CRA-4.5 CRA-4.5 Client Protection
Segregation and Handling of Clients' Assets
CRA-4.5.1
Licensees undertakingregulated crypto-asset service and authorised to holdclients’ assets must apply the same standards and comply with the requirements of segregation and handling ofclients’ assets Rules set out in this Section.Amended: April 2023
Added: April 2019CRA-4.5.1A
For the purpose of this Module, “clients assets” means
crypto-assets , money and other assets received or held on behalf of a client by thelicensee and anycrypto-assets , money or other assets accruing therefrom.Added: April 2023CRA-4.5.2
For purposes of safeguarding client's rights in relation to
crypto-assets andclient money which are held or controlled by thelicensee , alicensee must hold clients' money and/or tocrypto-assets in specially created and segregated accounts. These accounts must be identified separately from any other accounts used to hold money and/or tocrypto-assets belonging to thelicensee .Amended: April 2023
Added: February 2019CRA-4.5.3
A
licensee must obtain a written declaration from the entities with whom thelicensee has depositedclient assets that the said entity renounces and will not attempt to enforce or execute, any charge, right of set-off or other claim against the account.Amended: April 2023
Added: April 2019Client Money Client Money
CRA-4.5.4
A
licensee must properly handle and safeguardclient money . The arrangement to handle and safeguardclient money , must include, but not be limited to the following:(a) Establishing one or more client bank accounts with a retail bank licensed in the Kingdom of Bahrain for safekeeping ofclient money ;(b)Client money must not be paid out of a client bank account other than for:(i) Paying the client on whose behalf it is being held;(ii) Meeting the client’s settlement obligations in respect of dealings incrypto-assets carried out by thelicensee for the client, being the client on whose behalf it is being held;(iii) Paying money that the client owes to thelicensee in respect of the conduct ofregulated crypto-asset services ; or(iv) Paying in accordance with the client’s written instructions, including standing authorities or one-off directions; and(c) Not used for licensee’s own use or given as collateral for any purpose to a third party or be subject to any restrictions.Amended: April 2023
Added: April 2019CRA-4.5.5
Client money must be received by thelicensee directly into a client bank account.Added: April 2019CRA-4.5.5A
A
licensee must match any unidentified receipts in its client bank accounts with all relevant information in order to establish the nature of any payment and the identity of the person who has made it. Where the receipt is notclient money , within one business day of becoming so aware, that amount of money should be paid out of the client bank account.Added: April 2023Reconciliation of Clients' Money
CRA-4.5.6
Licensees must reconcile, at least on a monthly basis, the balance on each client's money account as recorded by thelicensee with the balance on that account as set out in the statement issued by the entity with whom thelicensee has deposited clients' money.Added: April 2019CRA-4.5.7
Licensees must also reconcile, at least on a monthly basis, the total of the balances on all clients' money accounts as recorded by thelicensee with the total of the corresponding credit balances in respect of each of its clients as recorded by thelicense .Added: April 2019CRA-4.5.7A
Licensees must ensure that theclient money reconciliations referred to in Paragraphs CRA-4.5.6 and CRA-4.5.7 are completed within 10 business days from the end of the months. Any differences, shortfalls and excess balances must be investigated, and corrective measures taken to restore correct client asset balance.Added: April 2023Risk Disclosure to Clients
CRA-4.5.8
As part of establishing a relationship with a
client , and prior to entering into an initial transaction with such client,licensee must disclose in clear, conspicuous, and legible writing in both Arabic and English languages, all material risks associated withcrypto-asset products and services including at a minimum, the following:(a) Acrypto-asset is not a legal tender and is not backed by the government;(b) legislative and regulatory changes or actions at national level or international level may adversely affect the use, transfer, exchange, and value ofcrypto-assets ;(c) transactions incrypto-assets may be irreversible, and, accordingly, losses due to fraudulent or accidental transactions may not be recoverable;(d) somecrypto-asset transactions may be deemed to be made when recorded on a public ledger, which is not necessarily the