Remote VASP serving residents in Guinea-Bissau
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Guinea-Bissau with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) — obtain and verify identity of natural persons (name, address, date of birth, nationality, unique ID number) and legal persons (name, legal form, address, directors, UBOs) under Law No. 7/2014 and Presidential Decree No. 17/2015.
- Beneficial ownership identification — understand ownership and control structure for legal persons.
- Ongoing transaction monitoring — scrutinize transactions for consistency with customer profile, risk profile, and business relationship.
- Risk-based approach — apply Simplified CDD (SCDD) for low-risk situations and Enhanced CDD (EDD) for higher-risk situations, including PEPs, high-risk jurisdictions, and complex/unusual transactions.
- Suspicious Transaction Reporting — report any suspected money laundering or terrorist financing transaction (any amount) to the national FIU (Unidade de Informação Financeira - UIF).
- No tipping-off — prohibition on disclosing to the customer or any third party that an STR has been or will be filed.
- Record-keeping — maintain customer identification data, transaction records (including Travel Rule information for virtual asset transfers), analysis of complex/unusual transactions, and copies of STRs.
- Potentially subject to UEMOA Directive No. 003/2021/CM/UEMOA, which incorporates FATF Recommendations including those on virtual assets (Recommendation 15).
- Potential Travel Rule obligations — records necessary to reconstruct transactions including sender/receiver info for virtual asset transfers, derived from general AML/CFT record-keeping requirements.
Key Restrictions
- No specific VASP licensing regime exists — cannot obtain a crypto-specific license.
- If services are deemed to constitute traditional financial activities (money remittance, e-money issuance, financial intermediation), traditional financial licenses from BCEAO would be required, which the BCEAO has refused to grant for crypto activities.
- BCEAO has issued warnings against cryptocurrencies and generally prohibits unauthorized entities from providing payment services involving crypto.
- Local presence required — any company operating in Guinea-Bissau requires a registered local office and compliance with general business registration laws.
- General business registration (company incorporation, tax registration) is required through standard commercial registries.
- No segregation-of-client-assets rules exist, but also no legal framework to protect client digital assets in custody arrangements.
- Absence of any qualified custodian definition for digital assets means no lawful custodial framework exists.
Key Risks
- High regulatory ambiguity — no specific crypto laws exist, creating legal uncertainty for any crypto business model.
- BCEAO hostility — the regional central bank has actively warned against cryptocurrencies and issued communiqués prohibiting unauthorized payment services, creating direct enforcement risk.
- Future regulation risk — Guinea-Bissau is a GIABA member and subject to FATF standards (Recommendation 15 on VASPs), meaning regulation could be introduced with potential retroactive or immediate compliance demands.
- FIU scrutiny — any cross-border financial flows could attract attention from the FIU under general AML/CFT provisions, even without explicit VASP designation.
- Enforcement precedent — unlicensed operators could be treated as conducting unlicensed financial services or money transmission, with no clear exemption for remote/cross-border service.
- No clear pathway to compliance — inability to obtain a crypto-specific license means operators cannot lawfully regularize their position; the only 'compliant' path would be to avoid triggering traditional financial services definitions.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Absence of Specific Crypto Laws: There are no explicit laws or regulations defining virtual assets, outlining VASP licensing categories, setting specific capital requirements for crypto firms, or mandating a particular application process for crypto businesses.
Central Bank Stance: Like many central banks in the absence of specific legislation, the Banco Central da Guiné-Bissau (Central Bank of Guinea-Bissau) is more likely to have issued warnings regarding the risks associated with cryptocurrencies rather than establishing a regulatory framework for them. These warnings typically highlight price volatility, lack of consumer protection, and potential for illicit use. (Unfortunately, direct links to specific public warnings are often hard to find without deep local search capabilities in Portuguese).
Neither (for Crypto-Specific Activities): Since there's no specific regulatory framework for virtual assets, there is no designated "registration regime" or "licensing regime" for crypto activities.
None Specifically for Crypto: There are no specific "Virtual Asset Exchange License," "Crypto Custody License," or "Crypto Payment Processor License" available or required in Guinea-Bissau.
