Crypto ATM / kiosk operator in Burundi

Cryptocurrencies are not recognized as legal tender in Burundi.

They are not regulated by the BRB, meaning there is no legal protection for users or investors.

Financial institutions are explicitly prohibited from engaging in cryptocurrency-related activities.

Cryptocurrency Exchanges: Operating a crypto exchange in Burundi is prohibited.

Custody Providers: Providing crypto custody services is prohibited.

Payment Processors: Engaging in payment processing for transactions involving cryptocurrencies is prohibited. Traditional fiat payment processors would still require relevant licenses from the BRB for their conventional operations, but these licenses would not extend to virtual assets.

Communiqué N° BRB/DGD/2021-002 du 16 Décembre 2021 de la Banque de la République du Burundi (Bank of the Republic of Burundi Communiqué No. BRB/DGD/2021-002 of December 16, 2021).

This communiqué specifically warned the public against the risks of cryptocurrencies and prohibited financial institutions from dealing with them.

Bank of the Republic of Burundi Communiqué (March 2019): This is the most significant regulatory action. The BRB issued a communiqué warning the public against the use and trading of virtual currencies, highlighting the risks of fraud, money laundering, terrorist financing, and market manipulation. It explicitly stated that cryptocurrencies are not recognized as legal tender or a regulated financial product in Burundi and that local banks and financial institutions are prohibited from facilitating transactions involving them. This communal acts as a de facto ban within the formal financial system.

Law N°1/01 of 04 January 2011 on Anti-Money Laundering and Combating the Financing of Terrorism. This law, along with its implementing decrees and ordinances, establishes the general framework for identifying, reporting, and prosecuting money laundering and terrorist financing activities.

Identification and verification of beneficial owners under FinCEN’s CDD Rule is risk‑based and may be limited by covered financial institutions, rather than being an unconditional, blanket requirement for all federal business relationships.

For individuals, identity verification for customer due diligence may be performed using reliable, independent source documents, data, or information, and may also use non-documentary methods such as third-party data, direct contact, or other reasonable verification procedures; utility bills may be used for address verification where permitted.

For Legal Entities: Obtaining and verifying the legal name, form, proof of existence, powers that regulate and bind the entity, and the identity of the natural persons who are beneficial owners.

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the obliged entity's knowledge of the customer, their business, and risk profile.

Risk-Based Approach: Applying a risk-based approach, meaning:

Enhanced CDD (ECDD): Required for higher-risk situations, such as:

Politically Exposed Persons (PEPs)

Customers from high-risk jurisdictions

Unusual or complex transactions

Large value transactions (thresholds would be defined in specific regulations)

Transactions involving new technologies or anonymous transactions where the risks are not mitigated.

Source of funds/wealth verification for significant transactions.

Regulated institutions are expected to conduct risk‑based, ongoing sanctions and broader watchlist screening of customers, their transactions, counterparties, and beneficial owners against up‑to‑date sanctions lists and other relevant watchlists (such as PEP, law‑enforcement, and similar datasets), rather than limiting checks to one‑off customer screening only.

Under FATF Recommendation 15 and its interpretive note, virtual asset service providers (VASPs) are expected to be explicitly licensed or registered and directly subject to full AML/CFT requirements—including customer due diligence (CDD), record‑keeping, ongoing monitoring, suspicious transaction reporting, and Travel Rule obligations—on the same footing as other regulated financial institutions, rather than having CDD applied only hypothetically or merely ‘by analogy’ if they were formally regulated.

Reporting Thresholds: While specific thresholds might exist for certain fiat transactions, the primary obligation is to report any transaction (regardless of amount) that is suspected of being related to money laundering or terrorist financing.

Content of Report: Reports must contain all relevant information about the customer, the transaction, and the grounds for suspicion.

No Tipping-Off: Obliged entities, their directors, officers, and employees are prohibited from disclosing to the customer or any third party that a STR has been or will be submitted.

Types of Records:

Copies of identification documents obtained during CDD.

Account files, business correspondence, and transaction data.

Emerging Regulatory Landscape: Many developing nations, including Burundi, are still in the early stages of establishing comprehensive regulatory frameworks for cryptocurrencies. The focus often remains on issuing warnings and advisories rather than direct, targeted enforcement actions against specific entities.

Central Bank Stance: The primary financial regulator in Burundi is the Banque de la République du Burundi (BRB). Like many central banks in Africa, the BRB has generally adopted a cautious stance towards cryptocurrencies, often stating that they are not recognized as legal tender and advising citizens of the associated risks (volatility, scams, lack of consumer protection). These are regulatory statements but not enforcement actions against specific entities.

Lack of Public Reporting: Even if smaller, localized enforcement actions against individuals or informal crypto operations have occurred (e.g., related to fraud or unlicensed financial activities), they are often not widely reported by international or even national news outlets, especially without significant financial or legal implications.

Lower Adoption Rates & Market Size: Compared to larger economies, the scale of cryptocurrency adoption and the size of the local crypto market in Burundi are generally smaller, which can mean fewer instances that trigger high-profile enforcement.

Law No. 1/01 of January 20, 2011, on the Regulation of the Financial Market: This law (and any subsequent amendments) governs the financial market in Burundi and establishes the Financial Market Authority (AMF). While it doesn't mention crypto, it would be the foundational legal text if crypto assets were ever to be formally regulated as securities.