Mali

**Regulator Name:** Central Bank of West African States (BCEAO)

**Entity Targeted:** All regulated financial institutions (banks, microfinance institutions, payment service providers, etc.) within the UEMOA zone, including those operating in Mali. Also serves as a warning to the general public.

**Violation Type:** Engaging in any activity related to cryptocurrencies (issuance, exchange, holding, investment, facilitation of transactions, etc.). The BCEAO considers these activities to be unauthorized and high-risk.

**Penalty Amount:** Not a specific monetary penalty for a single action, but non-compliance by regulated entities could lead to severe administrative sanctions, including fines, withdrawal of operating licenses, and other regulatory penalties imposed by the BCEAO or national banking commissions.

**Date:** This stance has been consistent and reiterated over multiple years. Key communications include:

**December 2021:** The BCEAO issued a directive (Circular N°0000000001/M/DG/2021) explicitly prohibiting financial institutions under its purview from engaging in any activities related to virtual assets.

**April 2022:** The BCEAO Governor, Tiémoko Meyliet Koné, reiterated this prohibition, warning against the risks associated with cryptocurrencies.

**July 2023:** Another communication from the BCEAO confirmed its continued vigilance and prohibition.

**Outcome:** A de facto ban on formal cryptocurrency operations within Mali's regulated financial sector. Financial institutions are prohibited from offering crypto services, and the public is warned about the risks and lack of regulatory protection.

**Ecofin Agency (reporting on 2021 circular):** https://www.agenceecofin.com/banque/2812-94420-afrique-de-l-ouest-la-bceao-interdit-les-cryptomonnaies-dans-l-espace-uemoa (Accessed June 2024)

**Jeune Afrique (reporting on 2022 reiteration):** https://www.jeuneafrique.com/1335029/economie/la-bceao-reitere-son-interdiction-des-cryptomonnaies-dans-lespace-uemoa/ (Accessed June 2024)

**Le Nouveau Réveil (reporting on 2023 vigilance):** https://lenouveaureveil.com/uemoa-la-bceao-se-dit-attentive-a-levenement-des-crypto-monnaies-2/ (Accessed June 2024)

**Regulator/Enforcer Name:** Malian Judicial Police (Police Judiciaire), Public Prosecutor's Office.

**Entity Targeted:** Individuals or informal groups promoting and operating cryptocurrency-based investment scams or pyramid schemes.

**Violation Type:** Fraud, swindling (escroquerie), illegal financial operations, often disguised as crypto investment opportunities.

**Penalty Amount:** Varies depending on the scale of the fraud; can include prison sentences and financial reparations to victims. Specific public records of these amounts for *crypto-specific* cases in Mali are difficult to pinpoint from international sources.

**Date:** Ongoing, but specific publicized cases are sporadic.

**May 2023:** Local reports indicated arrests and investigations related to crypto investment scams promising high returns.

**Late 2022 / Early 2023:** Several warnings from public authorities and the BCEAO about the proliferation of fraudulent schemes, some leveraging cryptocurrencies.

**Outcome:** Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.

**Source URLs:** It's challenging to find specific, internationally reported URLs for individual Malian criminal crypto fraud cases with all details. However, regional reports and general warnings often cover this:

**Maliactu (general warning and context on scams):** https://maliactu.net/mali-escroquerie-aux-cryptomonnaies-attention-aux-pieges/ (Accessed June 2024 - reflects ongoing issue)

**Afrikipresse (regional context on UEMOA scam warnings):** https://www.afrikipresse.fr/economie/uemoa-la-bceao-met-en-garde-contre-les-arnaques-liees-aux-crypto-monnaies (Accessed June 2024)

**They are not recognized as legal tender** within the UEMOA zone.

**They are not regulated or supervised** by the BCEAO or any national financial authority in the region.

**Financial institutions supervised by the BCEAO (banks, microfinance institutions)** are generally prohibited or strongly discouraged from engaging in activities related to virtual assets due to the associated risks (money laundering, terrorist financing, consumer protection, financial stability).

