Skip to main content
T TON Adoption
Regulation PILLAR · 2026

TON regulation 2026: complete legal guide

Legal status of TON in Russia, EU and CIS, taxation, AML rules, OFAC sanctions, Travel Rule, MiCA — the regulatory map for TON users and traders in 2026.

Author
· research lead · regulation desk
Published
8 min read

Crypto regulation in 2026 is no longer a “grey zone” — it’s several overlapping legal regimes: national laws in Russia, EU, US, CIS, plus the constantly shifting practice of OFAC, FATF, and FinCEN. For a TON user this means: the answer to “what can I do with TON” depends on where you’re a resident, which exchange you use, and what trade size. This guide is the map across the main regimes, with links to deep-dives.

TL;DR

Each layer in detail below.

Since 2021, Federal Law 446-FZ (“On Digital Financial Assets”) defines the key concepts: DFA (digital financial asset), digital currency, UTV. Under Russian law, Toncoin is a digital currency (not a DFA). Practically:

  • Permitted: holding, buying, selling, P2P exchange, transfers, DeFi use.
  • Prohibited: using as means of payment on Russian territory — i.e., accepting as payment for goods and services.
  • Required: declaring as property (for large amounts), paying PIT on sale income.

Since 2024 there’s an Experimental Legal Regime (ELR) for cross-border settlements using crypto. For an ordinary user the ELR isn’t available — it covers authorized operators in the Central Bank registry. Mining was legalised in 2024, with registration required for commercial operations.

Full breakdown — TON legal status in Russia 2026, including the registry structure, registration process, and banks that work with crypto exchange.

Layer 2: taxes — how to pay and how not to overpay

In Russia, income from crypto sales is subject to personal income tax. Basic calculation:

  • Tax base = (sale price – purchase price) × quantity.
  • Rate: 13% up to 2.4M RUB annual income, 15% above.
  • Declaration: 3-NDFL by 30 April of the following year.
  • Payment: by 15 July.
  • Cost proofs: receipts, bank statements, P2P-trade screenshots, contracts — keep for at least 3 years.

What’s taxed:

  • Selling TON / USDT-on-TON for rubles — yes.
  • Swapping TON for other crypto — formally a disposal (selling TON + buying X), theoretically taxable.
  • Receiving TON as payment — yes (as income from a service or contract).
  • Staking yield — not yet codified; recommended to report as “other income”.
  • Airdrops — yes, as “other income” at market price on receipt.

What’s not taxed directly:

  • Holding TON without trades — no.
  • Transfers between your own wallets — no (no disposal).

A special case is gift-flipping income — gifts don’t have a dedicated legal category, but NFT sale income falls under general rules. Detailed practice — taxes on gift-flipping income in Russia.

For users in other jurisdictions (US, EU, UK), the principle is similar but the rate and exemption structure differ. In all cases, document every trade.

Layer 3: 115-FZ and P2P trading — the real operational risk

115-FZ “On counteracting money laundering” is Russia’s main AML regulator. It doesn’t directly ban P2P crypto exchange, but banks must monitor suspicious operations and may freeze accounts or refuse operations when triggers fire.

Typical triggers:

  • “Fan-out” transfers — dozens of incoming/outgoing transfers to/from different individuals in a short period.
  • “Fragmentation” — multiple transfers just below internal control thresholds (49,999 RUB is the famous antipattern).
  • “Transit” operations — money arrives and leaves within 24 hours without a clear economic purpose.
  • Payment notes mentioning crypto — “payment for bitcoin”, “TON exchange”.

Practical recommendations:

  • Use only verified P2P platforms (Bybit, OKX, Bitget P2P — with escrow and arbitration).
  • Don’t split a large trade into many small ones — one large trade looks less suspicious than a stream of small ones.
  • Keep payment descriptions neutral (“transfer”, “loan return”, “gift”).
  • Have documents ready: source-of-funds proofs, reason for the operation.
  • Don’t use one bank for the bulk of P2P operations — diversification reduces risk-score concentration.

