← Regulations / Gabon / Operating Models / On-shore VASP

On-shore VASP in Gabon

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in Gabon with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • CDD under CEMAC Regulation No. 01/16-CEMAC-UMAC-CM: verify identity using independent source documents (national ID, passport) for individuals; verify company name, legal form, registered office, directors, and beneficial owners for legal entities.
  • Ongoing monitoring: scrutiny of transactions throughout the business relationship to ensure consistency with customer knowledge and risk profile; keep identification data up-to-date.
  • Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, complex/unusually large transactions, and transactions with no apparent lawful purpose.
  • Suspicious Transaction Reporting (STR): must promptly report suspicious funds or terrorist financing to Gabon's Financial Intelligence Unit (FIU).
  • No tipping-off: prohibition on disclosing to customers or third parties that an STR has been filed.
  • Record-keeping: retain transaction records, identification documents, account files, and STR records for at least 5 years after the business relationship ends.
  • General AML obligations apply as VASPs performing functions akin to traditional financial institutions are expected to comply under CEMAC's broad AML framework.

Key Restrictions

  • BEAC Instruction n°001/GR/2021 prohibits banks and financial institutions in the CEMAC zone (including Gabon) from offering crypto-asset services — an on-shore VASP cannot operate through a regulated financial institution.
  • No specific digital asset custodial license exists in Gabon; the activity operates in a legal grey area.
  • Public offering of 'investment tokens' (securities under COSUMAF purview) requires prior authorization from COSUMAF, including an approved prospectus.
  • Absence of any specific regulatory framework for VASP licensing leaves operators without legal certainty and exposed to future enforcement.
  • Payment tokens fall under BEAC jurisdiction and may be treated as electronic money, subjecting them to BEAC's restrictive/prohibitive stance.

Key Risks

  • High regulatory ambiguity — no dedicated VASP licensing regime exists; the BEAC's prohibitive stance on crypto for financial institutions creates legal uncertainty for on-shore operators.
  • Risk of future regulatory changes (outright ban, strict licensing, or new framework) that could retroactively affect operations.
  • Enforcement exposure: operating in an unregulated space without a license could attract future sanctions or shutdown orders.
  • Tax framework is underdeveloped — no specific crypto tax legislation; reliance on general tax code creates classification and reporting ambiguity for crypto holdings and transactions.
  • Limited market access: traditional banking partners are prohibited from supporting crypto services, creating operational friction for fiat on/off ramps.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Instruction n°001/GR/2021 relating to the ban on crypto-assets in the CEMAC zone.

licensing 20% confidence

No specific custodial license for digital assets has been established in Gabon.

licensing 20% confidence

Due to the BEAC's prohibitive stance, financial institutions cannot obtain such a license. For non-financial entities, there's no defined licensing regime for crypto custody. Operating a crypto custody service would likely be in an unregulated space, which can expose the entity to future enforcement actions or an inability to access traditional banking services.

licensing 20% confidence

No specific rules. Without a dedicated licensing and regulatory framework for digital asset custodians, there are no explicit mandates for the segregation of client digital assets from the custodian's proprietary assets.

licensing 20% confidence

CENAREF Website: While CENAREF's website might not specifically mention "virtual assets" or "VASPs" in its publicly available texts, it is responsible for implementing AML/CFT laws that are generally aligned with FATF recommendations.

licensing 20% confidence

General Principle: If virtual asset service providers (including custodians) were to be explicitly recognized and regulated, they would fall under CENAREF's oversight for AML/CFT purposes. However, without specific designation, the practical application to crypto businesses remains a challenge.

licensing 20% confidence

The absence of specific regulations, leading to a legal grey area.

licensing 20% confidence

The potential for future regulatory changes, which could include outright bans, strict licensing, or a more facilitative framework.

licensing 60% confidence

Authorization Requirement: Any public offering of investment tokens requires prior authorization from COSUMAF (Article 5).

aml 60% confidence

CEMAC Regulation No. 01/16-CEMAC-UMAC-CM on the Prevention and Repression of Money Laundering and Terrorist Financing (2016): This is the cornerstone legislation for AML/CFT in the CEMAC zone, which Gabon has adopted. It sets out the general obligations for all financial institutions and designated non-financial businesses and professions (DNFBPs), including those that might offer virtual asset services, to prevent and combat money laundering and terrorist financing.

aml 60% confidence

Note: While this regulation predates FATF's specific guidance on virtual assets (Recommendation 15 and its Interpretative Note from 2018), its broad scope often means VASPs are expected to comply as "financial institutions" or similar entities if they perform functions akin to traditional financial services.

aml 60% confidence

Identification and Verification:

aml 60% confidence

Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.

aml 60% confidence

Enhanced Due Diligence (EDD): Apply EDD in situations identified as higher risk, including:

aml 60% confidence

Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds (fiat or virtual assets) are the proceeds of a criminal activity, or are related to terrorist financing, must report its suspicions.

aml 60% confidence

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been filed.

aml 60% confidence

Duration: Records must typically be retained for at least five (5) years after the business relationship has ended or after the date of the occasional transaction.

tax 40% confidence

Absence: As of now, Gabon has not enacted specific legislation dedicated solely to the taxation of cryptocurrencies or virtual assets. Its tax framework relies on the general tax code.

tax 40% confidence

Annual Income Tax Declaration (Déclaration Annuelle de l'Impôt sur le Revenu): All taxable income and capital gains, including those derived from cryptocurrency activities, must be declared annually.

tax 40% confidence

Annual Corporate Tax Return (Déclaration de l'Impôt sur les Sociétés): Businesses must report all income, expenses, and assets in their financial statements, including any cryptocurrency holdings or income/gains/losses derived from them.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a locally-incorporated on-shore VASP in Gabon could theoretically operate, but faces a legally grey environment because no dedicated VASP licensing regime exists, BEAC Instruction n°001/GR/2021 prohibits financial institutions from engaging with crypto, and the operator would rely on general CEMAC AML/CFT obligations under CENAREF oversight without specific regulatory certainty.

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?