Self-custodial wallet / non-custodial software in Malawi
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Malawi with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No specific AML obligations apply to pure non-custodial software publishing, since the publisher never holds, controls, or has access to user funds and thus does not fall under VASP classification.
- If the publisher is somehow deemed a 'designated non-financial business or profession' (DNFBP) under the Proceeds of Serious Crime and Money Laundering Act, 2006, general AML obligations could theoretically attach, but this is speculative and untested.
- Any entity handling traditional financial transactions is subject to AML/CFT oversight by the Financial Intelligence Authority (FIA) Malawi; pure software publishing does not trigger this.
- Malawi, through ESAAMLG, is subject to FATF Recommendation 15 (Virtual Assets and VASPs), but no implementing regulations for non-custodial software exist.
Key Restrictions
- The Reserve Bank of Malawi (RBM) has stated that cryptocurrencies are not recognized as legal tender — software publishers cannot represent the wallet as dealing in 'legal tender' or regulated financial instruments.
- There is currently no specific VASP legislation (though a VASP Bill was passed in late 2023 and may be implemented), leaving the legal status of wallet software publishing ambiguous.
- Any company generating revenue in Malawi (e.g., paid features, token swaps integrated into the wallet) would generally need to be registered as a local entity or branch under Malawi's company laws.
- The RBM has repeatedly issued public advisories warning against cryptocurrency use; marketing or distribution of wallet software in Malawi carries reputational/regulatory friction.
- No dedicated licensing path exists for self-custodial wallet software, but this also means no regulatory safe harbor.
Key Risks
- Regulatory ambiguity: The VASP Bill passed in late 2023 may introduce new licensing/registration requirements that could tangentially capture wallet software publishers if definitions are broad.
- Enforcement exposure: While the RBM has only issued warnings, future enforcement under a VASP framework or existing AML laws could target publishers if authorities interpret 'transfer' of virtual assets broadly.
- Consumer-protection liability: Without specific regulation, there are no disclosure rules, creating legal uncertainty around liability for software defects or user losses.
- FATF-driven pressure: Malawi, as an ESAAMLG member, may be pushed to implement FATF Recommendation 15 more aggressively, potentially affecting software-only publishers.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The Reserve Bank of Malawi has consistently advised the public against dealing in cryptocurrencies, citing their unregulated nature, price volatility, and potential for use in illicit activities (money laundering, terrorist financing).
Crucially, the RBM has explicitly stated that cryptocurrencies are not recognized as legal tender in Malawi.
This means that while individuals may engage in crypto transactions, these activities operate outside any specific regulatory oversight or consumer protection mechanisms for virtual assets.
Absence of Dedicated VASP Legislation:
There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.
This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.
Local Presence: N/A for crypto-specific licensing. However, any company operating and generating revenue in Malawi is generally required to be registered as a local entity or a branch of a foreign company under Malawi's company laws.
AML/KYC (Anti-Money Laundering/Know Your Customer):
While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.
Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.
FATF Recommendations: Malawi, through ESAAMLG, is subject to FATF recommendations, including Recommendation 15 on Virtual Assets and VASPs. This recommendation pushes for countries to license or register VASPs for AML/CFT purposes.
Any entity operating as a Virtual Asset Service Provider (VASP), which would include services like exchange, transfer, and safekeeping/administration of virtual assets (i.e., custody), would fall under the purview of Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) laws.
Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.
"Malawi Passes Virtual Assets Service Providers Bill to Regulate Crypto Market" (November 2023) - This indicates future potential for enforcement, but actual enforcement actions under this new law would typically follow its full implementation and operationalization.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — pure non-custodial wallet software publishing is not specifically prohibited or licensed in Malawi, but operates in a legal grey area with RBM public warnings against crypto, no VASP safe harbor, and a recently passed (but not yet fully implemented) VASP Bill that could alter the landscape.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?