← Regulations / Mozambique / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Mozambique

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Mozambique with a local entity, subject to AML obligations and none licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
None
Last updated
2026-07-13

AML Obligations

  • No formal AML/CFT obligations specific to crypto custodians because no dedicated VASP regime exists
  • If the entity's operations overlap with traditional financial services (e.g., handling fiat), existing AML/CFT law Lei n.º 14/2013, de 12 de Agosto applies — requiring customer identification, transaction monitoring, and suspicious activity reporting to Unidade de Informação Financeira (UIF)
  • Sanctions screening obligations arise extraterritorially: OFAC SDN List screening (if USD nexus or U.S. persons involved), EU Consolidated List screening (if EUR clearing or EU nexus), and UN Consolidated List screening (binding on Mozambique as UN member state)
  • Domestic AML Law (Lei n.º 14/2013) applies to reporting entities — currently financial institutions, not pure crypto custodians, but enforcement risk exists if FATF recommendations are adopted

Key Restrictions

  • Banco de Moçambique (BdM) has repeatedly warned that cryptocurrencies are not legal tender, not regulated, and not supervised or protected by the central bank (Aviso Nº 03/GBM/2021)
  • No dedicated digital-asset custody license exists — any entity offering custodial wallet/SaaS services operates in an unregulated space with no legal framework for segregation, insurance, qualified-custodian status, or proof of reserves
  • If the service involves fiat handling (e.g., fiat on/off ramps, fiat settlement), it may fall under the Law of the Payment System (Lei n.º 2/2016) or the Law on Credit Institutions (Lei n.º 15/2022), requiring a traditional financial license with significant capital requirements and BdM supervision
  • Local incorporation and physical presence are typically required for regulated financial services entities

Key Risks

  • Complete regulatory vacuum for pure crypto custody — no legal definition, no license path, no qualified-custodian framework, meaning the operator has zero legal protection or recognized status
  • BdM public warnings actively discourage use of cryptocurrencies, creating reputational and PR risk for any operator serving Mozambican residents
  • If FATF Recommendation 15 (VASP regulation) is implemented domestically, operators could face retroactive compliance obligations or enforcement for operating in the unregulated gap period
  • Extraterritorial sanctions exposure remains even if domestic regulation is absent — OFAC, EU, and UN sanctions obligations apply based on currency, counterparty, and user geography
  • No segregation or insurance requirements means client assets have no legal protection in insolvency, creating significant operational risk for custodial wallet models

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 60% confidence

Bank of Mozambique (BdM) Position: The Banco de Moçambique (BdM), the country's central bank, has consistently issued warnings regarding the risks associated with cryptocurrencies. It has clearly stated that cryptocurrencies are not considered legal tender in Mozambique and are not regulated or supervised by the central bank. The BdM advises the public against using them due to risks such as price volatility, lack of consumer protection, and potential for money laundering and terrorist financing.

custody 60% confidence

No Specific Digital Asset Legislation: Mozambique does not have dedicated laws or regulations for digital assets that define them, regulate their issuance, trading, or custody.

custody 60% confidence

Custodial License Requirements: There are no specific licenses for cryptocurrency custodians. Any entity offering such services would operate in an unregulated space, or potentially be subject to general financial services licenses if their activities overlap with traditional financial services (which is unlikely given the BdM's stance on crypto not being legal tender).

custody 60% confidence

Segregation of Client Assets Rules: No rules exist for the segregation of client digital assets.

custody 60% confidence

Insurance/Bonding Requirements: There are no insurance or bonding requirements for digital asset custodians.

custody 60% confidence

Cold Storage Mandates: No mandates or regulations specify the use of cold storage for digital assets.

custody 60% confidence

Qualified Custodian Definitions: There is no legal definition for a "qualified custodian" in the context of digital assets.

licensing 20% confidence

Banco de Moçambique's Position: The BdM has repeatedly issued warnings and communiqués stating that cryptocurrencies are not legal tender in Mozambique, are not regulated by the central bank, and transactions involving them are high risk. They emphasize that there is no official protection for consumers or investors in virtual assets.

licensing 20% confidence

Specific Reference: Aviso Nº 03/GBM/2021, de 2 de Agosto (Warning Nº 03/GBM/2021, of August 2nd). This warning explicitly states that virtual assets are not considered currency, are not issued or guaranteed by the BdM, and are not subject to the legal regime of payment instruments or other financial instruments. It also highlights the risks associated with price volatility, cybercrime, lack of consumer protection, and potential for illicit activities.

