DeFi protocol frontend in Tunisia
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Tunisia without local incorporation, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Law No. 2022-77 imposes AML/CFT obligations on VASPs classified as 'reporting entities' (obliged entities).
- Customer due diligence (KYC) required for any service constituting VASP activity under the law.
- Transaction monitoring for suspicious activity required.
- Suspicious activity reporting to CTAF (Commission Tunisienne des Analyses Financières — Tunisia's FIU).
- Adherence to FATF Recommendation 15 (virtual assets and VASPs) as assessed through MENAFATF membership.
- Implementation of UN Security Council targeted financial sanctions (counter-terrorism, counter-proliferation) via national law.
- Risk-based approach to AML/CFT compliance required.
Key Restrictions
- Cryptocurrency transactions are not authorized by the BCT and the BCT has issued warnings discouraging dealing in virtual currencies.
- No legal framework exists for the operation of crypto exchanges or VASPs — any such activity lacks a lawful licensing pathway.
- The BCT has stated that 'dealing in virtual currencies' exposes participants to legal risk.
- Fee-taking (e.g., charging swap fees, frontend fees) likely triggers classification as a VASP under the FATF-style definition in Law No. 2022-77, which includes 'participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset' and exchange services.
- Operating a frontend without user screening/geofencing may constitute unauthorized financial service provision.
Key Risks
- Enforcement precedent: Individual convicted and imprisoned in 2021 for using crypto to transfer money abroad under foreign exchange laws (Iskander Najar case).
- Regulatory ambiguity: No established licensing path; operating in a 'regulatory void' creates uncertainty and potential for retroactive enforcement.
- Even if the protocol is decentralized, operating the frontend with fee collection could be treated as a regulated VASP activity under Tunisia's FATF-aligned definition.
- Geofencing out Tunisia may be practically necessary to avoid BCT enforcement risk, but no safe-harbor or opt-in framework exists.
- Reputational and PR risk: International attention on Tunisia's aggressive enforcement stance against crypto.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Cryptocurrencies are not recognized as legal tender in Tunisia.
Transactions involving cryptocurrencies are not authorized by the BCT.
Exchanges: There is no legal framework allowing the operation of crypto exchanges. Any attempt to operate one would be in violation of the BCT's stance and existing financial laws.
The BCT highlights the risks associated with virtual assets, including volatility, lack of consumer protection, money laundering, and financing of terrorism.
Law No. 2022-77 of December 26, 2022, on Combating Money Laundering and Terrorist Financing (Loi n° 2022-77 du 26 décembre 2022, relative à la lutte contre le blanchiment d'argent et le financement du terrorisme).
Definition of Virtual Asset Service Providers (VASPs): It explicitly includes VASPs as "reporting entities" (or "obliged entities" / "personnes assujetties"). While the law itself may not define all types of VASPs exhaustively, it typically covers entities that conduct one or more of the following activities for or on behalf of another natural or legal person:
Exchange between virtual assets and fiat currencies.
Exchange between one or more forms of virtual assets.
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
Participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset.
Compliance Requirement: Tunisia is legally bound to implement UN Security Council (UNSC) resolutions that impose targeted financial sanctions. These primarily relate to counter-terrorism (e.g., against Al-Qaida, ISIL/Da'esh affiliates) and counter-proliferation of weapons of mass destruction. All financial institutions, including VASPs (once explicitly regulated or by analogy), must freeze assets and prevent funds/services from being made available to designated individuals and entities on the UN Consolidated Sanctions List.
Compliance Requirement: The FATF sets international standards for combating money laundering and terrorist financing. Tunisia, through its membership in MENAFATF, is assessed on its adherence to these recommendations. Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate and supervise VASPs for AML/CFT purposes, including implementing targeted financial sanctions. VASPs are expected to conduct customer due diligence (CDD), monitor transactions, report suspicious activities, and screen against sanctions lists. The FATF "Travel Rule" (Recommendation 16) also applies to VASPs.
Entity Targeted: Iskander Najar (also sometimes reported as Islem Najar), a young Tunisian individual. Violation Type: Illegally using cryptocurrency to transfer money abroad, violating Tunisian foreign exchange laws (specifically, the prohibition on non-authorized transfers of foreign currency) and potentially money laundering charges. Penalty Amount: Initial sentence of two years in prison and a fine of 5,000 Tunisian Dinars (TND) (approximately $1,700 at the time). This sentence was later reduced on appeal. Specific details of the reduced fine are less widely reported than the prison sentence reduction.
Absence of a Legal Framework: There is no specific law or regulation defining cryptocurrencies, digital assets, or the services related to them (including custody).
Official Warnings: The BCT has issued several warnings against the use of cryptocurrencies, citing their speculative nature, lack of legal tender status, volatility, and risks associated with money laundering and terrorist financing. These warnings generally discourage engagement with these assets rather than regulate their operation.
No Licensing Regime for VASPs: Without a defined legal framework, there are no specific licensing requirements for Virtual Asset Service Providers (VASPs), including those offering custody services.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — operating a DeFi frontend for Tunisian residents carries serious legal risk: the BCT has not authorized crypto transactions, no licensing framework exists, and the 2022 AML law classifies VASP activities (including exchange and financial services related to virtual assets) as regulated, with enforcement precedent including imprisonment for crypto-related foreign exchange violations. Geofencing Tunisia out is the only practical compliance strategy.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?