← Regulations / Botswana / Operating Models / DeFi frontend

DeFi protocol frontend in Botswana

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Botswana with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD) — identify and verify all customers using national ID (Omang), passport, or other official documents; verify residential address via utility bills or bank statements
  • Beneficial ownership identification — identify individuals owning 25%+ of shares/voting rights or otherwise controlling legal person customers
  • Enhanced Due Diligence (EDD) for higher-risk customers or transactions
  • Ongoing transaction monitoring throughout the business relationship to ensure consistency with customer risk profile
  • Record-keeping of customer identification data, transaction records, and business correspondence for at least 5 years
  • Appointment of a qualified AML/CFT Compliance Officer approved by NBFIRA
  • Suspicious Transaction Report (STR) filing to the Financial Intelligence Agency (FIA) under the Financial Intelligence Act (FIA), No. 17 of 2019
  • Source of funds and source of wealth verification for high-risk customers and large transactions
  • Sanctions screening obligations under the AML/CFT framework enforced through the FIA Act

Key Restrictions

  • Must be incorporated as a company in Botswana under the Companies Act
  • Must maintain a physical office in Botswana
  • Senior management and key personnel must be based in Botswana or demonstrate sufficient local oversight
  • Must obtain a VASP license from NBFIRA before operating — operating without a license is prohibited under Section 5 of the Virtual Assets Act, 2025
  • Minimum capital requirement: BWP 500,000 for Principal VASP License or BWP 200,000 for Limited VASP License (depending on scope of activities)
  • NBFIRA may require a security deposit or other financial guarantees in addition to minimum capital
  • Fee-taking from users likely broadens the scope of regulated activities, making licensing unavoidable under the VASP definition

Key Risks

  • Regulatory ambiguity around whether a non-custodial, non-fee-taking frontend that merely aggregates data from permissionless protocols qualifies as a 'VASP' — the VASP definition is broad and may capture any entity 'facilitating transfer' of virtual assets
  • NBFIRA has issued public advisories warning against unregistered VASPs, creating enforcement precedent and reputational risk
  • The Virtual Assets Act, 2025 is newly enacted; subsidiary regulations and detailed guidance (e.g., on what constitutes 'facilitating transfer' for DeFi) are still being developed, creating compliance uncertainty
  • Botswana's AML/CFT framework is being actively tightened to address FATF-identified weaknesses, so obligations may expand
  • Cybersecurity Bill, 2025 imposes specific risk management requirements including disaster recovery — applicable if the frontend interacts with custody or private keys

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 95% confidence

The Virtual Assets Act, 2025 now provides the overarching legal framework for virtual assets and VASPs in Botswana, vesting NBFIRA with supervisory powers and licensing requirements.

licensing 95% confidence

Virtual Assets Regulations, 2023 (VAR 2023): These regulations provide the detailed operational and licensing requirements, including application procedures, capital requirements, AML/CFT obligations, and ongoing supervisory standards. The VAR 2023 became effective on May 26, 2023.

licensing 100% confidence

Legal Entity and Local Presence:

licensing 90% confidence

Applicants must be a company incorporated in Botswana under the Companies Act.

licensing 85% confidence

They must maintain a physical office in Botswana.

licensing 100% confidence

Senior management and key personnel are expected to be based in Botswana or demonstrate sufficient local oversight.

licensing 95% confidence

The VAR 2023 specifies minimum capital requirements based on the scope of activities:

licensing 95% confidence

Principal VASP License: BWP 500,000 (Botswana Pula) in unimpaired capital. This typically covers the full range of VASP activities.

licensing 95% confidence

Limited VASP License: BWP 200,000 in unimpaired capital. This may be for VASPs with a narrower scope of activities or those determined by NBFIRA to pose lower risk.

licensing 90% confidence

In addition to capital, NBFIRA may require a security deposit or other financial guarantees to protect clients.

licensing 100% confidence

Entities that facilitate the transfer of virtual assets on behalf of another natural or legal person (e.g., sending/receiving virtual assets as a payment service, or processing virtual asset transactions) are considered VASPs and require a license. This encompasses services that act as intermediaries for virtual asset payments.

