Oman - CBO and FSA perimeter

Oman financial permissions and regulator dossier

The Central Bank of Oman supervises banking, payments, money services and regulated financing. The Financial Services Authority supervises capital markets, funds, insurance and securities crowdfunding. Virtual-asset status requires special caution.

Talk to an advisor

Route facts

Jurisdiction facts

Regulator map

CBO for banks, Islamic banking, finance and leasing companies, payment service providers, money service businesses and loan-based crowdfunding.

Market authority

FSA for securities companies, market infrastructure, funds, insurance, insurance intermediaries and securities or equity crowdfunding.

Virtual-asset caution

FSA Decision 35/2023 establishes mandatory VASP registration and AML/CFT controls. A complete enacted general VASP licensing framework remains UNVERIFIED as of the review date.

Permission coverage

Banking, payments, e-money, FX, securities, custody, funds, insurance, finance, leasing, factoring, crowdfunding, VASP registration and pensions.

Territorial reach

An Oman licence or registration is domestic and activity-specific. It creates no GCC financial passport and does not authorise another jurisdiction.

Review date

Regulatory summary reviewed as of 11 July 2026.

Read the perimeter first

The 2025 Banking Law widened the map but did not merge the authorities

The Central Bank of Oman regulates licensed banks, Islamic banking, finance and leasing companies, payment service providers, money service businesses and other financial activities allocated by the Banking Law issued by Royal Decree 2/2025. CBO's payment policy provides the licensing basis for non-bank payment service providers, while its official financial-institution directories distinguish banks, finance and leasing companies and money exchange businesses. The Financial Services Authority succeeded the capital-market and insurance regulator and licenses securities companies, market activities, collective investment structures, insurance operators and intermediaries and crowdfunding platforms within its jurisdiction. Debt or loan-based crowdfunding falls within the CBO banking perimeter, while securities or equity crowdfunding requires the FSA route. Virtual assets must not be described as a mature general licence category. FSA Decision 35/2023 imposes registration and AML/CFT obligations on VASPs, and official material has described a fuller licensing framework as being prepared. As of 11 July 2026, enactment and operational availability of that complete framework are UNVERIFIED. A commercial registration, fintech programme, no-objection, FSA VASP registration or platform technology approval does not confer banking, payment, securities, insurance or unrestricted crypto operating scope.

