← Regulations / Gabon / Operating Models / DeFi frontend

DeFi protocol frontend in Gabon

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Gabon without local incorporation, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • CEMAC AML Regulation No. 01/16-CEMAC-UMAC-CM applies — VASPs performing functions akin to traditional financial services are expected to comply — customer identification and verification using reliable independent source documents (national ID, passport, etc.)
  • Ongoing due diligence on business relationships and transaction scrutiny
  • Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, complex/unusually large transactions, and virtual-asset-specific source-of-funds/wealth scrutiny
  • Suspicious Transaction Reports (STRs) must be filed promptly with Gabon's FIU (CENAREF) when suspicion of criminal proceeds or terrorist financing arises
  • No-tipping-off prohibition applies
  • Record-keeping for at least 5 years after end of business relationship or occasional transaction — includes identification documents, transaction records, account correspondence, and STR records
  • If the frontend takes fees or offers services akin to traditional financial intermediation, it may be treated as a financial institution and must comply with broader CEMAC AML/CFT obligations including CDD on all users

Key Restrictions

  • CEMAC Instruction n°001/GR/2021 prohibits financial institutions under BEAC supervision from dealing in crypto-assets — a DeFi frontend that is not a financial institution may operate in a legal grey area without explicit authorization
  • If the frontend facilitates investment tokens (securities), a COSUMAF-approved prospectus and prior authorization for public offering may be required
  • Payment tokens and stablecoins fall under BEAC jurisdiction and may be treated as electronic money, triggering additional regulation
  • No specific licensing framework exists for DeFi frontends — operation depends on non-prohibition to non-financial entities, creating legal uncertainty
  • Fee-taking by the frontend (e.g., swap fees, routing fees) increases likelihood of classification as a regulated financial activity under CEMAC rules

Key Risks

  • Legal grey area — no specific DeFi or VASP regulation means the frontend could face future enforcement or outright ban via BEAC/CEMAC regulatory changes
  • FATF-driven regulatory evolution in CEMAC zone could retroactively classify current operations as unlawful
  • If the frontend does not geofence Gabon/CEMAC residents, it could inadvertently facilitate unlicensed financial services activity
  • Fee collection creates risk of being classified as a financial institution — triggering BEAC prohibition on crypto activities
  • Gabon's FIU (CENAREF) may assert AML/CFT jurisdiction over any entity providing crypto services to residents, regardless of whether a specific VASP license exists

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Instruction n°001/GR/2021 relating to the ban on crypto-assets in the CEMAC zone.

licensing 20% confidence

Reference: While a direct official BEAC publication link for this specific instruction can be hard to find publicly, its existence and content are widely reported by regional news outlets and financial sector analyses. This instruction effectively prohibits financial institutions under BEAC supervision from engaging in crypto-asset-related activities.

licensing 20% confidence

Impact: This means that traditional banks and financial institutions in Gabon (and other CEMAC countries) are generally prohibited from offering crypto custody services.

licensing 20% confidence

No specific custodial license for digital assets has been established in Gabon.

licensing 20% confidence

Due to the BEAC's prohibitive stance, financial institutions cannot obtain such a license. For non-financial entities, there's no defined licensing regime for crypto custody. Operating a crypto custody service would likely be in an unregulated space, which can expose the entity to future enforcement actions or an inability to access traditional banking services.

licensing 20% confidence

No specific rules. Without a dedicated licensing and regulatory framework for digital asset custodians, there are no explicit mandates for the segregation of client digital assets from the custodian's proprietary assets.

licensing 20% confidence

The absence of specific regulations, leading to a legal grey area.

licensing 20% confidence

The potential for future regulatory changes, which could include outright bans, strict licensing, or a more facilitative framework.

licensing 60% confidence

Investment Tokens (Jetons d'Investissement): These are crypto-assets that "represent financial instruments within the meaning of Article 3 of Regulation No. 01/00-CM-UMAC of December 21, 2000, relating to the harmonization of financial instruments in the CEMAC zone." These are explicitly considered securities. The classification hinges on whether the token confers rights associated with traditional financial assets.

Evidence fact ga.licensing.payment-tokens-jetons-de-paiement-these not found (may have been renamed).

licensing 60% confidence

Authorization Requirement: Any public offering of investment tokens requires prior authorization from COSUMAF (Article 5).

aml 60% confidence

CEMAC Regulation No. 01/16-CEMAC-UMAC-CM on the Prevention and Repression of Money Laundering and Terrorist Financing (2016): This is the cornerstone legislation for AML/CFT in the CEMAC zone, which Gabon has adopted. It sets out the general obligations for all financial institutions and designated non-financial businesses and professions (DNFBPs), including those that might offer virtual asset services, to prevent and combat money laundering and terrorist financing.

aml 60% confidence

Note: While this regulation predates FATF's specific guidance on virtual assets (Recommendation 15 and its Interpretative Note from 2018), its broad scope often means VASPs are expected to comply as "financial institutions" or similar entities if they perform functions akin to traditional financial services.

aml 60% confidence

Identification and Verification:

aml 60% confidence

Individuals: Obtain and verify identity using reliable, independent source documents (e.g., national ID cards, passports, driver's licenses) for name, date of birth, place of birth, address, and nationality.

aml 60% confidence

Purpose and Nature of the Business Relationship: Understand the purpose and intended nature of the business relationship or the specific transaction.

aml 60% confidence

Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.

aml 60% confidence

Enhanced Due Diligence (EDD): Apply EDD in situations identified as higher risk, including:

aml 60% confidence

Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds (fiat or virtual assets) are the proceeds of a criminal activity, or are related to terrorist financing, must report its suspicions.

aml 60% confidence

Recipient: Reports must be made promptly to Gabon's Financial Intelligence Unit (FIU).

aml 60% confidence

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been filed.

aml 60% confidence

Duration: Records must typically be retained for at least five (5) years after the business relationship has ended or after the date of the occasional transaction.

Evidence fact ga.aml.cenaref-website-while-cenarefs-website not found (may have been renamed).

Evidence fact ga.aml.general-principle-if-virtual-asset not found (may have been renamed).

licensing 20% confidence

CENAREF Website: While CENAREF's website might not specifically mention "virtual assets" or "VASPs" in its publicly available texts, it is responsible for implementing AML/CFT laws that are generally aligned with FATF recommendations.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — DeFi protocol frontends can technically operate in Gabon's legal grey area because the BEAC ban only covers financial institutions, not non-financial entities, but there is no permissive licensing framework, AML obligations likely attach under CEMAC Regulation 01/16 if the frontend serves residents or takes fees, and the regulatory environment poses high ambiguity and future enforcement risk.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?