← Regulations / Sao Tome and Principe / Operating Models / Crypto debit card

Crypto-funded debit card in Sao Tome and Principe

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Sao Tome and Principe with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD): obtain name, address, date of birth, nationality, and unique identification number (e.g., passport/national ID) and verify using reliable independent source documents (Lei n.º 10/2012, amended by Lei n.º 7/2020).
  • Beneficial Ownership identification: identify and verify the beneficial owners of legal entities (Lei n.º 10/2012, amended by Lei n.º 7/2020).
  • Purpose and intended nature of business relationship assessment required for all customers.
  • Ongoing monitoring of transactions throughout the business relationship to ensure consistency with customer risk profile.
  • Enhanced Due Diligence (EDD) required for Politically Exposed Persons (PEPs), customers from high-risk FATF jurisdictions, complex or unusually large transactions, and transactions with no apparent economic purpose.
  • Suspicious Transaction Reporting (STR) to the Unidade de Informação Financeira (UIF) — reports must be made promptly for any transaction suspected of involving funds from criminal activity or terrorism financing, regardless of amount.
  • No tipping-off: obliged entities and employees must not disclose STR submissions to customers or third parties.
  • Record-keeping: retain customer identification data, transaction records (amount, currency, date, parties), and business correspondence.
  • Internal AML/CFT policies, controls, and training programs required.

Key Restrictions

  • Any crypto-to-fiat conversion (STN or foreign currency) likely requires a banking license or payment service provider license from BCSTP, as the activity resembles traditional banking or money remittance.
  • Processing crypto-related fiat payments or integrating into the traditional payment infrastructure makes the entity subject to payment services legislation regulated by BCSTP.
  • If stablecoins are used as an intermediary (e.g. as a funding mechanism), they may be classified as e-money by analogy, requiring an e-money issuer license; no specific stablecoin regulation exists.
  • A locally incorporated legal entity is required, with physical office space, local management and staff including a compliance officer, and fit-and-proper assessment for directors/key personnel.
  • Partner-bank or BIN-sponsor arrangements would need to comply with BCSTP payment services legislation — no crypto-specific BIN-sponsor framework exists.
  • No dedicated VASP licensing regime exists; the operator must fit into traditional financial licensing categories (banking, payment services, e-money).

Key Risks

  • High regulatory ambiguity: no explicit classification exists for crypto-funded debit cards, stablecoins, or the crypto-to-fiat conversion at point of sale.
  • Risk that BCSTP deems the entire operation as requiring a full banking license if the card program is seen as taking deposits or conducting lending-like activities.
  • Small financial market and limited enforcement precedent mean that an operator could face sudden regulatory action once the framework develops.
  • Language and accessibility barriers: all relevant legislation is in Portuguese; international regulatory guidance is sparse and not systematically published in English.
  • FATF compliance pressure could lead STP to introduce new crypto regulation at any time, potentially retroactively impacting existing operators.
  • No clear BIN-sponsor or partner-bank regulatory pathway — traditional banking partnerships may be unavailable or prohibitively expensive in such a small market.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

Neither a dedicated Registration nor Licensing Regime for VASPs: As of the latest information, STP does not have a specific regime for registering or licensing virtual asset service providers.

licensing 40% confidence

Implication: Companies operating solely with crypto-to-crypto transactions might operate in a regulatory grey area from a specific licensing perspective. However, any interaction with traditional fiat currency or the broader financial system would likely bring them under the purview of existing financial regulations.

licensing 40% confidence

If an exchange facilitates the exchange of virtual assets for fiat currency (e.g., STN - Sao Tome Dobra) or vice versa, and offers services akin to traditional banking or money remittance, it might be deemed to be conducting activities that require a banking license or a payment service provider license from the Banco Central de São Tomé e Príncipe (BCSTP).

licensing 40% confidence

Payment Processors (processing crypto payments or crypto-related fiat payments):

licensing 40% confidence

Entities that process payments where virtual assets are involved, particularly if they facilitate the conversion to or from fiat currency, or integrate into the traditional payment infrastructure, are highly likely to be subject to the payment services legislation regulated by the BCSTP. This would require a payment service provider license.

licensing 40% confidence

Capital Requirements: Specific minimum capital requirements would apply as per the regulations for the particular financial license sought (e.g., for banks, payment institutions). These are not crypto-specific but general financial institution requirements.

licensing 40% confidence

AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most crucial and universally applicable requirement, even in the absence of specific crypto licensing. STP has AML/CFT legislation in line with international standards (FATF recommendations). Any entity dealing with funds, regardless of their nature (fiat or virtual assets), would be subject to:

licensing 40% confidence

Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures.

licensing 40% confidence

Suspicious Transaction Reporting (STR) to the Financial Information Unit (FIU) of Sao Tome and Principe.

licensing 40% confidence

Internal AML/CFT policies, controls, and training.

licensing 40% confidence

Local Presence: For any traditional financial license, a significant local presence is typically required, including:

licensing 40% confidence

A locally incorporated legal entity.

licensing 40% confidence

Physical office space.

licensing 40% confidence

Local management and staff, including a compliance officer.

licensing 40% confidence

Fit and proper assessment for directors and key personnel.

