Custodial wallet / SaaS in Mauritania
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is not permitted in Mauritania.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Law N° 2013-030 of 17 July 2013 applies (CDD, beneficial ownership, ongoing monitoring, suspicious transaction reporting).
- Customer identification for natural persons: obtain full name, date of birth, place of birth, address, nationality from reliable independent source documents.
- Customer identification for legal entities: name, legal form, proof of incorporation, address, directors/partners, binding authority.
- Beneficial ownership identification and verification (individuals owning/controlling above a threshold).
- Purpose and intended nature of business relationship must be understood and documented.
- Ongoing transaction monitoring for consistency with customer risk profile.
- Risk-based approach required; Enhanced Due Diligence (EDD) for higher-risk customers (e.g., PEPs).
- Screening against national and international sanctions lists (UN Security Council resolutions).
- Obligation to report suspicious transactions to CENTRIF (FIU) — no monetary threshold specified.
- No-tipping-off prohibition regarding STR submissions.
- Record-keeping: CDD data, transaction records (amount, currency, dates, parties — includes FATF Travel Rule principles), STR records, AML/CFT correspondence.
- Circular N° 004/R/2019 prohibits BCM-supervised financial institutions from dealing in cryptocurrencies — but this ban targets banks, not the VASP directly; however the absence of a legal framework makes compliance with AML obligations legally uncertain for unregulated VASPs.
Key Restrictions
- Cryptocurrencies are not permitted for use as legal tender or for financial transactions in Mauritania.
- BCM Circular N° 004/R/2019 prohibits banks and financial institutions from engaging in any crypto-related activities, eliminating the on-ramp/off-ramp banking channel.
- No specific legal framework exists for digital asset custody, qualified custodian status, segregation of client assets, insurance, cold storage, or proof of reserves.
- The BCM's stated position implies that any crypto-related activity, including custody services, falls outside the legal and regulated financial sector and would likely be considered non-compliant or illegal.
- Any business operating in Mauritania would need a local legal entity under general Mauritanian commercial law, but no financial-services license pathway exists for crypto custody.
Key Risks
- High legal uncertainty: no established regulatory framework means the status of contracts, consumer protection, and legality of operations is unclear.
- Risk of enforcement action: the BCM has publicly warned against crypto, and operating could be deemed illegal financial activity.
- No banking support: Circular N° 004/R/2019 prohibits regulated financial institutions from servicing crypto businesses, creating operational isolation.
- Risk of retroactive regulation or outright ban: Mauritania could introduce prohibitive measures at any time.
- AML compliance is legally ambiguous — the general AML law (Law N° 2013-030) exists, but its applicability to unregistered virtual asset activities is uncertain, creating exposure for both the SaaS provider and white-label clients.
- No insurance, bonding, or proof-of-reserves framework exists, leaving client assets unprotected.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Custodial License Requirements: There are no specific licenses for digital asset custodians because cryptocurrencies are not permitted for use as legal tender or for financial transactions. Offering such services would likely fall outside the bounds of permitted financial activities.
Segregation of Client Assets Rules: Not applicable. Since there's no legal framework for operating crypto custody services, there are no rules regarding asset segregation.
Insurance/Bonding Requirements: Not applicable.
Cold Storage Mandates: Not applicable.
Qualified Custodian Definitions: Not applicable.
Communiqué from the Banque Centrale de Mauritanie (BCM):
What this means: The BCM's stance implies that any activity related to cryptocurrencies, including custody services, falls outside the legal and regulated financial sector and would likely be viewed as non-compliant or illegal.
Absence of Specific Legislation: Mauritania has not enacted specific laws or decrees to regulate virtual assets, blockchain technology, or cryptocurrency service providers. Unlike many countries that have adopted or are in the process of adopting bespoke crypto regulations, Mauritania has not yet done so.
Central Bank Stance: The Banque Centrale de Mauritanie (BCM) – the country's central bank and primary financial regulator – has generally taken a cautious stance. While there hasn't been an outright ban, the BCM has historically issued warnings regarding the risks associated with cryptocurrencies, including their volatility, potential for fraud, and use in illicit activities. These warnings serve to inform the public and financial institutions of the risks rather than establishing a regulatory framework.
No Specific Licenses: Consequently, there are no specific licenses or registration requirements for cryptocurrency exchanges, custody providers, or payment processors.
Custody Providers: No specific license for providing crypto custody services.
Neither a dedicated licensing nor a registration regime for virtual assets exists.
AML/KYC Requirements: Mauritania does have general Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) laws, which are largely based on FATF recommendations. While these laws apply broadly to financial institutions, their direct applicability to unregulated virtual asset activities is unclear. However, any interaction with the traditional financial system (e.g., converting crypto to fiat through a Mauritanian bank) would trigger the bank's existing AML/KYC obligations. Operators would be advised to implement robust AML/KYC practices voluntarily to mitigate risks and demonstrate good faith, especially if future regulations are introduced. The Cellule Nationale de Traitement des Renseignements Financiers (CENAREF) is Mauritania's Financial Intelligence Unit (FIU) responsible for AML/CFT oversight.
Legal Uncertainty: Operating a virtual asset business in a jurisdiction without clear regulations carries significant legal and operational risks. There is no legal certainty regarding the status of contracts, consumer protection, tax implications, or the legality of operations.
Risk of Future Regulation: The absence of regulation does not mean permissibility. Mauritania could, at any time, introduce new laws, including bans, strict licensing requirements, or even retroactive measures.
Law N° 2013-030 of 17 July 2013 on Combating Money Laundering and Terrorist Financing (Loi n° 2013-030 du 17 juillet 2013 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme).
Ban on Financial Institutions Dealing with Cryptocurrencies:
Legal Reference: Circular N° 004/R/2019 issued by the Banque Centrale de Mauritanie (BCM) (Central Bank of Mauritania).
Content: This circular prohibits banks, financial institutions, and payment service providers supervised by the BCM from engaging in any activities related to cryptocurrencies, including buying, selling, holding, or facilitating transactions involving them. It cites concerns about financial stability, consumer protection, money laundering, and terrorist financing.
Cellule Nationale de Traitement du Renseignement Financier (CENTRIF) - The Financial Intelligence Unit (FIU):
Legal Basis (Indirect): The relevant legislation would be Loi N° 2013-057 portant sur les systèmes et moyens de paiement en République Islamique de Mauritanie (Law N° 2013-057 on payment systems and means in the Islamic Republic of Mauritania), and subsequent implementing regulations or circulars from the BCM regarding payment service providers and e-money. This law defines and regulates various payment instruments and services.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — Mauritania has no legal framework for digital asset custody services, the BCM has publicly warned against cryptocurrencies and prohibited regulated financial institutions from engaging with them (Circular N° 004/R/2019), and operating a custodial wallet / SaaS model would likely be considered non-compliant or illegal.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?