**BCEAO Communiqué de Presse N° 006/CP/GOV/BCEAO/2018 du 21 mars 2018:** This communiqué explicitly warns the public and financial institutions against the use of virtual currencies like Bitcoin, stating they are not legal tender and are unregulated, thus presenting significant risks.

**None specifically for crypto.** Since there is no dedicated crypto regulatory framework, there are no specific licenses for these activities.

Operating as a payment processor might fall under existing general financial services laws if it involves traditional fiat currency transfers, but integrating crypto would likely be viewed as non-compliant with the BCEAO's directives.

**Neither a registration nor a specific licensing regime currently exists for VASPs in Mali.**

Entities operating in this space are doing so outside of a recognized regulatory framework. This is not a "light touch" approach; rather, it indicates a lack of formal permission or supervision, which can be interpreted as implicitly disallowed for formal financial sector participation.

**Capital requirements** specific to crypto services.

**Dedicated AML/KYC requirements** specifically for VASPs under a crypto licensing regime. However, Mali, as a member of GIABA (Groupe Intergouvernemental d'Action contre le Blanchiment d'Argent en Afrique de l'Ouest), is subject to general **Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) laws** that apply to the traditional financial sector. Any entity handling funds (even if virtual) would be well-advised to adhere to international best practices for AML/KYC to mitigate risks, as these general laws could potentially be applied by analogy or if the entity interacts with the traditional financial system.

**Relevant Body for AML/CFT:** GIABA (Inter-Governmental Action Group against Money Laundering in West Africa).

**Local presence mandates** under a specific crypto licensing regime. If an entity were to operate legally within the traditional financial sector, it would certainly require local incorporation and presence.

Since no specific license exists for virtual asset services, **there is no application process** for such a license in Mali.

**Legal Uncertainty:** The activities are not formally recognized, leaving operators in a legal grey area. This could lead to sudden regulatory crackdowns, asset freezes, or legal prosecution under existing financial laws if authorities deem the activities to be encroaching on regulated financial services without authorization.

**Banking Difficulties:** Entities dealing with virtual assets often face severe challenges in accessing traditional banking services, as banks are bound by BCEAO directives and their own risk assessments.

**Consumer Protection:** Without regulation, there are no formal mechanisms for consumer redress or protection, increasing risks for users.

**AML/CFT Compliance:** While no specific crypto AML laws exist, operators could still be held accountable under general AML/CFT legislation, especially if illicit funds are involved.

**Not Classified as E-money/Payment Tokens/Securities:** Stablecoins are not explicitly classified as e-money, payment tokens, or securities under existing BCEAO regulations.

**Treated as "Virtual Assets":** The BCEAO considers stablecoins, like other cryptocurrencies, as "virtual assets."

**Not Legal Tender:** The BCEAO has consistently stated that virtual assets are not legal tender in the UEMOA zone and do not benefit from any guarantee from the BCEAO. They are considered high-risk, speculative, and unregulated.

**Prohibited for Financial Institutions:** Financial institutions regulated by the BCEAO (banks, microfinance institutions, electronic money institutions) are generally prohibited from engaging in activities related to virtual assets.

**Communiqué de presse de la BCEAO du 16 juin 2021 relatif aux monnaies virtuelles:** This communiqué reiterates the BCEAO's stance on virtual currencies, stating they are not legal tender, are not regulated by the BCEAO, and carry significant risks.

*URL (Example of a reliable source reporting it, as BCEAO archive links can be tricky, the essence is widely reported):* https://www.africaintelligence.com/west-africa/2021/06/25/bceao-tightens-its-stance-on-cryptocurrencies,109670732-art (Note: While this is a news report, it accurately reflects the BCEAO's official communication. The BCEAO website's press release section (Communiqués de presse) would contain the original, but finding direct PDFs can be challenging. A direct search on bceao.int for "Communiqué 16 juin 2021 monnaies virtuelles" might yield it).

**Instruction N°004/2018/RB/BCEAO portant sur les conditions d’exercice de l’activité d’établissement de monnaie électronique (EME) dans l’UEMOA:** This instruction defines electronic money and regulates Electronic Money Institutions. Stablecoins do not fit into this framework as they are not issued by authorized EMIs under BCEAO supervision.