date or time that theclient initiates the transaction;(e) the value ofcrypto-assets may be derived from the continued willingness of market participants to exchangefiat currency forcrypto-asset , which may result in the potential for permanent and total loss of value of a particularcrypto-asset should the market for thatcrypto-asset disappear;(f) the volatility and unpredictability of the price ofcrypto-assets relative tofiat currency may result in significant loss over a short period of time;(g) [This Subparagraph was deleted in April 2023];(h) the nature ofcrypto-assets means that any technological difficulties experienced by thelicensee may prevent the access or use of a client'scrypto-assets ; and(i) any investor protection mechanism.Amended: April 2023
Added: April 2019Disclosure of General Terms and Conditions
CRA-4.5.9
When registering a new
client , and prior to entering into transactions with suchclient , alicensee must disclose in clear, conspicuous, and legible writing in both Arabic and English languages, all relevant terms and conditions associated with its products and services including at a minimum, the following:(a) theclient's liability for unauthorizedcrypto-asset transactions;(b) theclient's right to stop payment of a preauthorizedcrypto-asset transfer and the procedure to initiate such a stop-payment order;(c) under what circumstances thelicensee will disclose information concerning the client's account to third parties;(d) theclient's right to receive periodic account statements from thelicensee ;(e) theclient's right to receive a confirmation note or other evidence of a transaction;(f) theclient's right to prior notice of a change in thelicensee's rules or policies or terms and conditions; and(g) [This Subparagraph was deleted in April 2023].(h) cybersecurity risks associated withcrypto-assets including the risk of partial or full loss ofcrypto-assets in the event of a cyber-attack, and measures that have been put in place to mitigate the cyber security risks.Amended: April 2023
Added: April 2019CRA-4.5.9A
In addition to the disclosure requirements stipulated in Paragraph CRA-4.5.9, Category-1, Category-2 and Category-3
crypto-asset licensees must disclose, in writing, the following information to clients:(a) How they execute and routeclient’s order and source liquidity (e.g. whether they pass or route orders to an exchange to execute). Where thelicensee routesclient orders to one or more crypto-asset exchanges for execution, it must disclose details of all the crypto-asset exchanges;(b) Whether it may carry trading incrypto-assets as principal, and if so, whether, it may trade against client’s position; and(c) How it determines the prices of thecrypto-assets it quotes to clients.Added: April 2023Disclosure of the Terms of Transactions
CRA-4.5.10
Prior to each transaction in a
crypto-asset with aclient , alicensee must furnish to theclient a written disclosure in clear, conspicuous, and legible writing in both Arabic or English languages, containing the terms and conditions of the transaction, which must include, at a minimum, to the extent applicable:(a) the amount of the transaction;(b) any fees, expenses, and charges borne by the client, including applicable exchange rates;(c) the type and nature of thecrypto-asset transaction;(d) a warning that once executed the transaction may not be undone; and(e) such other disclosures as are customarily given in connection with a transaction of this nature.Amended: April 2023
Added: April 2019Acknowledgement of Disclosure
CRA-4.5.11
A
licensee must ensure that all disclosures required in this Section are acknowledged as received by clients.Added: April 2019Confirmation Note
CRA-4.5.12
Upon completion of any transaction, a
licensee must provide to the client a confirmation note containing the following information:(a) the type, value, date, and precise time of the transaction;(b) the fee charged;(c) the exchange rate, if applicable;(d) the name and contact information of thelicensee , including a telephone number established by thelicensee to answer questions and register complaints;Added: April 2019CRA-4.5.12A
Where a
client undertakes more than one transaction, thelicensee may prepare a single confirmation note which:(a) Records all of those transactions; and(b) In respect of each of those transactions includes all of the information which would have been required to be included in the confirmation note.Added: April 2023CRA-4.5.12B
Licensees must provide the confirmation note to the client no later than the end of the business day on which the transaction was undertaken.Added: April 2023CRA-4.5.13
[This Paragraph was deleted in April 2023].
