← Regulations / Malawi / Operating Models / CEX

Centralized exchange in Malawi

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in Malawi with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Any entity operating as a VASP (including exchanges, custody, and transfer) must comply with general AML/CFT laws under the Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended).
  • The Financial Intelligence Authority (FIA) Malawi is the primary AML/CFT supervisor and may require AML/CFT registration.
  • The Financial Crimes Act, 2023 is the primary legislation for combating money laundering and terrorist financing, though it does not specifically address virtual assets.
  • Malawi is subject to FATF Recommendations (including Recommendation 15 on Virtual Assets/VASPs) through ESAAMLG membership, creating indirect pressure for AML compliance.
  • General AML/CFT obligations apply to entities handling financial transactions; the FIA may scrutinize VASPs under existing legislation, particularly if there are suspicions of illicit activities.
  • No specific travel-rule obligations exist there is no VASP-specific regulation implementing the FATF Travel Rule in Malawi.

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender in Malawi.
  • The Reserve Bank of Malawi has consistently warned the public against dealing in cryptocurrencies, citing unregulated nature, volatility, and illicit-finance risks.
  • There is no specific VASP licensing regime in effect as of the facts provided the Virtual Assets Service Providers Bill was passed in late 2023 but implementation/operationalization is not yet confirmed.
  • Any entity generating revenue in Malawi must be registered as a local entity or branch under Malawi's company laws.
  • No specific segregation of client digital assets, cold storage mandates, or qualified custodian definitions exist in regulation.

Key Risks

  • Legal grey area: exchanges operate without specific regulatory oversight or consumer protection mechanisms, creating enforcement exposure if the RBM or FIA decides to act under general financial/AML laws.
  • Regulatory ambiguity: the VASP Bill was passed in Nov 2023 but full implementation status is unclear operators may face shifting requirements.
  • Reputational and PR risk: the RBM has publicly warned citizens against crypto, and operating a centralized exchange could be portrayed as facilitating unregulated, high-risk activity.
  • No travel-rule compliance framework exists, creating FATF compliance risk for cross-border transfers.
  • General AML/CFT legislation can still be applied to VASPs without specific VASP guidance, creating uncertainty around compliance expectations.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Absence of Dedicated VASP Legislation:

licensing 60% confidence

There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.

licensing 60% confidence

This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.

licensing 60% confidence

Exchanges (Crypto-to-Crypto, Fiat-to-Crypto): Since there's no specific crypto license, these entities operate in a legal grey area. If they handle fiat currency conversions, they might potentially fall under general financial services laws (e.g., Money Services Business), but without explicit guidance, this is speculative and subject to interpretation by authorities. There is no specific crypto exchange license.

licensing 60% confidence

AML/KYC (Anti-Money Laundering/Know Your Customer):

licensing 60% confidence

While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.

licensing 60% confidence

Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.

licensing 60% confidence

Local Presence: N/A for crypto-specific licensing. However, any company operating and generating revenue in Malawi is generally required to be registered as a local entity or a branch of a foreign company under Malawi's company laws.

licensing 60% confidence

Risk Warnings: The authorities primarily focus on issuing public warnings about the high risks associated with virtual assets, including price volatility, fraud, cybercrime, money laundering, and lack of consumer protection.

licensing 60% confidence

No Licensing/Supervision: There is no regulatory body licensing or supervising virtual asset service providers (VASPs) or crypto exchanges.

aml 60% confidence

Any entity operating as a Virtual Asset Service Provider (VASP), which would include services like exchange, transfer, and safekeeping/administration of virtual assets (i.e., custody), would fall under the purview of Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) laws.

aml 60% confidence

There are no specific regulations in Malawi mandating the segregation of client digital assets from the custodian's proprietary assets.

aml 60% confidence

There are no specific mandates for cold storage of digital assets by custodians. Operational security best practices would still dictate its use, but it's not a regulatory requirement.

aml 60% confidence

There is no specific legal or regulatory definition of a "qualified custodian" for digital assets in Malawi.

travel-rule 40% confidence

No, not explicitly. Malawi has not enacted specific legislation or regulations that mandate the implementation of the FATF Travel Rule for Virtual Asset Service Providers (VASPs).

travel-rule 40% confidence

Not applicable. Since the Travel Rule has not been adopted, there is no effective date for its implementation in Malawi.

travel-rule 40% confidence

Which VASPs Are Covered:

travel-rule 40% confidence

Financial Crimes Act, 2023: This is Malawi's primary legislation for combating money laundering and terrorist financing. While it lays the groundwork for AML/CFT, it does not specifically address VAs or the Travel Rule.

enforcement 40% confidence

RBM's Consistent Stance: The Reserve Bank of Malawi has repeatedly stated that cryptocurrencies are not legal tender in Malawi and are not regulated by the RBM. They have warned the public about the inherent risks, including volatility, cyber-attacks, and potential for fraud, as these assets operate outside the regulated financial system.

enforcement 40% confidence

Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.

enforcement 40% confidence

"Malawi Passes Virtual Assets Service Providers Bill to Regulate Crypto Market" (November 2023) - This indicates future potential for enforcement, but actual enforcement actions under this new law would typically follow its full implementation and operationalization.

enforcement 40% confidence

Entity Targeted: General Public / Unregulated Crypto Activities. Violation Type: Operating or engaging in unregulated financial activities; lack of legal tender status. Penalty Amount: N/A (warnings, not penalties).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange may operate in Malawi but only in a legal grey area, as there is no specific VASP licensing regime currently in effect; general AML/CFT laws apply, a local entity is required, and the VASP Bill passed in late 2023 signals imminent regulatory change but has not been fully operationalized.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?