On-shore VASP in South Africa
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in South Africa with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Register with the Financial Intelligence Centre (FIC) as an accountable institution under FICA (mandatory since December 19, 2022).
- Implement a Risk Management and Compliance Programme (RMCP) under Section 42 of the FIC Act covering AML/CFT and proliferation financing risks.
- Conduct standard Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) for high-risk customers.
- Screen against sanctions lists and perform ongoing transaction monitoring.
- Report suspicious transactions under Section 29 of the FIC Act and cash transactions over ZAR 49,999.99 under Section 28 of the FIC Act.
- Comply with the Crypto Travel Rule (effective April 30, 2025) with a zero-threshold: collect, verify, and transmit originator/beneficiary information for ALL crypto asset transfers, including CASP-to-unhosted wallet and cross-border transfers.
- Appoint a local compliance officer and key individual as required by FSCA for FSP licensing.
Key Restrictions
- Must be locally incorporated in South Africa with a local key individual and compliance officer.
- Must hold an FSP (Financial Service Provider) license from the FSCA under the CASP category of FAIS.
- Capital requirements: ZAR 150,000–1,000,000+ depending on the scope of services.
- Exchange control regulations (capital flow restrictions) apply to crypto; however, a May 2025 court ruling (Standard Bank v SARB) exempted crypto from the 1961 Exchange Control Regulations — draft regulations pending.
- Must have a complaint resolution mechanism in place (applies to custody services).
- Application process takes 6–12 months for FSP licensing.
- Travel Rule applies to ALL transfers with zero minimum threshold (not just above ZAR 25,000).
Key Risks
- Regulatory ambiguity: The upcoming COFI Bill could overhaul the conduct framework, creating potential transitional compliance burden.
- Enforcement precedent: The Africrypt scandal ($3.6B fraud) and South Africa's brief FATF gray listing (removed 2025) indicate elevated regulatory scrutiny.
- Cross-border risk: The legal status of exchange controls on crypto is in flux after the May 2025 Standard Bank v SARB ruling; pending draft regulations may impose new capital flow management obligations.
- Tax complexity: SARS treats crypto as intangible assets, and operators must distinguish between capital gains (18% max effective rate for individuals) and income tax treatment for frequent trading/mining/staking — classification risk exists.
- Travel Rule compliance burden: Zero-threshold requirement for all transfers, including unhosted wallets and counterparties in jurisdictions without equivalent rules, imposes significant operational and technical costs.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FSCA — Crypto assets as financial products under FAIS — first African country to formally regulate crypto
SARB — Prudential authority, exchange controls, CBDC exploration (Project Khokha)
Financial Advisory and Intermediary Services Act (FAIS) — crypto asset declaration (2022) — Crypto assets declared as financial products (effective November 2022)
Financial Intelligence Centre Act (FIC Act) (2001) — AML/CFT compliance
VASP: Financial Service Provider (FSP) License from FSCA — CASP category under FAIS. ZAR 150,000-1,000,000+ capital. 6-12 months. Local key individual and compliance officer required. Luno (acquired by DCG) is major local platform.
CUSTODY: Included under FSP license; complaint resolution mechanism required
EXCHANGE: FSP license. South Africa briefly on FATF gray list (removed 2025). Africrypt scandal ($3.6B fraud). Exchange control regulations (capital flow restrictions) apply to crypto.
FAIS Act 37 of 2002: Regulates CASP services, not issuance.
Upcoming COFI Bill: Potential overhaul for conduct regulation.
Financial Sector Conduct Authority (FSCA): Oversees licensing and supervision of Crypto Asset Service Providers (CASPs) as Financial Service Providers (FSPs) under the Financial Advisory and Intermediary Services Act (FAIS) of 2002; enforces consumer protection and compliance.
South African Reserve Bank (SARB): Monitors financial stability, handles exchange controls, and is developing a framework for cross-border crypto transactions following a May 2025 Pretoria High Court ruling (Standard Bank v SARB) that exempted crypto from 1961 rules.
Financial Intelligence Centre (FIC): Enforces AML/CFT via the Financial Intelligence Centre Act (FICA) of 2001, requiring CASPs to register as accountable institutions and report suspicious transactions.
