What Is a Digital Bank in Iraq?

Overview

Iraqi regulatory authorities have introduced a new licensing category specifically for digital banks, a development that represents the most significant structural change to Iraq’s banking framework in recent years. For investors, founders, and their legal advisers, understanding precisely what this new category means in legal terms is the essential starting point.

This article sets out the legal definition of a digital bank under Iraq’s regulatory framework, the scope of activities that a digital bank is and is not authorized to perform, the regulatory basis on which this new category was created, and the key legal implications that flow from these definitions.

This is the first article in Etihad Law Firm’s 12-part legal guide to establishing a digital bank in Iraq. Subsequent articles address eligibility, capital obligations, the licensing process, permitted activities during the pilot phase, governance requirements, and the legal conditions that must be satisfied at each stage of the licensing journey.

1. Legal Definition of a Digital Bank

Under Iraq’s banking regulatory framework, a digital bank is legally defined as a bank that provides its services exclusively through modern digital channels primarily internet-based platforms and mobile applications and that operates under the full supervisory authority of the Central Bank of Iraq (CBI).

Full Banking Authorization

• A digital bank is not a payment institution, an electronic money issuer, or a fintech company. It is a bank in the full legal sense authorized to accept deposits, extend credit, and provide payment services subject to the same regulatory obligations as any other licensed bank in Iraq.
• This means that a digital bank must meet the same foundational legal requirements that apply to all banks operating under Iraqi banking legislation: minimum capital, governance standards, fit and proper requirements, anti-money laundering obligations, and ongoing supervisory obligations to the CBI.
• The digital nature of the institution does not reduce or modify these core banking obligations. It adds to them, digital banks carry additional specific obligations relating to technology infrastructure, cybersecurity, digital onboarding, and data protection that go beyond what is required of traditional banks.

No-Branch Requirement

• The legal requirement that a digital bank provide its services exclusively through digital channels is absolute. A digital bank in Iraq is prohibited from opening branches whether inside Iraq or abroad that are accessible to the public for the provision of banking services.
• The only physical presence permitted is a single administrative headquarters located within Iraqi territory. This headquarters is restricted to internal administrative functions and may not be used to provide banking services to members of the public.
• This prohibition is a defining legal characteristic of the digital bank license. Any institution wishing to operate a branch network must seek a different category of license, the digital bank framework is not available to hybrid models.

Regulatory Oversight

• A digital bank operates under the complete supervisory jurisdiction of the Central Bank of Iraq. This is not qualified or partial oversight, the CBI has full authority to set requirements, conduct examinations, issue instructions, impose conditions, and revoke licenses.
• The supervisory relationship with the CBI is continuous and begins from the point of preliminary approval, not from the point at which a full license is granted. Founders and investors should be aware that the CBI’s oversight applies throughout the pilot phase, and that non-compliance at any stage of the licensing journey carries legal consequences up to and including cancellation of the authorization.

2. Legal Basis for Licensing Framework

The digital bank licensing framework has been issued by the Central Bank of Iraq in exercise of its statutory authority under Iraqi banking legislation. This legislation grants the CBI the authority to license and supervise banking activity in Iraq, to prescribe the conditions for the grant of licenses, and to issue binding regulatory instruments governing the conduct of licensed institutions.

The framework does not create a new legal entity type, a digital bank is constituted as a joint stock company under Iraqi company law, in the same manner as a conventional bank. What the framework creates is a new licensing category, with its own specific conditions, authorized scope of activity, and regulatory obligations.

This legal architecture has important practical implications:

• The digital bank must be incorporated as a joint stock company under Iraqi law before a full license can be granted
• All provisions of Iraqi banking legislation that apply to banks generally also apply to digital banks, unless expressly modified by the digital bank framework
• Where the digital bank framework imposes requirements that differ from or are additional to the general banking legislation, the more specific digital bank requirements take precedence
• The framework does not override or modify existing Iraqi law, it operates as a layer of specific requirements that sit on top of the existing legal architecture

Regulatory Instruments That Govern a Digital Bank

A digital bank in Iraq is governed by a suite of regulatory instruments issued by the CBI. Understanding the relationship between these instruments is important for legal advisers working on licensing applications and compliance programmes.

• The primary regulatory instrument sets out the conditions for the grant of a digital bank license, the requirements that must be met before and during the pilot phase, the authorized scope of activities, the governance requirements, and the grounds on which a license may be suspended or revoked. This is the foundational legal document for any digital bank licensing exercise.
• The Standards Booklet sets out all quantitative and qualitative standards that a digital bank must meet covering ownership structure, governance, technology and infrastructure, financial metrics, and compliance obligations. Each standard is numbered and forms part of the formal assessment framework that the CBI applies when evaluating compliance.
• The Assessment Guidelines explain, standard by standard, precisely how the CBI will assess compliance. They set out what evidence is required, what tests will be applied, and what the CBI expects to see in terms of documentation, policies, systems, and practices. For legal advisers preparing a licensing application, these guidelines are the primary technical reference.
• The Timeline Document establishes the phased schedule for compliance specifying which standards must be met by the time of initial application, which must be met during the pilot phase, and which must be fully satisfied before a full license can be granted. Failure to meet the timelines set out in this document is a ground for cancellation of the authorization.

Legal Implications for Founders and Investors

The legal definition and framework described above give rise to a number of practical implications that founders and their legal advisers should consider at the outset of any licensing exercise.

• A digital bank must be incorporated under Iraqi law as a joint stock company. Foreign investors wishing to establish a digital bank in Iraq must therefore either incorporate a new Iraqi entity or acquire an existing one, a branch or representative office structure is not sufficient.
• A digital bank license cannot be transferred to another entity. Any change in the legal structure, name, or registered address of the licensed entity requires prior approval from the CBI. Investors should factor this into any corporate structuring exercise.
• The CBI’s supervisory jurisdiction does not commence at the point of full license grant. It applies from the moment a preliminary approval is issued. This means that the institution and its founders are subject to ongoing regulatory obligations, reporting requirements, and the risk of authorization cancellation from the very beginning of the pilot phase.
• Where the digital bank framework imposes requirements that are more onerous than those in the general banking legislation, the framework requirements apply. Investors and legal advisers should not assume that compliance with general banking law is sufficient, the digital bank-specific standards must be independently assessed and satisfied.
• The framework explicitly provides that failure to comply with the prescribed timeline at any point will result in cancellation of the license. This is not a discretionary power, it is a stated legal consequence. Founders, investors, and board members should treat the compliance timeline as a binding legal obligation, not merely a regulatory target.