← Regulations / Eswatini / Operating Models / Remote VASP

Remote VASP serving residents in Eswatini

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Conditional AI-Generated · Unreviewed

Remote VASP is conditionally permitted in Eswatini without local incorporation, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • AML/CFT registration likely required with the Financial Intelligence Unit (FIU) as Eswatini, as an ESAAMLG member, is committed to implementing FATF standards for VASPs (sz.aml.amlcft-registration-eswatini-as-a)
  • Sanctions screening obligations under UN Security Council Resolutions (ISIL/Al-Qaida, Taliban, other regimes) which would apply to VASPs once covered (sz.aml.united-nations-un-sanctions, sz.aml.isil-daesh-al-qaida-sanctions-list, sz.aml.taliban-sanctions-list-maintained-by, sz.aml.other-un-sanctions-regimes-pertaining)
  • OFAC sanctions compliance may be triggered if the VASP conducts transactions in U.S. dollars (sz.aml.jurisdictional-nexus-a-vasp-in)
  • General AML/CFT obligations under the Prevention of Organised Crime Act, 2017 (POCA) and Money Laundering and Financing of Terrorism (Prevention) Act, 2011 — however VASPs are not yet explicitly designated as reporting entities under these acts (sz.aml.prevention-of-organised-crime-act, sz.aml.legal-basis-in-eswatini-eswatinis)
  • Travel Rule (FATF Recommendation 16) is NOT yet effectively implemented for VASPs — currently not applicable (sz.travel-rule.no-not-yet-comprehensively-adopted, sz.travel-rule.currently-vasps-are-not-effectively)

Key Restrictions

  • Eswatini has no comprehensive regulatory framework for VASPs — the FATF Mutual Evaluation Report (2020) found Eswatini had not assessed or addressed ML/TF risks for VAs/VASPs (sz.travel-rule.eswatinis-legislative-and-regulatory-framework)
  • VASPs are not yet defined, licensed, registered, or supervised for AML/CFT purposes (sz.travel-rule.the-fatf-reports-indicate-that)
  • Central Bank of Eswatini (CBE) has publicly stated that virtual assets are not legal tender and that they are not currently regulated — advising financial institutions to exercise extreme caution (sz.enforcement.date-january-28-2021-this, sz.enforcement.outcome-cautioned-the-public-about)
  • If the virtual assets offered constitute 'securities' under the Howey-equivalent test (investment of money, common enterprise, expectation of profits from efforts of others), the operator would need to comply with FSRA securities licensing, prospectus registration, and ongoing disclosure obligations (sz.licensing.an-investment-of-money-or through sz.licensing.licensed-trading-platforms-trading-would)
  • No Travel Rule framework exists; information sharing on VA transfers is not legally mandated (sz.travel-rule.not-applicable-since-a-comprehensive)

Key Risks

  • High regulatory ambiguity — no clear framework means operators cannot know with certainty whether their activities are legal, compliant, or prohibited (sz.travel-rule.currently-vasps-are-not-effectively)
  • Enforcement risk: while no crypto-specific enforcement actions have been taken, the CBE's warnings indicate a cautious/restrictive stance and future retroactive enforcement is possible once a framework is adopted (sz.enforcement.outcome-cautious-the-public-about)
  • Security-token reclassification risk: the FSRA's securities test is broad; utility tokens marketed for speculation or with undeveloped functionality could be deemed securities requiring full prospectus and licensing (sz.licensing.certain-utility-tokens-while-typically, sz.licensing.it-is-primarily-purchased-with)
  • FATF grey-listing risk: Eswatini's deficiencies on VASP regulation could lead to increased international scrutiny, potentially affecting cross-border flows and correspondent banking relationships for local partners

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

aml 60% confidence

AML/CFT Registration: Eswatini, as a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), is committed to implementing FATF standards. This typically means that VASPs, including those providing custody, are required to be registered or licensed with the FIU or a designated authority for AML/CFT compliance. This registration focuses on identifying the VASP, its beneficial owners, and ensuring it has robust AML/CFT policies and procedures.

