On-shore VASP in Guinea-Bissau

Absence of Specific Crypto Laws: There are no explicit laws or regulations defining virtual assets, outlining VASP licensing categories, setting specific capital requirements for crypto firms, or mandating a particular application process for crypto businesses.

Central Bank Stance: Like many central banks in the absence of specific legislation, the Banco Central da Guiné-Bissau (Central Bank of Guinea-Bissau) is more likely to have issued warnings regarding the risks associated with cryptocurrencies rather than establishing a regulatory framework for them. These warnings typically highlight price volatility, lack of consumer protection, and potential for illicit use. (Unfortunately, direct links to specific public warnings are often hard to find without deep local search capabilities in Portuguese).

General Business Registration: Any entity wishing to operate in Guinea-Bissau, including a business that might involve virtual assets, would still need to comply with general company registration laws and obtain standard business licenses from the relevant government ministries (e.g., Ministry of Economy and Finance, Ministry of Justice) for its operational activities, irrespective of whether those activities involve virtual assets.

Neither (for Crypto-Specific Activities): Since there's no specific regulatory framework for virtual assets, there is no designated "registration regime" or "licensing regime" for crypto activities.

None Specifically for Crypto: There are no specific "Virtual Asset Exchange License," "Crypto Custody License," or "Crypto Payment Processor License" available or required in Guinea-Bissau.

Traditional Financial Licenses (Potential Overlap/Future): If a VASP's activities were deemed to fall under the scope of traditional financial services (e.g., money remittance, e-money issuance, or general financial intermediation), then relevant licenses for those traditional activities might be required. However, without specific legal clarity on how virtual assets are classified in relation to existing financial laws, this remains ambiguous. It's more likely that traditional financial services licenses would not implicitly cover virtual asset activities without explicit legislative amendment.

Capital Requirements: No specific capital requirements for crypto operations. General business capital requirements would apply for company incorporation.

AML/KYC: This is the most likely area where some implicit obligation might arise. Guinea-Bissau is a member of the Inter-Governmental Action Group against Money Laundering in West Africa (GIABA), an FATF-style regional body. This means it is committed to implementing FATF Recommendations, including Recommendation 15 on New Technologies, which requires countries to regulate Virtual Asset Service Providers (VASPs) for AML/CFT purposes.

Current Situation: While Guinea-Bissau has general Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) laws, it's not clear whether these laws explicitly designate VASPs as "reporting entities" or "financial institutions" that must adhere to AML/KYC obligations (e.g., customer due diligence, suspicious transaction reporting).

Financial Intelligence Unit (FIU): Guinea-Bissau has an FIU (Unidade de Informação Financeira - UIF). If a virtual asset business were identified as conducting financial activities that could facilitate money laundering, it might eventually fall under the purview of the general AML/CFT law and the FIU's supervision.

Local Presence: Any company operating in Guinea-Bissau would generally require a registered local office and compliance with local business registration requirements.

Non-existent for Crypto-Specific Licenses: As there are no specific crypto licenses, there is no application process for them.

General Business Registration: The application process would involve standard company formation procedures through the relevant commercial registries and government departments.

Law No. 5/2023 of April 28, 2023, on the Prevention and Combat of Money Laundering, Terrorist Financing, and Proliferation Financing.

Central Bank of Guinea-Bissau (Banco Central da Guiné-Bissau): This is the primary financial regulator. Any future crypto-related regulations would likely emanate from here.

Regulatory Uncertainty: High risk of future, potentially retroactive, regulation.

Increased Scrutiny: Any business involving significant financial flows, especially cross-border, could attract attention from the Central Bank or the FIU under general AML/CFT provisions.

E-money/Payment Tokens: If a stablecoin is issued by a licensed entity, represents a direct claim on CFA Francs at par, and is intended for payment purposes, the BCEAO would likely classify it under its electronic money (monnaie électronique) framework. This is the most plausible path for any "regulated" stablecoin in the region.

Law No. 7/2014 of 30th May 2014 on the Prevention and Combat of Money Laundering and Terrorist Financing: This is the overarching national AML/CFT law. It defines reporting entities, establishes the Financial Intelligence Unit (FIU), and outlines general obligations.

Presidential Decree No. 17/2015 of 27th May 2015: This decree further regulates and implements Law No. 7/2014, providing more detailed provisions for its application.

