Custodial wallet / SaaS in Benin
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Benin without local incorporation, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- General AML/CFT framework applies under UEMOA Directive No. 02/2015/CM/UEMOA transposed into national law — covers any financial activity including unregulated crypto custody.
- Customer identification and verification on a risk-based basis — requires independent source documents (national ID, passport, driver's license) for individuals; for legal entities: company name, proof of incorporation, legal form, registered address, director identities, and beneficial ownership.
- Beneficial ownership identification and verification required for legal entity customers.
- Ongoing due diligence — scrutinize transactions for consistency with customer knowledge and risk profile.
- Risk-based approach — EDD required for higher-risk situations (PEPs, high-risk jurisdictions, complex transactions); SDD permitted for lower-risk.
- Travel Rule (FATF Rec. 16) — must obtain and transmit originator/beneficiary information for virtual asset transfers above threshold.
- Suspicious Transaction Reporting (STR) — must report promptly to CENTIF (Benin's FIU) if funds suspected to be proceeds of crime or linked to terrorist financing.
- No tipping-off — prohibition on disclosing STR filing to customer or third parties.
- Record-keeping — all transaction and identification records must be kept at least 5 years after termination of business relationship.
- Records must permit reconstruction of individual transactions and be available to competent authorities upon request.
- General AML obligations would apply to the custodial wallet operator as the financial intermediary; the white-label client's own AML obligations are separate but the SaaS operator may still bear principal responsibility as the regulated touchpoint.
Key Restrictions
- No specific license or regulatory framework exists for crypto custodial wallet providers — any entity performing custody operates outside the regulated financial services framework in a grey area.
- Financial institutions regulated by the BCEAO (banks, microfinance institutions, payment service providers) are prohibited from engaging in cryptocurrency activities including custody — this may restrict potential white-label clients or banking partners.
- No legal definition of 'qualified custodian' for digital assets exists.
- No specific rules for segregation of client assets from operational assets.
- No specific insurance or bonding requirements exist — no mandated consumer protection.
- No cold storage mandates or specific security protocol requirements.
- The BCEAO has authorized only two structures for payment services in Benin as of March 2026, indicating an extremely restrictive licensing environment.
Key Risks
- Regulatory grey area — custodial wallet services are not prohibited for non-financial entities but lack any legal framework, creating enforcement exposure if authorities deem the activity unlicensed financial services.
- BCEAO warnings and active regulatory attention — unregulated crypto activities face heightened scrutiny from financial intelligence units and may be targeted in future enforcement.
- No consumer protection framework — clients have no regulatory recourse if assets are lost, stolen, or misappropriated.
- Limited public reporting on enforcement — but law enforcement actions against crypto-related fraud (pyramid schemes, investment fraud) are the most common enforcement pattern.
- Prohibition on regulated financial institutions engaging in crypto activities limits banking relationships, payment rails, and potential B2B clients.
- Pending legislative development risk — a December 2025 colloquium to develop a legal framework for cryptocurrencies signals that regulation is coming; current operators may face compliance transition costs or be grandfathered unfavorably.
- No segregation or insurance requirements mean a SaaS operator's insolvency or hack could expose full client asset loss with no legal protection.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Custodial License Requirements: There are no specific licenses for cryptocurrency custody providers in Benin. Any entity performing custody would likely be operating outside the traditional regulated financial services framework.
Legal Uncertainty: Activities are conducted in a regulatory grey area.
Cryptocurrencies in Benin are not fully regulated as financial instruments, but the government and BCEAO have issued warnings and are tightening oversight, indicating active regulatory attention.
Segregation of Client Assets Rules: No specific rules exist mandating the segregation of client digital assets from the custodian's operational assets.
Insurance/Bonding Requirements: There are no specific insurance or bonding requirements for crypto custodians.
Cold Storage Mandates: No specific mandates dictate the use of cold storage or other security protocols for digital assets held in custody.
Qualified Custodian Definitions: There is no legal definition of a "qualified custodian" specifically for digital assets.
Prohibition for Regulated Entities: Financial institutions regulated by the BCEAO (banks, microfinance institutions, payment service providers) are generally prohibited from engaging in activities related to cryptocurrencies, including their issuance, trading, or custody.
AML/CFT: While no specific crypto custody laws exist, general anti-money laundering and combating the financing of terrorism (AML/CFT) laws would still apply to any financial activity, and unregulated crypto activities are often viewed with heightened scrutiny by financial intelligence units.
No Consumer Protection: There are no specific regulatory safeguards for clients using such services.
Operational Risk: Without clear guidelines, security, operational, and financial risks are heightened.
