DeFi protocol frontend in Botswana
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Botswana with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) — identify and verify all customers using national ID (Omang), passport, or other official documents; verify residential address via utility bills or bank statements
- Beneficial ownership identification — identify individuals owning 25%+ of shares/voting rights or otherwise controlling legal person customers
- Enhanced Due Diligence (EDD) for higher-risk customers or transactions
- Ongoing transaction monitoring throughout the business relationship to ensure consistency with customer risk profile
- Record-keeping of customer identification data, transaction records, and business correspondence for at least 5 years
- Appointment of a qualified AML/CFT Compliance Officer approved by NBFIRA
- Suspicious Transaction Report (STR) filing to the Financial Intelligence Agency (FIA) under the Financial Intelligence Act (FIA), No. 17 of 2019
- Source of funds and source of wealth verification for high-risk customers and large transactions
- Sanctions screening obligations under the AML/CFT framework enforced through the FIA Act
Key Restrictions
- Must be incorporated as a company in Botswana under the Companies Act
- Must maintain a physical office in Botswana
- Senior management and key personnel must be based in Botswana or demonstrate sufficient local oversight
- Must obtain a VASP license from NBFIRA before operating — operating without a license is prohibited under Section 5 of the Virtual Assets Act, 2025
- Minimum capital requirement: BWP 500,000 for Principal VASP License or BWP 200,000 for Limited VASP License (depending on scope of activities)
- NBFIRA may require a security deposit or other financial guarantees in addition to minimum capital
- Fee-taking from users likely broadens the scope of regulated activities, making licensing unavoidable under the VASP definition
Key Risks
- Regulatory ambiguity around whether a non-custodial, non-fee-taking frontend that merely aggregates data from permissionless protocols qualifies as a 'VASP' — the VASP definition is broad and may capture any entity 'facilitating transfer' of virtual assets
- NBFIRA has issued public advisories warning against unregistered VASPs, creating enforcement precedent and reputational risk
- The Virtual Assets Act, 2025 is newly enacted; subsidiary regulations and detailed guidance (e.g., on what constitutes 'facilitating transfer' for DeFi) are still being developed, creating compliance uncertainty
- Botswana's AML/CFT framework is being actively tightened to address FATF-identified weaknesses, so obligations may expand
- Cybersecurity Bill, 2025 imposes specific risk management requirements including disaster recovery — applicable if the frontend interacts with custody or private keys
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The Virtual Assets Act, 2025 now provides the overarching legal framework for virtual assets and VASPs in Botswana, vesting NBFIRA with supervisory powers and licensing requirements.
Virtual Assets Regulations, 2023 (VAR 2023): These regulations provide the detailed operational and licensing requirements, including application procedures, capital requirements, AML/CFT obligations, and ongoing supervisory standards. The VAR 2023 became effective on May 26, 2023.
Legal Entity and Local Presence:
Applicants must be a company incorporated in Botswana under the Companies Act.
They must maintain a physical office in Botswana.
Senior management and key personnel are expected to be based in Botswana or demonstrate sufficient local oversight.
The VAR 2023 specifies minimum capital requirements based on the scope of activities:
Principal VASP License: BWP 500,000 (Botswana Pula) in unimpaired capital. This typically covers the full range of VASP activities.
Limited VASP License: BWP 200,000 in unimpaired capital. This may be for VASPs with a narrower scope of activities or those determined by NBFIRA to pose lower risk.
In addition to capital, NBFIRA may require a security deposit or other financial guarantees to protect clients.
Entities that facilitate the transfer of virtual assets on behalf of another natural or legal person (e.g., sending/receiving virtual assets as a payment service, or processing virtual asset transactions) are considered VASPs and require a license. This encompasses services that act as intermediaries for virtual asset payments.
Payment Processors (Transfer of Virtual Assets):
Botswana is actively tightening its AML/CFT financial sanctions regime to address identified weaknesses, indicating the framework is being reformed rather than remaining a stable cornerstone already fully aligned with FATF standards.
Robust Policies and Procedures: VASPs must implement comprehensive internal AML/CFT policies, procedures, and controls.
AML/CFT Compliance Officer: Appointment of a qualified and experienced AML/CFT Compliance Officer, approved by NBFIRA, who reports to senior management and the Board.
Customer Due Diligence (CDD): Implementing strong CDD measures for all customers, including identifying and verifying the identity of natural and legal persons, and beneficial owners.
Enhanced Due Diligence (EDD): Applying EDD for higher-risk customers or transactions.
Record Keeping: Maintaining records of customer identification data, transaction data, and business correspondence for at least 5 years.
Financial Intelligence Act (FIA), No. 17 of 2019: This Act establishes the Financial Intelligence Agency (FIA) and outlines the obligations of accountable institutions (which now explicitly include VASPs) regarding customer due diligence, record-keeping, and suspicious transaction reporting. It replaced the 2009 Act.
NBFIRA's Virtual Assets Business Regulatory Framework and Guidance Notes: NBFIRA has issued a comprehensive framework and specific guidance notes, such as the "Guidance Notes on Anti-Money Laundering and Combating the Financing of Terrorism for Virtual Asset Service Providers" (e.g., published in November 2022), which directly detail AML/CFT obligations for VASPs. These are crucial for specific requirements.
Identification and Verification of Customers:
Beneficial Ownership Identification:
Ongoing Due Diligence and Monitoring:
Botswana’s current dedicated virtual‑asset legislation is the Virtual Assets Act, 2025 (Act No. 4 of 2025, S.I. 9 of 2025), which regulates the sale and trade of virtual assets and the licensing of virtual asset service providers and issuers of initial token offerings; the earlier citation to a “Virtual Assets Act, 2022 (Act No. 19 of 2022, published in the Botswana Government Gazette on 27th May 2022)” is no longer accurate as the operative Act is now the 2025 statute.
Section 5: Prohibits any person from carrying on a virtual asset business or virtual assets service without a license issued by NBFIRA.
Section 3 (Definitions): Defines a "virtual asset service provider" (VASP) to include any person who, as a business, "provides custody or administration of virtual assets or instruments enabling control over virtual assets."
NBFIRA Advisory on Virtual Assets and Virtual Asset Service Providers (July 2021): https://www.nbfira.org.bw/news-media/media-releases/advisory-virtual-assets-and-virtual-asset-service-providers
Non-Bank Financial Institutions Regulatory Authority (NBFIRA) is the primary established regulator for Virtual Asset Service Providers (VASPs) under Botswana's Virtual Assets Act, 2025. However, Botswana-specific evidence does not explicitly confirm that NBFIRA has been active in issuing public warnings.
Botswana enacted the Virtual Assets Act, 2025, which vests the Non-Bank Financial Institutions Regulatory Authority (NBFIRA) with supervisory powers and requires VASPs to be licensed, representing a fully enacted framework rather than the still-implementing 2022 bill.
Issuing warnings and advisories to the public about the risks associated with cryptocurrencies and unregistered virtual asset service providers (VASPs).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi protocol frontend in or from Botswana is likely a regulated VASP activity requiring a NBFIRA license (BWP 200,000–500,000 capital), Botswana incorporation with physical office, and full AML/CFT obligations, though significant ambiguity remains as to whether non-custodial, non-fee-taking frontends fall within the broad VASP definition and whether subsidiary guidance will exempt or clarify the treatment of DeFi interfaces.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?