**None for Stablecoins (as "Virtual Assets"):** Since stablecoins are not recognized or regulated, there are no specific reserve requirements imposed by the BCEAO for them.

**For E-money (Not Applicable to Stablecoins):** For authorized electronic money, BCEAO Instruction N°004/2018 requires full segregation of funds received from users and placement of these funds in secure assets (e.g., in a credit institution). However, this framework does not apply to stablecoins.

**No Specific Licensing for Stablecoin Issuers:** There is no specific licensing regime for stablecoin issuers in Mali or the UEMOA zone.

**Unlicensed Activity:** Any entity issuing a stablecoin would be doing so outside the regulated financial system, and potentially in violation of existing BCEAO warnings against dealing in virtual assets.

**For E-money Issuers (Not Applicable to Stablecoins):** Issuers of electronic money (EMEs) are required to obtain a license from the BCEAO, meeting stringent capital, governance, and operational requirements as per Instruction N°004/2018.

**No Guaranteed Redemption Rights:** Since stablecoins are not recognized as legal tender or regulated financial products, users of stablecoins have no legally guaranteed right to redeem them for fiat currency through official financial channels in Mali. Redemption would depend solely on the issuer's terms and ability, which are not supervised by the BCEAO.

**None:** Given the complete lack of specific stablecoin regulation, there are no specific rules or prohibitions targeting algorithmic stablecoins. Such stablecoins would fall under the general classification of "virtual assets" and be subject to the same warnings and lack of recognition by the BCEAO. The inherent risks of algorithmic stablecoins (e.g., de-pegging, volatility) would reinforce the BCEAO's general cautionary stance on virtual assets.

**BCEAO Exploring CBDC:** The BCEAO has announced that it is exploring the possibility of issuing a Central Bank Digital Currency (CBDC) for the UEMOA region. This exploration is part of a broader global trend by central banks.

**Potential Impact on Stablecoins:** If the BCEAO were to issue a CBDC, it would be the official digital form of the CFA Franc (the common currency in UEMOA). This would likely lead to an even stronger regulatory stance against private stablecoins, which could be seen as competing with the official CBDC and potentially undermining monetary sovereignty. Private stablecoins might face outright bans or extremely stringent regulations if a BCEAO CBDC were launched.

**Status:** As of now, no UEMOA CBDC has been launched.

**Central Bank of West African States (BCEAO - Banque Centrale des États de l'Afrique de l'Ouest):** This is the overarching regional monetary authority that sets the primary regulatory framework for all UEMOA member states, including Mali. Its directives are binding on national financial institutions.

**Central Bank of Mali (Banque Centrale du Mali):** As the national branch of the BCEAO, it is responsible for implementing and enforcing the BCEAO's policies within Mali.

**Ministry of Economy and Finance (Ministère de l'Économie et des Finances):** While this ministry oversees general financial policy, in the realm of virtual assets, it defers to the BCEAO's regional directives.

**Legislation Name:** **BCEAO Communiqué regarding the regulatory framework for virtual assets / digital assets.** While there might not be a single "law" per se, the BCEAO's official pronouncements serve as the regulatory framework for its member states.

**Date:** Issued in **June 2021** (often referenced as Communiqué No. 1362/SP/BCEAO/2021, though sometimes the specific circular number is given as **Circular No. 2021/CIR/0002/SP/BCEAO** on virtual assets).

Virtual assets, including cryptocurrencies, are **not legal tender** in the UEMOA zone.

Financial institutions under its purview (banks, microfinance institutions, payment service providers) are **prohibited from engaging in activities related to virtual assets**, including holding, exchanging, or providing services involving them.

It warned the public about the **risks associated with virtual assets**, such as price volatility, lack of consumer protection, money laundering, and financing of terrorism.

**BCEAO Official Website (Press Releases):** https://www.bceao.int/fr/press-release (You may need to search this page or navigate to the relevant year/section for the specific communiqué).