Full guide with typical block scenarios and real cases is on the Russian-language version of this article; an EN-targeted summary is in the where to buy TON in Russia guide.

Layer 4: OFAC, sanctions and USDT freezes

OFAC (Office of Foreign Assets Control) is the US Treasury sanctions arm. Key points for a TON user:

  • The TON network is not on the SDN list. Toncoin as an asset is not sanctioned. You can hold, trade, and use it.
  • Individual addresses — yes. Addresses tied to DPRK cyberattacks, ransomware, and some sectoral-sanctioned Russian individuals may be on the SDN list. Don’t send crypto to unknown addresses and check the list before large operations.
  • Tether freezes USDT. The Jetton USDT-on-TON contract has a centralised blocklist function. Tether used it publicly on TON in 2024–2025 several times, usually on OFAC or law-enforcement request. If your address gets caught up in an investigation, USDT can be frozen without notice.
  • Exchanges block users. Coinbase, Kraken, OKX and other large exchanges may refuse service to Russian residents or impose KYC restrictions. This isn’t a personal sanction — it’s exchange compliance policy.

Detailed sanctions-programme breakdown and precedents — OFAC sanctions and TON: what to know in 2026. Wider context (EU, UK, Switzerland regimes) — TON and sanctions: what to know.

Secondary sanctions in practice

“Secondary sanctions” doesn’t mean personal sanctions against you — it means counterparties refusing to work with anyone tied to sanctioned jurisdictions or counterparties. Real scenarios:

  • Exchange closed an account after KYC due to Russian citizenship.
  • EU bank refused account opening on learning of crypto income from Russia.
  • Legal entity can’t transact with Russian counterparts due to its partner-bank policy.

Not criminal, but operationally painful. The ready solution is diversification: multiple accounts, multiple exchanges, clear source-of-funds documentation.

Layer 5: MiCA in the European Union

MiCA (Markets in Crypto-Assets Regulation) — single EU crypto regulation, in force since June 2024. Core principles:

  • CASP licensing (Crypto-Asset Service Provider) — exchanges, custody, wallet providers must hold an EU-member-state licence. Bitstamp, Kraken EU, Bitpanda are licensed.
  • Special stablecoin regime — split into ART (Asset-Referenced Tokens) and EMT (E-Money Tokens). USDC, USDT fall under EMT. Issuers must hold reserves and undergo audits.
  • Consumer protection — mandatory risk disclosure, investor classification (retail/professional).
  • MiCA transitional period for non-CASPs runs until end-2026 — legacy operators finalising licensing.

For an EU-resident user:

  • You can buy TON via licensed CASPs (Bitstamp supports Toncoin).
  • USDT-on-TON works with restrictions — large operators may not offer it to retail.
  • Strict KYC/AML — passport, tax address, sometimes source-of-funds for large amounts.

Detailed user-side breakdown — MiCA and TON in EU.

Layer 6: Travel Rule (FATF Recommendation 16)

Travel Rule — FATF recommendation under which VASPs (Virtual Asset Service Providers — exchanges, wallet providers) transferring above a threshold must share sender/recipient data:

  • Name
  • Physical address
  • ID (passport)
  • Sender and recipient wallet addresses

Thresholds:

  • EU — €1,000 across all transfers (MiCA-driven).
  • US (FinCEN) — $3,000.
  • UK — £1,000.
  • Russia — not formally implemented, but under discussion.

In practice: when withdrawing from an exchange to self-custody, or moving between exchanges above the threshold, the sending exchange will request recipient data (wallet owner name, proof of ownership). Self-custody → self-custody transfers aren’t yet in scope, but FATF recommends extending coverage.

Mechanical breakdown — Travel Rule and TON: how tracking works.

Layer 7: Belarus, Kazakhstan and other CIS countries

Each CIS country has its own regime:

  • Belarus — crypto legalised since 2017, with the HTP (High-Tech Park) special regime offering tax benefits. Effectively a tax-free zone for private operations through 2025 (extended).
  • Kazakhstan — AIFC regulates; licensed regime for exchanges and custody. Mining legalised with electricity-consumption limits.
  • Uzbekistan — licensed exchange regime, private operations in a grey area.
  • Armenia — no specific regulation, general PIT regime applies.

