← Regulations / Malawi / Operating Models / Remote VASP

Remote VASP serving residents in Malawi

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Conditional AI-Generated · Unreviewed

Remote VASP is conditionally permitted in Malawi with a local entity, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • Any entity handling virtual assets may fall under Malawi's general AML/CFT framework (Proceeds of Serious Crime and Money Laundering Act, 2006, as amended; Financial Crimes Act, 2023) for suspicion-based reporting
  • Registration/AML compliance with the Financial Intelligence Authority (FIA) Malawi may be expected for VASPs, though not codified in a dedicated crypto regulation
  • FATF Recommendation 15 (via ESAAMLG membership) pressures Malawi toward licensing/registration of VASPs for AML/CFT purposes
  • No specific crypto-AML/KYC regulations exist, but general AML obligations apply if handling fiat conversions or if designated as a DNFBP

Key Restrictions

  • No specific VASP licensing framework exists — operators operate in a legal grey area with no dedicated regulatory pathway
  • Cryptocurrencies are not recognized as legal tender in Malawi; the RBM has issued multiple public advisories discouraging crypto use
  • Any entity generating revenue in Malawi must register as a local company or branch under Malawi's company laws
  • No specific segregation, insurance, cold storage, or qualified custodian requirements for digital assets exist
  • If handling fiat currency conversions, may fall under general financial services laws (e.g., Money Services Business) without explicit guidance

Key Risks

  • Enforcement risk: RBM has issued repeated public warnings against crypto, creating a hostile regulatory posture even absent formal prohibitions
  • Regulatory ambiguity: No specific VASP law is in effect — the VASP Bill passed in late 2023 but full implementation details remain unclear
  • AML/CFT scrutiny risk: General AML laws could be applied retroactively to crypto activities if authorities deem transactions suspicious
  • Reputational risk: Public warnings from RBM may deter banking partners and service providers from supporting crypto-related entities
  • Transition risk: Future VASP regulation could impose retroactive compliance burdens or crack down on unregistered operators

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Reserve Bank of Malawi (RBM) Stance:

licensing 60% confidence

The Reserve Bank of Malawi has consistently advised the public against dealing in cryptocurrencies, citing their unregulated nature, price volatility, and potential for use in illicit activities (money laundering, terrorist financing).

licensing 60% confidence

Crucially, the RBM has explicitly stated that cryptocurrencies are not recognized as legal tender in Malawi.

licensing 60% confidence

This means that while individuals may engage in crypto transactions, these activities operate outside any specific regulatory oversight or consumer protection mechanisms for virtual assets.

licensing 60% confidence

Absence of Dedicated VASP Legislation:

licensing 60% confidence

There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.

licensing 60% confidence

This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.

licensing 60% confidence

Local Presence: N/A for crypto-specific licensing. However, any company operating and generating revenue in Malawi is generally required to be registered as a local entity or a branch of a foreign company under Malawi's company laws.

licensing 60% confidence

AML/KYC (Anti-Money Laundering/Know Your Customer):

licensing 60% confidence

While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.

licensing 60% confidence

Any business, including those dealing with virtual assets, could potentially be scrutinized under existing AML/CFT legislation, particularly if there are suspicions of illicit activities. Malawi is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), a FATF-style regional body, and is therefore committed to implementing FATF recommendations. FATF Recommendation 15 and its interpretive note specifically address virtual assets and VASPs.

licensing 60% confidence

Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.

licensing 60% confidence

Financial Intelligence Unit (FIU) Malawi Official Website: http://fiu.mw/ (Here you can find their reports, advisories, and the relevant legislation.)

licensing 60% confidence

No Licensing/Supervision: There is no regulatory body licensing or supervising virtual asset service providers (VASPs) or crypto exchanges.

licensing 60% confidence

Risk Warnings: The authorities primarily focus on issuing public warnings about the high risks associated with virtual assets, including price volatility, fraud, cybercrime, money laundering, and lack of consumer protection.

aml 60% confidence

FATF Recommendations: Malawi, through ESAAMLG, is subject to FATF recommendations, including Recommendation 15 on Virtual Assets and VASPs. This recommendation pushes for countries to license or register VASPs for AML/CFT purposes.

travel-rule 40% confidence

However, general AML/CFT legislation still applies. Malawi has a robust anti-money laundering and combating the financing of terrorism (AML/CFT) framework, primarily through the Financial Crimes Act, 2023. While this act covers traditional financial institutions and designated non-financial businesses and professions (DNFBPs), it does not explicitly extend to specific VASP regulation or the Travel Rule requirements. Engaging in activities deemed illicit under this general framework, or operating an unregistered financial service, could potentially lead to penalties. The RBM warnings highlight that users and operators of virtual assets do so without regulatory protection or oversight, meaning they could be exposed to fraud or illegal activities, which could be prosecuted under existing criminal law.

travel-rule 40% confidence

Financial Crimes Act, 2023: This is Malawi's primary legislation for combating money laundering and terrorist financing. While it lays the groundwork for AML/CFT, it does not specifically address VAs or the Travel Rule.

enforcement 40% confidence

Entity Targeted: General Public / Unregulated Crypto Activities. Violation Type: Operating or engaging in unregulated financial activities; lack of legal tender status. Penalty Amount: N/A (warnings, not penalties).

enforcement 40% confidence

RBM's Consistent Stance: The Reserve Bank of Malawi has repeatedly stated that cryptocurrencies are not legal tender in Malawi and are not regulated by the RBM. They have warned the public about the inherent risks, including volatility, cyber-attacks, and potential for fraud, as these assets operate outside the regulated financial system.

enforcement 40% confidence

Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.

enforcement 40% confidence

Criminal Investigations (Non-Regulatory Enforcement): While there might be instances of police investigations into fraud schemes that use cryptocurrencies as a vehicle for illicit activity, these are criminal law enforcement actions (e.g., arrests, prosecutions for fraud) rather than specific administrative enforcement actions by a financial regulator against a crypto service provider for regulatory breaches (like operating without a license or AML violations). Such criminal cases rarely provide details of specific "penalty amounts" from a financial regulator.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a remote VASP serving Malawian residents operates in a legal grey area with no dedicated VASP license, must register locally under general company law, faces hostile public advisories from the RBM, and is subject to general AML/CFT obligations under the Proceeds of Serious Crime and Money Laundering Act and the Financial Crimes Act, with a VASP Bill passed in late 2023 not yet fully implemented.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?