← Regulations / Tunisia / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Tunisia

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Tunisia with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASPs (including custodial wallet providers) are classified as 'reporting entities' (obliged entities) under Law No. 2022-77 of December 26, 2022, on Combating Money Laundering and Terrorist Financing.
  • Must conduct customer due diligence (KYC) under Law No. 2022-77 (replacing Law No. 2015-26).
  • Must implement risk-based approaches to AML/CFT.
  • Must monitor transactions for suspicious activity and report suspicious transactions to the Commission Tunisienne des Analyses Financières (CTAF), Tunisia's FIU.
  • Must comply with UN Security Council targeted financial sanctions (counter-terrorism and counter-proliferation) as incorporated into Tunisian law.
  • Must comply with FATF Recommendation 15 on virtual assets and VASPs — Tunisia is assessed via MENAFATF on this.
  • SaaS provider (custodian) and white-label client are both obliged entities under the law if they engage in safekeeping/administration of virtual assets or instruments enabling control over virtual assets, creating a joint or overlapping AML compliance burden.
  • EU and OFAC sanctions lists are not directly binding on Tunisian entities, but relevant for international operations with nexus to EU/US.

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender in Tunisia and the BCT has not authorized transactions involving cryptocurrencies.
  • There is no specific licensing regime for VASPs or custodial wallet providers — operations exist in a legal grey area.
  • The BCT has issued official warnings discouraging engagement with cryptocurrencies, citing volatility, lack of legal tender status, and ML/TF risks.
  • Enforcement precedent exists: an individual was convicted and imprisoned for using Bitcoin to transfer money abroad in violation of foreign exchange laws (Iskander Najar case, 2021-2022).
  • Any local entity would need physical presence (registered office, local management/staff) under Tunisian business law.
  • No specific custody rules exist for asset segregation, insurance/bonding, cold storage, or proof-of-reserves.

Key Risks

  • High enforcement risk: the Najar conviction demonstrates that even individual crypto use can lead to criminal penalties under foreign exchange laws.
  • Regulatory ambiguity: no formal legal framework means operators face uncertainty on licensing, asset segregation, and consumer protection obligations.
  • BCT has a publicly hostile stance toward virtual assets, increasing the likelihood of adverse regulatory action or enforcement.
  • No 'qualified custodian' definition exists for digital assets, making institutional adoption (e.g., from traditional finance) effectively impossible.
  • Reputational and PR risk: operating in a jurisdiction where the central bank publicly warns against the activity.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 20% confidence

Absence of a Legal Framework: There is no specific law or regulation defining cryptocurrencies, digital assets, or the services related to them (including custody).

custody 20% confidence

Official Warnings: The BCT has issued several warnings against the use of cryptocurrencies, citing their speculative nature, lack of legal tender status, volatility, and risks associated with money laundering and terrorist financing. These warnings generally discourage engagement with these assets rather than regulate their operation.

custody 20% confidence

No Licensing Regime for VASPs: Without a defined legal framework, there are no specific licensing requirements for Virtual Asset Service Providers (VASPs), including those offering custody services.

custody 20% confidence

None. There are no specific licenses required for providing cryptocurrency custody services in Tunisia, primarily because the activity itself is not formally recognized or regulated under a specific framework. Engaging in such activities might fall into a legal grey area, and entities doing so would not be formally licensed by Tunisian financial authorities for crypto-related services.

custody 20% confidence

None. As there is no specific regulatory framework for crypto custodians, there are no specific rules mandating the segregation of client digital assets from the custodian's own assets.

Evidence fact tn.custody.none-there-are-no-specific-1 not found (may have been renamed).

custody 20% confidence

None. Tunisian regulations do not include specific mandates for cold storage or any other particular security measures for digital assets, as there is no framework regulating digital asset custody.

custody 20% confidence

None. There is no legal or regulatory definition of a "qualified custodian" in the context of digital assets in Tunisia. The existing financial regulations apply to traditional financial institutions and services, not to unregulated crypto entities.

custody 20% confidence

Banque Centrale de Tunisie (BCT) Communiqué de presse sur les monnaies virtuelles (November 10, 2020):

custody 20% confidence

The BCT reiterated its warnings about the risks associated with virtual currencies, emphasizing their speculative nature, the absence of an issuer, legal guarantee, or supervision from any authority. It also highlighted the risks of money laundering and terrorist financing. The BCT stated that "dealing with virtual currencies exposes users to risks of fraud and theft, and does not benefit from any legal protection or recourse to local or foreign financial authorities."