Permission families

Oman licence, approval and registration routes

Family	Official instrument and authority	Activities and exclusions	Entry, capital and reach
Family Commercial, specialised and Islamic banking	Official instrument and authority CBO bank licence under the Banking Law 2/2025 and the applicable conventional or Islamic banking regulatory framework	Activities and exclusions Accept deposits and conduct only the banking functions approved for the class. A finance company, PSP, money exchange or fintech registration cannot assume bank scope.	Entry, capital and reach CBO reviews legal form, qualifying shareholders and controllers, capital, governance, senior management, risk, liquidity, AML/CFT, technology, local operations and group supervision.
Family Payment services and e-money	Official instrument and authority CBO Payment Service Provider licence under the current Licensing Policy for Payment Service Providers and related payment-system rules	Activities and exclusions Provide only the approved payment functions, which can include account or wallet, payment aggregation, gateway, acquiring, transfer or e-money features as classified by CBO.	Entry, capital and reach The applicant must meet category-specific legal presence, capital, ownership, safeguarding, settlement, governance, cyber security, AML/CFT, consumer and reporting requirements.
Family Money exchange, remittance and foreign exchange	Official instrument and authority CBO licence for a Money Exchange Company or other Money Service Business, with bank or service-specific authority for additional FX and remittance functions	Activities and exclusions Exchange currency and conduct approved transfers only within the CBO record. A PSP, payment gateway or commercial registration does not authorise unrestricted FX dealing.	Entry, capital and reach CBO assesses owners, capital, premises, management, correspondent and settlement arrangements, AML/CFT, sanctions, transaction monitoring, systems and returns.
Family Securities, dealing, advice, custody and venues	Official instrument and authority FSA licence for the relevant securities-company activity and FSA approval for Muscat Stock Exchange, clearing, depository or other market infrastructure	Activities and exclusions Deal, broker, advise, manage, custody or operate infrastructure only in the licensed capacity. A CBO status or ordinary technology licence cannot substitute for FSA authority.	Entry, capital and reach FSA applies category-specific capital, owners, directors, licensed personnel, governance, client-assets, conduct, systems, market-surveillance, AML/CFT and reporting tests.
Family Collective funds, administration and depositary services	Official instrument and authority FSA licence for the manager, administrator, custodian or other securities-company role, plus FSA approval or registration of the investment fund and offering documents	Activities and exclusions Manage, administer, safeguard or distribute a collective investment product only under the matching operator and product steps. Fund approval is not an operator licence.	Entry, capital and reach Legal form, capital, governance, valuation, independent custody, delegation, disclosures, investment restrictions, Sharia controls where relevant, audit and reporting apply by structure.
Family Insurance, takaful, reinsurance and intermediaries	Official instrument and authority FSA licence for insurer, takaful operator or reinsurer and the applicable FSA licence for brokers, agents and other insurance intermediaries	Activities and exclusions Underwrite only approved classes or intermediate insurance in the recorded capacity. A broker, comparison service or payment interface cannot bear underwriting risk.	Entry, capital and reach FSA examines capital and solvency, controllers, board and key functions, actuarial and risk systems, reinsurance, policyholder protection, products, AML/CFT and reporting.
Family Consumer finance, mortgage, leasing and factoring	Official instrument and authority CBO licence for a Finance and Leasing Company or bank approval for the relevant credit activity under the Banking Law and CBO rules	Activities and exclusions Provide only approved finance, leasing, hire-purchase, mortgage or factoring functions. A non-bank finance company cannot accept deposits unless separately licensed as a bank.	Entry, capital and reach The model must meet CBO capital, ownership, governance, credit-risk, provisioning, pricing, consumer disclosure, collections, AML/CFT, outsourcing and reporting criteria.
Family Crowdfunding platforms	Official instrument and authority FSA crowdfunding-platform licence under Decision 153/2021 for the applicable securities or equity model; CBO authority for loan-based crowdfunding under Banking Law 2/2025	Activities and exclusions Equity or securities offers and loan intermediation follow different authorities. Donation or reward functions do not permit securities offers, client-money holding or lending.	Entry, capital and reach The platform must document owners, capital, governance, issuer and investor due diligence, disclosures, limits, safeguarding, technology, complaints, default and wind-down.
Family Virtual-asset services	Official instrument and authority Mandatory FSA VASP registration and AML/CFT supervision under Decision 35/2023; a complete general VASP licensing instrument and live full-scope licence route are UNVERIFIED	Activities and exclusions Registration addresses the defined VASP and financial-crime perimeter. It must not be represented as an unrestricted exchange, custody, token-offering or virtual-asset licence.	Entry, capital and reach Map exchange, transfer, custody, administration, token issuance and financial-service features to the current FSA position. Verify the register, conditions and any later enacted framework directly.
Family Trust, company and fiduciary administration	Official instrument and authority FSA securities or fund custody and administration licence where regulated assets are involved; general company and professional services under MOCIIP and applicable professional law	Activities and exclusions Hold or administer regulated securities or fund assets only with matching FSA status. Incorporation, nominee, bookkeeping or registered-office work does not confer financial custody.	Entry, capital and reach Analyse discretion, control of assets, beneficial ownership, AML/CFT, professional eligibility, conflicts and client-money arrangements. General registration cannot replace CBO or FSA authority.
Family Pensions and social protection	Official instrument and authority Social Protection Fund and employment-law framework for statutory retirement arrangements, with FSA or CBO permission for regulated fund, insurance, investment or custody components	Activities and exclusions No universal private pension-operator licence has been verified in CBO or FSA schedules. A financial firm may perform only the component allowed by its existing permission.	Entry, capital and reach Confirm social-protection enrolment, scheme legality, funding, governance, investment, custody, member disclosure, tax and the competence of each authority for the proposed structure.
Family Gaming, betting and other special activities	Official instrument and authority No gaming permission is contained in CBO or FSA financial licence schedules; separate Oman criminal and local law controls availability	Activities and exclusions A bank, payment, securities, crowdfunding or VASP registration does not authorise gaming, betting or lottery activity. Processing funds cannot legalise the underlying product.	Entry, capital and reach Do not infer permission from a financial status. Obtain current Oman legal advice before designing or marketing any chance-based function.

Entry conditions

The application must use the correct authority and the current instrument

An Oman market-entry file begins by identifying who accepts deposits, controls payment value, transmits money, provides credit, solicits investors, manages or holds assets, underwrites insurance or performs virtual-asset functions. The memorandum allocates each activity to CBO, FSA, the Social Protection Fund or another competent body and states whether the required status is a licence, approval, registration or product decision. The applicant must use the permitted Omani legal form, maintain required offices and operational presence, disclose ultimate owners and controllers and appoint directors, senior management, compliance, risk, AML and technology functions suited to the category. The programme of operations must reconcile customer journeys and funds flows with forecasts, current capital or solvency, liquidity, safeguarding or custody, market conduct, complaints, cyber security, outsourcing, continuity and wind-down. Virtual-asset files require an additional gap analysis: Decision 35/2023 registration and AML duties are verified, but no complete enacted general licensing route should be assumed without new official evidence. Current forms, capital calculations, fees and technology requirements must be checked at filing. A commercial registration, sandbox dialogue, preliminary decision or VASP registration does not promise a broader permission or launch date.

