On-shore VASP in Central African Republic
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Central African Republic with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD obligations under BEAC Regulation No. 01/17/CEMAC/UMAC/CM: collect and verify identity (name, DOB, nationality, address, ID numbers) for all customers; verify legal form, directors, and beneficial owners for legal entities.
- Ongoing monitoring of business relationships and transactions to ensure consistency with customer risk profile.
- Enhanced Due Diligence (EDD) for PEPs, cross-border relationships, high-risk jurisdictions/products, including source-of-funds/wealth inquiries for high-risk clients.
- Suspicious Transaction Reporting (STR) to CENTIF (the national FIU) — reports must be made promptly when there is knowledge, suspicion, or reasonable grounds that funds are criminal proceeds or related to terrorist financing.
- Tipping-off is strictly prohibited.
- Record-keeping: retain CDD documents, transaction records (sender/recipient/amounts/dates/asset types), and copies of STRs.
- For transactions exceeding EUR 1,000 (or XAF equivalent) — single or linked — VASPs must collect, retain, and transmit originator info (name, address, national ID no., DOB, wallet address) and beneficiary info (name, address, wallet address) to the beneficiary VASP immediately and securely.
- Maintain all collected records for at least five (5) years.
- Implement risk-based procedures for customer verification, especially for higher-risk transactions.
Key Restrictions
- VASP must be incorporated locally and subject to BEAC/COBAC regional licensing and supervision under CEMAC Regulation No. 04/22/CM/UMAC/CM.
- Must comply with COBAC Instruction No. 001/GR/2023 on practical implementation of VASP regulation.
- The legal framework is opaque and transposition by CAR into national law may be incomplete — the regional directive (CEMAC) and COBAC's instruction mandate compliance regardless of national transposition state.
- Sango Coin project and CAR's Bitcoin legal-tender experiment have created regulatory tension with BEAC, the regional central bank, which may complicate licensing and ongoing operations.
- No fully functional VASP licensing or supervision regime has been established in practice by CAR authorities — licensing path is theoretical/regional rather than nationally operational.
Key Risks
- Significant regulatory ambiguity: CAR's national licensing framework is not functionally operational; the regional CEMAC framework mandates compliance but national implementation is incomplete.
- BEAC has publicly opposed CAR's crypto initiatives and pressured for repeal of Bitcoin legal-tender law — risk of ongoing standoff and non-cooperation from the regional central bank.
- IMF and international community have raised governance and financial stability concerns about CAR's crypto projects (Sango Coin), deterring institutional partners and investors.
- Practical enforcement exposure: COBAC can impose administrative sanctions (fines, license suspension/withdrawal) and refer to national judicial authorities for criminal prosecution.
- Tax framework is largely undeveloped for non-Bitcoin crypto activities — significant uncertainty around VAT (18%) application to crypto services, capital gains treatment, and conversion rate rules.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 22.006 of April 27, 2022, on the Regulation of Cryptocurrencies in the Central African Republic:
Central African Republic has not established functional licensing or supervision of VASPs; rather, it has embraced opaque, unregulated cryptocurrency schemes that risk state asset capture by criminal organizations, with no effective AML/CFT compliance or VASP oversight.
While it creates the framework, it generally defers to further decrees or existing AML/CFT laws for specific requirements.
BEAC Regulation No. 01/17/CEMAC/UMAC/CM of March 30, 2017, on the Prevention and Suppression of Money Laundering and Terrorist Financing in the CEMAC Zone:
As a member of the Economic and Monetary Community of Central Africa (CEMAC), CAR is bound by regional regulations issued by the Banque des États de l'Afrique Centrale (BEAC).
This regulation provides the comprehensive AML/CFT framework for financial institutions within the CEMAC zone. While it predates the explicit regulation of VASPs, the CAR's 2022 crypto law implies that VASPs should adhere to the same stringent AML/CFT requirements as traditional financial institutions, as per FATF Recommendation 15.
Regulation No. 04/22/CM/UMAC/CM of 21 December 2022 concerning the regulation of Virtual Asset Service Providers (VASPs) in the CEMAC zone.
Instruction No. 001/GR/2023 of 31 January 2023 from COBAC on the practical implementation of certain provisions of Regulation No. 04/22/CM/UMAC/CM.
This regulation is further complemented by an instructional circular from the Banking Commission of Central Africa (COBAC), which is the primary supervisor for financial institutions in CEMAC:
Exceeds EUR 1,000 (or its equivalent in XAF or other currency) for transactions conducted by VASPs.