licensing 60% confidence

Cryptocurrencies are not recognized as legal tender in Tunisia.

licensing 60% confidence

Transactions involving cryptocurrencies are not authorized by the BCT.

licensing 60% confidence

Custody Providers: Similarly, no specific license exists. Providing custody for virtual assets would fall into the same regulatory void/prohibition.

licensing 60% confidence

Local Presence: A physical presence in Tunisia, including a local registered office, and potentially local management and staff.

licensing 60% confidence

AML/KYC Compliance: Strict Anti-Money Laundering (AML) and Know Your Customer (KYC) policies and procedures, in line with international standards (FATF recommendations). This would include customer identification, transaction monitoring, suspicious activity reporting to the Commission Tunisienne des Analyses Financières (CTAF) (Tunisia's Financial Intelligence Unit).

licensing 60% confidence

Commission Tunisienne des Analyses Financières (CTAF) - Tunisia's FIU:

aml 20% confidence

Law No. 2022-77 of December 26, 2022, on Combating Money Laundering and Terrorist Financing (Loi n° 2022-77 du 26 décembre 2022, relative à la lutte contre le blanchiment d'argent et le financement du terrorisme).

aml 20% confidence

Definition of Virtual Asset Service Providers (VASPs): It explicitly includes VASPs as "reporting entities" (or "obliged entities" / "personnes assujetties"). While the law itself may not define all types of VASPs exhaustively, it typically covers entities that conduct one or more of the following activities for or on behalf of another natural or legal person:

aml 20% confidence

Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.

aml 60% confidence

Compliance Requirement: Tunisia is legally bound to implement UN Security Council (UNSC) resolutions that impose targeted financial sanctions. These primarily relate to counter-terrorism (e.g., against Al-Qaida, ISIL/Da'esh affiliates) and counter-proliferation of weapons of mass destruction. All financial institutions, including VASPs (once explicitly regulated or by analogy), must freeze assets and prevent funds/services from being made available to designated individuals and entities on the UN Consolidated Sanctions List.

aml 60% confidence

Compliance Requirement: The FATF sets international standards for combating money laundering and terrorist financing. Tunisia, through its membership in MENAFATF, is assessed on its adherence to these recommendations. Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate and supervise VASPs for AML/CFT purposes, including implementing targeted financial sanctions. VASPs are expected to conduct customer due diligence (CDD), monitor transactions, report suspicious activities, and screen against sanctions lists. The FATF "Travel Rule" (Recommendation 16) also applies to VASPs.

aml 60% confidence

Tunisia's Status: The MENAFATF's 2019 Mutual Evaluation Report (MER) for Tunisia highlighted that Tunisia needed to adopt legislative and regulatory measures to apply the FATF Recommendations to virtual assets and VASPs. While progress has been made, the underlying AML/CFT obligations apply.

enforcement 60% confidence

Entity Targeted: Iskander Najar (also sometimes reported as Islem Najar), a young Tunisian individual. Violation Type: Illegally using cryptocurrency to transfer money abroad, violating Tunisian foreign exchange laws (specifically, the prohibition on non-authorized transfers of foreign currency) and potentially money laundering charges. Penalty Amount: Initial sentence of two years in prison and a fine of 5,000 Tunisian Dinars (TND) (approximately $1,700 at the time). This sentence was later reduced on appeal. Specific details of the reduced fine are less widely reported than the prison sentence reduction.

enforcement 60% confidence

Outcome: Najar was convicted and served time in prison. The case garnered significant international attention, with many advocating for his release and highlighting the severity of Tunisia's stance on crypto. His sentence was ultimately reduced on appeal, and he was released after serving part of his term. The outcome reinforced Tunisia's strict interpretation of its foreign exchange laws concerning digital assets.

enforcement 70% confidence

Legal Basis: UN Security Council Resolutions, particularly those under Chapter VII of the UN Charter (e.g., Resolution 1267 (Al-Qaida/ISIL), 1373 (general counter-terrorism), 1718 (DPRK), 2231 (Iran). Tunisia incorporates these into its national law.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet/SaaS operations in Tunisia exist in a legal grey area; Law No. 2022-77 classifies VASPs as AML-obliged entities, but no licensing framework exists for custody, the BCT has actively warned against crypto, and enforcement precedent (Najar conviction) creates material criminal risk.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?