← Regulations / Democratic Republic of the Congo / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Democratic Republic of the Congo

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Democratic Republic of the Congo with a local entity, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • AML/CFT obligations under Law No. 04/016 of July 19, 2004 (as amended) apply to any entity processing transactions (likely including custodial wallet providers), requiring KYC procedures, transaction monitoring, and suspicious transaction reporting.
  • Suspicious Transaction Reports must be filed with the Cellule Nationale de Renseignements Financiers (CENAREF), the DRC's financial intelligence unit.
  • FATF international best practices, including robust KYC and travel-rule considerations, are recommended even though not codified in crypto-specific regulation.
  • The AML/KYC obligations under Law No. 04/016 apply to financial institutions and DNFBPs; a custodial wallet provider processing fiat or facilitating financial transactions could be captured.

Key Restrictions

  • No specific crypto custody framework exists — the activity operates in a legal grey area with no dedicated license or qualified-custodian status.
  • The BCC has publicly warned against cryptocurrency use, stating cryptocurrencies are not legal tender and are unregulated; this creates operational and reputational risk.
  • No segregation, insurance, cold-storage, or proof-of-reserves rules exist for crypto custodians; client asset protection is legally undefined.
  • If the SaaS provider handles fiat-crypto conversions or fiat payments, it may be deemed a payment service under Law No. 20/017, triggering BCC authorization requirements and capital requirements.
  • General business registration (Ministry of Commerce, tax ID, GUCE registration, local office, local directors) is mandatory for any entity operating in the DRC.

Key Risks

  • High regulatory ambiguity — the BCC's 2021 public warning actively discourages cryptocurrency use, and enforcement against unregulated financial activities is a material risk.
  • No legal recognition or protection for custodial relationships — client funds and digital assets have no defined legal status or segregation framework.
  • Tax exposure — a 15-15% crypto tax exists (noted in facts), but its application to custodial services is unclear.
  • Potential retroactive application of future regulation — the BCC has indicated ongoing study of digital financial innovations, which could lead to sudden regulatory changes.
  • White-label clients face AML ambiguity — it is unclear where AML obligations fall between the SaaS custody provider and the white-label client under Law No. 04/016.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 60% confidence

None specific to cryptocurrency custody. As cryptocurrencies are not recognized as legal tender and there is no specific framework for digital assets, there are no dedicated licenses for cryptocurrency custodians. Entities dealing with traditional financial assets are licensed under existing financial sector laws, but these licenses do not automatically extend to crypto activities. Any entity wishing to offer financial services that involve crypto would likely face significant regulatory hurdles or outright denial, given the BCC's stance.

custody 60% confidence

Reference: The general position of the BCC can be found in various communiques and statements. For instance, the Communiqué of the Banque Centrale du Congo (BCC) dated December 14, 2021, warned the public against the use of cryptocurrencies, highlighting their lack of legal framework and associated risks. While a direct, stable URL to the specific communiqué can be elusive on the BCC's dynamic site, its content is widely reported and reflects the official position.

custody 90% confidence

While there are regulations specific to crypto assets in the DRC, such as a 15-15% crypto tax, there are no mandated insurance or bonding requirements for cryptocurrency custodians under the current framework.

custody 100% confidence

No specific definition. The concept of a "qualified custodian" in the context of digital assets does not exist within the DRC's current legal framework.

licensing 90% confidence

No Specific License: There are currently no specific licenses required for operating a cryptocurrency exchange or providing crypto custody services in the DRC. These activities fall into an unregulated grey area.

licensing 90% confidence

General Business Registration: Any entity operating in the DRC, regardless of its specific activity, would need to comply with general business registration requirements (e.g., registering with the Ministry of Commerce, obtaining a tax ID, etc.), but these are not specific to financial services or virtual assets.

licensing 90% confidence

Neither, for Crypto-Specific Activities: For activities purely involving virtual assets (like crypto-only exchanges or custody), there is no specific registration or licensing regime in place.

licensing 90% confidence

Local Presence: General business laws would require any company operating in the DRC to have a registered local presence (e.g., a local office, local directors, registration with the relevant commercial registries).

licensing 90% confidence

AML/KYC (Anti-Money Laundering / Know Your Customer): While there are no crypto-specific AML/KYC regulations, the DRC has a general framework for combating money laundering and terrorist financing, primarily through Law No. 04/016 of 19 July 2004 relating to the fight against money laundering and the financing of terrorism (as amended).

licensing 90% confidence

The Cellule Nationale de Renseignements Financiers (CENAREF) (National Financial Intelligence Unit) is responsible for receiving and analyzing suspicious transaction reports.

licensing 90% confidence

Even in the absence of specific crypto regulations, any legitimate financial operation (or one seeking future legitimacy) should adhere to international AML/CFT best practices (e.g., FATF recommendations), including robust KYC procedures, transaction monitoring, and suspicious activity reporting. Failure to do so could lead to future legal issues or blacklisting.

custody 85% confidence

Law No. 04/016 of July 19, 2004, concerning the fight against money laundering and terrorist financing, and its subsequent amendments and implementing decrees, would apply to any financial institution or designated non-financial business and profession (DNFBP) that might process transactions, regardless of whether they involve traditional or digital assets. While this law does not explicitly mention cryptocurrencies (predating their widespread use), the Financial Action Task Force (FATF) recommendations (which the DRC aims to adhere to) increasingly apply AML/CFT obligations to virtual asset service providers (VASPs).

custody 90% confidence

Law No. 04/016 of July 19, 2004, which concerns combating money laundering and terrorist financing, is currently in effect in Congo - Kinshasa. However, a project for its modification was adopted by the central government in December 2021, indicating that amendments are pending.

enforcement 90% confidence

Entity Targeted: General Public, financial institutions (indirectly). Violation Type: N/A (This was a public warning, not an enforcement action against a specific violator.) The warning addressed the risks of using unregulated financial instruments like cryptocurrencies and clarified that they are not legal tender in the DRC. Penalty Amount: N/A.

enforcement 90% confidence

Outcome: To inform the public of the risks and to clarify that cryptocurrencies are not recognized as legal tender, aiming to deter their use within the formal financial system. The outcome is public awareness rather than a specific legal penalty.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet / SaaS services exist in a legal grey area with no specific crypto custody framework; a local entity is required for general business registration, and AML/CFT obligations under Law No. 04/016 apply, but the BCC has publicly warned against cryptocurrency activity, creating significant operational risk.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?