**For Individuals:** While the BCEAO's directive primarily targets financial institutions, it strongly discourages individual participation due to the associated risks and the lack of legal recognition. Peer-to-peer trading might occur but operates entirely outside any regulated framework, offering no legal protection or recourse.

**For Financial Institutions:** **Prohibited.** Banks and other regulated financial entities in Mali are forbidden from facilitating crypto trading, holding cryptocurrencies, or offering any services related to them.

**No licensed or regulated crypto exchanges** can legally operate within Mali's formal financial system. Any platforms or individuals operating as exchanges would be doing so without official authorization and outside the regulatory perimeter, making them high-risk. Foreign or international exchanges might be accessible online, but they have no legal standing or regulatory oversight within Mali.

**Full Name:** *Directive relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme dans les États membres de l’UEMOA.* (Directive on the fight against money laundering and terrorist financing in UEMOA member states).

**Purpose:** This regional directive sets the foundational AML/CFT standards for all UEMOA member states, including Mali, aligning with FATF recommendations.

**Law N°2018-024 of August 21, 2018**, *amending Ordinance N°2015-032/P-RM of June 19, 2015, relating to the fight against money laundering and terrorist financing.*

**Purpose:** This is Mali's national legislation implementing the UEMOA directives. While it doesn't explicitly mention "virtual assets" or "VASPs" (as it largely predates comprehensive FATF VASP guidance), the broad definitions of "financial institutions," "financial activities," and "transfer of funds" could potentially be interpreted to include certain VASP activities.

For natural persons: Collecting and verifying identity (e.g., name, address, date of birth, nationality, unique identification number via official documents like passport or national ID card).

For legal entities: Collecting and verifying legal name, registered address, legal form, proof of incorporation, names of directors/authorized signatories, and identification of beneficial owners.

**Beneficial Ownership Identification:** Identifying and verifying the natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

**Purpose and Nature of Business Relationship:** Understanding the purpose and intended nature of the business relationship or occasional transaction.

**Ongoing Monitoring:** Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure consistency with the institution’s knowledge of the customer, their business, and risk profile.

**Risk-Based Approach:** Applying enhanced due diligence (EDD) for higher-risk customers (e.g., politically exposed persons - PEPs, customers from high-risk jurisdictions, or those engaged in complex/unusual transactions) and simplified due diligence (SDD) for lower-risk scenarios.

**Obligation:** Any transaction (regardless of amount) that an institution knows, suspects, or has reasonable grounds to suspect is related to money laundering or terrorist financing must be reported.

**No Tipping-Off:** VASPs and their employees are prohibited from disclosing to the customer or third parties that an STR has been filed or that a money laundering or terrorist financing investigation is being conducted.

**Transaction Records:** All transaction data, including the amount, currency, date, and details of the parties involved (originator and beneficiary), should be kept.

**Customer Identification Records:** Records obtained through CDD measures (copies of identification documents, account files, business correspondence) must be retained.

**Retention Period:** Generally, these records must be kept for **at least five (5) years** after the business relationship ends or after the date of an occasional transaction.

**Cellule Nationale de Traitement des Informations Financières (CENTIF):** Mali's FIU, responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs).

**Role:** This is Mali's Financial Intelligence Unit (FIU). It is the primary body responsible for receiving, analyzing, and disseminating suspicious transaction reports to law enforcement agencies. CENAREF plays a central role in the fight against money laundering and terrorist financing.

**URL:** Official government websites often link to CENAREF. While a dedicated, stable public website specifically for CENAREF Mali can be elusive, its information is typically found through the Ministry of Economy and Finance or the UEMOA regional bodies. *A direct, stable public URL specifically for CENAREF Mali is not consistently available, but information may be found via the Ministry of Economy and Finance of Mali.*

**Central Bank of West African States (BCEAO):**

**Role:** The BCEAO is the central bank for the eight UEMOA member states, including Mali. It is the primary regulator and supervisor for banks and traditional financial institutions. While it has expressed caution regarding virtual assets (as per Communiqué N°18/2021), it would likely play a significant role in any future licensing or prudential supervision of VASPs in the UEMOA zone.

