← Regulations / Angola / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Angola

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Angola with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer identification and verification (full name, address, date of birth, nationality, official ID) under Lei n.º 5/20
  • For legal entity clients: verify legal name, registration number, beneficial owners (≥25% threshold), articles of incorporation, and senior managing officials
  • Understand purpose and intended nature of the business relationship
  • Collect source of funds/wealth for high-risk clients or transactions
  • Ongoing monitoring of business relationships and transactions for consistency with risk profile
  • PEP screening and enhanced CDD (ECDD) with senior management approval for PEP relationships
  • Sanctions screening against national and UN Security Council sanctions lists
  • Risk-based approach — more intense measures for complex transactions, non-face-to-face relationships, high-risk jurisdictions, large sums
  • Technology-specific CDD for VASPs: verify wallet ownership where practical and maintain transaction traceability
  • Obligation to report suspicious transactions/attempted transactions promptly to UIF (Unidade de Informação Financeira)
  • No tipping-off prohibition
  • Record-keeping: customer ID records, transaction records, STRs — minimum 5–7 years after relationship ends
  • Supervised by UIF and BNA under Law No. 5/20

Key Restrictions

  • BNA Notice No. 03/2019 prohibits Angolan financial institutions (banks, payment service providers) from carrying out any transactions involving virtual assets, holding them, or providing services related to them — this blocks any banking rails within Angola for fiat on/off-ramp
  • No dedicated virtual asset service provider (VASP) licensing framework exists — any custodial wallet/SaaS offering would need to assess whether the underlying assets are securities under Lei do Mercado de Valores Mobiliários (Law No. 22/15)
  • If tokens held in custody are classified as securities, the operator would need CMC authorization, prospectus registration, and ongoing disclosure obligations
  • Angola's sole stock exchange (BODIVA) does not list or facilitate trading of cryptocurrency or security tokens, creating a dead end for traded security tokens
  • Notice No. 04/2018 states virtual currencies are not legal tender, not issued/guaranteed by BNA, and not regulated by BNA or any Angolan entity — regulatory gap for non-security crypto assets

Key Risks

  • No dedicated VASP custody licensing framework exists — operator relies on analogies to securities laws that may not fit custodial wallet services, creating legal uncertainty
  • BNA prohibits financial institutions from engaging with crypto (Notice No. 03/2019), so no local banking partner can process fiat transactions for the service
  • AML/CFT obligations under Lei n.º 5/20 apply broadly to financial activities but do not explicitly name VASPs, creating ambiguity on exactly which obligations attach to custodial wallet operators vs white-label clients
  • If custodial services involve assets deemed securities, the operator could face unregistered securities offering liability
  • White-label structure creates ambiguity on whether the SaaS provider or the white-label client bears AML reporting obligations — unclear regulatory guidance on allocation
  • CMC has not provided guidance on digital asset custody or proof-of-reserves requirements — no segregation, insurance, or reserve attestation rules exist

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 95% confidence

Notice No. 04/2018: Warned the public about the risks associated with virtual currencies, stating that they are not legal tender, are not issued or guaranteed by the BNA, and are not regulated by the BNA or any other Angolan entity.

licensing 95% confidence

Notice No. 03/2019: Prohibited Angolan financial institutions (banks, payment service providers, etc.) from carrying out any transactions involving virtual assets, holding them, or providing services related to them.

licensing 90% confidence

Lei do Mercado de Valores Mobiliários (Securities Market Law) - Law No. 22/15 of September 11, 2015:

licensing 85% confidence

Investment Tokens/Security Tokens: Any token designed to represent traditional securities on a blockchain, such as shares in a company, debt instruments, or units in a collective investment scheme.

licensing 90% confidence

Registration with the CMC: Any public offering of securities requires prior authorization from the CMC.

licensing 90% confidence

Prospectus Requirement: Issuers must publish a detailed prospectus containing all necessary information for investors to make an informed decision.

licensing 85% confidence

Disclosure Obligations: Ongoing disclosure requirements would apply to the issuer (e.g., financial reports, material events).

