Self-custodial wallet / non-custodial software in Uganda
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Uganda without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach because a self-custodial wallet publisher does not hold, control, or have access to user funds — the publisher is not a 'reporting person' under the Anti-Money Laundering Act, 2013 (which covers entities that engage in financial transactions or hold assets on behalf of customers).
- If the wallet software includes any fiat on-ramp/off-ramp or payment processing functionality (converting fiat to crypto or vice versa), the operator could be deemed a payment service provider under the NPS Act and would then be subject to full CDD, EDD, ongoing monitoring, suspicious transaction reporting (to FIA within 48 hours of suspicion), and 5-year record retention under the AML Act.
Key Restrictions
- The publisher may not hold, control, or have access to user private keys or funds — doing so would create custodial exposure and risk classification under unregulated VASP activity.
- If the software integrates fiat-crypto conversion or payment processing, the operator could be deemed a Payment Service Provider under the National Payment Systems Act, 2020, requiring a PSP/PSO license which no crypto-native entity can currently obtain (regulated institutions are prohibited from crypto dealing).
- No form of solicitation or promotion of crypto services to regulated financial institutions is possible, as BoU Circular N. 3 of 2021 prohibits such institutions from dealing in cryptocurrencies.
- The publisher cannot rely on regulated banks or payment providers in Uganda to facilitate any fiat transactions, as they are prohibited from facilitating crypto transactions.
Key Risks
- Regulatory ambiguity — Uganda has no specific VASP licensing framework; software publishing for self-custodial wallets operates in a legal grey area with no formal recognition or protection.
- Bank of Uganda has repeatedly warned the public about crypto risks; operating in this environment carries reputational and PR risk even if technically compliant.
- No clear pathway to compliance if the regulator later classifies wallet software as a financial service under the broad NPS Act definitions.
- If enforcement action targets software publishers indirectly (e.g., through payment intermediaries), the publisher may have no recourse given the absence of a licensing regime.
- AML/CFT obligations could be retroactively interpreted by FIA if the wallet is deemed to facilitate financial transactions, creating legal uncertainty.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Bank of Uganda Circular (N. 3 of 2021): While direct link to the circular might change, news articles widely reported on it and often link to scans of the original.
Bank of Uganda Warns Supervised Entities Against Dealing in Cryptocurrencies - Techweez (reporting on the circular)
Uganda's Central Bank Orders Financial Institutions to Cease All Crypto Transactions - Bitcoin.com News
National Payment Systems Act, 2020 (NPS Act) and Regulations, 2021: This is the most relevant piece of legislation for payment services in Uganda.
National Payment Systems Regulations, 2021: (Often published as a statutory instrument, typically available via the Uganda Legal Information Institute or Ministry of Finance archives).
Current Situation: No specific license. Many operate in a grey area.
Current Situation: No specific license. Many operate in a grey area.
A comprehensive legal and regulatory framework for the licensing and supervision of Virtual Asset Service Providers (VASPs) is still largely absent.
Bank of Uganda (BOU) Stance: The BOU has repeatedly issued advisories clarifying that cryptocurrencies are not recognized as legal tender in Uganda and that the central bank does not regulate or license any cryptocurrency businesses.
The BoU does not regulate, license, or supervise virtual assets or virtual asset service providers (VASPs).
Cryptocurrencies are not legal tender in Uganda.
The Anti-Money Laundering Act, 2013 (as amended): This is the primary AML legislation in Uganda. It defines money laundering, establishes the Financial Intelligence Authority (FIA), and outlines obligations for "reporting persons." While it doesn't explicitly mention "cryptocurrency" or "VASP," the broad definitions of "financial institution," "transaction," and "funds" can be interpreted to encompass activities involving virtual assets.
The Anti-Money Laundering Regulations, 2015: These regulations provide more specific details on the implementation of the Act, including customer due diligence, record-keeping, and suspicious transaction reporting.
Entity Targeted: All Regulated Financial Institutions (e.g., Commercial Banks, Payment Service Providers, Microfinance Deposit-taking Institutions). Violation Type: N/A (this was a pre-emptive prohibition, not an action against a prior violation by a crypto firm). Penalty Amount: N/A (the circular itself did not impose a fine on a crypto entity, but implied penalties for regulated entities that failed to comply with the directive). Outcome: The BoU issued a circular directing all supervised financial institutions to cease facilitating transactions related to virtual currencies. This effectively cut off cryptocurrency exchanges and related businesses from accessing formal banking services in Uganda. The BoU cited concerns over consumer protection, money laundering, terrorism financing, and the lack of specific regulations. This directive has made it extremely challenging, if not impossible, for crypto businesses to operate formally within the Ugandan financial system.
Entity Targeted: The general public and unregulated virtual asset service providers (implicitly). Violation Type: N/A (warnings about risks, not specific violations). Penalty Amount: N/A. Outcome: These warnings emphasize that cryptocurrencies are not legal tender, are not regulated by the BoU, and carry high risks of fraud, money laundering, and loss of funds. The FIA has also highlighted AML/CFT risks. The lack of a specific licensing and regulatory framework for VASPs means that any entity operating with virtual assets does so without official recognition or oversight, increasing their operational risk and exposure to potential future actions should a framework be introduced. This environment largely prevents formal enforcement actions against VASPs for regulatory non-compliance because there aren't specific VASP regulations to violate yet, other than general financial laws (e.g., fraud).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a pure self-custodial wallet publisher without custody of user keys or funds currently faces no specific licensing or AML obligations in Uganda (operating in a regulatory grey area), but the publisher must strictly avoid any custody, fiat on-ramp/off-ramp, or payment processing functions, as those would risk de facto classification as an unlicensed payment service provider under the NPS Act.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?