Deleted: April 2023
Added: April 2019Prevention of Fraud
CRA-4.5.14
Licensees must take reasonable steps to detect and prevent fraud, including by establishing and maintaining a written anti-fraud policy. The anti-fraud policy must, at a minimum, include:(a) the identification and assessment of fraud-related risk areas;(b) procedures and controls to protect against identified risks;(c) allocation of responsibility for monitoring risks and establish real-time/near real-time fraud risk monitoring and surveillance system; and(d) procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms.Amended: April 2023
Added: April 2019CRA-4.5.14A
A
client account must be considered dormant if theclient does not trade for a period of 12 (twelve) continuous months. All the accounts designated as dormant need to be monitored carefully in order to avoid unauthorized transactions in the account.Added: April 2023CRA-4.5.14B
If a
client wishes to make his/her account active after 12 continuous months or thereafter, thelicensee must ensure that the client submits a request to reactivate his/her account. In case there is any change in the information such as; address, contact details, email ID, bank account, financial disclosure provided in KYC at the time of registration asclient , the same must be submitted along with the request. After verification of the updated / revised details and approval from the compliance officer or money laundering reporting officer (MLRO), the account can be made active and transactions can take place.Added: April 2023Client Agreements and Statements
CRA-4.5.15
Licensees must not provide aregulated crypto-asset service to a client as mentioned unless there is a client agreement entered into between thelicensee and theclient containing the key information specified in Rule CRA-4.5.16.Amended: April 2023
Added: April 2019CRA-4.5.16
The client agreement referred to in Rule CRA-4.5.15 must include:
(a) the name and address of thelicensee ;(b) the regulatory status of thelicensee ;(c) when and how the client agreement is to come into force and how the agreement may be amended or terminated;(d) details of fees, costs and other charges and the basis upon which thelicensee will impose those fees, costs and other charges;(e) sufficient details of the service that thelicensee will provide, including where relevant, information about any product or other restrictions applying to thelicensee in the provision of its services and how such restrictions impact on the service offered by thelicensee ; or if there are no such restrictions, a statement to that effect;(f) details of any conflicts of interests;(g) any soft dollar arrangements;(h) key particulars of thelicensee's complaints handling procedures or dispute resolution procedure; and(i) thecrypto-asset risk disclosure referred to in Rule CRA-4.5.8 and disclosure of general terms and conditions referred to in Rule CRA-4.5.9.Amended: April 2023
Added: April 2019CRA-4.5.16A
Licensees must provide periodic statements i.e. confirmation note, monthly statement of account and annual statement of account to their clients.Licensees may provide to their clients the periodic statement information through their website and/or application. Where alicensee provides the periodic statement through its website and application, the licensee is not required to send the periodic statement to their clients separately.Added: April 2023Monthly Statement of Account
CRA-4.5.17
A
licensee must prepare and provide a monthly statement of account to the client no later than 7 business days following the month where any of the following circumstances apply:(a) During a month, thelicensee has provided a confirmation note (refer CRA-4.5.12) or has received funds from the client;(b) At any time during a month, the client has an account balance (funds) that is not nil; or(c) At any time during a month,crypto-assets are held for the account of the client.Added: April 2023CRA-4.5.18
The monthly statement of account referred to in Paragraph CRA-4.5.17 must include the following information:
(a) The name and address of thelicensee ;(b) The name, address and account number of the client;(c) The date on which the statement of account is issued;(d) The outstanding balance of that account as at the beginning and as at the end of the month;(e) Details of all transactions undertaken by the client during the month;(f) Inward and outward transfer ofcrypto-assets during the month;(g) The quantity, and, in so far as readily ascertainable, the market price and total value of eachcrypto-asset held at the end of the month;(h) Details of all funds credited to and fees and charges levied during the month; and(i) Details of any restrictions, such as blocks pursuant to an order by a court or other competent authority.Added: April 2023Duty to Provide Statement of Account on Request
CRA-4.5.19
Where a
licensee receives a request from a client for a statement of account it must provide the client, as soon as practicable after the date of the request but no later than 5 working days from the date of the request, such statement of account which must include the information required as per Paragraph CRA-4.5.18 for the period specified by the client.Added: April 2023CRA-4.5.20
Where a
licensee provides the statement of account at the request of the client (refer to CRA-4.5.19), it may impose a reasonable charge on the client for providing the statement of account.Added: April 2023CRA-4.5.21
A
licensee must prepare and provide a statement of account to the client, on an annual basis, no later than the end of the seventh business day after the end of the financial year except under following circumstances:(a) There are no transactions;(b) The account balance (funds) is nil; and(c) The balance ofcrypto-assets held on behalf of the client is nil.Added: April 2023No Restriction on Withdrawal of Client Assets
CRA-4.5.22
Where a
client requests for withdrawal ofclient assets , alicensee , unless the restriction is pursuant to a freeze or block order from a court or due to factors related to money laundering and terror financing (suspicious transactions), must not impose restriction on withdrawal of theclient assets held under its control.Added: April 2023