Regime comparison and cross-border-operation recommendations — TON regulation in Belarus, Kazakhstan, EU.

Layer 8: where to buy TON in Russia and elsewhere

Regulation directly determines which purchase paths are available. In Russia — mostly P2P via major exchanges (Bybit, OKX, Bitget) and exchangers, plus CEX via VPN (with operational risks). In the EU — via licensed CASPs, direct card purchases on Bitstamp/Bitpanda. In the US — Coinbase, Kraken (but Toncoin listing isn’t universal).

Full guide for a Russian resident — where to buy TON in Russia: complete guide. Universal walkthrough — how to buy Toncoin (2026).

Glossary for this topic

  • 115-FZ — Russian anti-money-laundering law.
  • 152-FZ — Russian personal-data law.
  • 259-FZ — Russian DFA law.
  • KYC — Know Your Customer.
  • AML — Anti-Money Laundering.
  • Travel Rule — FATF Recommendation 16.
  • FATF — Financial Action Task Force.
  • OFAC sanctions — Office of Foreign Assets Control.
  • SDN list — Specially Designated Nationals.

Sources and deep reading

Further reading

Regulation moves faster than technology. This guide is a snapshot from May 2026. The core principles — jurisdiction diversification, trade documentation, proactive legal consultation before large operations — remain valid. For specific thresholds, rates, and registries, always cross-check official sources.

Frequently asked

The network, Toncoin as an asset, and trades involving it are not banned — but using cryptocurrency as a means of payment for goods and services in Russia is prohibited (Federal Law 446-FZ, in force since 2021). You can hold, trade, exchange to fiat via P2P, declare as property, and pay personal income tax on profits. You cannot use it to pay for goods and services on Russian territory.
Income from cryptocurrency sales is subject to personal income tax (13% up to 2.4M RUB annual income, 15% above). The tax base is the difference between sale and purchase price. You need to keep records of all trades, file a 3-NDFL declaration by 30 April of the following year, and pay tax by 15 July.
115-FZ is the Russian anti-money-laundering law. Banks must monitor suspicious operations and may block cards when triggered by 'fragmentation', 'fan-out transfers', or P2P-exchange indicators. In practice this means: use only verified P2P platforms, don't fragment a large deal into dozens of small ones, keep payment descriptions neutral, and have documentation ready on request.
No, the network itself and Toncoin are not on the SDN list. Sanctions hit individual addresses (DPRK cyberattacks, ransomware groups, some Russian individuals), not the network as a whole. Tether can freeze USDT-on-TON on specific addresses on OFAC or US law-enforcement request — this has happened on TON in 2024–2025.
There's no direct OFAC criminal sanction against ordinary Russian users. The risk is operational: your bank, exchange, or wallet may refuse service, freeze assets, or close your account due to ties to a sanctioned jurisdiction. Non-Russian exchanges often restrict or block Russian residents through stricter KYC.
MiCA (Markets in Crypto-Assets Regulation), in force since 2024, requires crypto services (CASPs) to be licensed. For users it means: legal European exchanges (Bitstamp, Kraken EU, Bitpanda) operate under strict KYC/AML, USDT and USDC fall under special EMT/ART regimes. There's no direct ban on TON in MiCA, but stablecoins above thresholds carry additional issuer-reporting burdens.
Travel Rule is a FATF requirement under which VASPs (exchanges, wallet providers) transferring above €1,000 (€/$) must share sender and recipient data. On TON this means transfers between exchanges typically require KYC. Self-custody → self-custody transfers aren't yet covered, but FATF recommends extending regulation here too.
In Russia: MVD (crime report), Prosecutor's Office, Central Bank (complaint about financial organisation), Roskomnadzor (phishing sites). Internationally: IC3.gov (FBI), Action Fraud (UK), Europol-EC3. Recovery is limited with anonymous foreign addresses, but documenting the incident is important for future forensics and insurance claims.

Related