UEMOA Directive No. 003/2021/CM/UEMOA relating to the fight against money laundering and terrorist financing in the UEMOA Member States: This critical regional directive, adopted in 2021, incorporates the revised FATF Recommendations, including specific provisions for virtual assets (FATF Recommendation 15). It mandates member states (including Guinea-Bissau) to apply AML/CFT measures to VASPs and to supervise or monitor them. National legislation and regulations are expected to be updated to reflect this directive.

Instructions from the Central Bank of West African States (Banque Centrale des États de l'Afrique de l'Ouest - BCEAO): As the common central bank for UEMOA member states, the BCEAO issues regulations and instructions that financial institutions (and by extension, potentially VASPs) must adhere to, particularly concerning electronic money and other financial services. These often implement the UEMOA directives at an operational level.

Identification and Verification:

Obtaining and verifying the identity of the customer (natural persons: name, address, date of birth, nationality, unique identification number; legal persons: name, legal form, address of registered office, directors, beneficial owners, proof of incorporation).

For legal persons, understanding the ownership and control structure, and identifying the ultimate beneficial owner (UBO).

Purpose and Nature of the Business Relationship: Understanding the purpose and intended nature of the business relationship or transaction.

Conducting ongoing monitoring of the business relationship, including scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP’s knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

Ensuring that documents, data, or information collected under the CDD process are kept up-to-date.

Risk-Based Approach: Applying CDD measures based on a risk assessment. This means:

Simplified CDD (SCDD): Permitted in lower-risk situations.

Enhanced CDD (EDD): Required for higher-risk situations, such as transactions with Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, complex or unusually large transactions, or situations involving new technologies where the risks are not yet known.

Report Suspicious Transactions: Report any transaction (or attempted transaction), regardless of its amount, that they suspect may involve money laundering or terrorist financing. This includes transactions related to virtual assets.

No Tipping-Off: Prohibit the disclosure to the customer or any third party that an STR has been or will be filed.

Reporting Body: Reports must be submitted to the national Financial Intelligence Unit (FIU).

Customer Identification Data: Copies of identity documents, account files, and business correspondence.

Transaction Data: All records necessary to reconstruct individual transactions, including amounts, currencies, dates, and parties involved. This includes sender and recipient information for virtual asset transfers (often referred to as the "Travel Rule" information, even if specific VASP regulations are still developing).

Analysis of Complex Transactions: Records of the background and purpose of complex, unusual large transactions, and all unusual patterns of transactions.

STRs: Copies of all suspicious transaction reports filed.

Unidade de Informação Financeira (UIF) - Financial Intelligence Unit of Guinea-Bissau:

No Specific Requirements: There are no specific laws or regulations in Guinea-Bissau that define or require a "cryptocurrency custodial license."

Implication of BCEAO Stance: Any entity seeking to offer financial services, including what might be construed as digital asset custody, would generally need a license from the BCEAO and/or national financial authorities. However, the BCEAO's stance against recognizing cryptocurrencies means that such a license specifically for crypto custody is not available or granted. Unlicensed provision of financial services is generally illegal.

No Specific Rules: Since there is no specific regulatory framework for digital asset custody, there are no explicit rules in Guinea-Bissau mandating the segregation of client digital assets from the custodian's proprietary assets.

No specific crypto capital gains tax. Guinea-Bissau's general tax framework includes provisions for capital gains, primarily on the disposal of real estate, shares, and other fixed assets. It is highly uncertain how this would apply to virtual assets.

Income from Business Activity (Mining, Trading):

Businesses (Imposto sobre os Rendimentos das Pessoas Coletivas - IRPC): For registered companies engaging in crypto-related activities (e.g., a crypto exchange, investment fund, or a mining operation), any profits would likely be considered ordinary business income and subject to Corporate Income Tax.

Rates: The standard Corporate Income Tax (IRPC) rate in Guinea-Bissau is typically around 25% for most companies.

No specific crypto VAT rules. Guinea-Bissau imposes a Value Added Tax (VAT - Imposto sobre o Valor Acrescentado - IVA) on the supply of goods and services.

No Crypto-Specific Reporting: There are currently no specific tax reporting requirements unique to cryptocurrency holdings or transactions in Guinea-Bissau.

None currently enacted. As stated, Guinea-Bissau has not enacted any specific legislation concerning the taxation of cryptocurrencies or virtual assets. The general approach is likely a wait-and-see, following broader trends in the WAEMU region or international best practices, once a clearer regulatory framework emerges for digital assets.