Remote VASP serving residents in Malawi
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Malawi with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Any entity handling virtual assets may fall under Malawi's general AML/CFT framework (Proceeds of Serious Crime and Money Laundering Act, 2006, as amended; Financial Crimes Act, 2023) for suspicion-based reporting
- Registration/AML compliance with the Financial Intelligence Authority (FIA) Malawi may be expected for VASPs, though not codified in a dedicated crypto regulation
- FATF Recommendation 15 (via ESAAMLG membership) pressures Malawi toward licensing/registration of VASPs for AML/CFT purposes
- No specific crypto-AML/KYC regulations exist, but general AML obligations apply if handling fiat conversions or if designated as a DNFBP
Key Restrictions
- No specific VASP licensing framework exists — operators operate in a legal grey area with no dedicated regulatory pathway
- Cryptocurrencies are not recognized as legal tender in Malawi; the RBM has issued multiple public advisories discouraging crypto use
- Any entity generating revenue in Malawi must register as a local company or branch under Malawi's company laws
- No specific segregation, insurance, cold storage, or qualified custodian requirements for digital assets exist
- If handling fiat currency conversions, may fall under general financial services laws (e.g., Money Services Business) without explicit guidance
Key Risks
- Enforcement risk: RBM has issued repeated public warnings against crypto, creating a hostile regulatory posture even absent formal prohibitions
- Regulatory ambiguity: No specific VASP law is in effect — the VASP Bill passed in late 2023 but full implementation details remain unclear
- AML/CFT scrutiny risk: General AML laws could be applied retroactively to crypto activities if authorities deem transactions suspicious
- Reputational risk: Public warnings from RBM may deter banking partners and service providers from supporting crypto-related entities
- Transition risk: Future VASP regulation could impose retroactive compliance burdens or crack down on unregistered operators
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The Reserve Bank of Malawi has consistently advised the public against dealing in cryptocurrencies, citing their unregulated nature, price volatility, and potential for use in illicit activities (money laundering, terrorist financing).
Crucially, the RBM has explicitly stated that cryptocurrencies are not recognized as legal tender in Malawi.
This means that while individuals may engage in crypto transactions, these activities operate outside any specific regulatory oversight or consumer protection mechanisms for virtual assets.
Absence of Dedicated VASP Legislation:
There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.
This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.
Local Presence: N/A for crypto-specific licensing. However, any company operating and generating revenue in Malawi is generally required to be registered as a local entity or a branch of a foreign company under Malawi's company laws.
AML/KYC (Anti-Money Laundering/Know Your Customer):
While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.
Any business, including those dealing with virtual assets, could potentially be scrutinized under existing AML/CFT legislation, particularly if there are suspicions of illicit activities. Malawi is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), a FATF-style regional body, and is therefore committed to implementing FATF recommendations. FATF Recommendation 15 and its interpretive note specifically address virtual assets and VASPs.
Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.
Financial Intelligence Unit (FIU) Malawi Official Website: http://fiu.mw/ (Here you can find their reports, advisories, and the relevant legislation.)
No Licensing/Supervision: There is no regulatory body licensing or supervising virtual asset service providers (VASPs) or crypto exchanges.
Non-Recognition: Virtual assets are not recognized as legal tender or regulated financial instruments.
Risk Warnings: The authorities primarily focus on issuing public warnings about the high risks associated with virtual assets, including price volatility, fraud, cybercrime, money laundering, and lack of consumer protection.
FATF Recommendations: Malawi, through ESAAMLG, is subject to FATF recommendations, including Recommendation 15 on Virtual Assets and VASPs. This recommendation pushes for countries to license or register VASPs for AML/CFT purposes.
However, general AML/CFT legislation still applies. Malawi has a robust anti-money laundering and combating the financing of terrorism (AML/CFT) framework, primarily through the Financial Crimes Act, 2023. While this act covers traditional financial institutions and designated non-financial businesses and professions (DNFBPs), it does not explicitly extend to specific VASP regulation or the Travel Rule requirements. Engaging in activities deemed illicit under this general framework, or operating an unregistered financial service, could potentially lead to penalties. The RBM warnings highlight that users and operators of virtual assets do so without regulatory protection or oversight, meaning they could be exposed to fraud or illegal activities, which could be prosecuted under existing criminal law.
Financial Crimes Act, 2023: This is Malawi's primary legislation for combating money laundering and terrorist financing. While it lays the groundwork for AML/CFT, it does not specifically address VAs or the Travel Rule.
Regulator Name: Reserve Bank of Malawi (RBM)
Entity Targeted: General Public / Unregulated Crypto Activities. Violation Type: Operating or engaging in unregulated financial activities; lack of legal tender status. Penalty Amount: N/A (warnings, not penalties).
RBM's Consistent Stance: The Reserve Bank of Malawi has repeatedly stated that cryptocurrencies are not legal tender in Malawi and are not regulated by the RBM. They have warned the public about the inherent risks, including volatility, cyber-attacks, and potential for fraud, as these assets operate outside the regulated financial system.
Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.
Criminal Investigations (Non-Regulatory Enforcement): While there might be instances of police investigations into fraud schemes that use cryptocurrencies as a vehicle for illicit activity, these are criminal law enforcement actions (e.g., arrests, prosecutions for fraud) rather than specific administrative enforcement actions by a financial regulator against a crypto service provider for regulatory breaches (like operating without a license or AML violations). Such criminal cases rarely provide details of specific "penalty amounts" from a financial regulator.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a remote VASP serving Malawian residents operates in a legal grey area with no dedicated VASP license, must register locally under general company law, faces hostile public advisories from the RBM, and is subject to general AML/CFT obligations under the Proceeds of Serious Crime and Money Laundering Act and the Financial Crimes Act, with a VASP Bill passed in late 2023 not yet fully implemented.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?