Banks are required to separate customer funds accounts (CMA) from the other assets of licensed virtual asset service providers (VASP). They also need to monitor compliance with anti-money laundering and counter-terrorism financing regulations. In addition, banks are obliged to conduct thorough checks of each VASP to assess risks. Banks are also required to report any suspicious transactions to Pakistan's financial monitoring authorities. The ban on servicing VASPs had been in place since 2018. These changes come after the adoption of the Virtual Assets Act in March. However, banks themselves are still prohibited from investing in cryptocurrencies, trading them, or holding them on their balance sheets.