Self-custodial wallet / non-custodial software in Mali
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is not permitted in Mali.
Verdict Details
- Permitted
- no
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- No specific AML obligations attach to self-custodial wallet software publishers because they do not fall within the definition of a financial institution or VASP under current Malian/UEMOA law.
- The existing AML framework (Law N°2018-024 and UEMOA Directive 02/2015/CM/UEMOA) targets traditional financial institutions and formal-sector entities; a non-custodial software publisher with no custody or control over funds does not trigger CDD, STR, or record-keeping obligations under the current text.
- If the publisher were somehow deemed a financial actor by CENTIF (Mali's FIU), general AML obligations would hypothetically apply — but no precedent or guidance extends the framework to self-custodial software.
- CENTIF (Cellule Nationale de Traitement des Informations Financières) is Mali's FIU, but no published guidance targets non-custodial wallet software.
Key Restrictions
- The BCEAO (Central Bank of West African States) has issued multiple prohibitions and warnings — December 2021 Circular, April 2022 reiteration, July 2023 confirmation — explicitly barring financial institutions from engaging in any cryptocurrency-related activities.
- Cryptocurrencies are not recognized as legal tender in the UEMOA zone and are not regulated or supervised by the BCEAO or any national financial authority in Mali.
- A self-custodial wallet publisher cannot legally partner with or use any BCEAO-supervised financial institution (e.g., banks, microfinance institutions, payment processors) for on-ramp/off-ramp services.
- No dedicated licensing or registration framework exists for VASPs in Mali — operating in this space is entirely outside any recognized regulatory framework and carries a de facto prohibition risk.
Key Risks
- The BCEAO prohibition applies to financial institutions, but the broader regulatory environment creates a chilling effect: even non-custodial software publishing could be targeted as facilitating unregulated crypto activity.
- Enforcement against crypto-related activity has occurred — arrests and investigations into crypto investment scams (May 2023, late 2022/early 2023) show that law enforcement (Malian Judicial Police, Public Prosecutor's Office) treats crypto-related operations as potentially fraudulent.
- No regulatory clarity exists for non-custodial software; a software publisher could face operational bans, website blocks, or criminal investigation simply for distributing wallet software to Malian residents.
- The UEMOA region is pursuing a coordinated anti-crypto stance — future regional legislation (e.g., a potential VASP framework under FATF pressure) could impose retroactive or unexpected obligations on software publishers.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
December 2021: The BCEAO issued a directive (Circular N°0000000001/M/DG/2021) explicitly prohibiting financial institutions under its purview from engaging in any activities related to virtual assets.
April 2022: The BCEAO Governor, Tiémoko Meyliet Koné, reiterated this prohibition, warning against the risks associated with cryptocurrencies.
July 2023: Another communication from the BCEAO confirmed its continued vigilance and prohibition.
They are not recognized as legal tender within the UEMOA zone.
They are not regulated or supervised by the BCEAO or any national financial authority in the region.
Financial institutions supervised by the BCEAO (banks, microfinance institutions) are generally prohibited or strongly discouraged from engaging in activities related to virtual assets due to the associated risks (money laundering, terrorist financing, consumer protection, financial stability).
Neither a registration nor a specific licensing regime currently exists for VASPs in Mali.
Entities operating in this space are doing so outside of a recognized regulatory framework. This is not a "light touch" approach; rather, it indicates a lack of formal permission or supervision, which can be interpreted as implicitly disallowed for formal financial sector participation.
Law N°2018-024 of August 21, 2018, amending Ordinance N°2015-032/P-RM of June 19, 2015, relating to the fight against money laundering and terrorist financing.
The BCEAO issued a press release on May 19, 2021, warning the public about the risks associated with cryptocurrencies. It reiterated that cryptocurrencies are not recognized as legal tender in the UEMOA zone and are not subject to the supervision of the BCEAO or national financial authorities. The bank strongly discouraged financial institutions from engaging in activities related to cryptocurrencies.
This implies that any entity offering crypto custody services would be operating in an unregulated space, potentially contravening the spirit of the BCEAO's warnings.
Outcome: A de facto ban on formal cryptocurrency operations within Mali's regulated financial sector. Financial institutions are prohibited from offering crypto services, and the public is warned about the risks and lack of regulatory protection.
Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.
Entity Targeted: Individuals or informal groups promoting and operating cryptocurrency-based investment scams or pyramid schemes. Violation Type: Fraud, swindling (escroquerie), illegal financial operations, often disguised as crypto investment opportunities. Penalty Amount: Varies depending on the scale of the fraud; can include prison sentences and financial reparations to victims. Specific public records of these amounts for crypto-specific cases in Mali are difficult to pinpoint from international sources. Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.
May 2023: Local reports indicated arrests and investigations related to crypto investment scams promising high returns.
Late 2022 / Early 2023: Several warnings from public authorities and the BCEAO about the proliferation of fraudulent schemes, some leveraging cryptocurrencies.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
No — a self-custodial wallet software publisher cannot legally operate in Mali under current conditions; the BCEAO has imposed a de facto prohibition on crypto-related activity, no VASP licensing framework exists, and the publisher would be operating in a fully unregulated and implicitly banned space with enforcement risks including arrests for crypto-related operations.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?