Custodial wallet / SaaS in Togo
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is not permitted in Togo.
Verdict Details
- Permitted
- no
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/CDD obligations under Loi n° 2018-009 du 22 juin 2018 (Togo's national AML/CFT law) — identify and verify customers and beneficial owners
- Ongoing transaction monitoring for suspicious activity
- Suspicious Transaction Reporting (STRs) to CENTIF (Cellule Nationale de Traitement des Informations Financières), Togo's FIU
- Record-keeping of customer identification and transactions for the period specified under national AML/CFT law
- Screening customers and transactions against the UN Consolidated Sanctions List (binding international law for UN member states)
- Recommend screening against OFAC SDN List if custody service involves USD, U.S. persons, or U.S.-based infrastructure
- Recommend screening against EU Consolidated Financial Sanctions List if service involves EU persons or EU financial system
- FATF Recommendation 15 obligations (Travel Rule) would apply if VASPs are designated as reporting entities under Togo's AML framework
- VASPs would be expected to adhere to FATF principles as financial institutions or DNFBPs under the underlying AML/CFT regime
Key Restrictions
- BCEAO Circular No. 00000002/RB/2020 explicitly prohibits regulated financial institutions (banks, microfinance, payment service providers) in WAEMU from engaging in ANY crypto-related activities including buying, selling, holding, or facilitating transactions
- No custody-license or qualified-custodian framework exists for virtual assets in Togo or WAEMU
- Financial institutions cannot legally provide banking services to crypto custodians, making fiat on/off ramps effectively impossible
- No segregation, insurance, or proof-of-reserves rules exist for crypto custody
- Any custodial wallet/SaaS operation would be unlicensed and unregulated, operating entirely outside the formal financial system
Key Risks
- Complete regulatory vacuum — no license to obtain means no legal pathway to operate as a compliant custodial wallet provider
- Inability to establish banking relationships: BCEAO prohibition means local financial institutions cannot work with crypto entities, making fiat conversion and banking integration impossible
- Enforcement risk from BCEAO warnings and general AML/CFT enforcement — CENTIF could pursue actions under national AML law even without crypto-specific legislation
- No consumer protection or legal recourse for custodial losses given the unregulated status
- Tax/operational ambiguity — no clear framework for corporate structure, tax treatment, or dispute resolution for custodial services
- Reputational risk of operating in a jurisdiction where the central bank has publicly and repeatedly warned against virtual assets
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
BCEAO Circular No. 00000002/RB/2020 on the Prohibition of the Use of Cryptocurrencies and other Digital Assets in WAEMU Member States (or similar wording/date):
Content: This circular (and accompanying press releases/communiqués) warned the public and, more importantly, explicitly prohibited financial institutions (banks, microfinance institutions, payment service providers) from engaging in activities related to cryptocurrencies, including buying, selling, holding, or facilitating transactions. It cited concerns about consumer protection, market volatility, and the risks of money laundering and terrorist financing.
For Financial Institutions: The BCEAO directives effectively prohibit regulated financial institutions in Togo (banks, microfinance, payment service providers) from engaging in crypto trading, exchange operations, or facilitating transactions. This means you cannot legally buy or sell crypto through traditional banks in Togo.
Exchanges: Any cryptocurrency exchange operating within Togo would be unlicensed and unregulated, operating outside the formal financial system. They would face significant legal and operational risks if they attempted to establish formal banking relationships.
High Risk and Unregulated: However, the environment is highly risky. There is no consumer protection, no regulatory oversight for exchanges operating in the grey area, and no legal recourse if funds are lost.
Central Bank of West African States (BCEAO): As Togo is a member of the UEMOA, the BCEAO serves as the central bank for the region. The BCEAO has consistently issued warnings regarding the risks associated with cryptocurrencies. These warnings typically state that virtual assets are not legal tender, are not regulated by the BCEAO, and users expose themselves to financial risks.
Lack of Specific Crypto Legislation: Like many countries in the region, Togo has not yet enacted comprehensive, standalone legislation specifically regulating virtual assets or cryptocurrency service providers. Discussions are ongoing at the UEMOA level, but concrete national laws and enforcement frameworks are still developing.
Absence of Specific Enforcement Actions:
Togo's National AML/CFT Law:
Loi n° 2018-009 du 22 juin 2018 portant lutte contre le blanchiment de capitaux et le financement du terrorisme au Togo: This law transposes international standards into Togolese law, including provisions on customer due diligence (CDD), suspicious transaction reporting (STR), record-keeping, and cooperation with authorities. It is the primary legal text governing AML/CFT in Togo. While it may not explicitly mention "virtual assets" or "VASPs" directly, the broad definitions of "assets" and "financial institutions" or "reporting entities" are often interpreted to encompass new technologies and services that fall within the scope of financial activity.
VASP Obligations: Under this law, VASPs (once regulated as reporting entities or covered by broad definitions) would be required to:
Compliance Requirement: FATF Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate VASPs for AML/CFT purposes, license/register them, and apply the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers).
VASP Obligations: While Togo's specific VASP regulatory regime is still evolving, the underlying AML/CFT law expects all financial institutions and designated non-financial businesses and professions (DNFBPs) to adhere to FATF principles. This includes VASPs once they are explicitly designated or implicitly covered under existing definitions.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — Togo (as a WAEMU member) is subject to BCEAO Circular No. 00000002/RB/2020 which prohibits regulated financial institutions from engaging in crypto activities, there is no custody-license or VASP regulatory framework in place, and any custodial wallet/SaaS operation would be unlicensed, unable to access banking services, and operating in a high-risk legal grey area with no consumer protections.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?