Custodial wallet / SaaS in Sierra Leone
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Sierra Leone without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- CDD required under the Anti-Money Laundering and Combating of Financing of Terrorism Act, 2018: name, address, date of birth, nationality, unique ID (for natural persons); legal name, form, proof of existence, senior management IDs (for legal persons).
- Beneficial owner identification required — reasonable measures to understand ownership/control structure.
- Ongoing monitoring and scrutiny of transactions throughout the business relationship.
- Risk-based approach: Enhanced CDD required for PEPs, high-risk jurisdictions, complex structures, high-value transactions.
- Source of funds and source of wealth required for higher-risk customers.
- Suspicious Transaction Reports (STRs) must be filed with the FIU-SL whenever there are reasonable grounds to suspect proceeds of crime or terrorist financing.
- No tipping-off prohibition — VASP and employees cannot disclose STR submissions to customers or third parties.
- Record-keeping: transaction records, CDD data, and analysis records for a minimum of 5 years.
- UN sanctions screening required — VASPs must screen customers/transactions against UN Consolidated Sanctions Lists and freeze assets of listed persons without delay.
Key Restrictions
- No specific crypto-custody license exists — operator cannot obtain a formal 'custody license' in Sierra Leone.
- Bank of Sierra Leone has repeatedly warned that cryptocurrencies are not legal tender and are not regulated by the BSL, creating legal uncertainty for custody service providers.
- No regulatory segregation, insurance, bonding, or cold-storage mandates exist for crypto custodians — operational standards are entirely voluntary.
- If VASPs are eventually classified under the AML/CFT Act as 'designated non-financial businesses', AML obligations would apply directly; currently the classification of crypto custodians under the Act is ambiguous.
- FATF recommendations on VASP regulation are not yet implemented in domestic law — the framework is warning-based, not rule-based.
Key Risks
- Regulatory ambiguity — no clear legal status for custodial wallet providers creates uncertainty for enforcement, licensing, and business continuity.
- Regulatory reversals possible — Sierra Leone has no published roadmap for crypto regulation; a future ban or restrictive framework cannot be ruled out.
- FIU-SL could retroactively assert that custodial wallet providers are reporting entities under existing AML law, imposing obligations without prior guidance.
- Consumer protection exposure — with no segregation or insurance rules, loss of client assets could result in civil liability or criminal charges under general law.
- Reputational risk for SaaS providers white-labeling to businesses — AML obligations (CDD, STRs) may fall on the SaaS operator if the client is unregulated.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific License: There are currently no specific licenses in Sierra Leone for cryptocurrency custodians or digital asset service providers. Entities engaging in such activities operate in a largely unregulated space regarding specific crypto custody requirements.
BSL Warnings: The Bank of Sierra Leone has repeatedly issued warnings to the public about the risks of investing in or transacting with cryptocurrencies, stating that they are not legal tender and are not regulated by the BSL. This implies that any entity offering crypto custody services would be operating outside the formal regulatory perimeter.
No Specific Rules: Given the absence of a dedicated regulatory framework for crypto custody, there are no specific rules mandating the segregation of client digital assets from the custodian's own assets.
No Specific Requirements: There are no specific insurance or bonding requirements for cryptocurrency custodians in Sierra Leone.
No Specific Mandates: There are no legal mandates requiring cryptocurrency custodians to use cold storage for digital assets.
No Specific Definition: Sierra Leone does not have a legal or regulatory definition for a "qualified custodian" in the context of digital assets or cryptocurrencies.
Anti-Money Laundering and Combating of Terrorist Financing Act, 2012 (or latest iteration): This act and its subsequent amendments would generally apply to financial institutions and designated non-financial businesses and professions. If virtual asset service providers (VASPs) are eventually classified under this act, they would be subject to customer due diligence (CDD), record-keeping, and suspicious transaction reporting (STR) obligations.
