Custodial wallet / SaaS in Liberia
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Liberia with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) & Enhanced Due Diligence (EDD) — must identify and verify all customers and beneficial owners, with EDD for high-risk customers/transactions (lr.aml.customer-due-diligence-cdd-enhanced)
- Record-keeping — maintain records of all transactions and customer information for a prescribed period (lr.aml.record-keeping-maintain-records-of-all)
- Transaction monitoring — implement systems to monitor transactions for suspicious activity (lr.aml.transaction-monitoring-implement-systems-to)
- Suspicious Transaction Reporting (STRs) — report suspicious activities to the Financial Intelligence Unit of Liberia (FIUL) under the AML/CFT Act of 2012 (lr.aml.suspicious-transaction-reporting-strs-report)
- Sanctions compliance — screen all customers and transactions against UN Consolidated Sanctions List, OFAC SDN List, and EU Consolidated List (lr.aml.compliance-requirement-for-vasps-vasps, lr.aml.continuous-screening-implement-ongoing-screening)
- Risk-based approach — must implement a risk-based AML/CFT framework allocating resources proportional to identified risks (lr.aml.risk-based-approach-implement-a-risk-based)
- Registration/licensing — VASPs must register or be licensed under evolving FATF-aligned requirements; specific VASP regulations are still developing (lr.aml.registrationlicensing-while-specific-vasp-regulations)
Key Restrictions
- No specific custodial license or qualified-custodian regime exists for digital assets — the operator would operate in a regulatory gray area, potentially needing to structure as a traditional financial institution under the Central Bank of Liberia Act of 1999 if activities are deemed to fall under existing financial services licensing (lr.custody.no-specific-custodial-license-for, lr.custody.regulatory-reference-the-primary-legal)
- No specific rules exist for segregation of client digital assets, insurance/bonding, cold storage mandates, or proof-of-reserves — these are unaddressed by the current legal framework (lr.custody.no-specific-rules-exist-for, lr.custody.no-specific-insurance-or-bonding, lr.custody.no-specific-mandates-for-cold)
- Local entity likely required — any entity offering financial services in Liberia would need to be incorporated locally if the CBL deems custody activities to fall under its purview (inferred from general financial services licensing requirements)
- The AML/CFT Act of 2012 predates crypto and may not explicitly cover virtual assets or custody; amendments would be needed for legal certainty (lr.custody.relevant-general-law-amlctf-liberia)
Key Risks
- Regulatory ambiguity — no specific digital asset custody framework exists, creating legal uncertainty around the lawfulness of custodial operations (lr.custody.no-specific-custodial-license-for)
- Enforcement risk — CBL could retroactively classify custodial wallet services as unlicensed financial services under the Central Bank of Liberia Act (lr.custody.regulatory-reference-the-primary-legal)
- FATF pressure — Liberia is under international pressure to develop VASP regulation; any future law could impose retroactive or onerous requirements (lr.custody.like-many-countries-liberia-is)
- AML framework gap — the existing AML/CFT Act (2012) may not explicitly cover VASPs, creating compliance uncertainty (lr.custody.relevant-general-law-amlctf-liberia)
- No asset protection rules — absence of segregation, insurance, or cold-storage mandates means no statutory protection for client assets in the event of insolvency or hack (lr.custody.no-specific-rules-exist-for, lr.custody.no-specific-insurance-or-bonding)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No specific custodial license for digital assets currently exists. Any entity in Liberia offering digital asset custody services would likely operate in a regulatory gray area or might be indirectly subject to general financial services licensing if its activities are deemed to fall under existing financial institution definitions (e.g., as a payment service provider or financial intermediary), but this would not be crypto-specific.
Regulatory Reference: The primary legal framework for financial institutions is the Central Bank of Liberia Act of 1999 (as amended), which outlines the CBL's powers and the licensing requirements for traditional financial institutions. This Act does not mention digital assets or crypto custody.
