The Global Standard That Shapes Every African Framework
Any analysis of virtual asset regulation in Africa must begin with FATF Recommendation 15. The Financial Action Task Force, the global standard-setter for anti-money laundering and counter-terrorist financing policy, updated Recommendation 15 in 2019 to bring virtual assets and virtual asset service providers explicitly within the AML/CFT regulatory perimeter.
The standard requires countries to either license or register VASPs, or prohibit virtual asset activity, and to supervise compliance with AML/CFT requirements in a risk-based manner. VASPs must implement customer due diligence, record-keeping, suspicious transaction reporting, and targeted financial sanctions requirements. They must also obtain, hold, and transmit originator and beneficiary information when making transfers, a requirement known as the Travel Rule. *(Source: FATF, 'Virtual Assets', fatf-gafi.org)*
Despite this clear international standard, FATF's own assessments have found that global implementation remains poor. Significant gaps in national frameworks create loopholes for financial crime. Africa is not an exception to this assessment globally, but several African countries are moving faster than the global average.
South Africa: The Continental Benchmark
South Africa is the most advanced regulatory jurisdiction in Africa for virtual assets and by some measures one of the more mature globally. Under the Financial Advisory and Intermediary Services Act (FAIS Act), crypto asset service providers (CASPs) must obtain a financial service provider license. AML/CFT obligations apply under the Financial Intelligence Center Act (FICA).
The South African Travel Rule took effect on April 30, 2025, with simplified requirements for transactions below approximately US$275 (ZAR 5,000). As of December 2024, the Financial Services Conduct Authority had received 420 CASP license applications and approved 248. The country was assessed as Largely Compliant with FATF Recommendation 15 as of November 2024, placing it among the top performing jurisdictions globally. *(Source: Yellow Card General Counsel report, 2025; National Treasury Kenya draft policy)*
South Africa's approach demonstrates what a mature framework looks like in practice: entity-based regulation, clear licensing requirements, defined supervisory authority, and AML/CFT integration. NFTs and miners are exempted from licensing but remain subject to AML/CFT reporting requirements under FICA.
Nigeria: Comprehensive by Design
Nigeria's virtual asset regulatory framework has developed rapidly, driven partly by the country's position as Africa's largest crypto market and partly by the pressure of operating a large informal sector that regulators were determined to bring within oversight.
The current framework rests on three pillars: the Investment and Securities Act 2025 (ISA 2025), the Securities and Exchange Commission Rules on Digital Assets Issuance, and the National Blockchain Policy 2023. VASPs must be licensed by the SEC, maintain minimum capital requirements, and comply with AML and CFT obligations. *(Source: Mondaq, 'Virtual Assets Regulation In East and West Africa', 2025)*
Nigeria's SEC has been active in enforcement. The regulatory approach is comprehensive by design, reflecting the scale of the market and the government's determination to capture tax revenue and prevent capital flight through informal crypto channels.
Kenya: Legislative Clarity in 2025
Kenya's Virtual Asset Service Providers Act, passed in October 2025, introduced a licensing regime with regulatory oversight shared between the Capital Markets Authority and the Central Bank of Kenya. The Act includes full AML/CFT provisions, directly referencing the Proceeds of Crime and Anti-Money Laundering Act and the Prevention of Terrorism Act. *(Source: Kenya Law, Virtual Asset Service Providers Act 2025)*
Supervisory powers under the Act are substantial: the relevant authority can conduct on-site inspections, compel production of documents, impose monetary and civil sanctions, and issue binding regulatory guidelines. VASPs must also comply with Travel Rule requirements for transmitting originator and beneficiary information.
Kenya's regulatory approach reflects its position as East Africa's dominant fintech market, where regulatory clarity is a competitive requirement for attracting international capital and talent.
Botswana: An Emerging Framework
Botswana's Virtual Assets Act, which came into force on January 24, 2025, establishes a licensing regime administered by the Non-Bank Financial Institutions Regulatory Authority. The Act covers virtual asset exchanges, trading platforms, custody services, and initial token offerings. NFTs are explicitly excluded from the Act's scope. *(Source: Botswana Laws, Virtual Assets Act)*
Botswana's framework is notable for its breadth: it applies to any VASP conducting business into or from Botswana, regardless of physical location. This extraterritorial reach signals regulatory seriousness and positions Botswana as a jurisdiction that intends to capture cross-border virtual asset activity.
The Varied Landscape: Rwanda, Tanzania, Uganda, and Ethiopia
East African countries present a varied picture. Rwanda and Uganda are developing frameworks but have not yet enacted dedicated VASP legislation; AML obligations may apply indirectly where VASPs engage in financial services. Tanzania has incorporated virtual assets and VASPs directly into its AML/CFT framework through amendments to existing laws, providing regulatory coverage without a dedicated VASP statute. Ethiopia maintains a prohibitionist stance, one of the few African countries to do so explicitly. *(Source: Mondaq, 2025)*
In West Africa beyond Ghana, Malawi applies AML obligations indirectly. Several other jurisdictions are in various stages of framework development, typically beginning with sandbox programs and draft guidelines before moving to primary legislation.
The Pattern Across All Frameworks
Reading across the African regulatory landscape, several consistent patterns emerge.
All maturing frameworks are activity-based rather than asset-based. They regulate what VASPs do, not what a virtual asset is. This approach is more durable as the asset landscape evolves.
AML/CFT integration is universal among functioning frameworks. Every jurisdiction that has enacted primary legislation has anchored its VASP requirements within its existing AML/CFT architecture. This is not coincidental: FATF compliance is a prerequisite for maintaining correspondent banking relationships with international financial institutions.
Dual regulatory authority is common. South Africa divides oversight between the FSCA (conduct) and the Prudential Authority (bank-related), Nigeria between the SEC and the CBN. Ghana splits responsibility between the Bank of Ghana and the Securities and Exchange Commission based on service type. This reflects the hybrid nature of virtual asset services, which span both payment and capital markets functions.
Regulatory sandboxes appear in almost every framework, reflecting regulatory humility about a rapidly evolving sector and the practical need to observe new business models before designing permanent rules.
What This Means for Businesses
For any organization providing virtual asset services in Africa, the regulatory picture has shifted fundamentally between 2022 and 2026. Operating without regulatory engagement is no longer a viable strategy in the continent's major markets.
The practical requirements are converging across jurisdictions: licensing or registration, AML/CFT program implementation, Travel Rule compliance for transfers, customer due diligence, and suspicious transaction reporting. Organizations that build these programs to the highest standard in any one jurisdiction are well-positioned to expand into others, as the underlying requirements are structurally similar even where the specific rules differ.
The window for building compliant infrastructure before enforcement intensifies is narrowing. In South Africa, enforcement is already active. In Nigeria, it has been active for several years. In Kenya, Ghana, and Botswana, licensing regimes are newly operational. The time to build compliance is before regulators are asking for it, not after.
---
*Sources: FATF, 'Virtual Assets' (fatf-gafi.org) · Mondaq, 'Virtual Assets Regulation In East and West Africa: A Regional Comparative Analysis' (2025) · Kenya Law, Virtual Asset Service Providers Act 2025 · Botswana Laws, Virtual Assets Act (2025) · National Treasury Kenya, Draft National Policy on VAs and VASPs · Yellow Card General Counsel report (2025)*