← Regulations / Tanzania / Operating Models / On-shore VASP

On-shore VASP in Tanzania

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in Tanzania with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD) under the Anti-Money Laundering Act (AMLA), 2006 — collect and verify full name, date of birth, residential address, nationality, and national ID for natural persons; collect registration number, address, directors, and beneficial ownership for legal entities.
  • Beneficial ownership identification and verification required for all customers.
  • Ongoing monitoring of customer transactions to detect unusual or suspicious activity.
  • Enhanced Due Diligence (EDD) required for PEPs, customers from high-risk FATF jurisdictions, complex/large transactions, new anonymous technologies, and cross-border virtual asset transfers.
  • Suspicious Transaction Reporting (STR) to the Financial Intelligence Unit (FIU) Tanzania — report promptly without delay any known or suspected transactions involving proceeds of crime, money laundering, or terrorism financing.
  • No tipping-off prohibition — VASPs and employees must not disclose STR submissions to customers or third parties.
  • Record-keeping for a minimum of 5 years after business relationship ends or transaction date, covering all identification data, business correspondence, transaction records (dates, amounts, asset types, addresses), and STR records.

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender in Tanzania — the Bank of Tanzania has prohibited financial institutions from facilitating crypto transactions.
  • There is no specific licensing regime for VASPs; operators face significant legal uncertainty and enforcement risk under the existing general financial services and payment systems framework.
  • Any fiat-crypto exchange activity may be classified as unauthorized money transmission or payment processing under the National Payment Systems Act, 2015 (BOT-administered), requiring a license that is not currently available for crypto.
  • Custodial services lack any specific regulatory framework — no segregation mandates, cold storage requirements, or insurance/bonding rules exist.
  • A local entity (locally incorporated, with physical office and local management) is almost certainly required — no foreign-entity-only operation is feasible.

Key Risks

  • High enforcement risk — BoT has publicly maintained a ban on crypto transactions by financial institutions and warned the public against dealing in crypto, creating active legal exposure for any on-shore VASP.
  • Regulatory ambiguity — no specific VASP licensing law exists; operators would be operating in a legal gray area with potential for shutdown, penalties, or criminal liability under general financial services regulation.
  • Lack of formal prohibition does not equal permission — the absence of a licensing framework means no lawful path to operate, increasing the risk of regulatory enforcement action.
  • Reputational and PR risk — operating in a jurisdiction where the central bank has explicitly warned against crypto use may attract negative attention from regulators and the public.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Lack of Specific Licensing Regime: There is no specific law or regulation in Tanzania that explicitly defines, regulates, and provides for the licensing of cryptocurrency exchanges, custody providers, or payment processors as virtual asset businesses.

licensing 60% confidence

Current Stance (Implied): While formal prohibition may not be explicit in specific crypto legislation, the lack of a regulatory framework and the BOT's historical cautious stance on unregulated financial activities mean that operating an unlicensed crypto business could face significant legal uncertainty and potential challenges under existing general financial laws.

licensing 60% confidence

Exchanges: If an exchange facilitates the exchange of fiat currency for cryptocurrencies, or vice versa, it might be seen as engaging in money transmission or payment processing activities.

licensing 60% confidence

Custody Providers: If a provider holds significant assets on behalf of clients, it could potentially be viewed through the lens of trust services or asset management, which are typically regulated.

licensing 60% confidence

Payment Processors: Companies facilitating payments using virtual assets, especially if they involve conversions to/from fiat currency, might be subject to the existing National Payment Systems Act, 2015 (and its regulations) administered by the Bank of Tanzania, depending on the interpretation of "payment system" and "electronic money."

licensing 60% confidence

HIGHLY LIKELY & CRITICAL: Even without a specific crypto licensing regime, Tanzania has a robust Anti-Money Laundering Act, 2006 (and subsequent amendments/regulations) and a Financial Intelligence Unit (FIU). Financial institutions and Designated Non-Financial Businesses and Professions (DNFBPs) are obligated to comply with AML/CFT (Anti-Money Laundering and Combating the Financing of Terrorism) requirements.

licensing 60% confidence

Virtual asset service providers, if operating, would be expected to implement robust KYC (Know Your Customer) and AML procedures, including customer due diligence, transaction monitoring, record-keeping, and suspicious transaction reporting to the FIU. This aligns with FATF (Financial Action Task Force) recommendations, which Tanzania adheres to.

