Crypto-funded debit card in Mali
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is not permitted in Mali.
Verdict Details
- Permitted
- no
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification for natural persons (name, address, date of birth, nationality, official ID documents) — per ml.aml.customer-identification-and-verification and ml.aml.for-natural-persons-collecting-and
- Customer identification and verification for legal entities (legal name, registered address, legal form, proof of incorporation, directors, beneficial owners) — per ml.aml.for-legal-entities-collecting-and
- Beneficial ownership identification — per ml.aml.beneficial-ownership-identification-identifying-and
- Purpose and nature of business relationship assessment — per ml.aml.purpose-and-nature-of-business
- Ongoing transaction monitoring and due diligence — per ml.aml.ongoing-monitoring-conducting-ongoing-due
- Risk-based approach: Enhanced due diligence for PEPs, high-risk jurisdictions, complex/unusual transactions; simplified due diligence for low-risk — per ml.aml.risk-based-approach-applying-enhanced-due
- Suspicious transaction reporting to CENTIF (Cellule Nationale de Traitement des Informations Financières), Mali's FIU — per ml.aml.obligation-any-transaction-regardless-of and ml.aml.cellule-nationale-de-traitement-des
- No tipping-off prohibition — per ml.aml.no-tipping-off-vasps-and-their
- Record-keeping: transaction records and CDD records retained for at least 5 years after business relationship ends — per ml.aml.transaction-records-all-transaction-data, ml.aml.customer-identification-records-records-obtained, ml.aml.retention-period-generally-these-records
Key Restrictions
- BCEAO (Central Bank of West African States) has explicitly prohibited all regulated financial institutions from engaging in any virtual-asset-related activities (Circular N°0000000001/M/DG/2021, December 2021) — per ml.licensing.december-2021-the-bceao-issued
- No dedicated VASP licensing or registration regime exists in Mali — per ml.licensing.neither-a-registration-nor-a
- Cryptocurrencies are not recognized as legal tender within the UEMOA zone — per ml.licensing.they-are-not-recognized-as
- Financial institutions supervised by BCEAO (banks, microfinance institutions) are prohibited from crypto activities — per ml.licensing.financial-institutions-supervised-by-the
- Operating a crypto-to-fiat conversion (off-ramp) would require a regulated financial institution partner, but those partners are prohibited from crypto activity — per ml.licensing.operating-as-a-payment-processor
- No partner-bank or BIN-sponsor arrangement is legally available within regulated financial sector due to the BCEAO prohibition
Key Risks
- De facto criminal enforcement risk: crypto-related operations outside regulated channels risk fraud/prosecution under fraud and illegal financial operations laws — per ml.enforcement.entity-targeted-individuals-or-informal and ml.enforcement.outcome-arrests-investigations-and-potential
- BCEAO prohibition has been consistently reiterated (2021 circular, 2022 Governor statement, 2023 vigilance communication) showing sustained enforcement posture — per ml.licensing.april-2022-the-bceao-governor and ml.licensing.july-2023-another-communication-from
- No regulatory clarity on crypto means any formal banking or payment-service partner would be putting their license at risk
- Tax uncertainty: no crypto-specific tax regime, but gains treated under general tax law (30% corporate income tax for companies, progressive IRPP for individuals, 18% VAT on related services) — per ml.tax.businesses-companies-if-a-company, ml.tax.corporate-income-tax-rate-the, ml.tax.standard-vat-rate-the, ml.tax.services-related-to-crypto-however
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
December 2021: The BCEAO issued a directive (Circular N°0000000001/M/DG/2021) explicitly prohibiting financial institutions under its purview from engaging in any activities related to virtual assets.
April 2022: The BCEAO Governor, Tiémoko Meyliet Koné, reiterated this prohibition, warning against the risks associated with cryptocurrencies.
July 2023: Another communication from the BCEAO confirmed its continued vigilance and prohibition.
Neither a registration nor a specific licensing regime currently exists for VASPs in Mali.
They are not recognized as legal tender within the UEMOA zone.
Financial institutions supervised by the BCEAO (banks, microfinance institutions) are generally prohibited or strongly discouraged from engaging in activities related to virtual assets due to the associated risks (money laundering, terrorist financing, consumer protection, financial stability).
Operating as a payment processor might fall under existing general financial services laws if it involves traditional fiat currency transfers, but integrating crypto would likely be viewed as non-compliant with the BCEAO's directives.
