the 2019 Law on Consumer Protection (National Committee for Consumer Protection), NBC's Prakas on Resolution of Consumer Complaints, the 2019 E-commerce Law's liability provisions for lost/stolen payment instruments, and a 2021 NBC circular tightening KYC and transaction-limit rules to curb digital-payment fraud. Enforcement gaps remain acute in the adjacent scam-compound/APP-fraud context: Amnesty International's June 2026 report found that none of 73 interviewed scam-compound survivors were recognised by Cambodian authorities as trafficking victims despite meeting the Palermo Protocol definition.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia’s Scam Crackdown and the Victims It Left Behind [T3]
W11ConfirmedAML/CFT & Financial Crime (Sentinel.gi-fed)
Sentinelsee this theme across all jurisdictions →8 claimsSentinel.gi payments-context position: Cambodia was removed from the FATF grey list in February 2023 after completing a multi-year action plan addressing strategic AML/CFT deficiencies identified in 2019, underpinned by AML/CFT legislation strengthened in June 2020. Notwithstanding this formal exit, Cambodia's payments and banking sector faces acute, ongoing illicit-finance exposure from the scam-compound economy, evidenced by FinCEN's Section 311 action against Huione Group and OFAC's Transnational Criminal Organization designation of Prince Group and its banking affiliate Prince Bank.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
AML/CFT & Financial Crime
Cambodia exited the FATF grey list in February 2023, following completion of a multi-year action plan addressing the strategic AML/CFT deficiencies identified in 2019, underpinned by anti-money-laundering legislation strengthened in June 2020 -- this Sentinel-fed standing position remains Cambodia's core AML/CFT baseline. That baseline sits, however, against an intensifying illicit-finance exposure this cycle: the U.S. Financial Crimes Enforcement Network's Section 311 special measure against Huione Group, tied to more than $4 billion allegedly laundered between 2021 and 2025, and the OFAC Specially Designated Nationals listing of Prince Bank Plc on 14 October 2025 under the Prince Group Transnational Criminal Organization designation, together constitute the most material AML/CFT-adjacent development in Cambodia this cycle. Consistent with Sentinel.gi protocol, this brief carries the Sentinel-fed AML/CFT surface as reported and does not perform original illicit-finance or evasion-typology analysis; that analytical work, including any activity connected to the rebranded 'H-Pay Service PLC,' is routed to the Financial Intelligence Monitor.
Outlook
Cambodia's FATF-exit status is unlikely to be revisited in the near term absent a fresh strategic review, but the Huione/Prince Group exposure is an active, escalating track per Sentinel.gi's feed; watch that channel directly for further designations following OFAC's June 2026 expansion, rather than for original analysis here.
Sentinel.gi payments-context position: Cambodia was removed from the FATF grey list in February 2023 after completing a multi-year action plan addressing strategic AML/CFT deficiencies identified in 2019, underpinned by AML/CFT legislation strengthened in June 2020. Notwithstanding this formal exit, Cambodia's payments and banking sector faces acute, ongoing illicit-finance exposure from the scam-compound economy, evidenced by FinCEN's Section 311 action against Huione Group and OFAC's Transnational Criminal Organization designation of Prince Group and its banking affiliate Prince Bank.
Evidence — 8 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- True
Event Findings
Sources
Cambodia Removed from the FATF’s Grey List | Cambodianess [T3] U.S. and U.K. Take Largest Action Ever Targeting Cybercriminal Networks in Southeast Asia | U.S. Department of the Treasury [T1]
Correspondent banking access in Cambodia is governed at the FX level by the 2007 Foreign Exchange Law, which places no restriction on cross-border transfers provided they are routed through an 'authorised intermediary' bank permanently established in Cambodia. Major domestic banks lean on parent-group correspondent networks (e.g. ABA Bank via National Bank of Canada). The sector faces acute de-risking pressure following the October 2025 OFAC designation of Prince Bank and the associated Prince Group/Huione sanctions, which triggered visible public deposit anxiety and heightened correspondent-bank scrutiny of Cambodian counterparties generally. NBC has also built a Financial Transparency Corridor (FTC) digital infrastructure to support advance agreements between domestic BFIs and partner-country counterparts.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Correspondent Banking, Settlement & Access
Cambodia's cross-border settlement access rests on the 2007 Foreign Exchange Law, which permits transfers via any 'authorised intermediary' bank permanently established in the country, with no other restriction placed on inbound or outbound transfers -- a permissive legal foundation for correspondent banking access. That permissiveness has been tested this cycle by an acute de-risking event: Prince Bank Plc experienced a visible deposit-withdrawal wave following the October 2025 OFAC and UK sanctions designation of its parent Prince Group, and correspondent banks abroad have generally heightened scrutiny of Cambodian counterparties as a result, extending de-risking pressure beyond the sanctioned entity itself. This dynamic illustrates the module's central analytical tension in Cambodia's case: a legally open correspondent-access regime can nonetheless be constrained in practice by external counterparty risk perceptions that operate independently of domestic law.
