On-shore VASP in Malawi
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Malawi with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Any entity operating as a VASP (exchange, custody, transfer) falls under general AML/CFT laws, primarily the Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended) and the Financial Crimes Act, 2023.
- The Financial Intelligence Authority (FIA) Malawi is the primary AML/CFT supervisor — VASPs may be required to register with the FIA for AML/CFT compliance.
- General AML obligations apply: customer due diligence, record-keeping, suspicious transaction reporting to the FIU.
- No specific crypto-AML thresholds exist, but general AML framework applies where there are suspicions of illicit activity.
- Malawi is a member of ESAAMLG and subject to FATF Recommendation 15, pushing toward VASP licensing/registration for AML/CFT purposes.
- No Travel Rule has been implemented — no specific information-sharing requirements for crypto transfers.
Key Restrictions
- No dedicated VASP licensing regime exists — there is no specific license for crypto exchanges, custody, or payment processing.
- Virtual assets are not recognized as legal tender in Malawi.
- No segregation of client digital assets rules exist; no cold storage mandates exist.
- No specific insurance or bonding requirements for digital asset custodians.
- The Reserve Bank of Malawi has issued public advisories warning against dealing in cryptocurrencies, creating reputational and operational caution risk.
- The Virtual Assets Service Providers (VASP) Bill was passed by the National Assembly in late 2023 — once fully operationalized, a new licensing regime will likely apply.
Key Risks
- Regulatory ambiguity: No dedicated VASP law is currently operational, so operators face uncertainty about what rules apply and which authority supervises them.
- Enforcement risk: The RBM has consistently warned the public against crypto; operating without explicit regulatory blessing could trigger adverse action or negative public positioning.
- Transition risk: The 2023 VASP Bill, once implemented, may require new licensing, capital, and compliance structures that existing operators must rapidly adapt to.
- Tax uncertainty: Crypto gains are taxable (CGT 15% or income tax at progressive rates / corporate 30%), but the MRA has not issued specific crypto guidance, creating filing risk.
- Reputational risk: Operating in an environment where the central bank actively discourages crypto use may create bank-relationship and customer-trust challenges.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The Reserve Bank of Malawi has consistently advised the public against dealing in cryptocurrencies, citing their unregulated nature, price volatility, and potential for use in illicit activities (money laundering, terrorist financing).
Crucially, the RBM has explicitly stated that cryptocurrencies are not recognized as legal tender in Malawi.
Absence of Dedicated VASP Legislation:
There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.
This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.
Companies wishing to operate in Malawi, regardless of their business, must undergo general company registration with the Registrar of Companies. However, this is for general business operations, not specific to virtual assets or their regulation.
AML/KYC (Anti-Money Laundering/Know Your Customer):
While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.
Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.
There is no specific "custodial license" for digital assets in Malawi.
The Financial Intelligence Authority (FIA) Malawi is the primary body responsible for AML/CFT supervision. While they may require registration and compliance with AML/CFT obligations for VASPs, this is not a specific "custody license" but rather an AML/CFT registration. The RBM has not indicated it issues licenses for crypto businesses.
FATF Recommendations: Malawi, through ESAAMLG, is subject to FATF recommendations, including Recommendation 15 on Virtual Assets and VASPs. This recommendation pushes for countries to license or register VASPs for AML/CFT purposes.
Segregation of Client Assets Rules:
There are no specific regulations in Malawi mandating the segregation of client digital assets from the custodian's proprietary assets.
There are no specific insurance or bonding requirements for digital asset custodians in Malawi.
Cold Storage Mandates:
Qualified Custodian Definitions:
Official Statements/News: The Reserve Bank of Malawi has indicated that it is exploring the potential for a comprehensive regulatory framework for cryptocurrencies and potentially a Central Bank Digital Currency (CBDC). This suggests that new legislation or amendments to existing financial laws are being considered or drafted.
No, not explicitly. Malawi has not enacted specific legislation or regulations that mandate the implementation of the FATF Travel Rule for Virtual Asset Service Providers (VASPs).
The Reserve Bank of Malawi (RBM) has issued public warnings and cautionary statements regarding cryptocurrencies, emphasizing their unregulated nature and associated risks. These statements do not establish a regulatory framework but rather highlight the lack thereof.
Financial Crimes Act, 2023: This is Malawi's primary legislation for combating money laundering and terrorist financing. While it lays the groundwork for AML/CFT, it does not specifically address VAs or the Travel Rule.
Regulator Name: Reserve Bank of Malawi (RBM)
Entity Targeted: General Public / Unregulated Crypto Activities. Violation Type: Operating or engaging in unregulated financial activities; lack of legal tender status. Penalty Amount: N/A (warnings, not penalties).
RBM's Consistent Stance: The Reserve Bank of Malawi has repeatedly stated that cryptocurrencies are not legal tender in Malawi and are not regulated by the RBM. They have warned the public about the inherent risks, including volatility, cyber-attacks, and potential for fraud, as these assets operate outside the regulated financial system.
Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.
"Malawi Passes Virtual Assets Service Providers Bill to Regulate Crypto Market" (November 2023) - This indicates future potential for enforcement, but actual enforcement actions under this new law would typically follow its full implementation and operationalization.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — an on-shore VASP may operate in Malawi in a legal grey area in the absence of a dedicated VASP licensing regime, but must comply with general company registration, general AML/CFT obligations under the Financial Crimes Act 2023 supervised by the FIA, and applicable tax laws, while facing significant regulatory uncertainty given the RBM's anti-crypto stance and the pending operationalization of the 2023 VASP Bill.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?