Custodial wallet / SaaS in Senegal
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Senegal with a local entity, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No specific AML framework exists for VASPs, but general AML/CFT obligations apply under FATF membership — including customer due diligence (identity verification), ongoing transaction monitoring, suspicious transaction reporting to CENTIF (Senegal's FIU), and a risk-based AML approach.
- These obligations would attach directly to the SaaS operator as the entity engaging in the regulated activity, not to the white-label client (though contracts would typically allocate compliance responsibility).
- If the operator also handles fiat currency (e.g., on/off ramps), it would need to comply with BCEAO e-money / payment institution AML rules, which are more detailed and enforced.
Key Restrictions
- No dedicated custodial or VASP license exists — pure crypto custody operates in a regulatory grey area and is viewed as unauthorized by BCEAO authorities.
- If the service involves fiat handling, it may fall under BCEAO's Payment Institution or Electronic Money Institution framework, requiring a full license, significant capital, and local incorporation.
- Local entity and physical presence within Senegal (or another UEMOA state with passporting) is required if the service touches fiat; for pure crypto custody this is a practical risk rather than a codified requirement.
Key Risks
- Regulatory ambiguity — BCEAO has repeatedly warned that cryptocurrencies are not recognized as legal tender and has provided no safe harbor for VASPs, creating enforcement risk.
- No segregation, insurance, or proof-of-reserves requirements exist, leaving client assets legally unprotected in insolvency or hack scenarios.
- Operating a custodial wallet without a license could be deemed an unauthorized financial activity, exposing the operator to enforcement actions or penalties.
- FATF recommendations (Travel Rule, VASP registration) are expected to be adopted regionally, which may retroactively impose requirements on operators currently in the grey area.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Status: There are no specific custodial license requirements for cryptocurrency custody providers in Senegal.
Not recognized or regulated by the BCEAO or national financial authorities.
Subject to significant risks, including money laundering, terrorist financing, fraud, and financial instability.
Explanation: Since cryptocurrencies are not officially recognized or regulated as financial assets by the BCEAO or Senegalese authorities, there is no licensing regime for entities providing custody services for these assets. Any entity providing such services would operate without specific regulatory oversight in this domain.
Evidence fact sn.custody.status-there-are-no-specific:1 not found (may have been renamed).
Explanation: In the absence of a defined regulatory framework for crypto custody, there are no legal requirements for how client digital assets must be segregated from the custodian's own assets. This lack of regulation presents significant risks to clients in the event of a custodian's insolvency or mismanagement.
Evidence fact sn.custody.status-there-are-no-specific:2 not found (may have been renamed).
Explanation: As with other aspects, without a formal licensing and regulatory framework, there are no mandates for custodians to carry insurance or bonds to protect client assets against theft, loss, or operational failures.
Status: There are no official definitions of a "qualified custodian" specifically for digital assets.
No Specific VASP Licenses: Consequently, there are currently no specific licenses for cryptocurrency exchanges, custody providers, or payment processors that deal exclusively in virtual assets. Entities providing such services would be operating in a grey area, potentially subject to general financial laws if their activities touch upon traditional financial services (e.g., fiat on/off-ramps) or facing outright prohibition if deemed to be operating outside the permitted financial framework.
Custody Providers (Pure Virtual Assets): No specific license exists. Operating such a service would likely be viewed as unauthorized.
Focus on Traditional Payment Services: The BCEAO has a robust regulatory framework for electronic money institutions and payment service providers that deal in fiat currency. While these regulations are comprehensive, they do not extend to virtual assets. If an entity were to combine traditional payment processing with virtual asset services, the traditional payment processing component would be subject to BCEAO licensing, but the virtual asset component would likely remain unregulated and potentially unauthorized.
AML/KYC (Anti-Money Laundering/Know Your Customer): Senegal, as a FATF member, is committed to implementing FATF recommendations. Any future virtual asset framework would undoubtedly impose stringent AML/KYC obligations, including:
Local Presence: For any licensed financial institution, a physical presence, management, and operational infrastructure within Senegal (or another UEMOA member state, with appropriate passporting) would be required.
Pre-application discussions with the BCEAO.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS operators face no specific licensing regime but must operate in a regulatory grey area; if fiat handling is involved, BCEAO e-money/payment institution licensing applies, requiring local incorporation and significant capital; pure crypto custody is legally ambiguous with enforcement risk.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?