← Regulations / Guinea-Bissau / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Guinea-Bissau

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Guinea-Bissau with a local entity, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD) — identification and verification of natural and legal persons, UBO identification, purpose of business relationship (Law No. 7/2014; Presidential Decree No. 17/2015; UEMOA Directive No. 003/2021/CM/UEMOA)
  • Risk-based approach — Simplified CDD permitted in low-risk situations; Enhanced CDD required for PEPs, high-risk jurisdictions, complex/unusually large transactions, and new technologies posing unknown risks
  • Ongoing monitoring of business relationships, including scrutiny of transactions to ensure consistency with customer risk profile
  • Suspicious Transaction Reporting (STR) — report any suspected ML/TF transactions (including virtual asset transactions) to the Unidade de Informação Financeira (UIF), regardless of amount
  • No-tipping-off prohibition regarding STR filings
  • Record-keeping — customer identification data, transaction records (including sender/receiver info for virtual asset transfers — Travel Rule), analysis of complex transactions, and copies of STRs for at least 5 years
  • UEMOA Directive No. 003/2021/CM/UEMOA incorporates FATF Recommendations, including specific provisions for virtual assets — VASPs are de facto subject to AML/CFT obligations under this regional directive

Key Restrictions

  • No specific crypto-custody license exists — cannot obtain a dedicated 'qualified custodian' or 'custodial wallet' license
  • BCEAO has issued warnings stating that cryptocurrencies are not recognized as legal tender and that unauthorized financial services (including what could be construed as digital asset custody) are prohibited without a BCEAO license
  • If services are deemed to fall under traditional financial services (e-money, payment services, remittance), a traditional financial license from BCEAO would likely be required
  • Local entity registration required — any company operating in Guinea-Bissau must have a registered local office and comply with general business registration
  • High regulatory uncertainty — no clear legal framework for custodial wallet services, creating legal ambiguity for operations

Key Risks

  • BCEAO enforcement risk — the central bank has formally warned against crypto activities and could treat unlicensed custodial wallet services as illegal financial intermediation
  • Regulatory ambiguity — no specific crypto laws means the operating model exists in a legal grey zone; risk of future retroactive regulation or enforcement
  • FATF/GIABA pressure — Guinea-Bissau faces international pressure to regulate VASPs; new rules could impose retroactive obligations or disrupt existing operations
  • AML/CFT exposure — VASPs are not explicitly listed as reporting entities under domestic law, creating uncertainty about whether obligations apply directly to the SaaS provider or its white-label clients
  • Lack of segregation rules — no statutory protection for client assets in custody, exposing the operator and its clients to insolvency risk

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 60% confidence

No Specific Requirements: There are no specific laws or regulations in Guinea-Bissau that define or require a "cryptocurrency custodial license."

custody 60% confidence

Implication of BCEAO Stance: Any entity seeking to offer financial services, including what might be construed as digital asset custody, would generally need a license from the BCEAO and/or national financial authorities. However, the BCEAO's stance against recognizing cryptocurrencies means that such a license specifically for crypto custody is not available or granted. Unlicensed provision of financial services is generally illegal.

custody 60% confidence

No Specific Rules: Since there is no specific regulatory framework for digital asset custody, there are no explicit rules in Guinea-Bissau mandating the segregation of client digital assets from the custodian's proprietary assets.

custody 60% confidence

No Specific Mandates: There are no specific regulatory mandates for the use of cold storage or other security measures for digital assets under custody.

custody 60% confidence

No Specific Definition: Guinea-Bissau's legal and regulatory framework does not currently define what constitutes a "qualified custodian" in the context of digital assets.

licensing 60% confidence

Absence of Specific Crypto Laws: There are no explicit laws or regulations defining virtual assets, outlining VASP licensing categories, setting specific capital requirements for crypto firms, or mandating a particular application process for crypto businesses.

licensing 60% confidence

Central Bank Stance: Like many central banks in the absence of specific legislation, the Banco Central da Guiné-Bissau (Central Bank of Guinea-Bissau) is more likely to have issued warnings regarding the risks associated with cryptocurrencies rather than establishing a regulatory framework for them. These warnings typically highlight price volatility, lack of consumer protection, and potential for illicit use. (Unfortunately, direct links to specific public warnings are often hard to find without deep local search capabilities in Portuguese).

