Custodial wallet / SaaS in Mozambique
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Mozambique with a local entity, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No formal AML/CFT obligations specific to crypto custodians because no dedicated VASP regime exists
- If the entity's operations overlap with traditional financial services (e.g., handling fiat), existing AML/CFT law Lei n.º 14/2013, de 12 de Agosto applies — requiring customer identification, transaction monitoring, and suspicious activity reporting to Unidade de Informação Financeira (UIF)
- Sanctions screening obligations arise extraterritorially: OFAC SDN List screening (if USD nexus or U.S. persons involved), EU Consolidated List screening (if EUR clearing or EU nexus), and UN Consolidated List screening (binding on Mozambique as UN member state)
- Domestic AML Law (Lei n.º 14/2013) applies to reporting entities — currently financial institutions, not pure crypto custodians, but enforcement risk exists if FATF recommendations are adopted
Key Restrictions
- Banco de Moçambique (BdM) has repeatedly warned that cryptocurrencies are not legal tender, not regulated, and not supervised or protected by the central bank (Aviso Nº 03/GBM/2021)
- No dedicated digital-asset custody license exists — any entity offering custodial wallet/SaaS services operates in an unregulated space with no legal framework for segregation, insurance, qualified-custodian status, or proof of reserves
- If the service involves fiat handling (e.g., fiat on/off ramps, fiat settlement), it may fall under the Law of the Payment System (Lei n.º 2/2016) or the Law on Credit Institutions (Lei n.º 15/2022), requiring a traditional financial license with significant capital requirements and BdM supervision
- Local incorporation and physical presence are typically required for regulated financial services entities
Key Risks
- Complete regulatory vacuum for pure crypto custody — no legal definition, no license path, no qualified-custodian framework, meaning the operator has zero legal protection or recognized status
- BdM public warnings actively discourage use of cryptocurrencies, creating reputational and PR risk for any operator serving Mozambican residents
- If FATF Recommendation 15 (VASP regulation) is implemented domestically, operators could face retroactive compliance obligations or enforcement for operating in the unregulated gap period
- Extraterritorial sanctions exposure remains even if domestic regulation is absent — OFAC, EU, and UN sanctions obligations apply based on currency, counterparty, and user geography
- No segregation or insurance requirements means client assets have no legal protection in insolvency, creating significant operational risk for custodial wallet models
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Bank of Mozambique (BdM) Position: The Banco de Moçambique (BdM), the country's central bank, has consistently issued warnings regarding the risks associated with cryptocurrencies. It has clearly stated that cryptocurrencies are not considered legal tender in Mozambique and are not regulated or supervised by the central bank. The BdM advises the public against using them due to risks such as price volatility, lack of consumer protection, and potential for money laundering and terrorist financing.
No Specific Digital Asset Legislation: Mozambique does not have dedicated laws or regulations for digital assets that define them, regulate their issuance, trading, or custody.
Custodial License Requirements: There are no specific licenses for cryptocurrency custodians. Any entity offering such services would operate in an unregulated space, or potentially be subject to general financial services licenses if their activities overlap with traditional financial services (which is unlikely given the BdM's stance on crypto not being legal tender).
Segregation of Client Assets Rules: No rules exist for the segregation of client digital assets.
Insurance/Bonding Requirements: There are no insurance or bonding requirements for digital asset custodians.
Cold Storage Mandates: No mandates or regulations specify the use of cold storage for digital assets.
Qualified Custodian Definitions: There is no legal definition for a "qualified custodian" in the context of digital assets.
Banco de Moçambique's Position: The BdM has repeatedly issued warnings and communiqués stating that cryptocurrencies are not legal tender in Mozambique, are not regulated by the central bank, and transactions involving them are high risk. They emphasize that there is no official protection for consumers or investors in virtual assets.
Specific Reference: Aviso Nº 03/GBM/2021, de 2 de Agosto (Warning Nº 03/GBM/2021, of August 2nd). This warning explicitly states that virtual assets are not considered currency, are not issued or guaranteed by the BdM, and are not subject to the legal regime of payment instruments or other financial instruments. It also highlights the risks associated with price volatility, cybercrime, lack of consumer protection, and potential for illicit activities.
