DeFi protocol frontend in Sierra Leone
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Sierra Leone with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- If a DeFi frontend is classified as a VASP (based on FATF guidance), it must comply with Sierra Leone's Anti-Money Laundering and Combating of Financing of Terrorism Act, 2018, which would require: Customer Due Diligence (CDD) including name, address, date of birth, nationality, and unique identification number (national ID/passport) for natural persons.
- For legal persons: name, legal form, proof of existence, governing powers, and identification of senior management.
- Identification of beneficial owners — reasonable measures to understand ownership and control structure.
- Purpose and nature of business relationship must be understood and documented.
- Ongoing monitoring of transactions throughout the business relationship to ensure consistency with customer risk profile.
- Risk-based approach: Enhanced CDD required for PEPs, high-risk jurisdictions, complex structures, high-value transactions; simplified CDD permitted for lower-risk scenarios.
- Source of funds and source of wealth must be established for higher-risk customers or transactions.
- Suspicious Transaction Reports (STRs) must be filed with the FIU-SL when there are reasonable grounds to suspect funds are proceeds of crime or related to terrorist financing.
- No tipping-off prohibition applies — customers cannot be informed that an STR has been filed.
- Record-keeping: transaction records and customer identification data must be retained for a minimum of 5 years.
- UN sanctions screening required — must screen customers and transactions against UN Consolidated Sanctions List and freeze assets of listed individuals/entities without delay.
- Oversight by the Financial Intelligence Unit of Sierra Leone (FIU-SL) as the central AML/CFT authority.
Key Restrictions
- Crypto assets are not recognized as legal tender by the Bank of Sierra Leone and are not regulated by the BSL — the frontend cannot represent crypto as regulated financial services.
- If the frontend charges fees (e.g., swap fees, routing fees) it increases the likelihood of being classified as a VASP subject to AML obligations, as fee-taking creates a business nexus.
- The BSL has issued public warnings (e.g., Public Notice of 12 February 2021) against cryptocurrencies, creating reputational risk for any operator — the frontend must operate in an officially cautioned environment.
- No specific crypto/VASP license exists, so the operator cannot obtain formal regulatory authorization — the legal status is ambiguous and the frontend operates in a regulatory gap.
- A local entity may be required to register with the FIU-SL as a reporting entity if the frontend is deemed a VASP under the FATF framework.
Key Risks
- Regulatory ambiguity — Sierra Leone has no comprehensive framework for virtual assets; the BSL has issued warnings but not banned crypto, creating uncertainty about whether a DeFi frontend is regulated at all.
- Classification risk — if the frontend takes fees or screens/selects pools, it could be treated as a VASP under FATF standards, triggering AML obligations without a clear licensing pathway.
- Enforcement exposure — the FIU-SL could assert AML/CFT jurisdiction over a DeFi frontend serving Sierra Leone residents without a clear regulatory framework defining obligations.
- Reputational and PR risk — operating in a jurisdiction where the central bank has publicly warned citizens against crypto may attract negative attention from authorities or consumers.
- No segregation or custody rules — even if the frontend handles user funds temporarily (e.g., via aggregation), there are no legal safeguards for client assets.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No Specific License: There are currently no specific licenses in Sierra Leone for cryptocurrency custodians or digital asset service providers. Entities engaging in such activities operate in a largely unregulated space regarding specific crypto custody requirements.
BSL Warnings: The Bank of Sierra Leone has repeatedly issued warnings to the public about the risks of investing in or transacting with cryptocurrencies, stating that they are not legal tender and are not regulated by the BSL. This implies that any entity offering crypto custody services would be operating outside the formal regulatory perimeter.
Partial/Cautionary/Warning-Based: Sierra Leone does not have a comprehensive regulatory framework for virtual assets. Instead, the approach is primarily characterized by warnings from the central bank, emphasizing the risks associated with cryptocurrencies and stating they are not legal tender. There is no official recognition, licensing, or specific regulation for crypto service providers.
Public Notice on Virtual Currencies/Crypto Assets by the Bank of Sierra Leone (Dated 12th February 2021):
The Anti-Money Laundering and Combating of Financing of Terrorism Act, 2018: While an online copy with a direct, stable URL is not readily available through general government searches, this Act is the primary domestic legislation for AML/CFT in Sierra Leone. It would be accessible via legal databases or directly from the Bank of Sierra Leone (BSL) or the Financial Intelligence Unit – Sierra Leone (FIU-SL).
Identification and Verification of Customer Identity:
For natural persons: Name, address, date of birth, nationality, unique identification number (e.g., national ID, passport). Verification through reliable, independent source documents, data, or information.
For legal persons/arrangements: Name, legal form, proof of existence, powers that regulate and bind the legal person, and identification of persons holding senior management positions.
Identification of Beneficial Owners: Take reasonable measures to understand the ownership and control structure of the customer and identify the ultimate natural person(s) who own or control the customer.
Purpose and Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction.
Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds or wealth.
Risk-Based Approach: Apply enhanced CDD for higher-risk customers or transactions (e.g., Politically Exposed Persons (PEPs), cross-border correspondent relationships, complex structures, high-value transactions, or transactions involving jurisdictions with weak AML/CFT regimes). Conversely, simplified CDD may be applied for lower-risk scenarios.
Source of Funds and Source of Wealth: For higher-risk customers or transactions, VASPs are expected to take reasonable measures to establish the source of funds and source of wealth involved.
Obligation: Any VASP that has reasonable grounds to suspect that funds or assets (including virtual assets) are the proceeds of a criminal activity or are related to terrorist financing must promptly report its suspicions to the FIU-SL.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a STR is being, or has been, submitted.
Transaction Records: Records of all transactions, domestic and international, for a minimum period of five (5) years. These records must be sufficient to permit reconstruction of individual transactions and patterns of transactions.
Customer Identification Data: Records of the information obtained through the CDD process (e.g., identity documents, beneficial ownership information) for a minimum period of five (5) years after the business relationship has ended or after the date of an occasional transaction.
The Financial Intelligence Unit of Sierra Leone (FIU-SL)
Compliance Requirement: UN Security Council resolutions imposing sanctions are legally binding on all UN member states, including Sierra Leone. Sierra Leone incorporates these obligations into its domestic law, primarily through its anti-money laundering and combating the financing of terrorism framework.
VASP Obligations: Any VASP operating in or from Sierra Leone must screen its customers and transactions against the UN Consolidated Sanctions List and specific UN Security Council Committee Sanctions Lists. Assets of listed individuals/entities must be frozen without delay, and any attempt to circumvent these measures must be reported.
Financial Intelligence Unit of Sierra Leone (FIU-SL): While not specifically regulating crypto, the FIU-SL is responsible for combating money laundering and terrorist financing (AML/CFT). Any engagement with virtual assets by financial institutions or designated non-financial businesses and professions (DNFBPs) would fall under their purview for AML/CFT compliance, even without specific crypto legislation.
Anti-Money Laundering and Combating of Terrorist Financing Act, 2012 (or latest iteration): This act and its subsequent amendments would generally apply to financial institutions and designated non-financial businesses and professions. If virtual asset service providers (VASPs) are eventually classified under this act, they would be subject to customer due diligence (CDD), record-keeping, and suspicious transaction reporting (STR) obligations.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend serving Sierra Leone residents operates in a regulatory vacuum (no specific VASP license exists) but may be subject to AML/CFT obligations under the 2018 Act if classified as a VASP; fee-taking increases classification risk, and the BSL's public warnings create an adverse operating environment.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?