Laos (LA)

Licensing, Authorisation & Market Access

Laos' payments licensing regime was substantially reconsolidated in 2025. Bank of the Lao PDR (BOL) Decision 511/BOL, issued 19 June 2025, replaces Decisions 288/BOL (2020) and 1058/BOL (2016) and now establishes the operative licensing framework for both domestic and cross-border payment service providers. The supersession is documented in law-firm commentary rather than a directly located BOL publication of the decision itself, so confidence on the precise scope of replacement is Assessed rather than High. Under the new framework, banks and deposit-taking microfinance institutions continue to operate payment services without a separate payment-specific licence, while non-bank retail payment system operators require a dedicated BOL licence with no exemption pathway identified.

Market access for the non-bank segment tightened further shortly after the licensing consolidation: BOL halted registration of new branches and service units of non-bank financial institutions on 28 August 2025, a constraint that applies to non-bank PSPs and microfinance institutions and limits their network-expansion options even as existing licensed operators continue functioning. The measure was disclosed alongside an update to BOL's cash-carrying regulations, suggesting a broader administrative tightening cycle across BOL's non-bank oversight remit in the second half of 2025.

Outlook

The Decision 511/BOL consolidation and the branch-registration halt together point to a licensing environment that is actively being reorganised rather than static. Absent a directly sourced BOL publication, the precise mechanics of the June 2025 licensing consolidation remain subject to confirmation; the branch-registration halt is the more concretely evidenced of the two developments. Non-bank PSPs and MFIs should expect continued constraint on physical network expansion pending any BOL signal of relaxation, while bank-channel payment services continue under the pre-existing prudential regime.

Conduct, Safeguarding & Promotions

BOL's Decree on Financial Consumer Protection was updated in an unofficial translation uploaded in January 2026. The update mandates that financial service providers safeguard consumer passwords and report significant data leaks to BOL's financial customer protection supervisory unit. This January 2026 upload republishes and updates the 2020 Decree 225/GOV translation rather than introducing an entirely new decree, so the substantive shift is incremental -- adding specific password-safeguarding and breach-reporting duties onto an existing consumer-protection baseline. No ring-fenced, CASS-style safeguarding-account regime for non-bank e-money or PSP customer funds has been identified in Laos; the conduct regime addresses data and password security rather than fund segregation.

Outlook

Expect continued incremental refinement of the Decree 225/GOV framework rather than a wholesale conduct-regime overhaul in the near term. The structural absence of a ring-fenced safeguarding mechanism for non-bank customer funds remains the more consequential gap for non-bank PSP/EMI conduct risk than the password/breach-reporting update itself, and is a standing feature of the regime this Monitor will continue to track rather than a one-cycle finding.

Stablecoins & Digital Money

Laos regulates crypto-asset trading through a ministerial-pilot framework rather than a dedicated stablecoin law. Bank of the Lao PDR directly regulates and monitors licensed crypto-asset trading platforms and related foreign-exchange flows under MOTC Decision 888/MOTC and BOL Decision 777/BOL (2021); only two operators -- LDX and Bitqik -- are authorised for full brokerage and trading activity, with licensing requiring at least 51% Lao shareholding and USD10 million in capital. The underlying IMF technical-assistance report is itself an assessment of the regime rather than the primary legal instrument, so the licensing detail is sourced at one remove from the underlying decisions.

FATF's 2023 Mutual Evaluation found that Laos' virtual-asset prohibitions cover only trading activity, not safekeeping or administration, and that supervision of the virtual-asset sector had not yet commenced at the time of assessment. This Monitor records the trust and stablecoin-integrity dimension of that finding; the underlying illicit-finance and AML supervisory-gap analysis has been routed to the Financial Integrity Monitor via cross-monitor flag rather than developed further here.

Outlook

The two-operator licensed-platform structure is likely to remain the dominant feature of Laos' digital-asset landscape absent a broader legislative overhaul; no stablecoin reserve or redemption rule detail has been sourced, which remains an open research gap. The supervisory gap flagged by FATF is a factor likely to feature in future FATF review cycles and in correspondent-banking de-risking assessments (see W12) even though its detailed treatment sits with FIM rather than this Monitor.

Operational Resilience & Critical Infrastructure

Laos enacted the Law on Cybersecurity No. 87/NA in 2025, establishing a 24-hour Cyber Command Center and a National Cybersecurity Operations Center. The law requires operators of critical infrastructure to maintain emergency response plans and redundant backup systems. The substantive detail of the law's requirements is sourced from legal commentary rather than the enacted law text itself, so confidence is Assessed rather than High. No payments-specific operational-resilience instrument comparable to the EU's DORA exists in Laos; payment-system operators' resilience obligations run through this general cybersecurity statute rather than a sector-specific regime.

Outlook

Absent a dedicated payments-specific resilience instrument, BOL-supervised payment operators will continue to rely on the general Cybersecurity Law's critical-infrastructure obligations for now. Whether BOL issues sector-specific technical standards building on Law 87/NA -- for example, incident-reporting timelines or third-party risk requirements specific to PSPs -- is the key development to watch in this module going forward.

