Crypto-funded debit card in South Africa
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in South Africa with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CASPs must register as accountable institutions under FICA (Financial Intelligence Centre Act, 2001) and comply with all AML/CFT obligations.
- Customer identification and verification (KYC/CDD) required for all cardholders under FICA.
- Enhanced Due Diligence (EDD) required for high-risk customers.
- Ongoing risk assessments for money laundering, terrorist financing, and proliferation financing.
- Sanctions screening and transaction monitoring required.
- Travel Rule compliance (effective April 30, 2025) — originator and beneficiary information must accompany crypto transfers.
- Suspicious transaction reporting under section 29 of FICA.
- Cash transaction reporting threshold: ZAR 49,999.99 (section 28 of FICA).
- Compliance officer and risk management programme mandated under FICA.
Key Restrictions
- Crypto-funded debit cards require the operator to hold an FSCA Financial Service Provider (FSP) license in the CASP category under FAIS (since crypto assets are financial products).
- A local entity is required — must have a local key individual and compliance officer physically in South Africa.
- Capital requirement ranges from ZAR 150,000 to ZAR 1,000,000+ for the FSP license.
- The e-money / payment-institution licensing framework is not directly addressed in the provided facts — the card program's funding-mechanism (crypto-to-fiat conversion) falls under CASP licensing, but the card issuance itself may require partnership with a licensed bank or BIN sponsor.
- Exchange control regulations apply to crypto (capital flow restrictions), though May 2025 Pretoria High Court ruling (Standard Bank v SARB) exempted crypto from 1961 Exchange Control Regulations — draft regulations pending.
- Crypto Travel Rule applies to all crypto asset transfers from April 30, 2025.
Key Risks
- No clear e-money or payment-service-issuer license framework identified in the provided facts — the card-issuance/payment side may require a bank partnership or BIN sponsorship with a SARB-regulated institution.
- Ambiguity around how the crypto-to-fiat conversion at point-of-sale is treated under existing regulations (CASP vs. payment service).
- FATF gray list history (resolved 2025) and past enforcement gaps (Africrypt $3.6B fraud) may result in heightened regulatory scrutiny of new models.
- Upcoming COFI Bill may overhaul the conduct regulatory framework, creating transitional risk.
- Exchange control regulations remain in flux post-May 2025 ruling — future capital-flow rules for cross-border crypto transactions are unclear.
- SARS treats crypto as income or capital gains — tax liabilities for cardholders on conversion events may create compliance complexity.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FSCA — Crypto assets as financial products under FAIS — first African country to formally regulate crypto
SARB — Prudential authority, exchange controls, CBDC exploration (Project Khokha)
Financial Advisory and Intermediary Services Act (FAIS) — crypto asset declaration (2022) — Crypto assets declared as financial products (effective November 2022)
VASP: Financial Service Provider (FSP) License from FSCA — CASP category under FAIS. ZAR 150,000-1,000,000+ capital. 6-12 months. Local key individual and compliance officer required. Luno (acquired by DCG) is major local platform.
FAIS Act 37 of 2002: Regulates CASP services, not issuance.
Financial Sector Conduct Authority (FSCA): Oversees licensing and supervision of Crypto Asset Service Providers (CASPs) as Financial Service Providers (FSPs) under the Financial Advisory and Intermediary Services Act (FAIS) of 2002; enforces consumer protection and compliance.
South African Reserve Bank (SARB): Monitors financial stability, handles exchange controls, and is developing a framework for cross-border crypto transactions following a May 2025 Pretoria High Court ruling (Standard Bank v SARB) that exempted crypto from 1961 rules.
Financial Intelligence Centre (FIC): Enforces AML/CFT via the Financial Intelligence Centre Act (FICA) of 2001, requiring CASPs to register as accountable institutions and report suspicious transactions.
Financial Advisory and Intermediary Services Act (FAIS), 2002: Classifies crypto assets as financial products, mandating FSP licensing for related services.
Financial Intelligence Centre Act (FICA), 2001: Subjects CASPs to AML/CFT reporting (e.g., suspicious transactions under section 29, cash over ZAR49,999.99 under section 28).
Exchange Control Regulations, 1961 (under Currency and Exchanges Act, 1933): Previously applied but ruled inapplicable to crypto in May 2025; draft regulations pending to integrate crypto into capital flow management.
Crypto Travel Rule: Implemented April 30, 2025, for CASPs.
Financial Intelligence Centre Act (FICA), 2001 (as amended): Principal law governing AML/CFT, extended to CASPs via Schedule 1 amendments; mandates registration, risk management, and reporting.
Customer identification and verification.
Standard CDD and Enhanced Due Diligence (EDD) for high-risk cases.
Risk assessments for money laundering, terrorist financing, and proliferation financing.
Sanctions screening and transaction monitoring.
Compliance with the Travel Rule (effective April 30, 2025) for originator/beneficiary information in transfers.
CUSTODY: Included under FSP license; complaint resolution mechanism required
EXCHANGE: FSP license. South Africa briefly on FATF gray list (removed 2025). Africrypt scandal ($3.6B fraud). Exchange control regulations (capital flow restrictions) apply to crypto.
Evidence fact za.tax not found (may have been renamed).
Financial Intelligence Centre Act (FICA), 2001: Subjects CASPs to AML/CFT reporting (e.g., suspicious transactions under section 29, cash over ZAR49,999.99 under section 28).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A crypto-funded debit card can operate in South Africa but requires a full FSCA CASP/FSP license, a locally incorporated entity with key individual and compliance officer, full FICA AML/CFT compliance (including Travel Rule and R49,999.99 cash reporting), and likely a SARB-licensed banking partner for the card-issuance/payment side, though the e-money licensing framework for the card program itself is not explicitly addressed in the provided facts.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?