Regulator-facing process

An Oman CBO and FSA mandate, stage by stage

The sequence records which legal status is proven and keeps unverified virtual-asset assumptions out of the operating plan.

Stage 01 - Classification

Separate CBO, FSA and specialist functions

Map deposits, payments, e-money, FX, finance, securities, funds, insurance, crowdfunding, virtual assets, administration and pensions.

For virtual assets, distinguish mandatory Decision 35/2023 registration from the UNVERIFIED full licensing framework and classify every adjacent financial service separately.

Stage 02 - Applicant

Build the eligible Omani structure and control framework

Evidence owners, controllers, capital, directors, licensed people, local operations, governance, AML/CFT, client assets, technology and outsourcing.

Ensure corporate objects, customer contracts, bank accounts, forecasts and systems describe exactly the activity presented to CBO or FSA.

Stage 03 - Review

Use the current authority process

Submit the prescribed forms and answer capital, fitness, conduct, technology, safeguarding, custody and operational-readiness questions.

Only the final CBO or FSA decision and verifiable register record evidence the approved scope. Preliminary contact does not do so.

Stage 04 - Activation

Launch within the recorded permission

Confirm capital, premises, people, settlement or custody, systems, policies, reporting accounts, complaints and counterparties before serving users.

New products, branches, key outsourcing and a change of control require category-specific prior approval or notification analysis.

After entry

Ongoing supervision stays with the authority and category

Oman-regulated firms maintain the capital or solvency, governance, fitness and propriety, AML/CFT, sanctions, safeguarding or custody, conduct, complaints, cyber security, outsourcing, audit and regulatory reporting duties of their permission. CBO banks, PSPs, money service businesses and finance and leasing companies follow different prudential and reporting frameworks. FSA securities firms, funds, insurers and crowdfunding operators likewise have separate capital, client-asset, market-conduct and disclosure obligations. A VASP registration under Decision 35/2023 carries financial-crime duties but must not be used to imply a still-UNVERIFIED general licensing scope. New products, token functions, client classes, branches, agents, material providers or cross-border marketing require fresh perimeter review. A direct or indirect change of control, acquisition, merger or incoming controller can require prior approval. Buying shares leaves any licence or registration with the Omani legal entity and imports its full supervisory history. Diligence must verify the current CBO or FSA record, restrictions, capital, customer assets, reporting, complaints, enforcement and technology dependencies.

Verify it yourself

Primary official sources

Central Bank of Oman financial-system directories
Official CBO pages identify banks, finance and leasing companies, money exchange businesses and the central bank's supervisory perimeter - cbo.gov.om.
CBO Banking Law and payment-service policy
Official CBO material covers Banking Law 2/2025 and the licensing policy for payment service providers - cbo.gov.om.
Financial Services Authority company services
Official FSA services list securities-company, insurance-intermediary and crowdfunding applications and supervision - fsa.gov.om.
FSA Securities Law and crowdfunding material
Official FSA legislation and releases cover securities licensing, funds, custody and crowdfunding under Decision 153/2021 - fsa.gov.om.
FSA Decision 35/2023 VASP materials
Official FSA material supports mandatory VASP registration and AML/CFT controls but not an assumption of a complete enacted general licence framework - fsa.gov.om.

FAQ

Oman regulator dossier questions

01 Does Oman have a verified full VASP licence?

A mandatory FSA VASP registration and AML/CFT route under Decision 35/2023 is verified. A complete enacted and operational general licensing framework remains UNVERIFIED as of 11 July 2026.

02 Who licenses payment providers and money exchange?

The CBO licenses payment service providers and money service or exchange businesses. The precise service, e-money and remittance scope must match the CBO record.

03 Who regulates crowdfunding?

FSA handles securities or equity crowdfunding under its platform rules. Loan-based crowdfunding falls within the CBO perimeter under the 2025 Banking Law.

04 Can a finance and leasing company take deposits?

No, not merely because it has a finance-company licence. Deposit taking is reserved to the appropriate CBO banking status.

05 Does an Oman licence cover the GCC?

No. Oman permissions are domestic and activity-specific. Host-country permission analysis remains necessary in every other market.

Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. Regulatory statements are made as of July 2026. This page is general information only, not legal, regulatory, tax, investment or financial advice. FSA Decision 35/2023 VASP registration is not represented as a complete general virtual-asset licence, whose enacted and operational status remains UNVERIFIED. Verify current legislation, official registers, conditions, application forms, capital method, fees and transition notices before relying on any Oman permission or market-access statement.

Tell us what you need

Scope a regulated route in Oman

Bring the products, Omani structure, controllers, customer locations and complete funds and asset flow. SKY7 will map CBO, FSA and any specialist-authority evidence. Advisory fees and entity prices are on request.