South African Revenue Service (SARS): Taxes crypto under the Income Tax Act of 1962; clarified in April 2018 that normal income tax rules apply to crypto income.
Financial Advisory and Intermediary Services Act (FAIS), 2002: Classifies crypto assets as financial products, mandating FSP licensing for related services.
Financial Intelligence Centre Act (FICA), 2001: Subjects CASPs to AML/CFT reporting (e.g., suspicious transactions under section 29, cash over ZAR49,999.99 under section 28).
Income Tax Act, 1962: Treats crypto as intangible assets subject to income tax.
Exchange Control Regulations, 1961 (under Currency and Exchanges Act, 1933): Previously applied but ruled inapplicable to crypto in May 2025; draft regulations pending to integrate crypto into capital flow management.
Crypto Travel Rule: Implemented April 30, 2025, for CASPs.
Financial Intelligence Centre Act (FICA), 2001 (as amended): Principal law governing AML/CFT, extended to CASPs via Schedule 1 amendments; mandates registration, risk management, and reporting.
Financial Advisory and Intermediary Services (FAIS) Act: Classifies crypto assets as financial products, requiring FSCA licensing for CASPs.
Money Laundering and Terrorist Financing Control Regulations: Supplements FICA with detailed compliance procedures.
Customer identification and verification.
Standard CDD and Enhanced Due Diligence (EDD) for high-risk cases.
Risk assessments for money laundering, terrorist financing, and proliferation financing.
Sanctions screening and transaction monitoring.
Compliance with the Travel Rule (effective April 30, 2025) for originator/beneficiary information in transfers.
Travel Rule adopted — threshold: ZAR 25,000
Threshold Amounts: There is a zero transaction threshold, meaning the Travel Rule applies to all crypto asset transfers without minimum value limits.
Covered VASPs: Applies to all registered CASPs providing services in South Africa, regardless of transaction type (CASP-to-CASP, CASP-to-unhosted wallets) or location (domestic/cross-border). CASPs must register with the FIC (mandatory since December 19, 2022) and hold FSCA licenses where applicable. No exemptions are available.
Technical Implementation Requirements:
Enforcement and Penalties: Non-compliance triggers administrative sanctions under Section 45C of the FIC Act. FSCA Communication 44 of 2024 notified supervised institutions.
FIC Directive 9 (referenced in sources; effective April 30, 2025).
Joint Advisory (April 17, 2025): https://www.fic.gov.za/wp-content/uploads/2025/04/2025.4-GN-Advisory-Travel-Rule-17-April-2025-2-1.pdf
Draft PCC 123 (guidance on compliance).
CASPs must collect, verify, and transmit required data (e.g., originator/beneficiary identities per FIC Act) for all transfers.
Develop and enforce a Risk Management and Compliance Programme (RMCP) under Section 42 of the FIC Act, including risk-based policies for executing, rejecting, or suspending non-compliant/suspicious transactions.
Beneficiaries must verify identities and monitor for incomplete data; intermediaries must relay data.
Comply even in "sunrise" scenarios where counterparties (e.g., foreign CASPs) lack equivalent rules.
Align with Draft Public Compliance Communication (PCC) 123 for guidance on Directive 9 (authoritative under FIC Act).
Evidence fact za.tax not found (may have been renamed).
Annual exclusion: The first R40,000 of capital gains is tax-free.
Inclusion rate: Only 40% of gains above the exclusion threshold are included in your taxable income.
Maximum effective rate: This results in a maximum effective tax rate of 18% for individuals.
Mining, staking, or receiving crypto as remuneration
Frequent trading activities that indicate a revenue-generating scheme
South African Revenue Service (SARS) - Crypto Assets & Tax: https://www.sars.gov.za/individuals/crypto-assets-tax/
SARS - Crypto Assets FAQs: https://www.sars.gov.za/wp-content/uploads/Docs/Legal/Crypto-FAQs-reviewed-23-June-2021.pdf
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — locally-incorporated on-shore VASPs are permitted in South Africa but must obtain an FSCA FSP license under FAIS (6–12 months, ZAR 150k–1M+ capital), register as an accountable institution with the FIC, comply with full AML/CFT obligations including a zero-threshold Travel Rule, and navigate evolving exchange control and tax frameworks.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?