aml 60% confidence

Lei n.º 10/2012, de 23 de Agosto (Law No. 10/2012, of August 23): This is the foundational law for the Prevention and Combat of Money Laundering and Terrorism Financing. It establishes the general framework for AML/CFT obligations for financial and non-financial institutions.

aml 60% confidence

Lei n.º 7/2020, de 16 de Julho (Law No. 7/2020, of July 16): This law amended and republished Law No. 10/2012. Amendments typically reflect updated FATF recommendations and often broaden the scope of obliged entities or strengthen specific requirements (like beneficial ownership or risk-based approaches), which would implicitly apply to emerging sectors like virtual assets.

aml 60% confidence

Identification and Verification of Customers:

aml 60% confidence

Beneficial Ownership: Identifying and taking reasonable measures to verify the identity of the beneficial owner(s) of the customer, including natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

aml 60% confidence

Purpose and Intended Nature of the Business Relationship: Understanding the purpose and intended nature of the business relationship.

aml 60% confidence

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the obliged entity’s knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

aml 60% confidence

Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk customers, relationships, or transactions, such as:

aml 60% confidence

Politically Exposed Persons (PEPs).

aml 60% confidence

Customers from high-risk jurisdictions identified by FATF or national authorities.

aml 60% confidence

Complex or unusually large transactions.

aml 60% confidence

Transactions with no apparent economic or lawful purpose.

aml 60% confidence

Report Suspicious Transactions: Report to the Financial Intelligence Unit (UIF) any transaction, attempted transaction, or activity that they know, suspect, or have reasonable grounds to suspect involves funds derived from criminal activity or is related to terrorism financing, regardless of the amount.

aml 60% confidence

Timeliness: Reports must be made promptly.

aml 60% confidence

No Tipping-Off: Obliged entities, their directors, officers, and employees are prohibited from disclosing to the customer or to third parties that an STR is being or has been submitted.

aml 60% confidence

Customer Identification Data: All records obtained through CDD procedures (e.g., copies of identification documents, verification data).

aml 60% confidence

Transaction Records: Details of all domestic and international transactions, including the amount, currency, date, and parties involved (originator and beneficiary information).

aml 60% confidence

Business Correspondence: Relevant correspondence regarding business relationships.

aml 60% confidence

Unidade de Informação Financeira (UIF) – Financial Intelligence Unit:

aml 60% confidence

Banco Central de São Tomé e Príncipe (BCSTP) – Central Bank of São Tomé and Príncipe:

Evidence fact st.stablecoin.no-explicit-classification not found (may have been renamed).

stablecoin 40% confidence

Likely Interpretation by Analogy:

stablecoin 40% confidence

E-money/Payment Tokens: If a stablecoin aims to maintain a stable value and is primarily used for payments and value transfer, the BCSTP might attempt to classify it under any existing or future e-money or payment service provider regulations. This would depend on the functionality and purpose of the stablecoin. STP would likely have a general framework for electronic payments and potentially e-money.

stablecoin 40% confidence

Potential E-money Requirements: If a stablecoin were to be interpreted and regulated as e-money, then any existing or future regulations for e-money issuers in STP would likely mandate the safeguarding of user funds, potentially through full backing of issued e-money with liquid assets held in segregated accounts. However, this is a hypothetical application.

stablecoin 40% confidence

Potential Application of Existing Licenses: If a stablecoin's activities were deemed to fall under existing regulated financial services (e.g., banking, payment services, e-money issuance), then the issuer would need to obtain the relevant license from the BCSTP. Operating without such a license for a regulated activity would be illegal.

enforcement 20% confidence

Small Financial Market: Sao Tome and Principe has a very small economy and financial sector. The adoption and prevalence of complex cryptocurrency operations that would warrant significant enforcement actions (like those seen in major financial hubs) are extremely limited.

enforcement 20% confidence

Developing Regulatory Framework: Many smaller nations are still in the early stages of developing specific regulations for cryptocurrencies. Their primary focus tends to be on general financial stability, anti-money laundering (AML), and countering the financing of terrorism (CFT) within traditional banking.

enforcement 20% confidence

Primary Regulator: The main financial regulator in Sao Tome and Principe is the Banco Central de São Tomé e Príncipe (BCSTP). Their pronouncements on digital currencies typically revolve around issuing warnings to the public about the risks associated with cryptocurrencies, rather than specific enforcement actions against entities. They often emphasize that cryptocurrencies are not legal tender.

enforcement 20% confidence

Lack of Public Reporting: Even if smaller, localized enforcement actions (e.g., against a very small local operation or individual) were to occur, they are rarely reported beyond national borders or in a manner that is easily accessible internationally.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card in São Tomé and Príncipe would likely require a full banking license or payment service provider license from BCSTP (since the crypto-to-fiat conversion at point of sale and integration with payment infrastructure is treated as traditional financial activity), plus a locally incorporated entity, comprehensive AML/CFT compliance under Lei n.º 10/2012 (as amended by Lei n.º 7/2020), and supervision by the UIF for STRs; however, no dedicated VASP or crypto-card framework exists, creating significant regulatory ambiguity and high licensing burden.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?