licensing 20% confidence

No Specific Licenses: As a direct consequence of the above, there are no specific cryptocurrency exchange licenses, crypto custody licenses, or crypto payment processor licenses issued by the BdM or any other Mozambican authority for entities dealing solely in virtual assets.

licensing 20% confidence

Licensing for Traditional Financial Services: If an entity's operations involve traditional financial services (e.g., fiat-to-crypto exchanges, crypto payment processors that handle fiat currency, or entities holding fiat funds for crypto purchases), then they might fall under the existing financial licensing requirements supervised by the Banco de Moçambique or other financial regulators, depending on the specific nature of their activities. This would be interpreted under existing laws such as:

licensing 20% confidence

Lei do Sistema de Pagamentos (Law of the Payment System): Lei n.º 2/2016 de 27 de Junho – This law governs payment service providers (PSPs) and electronic money institutions (EMIs) that deal with fiat currency. If a crypto firm offers services that involve processing fiat payments, it could potentially be required to obtain a PSP or EMI license.

licensing 20% confidence

Lei das Instituições de Crédito e Sociedades Financeiras (Law on Credit Institutions and Financial Companies): Lei n.º 15/2022 de 13 de Dezembro – This law regulates traditional banking and financial institutions. If a crypto platform's activities start resembling deposit-taking or other regulated financial services, it could potentially fall under this.

licensing 20% confidence

AML/KYC Requirements: This is the most likely area where existing regulations would apply, even for purely crypto entities, if Mozambique were to begin enforcing FATF recommendations. Financial institutions are subject to rigorous AML/CFT obligations.

licensing 20% confidence

Lei de Prevenção e Combate ao Branqueamento de Capitais e Financiamento ao Terrorismo (Law on the Prevention and Combat of Money Laundering and Terrorist Financing): Lei n.º 14/2013 de 12 de Agosto (and subsequent amendments). This law establishes obligations for various entities, including financial institutions, to implement customer due diligence (KYC), suspicious transaction reporting, record-keeping, and internal controls. While it doesn't explicitly mention virtual assets, the principles would guide future regulation.

licensing 20% confidence

Local Presence: Typically, regulated financial institutions in Mozambique are required to have a physical presence and be incorporated locally.

aml 60% confidence

FATF Standards: Mozambique is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), which is an associate member of the Financial Action Task Force (FATF). FATF Recommendations explicitly cover virtual assets and VASPs, requiring them to implement AML/CFT measures, including targeted financial sanctions.

aml 60% confidence

Domestic Implementation: Mozambique's Lei n.º 14/2013, de 12 de Agosto (Law on Preventing and Combating Money Laundering and the Financing of Terrorism) requires reporting entities (primarily traditional financial institutions) to identify customers, monitor transactions, and report suspicious activities. While it doesn't explicitly mention VASPs, the spirit of the law and international standards (FATF) would extend these obligations to any entity facilitating financial transactions. The Unidade de Informação Financeira de Moçambique (UIF), Mozambique's Financial Intelligence Unit, is responsible for enforcing this law.

aml 60% confidence

Extraterritorial Reach: Sanctions regimes apply based on jurisdiction, currency used (e.g., USD for OFAC, EUR for EU), location of servers, nationality of participants, or nexus to sanctioned entities/persons.

aml 60% confidence

OFAC Sanctions Programs and Information: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information

enforcement 60% confidence

Entity Targeted: The general public, potential users, and operators of cryptocurrencies within Mozambique. (Not a specific company or individual). Violation Type (Implicit/Guidance): Engaging in financial activities with unregulated assets, operating outside the formal financial system, high risk of fraud/scams, potential for money laundering and terrorist financing. The core message is that cryptocurrencies are not legal tender and are not regulated by the Banco de Moçambique. Penalty Amount: N/A (These are warnings, not direct penalties for a specific enforcement case).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet/SaaS operations in Mozambique are legally possible only in a complete regulatory vacuum with no specific custody license, no segregation or insurance rules, and no qualified-custodian framework; pure crypto custody carries significant legal risk due to BdM warnings, while any fiat-handling activity would trigger traditional financial licensing under Lei n.º 2/2016 or Lei n.º 15/2022 with local incorporation, high capital requirements, and BdM supervision.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?