Crypto-funded debit card in Madagascar

Such activities are currently unrestricted but carry significant legal and operational risks due to the absence of specific protections or guidelines.

Such activities may be implicitly restricted or discouraged under broader financial regulations, or even face outright prohibitions from the Central Bank.

No Specific Crypto Licensing Regime: There is no specific law or regulation mandating licenses for cryptocurrency exchanges, custody providers, or virtual asset payment processors in Madagascar, unlike jurisdictions that have implemented frameworks like MiCA (EU), MAS (Singapore), or VARA (Dubai).

Central Bank Caution/Warnings: The Banque Centrale de Madagascar (BCM) – the country's central bank and primary financial regulator – has historically maintained a cautious, if not prohibitive, stance towards cryptocurrencies. They have likely issued public warnings about the risks associated with virtual assets, including price volatility, lack of consumer protection, and potential for illicit finance. These warnings often imply that crypto is not recognized as legal tender and regulated financial institutions should not facilitate their use.

Exchanges (Fiat-to-Crypto/Crypto-to-Crypto): There are no specific licenses required. However, if an exchange facilitates fiat currency transactions (e.g., MGA deposits/withdrawals), it might inadvertently touch upon existing payment services regulations overseen by the BCM, potentially requiring a payment service provider license for the fiat portion of its operations.

Payment Processors (Virtual Assets): No specific licenses are required for processing payments in virtual assets. Similar to exchanges, if these services involve conversion to or from fiat currency, they may fall under existing electronic payment service regulations.

Local Presence: Typically, a locally incorporated entity (e.g., a company registered in Madagascar) with a physical presence and local management.

Governance and Management: Fit and proper tests for directors and senior management, demonstrating competence, integrity, and sound governance.

Technology and Security: Adequate IT infrastructure, cybersecurity measures, and data protection protocols to safeguard customer data and assets.

Consumer Protection: Measures to protect consumers, including clear terms of service, dispute resolution mechanisms, and transparent fee structures.

Capital Requirements: Sufficient capital to cover operational risks, ensure solvency, and protect customer assets (amounts would vary based on the scope of services).

High Regulatory Risk: Operating a cryptocurrency business in Madagascar currently carries significant regulatory risk due to the absence of clear rules. This can lead to uncertainty regarding legality, potential for sudden regulatory changes, or difficulties in interacting with traditional financial institutions.

Evolving Landscape: The global regulatory landscape for virtual assets is rapidly evolving. Madagascar, like other countries, is under pressure from international bodies (like FATF) to address VASP regulation. This situation could change at any time with the introduction of new laws or decrees.

FATF Recommendation 15 specifically calls for countries to regulate and supervise VASPs for AML/CFT purposes. Madagascar is expected to implement these recommendations, which could lead to future regulations.

Registration vs. Licensing Regime: Currently, neither a dedicated registration nor a licensing regime for VASPs exists in Madagascar.

Loi n° 2018-043 du 19 décembre 2018 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (Law No. 2018-043 of December 19, 2018, on the Fight against Money Laundering and the Financing of Terrorism).

Identification and Verification:

For individuals: Obtain and verify identity using reliable independent source documents (e.g., national ID card, passport), including full name, date of birth, address, and nationality.

For legal persons/arrangements: Obtain and verify legal name, legal form, proof of existence, powers that bind the legal person, and the identity of persons holding senior management positions.

Beneficial Ownership: Identify and verify the natural person(s) who ultimately own or control the customer, or the natural person(s) on whose behalf a transaction is being conducted.

Purpose and Intended Nature of Business Relationship: Understand the rationale behind the customer's transactions and the nature of their relationship with the VASP.

Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business and risk profile, including, where necessary, the source of funds.

Risk-Based Approach: Apply CDD measures on a risk-sensitive basis:

Simplified CDD: May be applied where the risks of money laundering or terrorist financing are identified as low.

Enhanced CDD (EDD): Required for higher-risk situations, such as:

Customers from high-risk jurisdictions.

Politically Exposed Persons (PEPs), their family members, and close associates.

Complex or unusually large transactions.

Transactions involving new technologies or anonymous transactions where the risks are deemed higher.

Obligation to Report: VASPs, as reporting entities, are legally obligated to report any suspicious transactions or activities to the Financial Intelligence Unit (FIU), regardless of the amount involved. This includes transactions that are unusual, lack clear economic rationale, or appear to be connected to money laundering or terrorist financing.

Timeliness: Reports must be made promptly, usually within a few days of the VASP becoming aware of the suspicion.

No Tipping-Off: Reporting entities and their employees are prohibited from disclosing to the customer or to third parties that a suspicious transaction report is being, or has been, submitted to the FIU.

Customer Identification Data: All records obtained through CDD processes (identification documents, beneficial ownership information, account opening forms).

Transaction Data: Records of all domestic and international transactions, including the nature of the transaction, amount, date, parties involved, and any associated messages or instructions.

Business Correspondence: Relevant business correspondence, including records of analysis performed for suspicious transaction reports.

Duration: Records must typically be kept for at least five (5) years after the business relationship has ended or after the date of an occasional transaction.

Most Likely: E-money/Payment Tokens (if MGA-denominated and backed): If a stablecoin is pegged to the Malagasy Ariary (MGA) and aims to facilitate payments, it would most likely fall under the existing framework for electronic money (e-money). The BCM regulates e-money issuers and payment service providers.

Definition of E-money: Typically, e-money is defined as electronically stored monetary value represented by a claim on the issuer, issued on receipt of funds, and accepted as a means of payment by persons other than the e-money issuer.

If classified as E-money: E-money regulations typically require issuers to hold 1:1 backing for all e-money issued. These funds must usually be held in segregated accounts at the central bank or a licensed commercial bank, protected from insolvency claims of the issuer. This ensures that users can always redeem their e-money at par with fiat currency.

If classified as E-money: Issuers of stablecoins operating as e-money providers would be required to obtain a license from the Banque Centrale de Madagascar (BCM). This licensing process typically involves stringent requirements concerning capital, governance, risk management, consumer protection, and AML/CFT compliance.

Loi n° 2018-006 relative aux services de paiement à Madagascar (Law on Payment Services in Madagascar): This law provides the overarching framework for payment services, including e-money. It defines the activities, licensing requirements, and supervision of payment service providers.