No Specific Licenses: As a direct consequence of the above, there are no specific cryptocurrency exchange licenses, crypto custody licenses, or crypto payment processor licenses issued by the BdM or any other Mozambican authority for entities dealing solely in virtual assets.
Licensing for Traditional Financial Services: If an entity's operations involve traditional financial services (e.g., fiat-to-crypto exchanges, crypto payment processors that handle fiat currency, or entities holding fiat funds for crypto purchases), then they might fall under the existing financial licensing requirements supervised by the Banco de Moçambique or other financial regulators, depending on the specific nature of their activities. This would be interpreted under existing laws such as:
Lei do Sistema de Pagamentos (Law of the Payment System): Lei n.º 2/2016 de 27 de Junho – This law governs payment service providers (PSPs) and electronic money institutions (EMIs) that deal with fiat currency. If a crypto firm offers services that involve processing fiat payments, it could potentially be required to obtain a PSP or EMI license.
Lei das Instituições de Crédito e Sociedades Financeiras (Law on Credit Institutions and Financial Companies): Lei n.º 15/2022 de 13 de Dezembro – This law regulates traditional banking and financial institutions. If a crypto platform's activities start resembling deposit-taking or other regulated financial services, it could potentially fall under this.
AML/KYC Requirements: This is the most likely area where existing regulations would apply, even for purely crypto entities, if Mozambique were to begin enforcing FATF recommendations. Financial institutions are subject to rigorous AML/CFT obligations.
Lei de Prevenção e Combate ao Branqueamento de Capitais e Financiamento ao Terrorismo (Law on the Prevention and Combat of Money Laundering and Terrorist Financing): Lei n.º 14/2013 de 12 de Agosto (and subsequent amendments). This law establishes obligations for various entities, including financial institutions, to implement customer due diligence (KYC), suspicious transaction reporting, record-keeping, and internal controls. While it doesn't explicitly mention virtual assets, the principles would guide future regulation.
Local Presence: Typically, regulated financial institutions in Mozambique are required to have a physical presence and be incorporated locally.
FATF Standards: Mozambique is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), which is an associate member of the Financial Action Task Force (FATF). FATF Recommendations explicitly cover virtual assets and VASPs, requiring them to implement AML/CFT measures, including targeted financial sanctions.
Domestic Implementation: Mozambique's Lei n.º 14/2013, de 12 de Agosto (Law on Preventing and Combating Money Laundering and the Financing of Terrorism) requires reporting entities (primarily traditional financial institutions) to identify customers, monitor transactions, and report suspicious activities. While it doesn't explicitly mention VASPs, the spirit of the law and international standards (FATF) would extend these obligations to any entity facilitating financial transactions. The Unidade de Informação Financeira de Moçambique (UIF), Mozambique's Financial Intelligence Unit, is responsible for enforcing this law.
Extraterritorial Reach: Sanctions regimes apply based on jurisdiction, currency used (e.g., USD for OFAC, EUR for EU), location of servers, nationality of participants, or nexus to sanctioned entities/persons.
OFAC Sanctions Programs and Information: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
EU Sanctions Map: https://sanctionsmap.eu/ (Provides an overview of all EU sanctions regimes)
UN Consolidated List: https://www.un.org/securitycouncil/content/un-sc-consolidated-list
Regulator Name: Banco de Moçambique (Bank of Mozambique)
Entity Targeted: The general public, potential users, and operators of cryptocurrencies within Mozambique. (Not a specific company or individual). Violation Type (Implicit/Guidance): Engaging in financial activities with unregulated assets, operating outside the formal financial system, high risk of fraud/scams, potential for money laundering and terrorist financing. The core message is that cryptocurrencies are not legal tender and are not regulated by the Banco de Moçambique. Penalty Amount: N/A (These are warnings, not direct penalties for a specific enforcement case).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS operations in Mozambique are legally possible only in a complete regulatory vacuum with no specific custody license, no segregation or insurance rules, and no qualified-custodian framework; pure crypto custody carries significant legal risk due to BdM warnings, while any fiat-handling activity would trigger traditional financial licensing under Lei n.º 2/2016 or Lei n.º 15/2022 with local incorporation, high capital requirements, and BdM supervision.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?