licensing 100% confidence

Payment Processors (Transfer of Virtual Assets):

licensing 85% confidence

Botswana is actively tightening its AML/CFT financial sanctions regime to address identified weaknesses, indicating the framework is being reformed rather than remaining a stable cornerstone already fully aligned with FATF standards.

licensing 95% confidence

Robust Policies and Procedures: VASPs must implement comprehensive internal AML/CFT policies, procedures, and controls.

licensing 95% confidence

AML/CFT Compliance Officer: Appointment of a qualified and experienced AML/CFT Compliance Officer, approved by NBFIRA, who reports to senior management and the Board.

licensing 95% confidence

Customer Due Diligence (CDD): Implementing strong CDD measures for all customers, including identifying and verifying the identity of natural and legal persons, and beneficial owners.

licensing 95% confidence

Enhanced Due Diligence (EDD): Applying EDD for higher-risk customers or transactions.

licensing 95% confidence

Record Keeping: Maintaining records of customer identification data, transaction data, and business correspondence for at least 5 years.

aml 90% confidence

Financial Intelligence Act (FIA), No. 17 of 2019: This Act establishes the Financial Intelligence Agency (FIA) and outlines the obligations of accountable institutions (which now explicitly include VASPs) regarding customer due diligence, record-keeping, and suspicious transaction reporting. It replaced the 2009 Act.

aml 60% confidence

NBFIRA's Virtual Assets Business Regulatory Framework and Guidance Notes: NBFIRA has issued a comprehensive framework and specific guidance notes, such as the "Guidance Notes on Anti-Money Laundering and Combating the Financing of Terrorism for Virtual Asset Service Providers" (e.g., published in November 2022), which directly detail AML/CFT obligations for VASPs. These are crucial for specific requirements.

aml 85% confidence

Identification and Verification of Customers:

aml 90% confidence

Beneficial Ownership Identification:

aml 60% confidence

Ongoing Due Diligence and Monitoring:

custody 80% confidence

Botswana’s current dedicated virtual‑asset legislation is the Virtual Assets Act, 2025 (Act No. 4 of 2025, S.I. 9 of 2025), which regulates the sale and trade of virtual assets and the licensing of virtual asset service providers and issuers of initial token offerings; the earlier citation to a “Virtual Assets Act, 2022 (Act No. 19 of 2022, published in the Botswana Government Gazette on 27th May 2022)” is no longer accurate as the operative Act is now the 2025 statute.

custody 100% confidence

Section 5: Prohibits any person from carrying on a virtual asset business or virtual assets service without a license issued by NBFIRA.

custody 40% confidence

Section 3 (Definitions): Defines a "virtual asset service provider" (VASP) to include any person who, as a business, "provides custody or administration of virtual assets or instruments enabling control over virtual assets."

enforcement 100% confidence

NBFIRA Advisory on Virtual Assets and Virtual Asset Service Providers (July 2021): https://www.nbfira.org.bw/news-media/media-releases/advisory-virtual-assets-and-virtual-asset-service-providers

enforcement 90% confidence

Non-Bank Financial Institutions Regulatory Authority (NBFIRA) is the primary established regulator for Virtual Asset Service Providers (VASPs) under Botswana's Virtual Assets Act, 2025. However, Botswana-specific evidence does not explicitly confirm that NBFIRA has been active in issuing public warnings.

enforcement 90% confidence

Botswana enacted the Virtual Assets Act, 2025, which vests the Non-Bank Financial Institutions Regulatory Authority (NBFIRA) with supervisory powers and requires VASPs to be licensed, representing a fully enacted framework rather than the still-implementing 2022 bill.

enforcement 90% confidence

Issuing warnings and advisories to the public about the risks associated with cryptocurrencies and unregistered virtual asset service providers (VASPs).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — operating a DeFi protocol frontend in or from Botswana is likely a regulated VASP activity requiring a NBFIRA license (BWP 200,000–500,000 capital), Botswana incorporation with physical office, and full AML/CFT obligations, though significant ambiguity remains as to whether non-custodial, non-fee-taking frontends fall within the broad VASP definition and whether subsidiary guidance will exempt or clarify the treatment of DeFi interfaces.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?