Outlook
The central question for Cambodia's correspondent-banking access is whether the Prince Bank-specific de-risking generalises into a broader correspondent-access squeeze on Cambodian banks overall, or remains contained to institutions with demonstrable Prince Group ownership linkages; watch international correspondent banks' public statements and any further sanctions expansions as the clearest leading indicators.
Correspondent banking access in Cambodia is governed at the FX level by the 2007 Foreign Exchange Law, which places no restriction on cross-border transfers provided they are routed through an 'authorised intermediary' bank permanently established in Cambodia. Major domestic banks lean on parent-group correspondent networks (e.g. ABA Bank via National Bank of Canada). The sector faces acute de-risking pressure following the October 2025 OFAC designation of Prince Bank and the associated Prince Group/Huione sanctions, which triggered visible public deposit anxiety and heightened correspondent-bank scrutiny of Cambodian counterparties generally. NBC has also built a Financial Transparency Corridor (FTC) digital infrastructure to support advance agreements between domestic BFIs and partner-country counterparts.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sources
Cambodia Banking - Cambodia Counsel [T3] Prince Bank in Cambodia faces mass withdrawals after parent firm hit by US and UK sanctions [T3]
W13AssessedCommercial Intelligence (M&A, Investment & Product)
see this theme across all jurisdictions →5 claimsWithin the trailing 12 months, Cambodia's payments/fintech commercial activity has been dominated by SBI Holdings' completed acquisition and rebranding of a domestic bank, ACLEDA Bank's cross-border UPI partnership with India's NPCI International, Wing Bank's digital-app relaunch, and continued cross-border QR product rollouts (Singapore, Laos phase 2). Cumulative fintech investment in Cambodia is estimated at approximately $120 million between 2022 and 2025, concentrated in payments and digital lending.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Commercial Intelligence (M&A, Investment & Product)
May 2026: Japan's SBI Holdings completed its acquisition of SBI LY HOUR Bank PLC, rebranding the entity as SBI Bank (Cambodia) PLC and extending a $100 million credit facility to the renamed bank; the underlying acquisition consideration itself was not publicly disclosed. December 2025: ACLEDA Bank Plc announced a partnership with NPCI International Payments Limited enabling UPI acceptance in Cambodia and KHQR acceptance in India, extending KHQR's cross-border footprint into a major emerging-market payment rail; deal terms were not publicly disclosed. April 2026: Wing Bank launched 'Jib Jib,' a reinvented digital banking app emphasising rewards and personalisation, continuing the competitive product-refresh dynamic among Cambodia's leading digital-first banks. Read together, these three events -- a completed foreign bank acquisition, a cross-border scheme partnership, and a consumer-app relaunch -- span Cambodia's trailing twelve months of commercial activity and illustrate continued foreign and domestic investment despite the sector's concurrent sanctions exposure.
Outlook
Expect continued foreign-capital interest in Cambodian bank targets following the SBI transaction, continued cross-border scheme partnerships extending KHQR's international footprint, and ongoing product-refresh competition among digital-first banks; the key near-term marker is whether any further M&A activity discloses full deal consideration, which none of this cycle's events did.
Within the trailing 12 months, Cambodia's payments/fintech commercial activity has been dominated by SBI Holdings' completed acquisition and rebranding of a domestic bank, ACLEDA Bank's cross-border UPI partnership with India's NPCI International, Wing Bank's digital-app relaunch, and continued cross-border QR product rollouts (Singapore, Laos phase 2). Cumulative fintech investment in Cambodia is estimated at approximately $120 million between 2022 and 2025, concentrated in payments and digital lending.
Evidence — 5 structured claims
Key facts
- Content Tier
- D
- Sentinel Feed
- False
Event Findings
Sources
SBI Holdings Completes Acquisition of Cambodia Unit in USD 100m Expansion Push [T3] Cambodia strengthens regional monetary footprint through QR payment links - Khmer Times [T3] ABA Bank Remains Top Cambodian Bank In 2025, Supports Country's Economic Growth - Cambodia Investment Review [T3]