Custodial wallet / SaaS in Sudan
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is not permitted in Sudan.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CBD-level KYC/CDD obligations under the Anti-Money Laundering and Combating Terrorism Financing Law of 2014 (Law No. 4 of 2014) would apply — customer identity verification using reliable independent source documents (national ID, passport, driving license), beneficial ownership identification for legal entities, purpose-and-intended-nature-of-business-relationship assessment.
- Ongoing transaction monitoring and scrutiny to ensure transactions are consistent with customer risk profile; Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions, and complex transactions.
- Obligation to report suspicious transactions to the Financial Information Unit (FIU) of Sudan; record-keeping for at least five years post-relationship termination (identity documents, transaction data, STR records).
- While these obligations technically exist under general law, no crypto-specific AML regime is in place, and no VASP can currently comply lawfully because crypto activity is prohibited.
Key Restrictions
- The Central Bank of Sudan (CBOS) has repeatedly warned against and effectively banned the trading, use, and holding of cryptocurrencies — this constitutes a de facto prohibition on custodial wallet / SaaS operations.
- Cryptocurrencies are not recognized as legal tender; no crypto custody licenses exist and none can be applied for.
- Any entity attempting to operate a custodial wallet service would do so without regulatory approval, outside the legal framework, and exposed to enforcement action including potential criminal liability.
- Financial institutions are prohibited from facilitating crypto transactions; the CBOS circular reportedly prohibits dealing with cryptocurrencies.
Key Risks
- Enforcement risk is severe — the CBOS has publicly reaffirmed its ban (e.g., November 2021), and operating constitutes a violation of financial regulations and currency controls; enforcement falls under broader financial crime/AML laws.
- No legal recourse or protection from CBOS for operators or customers — the CBOS has stated it will not provide any protection or recourse for those engaging in crypto transactions.
- Legal grey area with no clear path to compliance; no dedicated licensing framework, no qualified-custodian definition, no segregation-of-assets or insurance rules exist to rely upon.
- General AML/CFT obligations under the 2014 Act still apply in theory but cannot be satisfied through a lawful structure, creating unresolvable compliance tension.
- Reputational and PR risk from operating in a jurisdiction where the central bank has publicly branded crypto as high-risk for money laundering and terrorism financing.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Custodial License Requirements: No licenses are issued for cryptocurrency custody as the activity itself is not formally recognized or permitted.
Cryptocurrencies are not recognized as legal tender in Sudan.
Individuals and institutions engaging in cryptocurrency transactions do so at their own risk, and the CBOS will not provide any protection or recourse.
2018 & Beyond: The Central Bank of Sudan has repeatedly warned against cryptocurrency trading. For example, in 2018, it reportedly issued a circular prohibiting financial institutions from dealing with cryptocurrencies. This stance has been reiterated in subsequent years.
De Facto Prohibition/Strong Discouragement: While there might not be an explicit blanket ban in the form of a specific law against holding cryptocurrencies, their use for transactions or the operation of crypto-related businesses is highly discouraged and effectively operates in a legal grey area, if not against CBoS directives.
No Legal Tender Status: Cryptocurrencies are not recognized as legal tender in Sudan.
Custody Providers: Similar to exchanges, no specific licenses exist for virtual asset custody providers.
Non-existent: There is no established application process for cryptocurrency or virtual asset licenses or registrations in Sudan because the framework does not exist.
AML/KYC Requirements: This is perhaps the most critical aspect. While not crypto-specific, Sudan is a member of the Middle East & North Africa Financial Action Task Force (MENAFATF) and is committed to combating money laundering and terrorist financing (AML/CFT).
General AML/CFT Laws: Sudan has general AML/CFT legislation, such as the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014). Any financial institution or designated non-financial business and profession (DNFBP) operating in Sudan is obligated to adhere to these laws, including implementing customer due diligence (KYC) and reporting suspicious transactions.
De Facto Ban: The Central Bank of Sudan (CBOS) has repeatedly warned against the use of cryptocurrencies, citing risks such as money laundering, terrorism financing, price volatility, and consumer protection issues. These warnings have effectively created a ban on their use within the formal financial system.
No Licensed VASPs: Due to this stance, there are no licensed or regulated Virtual Asset Service Providers (VASPs) operating legally in Sudan. Any entity facilitating crypto transactions would be doing so outside the formal regulatory framework and potentially illegally.
The Anti-Money Laundering and Combating Terrorism Financing Law of 2014 (Law No. 4 of 2014): This is the primary legislation governing AML/CFT in Sudan. It establishes the legal framework for identifying, investigating, and prosecuting money laundering and terrorism financing offenses.
Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of the relationship to ensure they are consistent with the institution's knowledge of the customer, their business, and risk profile, including where necessary, the source of funds.
Obligation to Report: Financial institutions (and potentially other designated non-financial businesses and professions - DNFBPs, if applicable) are obligated to report suspicious transactions to the Financial Information Unit (FIU) of Sudan.
Outright Ban: Unlike many countries that regulate cryptocurrencies, Sudan has a strict prohibition. The Central Bank of Sudan (Bank of Sudan - BOS) has repeatedly issued warnings and reaffirmed its ban on the trading and use of cryptocurrencies, including Bitcoin, stating they are illegal and unregulated within the country. This means there are no licensed entities to regulate or fine in the way there might be in other jurisdictions.
Focus on General Warnings: The "enforcement actions" are more often in the form of official warnings and circulars from the Central Bank rather than specific actions against named entities with specified fines.
Date: Various warnings have been issued over the years, most recently reaffirmed in 2021 and continuing.
Title: Sudan Central Bank Reiterates Ban on Crypto, Warns of Risks
Date: November 29, 2021 (This article references earlier bans and reaffirms the position)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — Sudan has a de facto ban on cryptocurrency activities enforced by the Central Bank of Sudan (CBOS), with no licensing framework for custodial wallet/SaaS providers, no legal recognition of digital assets, and no pathway to lawful operation.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?