Remote VASP serving residents in Sudan
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is not permitted in Sudan.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- General AML/CFT obligations under the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014) would apply to any financial activity, including crypto — but no licensed VASPs exist given the de facto ban.
- Customer identification and verification using reliable independent source documents (e.g., national ID, passport, driving license).
- Beneficial ownership identification for legal entities/arrangements — reasonable measures to identify natural persons who ultimately own or control the customer.
- Purpose and intended nature of business relationship must be understood and documented.
- Ongoing monitoring of business relationships and transaction scrutiny to ensure consistency with customer knowledge and risk profile.
- Enhanced Due Diligence (EDD) required for higher-risk situations (PEPs, high-risk jurisdictions, complex transactions).
- Suspicious Transaction Reports (STRs) must be filed with the Financial Information Unit (FIU) of Sudan.
- Record retention for at least five years post-termination of business relationship (identity docs, transaction data, STR records).
- Supervised by Central Bank of Sudan (CBOS) and FIU of Sudan (for reporting) — but no formal regime exists for crypto.
Key Restrictions
- De facto ban: The Central Bank of Sudan (CBOS) has repeatedly warned against and prohibited cryptocurrency-related activities — crypto is illegal and unregulated in the formal financial system.
- Cryptocurrencies are not recognized as legal tender in Sudan.
- No licensing framework exists for VASPs, exchanges, custody providers, or crypto payment processors — there is no legal path to operate.
- Financial institutions are prohibited from dealing in or facilitating cryptocurrency transactions (CBOS circulars, e.g., 2018, reaffirmed 2021).
- Any legally registered business in Sudan requires a local presence (registered office, local management/directors) under general company law, but this path is effectively closed for crypto.
Key Risks
- High enforcement exposure: Cryptocurrency trading/use is illegal; CBOS warnings constitute an effective ban, and violators face potential charges under financial crime, currency control, or AML laws.
- No legal recourse or consumer protection: The CBOS has stated it will not provide any protection for crypto transactions.
- FATF grey-list risk context: Sudan was removed from the grey list in October 2023, but the underlying AML framework still treats unlicensed crypto activity as illegal.
- Lack of regulatory transparency: Enforcement actions are not systematically published; individual prosecutions happen under general financial crime laws rather than specific crypto enforcement.
- Operators face risk of asset confiscation, fines, and imprisonment under Sudanese law for unauthorized financial activities or foreign exchange violations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
De Facto Prohibition/Strong Discouragement: While there might not be an explicit blanket ban in the form of a specific law against holding cryptocurrencies, their use for transactions or the operation of crypto-related businesses is highly discouraged and effectively operates in a legal grey area, if not against CBoS directives.
No Legal Tender Status: Cryptocurrencies are not recognized as legal tender in Sudan.
Exchanges (VASP-like activities): There are no specific licenses for cryptocurrency exchanges in Sudan. Any entity attempting to operate such a business would do so without specific regulatory approval, exposing them to significant legal and operational risks, including potential enforcement actions from the CBoS or other financial authorities under existing banking or financial services laws.
AML/KYC Requirements: This is perhaps the most critical aspect. While not crypto-specific, Sudan is a member of the Middle East & North Africa Financial Action Task Force (MENAFATF) and is committed to combating money laundering and terrorist financing (AML/CFT).
General AML/CFT Laws: Sudan has general AML/CFT legislation, such as the National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014). Any financial institution or designated non-financial business and profession (DNFBP) operating in Sudan is obligated to adhere to these laws, including implementing customer due diligence (KYC) and reporting suspicious transactions.
Local Presence: Any legally registered business in Sudan typically requires a local presence (registered office, local management/directors) as per general company law requirements.
Non-existent: There is no established application process for cryptocurrency or virtual asset licenses or registrations in Sudan because the framework does not exist.
Bank of Sudan's Stance (Reported): The CBoS has issued numerous warnings against the use of cryptocurrencies. These warnings are often reported by local and international news outlets.
National Anti-Money Laundering and Combating the Financing of Terrorism Act (2014): This is the primary legislation for AML/CFT in Sudan. While it predates the widespread recognition of virtual assets, its principles would apply to any financial activity.
De Facto Ban: The Central Bank of Sudan (CBOS) has repeatedly warned against the use of cryptocurrencies, citing risks such as money laundering, terrorism financing, price volatility, and consumer protection issues. These warnings have effectively created a ban on their use within the formal financial system.
No Licensed VASPs: Due to this stance, there are no licensed or regulated Virtual Asset Service Providers (VASPs) operating legally in Sudan. Any entity facilitating crypto transactions would be doing so outside the formal regulatory framework and potentially illegally.
The Anti-Money Laundering and Combating Terrorism Financing Law of 2014 (Law No. 4 of 2014): This is the primary legislation governing AML/CFT in Sudan. It establishes the legal framework for identifying, investigating, and prosecuting money laundering and terrorism financing offenses.
Beneficial Ownership Identification: Taking reasonable measures to understand the ownership and control structure of legal entities and identify the natural persons who ultimately own or control the customer.
Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of the relationship to ensure they are consistent with the institution's knowledge of the customer, their business, and risk profile, including where necessary, the source of funds.
Enhanced Due Diligence (EDD): Applied in higher-risk situations, such as relationships with Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, or complex transactions. This would likely be a default for crypto if ever legalized, given its inherent risks.
Obligation to Report: Financial institutions (and potentially other designated non-financial businesses and professions - DNFBPs, if applicable) are obligated to report suspicious transactions to the Financial Information Unit (FIU) of Sudan.
Financial institutions are typically required to retain all records of customer identification data, account files, business correspondence, and transaction records for a specified period (e.g., at least five years) following the termination of the business relationship or the execution of the transaction. This includes:
Outright Ban: Unlike many countries that regulate cryptocurrencies, Sudan has a strict prohibition. The Central Bank of Sudan (Bank of Sudan - BOS) has repeatedly issued warnings and reaffirmed its ban on the trading and use of cryptocurrencies, including Bitcoin, stating they are illegal and unregulated within the country. This means there are no licensed entities to regulate or fine in the way there might be in other jurisdictions.
Lack of Transparency for Individual Cases: Enforcement, when it occurs, typically falls under broader financial crime, currency control, or anti-money laundering laws against individuals rather than specific "crypto" regulations against companies. Information about individual arrests, prosecutions, and specific penalties in Sudan's justice system is generally not publicly detailed or widely reported, especially to international media. It's rare to find specific public records outlining a precise penalty amount or the outcome of such cases for foreign observation.
Focus on General Warnings: The "enforcement actions" are more often in the form of official warnings and circulars from the Central Bank rather than specific actions against named entities with specified fines.
Regulator Name: Central Bank of Sudan (Bank of Sudan - BOS)
Outcome: Cryptocurrencies remain illegal and unregulated in Sudan. The warnings aim to prevent citizens and financial institutions from engaging in crypto activities.
Bloomberg (referencing earlier warnings):
Overall Status: No Adoption, General Prohibition/Strong Discouragement
Cryptocurrencies are not recognized as legal tender in Sudan.
2018 & Beyond: The Central Bank of Sudan has repeatedly warned against cryptocurrency trading. For example, in 2018, it reportedly issued a circular prohibiting financial institutions from dealing with cryptocurrencies. This stance has been reiterated in subsequent years.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
No — Sudan imposes a de facto prohibition on cryptocurrency activity; there is no licensing path for a remote VASP, CBOS warnings and circulars make crypto services effectively illegal, and operating without a local entity exposes the operator to enforcement under financial crime and AML laws including potential asset confiscation, fines, and imprisonment.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?