**Ministry of Economy and Finance (Mali):**

**Role:** Responsible for overall economic and financial policy, including the transposition and enforcement of AML/CFT legislation.

**Lack of Specific VASP Licensing:** Currently, there is no explicit licensing regime for VASPs in Mali. This means that while they might be implicitly covered by general AML/CFT laws, the specifics of their operation, authorization, and prudential regulation remain largely undefined.

**FATF Standards:** As a country within a region subject to FATF scrutiny, Mali is under pressure to implement FATF Recommendation 15 (which specifically addresses virtual assets and VASPs) and its interpretive note, including the "Travel Rule" (FATF Recommendation 16 for wire transfers, extended to VASPs). This means that even without explicit national VASP legislation, VASPs are generally expected to adhere to these international best practices.

**Risk and Uncertainty:** Operating as a VASP in Mali carries regulatory uncertainty due to the evolving framework. It is crucial for any entity considering VASP activities to seek specific legal counsel in Mali to understand the current interpretations of existing laws and any new directives that may emerge.

**Requirements:** VASPs operating in Mali must screen their customers (KYC/CDD) and transactions against the consolidated UN Security Council Sanctions List. This list includes individuals and entities designated under various regimes, such as:

Al-Qaeda and ISIL (Da'esh) Sanctions Committee

DPRK (North Korea) Sanctions Committee

Other country-specific sanctions (e.g., related to Libya, Somalia, Sudan, Yemen, etc.)

**Obligations:** If a VASP identifies a match (a customer or transaction linked to a sanctioned individual/entity), it must:

Immediately freeze all virtual assets and funds associated with the designated person/entity.

Prohibit making any virtual assets, funds, or economic resources available to, or for the benefit of, the designated person/entity.

Report the hit to Mali's Financial Intelligence Unit (FIU), the Cellule Nationale de Traitement des Informations Financières (CENTIF).

**UN Security Council Resolutions:** Various resolutions mandate sanctions.

UN Security Council Sanctions Committees

**Requirements:** VASPs in Mali should consider screening against the EU Sanctions Map/Database, especially if they have any operational nexus, customer base, or transaction flow involving EU jurisdictions or entities. This includes:

Freezing of funds and economic resources of designated persons/entities.

Prohibition on making funds or economic resources available to them.

**Obligations:** Similar to UN sanctions, any hits should lead to asset freezing and reporting to CENTIF.

**Council Regulations and Decisions:** Implement EU sanctions.

EU Sanctions Map (External Action Service)

Consolidated list of persons, groups and entities subject to EU financial sanctions (Council of the EU)

They process transactions through the U.S. financial system.

Their activities involve U.S. persons or U.S.-origin goods/services.

They facilitate transactions for OFAC-sanctioned entities or individuals.

They operate in a manner that "causes" a U.S. person to violate sanctions.

**Requirements:** VASPs must screen customers and transactions against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List and other sanctions lists (e.g., Sectoral Sanctions Identifications List, Non-SDN Palestinian Legislative Council List, etc.).

**Obligations:** If a VASP identifies a transaction or customer involving an OFAC-sanctioned entity or individual:

It must block (freeze) the funds and assets.

It must prohibit all dealings with the sanctioned party.

It must report the blocked property and rejected transactions to OFAC within specific timeframes.

OFAC Sanctions Programs and Information

OFAC Specially Designated Nationals (SDN) List

**Central Bank of West African States (BCEAO):** The regional central bank for WAEMU member states, including Mali, which oversees financial institutions and has issued warnings and guidelines regarding cryptocurrencies, often advising caution due to their unregulated nature and risks. While the BCEAO has generally warned against crypto, national laws still mandate AML/CFT compliance for any entities engaged in virtual asset activities.

**Law N°2014-047/AN-RM of 16 October 2014 relating to the fight against money laundering and the financing of terrorism in Mali.** This law is the primary legal instrument for AML/CFT in Mali and aligns with FATF recommendations. It obligates financial institutions (which, under FATF guidance, would include VASPs) to implement AML/CFT measures.

