We get Cambodian and foreign FinTechs approved onto the government rails — and keep them compliant.
CamFinTech is a fee-only regulatory approval-navigation and compliance firm. We navigate NBC, NBFSA, TSC, SERC, and GDT approvals for Bakong/KHQR, CamDX/CamDigiKey, and CamInvoice — raising you to the regulator's standard. We're your single accountable partner for the whole journey, and we coordinate our vetted legal, tax, and integration partners transparently. We never hold your funds and never operate a rail; the technical build is delivered by accredited partners we coordinate.
ភាសាខ្មែរ — Khmer language edition coming soon, pending native editorial hire.
The problem we solve
Cambodia's rails are powerful — but getting onto them defeats most applicants. Approval is opaque and multi-gated (an NBC licence, a sponsoring member bank, a separate CamDX membership), and it turns on AML/CFT, governance, capital planning, and documentation — not code.
Most FinTechs have no in-house risk or compliance function, so they put engineers on regulatory problems they were never trained for. Many applicants report being turned back as "non-compliant" with no further explanation. The result is delay, cost, and applications that don't clear the bar.
We are the missing risk-and-compliance function. Our people have hands-on NBC, NBFSA, TSC, SERC, and GDT experience — a competency the regulator itself documents as scarce in Cambodia.
What we do (and don't)
The boundary is explicit and transparent. We sell process competence; reserved work goes to licensed partners; the technical build goes to accredited Service Providers.
check_circleWe do
- Navigate the approval for each rail (PSP/Bakong, CamDX/eKYC, CamInvoice, SERC DASP)
- Build your risk & compliance programme (AML/CFT, governance, MLRO support)
- Represent Cambodian and foreign FinTechs before the regulators
- Coordinate the accredited Service Provider who delivers the technical build
- Route reserved work (legal, tax filing, pen-test) to licensed partners — transparently, never marked up
blockWe don't
- Hold client funds or operate any rail
- Write the integration code — that's our accredited partners
- Lobby, trade on contacts, or sell "access"
- Take a cut of your transactions
- Promise an outcome we can't control
What we navigate
Eleven productised service vectors across four areas — applied across regulated FinTechs (banks, MFIs, PSPs, insurers, securities/crypto, alt-lenders) and rail-using enterprises.
Core Rail Integrations
SRV-01
CamDX / eKYC Enablement
Verify your customers digitally in seconds. We navigate the approval to connect to Cambodia's national identity system and coordinate the integration build.
SRV-02
Bakong / KHQR Integration
Take and send payments on Cambodia's national rails — we navigate PSP licensing or member-sponsorship and coordinate the technical build.
SRV-03
CamInvoice Readiness
Be ready for e-invoicing before the B2B mandate phases in. Gap assessment + costed plan against the GDT's rules.
SRV-04
CamInvoice SP-Enablement
Go live on e-invoicing without the headache. We coordinate accredited Service Providers to connect your ERP — every invoice clears automatically.
Strategic Services
SRV-05
Licensing-Readiness
Know exactly which NBC, NBFSA, or SERC licence you need — and be ready to win it. Gap mapping + application preparation.
SRV-06
Market-Entry Consulting
For foreign FinTechs entering Cambodia — entity setup, licensing strategy, and a step-by-step route onto the government rails.
Risk & Security
SRV-07
AML-Programme Design
Build an anti-money-laundering programme regulators trust. CDD/EDD, transaction monitoring, CAFIU reporting, MLRO support.
SRV-08
Security / Pentesting
Pre-launch security reviews and penetration tests aligned to NBC's TCRMG expectations — routed to an accredited security firm.
SRV-09
Data-Protection Protocols
Get ahead of Cambodia's incoming Personal Data Protection Law. Consent, retention, processor governance, DPO-support.
