Custodial wallet / SaaS in Angola
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Angola with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification (full name, address, date of birth, nationality, official ID) under Lei n.º 5/20
- For legal entity clients: verify legal name, registration number, beneficial owners (≥25% threshold), articles of incorporation, and senior managing officials
- Understand purpose and intended nature of the business relationship
- Collect source of funds/wealth for high-risk clients or transactions
- Ongoing monitoring of business relationships and transactions for consistency with risk profile
- PEP screening and enhanced CDD (ECDD) with senior management approval for PEP relationships
- Sanctions screening against national and UN Security Council sanctions lists
- Risk-based approach — more intense measures for complex transactions, non-face-to-face relationships, high-risk jurisdictions, large sums
- Technology-specific CDD for VASPs: verify wallet ownership where practical and maintain transaction traceability
- Obligation to report suspicious transactions/attempted transactions promptly to UIF (Unidade de Informação Financeira)
- No tipping-off prohibition
- Record-keeping: customer ID records, transaction records, STRs — minimum 5–7 years after relationship ends
- Supervised by UIF and BNA under Law No. 5/20
Key Restrictions
- BNA Notice No. 03/2019 prohibits Angolan financial institutions (banks, payment service providers) from carrying out any transactions involving virtual assets, holding them, or providing services related to them — this blocks any banking rails within Angola for fiat on/off-ramp
- No dedicated virtual asset service provider (VASP) licensing framework exists — any custodial wallet/SaaS offering would need to assess whether the underlying assets are securities under Lei do Mercado de Valores Mobiliários (Law No. 22/15)
- If tokens held in custody are classified as securities, the operator would need CMC authorization, prospectus registration, and ongoing disclosure obligations
- Angola's sole stock exchange (BODIVA) does not list or facilitate trading of cryptocurrency or security tokens, creating a dead end for traded security tokens
- Notice No. 04/2018 states virtual currencies are not legal tender, not issued/guaranteed by BNA, and not regulated by BNA or any Angolan entity — regulatory gap for non-security crypto assets
Key Risks
- No dedicated VASP custody licensing framework exists — operator relies on analogies to securities laws that may not fit custodial wallet services, creating legal uncertainty
- BNA prohibits financial institutions from engaging with crypto (Notice No. 03/2019), so no local banking partner can process fiat transactions for the service
- AML/CFT obligations under Lei n.º 5/20 apply broadly to financial activities but do not explicitly name VASPs, creating ambiguity on exactly which obligations attach to custodial wallet operators vs white-label clients
- If custodial services involve assets deemed securities, the operator could face unregistered securities offering liability
- White-label structure creates ambiguity on whether the SaaS provider or the white-label client bears AML reporting obligations — unclear regulatory guidance on allocation
- CMC has not provided guidance on digital asset custody or proof-of-reserves requirements — no segregation, insurance, or reserve attestation rules exist
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Notice No. 04/2018: Warned the public about the risks associated with virtual currencies, stating that they are not legal tender, are not issued or guaranteed by the BNA, and are not regulated by the BNA or any other Angolan entity.
Notice No. 03/2019: Prohibited Angolan financial institutions (banks, payment service providers, etc.) from carrying out any transactions involving virtual assets, holding them, or providing services related to them.
Lei do Mercado de Valores Mobiliários (Securities Market Law) - Law No. 22/15 of September 11, 2015:
Investment Tokens/Security Tokens: Any token designed to represent traditional securities on a blockchain, such as shares in a company, debt instruments, or units in a collective investment scheme.
Registration with the CMC: Any public offering of securities requires prior authorization from the CMC.
Prospectus Requirement: Issuers must publish a detailed prospectus containing all necessary information for investors to make an informed decision.
Disclosure Obligations: Ongoing disclosure requirements would apply to the issuer (e.g., financial reports, material events).
Regulated Exchanges: Trading would have to occur on a regulated exchange authorized by the CMC. Currently, Angola's sole stock exchange, BODIVA (Bolsa de Dívida e Valores de Angola), does not list or facilitate the trading of cryptocurrency tokens or security tokens.
AML/CFT Compliance: Exchanges and participants would need to adhere to anti-money laundering and combating the financing of terrorism (AML/CFT) regulations.
BNA's Prohibitions: The most significant "enforcement" has been the BNA's direct prohibition on financial institutions from engaging with crypto assets (Notice No. 03/2019). This is a preventative regulatory action rather than a reactive enforcement against a specific violation.
General Warnings: Ongoing public warnings from the BNA about the risks of virtual assets.
AML/CFT Focus (Hypothetical): Any future enforcement against illicit crypto activities would likely fall under existing AML/CFT laws, which are being strengthened in line with FATF recommendations. Unregistered offerings or fraudulent schemes involving crypto assets would likely be prosecuted under general fraud laws or laws against unauthorized financial activities, rather than specific crypto-securities violations.
Lei n.º 5/20, de 27 de Janeiro – Lei sobre a Prevenção e Combate ao Branqueamento de Capitais, Financiamento do Terrorismo e Proliferação de Armas de Destruição em Massa (Law No. 5/20, of January 27 – Law on the Prevention and Combat of Money Laundering, Financing of Terrorism and Proliferation of Weapons of Mass Destruction).
Legal Entities/Companies: Obtain and verify legal name, registration number, address, articles of incorporation, details of beneficial owners (BOs) – identifying individuals who ultimately own or control more than a specified percentage (e.g., 25%) of the entity, senior managing officials, and proof of legal existence.
Purpose and Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or transaction.
Source of Funds/Wealth: For high-risk clients or transactions, collect information on the source of funds or wealth involved.
Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure consistency with the institution's knowledge of the customer, their business, risk profile, and, where necessary, the source of funds.
Politically Exposed Persons (PEPs): Implement specific procedures to determine if a customer or beneficial owner is a PEP, and apply enhanced CDD (ECDD) measures, including senior management approval for establishing or continuing relationships with PEPs, and reasonable measures to establish the source of wealth and funds.
Sanctions Screening: Screen clients against national and international sanctions lists (e.g., UN Security Council sanctions).
Risk-Based Approach: Apply CDD measures on a risk-sensitive basis. More intense measures should be applied to higher-risk situations (e.g., complex transactions, non-face-to-face relationships, clients from high-risk jurisdictions, transactions involving large sums).
Technology-Specific CDD: For VASPs, this would include verifying wallet ownership where practical and maintaining transaction traceability.
Obligation to Report: Any transaction, attempted transaction, or activity that raises suspicion of money laundering, terrorist financing, or proliferation financing must be reported.
Promptness: Reports must be made promptly, typically within a few days of forming a suspicion.
No Tipping-Off: Reporting entities and their employees are prohibited from disclosing to the customer or third parties that an STR is being or has been filed.
Duration: Records must typically be kept for a minimum of five to seven years after the business relationship has ended or after the date of an occasional transaction.
Unidade de Informação Financeira (UIF) – Financial Intelligence Unit:
Regulator: Banco Nacional de Angola (BNA)
Outcome: Advising citizens against using cryptocurrencies, reminding financial institutions of their obligations regarding unregistered financial products, and reiterating that cryptocurrencies are not legal tender in Angola.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS is not explicitly regulated in Angola; it may operate only with a careful legal structure that avoids triggering securities laws (CMC authorization), but faces a de facto banking blockade (BNA Notice No. 03/2019) and operates in a regulatory vacuum with only generic AML obligations under Lei n.º 5/20 that do not explicitly name VASPs.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?