← Regulations / Zimbabwe / Operating Models / CEX

Centralized exchange in Zimbabwe

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in Zimbabwe with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASPs are designated as 'financial institutions' under the Money Laundering and Proceeds of Crime Amendment Act (No. 6 of 2022) and must comply with AML/CFT obligations under that Act.
  • Customer Due Diligence (KYC) procedures for all users (zw.aml.customer-due-diligence-kyc-processes).
  • Ongoing monitoring of transactions (zw.aml.monitoring-transactions-for-suspicious-activities).
  • Reporting suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) (zw.aml.reporting-suspicious-transactions-to-the).
  • Appointment of a dedicated AML/CFT Compliance Officer (zw.aml.having-an-appointed-amlcft-compliance).
  • Risk-based assessment and management (zw.aml.risk-based-assessment-and-management).
  • Record-keeping of transactions and customer data (zw.aml.record-keeping-of-transactions-and-customer).
  • Robust internal AML/CFT policies and controls (zw.licensing.robust-internal-amlcft-policies-and).
  • Travel Rule: Not yet specifically implemented in Zimbabwe — no operational threshold or technical requirements are currently in force (zw.aml.not-adopted-travel-rule-specifics; zw.aml.travel-rule-there-is-no).

Key Restrictions

  • Operator must be domiciled / incorporated in Zimbabwe (zw.licensing.it-is-highly-probable-that).
  • A physical office, local directors, and locally-based key personnel (e.g., CEO, Compliance Officer) are likely required (zw.licensing.requirements-may-include-a-physical).
  • Must obtain a VASP license (likely covering exchanges, custody, and payment processing) — full licensing, not mere registration, is expected (zw.licensing.licensing-this-typically-involves-a).
  • Minimum capital thresholds will apply, varying by type and scale of VA services (zw.licensing.likely-to-be-prescribed-minimum).
  • No specific custody segregation rules exist for client digital assets — no legal mandate to segregate, no cold storage mandate, no insurance/bonding requirements (zw.custody.no-specific-rules-as-there; zw.custody.no-specific-requirements-there-are; zw.custody.no-specific-mandates-while-cold).
  • Travel Rule obligations for VA transfers are not yet legislated or enforced (zw.aml.not-adopted-travel-rule-specifics).

Key Risks

  • Regulatory framework is still developing — the VASP licensing regime is anticipated but not yet fully operational; the current pathway is through the RBZ National Fintech Sandbox (zw.licensing.regulatory-sandbox-this-is-anticipated; zw.custody.national-financial-technology-sandbox-2021).
  • No specific custody or segregation rules create uncertainty around user asset protection and potential liability (zw.custody.no-specific-rules-as-there).
  • If virtual assets are classified as securities, SECZ may also assert jurisdiction, creating dual or overlapping regulatory requirements (zw.licensing.securities-and-exchange-commission-of).
  • Travel Rule non-implementation creates FATF mutual evaluation risk — future enforcement may require retroactive compliance investment (zw.aml.not-adopted-travel-rule-specifics).
  • Penalties for non-compliance under the AML/CFT Act exist but specific VA-focused enforcement precedent is limited (zw.aml.penalties-for-non-compliance).

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Virtual Asset Service Provider (VASP) License: This is the most common umbrella term. It would likely cover:

licensing 60% confidence

Exchanges: Platforms facilitating the buying, selling, and trading of virtual assets against fiat currency or other virtual assets.

licensing 60% confidence

Custody Providers: Entities providing services to safeguard virtual assets or instruments enabling control over virtual assets on behalf of others.

licensing 60% confidence

Licensing: This typically involves a comprehensive application, detailed due diligence, meeting stringent capital, operational, and compliance requirements, and ongoing supervision. Zimbabwe is expected to adopt a full licensing regime for commercial VA operations to ensure financial stability, consumer protection, and AML/CFT compliance.

licensing 60% confidence

Likely to be prescribed minimum capital thresholds, which may vary depending on the type and scale of VA services offered, reflecting the inherent risks. This ensures financial stability and ability to absorb operational shocks.

licensing 60% confidence

It is highly probable that licensed entities will need to be domiciled in Zimbabwe (i.e., incorporated locally).

licensing 60% confidence

Requirements may include a physical office, local directors, and locally-based key personnel (e.g., CEO, Compliance Officer).

licensing 60% confidence

This will be a paramount requirement. Virtual asset service providers will be designated as "reporting entities" and will be subject to the provisions of Zimbabwe's Money Laundering and Proceeds of Crime Act (Chapter 9:24) and regulations issued by the Financial Intelligence Unit (FIU).

licensing 60% confidence

Regulatory Sandbox: This is anticipated to be a controlled environment where approved entities can test innovative financial products, services, or business models (including those involving VAs) with real customers, but within defined parameters and under the close supervision of the RBZ, for a limited period. Successful participants in the sandbox may then be eligible for full licensing once the broader framework is established.

licensing 60% confidence

Securities and Exchange Commission of Zimbabwe (SECZ): If certain virtual assets are classified as securities under Zimbabwean law, then SECZ would have jurisdiction over their issuance and trading.

custody 60% confidence

No Specific Rules: As there are no specific custodial licenses or regulatory frameworks, there are no explicit rules mandating the segregation of client digital assets from a custodian's proprietary assets. Best practices in traditional finance would suggest segregation, but this is not legally mandated for crypto custody in Zimbabwe.

custody 60% confidence

No Specific Requirements: There are no specific insurance or bonding requirements for digital asset custodians.

custody 60% confidence

No Specific Mandates: While cold storage is a widely recognized security best practice for managing digital assets, there are no specific legal mandates or requirements for its use by custodians in Zimbabwe.

custody 60% confidence

National Financial Technology Sandbox (2021): This is the most significant development pointing towards future regulation. Launched by the RBZ, the sandbox allows innovative fintech solutions, including those involving digital assets, to be tested in a controlled environment. While not legislation itself, insights gained from the sandbox are expected to inform the development of future laws and regulations.

aml 60% confidence

Partially (Framework for VASPs): Zimbabwe, as an FATF member, is committed to implementing FATF Recommendations. In October 2022, Zimbabwe promulgated the Money Laundering and Proceeds of Crime Amendment Act (No. 6 of 2022), which for the first time designated VASPs as "financial institutions" for AML/CFT purposes. This means VASPs are now subject to general AML/CFT obligations such as customer due diligence (CDD), record-keeping, and suspicious transaction reporting (STR).

aml 60% confidence

Not Adopted (Travel Rule Specifics): While VASPs are regulated, the specific requirements of the FATF Travel Rule – mandating the collection and sharing of originator and beneficiary information for virtual asset transfers – have not yet been specifically legislated or enforced. The FATF's Mutual Evaluation Report for Zimbabwe (October 2022) highlighted this as an area needing improvement, stating that measures to implement the Travel Rule were not yet in place.

aml 60% confidence

Travel Rule: There is no effective date for the Travel Rule in Zimbabwe, as the specific legislative and regulatory measures for its implementation are still pending.

aml 60% confidence

General VASP Regulation: The Money Laundering and Proceeds of Crime Amendment Act (No. 6 of 2022) became effective upon its gazetting in October 2022. This is the effective date for VASPs to be considered reporting entities under Zimbabwe's AML/CFT framework.

aml 60% confidence

Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange can operate in Zimbabwe only by obtaining a VASP license (anticipated but not yet fully operational) under the RBZ's developing framework, with mandatory local incorporation, physical presence, AML/CFT compliance, and minimum capital requirements, though specific custody segregation rules and travel-rule obligations have not yet been legislated.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?