Custodial wallet / SaaS in Namibia
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Namibia with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Must comply with the Financial Intelligence Act, 2012 as amended — cornerstone AML/CFT framework in Namibia, supervised by the Financial Intelligence Centre (FIC).
- Customer identification and verification obligations: obtain full name, date of birth, residential address, nationality, and identification number (national ID/passport) for natural persons; for legal persons, obtain name, legal form, proof of existence, governing documents, and senior management details.
- Beneficial ownership identification and verification required — must understand ownership and control structure of each customer.
- Purpose and nature of business relationship must be understood and documented.
- Ongoing transaction monitoring required — scrutiny of transactions to ensure consistency with customer knowledge and risk profile.
- Enhanced Due Diligence (EDD) required for PEPs, high-risk geographic areas, complex/unusually large transactions, shell companies, and transactions involving new technologies favoring anonymity.
- Suspicious Transaction Reporting (STR) to the FIC — no monetary threshold; any suspicious transaction (including attempted) must be reported, with no tipping-off prohibition.
- Record-keeping: customer identification records, transaction records (amounts, virtual asset types, dates, sender/recipient info), business relationship records, analysis/decision records, and copies of STRs.
- Travel Rule readiness required — consistent with FATF Recommendation 16, VASPs should be prepared to obtain and transmit originator and beneficiary information for virtual asset transfers (typically above EUR/USD 1,000 or equivalent).
Key Restrictions
- Virtual assets are not recognized as 'money' by the Bank of Namibia — the legal status of custodial wallet services remains unsettled pending development of a regulatory framework.
- VASPs are not currently regulated by the Bank of Namibia under existing laws — no dedicated VASP/custody licensing regime is yet in force.
- The BoN has signaled it is developing a regulatory framework for virtual assets (position paper June 2022), but it is still in progress — operators face regulatory uncertainty.
- Custodial wallet/SaaS model likely requires a local entity (Namibian incorporation) given the AML registration and supervision obligations under the Financial Intelligence Act.
- No specific qualified-custodian, segregation, insurance, or proof-of-reserves rules exist yet for crypto custodians — this creates both risk and gap risk.
Key Risks
- Regulatory framework is still in development — no finalized VASP or custody licensing regime exists, creating licensing and compliance ambiguity.
- Bank of Namibia has consistently warned the public that crypto assets are high-risk and unregulated — enforcement environment may turn restrictive.
- NAMFISA has issued warnings about unregulated investment schemes involving digital assets — custodial wallet services offering yield/staking could be targeted as unregistered investment products.
- No specific segregation, insurance, or proof-of-reserves rules exist — custodial operators face liability exposure without clear legal safe harbors.
- The Travel Rule obligation is signaled but specific regulations are 'pending' — operators must be prepared but lack implementing guidance.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
June 15, 2022: The BoN issued a comprehensive position paper on Virtual Assets and Virtual Asset Service Providers (VASPs).
Outcome: The position paper clarified that, while the BoN had previously not recognized crypto assets, it now acknowledges them but only for specific purposes and with strong warnings. It confirmed that VASPs are not regulated by the BoN under existing laws and reiterated the high risks. It also signaled the intent to develop a robust regulatory framework.
Developing a regulatory framework for virtual assets, which is still in progress.
Regulator Name: Bank of Namibia (BoN)
Regulator Name: Namibia Financial Institutions Supervisory Authority (NAMFISA)
Financial Intelligence Act, 2012 (Act No. 13 of 2012) as amended by the Financial Intelligence Amendment Act, 2017 (Act No. 2 of 2017): This is the cornerstone of Namibia's AML/CFT framework. It establishes the Financial Intelligence Centre (FIC), defines money laundering and terrorist financing offenses, sets out reporting obligations, and outlines due diligence requirements for accountable institutions.
Financial Intelligence Centre (FIC) Namibia
Identification and Verification of Customers:
Natural Persons: Obtain full name, date of birth, residential address, nationality, identification number (e.g., national ID, passport). Verify identity using reliable, independent source documents, data, or information (e.g., government-issued ID, utility bills).
Legal Persons/Arrangements (Companies, Trusts): Obtain name, legal form, proof of existence, powers that regulate and bind the legal person/arrangement, and the names of relevant persons holding senior management positions.
Beneficial Ownership: Identify and verify the identity of the beneficial owner(s) of the customer, ensuring that VASPs understand the ownership and control structure of the customer. This involves identifying the natural person(s) who ultimately own or control the customer, and/or on whose behalf a transaction is being conducted.
Purpose and Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction.
Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Enhanced Due Diligence (EDD): Apply EDD in higher-risk situations, which typically include:
Travel Rule: Although specific regulations may be pending, consistent with FATF Recommendation 16 (the "Travel Rule"), VASPs should be prepared to obtain and transmit required originator and beneficiary information for virtual asset transfers above a certain threshold (typically EUR/USD 1,000 or equivalent).
Reporting Threshold: There is no monetary threshold for reporting suspicious transactions. Any transaction (or attempted transaction) that gives rise to a suspicion of money laundering or terrorist financing, regardless of the amount, must be reported.
"No Tipping-Off": VASPs and their employees are strictly prohibited from disclosing to the customer or any third party that an STR has been, or will be, submitted.
Customer Identification Records: Copies of all documents used for customer identification and verification (e.g., ID cards, passports, utility bills, company registration documents).
Transaction Records: Details of all transactions conducted by the VASP, including amounts, types of virtual assets, dates, sender and recipient information, and any associated messages. This includes both successful and attempted transactions.
Business Relationship Records: Records pertaining to the establishment and duration of business relationships.
Analysis and Decision Records: Records of any internal analysis undertaken regarding suspicious activity, and decisions made regarding whether or not to file an STR.
STRs Submitted: Copies of all suspicious transaction reports filed with the FIC.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS is not yet formally regulated under a dedicated VASP or custody regime in Namibia, but AML obligations under the Financial Intelligence Act apply, and operators must await the Bank of Namibia's developing regulatory framework; significant legal uncertainty persists.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?