Self-custodial wallet / non-custodial software in Central African Republic
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Central African Republic with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD/EDD obligations apply at threshold > EUR 1,000 (or XAF equivalent) for single or linked transactions — requires originator name, physical address, national ID, date/place of birth, and wallet address
- Ongoing monitoring of business relationships and transactions to ensure consistency with customer risk profile
- Suspicious Transaction Reports (STRs) must be filed promptly with CENTIF (Cellule Nationale de Traitement des Informations Financières) regardless of amount
- Record-keeping of CDD documents, transaction records, and STRs for at least 5 years
- Risk-based procedures to identify and verify customers, especially for higher-risk transactions
- Enhanced Due Diligence (EDD) for PEPs, cross-border relationships, and high-risk jurisdictions
- Originator and beneficiary information must be transmitted to the beneficiary VASP immediately and securely for transactions above threshold
- Tipping-off is strictly prohibited
- COBAC Instruction No. 001/GR/2023 provides implementation guidance — VASPs must comply with both regional regulation and national AML/CFT law (Law No. 00-010 of May 8, 2000)
Key Restrictions
- VASP classification under CEMAC Regulation No. 04/22/CM/UMAC/CM likely captures entities that 'safekeep and/or administer virtual assets or instruments enabling control over virtual assets' — a pure non-custodial software publisher that never holds keys may fall outside this definition, but regulatory ambiguity is high
- The CEMAC framework requires VASPs to obtain authorization from BEAC/COBAC, which is a capital-intensive process requiring a licensed entity in the region
- Bitcoin's legal tender status was initially adopted then amended to revoke it; the legal environment around crypto in CAR is politically unstable and under pressure from BEAC and the IMF
- The Sango Coin project and associated tokenization schemes have created reputational and regulatory risks for any crypto operator associating with CAR
Key Risks
- High regulatory ambiguity — CAR has not established functional VASP licensing or supervision, so it is unclear whether a non-custodial wallet publisher is even a VASP under the CEMAC framework
- Political and economic pressure from BEAC (regional central bank) and the IMF creates a high risk of enforcement action or retroactive regulatory changes
- The Sango Coin project and land-tokenization schemes have drawn reputational and governance concerns, creating PR/exposure risk for any operator linked to CAR
- Non-custodial wallet publishers that do not touch user funds may argue they are not VASPs, but the definition of 'safekeeping and/or administration of virtual assets or instruments enabling control' could be interpreted broadly by regulators
- No functional licensing pathway currently exists in CAR — an operator could not practically obtain a license even if willing
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law No. 22.006 of April 27, 2022, on the Regulation of Cryptocurrencies in the Central African Republic:
Central African Republic has not established functional licensing or supervision of VASPs; rather, it has embraced opaque, unregulated cryptocurrency schemes that risk state asset capture by criminal organizations, with no effective AML/CFT compliance or VASP oversight.
BEAC Regulation No. 01/17/CEMAC/UMAC/CM of March 30, 2017, on the Prevention and Suppression of Money Laundering and Terrorist Financing in the CEMAC Zone:
As a member of the Economic and Monetary Community of Central Africa (CEMAC), CAR is bound by regional regulations issued by the Banque des États de l'Afrique Centrale (BEAC).
This regulation covers customer due diligence, suspicious transaction reporting, and record-keeping obligations for all regulated entities.
Law No. 00-010 of May 8, 2000, on Money Laundering and Terrorist Financing:
Regulation No. 04/22/CM/UMAC/CM of 21 December 2022 concerning the regulation of Virtual Asset Service Providers (VASPs) in the CEMAC zone.
This regulation is further complemented by an instructional circular from the Banking Commission of Central Africa (COBAC), which is the primary supervisor for financial institutions in CEMAC:
Instruction No. 001/GR/2023 of 31 January 2023 from COBAC on the practical implementation of certain provisions of Regulation No. 04/22/CM/UMAC/CM.
Exceeds EUR 1,000 (or its equivalent in XAF or other currency) for transactions conducted by VASPs.
Transfer of virtual assets.
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
Collect and retain the following information for transactions above the threshold:
Originator Information: Name, physical address, national identity number (or customer identification number), date and place of birth, and virtual asset wallet address (or unique transaction identifier).
Beneficiary Information: Name, physical address, virtual asset wallet address (or unique transaction identifier).
Transmit this information to the beneficiary VASP, where applicable, immediately and securely.
Maintain records of all collected information for at least five (5) years.
Implement risk-based procedures to identify and verify the identity of customers, especially for higher-risk transactions or relationships.
Administrative sanctions: Fines, injunctions, public reprimands.
Withdrawal or suspension of operating licenses for VASPs.
Referral to national judicial authorities for criminal prosecution under national AML/CFT laws, which can lead to imprisonment and substantial monetary fines for individuals and legal entities.
Regulator Name: Bank of Central African States (BEAC), the regional central bank for the six-nation Economic and Monetary Community of Central Africa (CEMAC), which includes CAR.
Outcome: CAR did not repeal its Bitcoin legal tender law, leading to a standoff with BEAC. However, the practical implementation of Bitcoin as legal tender has been largely ineffective, partly due to the lack of infrastructure and the regulatory friction with BEAC. BEAC continued to advise against the use of cryptocurrencies in the CEMAC zone.
Regulator Name: International Monetary Fund (IMF) – acting in an advisory and surveillance capacity, not a direct enforcement role but exerting significant policy pressure.
Outcome: The Sango Coin project faced significant delays, lack of widespread adoption, and a de-facto scaling back of its ambitious initial vision. While CAR did not abandon its crypto plans, the IMF's warnings contributed to the project's difficulties in attracting investment and achieving its goals. The project appears largely dormant or significantly scaled back in 2024.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet publisher may not be classified as a VASP if it never holds user keys, but the CEMAC framework's broad definition of 'safekeeping/administration of virtual assets' creates significant ambiguity, and the jurisdiction has no functional licensing pathway, active BEAC/IMF pressure, and reputational risks from the Sango Coin project.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?