Centralized exchange in Democratic Republic of the Congo
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Democratic Republic of the Congo with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- General AML framework under Law No. 04/016 of 19 July 2004 applies — including KYC, transaction monitoring, and suspicious activity reporting to CENAREF (the National Financial Intelligence Unit).
- No crypto-specific AML/KYC regulations exist, but adherence to FATF recommendations is expected for any legitimate financial operation.
- Suspicious Transaction Reports (STRs) must be filed with CENAREF.
- If operations involve fiat-crypto conversion, payment-services licensing under Law No. 20/017 may be triggered, bringing additional AML obligations through BCC supervision.
Key Restrictions
- No specific crypto or VASP license exists — the activity is in a grey area with no established regulatory pathway.
- The BCC has publicly warned against use of cryptocurrencies (June 2021, reiterated since), creating reputational and regulatory risk.
- If the exchange handles fiat-to-crypto conversion, the BCC may interpret activities as falling under Law No. 20/017 on payment services, potentially requiring a payment-services license.
- General business registration is required (Ministry of Commerce, Guichet Unique de Création d'Entreprise, tax ID, NIN).
- Local presence (registered entity, local office, local directors) is required under general business laws.
Key Risks
- Regulatory grey zone — no legal certainty that a centralized exchange is permitted; BCC warning suggests hostility toward crypto.
- Risk of sudden regulatory change or enforcement action if BCC issues new rules or interprets existing law to prohibit crypto exchange activity.
- No custody segregation, insurance, or cold-storage rules — user assets have no legal protection framework.
- Travel-rule obligations are undefined — no crypto-specific travel-rule requirement exists, but FATF compliance is expected.
- Banking and payment-partner relationships may be difficult to maintain given BCC's public warnings.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific License: There are currently no specific licenses required for operating a cryptocurrency exchange or providing crypto custody services in the DRC. These activities fall into an unregulated grey area.
General Business Registration: Any entity operating in the DRC, regardless of its specific activity, would need to comply with general business registration requirements (e.g., registering with the Ministry of Commerce, obtaining a tax ID, etc.), but these are not specific to financial services or virtual assets.
Neither, for Crypto-Specific Activities: For activities purely involving virtual assets (like crypto-only exchanges or custody), there is no specific registration or licensing regime in place.
Licensing for Traditional Payment Services: For traditional payment services (including e-money issuance or fiat payment processing), a licensing regime administered by the BCC exists under Law No. 20/017.
Potential for General Payment Services Regulation: If a payment processor facilitates transactions between fiat currency and cryptocurrencies, or processes payments in fiat currency as part of its operations, it could potentially fall under the existing Law No. 20/017 of 25 November 2020 on the regulation of payment services in the Democratic Republic of Congo. This law regulates electronic money institutions and other payment service providers. However, it does not explicitly mention virtual assets.
Implication: A crypto payment processor that converts fiat to crypto or vice-versa, or handles fiat payments in general, might be interpreted by the BCC as falling under the scope of existing payment services regulation, requiring an authorization from the BCC. This would be decided on a case-by-case basis and is subject to interpretation given the lack of specific definitions for virtual assets within this law.
AML/KYC (Anti-Money Laundering / Know Your Customer): While there are no crypto-specific AML/KYC regulations, the DRC has a general framework for combating money laundering and terrorist financing, primarily through Law No. 04/016 of 19 July 2004 relating to the fight against money laundering and the financing of terrorism (as amended).
The Cellule Nationale de Renseignements Financiers (CENAREF) (National Financial Intelligence Unit) is responsible for receiving and analyzing suspicious transaction reports.
Even in the absence of specific crypto regulations, any legitimate financial operation (or one seeking future legitimacy) should adhere to international AML/CFT best practices (e.g., FATF recommendations), including robust KYC procedures, transaction monitoring, and suspicious activity reporting. Failure to do so could lead to future legal issues or blacklisting.
Local Presence: General business laws would require any company operating in the DRC to have a registered local presence (e.g., a local office, local directors, registration with the relevant commercial registries).
Law No. 20/017 of 25 November 2020 on the regulation of payment services:
None specific to cryptocurrency custody. As cryptocurrencies are not recognized as legal tender and there is no specific framework for digital assets, there are no dedicated licenses for cryptocurrency custodians. Entities dealing with traditional financial assets are licensed under existing financial sector laws, but these licenses do not automatically extend to crypto activities. Any entity wishing to offer financial services that involve crypto would likely face significant regulatory hurdles or outright denial, given the BCC's stance.
While there are regulations specific to crypto assets in the DRC, such as a 15-15% crypto tax, there are no mandated insurance or bonding requirements for cryptocurrency custodians under the current framework.
Cold Storage Mandates:
Qualified Custodian Definitions:
Regulator Name: Banque Centrale du Congo (BCC)
Entity Targeted: General Public, financial institutions (indirectly). Violation Type: N/A (This was a public warning, not an enforcement action against a specific violator.) The warning addressed the risks of using unregulated financial instruments like cryptocurrencies and clarified that they are not legal tender in the DRC. Penalty Amount: N/A.
Date: The most significant public warning was issued in June 2021, and the stance has been reiterated since.
Outcome: To inform the public of the risks and to clarify that cryptocurrencies are not recognized as legal tender, aiming to deter their use within the formal financial system. The outcome is public awareness rather than a specific legal penalty.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange can operate in the DRC only in a regulatory grey area with no specific license; general business registration and AML compliance under Law No. 04/016 are required, and fiat-crypto activities may trigger payment-services licensing under Law No. 20/017, but the BCC has publicly warned against cryptocurrency use, creating significant legal uncertainty.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?