DeFi protocol frontend in Eswatini
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Eswatini with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- AML/CFT registration with the FIU or a designated authority as a VASP (per FATF standards through ESAAMLG membership)
- Sanctions screening against UN sanctions lists (ISIL/Da'esh & Al-Qaida, Taliban, other UN regimes) under POCA and the Money Laundering and Financing of Terrorism (Prevention) Act
- Compliance with FATF Recommendation 15 (New Technologies) — VASP obligations for virtual asset activities
- Compliance with FATF Recommendation 6 — implementation of targeted financial sanctions related to terrorism and WMD proliferation
- Potential OFAC sanctions exposure if the frontend conducts transactions in U.S. dollars or has a U.S. nexus
- Freeze assets and prohibit transactions with designated persons/entities under UNSCRs as translated into domestic law
Key Restrictions
- Any tokens traded through the frontend that meet the Howey-derived security criteria (investment of money, common enterprise, expectation of profits, efforts of others) may be classified as securities, requiring the frontend operator to be licensed as a financial services provider (investment advisor, broker, CIS manager) and trade only on FSRA-licensed trading platforms
- Public offerings of tokens that are securities require a registered prospectus with the FSRA
- The CBE has stated virtual assets are not legal tender and are not currently regulated — this creates ambiguity about whether any regulatory framework for DeFi frontends exists at all
- If the frontend takes fees (trading fees, revenue share), it may increase the likelihood of being treated as a financial intermediary or collective investment scheme operator
- Geofencing requirements are not explicitly defined but may be necessary to avoid offering securities to the general public without compliance
Key Risks
- Regulatory ambiguity — the CBE has issued only warnings and advisories; no comprehensive VASP framework has been finalized, creating uncertainty for frontend operators
- Security token reclassification risk — utility tokens traded on the frontend could be retroactively deemed securities based on marketing, speculative purchasing, or undeveloped functionality
- Enforcement risk from operating without clarity — CBE has warned that virtual assets are not currently regulated, implying unlicensed activities could be challenged
- FATF compliance pressure — Eswatini is expected to implement FATF Rec 15 VASP obligations, which could retroactively impose requirements on existing frontends
- OFAC sanctions risk if the frontend processes USD transactions or serves US-sanctioned jurisdictions
- No clear licensing pathway currently exists for DeFi frontends specifically, making any compliance program speculative
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
An investment of money or assets: The investor commits capital to acquire the token.
In a common enterprise: The investment is pooled with others, or the value of the token is tied to a broader project or business venture managed by others.
With an expectation of profits: The investor anticipates financial gain (e.g., capital appreciation, dividends, revenue sharing, or other forms of return) from holding the token.
Derived solely or substantially from the efforts of others: The profits are expected to come from the managerial or entrepreneurial efforts of a third party (the issuer, promoter, or other entities), rather than the investor's own efforts.
Security Tokens: These are tokens explicitly designed to represent traditional financial instruments.
Licensing: Issuers, promoters, or financial intermediaries involved in offering or distributing securities may need to be licensed by the FSRA as financial services providers (e.g., investment advisors, brokers, collective investment scheme managers).
Prospectus Requirements: For public offerings of securities, a comprehensive prospectus must be prepared and registered with the FSRA. This prospectus must disclose all material information relevant to the investment, risks, and the issuer.
Licensed Trading Platforms: Trading would likely need to occur on an exchange or platform licensed and regulated by the FSRA as a securities exchange. Unregulated trading platforms would be illegal for securities.
AML/CFT Registration: Eswatini, as a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), is committed to implementing FATF standards. This typically means that VASPs, including those providing custody, are required to be registered or licensed with the FIU or a designated authority for AML/CFT compliance. This registration focuses on identifying the VASP, its beneficial owners, and ensuring it has robust AML/CFT policies and procedures.
Prevention of Organised Crime Act (POCA) & FIU Act: The primary legislation addressing AML/CFT in Eswatini includes the Prevention of Organised Crime Act and the Financial Intelligence Unit Act. These acts, along with their accompanying regulations, are the most likely place where definitions of "virtual assets" and "VASPs" and their reporting obligations would be found. While specific details on custody per se might be absent, the entity providing custody would be subject to VASP AML/CFT obligations.
FATF Recommendations: Eswatini, through its membership in ESAAMLG, is expected to continue enhancing its legal framework to fully comply with FATF Recommendation 15 on new technologies and Virtual Asset Service Providers (VASPs). This implies that future amendments or new regulations could introduce more specific requirements for VASPs, which might eventually encompass more detailed aspects of custody.
Recommendation 15 (New Technologies): Specifically applies AML/CFT obligations to VASPs, including the obligation to implement sanctions screening.
Recommendation 6 (Targeted Financial Sanctions): Requires countries to implement targeted financial sanctions related to terrorism and WMD proliferation without delay.
United Nations (UN) Sanctions:
ISIL (Da'esh) & Al-Qaida Sanctions List: Maintained by the 1267/1989/2253 Committee.
Taliban Sanctions List: Maintained by the 1988 Committee.
Other UN Sanctions Regimes: Pertaining to specific countries (e.g., Democratic People's Republic of Korea, Iran, Libya, Yemen, etc.) and individuals/entities associated with violations of peace and security.
Legal Basis in Eswatini: Eswatini's AML/CFT laws, notably the Prevention of Organised Crime Act, 2018, and the Money Laundering and Financing of Terrorism (Prevention) Act, 2011 (as amended), mandate compliance with these international obligations. The Financial Intelligence Unit (FIU) of Eswatini is responsible for ensuring the implementation of these measures.
U.S. Sanctions (OFAC):
Jurisdictional Nexus: A VASP in Eswatini becomes subject to OFAC sanctions if:
Central Bank of Eswatini (CBE) Public Statement on Virtual Assets (Cryptocurrencies)
Date: January 28, 2021 (This statement set the initial tone for recent years)
Outcome: Cautioned the public about the risks of virtual assets, stated that they are not legal tender, and advised financial institutions to exercise extreme caution in dealing with virtual assets, warning that they are not currently regulated in Eswatini.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A DeFi protocol frontend may operate in Eswatini but faces high regulatory uncertainty; tokens that meet the jurisdiction's securities test (Howey-like four-prong test) trigger FSRA licensing, prospectus, and trading-platform requirements, while AML/CFT obligations (VASP registration, UN sanctions screening) apply per FATF standards via ESAAMLG, and the CBE has explicitly stated virtual assets are not currently regulated, creating a high-risk gap with no established licensing pathway for DeFi frontends.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?