Self-custodial wallet / non-custodial software in Rwanda
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Rwanda without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to a non-custodial wallet publisher that never holds, controls, or has access to user funds, because the publisher does not fall within the definition of a 'reporting person' (VASP) under Law N° 060/2021 of 14/10/2021 — the legal framework targets entities that provide custodial or intermediary services.
- If the wallet software were to incorporate any fiat on-ramp/off-ramp, integrated exchange, or other financial service, the operator would become a reporting person under the AML/CFT framework and would need to: apply CDD/EDD (customer identification, beneficial ownership verification, ongoing monitoring), file STRs with the FIC (no monetary threshold), maintain records for 5 years, and comply with sanctions screening obligations (UN consolidated list, OFAC SDN list given USD exposure).
Key Restrictions
- The publisher must not hold, control, or have access to user private keys or funds — if any custodial element is introduced, the operator becomes a VASP under Rwandan AML law.
- The BNR has issued ongoing public warnings that virtual currencies are not legal tender in Rwanda and carry risks — this creates consumer-prudence expectations even if no direct prohibition exists on software publishing.
- No specific consumer-protection or disclosure rules currently apply to non-custodial wallet software published from outside Rwanda.
Key Risks
- Regulatory ambiguity: Rwanda's framework for virtual assets is still evolving — a future law could expand the definition of 'reporting person' to include wallet publishers, retroactively creating compliance gaps.
- BNR's public stance discouraging cryptocurrency use may create reputational/PR risk if the publisher markets its software to Rwandan residents.
- Enforcement action under general fraud or financial crime laws (e.g., if users suffer losses and allege the software was misleading) remains possible even if no specific crypto-licensing regime exists.
- No formal licensing safe harbor currently exists — the absence of a license does not imply the absence of future liability if the regulatory framework changes.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Law N° 060/2021 of 14/10/2021 on Preventing and Combating Money Laundering and Financing of Terrorism: This is the overarching AML/CFT law in Rwanda. It establishes the legal framework for identifying, reporting, and preventing money laundering and terrorist financing. It defines "reporting persons" broadly to include any person or entity that, by virtue of their activities, may be exposed to ML/TF risks, which can encompass VASPs even if not explicitly named.
Ministerial Order N° 001/2022 of 28/01/2022 determining requirements for combating money laundering and financing of terrorism: This order specifies the general AML/CFT compliance requirements for reporting persons.
Ministerial Order N° 002/2022 of 28/01/2022 determining procedures for combating money laundering and financing of terrorism: This order details the procedural aspects of AML/CFT compliance.
National Bank of Rwanda (BNR) Circulars and Guidelines: The BNR, as the central bank and financial regulator, has issued warnings regarding the risks associated with cryptocurrencies, underscoring the need for AML/CFT compliance should they operate within Rwanda's financial ecosystem. While not specific VASP licensing, these reinforce the general AML/CFT obligations.
Law No. 008/2020 of 08/07/2020 on Anti-Money Laundering and Combating the Financing of Terrorism and Proliferation (AML/CFT-P): This is the cornerstone legislation. It establishes the Financial Intelligence Centre (FIC) as the primary body for receiving and analyzing suspicious transaction reports (STRs) and provides the framework for identifying and sanctioning financial crimes. This law explicitly mandates compliance with international sanctions, particularly those issued by the United Nations Security Council (UNSC).
Law No. 008/2021 of 16/02/2021 Governing Payment Systems: This law provides a framework for licensing and oversight of payment service providers. While not specific to crypto, it lays the groundwork for how VASPs might be regulated and licensed, extending AML/CFT obligations to them. The National Bank of Rwanda (BNR) is the primary regulator for payment systems and is actively working on a comprehensive framework for digital assets.
Evolving Regulatory Framework: Rwanda's regulatory framework for virtual assets is still developing. While the National Bank of Rwanda (BNR) has issued warnings and statements regarding the risks of cryptocurrencies, comprehensive legislation specifically targeting Virtual Asset Service Providers (VASPs) and detailing licensing requirements and specific enforcement mechanisms is still in progress.
Focus on Warnings and Consumer Protection: The BNR's primary approach has been to issue public warnings about the unregulated nature of cryptocurrencies, their volatility, and the risks of fraud and money laundering. This is a preventative measure rather than reactive enforcement against specific licensed entities (as there are few, if any, formally licensed crypto businesses operating under a specific crypto regulatory regime in Rwanda currently).
Lack of Formal Licensing Regime: Without a well-established licensing regime for crypto businesses, enforcement actions would more likely fall under general financial laws (e.g., anti-money laundering, fraud) rather than specific crypto regulatory breaches. Any related cases might be handled by criminal law enforcement rather than financial regulators as "enforcement actions" against a specific crypto business.
National Bank of Rwanda (BNR) on Virtual Currencies: The BNR has consistently stated that virtual currencies are not legal tender in Rwanda and has warned against their risks.
General Stance/Violation Type: Public warnings against the use of cryptocurrencies due to their unregulated nature, high volatility, lack of legal tender status, and potential for fraud and money laundering. This can be broadly seen as a "pre-emptive enforcement" or "risk mitigation" strategy.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet software publisher that never holds user keys or funds does not trigger VASP classification or AML obligations under current Rwandan law (which targets custodial intermediaries), but the publisher must avoid any custodial feature and contend with BNR's public warnings against cryptocurrency use and an evolving regulatory environment.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?