Traditional Financial Licenses (Potential Overlap/Future): If a VASP's activities were deemed to fall under the scope of traditional financial services (e.g., money remittance, e-money issuance, or general financial intermediation), then relevant licenses for those traditional activities might be required. However, without specific legal clarity on how virtual assets are classified in relation to existing financial laws, this remains ambiguous. It's more likely that traditional financial services licenses would not implicitly cover virtual asset activities without explicit legislative amendment.
AML/KYC: This is the most likely area where some implicit obligation might arise. Guinea-Bissau is a member of the Inter-Governmental Action Group against Money Laundering in West Africa (GIABA), an FATF-style regional body. This means it is committed to implementing FATF Recommendations, including Recommendation 15 on New Technologies, which requires countries to regulate Virtual Asset Service Providers (VASPs) for AML/CFT purposes.
Current Situation: While Guinea-Bissau has general Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) laws, it's not clear whether these laws explicitly designate VASPs as "reporting entities" or "financial institutions" that must adhere to AML/KYC obligations (e.g., customer due diligence, suspicious transaction reporting).
Financial Intelligence Unit (FIU): Guinea-Bissau has an FIU (Unidade de Informação Financeira - UIF). If a virtual asset business were identified as conducting financial activities that could facilitate money laundering, it might eventually fall under the purview of the general AML/CFT law and the FIU's supervision.
Local Presence: Any company operating in Guinea-Bissau would generally require a registered local office and compliance with local business registration requirements.
General AML/CFT Law: Guinea-Bissau is expected to have legislation aligned with international AML/CFT standards. The most recent comprehensive law would be:
Law No. 5/2023 of April 28, 2023, on the Prevention and Combat of Money Laundering, Terrorist Financing, and Proliferation Financing.
Central Bank of Guinea-Bissau (Banco Central da Guiné-Bissau): This is the primary financial regulator. Any future crypto-related regulations would likely emanate from here.
Regulatory Uncertainty: High risk of future, potentially retroactive, regulation.
Law No. 7/2014 of 30th May 2014 on the Prevention and Combat of Money Laundering and Terrorist Financing: This is the overarching national AML/CFT law. It defines reporting entities, establishes the Financial Intelligence Unit (FIU), and outlines general obligations.
Presidential Decree No. 17/2015 of 27th May 2015: This decree further regulates and implements Law No. 7/2014, providing more detailed provisions for its application.
UEMOA Directive No. 003/2021/CM/UEMOA relating to the fight against money laundering and terrorist financing in the UEMOA Member States: This critical regional directive, adopted in 2021, incorporates the revised FATF Recommendations, including specific provisions for virtual assets (FATF Recommendation 15). It mandates member states (including Guinea-Bissau) to apply AML/CFT measures to VASPs and to supervise or monitor them. National legislation and regulations are expected to be updated to reflect this directive.
Instructions from the Central Bank of West African States (Banque Centrale des États de l'Afrique de l'Ouest - BCEAO): As the common central bank for UEMOA member states, the BCEAO issues regulations and instructions that financial institutions (and by extension, potentially VASPs) must adhere to, particularly concerning electronic money and other financial services. These often implement the UEMOA directives at an operational level.
Unidade de Informação Financeira (UIF) - Financial Intelligence Unit of Guinea-Bissau:
No Specific Requirements: There are no specific laws or regulations in Guinea-Bissau that define or require a "cryptocurrency custodial license."
Implication of BCEAO Stance: Any entity seeking to offer financial services, including what might be construed as digital asset custody, would generally need a license from the BCEAO and/or national financial authorities. However, the BCEAO's stance against recognizing cryptocurrencies means that such a license specifically for crypto custody is not available or granted. Unlicensed provision of financial services is generally illegal.
Evidence fact gw.custody.bceao-communiqués-on-cryptocurrencies-example not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP serving Guinea-Bissau residents would need a local entity and general business registration, cannot obtain a crypto-specific license, faces BCEAO hostility and potential treatment as unlicensed financial services, but would likely attract general AML/CFT obligations under Law No. 7/2014 and UEMOA Directive 003/2021; the lack of any crypto-specific framework makes lawful operation extremely uncertain.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?