Scheme & Network Compliance

China UnionPay has operated as the de facto national card scheme in Laos since 2015, with near-total point-of-sale and ATM acceptance. LAPNet, co-founded with UnionPay as a shareholder, administers the domestic LaoQR interoperability standard that underpins QR-based payment acceptance nationally. No Laos-specific interchange-fee regulation has been identified, and no public PCI DSS mandate applies beyond LAPNet/UnionPay's own technical scheme standards -- scheme compliance in Laos therefore runs through private network rules rather than a statutory framework.

Outlook

Scheme governance is likely to remain concentrated in the UnionPay/LAPNet relationship, with LaoQR standard consolidation continuing as the primary vector for network compliance rather than new statutory interchange or data-security rules. Any move by BOL toward a public PCI DSS mandate or interchange-fee regulation would represent a material shift from the current private-standards model and is a gap this Monitor will continue to watch for.

Payment Corridor Dynamics

Laos has built out an active cross-border QR payment corridor network across four markets: a phased PromptPay/LaoQR interoperability arrangement with Thailand (2023-24), a kip-riel QR corridor with Cambodia launched in August 2023, a QR interoperability link with Vietnam launched January 2025, and a UnionPay QR linkage with China launched December 2024. This four-corridor footprint positions Laos as an active participant in regional real-time-payments interoperability across the Greater Mekong Subregion.

Formal-channel expansion has not eliminated informal remittance reliance on the Thailand corridor specifically. Thai KYC and documentation requirements push undocumented Lao migrant workers toward informal remittance channels; formal remittances to Laos totalled approximately US$198 million in 2022, down from US$221 million in 2021. Informal-channel volumes on this corridor remain structurally under-documented relative to the formal-corridor QR data this Monitor otherwise tracks, and should be read as directional rather than precise.

Outlook

Expect continued corridor build-out to be the most dynamic element of Laos' payments environment, with the four live QR corridors likely to see incremental volume growth and potential extension to additional counterpart markets. The persistent gap between formal corridor infrastructure and informal migrant-worker remittance behaviour on the Thailand corridor is likely to remain a structural feature rather than one resolved by QR interoperability alone, absent a change in Thai-side documentation requirements for undocumented workers.

Industry Structure & Commercial Dynamics

Laos' banking sector comprises approximately 40-42 licensed banks, including foreign bank branches from Australia, Vietnam, Thailand, Cambodia, Malaysia, China and France. BCEL is the dominant, digitally advanced player in the market. Despite this bank density, only around 1.5 million bank accounts exist against an addressable market of roughly 4.5 million people, indicating a significant financial-access gap; no U.S. banks are licensed in-market.

The independent fintech sector remains shallow by comparison. Approximately 19-25 active fintech firms operate across mobile payments, remittances and digital wallets, but only 2 of 19 tracked startups have ever received funding, and just one has reached Series A or beyond. Bank-led digital modernisation continues to outpace independent venture-capital-backed fintech growth in Laos.

Outlook

The structural pattern of bank-led digital transformation alongside a shallow independent fintech-investment base is likely to persist. Closing the roughly 3-million-account financial-access gap will likely depend more on bank and mobile-money-led inclusion initiatives (see W9) than on VC-backed fintech entrants, given the current funding environment's depth.

Legal & Litigation

FATF's October 2025 statement found that Laos still needs to demonstrate an increase in money-laundering investigations and prosecutions -- particularly transnational cases -- and improved risk-based supervision of casinos, banks and special-economic-zone reporting entities. This enforcement/litigation-dimension finding is distinct from the Sentinel-fed AML/CFT tracker carried under W11 and records the legal-process signal specifically.

Separately, BOL's March 2026 Decision 251/BOL on offshore bank-account openings introduces a tiered administrative-penalty structure: LAK50 million for non-compliant use of an offshore account, and LAK30 million for failure to report account activity to BOL. This penalty regime tightens cross-border capital-flow compliance enforcement at the administrative level, distinct from the FATF-level enforcement-pressure finding above.

Outlook

Litigation and enforcement pressure on Laos is building on two tracks simultaneously: FATF-level scrutiny of prosecution volume and BOL-level administrative penalty enforcement on offshore accounts. Both tracks point toward a tightening compliance-enforcement environment through the February 2026 FATF plenary and beyond, with the BOL penalty regime likely to be the more immediately actionable signal for market participants.

Merchant Acquiring & Risk

Merchant acquiring in Laos is bank-led and closed to direct foreign merchant licensing. Merchants must process payments through BOL-licensed PSPs or banks; there is no direct acquiring-licence route available to merchants themselves, and foreign merchants generally require local entity registration or a local partner to accept payments in-market. Gambling, adult-content and cryptocurrency-trading merchants face strict scrutiny or outright prohibition within the acquiring channel.

Outlook

The closed, bank-led acquiring model is likely to persist as the default market-entry constraint for foreign merchants and platforms. Any shift toward a direct foreign-merchant acquiring licence route would represent a material market-access change from the current local-partner/local-entity requirement, and is not currently signalled in the sourced material.

