On-shore VASP in Senegal

BCEAO's Cautious Stance: The BCEAO has consistently issued warnings to the public about the risks associated with cryptocurrencies, citing their volatility, lack of regulatory oversight, and potential use in illicit activities. They have emphasized that cryptocurrencies are not recognized as legal tender within the UEMOA zone and are not regulated by the BCEAO.

No Specific VASP Licenses: Consequently, there are currently no specific licenses for cryptocurrency exchanges, custody providers, or payment processors that deal exclusively in virtual assets. Entities providing such services would be operating in a grey area, potentially subject to general financial laws if their activities touch upon traditional financial services (e.g., fiat on/off-ramps) or facing outright prohibition if deemed to be operating outside the permitted financial framework.

Exchanges (Pure Crypto-to-Crypto): No specific license exists. Operating such an exchange would likely be viewed as unauthorized.

Custody Providers (Pure Virtual Assets): No specific license exists. Operating such a service would likely be viewed as unauthorized.

Payment Processors (Fiat-to-Crypto or Crypto-to-Fiat): If these services involve the handling of fiat currency, they might fall under the existing framework for Payment Institutions or Electronic Money Institutions (EMIs) regulated by the BCEAO. However, the BCEAO would likely scrutinize the underlying virtual asset activity and could prohibit or refuse a license if the primary business involves unregulated virtual assets. The current regulations for EMIs and PIs generally do not foresee virtual asset operations.

Capital Requirements: For licensed financial institutions (like EMIs or PIs), the BCEAO sets minimum capital requirements to ensure financial stability and solvency. These vary depending on the type of institution and services offered. For instance, EMIs usually require significant initial capital.

AML/KYC (Anti-Money Laundering/Know Your Customer): Senegal, as a FATF member, is committed to implementing FATF recommendations. Any future virtual asset framework would undoubtedly impose stringent AML/KYC obligations, including:

Customer due diligence (identity verification).

Ongoing monitoring of transactions.

Reporting of suspicious transactions to the national financial intelligence unit (CENTIF in Senegal).

Risk-based approach to AML.

Local Presence: For any licensed financial institution, a physical presence, management, and operational infrastructure within Senegal (or another UEMOA member state, with appropriate passporting) would be required.

Governance and Management: Robust corporate governance, fit and proper persons requirements for management and shareholders, and clear organizational structures.

Technology and Security: Secure IT systems, data protection measures, and business continuity plans would be essential.

Pre-application discussions with the BCEAO.

Submission of a comprehensive application file, including:

Business plan detailing services, target market, and operational model.

Evidence of capital.

AML/CFT policies and procedures.

IT and security framework.

Review and due diligence by the BCEAO.

Not legal tender within the UEMOA zone.

Not recognized or regulated by the BCEAO or national financial authorities.

Status: There are no specific custodial license requirements for cryptocurrency custody providers in Senegal.

Explanation: In the absence of a defined regulatory framework for crypto custody, there are no legal requirements for how client digital assets must be segregated from the custodian's own assets. This lack of regulation presents significant risks to clients in the event of a custodian's insolvency or mismanagement.

Status: As of early 2024, there is no publicly announced or pending legislation specifically addressing cryptocurrency custody in Senegal or at the BCEAO regional level.

Adopted: Yes, through the BCEAO regulatory framework.

Effective Date: The Instruction N° 15/2021/CM/UEMOA was adopted on June 18, 2021.

General Principle: VASPs are required to implement customer due diligence (CDD) and maintain records for all crypto-asset transactions they facilitate. This means that for any transaction handled by a regulated VASP, the originator and beneficiary information must be collected.

Enhanced Due Diligence: The Instruction often refers to enhanced due diligence for transactions that exceed certain thresholds or present higher risks, but the core requirement to identify originators and beneficiaries applies broadly. The FATF Recommendation 16 (Travel Rule) itself generally specifies information sharing for transactions above EUR/USD 1,000 for transfers between VASPs, but the BCEAO framework aims for robust data collection for all regulated activities.

Evidence fact sn.travel-rule.information-collection not found (may have been renamed).

Evidence fact sn.travel-rule.record-keeping not found (may have been renamed).

Transaction Monitoring: Systems to monitor transactions for suspicious activities.

Information Sharing: The ability to provide this information to competent authorities (e.g., the national Financial Intelligence Unit - CENTIF in Senegal) upon request and, implicitly, to other VASPs when acting as an intermediary in a transaction (aligning with the spirit of the Travel Rule).

Data Security and Privacy: Protection of collected data.

Administrative Sanctions: Imposed by the BCEAO, such as:

Criminal Penalties: In cases of serious breaches, particularly those linked to money laundering, terrorist financing, or fraud, individuals and entities can face criminal charges under Senegal's national AML/CFT legislation (e.g., Law N°2004-09 on combating money laundering and terrorist financing, updated). These can include:

Imprisonment for responsible individuals.

Confiscation of assets.

Instruction N° 15/2021/CM/UEMOA relative à l’encadrement de l’activité des prestataires de services sur crypto-actifs dans les États membres de l’UMOA (BCEAO):