Financial Intelligence Unit of Sierra Leone (FIU-SL): While not specifically regulating crypto, the FIU-SL is responsible for combating money laundering and terrorist financing (AML/CFT). Any engagement with virtual assets by financial institutions or designated non-financial businesses and professions (DNFBPs) would fall under their purview for AML/CFT compliance, even without specific crypto legislation.
Partial/Cautionary/Warning-Based: Sierra Leone does not have a comprehensive regulatory framework for virtual assets. Instead, the approach is primarily characterized by warnings from the central bank, emphasizing the risks associated with cryptocurrencies and stating they are not legal tender. There is no official recognition, licensing, or specific regulation for crypto service providers.
The Anti-Money Laundering and Combating of Financing of Terrorism Act, 2018: While an online copy with a direct, stable URL is not readily available through general government searches, this Act is the primary domestic legislation for AML/CFT in Sierra Leone. It would be accessible via legal databases or directly from the Bank of Sierra Leone (BSL) or the Financial Intelligence Unit – Sierra Leone (FIU-SL).
Identification and Verification of Customer Identity:
For natural persons: Name, address, date of birth, nationality, unique identification number (e.g., national ID, passport). Verification through reliable, independent source documents, data, or information.
For legal persons/arrangements: Name, legal form, proof of existence, powers that regulate and bind the legal person, and identification of persons holding senior management positions.
Identification of Beneficial Owners: Take reasonable measures to understand the ownership and control structure of the customer and identify the ultimate natural person(s) who own or control the customer.
Purpose and Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction.
Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds or wealth.
Risk-Based Approach: Apply enhanced CDD for higher-risk customers or transactions (e.g., Politically Exposed Persons (PEPs), cross-border correspondent relationships, complex structures, high-value transactions, or transactions involving jurisdictions with weak AML/CFT regimes). Conversely, simplified CDD may be applied for lower-risk scenarios.
Source of Funds and Source of Wealth: For higher-risk customers or transactions, VASPs are expected to take reasonable measures to establish the source of funds and source of wealth involved.
Obligation: Any VASP that has reasonable grounds to suspect that funds or assets (including virtual assets) are the proceeds of a criminal activity or are related to terrorist financing must promptly report its suspicions to the FIU-SL.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR is being, or has been, submitted.
Transaction Records: Records of all transactions, domestic and international, for a minimum period of five (5) years. These records must be sufficient to permit reconstruction of individual transactions and patterns of transactions.
Customer Identification Data: Records of the information obtained through the CDD process (e.g., identity documents, beneficial ownership information) for a minimum period of five (5) years after the business relationship has ended or after the date of an occasional transaction.
Records of Analysis: Records of the analysis undertaken in respect of complex, unusual, or high-risk transactions.
The Financial Intelligence Unit of Sierra Leone (FIU-SL)
Role: The FIU-SL is the central national agency responsible for receiving, analyzing, and disseminating suspicious transaction reports and other financial information to combat money laundering and terrorist financing. It provides guidance and oversight to reporting institutions.
Compliance Requirement: UN Security Council resolutions imposing sanctions are legally binding on all UN member states, including Sierra Leone. Sierra Leone incorporates these obligations into its domestic law, primarily through its anti-money laundering and combating the financing of terrorism framework.
VASP Obligations: Any VASP operating in or from Sierra Leone must screen its customers and transactions against the UN Consolidated Sanctions List and specific UN Security Council Committee Sanctions Lists. Assets of listed individuals/entities must be frozen without delay, and any attempt to circumvent these measures must be reported.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet / SaaS operation is technically feasible in Sierra Leone because there is no specific prohibition, but it operates in a legally ambiguous, warning-based environment with no custody license framework, no segregation/insurance/cold-storage rules, and only general AML/CFT obligations (CDD, STRs, record-keeping, sanctions screening) that may or may not apply depending on whether VASPs are classified as reporting entities under the Anti-Money Laundering and Combating of Financing of Terrorism Act, 2018.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?