licensing 90% confidence

Regulated Exchanges: Trading would have to occur on a regulated exchange authorized by the CMC. Currently, Angola's sole stock exchange, BODIVA (Bolsa de Dívida e Valores de Angola), does not list or facilitate the trading of cryptocurrency tokens or security tokens.

licensing 95% confidence

AML/CFT Compliance: Exchanges and participants would need to adhere to anti-money laundering and combating the financing of terrorism (AML/CFT) regulations.

licensing 95% confidence

BNA's Prohibitions: The most significant "enforcement" has been the BNA's direct prohibition on financial institutions from engaging with crypto assets (Notice No. 03/2019). This is a preventative regulatory action rather than a reactive enforcement against a specific violation.

licensing 90% confidence

General Warnings: Ongoing public warnings from the BNA about the risks of virtual assets.

licensing 90% confidence

AML/CFT Focus (Hypothetical): Any future enforcement against illicit crypto activities would likely fall under existing AML/CFT laws, which are being strengthened in line with FATF recommendations. Unregistered offerings or fraudulent schemes involving crypto assets would likely be prosecuted under general fraud laws or laws against unauthorized financial activities, rather than specific crypto-securities violations.

aml 100% confidence

Lei n.º 5/20, de 27 de Janeiro – Lei sobre a Prevenção e Combate ao Branqueamento de Capitais, Financiamento do Terrorismo e Proliferação de Armas de Destruição em Massa (Law No. 5/20, of January 27 – Law on the Prevention and Combat of Money Laundering, Financing of Terrorism and Proliferation of Weapons of Mass Destruction).

aml 100% confidence

Identification and Verification:

aml 100% confidence

Legal Entities/Companies: Obtain and verify legal name, registration number, address, articles of incorporation, details of beneficial owners (BOs) – identifying individuals who ultimately own or control more than a specified percentage (e.g., 25%) of the entity, senior managing officials, and proof of legal existence.

aml 100% confidence

Purpose and Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or transaction.

aml 100% confidence

Source of Funds/Wealth: For high-risk clients or transactions, collect information on the source of funds or wealth involved.

aml 100% confidence

Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure consistency with the institution's knowledge of the customer, their business, risk profile, and, where necessary, the source of funds.

aml 100% confidence

Politically Exposed Persons (PEPs): Implement specific procedures to determine if a customer or beneficial owner is a PEP, and apply enhanced CDD (ECDD) measures, including senior management approval for establishing or continuing relationships with PEPs, and reasonable measures to establish the source of wealth and funds.

aml 100% confidence

Sanctions Screening: Screen clients against national and international sanctions lists (e.g., UN Security Council sanctions).

aml 100% confidence

Risk-Based Approach: Apply CDD measures on a risk-sensitive basis. More intense measures should be applied to higher-risk situations (e.g., complex transactions, non-face-to-face relationships, clients from high-risk jurisdictions, transactions involving large sums).

aml 90% confidence

Technology-Specific CDD: For VASPs, this would include verifying wallet ownership where practical and maintaining transaction traceability.

aml 100% confidence

Obligation to Report: Any transaction, attempted transaction, or activity that raises suspicion of money laundering, terrorist financing, or proliferation financing must be reported.

aml 80% confidence

Promptness: Reports must be made promptly, typically within a few days of forming a suspicion.

aml 100% confidence

No Tipping-Off: Reporting entities and their employees are prohibited from disclosing to the customer or third parties that an STR is being or has been filed.

aml 100% confidence

Duration: Records must typically be kept for a minimum of five to seven years after the business relationship has ended or after the date of an occasional transaction.

aml 100% confidence

Unidade de Informação Financeira (UIF) – Financial Intelligence Unit:

aml 100% confidence

Banco Nacional de Angola (BNA) – National Bank of Angola:

enforcement 95% confidence

Outcome: Advising citizens against using cryptocurrencies, reminding financial institutions of their obligations regarding unregistered financial products, and reiterating that cryptocurrencies are not legal tender in Angola.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet/SaaS is not explicitly regulated in Angola; it may operate only with a careful legal structure that avoids triggering securities laws (CMC authorization), but faces a de facto banking blockade (BNA Notice No. 03/2019) and operates in a regulatory vacuum with only generic AML obligations under Lei n.º 5/20 that do not explicitly name VASPs.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?