Prohibited and Restricted Jurisdictions List

As of October 12, 2026, zerohash will not conduct any business activity with any entity or individual located in the following countries and jurisdictions (new listings are noted in parentheticals as “New”):

• Afghanistan

• Albania (Western Balkans)

• Bahamas

• Belarus (c)

• Bosnia and Herzegovina (Western Balkans)

• Central African Republic

• Cuba

• Democratic Republic of the Congo

• Ethiopia

• Gaza Strip

• Haiti

• Iran

• Iraq

• Japan

• Kosovo (Western Balkans)

• Lebanon

• Libya

• Mali

• Montenegro (Western Balkans)

• Myanmar/Burma

• Nicaragua

• North Korea

• North Macedonia (Western Balkans)

• People’s Republic of China (PRC)

• PRC Special Autonomous Region (SAR) Hong Kong (b)

• Russia (c)

• Serbia (Western Balkans)

• Singapore (New)

• Somalia

• South Sudan

• Sudan

• Syria

• Russian Occupied Regions of Ukraine (Crimea, Luhansk AKA LNR, Donetsk AKA DNR, Kherson, Sevastopol, Zaporishia) (c)

• United Arab Emirates (New)

• Venezuela

• Yemen

As of October 12, 2026, the United Arab Emirates (except the Dubai International Financial Centre’s (DIFC) financial free zone and the Abu Dhabi Global Market (ADGM)) has been added to this list as prohibited/restricted. No new customers will be permitted from this jurisdiction. Existing customers will be permitted to withdraw/sell existing assets up to 30 days after the release date. Note, zerohash is also able to conduct activity with a customer that is independently licensed in the UAE.

On May 21, 2026, Guatemala, Guinea, Guinea-Bissau, Pakistan, and Zimbabwe were no longer included on this list and, therefore, reinstated as permitted but placed for a minimum of one year on the Permitted Higher Risk Geographies list).

On May 21, 2026, Singapore was added to this list as prohibited/restricted. No new customers will be permitted from this jurisdiction. Existing customers were permitted to withdraw/sell existing assets up to 30 days after the release date.

(a) zerohash’s affiliate in Europe (zerohash europe b.v.) obtained registration as a virtual asset service provider with the Dutch Central Bank (DNB) on 24 October 2024 and received its license to operate under the MiCA Regulation in The Netherlands from the Authority for the Financial Markets (AFM) on 29 October 2025. zerohash europe b.v. also has received an Electronic Money Institution (EMI) license from De Nederlandsche Bank (the Dutch Central Bank). zerohash clients that wish to offer crypto asset services into European Economic Area (EEA) countries (including Germany, Italy, and Spain) should consult their zerohash relationship manager to include zerohash europe in their services. Note that as of August 14, 2026, Hungary has implemented legislation that makes cross-border crypto exchange for Hungarian residents practicable again and zerohash europe will again support customers located in that country.

(b) As of June 1, 2023, all participant types from Hong Kong are blocked from onboarding and buying/acquiring assets. Existing participants are blocked from buying/acquiring assets but will be allowed to 1) sell/withdraw and 2) update their address if they are no longer located in Hong Kong.

(c) Russia-Ukraine War policy established March 2022. Restrictions do not apply to territory controlled by the Government of Ukraine as of the time of this update.

NOTE: zerohash reserves the right to make changes to this list at any time based on zerohash entity, products, services, or other relevant legal and regulatory factors.

Exceptions

• In Canada, zerohash does not support custody so as a platform you will need a 3rd party to be a custodian or move off immediately to an external third-party wallet. zerohash is also only able to support activity involving the following crypto-currency assets in Canada: Bitcoin Cash (BCH), Bitcoin (BTC), Ethereum (ETH), and Litecoin (LTC).
• For the United Kingdom (UK), zerohash llc supports customer onboarding and activity where permitted in compliance with the existing Financial Promotions (FinProm) framework.
• No Platform or business with more than 50% ownership by one or more nationals of a prohibited or restricted jurisdiction, but the permanent resident of a permitted (and not higher risk) country or jurisdiction, will be approved as a customer of zerohash without successful completion of additional risk mitigation measures.