SRV-11 · Flagship
DASP Approval-Readiness
End-to-end readiness for SERC's Prakas 093 digital-asset licensing regime (in force 30 Dec 2025). AML/CFT build, governance roster, sandbox-to-full readiness. Learn more →
Enablement
SRV-10
Operational Training
Hands-on training so your team can operate the rails, follow the compliance steps, and keep everything running after we've handed over.
Technical build delivered by our accredited partners (BanhJi, Innolab/Odoo, MAQSU, SAP/Crimson, KOSIGN, Metfone, GK-Smart). We coordinate, advise, and run the compliance programme — we don't compete on engineering. Pricing is indicative; every engagement is validated by quote.
Why CamFinTech
Five things that make us the firm regulator-fluent FinTechs hire to navigate the approval and run the compliance.
Regulator-fluent, not just regulation-literate
Our people have hands-on NBC, NBFSA, TSC, SERC, and GDT experience — a competency NBFSA's own 2024–2028 FinTech plan documents as scarce in Cambodia.
We raise you to the standard
We make your application the one the regulator wants to approve — documented, governed, compliant — so it doesn't come back unexplained.
Capital-light and conflict-free
Fee-only. We never touch your money or your rail. Our incentives are simple: get you approved and keep you compliant.
One coordinator across every rail
Payments, identity, and tax — navigated together, with the build handed to the right accredited partner. One plan, one point of contact.
Single accountable partner, transparently
Where a step needs a licensed lawyer, tax agent, or integrator, we coordinate our vetted partners and tell you exactly who does what. You're never handed a list of vendors to chase, and we never mark up their work.
How it works
Five steps from "interested" to "operating and compliant."
- 1
Readiness diagnostic
Which rails, which licences, where you'd fail today.
- 2
Approval-navigation
We assemble and shepherd each application. You remain the applicant of record.
- 3
Compliance build
AML/CFT, governance, and the controls regulators expect before go-live.
- 4
Coordinated integration
An accredited Service Provider builds; we manage delivery, UAT, and handover.
- 5
Ongoing compliance
Retainer or MLRO-support so you stay approved.
Proof and credibility
We're early. Pre-logo discipline matters: we don't publish hypothetical case studies as if they were real engagements. What we'll show you when you ask:
- Founder track record. Hands-on regulator-side experience that staffs the moat — the kind a procurement team can interrogate in a call.
- Methodology walk-throughs. Our DPI onboarding architecture, the integrity STOP-screen, the build-then-retainer ladder — explained against your specific rail and use case.
- Voluntary TCRMG-2026 alignment. We hold our own operations to NBC's Technology and Cyber Risk Management Guidelines — even as a non-BFI — and run our own infrastructure to that standard. Process competence isn't just what we sell.
- The Riel Report. Cambodia FinTech intelligence read by the financial-services industry, regulators, and multilateral analysts — published by us at riel.report.
About
CamFinTech is a Phnom Penh–based fee-only regulatory approval-navigation and compliance firm focused on Cambodia's Digital Public Infrastructure rails. Founded 2024 by William Mallett, Founder & Managing Director.
Our moat is ex-regulator talent — NBC, NBFSA, TSC, SERC, GDT — not engineering capacity. We navigate the approval and run the compliance; accredited partners build the integration.
Honesty notes
- Pricing is indicative. Every figure on our materials is a planning estimate, validated by quote at engagement scoping.
- Some mandates are anticipatory. Mandatory B2B e-invoicing is phased (~2026–2027) and Cambodia's Personal Data Protection Law is not yet promulgated. We help you get ahead of these mandates; we never claim you're already in breach.
- We're pre-revenue and early. No fabricated case studies, no anonymised "leading bank" logos. Ask us about our methodology and let our work in the discovery call speak for itself.
Book a readiness call
Tell us which rail you're navigating. We'll come back the same day, in Phnom Penh business hours.
General inquiries
DASP / Prakas 093
Messaging
Office
30 Preah Norodom Boulevard
Khan Daun Penh
Phnom Penh, Kingdom of Cambodia
Partner & subcontract inquiries (compliance-inside / white-label): partners@camfintech.com