Risks: The BCEAO highlights the significant risks associated with cryptocurrencies, including price volatility, lack of consumer protection, potential for illicit activities (money laundering and terrorist financing), and the absence of a clear legal framework.
Not Legal Tender: Cryptocurrencies are not recognized as legal tender within the UEMOA zone.
Pending Custody Legislation: There is no publicly available information or announced pending legislation in Benin or by the BCEAO specifically aimed at creating a regulatory framework for crypto asset custody. Any future regulation is more likely to focus on restricting or monitoring crypto activities further, or potentially integrating them under general AML/CFT (Anti-Money Laundering/Combating the Financing of Terrorism) frameworks without necessarily creating a dedicated custody license.
In Benin, a general search for 'cryptomonnaies' now leads to high-level government initiatives, such as a December 2025 colloquium to develop a legal framework for cryptocurrencies, rather than just warnings mimicking BCEAO-style alerts.
For BJ AML purposes, institutions must identify customers and (where required) beneficial owners and verify their identities on a risk‑based basis, which may be satisfied by customer certifications or existing reliable information; independent source documents such as national ID cards, passports, driver’s licenses, or proof of address are no longer mandatorily required in every case but are expected where the risk profile or inconsistencies warrant stronger verification.
For legal entities, obtain and record basic information such as the company name, proof of incorporation, legal form, registered office address, and the identity of directors; beneficial ownership information should also be identified and verified under applicable AML/KYC rules, but it is not generally available through ordinary public company-search tools.
Beneficial Ownership: Identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer.
Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutinize transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Risk-Based Approach: Apply a risk-based approach, meaning enhanced due diligence (EDD) for higher-risk situations (e.g., customers from high-risk jurisdictions, politically exposed persons - PEPs, complex transactions) and simplified due diligence (SDD) for lower-risk situations.
"Travel Rule" (FATF Recommendation 16): While implementation varies, VASPs are expected to obtain and transmit required originator and beneficiary information for virtual asset transfers (above a certain threshold), similar to traditional wire transfers.
Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds are the proceeds of a criminal activity, or are related to terrorist financing, must report promptly to the FIU.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that an STR is being or has been filed.
Duration: Records of transactions and customer identification data must generally be kept for at least five (5) years after the business relationship is terminated or after the date of the transaction.
Availability: Records must be sufficient to permit the reconstruction of individual transactions and be made available to competent authorities upon request.
Benin’s Financial Intelligence Unit (FIU) is the Cellule Nationale de Traitement des Informations Financières (CENTIF). CENTIF is an administrative financial intelligence unit under the Minister of Finance, with financial and decision-making autonomy, responsible for receiving, analyzing, enriching and transmitting suspicious transaction reports and other relevant financial information to competent authorities for the purposes of combating money laundering and terrorist financing, and for coordinating and supporting national AML/CFT policy and strategy.
As a UEMOA member, Benin is subject to regional AML/CFT instruments that are incorporated into national law. Directive No. 02/2015/CM/UEMOA of 29 September 2015 on the fight against money laundering and terrorist financing did supersede earlier directives and provided a regional framework for national transposition, but it has since been complemented and effectively operationalized by a uniform AML/CFT law adopted by UEMOA (notably via Decision n°26 of 02/07/2015/CM/UEMOA), which now serves as the main binding reference guiding member states’ legislation, including Benin’s. Any up‑to‑date description should therefore refer to both the 2015 Directive and the subsequent uniform law, rather than the Directive alone as the guiding instrument.
Directive No. 02/2015/CM/UEMOA is a 2 July 2015 UEMOA directive on combating money laundering and terrorist financing, which was later transposed into member-state law and is referenced within the regional AML/CFT framework.
The BCEAO’s regulatory stance on crypto‑actifs in Benin has been updated; the earlier communiqué no longer reflects current enforcement deadlines.
As of March 2026, the BCEAO has authorized only two structures for payment services in Benin, per its official publication.
Focus on Fraud: When actions occur, they are often initiated by law enforcement (police, judicial authorities) against individuals or groups involved in pyramid schemes or investment fraud using cryptocurrencies, rather than by a financial regulator against a crypto service provider for regulatory non-compliance.
Developing Frameworks: Many African nations, including Benin, are still in the early stages of developing comprehensive regulatory frameworks specifically for cryptocurrencies. Enforcement often takes the form of general warnings or actions against broad financial fraud rather than specific crypto licensing violations.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS services are permitted for non-regulated entities in a complete regulatory grey area with no specific custody license, no segregation/insurance/cold-storage rules, but general UEMOA-transposed AML/CFT obligations apply; however, BCEAO-regulated financial institutions are prohibited from engaging in crypto activities, severely limiting banking and partnership options, and a colloquium in December 2025 signals pending legislative development.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?