Crypto-funded debit card in Sudan

De Facto Prohibition/Strong Discouragement: While there might not be an explicit blanket ban in the form of a specific law against holding cryptocurrencies, their use for transactions or the operation of crypto-related businesses is highly discouraged and effectively operates in a legal grey area, if not against CBoS directives.

No Legal Tender Status: Cryptocurrencies are not recognized as legal tender in Sudan.

Exchanges (VASP-like activities): There are no specific licenses for cryptocurrency exchanges in Sudan. Any entity attempting to operate such a business would do so without specific regulatory approval, exposing them to significant legal and operational risks, including potential enforcement actions from the CBoS or other financial authorities under existing banking or financial services laws.

Payment Processors (Crypto-related): If a payment processor were to facilitate payments in or using cryptocurrencies, they would again fall outside any dedicated regulatory framework and would likely face similar challenges and risks as exchanges. Traditional payment processors are regulated under banking and financial services laws, but these do not extend to unregulated virtual assets.

Neither: As there is no specific framework, there is no established registration or licensing regime for virtual asset service providers (VASPs) in Sudan.

AML/KYC Requirements: This is perhaps the most critical aspect. While not crypto-specific, Sudan is a member of the Middle East & North Africa Financial Action Task Force (MENAFATF) and is committed to combating money laundering and terrorist financing (AML/CFT).

General AML/CFT Laws: Sudan has general AML/CFT legislation, such as the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014). Any financial institution or designated non-financial business and profession (DNFBP) operating in Sudan is obligated to adhere to these laws, including implementing customer due diligence (KYC) and reporting suspicious transactions.

Non-existent: There is no established application process for cryptocurrency or virtual asset licenses or registrations in Sudan because the framework does not exist.

Local Presence: Any legally registered business in Sudan typically requires a local presence (registered office, local management/directors) as per general company law requirements.

Bank of Sudan's Stance (Reported): The CBoS has issued numerous warnings against the use of cryptocurrencies. These warnings are often reported by local and international news outlets.

De Facto Ban: The Central Bank of Sudan (CBOS) has repeatedly warned against the use of cryptocurrencies, citing risks such as money laundering, terrorism financing, price volatility, and consumer protection issues. These warnings have effectively created a ban on their use within the formal financial system.

No Licensed VASPs: Due to this stance, there are no licensed or regulated Virtual Asset Service Providers (VASPs) operating legally in Sudan. Any entity facilitating crypto transactions would be doing so outside the formal regulatory framework and potentially illegally.

The Anti-Money Laundering and Combating Terrorism Financing Law of 2014 (Law No. 4 of 2014): This is the primary legislation governing AML/CFT in Sudan. It establishes the legal framework for identifying, investigating, and prosecuting money laundering and terrorism financing offenses.

Identification and Verification:

Individuals: Verifying the identity of customers using reliable, independent source documents, data, or information (e.g., national ID, passport, driving license).

Beneficial Ownership Identification: Taking reasonable measures to understand the ownership and control structure of legal entities and identify the natural persons who ultimately own or control the customer.

Purpose and Intended Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship.

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of the relationship to ensure they are consistent with the institution's knowledge of the customer, their business, and risk profile, including where necessary, the source of funds.

Enhanced Due Diligence (EDD): Applied in higher-risk situations, such as relationships with Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, or complex transactions. This would likely be a default for crypto if ever legalized, given its inherent risks.

Obligation to Report: Financial institutions (and potentially other designated non-financial businesses and professions - DNFBPs, if applicable) are obligated to report suspicious transactions to the Financial Information Unit (FIU) of Sudan.

Financial institutions are typically required to retain all records of customer identification data, account files, business correspondence, and transaction records for a specified period (e.g., at least five years) following the termination of the business relationship or the execution of the transaction. This includes:

Outright Ban: Unlike many countries that regulate cryptocurrencies, Sudan has a strict prohibition. The Central Bank of Sudan (Bank of Sudan - BOS) has repeatedly issued warnings and reaffirmed its ban on the trading and use of cryptocurrencies, including Bitcoin, stating they are illegal and unregulated within the country. This means there are no licensed entities to regulate or fine in the way there might be in other jurisdictions.

Lack of Transparency for Individual Cases: Enforcement, when it occurs, typically falls under broader financial crime, currency control, or anti-money laundering laws against individuals rather than specific "crypto" regulations against companies. Information about individual arrests, prosecutions, and specific penalties in Sudan's justice system is generally not publicly detailed or widely reported, especially to international media. It's rare to find specific public records outlining a precise penalty amount or the outcome of such cases for foreign observation.

Focus on General Warnings: The "enforcement actions" are more often in the form of official warnings and circulars from the Central Bank rather than specific actions against named entities with specified fines.

Entity Targeted: The general public and financial institutions in Sudan (not a specific company or individual in a formal "enforcement action"). Violation Type: Engaging in or facilitating the trading, holding, or use of cryptocurrencies. This is considered a violation of financial regulations and currency control laws, as cryptocurrencies are deemed illegal tender and an unregulated financial instrument. Penalty Amount: No specific amount for the "warning" itself. Individuals found to be in violation could face penalties under existing financial and anti-money laundering laws, but these are not publicly itemized for crypto-specific offenses.

Outcome: Cryptocurrencies remain illegal and unregulated in Sudan. The warnings aim to prevent citizens and financial institutions from engaging in crypto activities.

Title: Sudan Central Bank Reiterates Ban on Crypto, Warns of Risks