← Regulations / Sudan / Operating Models / CEX

Centralized exchange in Sudan

Order-book exchange that takes custody of user assets and matches trades between users.

Not permitted AI-Generated · Unreviewed

CEX is not permitted in Sudan.

Verdict Details

Permitted
no
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Any entity attempting to operate must comply with Sudan's general AML/CFT framework under the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014) (Law No. 4 of 2014)
  • Customer identification and verification using reliable independent source documents (e.g. national ID, passport, driving license)
  • Beneficial ownership identification for legal entities — reasonable measures to identify natural persons who ultimately own or control the customer
  • Understanding the purpose and intended nature of the business relationship
  • Ongoing monitoring of transactions throughout the business relationship
  • Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, complex transactions
  • Obligation to report suspicious transactions to the Financial Information Unit (FIU) of Sudan
  • Record retention of customer identification data, account files, and transaction records for at least five years following termination of the business relationship or execution of the transaction
  • However, no licensed VASPs exist — operating would be outside the formal framework and potentially illegal
  • The CBOS has issued a de facto ban, prohibiting financial institutions from dealing with cryptocurrencies

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender
  • The Central Bank of Sudan (CBOS) has repeatedly banned the trading and use of cryptocurrencies — financial institutions are prohibited from dealing with them
  • No specific licensing or registration framework exists for crypto exchanges, custody, or VASP activities
  • Any operation would be in a legal grey area without specific regulatory approval
  • No established application process — no license or registration can be obtained for crypto activities
  • No rules exist for segregation of client assets, cold storage mandates, insurance/bonding, or qualified custodian definitions for digital assets
  • The FATF Travel Rule has not been adopted — no technical implementation requirements exist

Key Risks

  • De facto prohibition means any attempt to operate a centralized exchange would be operating illegally outside the formal regulatory framework
  • Exposure to enforcement under broader financial crime, currency control, and AML laws — potential consequences include fines, asset confiscation, and imprisonment
  • CBOS warnings and circulars have been repeatedly reaffirmed (most recently 2021 and continuing), signaling sustained enforcement risk
  • No regulatory protection or recourse — the CBOS has stated it will not provide any protection for crypto transactions
  • Lack of transparency around individual enforcement cases makes it difficult to gauge actual prosecution risk
  • Sudan was on the FATF grey list (removed October 2023), indicating past heightened AML/CFT scrutiny
  • Operational impossibility of complying with both the de facto ban and any theoretical licensing requirements

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

De Facto Prohibition/Strong Discouragement: While there might not be an explicit blanket ban in the form of a specific law against holding cryptocurrencies, their use for transactions or the operation of crypto-related businesses is highly discouraged and effectively operates in a legal grey area, if not against CBoS directives.

licensing 20% confidence

Exchanges (VASP-like activities): There are no specific licenses for cryptocurrency exchanges in Sudan. Any entity attempting to operate such a business would do so without specific regulatory approval, exposing them to significant legal and operational risks, including potential enforcement actions from the CBoS or other financial authorities under existing banking or financial services laws.

licensing 20% confidence

Neither: As there is no specific framework, there is no established registration or licensing regime for virtual asset service providers (VASPs) in Sudan.

licensing 20% confidence

Non-existent: There is no established application process for cryptocurrency or virtual asset licenses or registrations in Sudan because the framework does not exist.

licensing 20% confidence

Lack of Specific Legislation: As noted, there is no dedicated licensing framework.

licensing 20% confidence

No Legal Tender Status: Cryptocurrencies are not recognized as legal tender in Sudan.

licensing 20% confidence

Bank of Sudan's Stance (Reported): The CBoS has issued numerous warnings against the use of cryptocurrencies. These warnings are often reported by local and international news outlets.

licensing 20% confidence

National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014): This is the primary legislation for AML/CFT in Sudan. While it predates the widespread recognition of virtual assets, its principles would apply to any financial activity.

licensing 20% confidence

AML/KYC Requirements: This is perhaps the most critical aspect. While not crypto-specific, Sudan is a member of the Middle East & North Africa Financial Action Task Force (MENAFATF) and is committed to combating money laundering and terrorist financing (AML/CFT).

licensing 20% confidence

General AML/CFT Laws: Sudan has general AML/CFT legislation, such as the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014). Any financial institution or designated non-financial business and profession (DNFBP) operating in Sudan is obligated to adhere to these laws, including implementing customer due diligence (KYC) and reporting suspicious transactions.

licensing 20% confidence

Implication for Crypto: Should a crypto business attempt to operate, they would be expected by international standards (FATF recommendations) and potentially by local authorities (even without specific crypto laws) to implement robust AML/KYC measures. Failure to do so would expose them to significant legal repercussions under existing AML/CFT laws.

licensing 20% confidence

Local Presence: Any legally registered business in Sudan typically requires a local presence (registered office, local management/directors) as per general company law requirements.

