Self-custodial wallet / non-custodial software in Sao Tome and Principe
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Sao Tome and Principe without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to a pure software publisher with zero custody — the AML framework under Lei n.º 10/2012 and Lei n.º 7/2020 applies to entities 'dealing with funds', and since a self-custodial wallet publisher never holds, controls, or accesses user funds, it does not trigger CDD/EDD, STR, or beneficial ownership requirements.
- However, if the software facilitates fiat on-ramp/off-ramp or integrates a payment processor, the publisher could be deemed a financial intermediary and become subject to AML/CFT obligations under the broader BCSTP-supervised regime.
Key Restrictions
- The publisher must not hold, control, or have access to users' private keys or funds — any deviation (e.g., offering a hosted recovery service, integrated swap with fiat conversion) could reclassify the operator as a VASP, custodian, or payment processor, triggering licensing requirements.
- No public-facing integration with the STN (Sao Tome Dobra) fiat system or traditional payment rails is permitted without a payment-services or banking license from BCSTP.
- As a software-only publisher with no financial intermediation, there is no specific local incorporation or physical presence requirement, but the operator should exercise caution not to provide any financial services beyond pure software distribution.
Key Risks
- Regulatory grey area: STP has no specific VASP/crypto licensing regime, but the BCSTP issues public warnings discouraging crypto use; a future regulatory sweep could retroactively classify software features as financial services.
- GIABA/FATF pressure: As an FATF member through GIABA, STP is expected to implement FATF Recommendation 15 (VASP regulation); future legislation could impose AML obligations on wallet publishers even without custody.
- Small-market enforcement risk is low but non-zero — any enforcement would likely be unpredictable due to the lack of published guidance and precedents.
- Consumer-protection liability: While no specific consumer-protection rules exist for non-custodial software, general liability law (contract, tort) could apply if software defects cause user loss.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Neither a dedicated Registration nor Licensing Regime for VASPs: As of the latest information, STP does not have a specific regime for registering or licensing virtual asset service providers.
Implication: Companies operating solely with crypto-to-crypto transactions might operate in a regulatory grey area from a specific licensing perspective. However, any interaction with traditional fiat currency or the broader financial system would likely bring them under the purview of existing financial regulations.
AML/KYC (Anti-Money Laundering/Know Your Customer): This is the most crucial and universally applicable requirement, even in the absence of specific crypto licensing. STP has AML/CFT legislation in line with international standards (FATF recommendations). Any entity dealing with funds, regardless of their nature (fiat or virtual assets), would be subject to:
Lei n.º 10/2012, de 23 de Agosto (Law No. 10/2012, of August 23): This is the foundational law for the Prevention and Combat of Money Laundering and Terrorism Financing. It establishes the general framework for AML/CFT obligations for financial and non-financial institutions.
Lei n.º 7/2020, de 16 de Julho (Law No. 7/2020, of July 16): This law amended and republished Law No. 10/2012. Amendments typically reflect updated FATF recommendations and often broaden the scope of obliged entities or strengthen specific requirements (like beneficial ownership or risk-based approaches), which would implicitly apply to emerging sectors like virtual assets.
There are no specific licensing requirements for cryptocurrency custodians in Sao Tome and Principe.
FATF Recommendation 15 specifically addresses new technologies and recommends that Virtual Asset Service Providers (VASPs), which would include custodians, be regulated for AML/CFT purposes, licensed or registered, and subject to effective systems for monitoring and supervision.
Developing Regulatory Framework: Many smaller nations are still in the early stages of developing specific regulations for cryptocurrencies. Their primary focus tends to be on general financial stability, anti-money laundering (AML), and countering the financing of terrorism (CFT) within traditional banking.
Regulator: Banco Central de São Tomé e Príncipe (BCSTP)
Entity Targeted: General public / Unlicensed entities (implicitly). Violation Type: Engaging with unregulated, volatile, and potentially fraudulent virtual assets; operating without proper licensing (though specific crypto licensing frameworks might not even exist). Penalty Amount: N/A (as these are warnings, not penalties).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a self-custodial wallet publisher (no custody of keys or funds) can operate in São Tomé and Príncipe without a license or AML obligations as a pure software provider, but must avoid any integration with fiat currency or financial services that would trigger BCSTP regulation; AML/CFT obligations do not attach without custody or fund handling.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?