BCEAO Communiqué de Presse N° 006/CP/GOV/BCEAO/2018 du 21 mars 2018: This communiqué explicitly warns the public and financial institutions against the use of virtual currencies like Bitcoin, stating they are not legal tender and are unregulated, thus presenting significant risks.
For natural persons: Collecting and verifying identity (e.g., name, address, date of birth, nationality, unique identification number via official documents like passport or national ID card).
For legal entities: Collecting and verifying legal name, registered address, legal form, proof of incorporation, names of directors/authorized signatories, and identification of beneficial owners.
Beneficial Ownership Identification: Identifying and verifying the natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.
Purpose and Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship or occasional transaction.
Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure consistency with the institution’s knowledge of the customer, their business, and risk profile.
Risk-Based Approach: Applying enhanced due diligence (EDD) for higher-risk customers (e.g., politically exposed persons - PEPs, customers from high-risk jurisdictions, or those engaged in complex/unusual transactions) and simplified due diligence (SDD) for lower-risk scenarios.
Obligation: Any transaction (regardless of amount) that an institution knows, suspects, or has reasonable grounds to suspect is related to money laundering or terrorist financing must be reported.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that an STR has been filed or that a money laundering or terrorist financing investigation is being conducted.
Transaction Records: All transaction data, including the amount, currency, date, and details of the parties involved (originator and beneficiary), should be kept.
Customer Identification Records: Records obtained through CDD measures (copies of identification documents, account files, business correspondence) must be retained.
Retention Period: Generally, these records must be kept for at least five (5) years after the business relationship ends or after the date of an occasional transaction.
Cellule Nationale de Traitement des Informations Financières (CENTIF): Mali's FIU, responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs).
Entity Targeted: All regulated financial institutions (banks, microfinance institutions, payment service providers, etc.) within the UEMOA zone, including those operating in Mali. Also serves as a warning to the general public. Violation Type: Engaging in any activity related to cryptocurrencies (issuance, exchange, holding, investment, facilitation of transactions, etc.). The BCEAO considers these activities to be unauthorized and high-risk. Penalty Amount: Not a specific monetary penalty for a single action, but non-compliance by regulated entities could lead to severe administrative sanctions, including fines, withdrawal of operating licenses, and other regulatory penalties imposed by the BCEAO or national banking commissions. Outcome: A de facto ban on formal cryptocurrency operations within Mali's regulated financial sector. Financial institutions are prohibited from offering crypto services, and the public is warned about the risks and lack of regulatory protection.
Entity Targeted: Individuals or informal groups promoting and operating cryptocurrency-based investment scams or pyramid schemes. Violation Type: Fraud, swindling (escroquerie), illegal financial operations, often disguised as crypto investment opportunities. Penalty Amount: Varies depending on the scale of the fraud; can include prison sentences and financial reparations to victims. Specific public records of these amounts for crypto-specific cases in Mali are difficult to pinpoint from international sources. Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.
Outcome: A de facto ban on formal cryptocurrency operations within Mali's regulated financial sector. Financial institutions are prohibited from offering crypto services, and the public is warned about the risks and lack of regulatory protection.
Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.
Businesses (Companies): If a company holds cryptocurrency as an asset and disposes of it at a gain, that gain would be considered part of the company's taxable profit and subject to the Corporate Income Tax (Impôt sur les Sociétés - IS).
Corporate Income Tax Rate: The standard corporate income tax rate in Mali is generally 30%.
Evidence fact ml.tax.standard-vat-rate-the not found (may have been renamed).
Services related to crypto: However, services performed for a fee in relation to cryptocurrencies (e.g., exchange fees charged by a platform, brokerage fees for facilitating transactions, wallet services, auditing smart contracts, etc.) would likely be considered taxable services and subject to the standard 18% VAT if the service provider is based in Mali and the service falls within the scope of VAT.
Individuals: Mali's CGI generally levies taxes on income derived from industrial, commercial, agricultural, and non-commercial activities, as well as salaries, property income, and certain capital gains.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — the BCEAO has issued a clear, repeatedly affirmed prohibition on regulated financial institutions engaging in any virtual-asset-related activities, making it legally impossible for a compliant crypto-funded debit card program (requiring a bank/BIN sponsor and off-ramp) to operate in Mali.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?