Bahamas Commission rates digital-asset sector Medium-High risk

The Securities Commission of The Bahamas has published its 2026 public sectoral risk assessment for digital assets, covering the period from 1 January to 31 December 2025.

The sectoral risk assessment rates the sector Medium-High, measuring overall risk at 0.68 before mitigation and residual risk at 0.32. It is a published assessment, not an order, enforcement action or new rule.

A sectoral rating, not a firm finding

The assessment covers 32 businesses and exchanges registered under the Digital Assets and Registered Exchanges Act, 2024. They include exchanges and trading platforms, hot and cold-storage custodians, payment and broking services, management services and token-offering activity.

The Commission reported 2,159,398 client relationships and combined client assets of $33,651,174,865. Of those relationships, 2,158,022 involved clients resident abroad. The report says the rating reflects the profile of the registered entities rather than the nature of virtual assets themselves.

The principal drivers are sector concentration, wholly remote onboarding, rapid cross-border settlement and interaction with overseas virtual-asset businesses outside any registration regime. Blockchain analytics also identified and quantified indirect exposure to mixing services and sanctioned addresses.

The report does not identify deficient registrants or make an adjudicated finding of misconduct against the sector or any individual firm. It says the rating is moderated by registration and supervision, the absence of cash activity, complete screening coverage among reporting registrants and high reported rates for compliance appointments, risk assessments and staff training.

What the Commission expects

Reporting registrants said they screen 100% of transactions through blockchain analytics and filed 332 suspicious transaction reports across their last three reporting periods. Travel Rule information was complete for approximately 99% of transfers when weighted by client base and 96% on a simple average across reporting registrants.

The Commission expects registrants to maintain and evidence full Travel Rule compliance for transfers sent and received. Their policies should address the execution, rejection, suspension and return of transfers when warranted. The report also expects full blockchain-analytics screening, action on mixer and sanctions exposure, suspicious-activity reporting and predominantly cold-storage custody with documented key-management governance.

The assessment says every registrant receives an entity rating through the Commission’s Entity Risk Register, based on its Risk Data Return. That rating drives supervisory intensity, ranging from baseline monitoring to intensive engagement. The statement describes the Commission’s supervisory approach; the public edition does not say that the assessment itself creates new licensing conditions or changes firms’ legal status.

The report says transaction-level testing identified deficiencies at a small number of registrants and that those deficiencies are subject to remediation. The public edition does not identify the firms, provide a remediation deadline, announce a new registration window or schedule a supervisory action.

It also does not identify a next docket or other scheduled follow-up event. Later Commission supervisory records, if published, would show how these expectations are applied to individual registrants.