licensing 60% confidence

None Specifically for Crypto: There are no specific "Virtual Asset Exchange License," "Crypto Custody License," or "Crypto Payment Processor License" available or required in Guinea-Bissau.

licensing 60% confidence

Traditional Financial Licenses (Potential Overlap/Future): If a VASP's activities were deemed to fall under the scope of traditional financial services (e.g., money remittance, e-money issuance, or general financial intermediation), then relevant licenses for those traditional activities might be required. However, without specific legal clarity on how virtual assets are classified in relation to existing financial laws, this remains ambiguous. It's more likely that traditional financial services licenses would not implicitly cover virtual asset activities without explicit legislative amendment.

licensing 60% confidence

AML/KYC: This is the most likely area where some implicit obligation might arise. Guinea-Bissau is a member of the Inter-Governmental Action Group against Money Laundering in West Africa (GIABA), an FATF-style regional body. This means it is committed to implementing FATF Recommendations, including Recommendation 15 on New Technologies, which requires countries to regulate Virtual Asset Service Providers (VASPs) for AML/CFT purposes.

licensing 60% confidence

Current Situation: While Guinea-Bissau has general Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) laws, it's not clear whether these laws explicitly designate VASPs as "reporting entities" or "financial institutions" that must adhere to AML/KYC obligations (e.g., customer due diligence, suspicious transaction reporting).

aml 40% confidence

Law No. 7/2014 of 30th May 2014 on the Prevention and Combat of Money Laundering and Terrorist Financing: This is the overarching national AML/CFT law. It defines reporting entities, establishes the Financial Intelligence Unit (FIU), and outlines general obligations.

aml 40% confidence

Presidential Decree No. 17/2015 of 27th May 2015: This decree further regulates and implements Law No. 7/2014, providing more detailed provisions for its application.

aml 40% confidence

UEMOA Directive No. 003/2021/CM/UEMOA relating to the fight against money laundering and terrorist financing in the UEMOA Member States: This critical regional directive, adopted in 2021, incorporates the revised FATF Recommendations, including specific provisions for virtual assets (FATF Recommendation 15). It mandates member states (including Guinea-Bissau) to apply AML/CFT measures to VASPs and to supervise or monitor them. National legislation and regulations are expected to be updated to reflect this directive.

aml 40% confidence

Identification and Verification:

aml 40% confidence

Purpose and Nature of the Business Relationship: Understanding the purpose and intended nature of the business relationship or transaction.

aml 40% confidence

Conducting ongoing monitoring of the business relationship, including scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP’s knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

aml 40% confidence

Risk-Based Approach: Applying CDD measures based on a risk assessment. This means:

aml 40% confidence

Report Suspicious Transactions: Report any transaction (or attempted transaction), regardless of its amount, that they suspect may involve money laundering or terrorist financing. This includes transactions related to virtual assets.

aml 40% confidence

No Tipping-Off: Prohibit the disclosure to the customer or any third party that an STR has been or will be filed.

aml 40% confidence

Unidade de Informação Financeira (UIF) - Financial Intelligence Unit of Guinea-Bissau:

aml 40% confidence

Transaction Data: All records necessary to reconstruct individual transactions, including amounts, currencies, dates, and parties involved. This includes sender and recipient information for virtual asset transfers (often referred to as the "Travel Rule" information, even if specific VASP regulations are still developing).

custody 60% confidence

FATF Influence: As a member of the global community, Guinea-Bissau is expected to adhere to the recommendations of the Financial Action Task Force (FATF) regarding Virtual Assets (VAs) and Virtual Asset Service Providers (VASPs). This includes regulations for AML/CFT for crypto businesses, which implicitly covers entities involved in custody. However, implementing these recommendations into national law for specific licensing and operational requirements for custody is a distinct step that has not yet occurred.

licensing 60% confidence

Local Presence: Any company operating in Guinea-Bissau would generally require a registered local office and compliance with local business registration requirements.

licensing 60% confidence

Compliance with General Business Laws: Businesses must still comply with all general company, tax, and labor laws.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet / SaaS services can operate in Guinea-Bissau only as a general business entity (no crypto-specific license exists), subject to BCEAO warnings against unauthorized financial services, general AML/CFT obligations under Law No. 7/2014 and UEMOA Directive No. 003/2021 (including CDD, STR, and Travel Rule-like record-keeping), and requiring a local registered office, with significant legal ambiguity and enforcement risk from the central bank.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?