Product Innovation & Market Development

Bank of the Lao PDR is exploring central bank digital currency feasibility in partnership with Japanese fintech firm Soramitsu, which was previously involved in Cambodia's Bakong project. This feasibility work sits alongside the LaPASS real-time gross settlement system, launched in June 2020, and the LaoQR standard, both of which underpin the country's digital-payments infrastructure. No target CBDC launch date has been sourced; the initiative remains at the feasibility-study stage.

On the product side, M-Money, operated by Lao Telecom Group, was Laos' first licensed e-wallet when it launched in 2020 and now links more than 30,000 merchants, primarily via QR codes, while also supporting tax remittances and government pay-outs. M-Money's e-wallet/e-money issuer licence represents the first non-bank licence of its kind granted in Laos and continues to anchor financial-inclusion-oriented product development.

Outlook

Product innovation in Laos is concentrated in bank- and telecom-led infrastructure -- LaPASS, LaoQR and M-Money -- rather than independent fintech entrants, consistent with the shallow VC base recorded under W6. The CBDC feasibility study with Soramitsu is the development most likely to reshape this module's trajectory if it progresses from feasibility to a pilot stage; no such progression has yet been sourced.

Consumer Protection & APP Fraud

Consumer-protection redress in Laos runs through Decree 225/GOV (2020, with an updated translation uploaded January 2026), which requires financial service providers to update consumers every 15 days on unresolved complaints, escalating unresolved matters first to BOL and then to the Economic Dispute Resolution Center or the Lao People's Courts. No authorised-push-payment fraud mandatory-reimbursement scheme exists in Laos comparable to the UK Payment Systems Regulator's model; redress instead relies entirely on this general financial consumer-complaint pathway.

Outlook

Absent a dedicated APP-fraud reimbursement mechanism, consumers bearing losses from push-payment fraud in Laos will continue to depend on the general complaint-escalation pathway and, ultimately, the courts or dispute-resolution center, a materially slower and less certain remedy than a mandatory-reimbursement scheme. This structural gap is likely to persist absent a specific legislative intervention, which has not been signalled in the sourced material.

AML/CFT & Financial Crime

This module is sourced from the Sentinel.gi intelligence feed rather than developed through original World Payments Monitor research. Per Sentinel's tracked position, Laos remains on the FATF list of Jurisdictions under Increased Monitoring, a status in place since 21 February 2025 with continued review through the February 2026 plenary. Outstanding action-plan items tracked by Sentinel include risk-based supervision of casinos, banks and special-economic-zone reporting entities, and the volume of money-laundering investigations and prosecutions. Readers seeking the underlying illicit-finance analysis should refer to the Sentinel.gi feed directly and to the Financial Integrity Monitor, which carries the original AML/CFT depth analysis on Laos via cross-monitor referral.

Outlook

Laos' grey-list status through the February 2026 plenary is the single most consequential cross-cutting fact in this cycle's Laos coverage, feeding directly into the correspondent-banking de-risking exposure tracked under W12 and the enforcement-pressure findings under W7. Any change in grey-list status at a future plenary would be a material development for this Monitor to carry forward from the Sentinel feed.

Correspondent Banking, Settlement & Access

Correspondent-banking and settlement access in Laos is shaped by an FX and offshore-account regime that tightened across 2025-26: Law 15/NA (2022) and FX Decision 11/BOL (2025) govern foreign-exchange control, a centralized FX market (LFX) has operated since August 2024, and BOL issued Decision 140/BOL (February 2026) on cash-carrying and Decision 251/BOL (March 2026) on offshore accounts. This regime operates against a backdrop of high dollarization in the Lao economy. The analytical spine of this module is the asymmetry between bank access to correspondent relationships -- which continue to function under this tightening but still-operative FX regime -- and non-bank PSPs' comparatively constrained cross-border settlement options. No explicit large-scale correspondent-banking withdrawal from Laos has been documented, but the country's FATF grey-list status structurally elevates de-risking exposure for Lao respondent banks regardless.

Outlook

The direction of travel is toward continued tightening of FX and offshore-account controls rather than relaxation, compounding rather than offsetting grey-list-driven de-risking exposure. Correspondent banks serving Lao respondents are likely to face increasing compliance documentation burden under the LFX/Decision 251/BOL regime; whether this translates into actual relationship withdrawal, as opposed to elevated exposure only, remains the key open question for this module.

Commercial Intelligence

No material disclosed M&A, investment, or product-launch event was sourced for Lao payments/fintech within the trailing 12-month baseline window; amount_disclosed data for any such deal was not available. The most concrete dated market-structure event in-window is regulatory rather than commercial: BOL's 28 August 2025 halt on registration of new branches and service units of non-bank financial institutions, which constrains non-bank market-structure evolution even though it is not itself a disclosed commercial transaction.

Outlook

This module remains thin for Laos pending disclosure of an actual M&A, investment or product-launch event; the branch-registration halt is carried here as the closest available dated marker of market-structure change and should be read as a regulatory action, not a commercial deal.