No specific rules exist for the segregation of client digital assets. In traditional finance, robust segregation rules protect client funds from institutional insolvency. Without a specific framework for digital assets, such rules are absent.
No specific insurance or bonding requirements for digital asset custodians. Traditional financial institutions might have deposit insurance (e.g., through the Liberia Deposit Insurance Corporation, LDIC) or capital requirements, but these do not extend to digital asset holdings.
No specific mandates for cold storage or other technical security requirements for digital asset custody. This level of technical detail in regulation is characteristic of more mature crypto regulatory frameworks, which Liberia does not yet possess.
No specific definition of a "qualified custodian" for digital assets. This term typically arises in jurisdictions where registered investment advisors or other regulated entities are required to hold client assets with a "qualified custodian," usually a regulated bank or trust company meeting specific criteria.
There is no publicly available information indicating specific pending legislation in Liberia related to cryptocurrency or digital asset custody.
Like many countries, Liberia is likely under pressure from international bodies like the Financial Action Task Force (FATF) to develop an anti-money laundering (AML) and counter-terrorism financing (CTF) framework that covers virtual assets. Any future legislation might first focus on AML/CTF obligations for Virtual Asset Service Providers (VASPs), which could indirectly touch upon custody providers as a type of VASP.
Relevant General Law (AML/CTF): Liberia does have an Anti-Money Laundering and Counter-Terrorist Financing Act (e.g., the 2012 Act), but it predates significant crypto adoption and may not explicitly cover virtual assets or custody in detail. Future amendments or new laws would be needed to address FATF recommendations for VASPs.
Act of the Legislature to Amend and Restate the Act Adopting a New Anti-Money Laundering and Countering the Financing of Terrorism Act of 2012 (AML/CFT Act of 2012, as amended): This is the primary legislation governing AML/CFT in Liberia. It establishes the legal framework for identifying, reporting, and prosecuting money laundering and terrorist financing. While it might not explicitly mention "virtual assets" or "VASPs" by name in its original form, its broad definitions of "funds," "financial institutions," and "designated non-financial businesses and professions" (DNFBPs) are often interpreted to cover virtual asset activities.
Financial Intelligence Unit of Liberia (FIUL) Act: This act establishes the FIUL as the central agency for receiving, analyzing, and disseminating suspicious transaction reports (STRs) and other financial intelligence.
VASP Compliance Requirements:
Registration/Licensing: While specific VASP regulations in Liberia are evolving, the FATF recommendations require VASPs to be licensed or registered.
Customer Due Diligence (CDD) & Enhanced Due Diligence (EDD): VASPs must conduct CDD on all customers, including identifying and verifying the identity of the customer and beneficial owners. EDD is required for high-risk customers or transactions.
Record-Keeping: Maintain records of all transactions and customer information for a prescribed period.
Transaction Monitoring: Implement systems to monitor transactions for suspicious activity.
Suspicious Transaction Reporting (STRs): Report any suspicious transactions or activities, including those related to sanctioned entities or geographic areas, to the FIUL.
Risk-Based Approach: Implement a risk-based approach to AML/CFT, allocating resources proportionally to the identified risks.
Sanctions Compliance: Implement robust systems and controls to ensure compliance with UN, OFAC, and EU sanctions lists, including screening customers and transactions.
Continuous Screening: Implement ongoing screening of all customers, beneficial owners, and associated parties against up-to-date UN, OFAC, and EU sanctions lists.
Compliance Requirement for VASPs: VASPs must screen all their customers and transactions against the UN Consolidated Sanctions List (e.g., ISIL (Da'esh) & Al-Qaida Sanctions List, DPRK Sanctions List, etc.) to identify any sanctioned parties or activities.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS operators may be able to operate in Liberia in a regulatory gray area, but face high uncertainty due to the absence of a specific digital asset custody framework; they would likely need to register under general AML/CFT obligations and potentially structure as a licensed financial institution, with no segregation, insurance, or proof-of-reserves rules currently in place.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?