*While a direct online link to this specific law in English is challenging to find, it is consistently cited as the main AML/CFT law in Mali by international bodies like GIABA.*

**FATF Recommendations:** Mali, through its membership in GIABA, is expected to implement FATF standards, including Recommendation 15 on New Technologies, which specifically covers virtual assets and VASPs.

**Customer Due Diligence (CDD):** Identify and verify the identity of all customers (KYC) and beneficial owners. This includes collecting names, addresses, dates of birth, etc.

**Sanctions Screening:** Screen customer names, addresses, and other identifiers against the UN, EU, and OFAC sanctions lists at onboarding and on an ongoing basis. For crypto, this can extend to screening associated wallet addresses using blockchain analytics tools against lists of addresses known to be associated with sanctioned entities.

**Transaction Screening:** Monitor transactions in real-time or near real-time for links to sanctioned entities, high-risk jurisdictions, or suspicious patterns.

**Source of Funds/Wealth:** For high-risk customers or large transactions, inquire about the source of funds and source of wealth to ensure they are legitimate and not from sanctioned sources.

**OFAC-Sanctioned Jurisdictions:** Countries like Cuba, Iran, North Korea, Syria, and specific regions (e.g., Crimea, Donetsk, Luhansk regions of Ukraine).

**High-Risk Jurisdictions:** Countries identified by FATF or GIABA as having strategic AML/CFT deficiencies (e.g., those on the FATF 'grey list' or 'black list'). Transactions with such jurisdictions often require enhanced due diligence.

**Countries under UN/EU Embargoes:** Depending on the specific sanctions regime, certain transactions with or involving individuals/entities from embargoed countries may be prohibited.

**Financial Penalties:** Significant fines for institutions and individuals.

**Imprisonment:** For individuals found guilty of money laundering, terrorist financing, or serious breaches of compliance obligations.

**License Revocation/Suspension:** VASPs (if licensed or registered) could lose their operating authorization.

**Reputational Damage:** Significant harm to the business's standing and trust.

**Asset Forfeiture:** Proceeds of illicit activities may be confiscated.

Mali has a general AML/CFT law, **Loi n°2019-005 du 25 février 2019 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme** (Law No. 2019-005 of February 25, 2019, on the fight against money laundering and terrorist financing). This law forms the backbone of its AML/CFT framework.

However, the FATF's Recommendation 15 concerning virtual assets and VASPs, and the subsequent Travel Rule guidance, were significantly updated in June 2019. Mali's 2019 law *predates* these specific updates, and subsequent assessments have indicated a lack of specific regulation for virtual assets and VASPs.

According to the **GIABA (Inter-Governmental Action Group against Money Laundering in West Africa) Follow-Up Report on Mali (March 2023)**, Mali was rated as **partially compliant (PC)** for FATF Recommendation 15. The report noted that Mali had not yet conducted a risk assessment specific to virtual assets and had not developed the necessary legal and regulatory framework to supervise or monitor VASPs, nor to apply AML/CFT requirements to them.

**Therefore, the FATF Travel Rule has not been specifically adopted or implemented for VASPs in Mali through dedicated legislation.**

Since specific legislation for VASPs and the Travel Rule has not been adopted, there is **no specific effective date** for its implementation in Mali. The general AML/CFT Law (Loi n°2019-005) became effective upon its promulgation in February 2019.

As VASPs are not specifically regulated under the current AML/CFT framework for the Travel Rule, there are **no specific threshold amounts** defined for virtual asset transactions that would trigger Travel Rule requirements.

General AML/CFT obligations for traditional financial institutions typically involve thresholds for cash transactions (e.g., usually around XOF 500,000 to XOF 1,000,000 for customer due diligence or suspicious transaction reporting, though specifics would be in decrees related to the 2019 law). However, these do not directly apply to the Travel Rule for virtual assets without specific VASP regulation.

Given the absence of specific legislation targeting VASPs, there is **no clear definition or licensing framework for VASPs** in Mali.

Entities providing virtual asset services (e.g., exchanges, wallet providers) are currently not explicitly designated as "assujettis" (reporting entities) under the AML/CFT law in the same way traditional financial institutions are.