custody 20% confidence

Custodial License Requirements: No licenses are issued for cryptocurrency custody as the activity itself is not formally recognized or permitted.

custody 20% confidence

Segregation of Client Assets Rules: Without a legal framework for digital assets, there are no rules mandating the segregation of client assets.

custody 20% confidence

Insurance/Bonding Requirements: There are no insurance or bonding requirements for crypto custodians, as no such entities are formally permitted to operate.

custody 20% confidence

Cold Storage Mandates: No mandates exist for cold storage or any other security protocols for digital asset custody.

custody 20% confidence

Qualified Custodian Definitions: There is no legal definition of a "qualified custodian" for digital assets in Sudan.

aml 40% confidence

De Facto Ban: The Central Bank of Sudan (CBOS) has repeatedly warned against the use of cryptocurrencies, citing risks such as money laundering, terrorism financing, price volatility, and consumer protection issues. These warnings have effectively created a ban on their use within the formal financial system.

aml 40% confidence

No Licensed VASPs: Due to this stance, there are no licensed or regulated Virtual Asset Service Providers (VASPs) operating legally in Sudan. Any entity facilitating crypto transactions would be doing so outside the formal regulatory framework and potentially illegally.

aml 40% confidence

The Anti-Money Laundering and Combating Terrorism Financing Law of 2014 (Law No. 4 of 2014): This is the primary legislation governing AML/CFT in Sudan. It establishes the legal framework for identifying, investigating, and prosecuting money laundering and terrorism financing offenses.

aml 40% confidence

Identification and Verification:

aml 40% confidence

Individuals: Verifying the identity of customers using reliable, independent source documents, data, or information (e.g., national ID, passport, driving license).

aml 40% confidence

Legal Entities/Arrangements: Verifying the legal existence and structure of the entity, its legal name, registration details, address, and identifying the natural persons who are beneficial owners.

aml 40% confidence

Beneficial Ownership Identification: Taking reasonable measures to understand the ownership and control structure of legal entities and identify the natural persons who ultimately own or control the customer.

aml 40% confidence

Purpose and Intended Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship.

aml 40% confidence

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of the relationship to ensure they are consistent with the institution's knowledge of the customer, their business, and risk profile, including where necessary, the source of funds.

aml 40% confidence

Enhanced Due Diligence (EDD): Applied in higher-risk situations, such as relationships with Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, or complex transactions. This would likely be a default for crypto if ever legalized, given its inherent risks.

aml 40% confidence

Obligation to Report: Financial institutions (and potentially other designated non-financial businesses and professions - DNFBPs, if applicable) are obligated to report suspicious transactions to the Financial Information Unit (FIU) of Sudan.

aml 40% confidence

Financial institutions are typically required to retain all records of customer identification data, account files, business correspondence, and transaction records for a specified period (e.g., at least five years) following the termination of the business relationship or the execution of the transaction. This includes:

travel-rule 60% confidence

Overall Status: No Adoption, General Prohibition/Strong Discouragement

enforcement 60% confidence

Outright Ban: Unlike many countries that regulate cryptocurrencies, Sudan has a strict prohibition. The Central Bank of Sudan (Bank of Sudan - BOS) has repeatedly issued warnings and reaffirmed its ban on the trading and use of cryptocurrencies, including Bitcoin, stating they are illegal and unregulated within the country. This means there are no licensed entities to regulate or fine in the way there might be in other jurisdictions.

enforcement 60% confidence

Regulator Name: Central Bank of Sudan (Bank of Sudan - BOS)

enforcement 60% confidence

Entity Targeted: The general public and financial institutions in Sudan (not a specific company or individual in a formal "enforcement action"). Violation Type: Engaging in or facilitating the trading, holding, or use of cryptocurrencies. This is considered a violation of financial regulations and currency control laws, as cryptocurrencies are deemed illegal tender and an unregulated financial instrument. Penalty Amount: No specific amount for the "warning" itself. Individuals found to be in violation could face penalties under existing financial and anti-money laundering laws, but these are not publicly itemized for crypto-specific offenses.

enforcement 60% confidence

Outcome: Cryptocurrencies remain illegal and unregulated in Sudan. The warnings aim to prevent citizens and financial institutions from engaging in crypto activities.

custody 20% confidence

Cryptocurrencies are not recognized as legal tender in Sudan.

custody 20% confidence

2018 & Beyond: The Central Bank of Sudan has repeatedly warned against cryptocurrency trading. For example, in 2018, it reportedly issued a circular prohibiting financial institutions from dealing with cryptocurrencies. This stance has been reiterated in subsequent years.

aml 40% confidence

Central Bank of Sudan (CBOS):

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Not permitted — Sudan has a de facto prohibition on cryptocurrency activities enforced by the Central Bank of Sudan (CBOS), with no licensing framework for exchanges or VASPs, meaning any centralized exchange operation would be illegal and subject to enforcement under financial crime and currency control laws.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?