Collect and retain the following information for transactions above the threshold:
Originator Information: Name, physical address, national identity number (or customer identification number), date and place of birth, and virtual asset wallet address (or unique transaction identifier).
Beneficiary Information: Name, physical address, virtual asset wallet address (or unique transaction identifier).
Transmit this information to the beneficiary VASP, where applicable, immediately and securely.
Maintain records of all collected information for at least five (5) years.
Implement risk-based procedures to identify and verify the identity of customers, especially for higher-risk transactions or relationships.
Administrative sanctions: Fines, injunctions, public reprimands.
Withdrawal or suspension of operating licenses for VASPs.
Identification and Verification:
Collecting and verifying the identity of customers (natural and legal persons) using reliable, independent source documents, data, or information. This includes full name, date of birth, nationality, physical address, and identification numbers (e.g., passport, national ID card).
For legal entities, this includes verifying the legal form, name, address, directors, and beneficial owners.
Understanding the Nature of Business: Understanding the purpose and intended nature of the business relationship.
Ultimate Beneficial Ownership (UBO): Identifying and taking reasonable measures to verify the identity of the beneficial owner(s) of customers, especially for legal persons and arrangements.
Ongoing Monitoring: Continuously monitoring the business relationship and transactions undertaken throughout the course of the relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk categories, such as politically exposed persons (PEPs), cross-border correspondent relationships, or transactions involving high-risk jurisdictions or products.
Source of Funds/Wealth: For high-risk clients or large transactions, inquiring about the source of funds or wealth.
Obligation to Report: VASPs are obligated to report any suspicious transactions, regardless of the amount involved, to the national Financial Intelligence Unit (FIU).
Reporting Body: The national FIU in the Central African Republic is the Cellule Nationale de Traitement des Informations Financières (CENTIF).
Reports must be made promptly when a VASP knows, suspects, or has reasonable grounds to suspect that funds are the proceeds of a criminal activity or are related to terrorist financing.
Tipping-off is strictly prohibited, meaning VASPs must not inform the customer or any third party that an STR has been filed.
CDD Information: All documents and information obtained during the CDD process (identification documents, verification records).
Transaction Records: Records of all transactions, including sender and recipient information, amounts, dates, and types of virtual assets involved.
STRs: Copies of all suspicious transaction reports filed.
Regulator Name: Bank of Central African States (BEAC), the regional central bank for the six-nation Economic and Monetary Community of Central Africa (CEMAC), which includes CAR.
Entity Targeted: The Government of the Central African Republic (specifically its law adopting Bitcoin as legal tender).
The Central African Republic faces downside financing risks related to BEAC and has previously shown practices challenging regional monetary policy uniformity, suggesting potential for financial instability risks. While robust Anti-Money Laundering and Combating the Financing of Terrorism (AML-CFT) legal frameworks were noted in 2006, the provided evidence does not directly confirm that BEAC specifically argued a CAR law violated CEMAC conventions concerning unified monetary policy.
Outcome: CAR did not repeal its Bitcoin legal tender law, leading to a standoff with BEAC. However, the practical implementation of Bitcoin as legal tender has been largely ineffective, partly due to the lack of infrastructure and the regulatory friction with BEAC. BEAC continued to advise against the use of cryptocurrencies in the CEMAC zone.
Regulator Name: International Monetary Fund (IMF) – acting in an advisory and surveillance capacity, not a direct enforcement role but exerting significant policy pressure.
Outcome: The Sango Coin project faced significant delays, lack of widespread adoption, and a de-facto scaling back of its ambitious initial vision. While CAR did not abandon its crypto plans, the IMF's warnings contributed to the project's difficulties in attracting investment and achieving its goals. The project appears largely dormant or significantly scaled back in 2024.
VAT/GST Treatment (TVA - Taxe sur la Valeur Ajoutée):
Services related to cryptocurrencies (e.g., operating a crypto exchange for non-Bitcoin assets, providing crypto custody services) could potentially be subject to VAT if they are considered taxable services under the general VAT code. The standard VAT rate in CAR is 18%.
Lack of Specific Guidance: The most significant challenge is the almost complete absence of detailed tax regulations or official guidance from the CAR tax authorities (Direction Générale des Impôts - DGI) on how to practically implement the legal tender status of Bitcoin for all tax aspects, especially concerning non-Bitcoin cryptocurrencies.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — an on-shore VASP in CAR is subject to CEMAC's regional VASP regulation (No. 04/22/CM/UMAC/CM) and COBAC supervision with comprehensive AML/CFT obligations, but the national licensing framework is not functionally operational, creating high regulatory uncertainty and risk from BEAC/IMF opposition to CAR's crypto agenda.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?