Any existing obligations would only apply if such an entity were also licensed as a traditional financial institution (e.g., a bank offering crypto services), which is rare.

Since there is no specific regulatory framework for the Travel Rule for VASPs, there are **no defined technical implementation requirements**.

For traditional financial institutions, the requirements typically involve maintaining records of transactions, conducting customer due diligence (CDD), and reporting suspicious transactions to the Cellule Nationale de Traitement des Informations Financières (CENTIF) – Mali's Financial Intelligence Unit.

The general AML/CFT Law (Loi n°2019-005) outlines penalties for non-compliance for designated reporting entities. These can include administrative sanctions (fines, revocation of license) and criminal penalties (imprisonment, heavier fines) for serious offenses related to money laundering or terrorist financing.

However, without VASPs being explicitly designated as reporting entities for Travel Rule purposes, applying these specific penalties directly for non-compliance with the Travel Rule would be difficult. Penalties would only apply if a VASP's actions were found to violate broader existing AML/CFT provisions that could be loosely interpreted to cover their activities (e.g., failure to report a suspicious transaction if they were somehow deemed a financial intermediary).

**Loi n°2019-005 du 25 février 2019 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme:**

This law can be found on the website of CENTIF Mali (Malian Financial Intelligence Unit).

**GIABA Follow-Up Report on Mali (March 2023):**

**URL (example, GIABA hosts these reports):** You would typically find this on the GIABA website under "Mutual Evaluations" or "Follow-Up Reports."

A direct link for the March 2023 report is usually in the format like: https://www.giaba.org/reports/Mutual_Evaluation/Mali_FUR_EN.pdf (Note: The exact URL might change, but searching "GIABA Mali Follow Up Report 2023" should yield it). The report consistently indicates that R.15 for VASPs is not yet implemented.

**Note:** The BCEAO issued Communiqué N°18/2021 in 2021, reiterating that virtual assets are not legal tender in the UEMOA zone and warning financial institutions against their involvement in certain virtual asset activities, pending a specific regulatory framework. This indicates a cautious approach and an acknowledgment of the sector, but not yet a full regulatory embrace for VASPs.

The BCEAO issued a press release on **May 19, 2021**, warning the public about the risks associated with cryptocurrencies. It reiterated that cryptocurrencies are not recognized as legal tender in the UEMOA zone and are not subject to the supervision of the BCEAO or national financial authorities. The bank strongly discouraged financial institutions from engaging in activities related to cryptocurrencies.

This implies that any entity offering crypto custody services would be operating in an unregulated space, potentially contravening the spirit of the BCEAO's warnings.

**Regulatory Reference (BCEAO Press Release - in French):**

**Title:** "Communiqué de presse sur les monnaies virtuelles" (Press Release on Virtual Currencies)

*Note: Directly linking to a specific historical press release on the BCEAO site can be challenging as their structure changes. The information about the May 2021 warning is consistent across various financial news sources reporting on BCEAO's stance.*

There are **no specific custodial license requirements** for digital asset service providers in Mali, as there is no established regulatory framework for cryptocurrencies. Given the BCEAO's warnings, attempting to operate such a licensed service would likely face significant challenges or be deemed unauthorized.

**Segregation of Client Assets Rules:**

**No specific rules** exist for the segregation of client assets for cryptocurrency custodians. This is due to the absence of a dedicated regulatory framework for crypto custody.

**No specific insurance or bonding requirements** are mandated for digital asset custodians.

**No specific cold storage mandates** or any other operational security requirements are legally defined for cryptocurrency custody in Mali.

**No legal definition of a "qualified custodian"** exists within the Malian or UEMOA financial regulatory framework concerning digital assets.

There is **no publicly available information indicating any specific pending legislation** in Mali or at the UEMOA regional level directly addressing digital asset custody. The focus remains largely on cautioning against and monitoring cryptocurrencies, rather than integrating them into a regulated financial system. Discussions within the UEMOA might involve the possibility of a Central Bank Digital Currency (eCFA), but this is distinct from regulating private cryptocurrency custody services.