Self-custodial wallet / non-custodial software in Gambia
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Gambia without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No specific crypto AML/CFT obligations apply to non-custodial software publishers under Gambian law, since the publisher never holds, controls, or has access to user funds.
- If the software publisher were to involve itself in any fiat conversion or money transfer activities, the Anti-Money Laundering and Combating the Financing of Terrorism Act, 2012 would apply, requiring CDD/KYC, ongoing transaction monitoring, STR filing to FIU-GAM, record-keeping, and designation of an MLRO.
- UN sanctions screening is legally required for all entities under Gambian jurisdiction — the publisher must screen against the UN Security Council Consolidated List and freeze/report matches to the NCFI.
- OFAC and EU sanctions screening are not legally mandatory but are highly recommended best practice for risk mitigation and maintaining global interoperability.
Key Restrictions
- The Central Bank of The Gambia has issued public warnings discouraging cryptocurrency use, creating a de facto prohibition for regulated financial institutions from dealing in crypto — this does not directly target non-custodial software publishers but signals a hostile regulatory environment.
- Cryptocurrencies are not recognized as legal tender in The Gambia.
- There is no specific VASP licensing regime — but pure non-custodial software publishing does not trigger any financial services classification under current law.
- If the software publisher were to facilitate fiat on/off ramps, it could be reclassified as a money transfer service requiring a CBG license.
- The publisher must comply with general business registration requirements if it has a local presence (e.g., registering with the Registrar General's Office).
Key Risks
- Regulatory ambiguity — the CBG's broad anti-crypto warnings create reputational and practical risk even for non-custodial software that is not directly regulated.
- Future FATF-implementing regulation (via GIABA commitments) could expand the definition of VASP to include software publishers, potentially imposing AML obligations retroactively or via new rules.
- No legal framework means no consumer-protection safe harbor — a user loss of private keys or software malfunction carries legal exposure without regulatory clarity.
- Banking and payment partners may refuse to work with any entity associated with crypto, regardless of custody structure, due to CBG warnings and de-risking.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific VASP Licensing Regime: Unlike jurisdictions with mature crypto regulations (e.g., Malta, Singapore, Dubai), Gambia has not enacted dedicated laws requiring specific licenses for entities operating purely as cryptocurrency exchanges, custody providers, or payment processors for virtual assets.
Cautious Stance from Regulators: The Central Bank of The Gambia has historically adopted a cautious approach to cryptocurrencies, often issuing warnings about the risks associated with them (volatility, illicit finance, lack of consumer protection). Their focus is on maintaining financial stability and protecting consumers.
General AML/CFT Framework: While there are no crypto-specific AML/CFT laws, the FIU-GAM enforces the general Anti-Money Laundering and Combating the Financing of Terrorism Act. Any entity involved in financial services, even if not specifically licensed for crypto, would implicitly be expected to comply with general AML/CFT obligations if their activities fall within the scope of "financial institutions" or "designated non-financial businesses and professions" (DNFBPs) as defined in the Act. This includes conducting KYC, monitoring transactions, and reporting suspicious activities.
Money Remittance/Transfer Service Providers: If a crypto exchange allows users to deposit fiat currency from a bank account and withdraw fiat to a bank account, it could be seen as performing activities similar to a money transfer service, which would require a license from the Central Bank of The Gambia.
General Business Registration: Any entity operating in Gambia, regardless of its specific financial activities, must comply with general business registration requirements (e.g., registering with the Registrar General's Office).
Currently, neither a specific registration nor a specific licensing regime exists for pure VASPs in Gambia.
AML/KYC Requirements: This is the most critical area. Even without specific crypto regulations, entities involved in financial flows are expected to adhere to the provisions of the Anti-Money Laundering and Combating the Financing of Terrorism Act. This would include:
No specific custodial license requirements exist for cryptocurrency or digital asset custodians in The Gambia. Since there is no dedicated legal framework for crypto assets, there's no licensing regime for service providers, including custodians.
De Facto Prohibition: The CBG's warnings essentially create a de facto prohibition for regulated financial institutions from dealing in or facilitating cryptocurrency transactions.
Public Discouragement: The public is strongly advised against engaging with cryptocurrencies due to high risks.
Lack of Legal Tender Status: Cryptocurrencies are not recognized as legal tender in The Gambia.
Absence of Licensing Framework: There is no legal or regulatory framework for licensing cryptocurrency exchanges or service providers.
Risk-Aversion: The Central Bank prioritizes financial stability and consumer protection by discouraging participation in the unregulated crypto market.
Direct Obligation: All entities, including VASPs, under Gambian jurisdiction are legally required to comply with UN sanctions lists. This means screening users and transactions against the UN Security Council Consolidated List.
Mandatory: Screening against the UN Security Council Consolidated List is a legal obligation under Gambian AML/CFT law.
Highly Recommended (Best Practice & Risk Mitigation): Screening against the OFAC SDN List, the EU Consolidated List, and other major national sanctions lists (e.g., UK Sanctions List) is crucial for managing international risk, ensuring global interoperability, and avoiding potential secondary sanctions or de-risking by international partners.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet software publisher that never holds user funds is unlikely to be classified as a VASP or MSB under current Gambian law (no specific VASP regime exists), and faces no direct AML obligations purely from software publishing; however, the CBG's hostile public stance on crypto, de facto prohibition for regulated financial institutions, and the risk of future FATF-driven regulation create meaningful operational risk and uncertainty.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?