← Regulations / Sao Tome and Principe / Operating Models / On-shore VASP

On-shore VASP in Sao Tome and Principe

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in Sao Tome and Principe with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) under Lei n.º 10/2012 and Lei n.º 7/2020, including identification/verification of customers and beneficial owners
  • Suspicious Transaction Reporting (STR) to the Unidade de Informação Financeira (UIF / FIU) — promptly, with no tipping-off
  • Ongoing transaction monitoring and scrutiny of business relationships
  • Risk-based approach: Simplified Due Diligence (SDD) for low-risk scenarios; Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, complex/unusually large transactions, and transactions with no apparent economic purpose
  • Record-keeping: customer identification data, transaction records (amount, currency, date, parties), and business correspondence — retention period under AML law
  • Internal AML/CFT policies, controls, and training programs
  • Fit and proper assessment for directors and key personnel — AML compliance officer required

Key Restrictions

  • No dedicated VASP licensing regime exists — operator must be structured under traditional financial licenses (banking license or payment service provider license from BCSTP) if dealing with fiat currency
  • Pure crypto-to-crypto operations operate in a regulatory grey area with no specific license pathway but must still comply with AML/CFT obligations
  • Local incorporation required — must be a locally incorporated legal entity with physical office space, local management/staff, and a compliance officer
  • Cryptocurrencies are not legal tender in STP (BCSTP Comunicado n.º 001/2022); no specific custody, segregation, or cold-storage rules exist
  • FATF Travel Rule has not been explicitly implemented — no specific VASP travel-rule obligations yet, but FATF Recommendation 15/16 compliance expected via GIABA membership

Key Risks

  • Regulatory grey area: lack of specific VASP regime creates uncertainty; any fiat touchpoint triggers need for a traditional banking/PSP license with high capital requirements
  • No specific crypto custody, segregation, or insurance requirements — operator bears unaudited custodial risk with no legal safe harbor
  • FATF/GIABA scrutiny expected to increase; STP may adopt VASP-specific regulation (including Travel Rule) with little transition period
  • Very small market size and limited enforcement history mean low deal flow but also unpredictable regulatory response
  • Public warnings from BCSTP discourage cryptocurrency use, creating reputational and PR risk for on-shore operators

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

Neither a dedicated Registration nor Licensing Regime for VASPs: As of the latest information, STP does not have a specific regime for registering or licensing virtual asset service providers.

licensing 40% confidence

Implication: Companies operating solely with crypto-to-crypto transactions might operate in a regulatory grey area from a specific licensing perspective. However, any interaction with traditional fiat currency or the broader financial system would likely bring them under the purview of existing financial regulations.

licensing 40% confidence

If an exchange facilitates the exchange of virtual assets for fiat currency (e.g., STN - Sao Tome Dobra) or vice versa, and offers services akin to traditional banking or money remittance, it might be deemed to be conducting activities that require a banking license or a payment service provider license from the Banco Central de São Tomé e Príncipe (BCSTP).

licensing 40% confidence

Pure crypto-to-crypto exchanges might not require a specific license yet, but they would still be subject to AML/CFT obligations if they deal with "funds" or "assets" in a broad sense.

licensing 40% confidence

Capital Requirements: Specific minimum capital requirements would apply as per the regulations for the particular financial license sought (e.g., for banks, payment institutions). These are not crypto-specific but general financial institution requirements.

licensing 40% confidence

Local Presence: For any traditional financial license, a significant local presence is typically required, including:

licensing 40% confidence

A locally incorporated legal entity.

licensing 40% confidence

Physical office space.

licensing 40% confidence

Local management and staff, including a compliance officer.

licensing 40% confidence

Fit and proper assessment for directors and key personnel.

licensing 40% confidence

Initial Consultation: Informal discussions with the BCSTP.

licensing 40% confidence

Formal Application Submission:

licensing 40% confidence

Detailed business plan.

licensing 40% confidence

Organizational structure and governance arrangements.

