Crypto ATM / kiosk operator in Mauritania

Absence of Specific Legislation: Mauritania has not enacted specific laws or decrees to regulate virtual assets, blockchain technology, or cryptocurrency service providers. Unlike many countries that have adopted or are in the process of adopting bespoke crypto regulations, Mauritania has not yet done so.

Central Bank Stance: The Banque Centrale de Mauritanie (BCM) – the country's central bank and primary financial regulator – has generally taken a cautious stance. While there hasn't been an outright ban, the BCM has historically issued warnings regarding the risks associated with cryptocurrencies, including their volatility, potential for fraud, and use in illicit activities. These warnings serve to inform the public and financial institutions of the risks rather than establishing a regulatory framework.

No Specific Licenses: Consequently, there are no specific licenses or registration requirements for cryptocurrency exchanges, custody providers, or payment processors.

Neither a dedicated licensing nor a registration regime for virtual assets exists.

Entities wishing to operate a business in Mauritania would, however, need to comply with general Mauritanian commercial law for company registration and obtain standard business permits, which are distinct from financial service licenses.

Local Presence: While no specific local presence requirement exists for crypto entities, any business operating in Mauritania would generally need to establish a legal entity and physical presence in accordance with Mauritanian commercial law.

Legal Uncertainty: Operating a virtual asset business in a jurisdiction without clear regulations carries significant legal and operational risks. There is no legal certainty regarding the status of contracts, consumer protection, tax implications, or the legality of operations.

Risk of Future Regulation: The absence of regulation does not mean permissibility. Mauritania could, at any time, introduce new laws, including bans, strict licensing requirements, or even retroactive measures.

Law N° 2013-030 of 17 July 2013 on Combating Money Laundering and Terrorist Financing (Loi n° 2013-030 du 17 juillet 2013 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme).

Identification and Verification:

For Natural Persons: Obtain and verify the customer's identity using reliable, independent source documents, data, or information (e.g., national ID card, passport, residence permit). This includes full name, date of birth, place of birth, address, and nationality.

Beneficial Ownership Identification: Identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer, including for legal entities and arrangements (e.g., trusts). This typically involves identifying individuals who ultimately own or control more than a specified percentage (e.g., 25%) of the entity.

Purpose and Intended Nature of Business Relationship: Understand and, where appropriate, obtain information on the purpose and intended nature of the business relationship or occasional transaction.

Ongoing Monitoring: Conduct ongoing monitoring of the business relationship and transactions undertaken throughout the course of the relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes reviewing transactions for unusual patterns.

Risk-Based Approach: Apply CDD measures on a risk-sensitive basis. VASPs must have policies and procedures for assessing and managing risks associated with different customers, products, services, and geographic areas. Enhanced Due Diligence (EDD) must be applied for higher-risk customers (e.g., Politically Exposed Persons - PEPs), complex or unusually large transactions, and situations identified as high-risk. Simplified Due Diligence (SDD) may be permitted for lower-risk situations, but the VASP must be able to demonstrate that the risk is genuinely low.

Screening: Screen customers against national and international sanctions lists (e.g., UN Security Council resolutions).

Obligation to Report: If a VASP knows, suspects, or has reasonable grounds to suspect that funds or other assets, regardless of their amount, are proceeds of a criminal activity or are linked to terrorist financing, it must promptly report this to the Financial Intelligence Unit (FIU).

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that a suspicious transaction report has been or will be submitted.

All data obtained through CDD procedures (identification documents, beneficial ownership information).

Records of transactions, including the amount, currency (virtual and fiat, where applicable), dates, and parties involved (originator and beneficiary information, as per FATF Travel Rule principles).

Cellule Nationale de Traitement du Renseignement Financier (CENTRIF) - The Financial Intelligence Unit (FIU):

Banque Centrale de Mauritanie (BCM) - The Central Bank of Mauritania:

Ban on Financial Institutions Dealing with Cryptocurrencies:

Legal Reference: Circular N° 004/R/2019 issued by the Banque Centrale de Mauritanie (BCM) (Central Bank of Mauritania).

Content: This circular prohibits banks, financial institutions, and payment service providers supervised by the BCM from engaging in any activities related to cryptocurrencies, including buying, selling, holding, or facilitating transactions involving them. It cites concerns about financial stability, consumer protection, money laundering, and terrorist financing.

Legal Basis (Indirect): The relevant legislation would be Loi N° 2013-057 portant sur les systèmes et moyens de paiement en République Islamique de Mauritanie (Law N° 2013-057 on payment systems and means in the Islamic Republic of Mauritania), and subsequent implementing regulations or circulars from the BCM regarding payment service providers and e-money. This law defines and regulates various payment instruments and services.