licensing 60% confidence

Highly Likely: For any regulated financial service, a local presence (e.g., a locally incorporated entity, physical office, local management) is typically a prerequisite in Tanzania. This would almost certainly be a requirement for any future crypto licensing.

licensing 60% confidence

Role: The central bank responsible for monetary policy, financial sector regulation (including payment systems), and financial stability. Any future crypto framework is highly likely to involve the BOT, especially concerning stablecoins or payment-related virtual assets.

licensing 60% confidence

Currently: No specific capital requirements for crypto businesses as there's no dedicated license.

aml 60% confidence

The Anti-Money Laundering Act (AMLA), 2006 (as amended): This is the principal legislation establishing the legal framework for combating money laundering. It defines "financial institutions" and "other reporting institutions" and imposes obligations on them. While VASPs may not be explicitly listed, their activities are likely to be interpreted as falling under the scope of financial services or other reporting obligations.

aml 60% confidence

The Anti-Money Laundering Regulations, 2012 (as amended): These regulations provide detailed rules and procedures for implementing the AMLA, including customer due diligence, suspicious transaction reporting, and record-keeping.

aml 60% confidence

Identification and Verification of Customers:

aml 60% confidence

Beneficial Ownership: Identifying and verifying the identity of the ultimate beneficial owner(s) of the virtual assets or the entity, ensuring that the VASP knows who ultimately owns or controls the funds/assets.

aml 60% confidence

Ongoing Monitoring: Continuously monitoring the business relationship and transactions undertaken by the customer to ensure that they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious activities.

aml 60% confidence

Enhanced Due Diligence (EDD): Applying EDD for higher-risk situations, which may include:

aml 60% confidence

Obligation to Report: Any VASP, or its employees, that knows or suspects that a transaction (or attempted transaction) involves funds or virtual assets derived from illegal activity, or is related to money laundering or terrorism financing, must report it.

aml 60% confidence

Reporting Mechanism: Reports must be submitted to the FIU Tanzania promptly and without delay, typically through a prescribed format (e.g., an online portal or specific form).

aml 60% confidence

No Tipping-Off: VASPs and their employees are prohibited from "tipping-off" customers or third parties that an STR has been or will be submitted.

aml 60% confidence

Duration: All records must be kept for a minimum period of five (5) years after the business relationship has ended or after the date of the transaction.

custody 40% confidence

There is no specific "crypto custodian license" currently established in Tanzania. Any entity wishing to offer such services would operate in a largely unregulated space, though they might fall under general financial service provider rules if their activities are deemed to align with existing licensed financial services.

custody 40% confidence

Segregation of Client Assets Rules:

custody 40% confidence

Cold Storage Mandates:

enforcement 60% confidence

Entity Targeted: The general public, financial institutions, and any individuals or entities attempting to deal in, facilitate, or operate businesses involving cryptocurrencies. Violation Type: Dealing in, facilitating, or promoting instruments not recognized as legal tender; operating unauthorized financial services. Penalty Amount: Not a specific fine amount applied in a single action, but the outcome implies potential prosecution under existing financial laws for unauthorized activities.

enforcement 60% confidence

Outcome: Cryptocurrencies are not recognized as legal tender in Tanzania. Financial institutions are prohibited from facilitating crypto transactions. This creates a high-risk environment for anyone operating a crypto business, as they would be operating outside the legal framework and subject to potential criminal charges rather than regulatory fines.

enforcement 60% confidence

Entity Targeted: Any entity attempting to establish a cryptocurrency exchange, brokerage, or related service within Tanzania. Violation Type: Operating an unauthorized financial institution; providing financial services without a license. Penalty Amount: Not applicable as there are no known licensed entities to fine. The consequence would be prevention of operation or legal action. Outcome: Due to the regulatory stance, no formal licenses have been issued for cryptocurrency businesses. This means any entity attempting to operate such a business would be considered illegal from the outset. This "enforcement" is preventative and structural, rather than reactive with specific penalties.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — an on-shore VASP is not clearly permissible under current Tanzanian law due to the complete absence of a specific VASP licensing regime and the Bank of Tanzania's restrictive stance on crypto, though a locally-incorporated entity would be required if a future framework emerges; operators face high legal uncertainty and must comply with existing AML obligations under the AMLA 2006.

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?