Providers must update these assessments at least every two years and may not recommend or offer crypto services if essential information is missing.

The MNB also requires firms to document their responsibility for ensuring that recommended crypto products match clients’ profiles and to justify that any portfolio changes provide greater benefits than costs.

For crypto‑transfer services, companies must give clients clear, advanced electronic information on supervisory authorities, service features, consent rules, rejection conditions, execution timelines, and the point at which a transfer becomes irreversible on the DLT network.

Customers must also be informed of all related fees, mi nimum technical requirements, fraud‑notification procedures, and deadlines for reporting unauthorized or incorrect transfers, including the maximum amount of provider liability.