licensing 40% confidence

Resumes and fit-and-proper declarations for directors and senior management.

licensing 40% confidence

Comprehensive AML/CFT policies and procedures.

licensing 40% confidence

AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most crucial and universally applicable requirement, even in the absence of specific crypto licensing. STP has AML/CFT legislation in line with international standards (FATF recommendations). Any entity dealing with funds, regardless of their nature (fiat or virtual assets), would be subject to:

licensing 40% confidence

Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures.

licensing 40% confidence

Suspicious Transaction Reporting (STR) to the Financial Information Unit (FIU) of Sao Tome and Principe.

licensing 40% confidence

Internal AML/CFT policies, controls, and training.

aml 60% confidence

Lei n.º 10/2012, de 23 de Agosto (Law No. 10/2012, of August 23): This is the foundational law for the Prevention and Combat of Money Laundering and Terrorism Financing. It establishes the general framework for AML/CFT obligations for financial and non-financial institutions.

aml 60% confidence

Lei n.º 7/2020, de 16 de Julho (Law No. 7/2020, of July 16): This law amended and republished Law No. 10/2012. Amendments typically reflect updated FATF recommendations and often broaden the scope of obliged entities or strengthen specific requirements (like beneficial ownership or risk-based approaches), which would implicitly apply to emerging sectors like virtual assets.

aml 60% confidence

Identification and Verification of Customers:

aml 60% confidence

Beneficial Ownership: Identifying and taking reasonable measures to verify the identity of the beneficial owner(s) of the customer, including natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

aml 60% confidence

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the obliged entity’s knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

aml 60% confidence

Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk customers, relationships, or transactions, such as:

aml 60% confidence

Report Suspicious Transactions: Report to the Financial Intelligence Unit (UIF) any transaction, attempted transaction, or activity that they know, suspect, or have reasonable grounds to suspect involves funds derived from criminal activity or is related to terrorism financing, regardless of the amount.

aml 60% confidence

No Tipping-Off: Obliged entities, their directors, officers, and employees are prohibited from disclosing to the customer or to third parties that an STR is being or has been submitted.

aml 60% confidence

Unidade de Informação Financeira (UIF) – Financial Intelligence Unit:

aml 60% confidence

Banco Central de São Tomé e Príncipe (BCSTP) – Central Bank of São Tomé and Príncipe:

custody 60% confidence

There are no specific licensing requirements for cryptocurrency custodians in Sao Tome and Principe.

custody 60% confidence

There are no specific rules mandating the segregation of client digital assets for cryptocurrency custodians.

custody 60% confidence

There are no specific mandates regarding the use of cold storage or other particular security measures for digital assets.

travel-rule 60% confidence

No specific legislation or regulatory guidance explicitly implementing the FATF Travel Rule for VASPs has been publicly identified.

travel-rule 60% confidence

Banco Central de São Tomé e Príncipe (BCSTP) - Comunicado n.º 001/2022:

enforcement 20% confidence

Primary Regulator: The main financial regulator in Sao Tome and Principe is the Banco Central de São Tomé e Príncipe (BCSTP). Their pronouncements on digital currencies typically revolve around issuing warnings to the public about the risks associated with cryptocurrencies, rather than specific enforcement actions against entities. They often emphasize that cryptocurrencies are not legal tender.

Evidence fact st.environment.mdashes-no-specific-vasp-regime not found (may have been renamed).

Evidence fact st.environment.central-bank-warnings not found (may have been renamed).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — an on-shore VASP can operate in São Tomé and Príncipe only by obtaining a traditional banking or payment-service-provider license from the BCSTP if dealing with fiat, or operating in a grey area for pure crypto-to-crypto, in either case subjecting the entity to STP's full AML/CFT framework (Lei n.º 10/2012, Lei n.º 7/2020) with local incorporation, physical presence, and fit-and-proper requirements, but facing a lack of specific VASP/custody/travel-rule legislation.

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?