AFSA’s warning on OKX, HTX, Bitget and MEXC is not a routine enforcement notice. It is a public test of how Kazakhstan draws the line between regulated crypto infrastructure and informal platform access.

What the regulator said

AFSA reminds the market that organising digital-asset circulation in Kazakhstan requires the appropriate licence, authorisation or recognition under the AIFC framework or the legislation of Kazakhstan. In the same notice, AFSA names OKX, HTX, Bitget and MEXC — four global platforms publicly known under names or brands covered by the warning.

This is a rare step for the region. Most Eurasian regulators still work through generic warnings without naming names. AFSA names specific platforms in public — and by doing so sets the rule the rest of the market will now have to live with.

How we read this: the perimeter test

We see this less as an enforcement story about four exchanges and more as a regulatory move taking shape. We will call it the perimeter test: the relevant question is not whether the brand is globally known, but whether the entity is authorised for the market it is actually reaching.

Kazakhstan already has a formal route for digital-asset activity. AFSA supervises firms and market institutions in or from the AIFC, while the wider national perimeter also involves regulators such as the National Bank of Kazakhstan and the Agency for Regulation and Development of the Financial Market. This produces a two-layer model: AIFC-based supervision for certain regulated activities, and a national perimeter for how digital-asset services can be offered to residents.

The perimeter test is the question: what falls inside that perimeter when a platform is in fact targeting residents. Advertising, local-language support, marketing partnerships and P2P flows are all signals of presence, even if the legal entity sits somewhere else entirely.

Visibility is not authorisation

AFSA explicitly says that international recognition, a website, a mobile app, social-media activity or heavy advertising does not mean a platform is authorised by AFSA or entitled to provide regulated services within the AIFC legal framework.

Visibility is not authorisation.

For users, the practical takeaway is to verify regulatory status before transferring money, digital assets or personal data. AFSA points consumers to the official public register and recommends caution around:

  • unclear regulatory status
  • high-return promises
  • high leverage offers
  • referral campaigns
  • requests for documents or payment information

The risks the regulator highlights become easier to read through the perimeter-test lens: users of unlicensed platforms lack clear legal protections because those platforms have not entered the supervisory perimeter and carry no corresponding duties around AML/CFT, advertising, margin trading, cybersecurity or user-data handling.

What this changes for platforms

For platforms and ecosystem teams, the message is sharper than it looks. Kazakhstan is no longer treating digital-asset platform access as a purely offshore question when local users are being targeted. Public promotion into the market is becoming part of the regulatory perimeter.

When teams with this profile come to RiskOS Labs for a pre-licensing assessment, the first cut is always the same: what perimeter does the platform actually occupy — where is the marketing, the support, the payment integrations, the P2P volume — and how does that compare with its legal regulatory position. The gap is almost always there. AFSA has now publicly named what that gap can lead to in a specific market.

The notice fits the broader Kazakhstan pattern Silk DeFi is tracking: regulated digital-asset activity is being channelled toward licensed infrastructure, while unlicensed access is increasingly framed as a consumer-protection, AML/CFT and market-discipline problem.

Silk DeFi is a research project on crypto, DeFi, and regulation across Eurasia.

Need a regulatory or DeFi risk read on your jurisdiction? RiskOS Labs runs pre-licensing assessments and regulatory reviews for teams operating in Eurasian markets.