aml 60% confidence

Prevention of Organised Crime Act (POCA) & FIU Act: The primary legislation addressing AML/CFT in Eswatini includes the Prevention of Organised Crime Act and the Financial Intelligence Unit Act. These acts, along with their accompanying regulations, are the most likely place where definitions of "virtual assets" and "VASPs" and their reporting obligations would be found. While specific details on custody per se might be absent, the entity providing custody would be subject to VASP AML/CFT obligations.

aml 60% confidence

Legal Basis in Eswatini: Eswatini's AML/CFT laws, notably the Prevention of Organised Crime Act, 2018, and the Money Laundering and Financing of Terrorism (Prevention) Act, 2011 (as amended), mandate compliance with these international obligations. The Financial Intelligence Unit (FIU) of Eswatini is responsible for ensuring the implementation of these measures.

aml 60% confidence

ISIL (Da'esh) & Al-Qaida Sanctions List: Maintained by the 1267/1989/2253 Committee.

aml 60% confidence

Other UN Sanctions Regimes: Pertaining to specific countries (e.g., Democratic People's Republic of Korea, Iran, Libya, Yemen, etc.) and individuals/entities associated with violations of peace and security.

travel-rule 60% confidence

No, not yet comprehensively adopted for Virtual Asset Service Providers (VASPs).

travel-rule 60% confidence

Eswatini's legislative and regulatory framework for virtual assets (VAs) and virtual asset service providers (VASPs) is still developing and considered significantly deficient by the FATF. The country has not yet effectively implemented the FATF Recommendations 15 (on new technologies) and 16 (the Travel Rule, adapted for VAs) at an operational level.

travel-rule 60% confidence

Currently, VASPs are not effectively covered under a specific, dedicated regulatory regime in Eswatini. The absence of a clear legal framework means that obligations, including the Travel Rule, cannot be systematically applied to them.

travel-rule 60% confidence

The FATF reports indicate that VASPs are not yet defined, licensed, registered, or supervised for AML/CFT purposes in Eswatini.

enforcement 20% confidence

Date: January 28, 2021 (This statement set the initial tone for recent years)

enforcement 20% confidence

Outcome: Cautioned the public about the risks of virtual assets, stated that they are not legal tender, and advised financial institutions to exercise extreme caution in dealing with virtual assets, warning that they are not currently regulated in Eswatini.

licensing 40% confidence

An investment of money or assets: The investor commits capital to acquire the token.

licensing 40% confidence

In a common enterprise: The investment is pooled with others, or the value of the token is tied to a broader project or business venture managed by others.

licensing 40% confidence

With an expectation of profits: The investor anticipates financial gain (e.g., capital appreciation, dividends, revenue sharing, or other forms of return) from holding the token.

licensing 40% confidence

Derived solely or substantially from the efforts of others: The profits are expected to come from the managerial or entrepreneurial efforts of a third party (the issuer, promoter, or other entities), rather than the investor's own efforts.

licensing 40% confidence

Certain Utility Tokens: While typically designed to provide access to a product or service, a utility token can be reclassified as a security if:

licensing 40% confidence

Licensed Trading Platforms: Trading would likely need to occur on an exchange or platform licensed and regulated by the FSRA as a securities exchange. Unregulated trading platforms would be illegal for securities.

licensing 40% confidence

Prospectus Requirements: For public offerings of securities, a comprehensive prospectus must be prepared and registered with the FSRA. This prospectus must disclose all material information relevant to the investment, risks, and the issuer.

licensing 40% confidence

Licensing: Issuers, promoters, or financial intermediaries involved in offering or distributing securities may need to be licensed by the FSRA as financial services providers (e.g., investment advisors, brokers, collective investment scheme managers).

aml 60% confidence

FATF Recommendations: Eswatini, through its membership in ESAAMLG, is expected to continue enhancing its legal framework to fully comply with FATF Recommendation 15 on new technologies and Virtual Asset Service Providers (VASPs). This implies that future amendments or new regulations could introduce more specific requirements for VASPs, which might eventually encompass more detailed aspects of custody.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a remote VASP serving Eswatini residents operates in a regulatory vacuum: no comprehensive VASP framework exists, the CBE has warned that crypto is not regulated and not legal tender, and operators face significant ambiguity around both AML obligations and potential securities-law classification, with FATF pressure to enact a licensing/registration regime imminent.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?