On-shore VASP in Gabon
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Gabon with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD under CEMAC Regulation No. 01/16-CEMAC-UMAC-CM: verify identity using independent source documents (national ID, passport) for individuals; verify company name, legal form, registered office, directors, and beneficial owners for legal entities.
- Ongoing monitoring: scrutiny of transactions throughout the business relationship to ensure consistency with customer knowledge and risk profile; keep identification data up-to-date.
- Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusually large transactions, and transactions with no apparent lawful purpose.
- Suspicious Transaction Reporting (STR): must promptly report suspicious funds or terrorist financing to Gabon's Financial Intelligence Unit (FIU).
- No tipping-off: prohibition on disclosing to customers or third parties that an STR has been filed.
- Record-keeping: retain transaction records, identification documents, account files, and STR records for at least 5 years after the business relationship ends.
- General AML obligations apply as VASPs performing functions akin to traditional financial institutions are expected to comply under CEMAC's broad AML framework.
Key Restrictions
- BEAC Instruction n°001/GR/2021 prohibits banks and financial institutions in the CEMAC zone (including Gabon) from offering crypto-asset services — an on-shore VASP cannot operate through a regulated financial institution.
- No specific digital asset custodial license exists in Gabon; the activity operates in a legal grey area.
- Public offering of 'investment tokens' (securities under COSUMAF purview) requires prior authorization from COSUMAF, including an approved prospectus.
- Absence of any specific regulatory framework for VASP licensing leaves operators without legal certainty and exposed to future enforcement.
- Payment tokens fall under BEAC jurisdiction and may be treated as electronic money, subjecting them to BEAC's restrictive/prohibitive stance.
Key Risks
- High regulatory ambiguity — no dedicated VASP licensing regime exists; the BEAC's prohibitive stance on crypto for financial institutions creates legal uncertainty for on-shore operators.
- Risk of future regulatory changes (outright ban, strict licensing, or new framework) that could retroactively affect operations.
- Enforcement exposure: operating in an unregulated space without a license could attract future sanctions or shutdown orders.
- Tax framework is underdeveloped — no specific crypto tax legislation; reliance on general tax code creates classification and reporting ambiguity for crypto holdings and transactions.
- Limited market access: traditional banking partners are prohibited from supporting crypto services, creating operational friction for fiat on/off ramps.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Instruction n°001/GR/2021 relating to the ban on crypto-assets in the CEMAC zone.
No specific custodial license for digital assets has been established in Gabon.
Due to the BEAC's prohibitive stance, financial institutions cannot obtain such a license. For non-financial entities, there's no defined licensing regime for crypto custody. Operating a crypto custody service would likely be in an unregulated space, which can expose the entity to future enforcement actions or an inability to access traditional banking services.
No specific rules. Without a dedicated licensing and regulatory framework for digital asset custodians, there are no explicit mandates for the segregation of client digital assets from the custodian's proprietary assets.
CENAREF Website: While CENAREF's website might not specifically mention "virtual assets" or "VASPs" in its publicly available texts, it is responsible for implementing AML/CFT laws that are generally aligned with FATF recommendations.
General Principle: If virtual asset service providers (including custodians) were to be explicitly recognized and regulated, they would fall under CENAREF's oversight for AML/CFT purposes. However, without specific designation, the practical application to crypto businesses remains a challenge.
The absence of specific regulations, leading to a legal grey area.
The potential for future regulatory changes, which could include outright bans, strict licensing, or a more facilitative framework.
Authorization Requirement: Any public offering of investment tokens requires prior authorization from COSUMAF (Article 5).
CEMAC Regulation No. 01/16-CEMAC-UMAC-CM on the Prevention and Repression of Money Laundering and Terrorist Financing (2016): This is the cornerstone legislation for AML/CFT in the CEMAC zone, which Gabon has adopted. It sets out the general obligations for all financial institutions and designated non-financial businesses and professions (DNFBPs), including those that might offer virtual asset services, to prevent and combat money laundering and terrorist financing.
Note: While this regulation predates FATF's specific guidance on virtual assets (Recommendation 15 and its Interpretative Note from 2018), its broad scope often means VASPs are expected to comply as "financial institutions" or similar entities if they perform functions akin to traditional financial services.
Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Enhanced Due Diligence (EDD): Apply EDD in situations identified as higher risk, including:
Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds (fiat or virtual assets) are the proceeds of a criminal activity, or are related to terrorist financing, must report its suspicions.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been filed.
Duration: Records must typically be retained for at least five (5) years after the business relationship has ended or after the date of the occasional transaction.
Absence: As of now, Gabon has not enacted specific legislation dedicated solely to the taxation of cryptocurrencies or virtual assets. Its tax framework relies on the general tax code.
Annual Income Tax Declaration (Déclaration Annuelle de l'Impôt sur le Revenu): All taxable income and capital gains, including those derived from cryptocurrency activities, must be declared annually.
Annual Corporate Tax Return (Déclaration de l'Impôt sur les Sociétés): Businesses must report all income, expenses, and assets in their financial statements, including any cryptocurrency holdings or income/gains/losses derived from them.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a locally-incorporated on-shore VASP in Gabon could theoretically operate, but faces a legally grey environment because no dedicated VASP licensing regime exists, BEAC Instruction n°001/GR/2021 prohibits financial institutions from engaging with crypto, and the operator would rely on general CEMAC AML/CFT obligations under CENAREF oversight without specific regulatory certainty.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?