Crypto ATM / kiosk operator in Central African Republic
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Central African Republic with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD required for all transactions (name, date of birth, nationality, physical address, identification number — passport or national ID) per BEAC Regulation No. 01/17/CEMAC/UMAC/CM.
- UBO identification and verification required for legal persons and arrangements.
- Enhanced Due Diligence (EDD) required for PEPs, cross-border relationships, and high-risk jurisdictions/products.
- Source of funds/wealth inquiry required for high-risk clients or large transactions.
- Suspicious Transaction Reports (STRs) must be filed promptly with CENTIF (Cellule Nationale de Traitement des Informations Financières), regardless of amount — tipping-off is prohibited.
- CDD threshold: EUR 1,000 (or equivalent in XAF/other currency) for single and linked transactions, per Regulation No. 04/22/CM/UMAC/CM.
- Travel Rule obligations: collect and transmit originator info (name, physical address, national ID or customer ID, date/place of birth, wallet address) and beneficiary info (name, physical address, wallet address) for transactions above EUR 1,000.
- Record-keeping: all CDD documents, transaction records, and STRs must be retained for at least 5 years.
- Risk-based procedures to identify and verify customers, especially for higher-risk transactions/relationships.
- Secure and interoperable information exchange protocols must be adopted for travel rule compliance.
Key Restrictions
- Must comply with CEMAC regional Regulation No. 04/22/CM/UMAC/CM on VASPs and COBAC Instruction No. 001/GR/2023, which mandate full AML/CFT compliance.
- No standalone crypto-specific kiosk/money-transmitter licensing framework exists — VASPs (including ATM operators) must comply under the BEAC/COBAC VASP regulatory framework.
- The 2022 Bitcoin-as-legal-tender law was revoked in practice; ongoing regulatory standoff between CAR and BEAC creates legal uncertainty for crypto operations.
- Geographic limitation: operation is within the CEMAC zone, subject to BEAC/COBAC supervision — no clear carve-out for physical kiosks vs other VASP types.
- Physical presence likely required as CAR is a CEMAC member and COBAC supervises regulated entities operating within the zone.
Key Risks
- High regulatory ambiguity: CAR adopted crypto-friendly laws but faces conflict with BEAC regional framework; no functional licensing or supervision regime is actually operational.
- Enforcement risk from BEAC/COBAC: CAR faced intense pressure for its Bitcoin law and Sango Coin project; kiosk operators could attract scrutiny as high-cash AML risk.
- IMF and international pressure: repeated warnings about governance, illicit finance, and financial stability risks associated with crypto in CAR.
- No clear licensing pathway: the 2022 law defers to unspecified future decrees; regional VASP regulation exists on paper but national transposition is uncertain.
- Cash-intensive model (crypto ATMs) is inherently high-risk for money laundering in a jurisdiction with weak AML enforcement track record.
- Sango Coin project difficulties signal poor local infrastructure and reputational risk for crypto operators in CAR.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 22.006 of April 27, 2022, on the Regulation of Cryptocurrencies in the Central African Republic:
The 2022 law initially made Bitcoin legal tender in Central African Republic, but was later amended to revoke Bitcoin's legal tender status, while subsequent legislation enabled tokenization of land and natural resources.
Central African Republic has not established functional licensing or supervision of VASPs; rather, it has embraced opaque, unregulated cryptocurrency schemes that risk state asset capture by criminal organizations, with no effective AML/CFT compliance or VASP oversight.
While it creates the framework, it generally defers to further decrees or existing AML/CFT laws for specific requirements.
BEAC Regulation No. 01/17/CEMAC/UMAC/CM of March 30, 2017, on the Prevention and Suppression of Money Laundering and Terrorist Financing in the CEMAC Zone:
As a member of the Economic and Monetary Community of Central Africa (CEMAC), CAR is bound by regional regulations issued by the Banque des États de l'Afrique Centrale (BEAC).
This regulation provides the comprehensive AML/CFT framework for financial institutions within the CEMAC zone. While it predates the explicit regulation of VASPs, the CAR's 2022 crypto law implies that VASPs should adhere to the same stringent AML/CFT requirements as traditional financial institutions, as per FATF Recommendation 15.
Law No. 00-010 of May 8, 2000, on Money Laundering and Terrorist Financing:
Obligation to Report: VASPs are obligated to report any suspicious transactions, regardless of the amount involved, to the national Financial Intelligence Unit (FIU).
Reporting Body: The national FIU in the Central African Republic is the Cellule Nationale de Traitement des Informations Financières (CENTIF).
Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk categories, such as politically exposed persons (PEPs), cross-border correspondent relationships, or transactions involving high-risk jurisdictions or products.
Source of Funds/Wealth: For high-risk clients or large transactions, inquiring about the source of funds or wealth.
Regulation No. 04/22/CM/UMAC/CM of 21 December 2022 concerning the regulation of Virtual Asset Service Providers (VASPs) in the CEMAC zone.
Instruction No. 001/GR/2023 of 31 January 2023 from COBAC on the practical implementation of certain provisions of Regulation No. 04/22/CM/UMAC/CM.
Exceeds EUR 1,000 (or its equivalent in XAF or other currency) for transactions conducted by VASPs.
Collect and retain the following information for transactions above the threshold:
Maintain records of all collected information for at least five (5) years.
Implement risk-based procedures to identify and verify the identity of customers, especially for higher-risk transactions or relationships.
Regulator Name: Bank of Central African States (BEAC), the regional central bank for the six-nation Economic and Monetary Community of Central Africa (CEMAC), which includes CAR.
Entity Targeted: The Government of the Central African Republic (specifically its law adopting Bitcoin as legal tender).
Outcome: CAR did not repeal its Bitcoin legal tender law, leading to a standoff with BEAC. However, the practical implementation of Bitcoin as legal tender has been largely ineffective, partly due to the lack of infrastructure and the regulatory friction with BEAC. BEAC continued to advise against the use of cryptocurrencies in the CEMAC zone.
Regulator Name: International Monetary Fund (IMF) – acting in an advisory and surveillance capacity, not a direct enforcement role but exerting significant policy pressure.
Outcome: The Sango Coin project faced significant delays, lack of widespread adoption, and a de-facto scaling back of its ambitious initial vision. While CAR did not abandon its crypto plans, the IMF's warnings contributed to the project's difficulties in attracting investment and achieving its goals. The project appears largely dormant or significantly scaled back in 2024.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operation in CAR is theoretically permitted under the CEMAC VASP regulation framework (Regulation No. 04/22/CM/UMAC/CM and COBAC Instruction No. 001/GR/2023) but faces severe practical and legal ambiguity: no functional licensing regime has been implemented, there is an ongoing standoff with BEAC over CAR's crypto initiatives, and the high-cash AML risk profile of ATMs presents acute enforcement exposure in a jurisdiction with weak enforcement infrastructure.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?