Self-custodial wallet / non-custodial software in Burkina Faso
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Burkina Faso without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- General AML/CFT laws under Law N°024-2016/AN apply to 'financial institutions' and 'designated non-financial businesses' — but a non-custodial software publisher that never holds, controls, or accesses user funds is unlikely to be captured as a 'financial institution' under current Burkinabe law.
- If the entity is somehow deemed a VASP or financial institution, CDD obligations would apply: collect name, date of birth, address, nationality, and official ID for natural persons.
- If captured: beneficial ownership identification would be required for any legal-person users.
- If captured: ongoing monitoring, risk-based approach (EDD for PEPs/high-risk, SDD for low-risk), and recordkeeping of transactions and CDD data would apply.
- If captured: suspicious transaction reports (STRs) must be filed promptly with CENTIF (Burkina Faso's FIU) for any suspected ML/TF, regardless of amount — with tipping-off prohibition and good-faith whistleblower protections.
Key Restrictions
- No specific crypto/VASP regulatory framework exists — the activity is in a legal grey area.
- The BCEAO has issued public warnings stating that cryptocurrencies are not legal tender in the UEMOA zone and are not regulated, creating reputational and banking-relationship risk.
- Regulated banks and financial institutions in the WAEMU zone will generally refuse to provide banking services to crypto-related entities due to BCEAO guidance.
- No ability to obtain formal regulatory recognition — the operator cannot obtain a license, registration, or supervisory blessing for the activity.
- Any attempt to integrate fiat on/off-ramps or payment services in XOF (CFA Franc) would trigger traditional payment-services regulation and encounter banking obstacles.
Key Risks
- Legal grey area — no specific framework means no safe harbour; a future law or BCEAO directive could retroactively or prospectively disrupt operations.
- Banking exclusion — inability to open or maintain bank accounts in the UEMOA zone for operational needs (e.g., payroll, corporate accounts).
- Enforcement risk — while current enforcement is limited to public warnings (fraud/ponzi schemes), a future FATF-aligned VASP law could impose penalties for unregistered operation.
- Media and government censorship risk — given the political environment (junta control, journalist detention), local reporting on regulatory stances may be unreliable or suppressed.
- Consumer protection exposure — users who lose private keys or suffer scams may bring civil claims; no regulatory framework provides safe-harbour or limits liability for software publishers.
- GIABA/FATF pressure — as Burkina Faso works to sustain its FATF improvements, UEMOA may implement VASP-specific AML obligations that could capture non-custodial software providers.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
No specific regulatory framework for VASPs.
A statutory licensing requirement for VASPs does exist in Burkina Faso: art. 58 of Loi n°046-2024/ALT du 30 décembre 2024 prohibits carrying on the professional activity of prestataire de services d'actifs virtuels without prior agrément or autorisation from the competent authority, and art. 3 lists PSAV among the assujettis. What is true is that the regime is not yet operational: art. 59 defers all PSAV-specific requirements to 'les autorités compétentes' and no competent authority has been designated in Burkina Faso, so no agrément can currently be applied for or granted.
Implication for VASPs: This means that entities wishing to operate as crypto exchanges, custody providers, or payment processors in Burkina Faso (or any UEMOA country) will face significant challenges, primarily the inability to obtain banking services from regulated financial institutions within the UEMOA zone. This effectively makes it extremely difficult, if not impossible, to operate legally and effectively.
Entities operating in this space do so in a legal grey area, exposed to regulatory risks, potential legal challenges, and lack of consumer protection.
No 'Loi n° 024-2016/AN du 20 mai 2016' exists. Burkina Faso's 2016 AML/CFT statute is Loi n° 016-2016/AN du 3 mai 2016 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (cited throughout the 2023 GIABA follow-up report), and it transposed UEMOA Directive n° 02/2015/CM/UEMOA rather than FATF/GIABA recommendations directly. That regime has since been replaced: Loi n° 046-2024/ALT du 30 décembre 2024 transposes the UMOA loi uniforme LBC/FT/FP of 31 March 2023 and covers virtual assets expressly, so VASP coverage no longer depends on interpreting 'financial institution' — art. 2 point 2 defines 'actif virtuel', art. 2 point 51 defines 'prestataire de services d'actifs virtuels (PSAV)', art. 3 makes PSAV assujettis, and art. 58 forbids professional PSAV activity without prior agrément or autorisation from the competent authority (no such authority has yet been designated in Burkina Faso).
VASPs are obligated to report any transaction or activity that they suspect to be related to money laundering or terrorist financing, regardless of the amount.
The name is wrong: CENTIF stands for 'Cellule Nationale de Traitement des Informations Financières', not 'Centrale Nationale' (spelled out at art. 2 point 18 of Loi n° 046-2024/ALT). The functional description is otherwise correct — CENTIF is Burkina Faso's FIU, receives declarations de soupçon (art. 60), analyses them and disseminates to law enforcement. But the last sentence overstates its role: supervisory compliance enforcement and administrative sanctions sit with each sector's 'autorité de contrôle' (art. 182 of the uniform law scheme), not with CENTIF.
BCEAO (Central Bank of West African States): Responsible for monetary policy, financial stability, and regulating banks in the UEMOA zone.
Burkina Faso DOES have a national legislative framework covering virtual assets: Loi n°046-2024/ALT du 30 décembre 2024 defines 'actif virtuel' (art. 2-2) and 'prestataire de services d'actifs virtuels' (art. 2-51), makes PSAV assujettis (art. 3), and provides at art. 58 that 'Nul ne peut se livrer à l'activité professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrément ou l'autorisation préalable de l'autorité compétente.' It is however not operational: no autorité compétente has been designated and no implementing text exists. Separately, no BCEAO instrument imposing a 'blanket prohibition' on regulated institutions facilitating virtual assets could be located, so there was no ban to 'evolve' from; BCEAO's position is that crypto-assets are not currency, not legal tender and not regulated (Governor Kassi Brou, 22 July 2026), and it created a crypto-asset regulatory drafting committee announced 8 May 2026.
BCEAO's public position is confirmed as of July 2026 — Governor Jean-Claude Kassi Brou: 'Ce n'est pas une monnaie. Ce n'est pas réglementé. Donc soyez prudents' — and BCEAO has taken no entity-specific enforcement action in Burkina Faso. But 'not regulated' now needs qualification: since 30 December 2024, Loi n° 046-2024/ALT art. 58 makes it unlawful to carry on professional PSAV activity in Burkina Faso without prior agrément or autorisation, and PSAV are assujettis to the full AML/CFT regime (art. 3). What does not exist is an operational regime: no competent authority has been designated under art. 59, so no licence can actually be obtained. BCEAO created the C-CRYPTO drafting committee and held its international crypto-assets conference in Dakar on 8 May 2026; a framework is in preparation with no published timeline.
Correct that Burkina Faso has no operational crypto framework — no licensing regime, no designated crypto regulator, no prudential or conduct rules — but no longer correct that crypto entities are undefined in national law. Loi n° 046-2024/ALT du 30 décembre 2024 defines 'actif virtuel' (art. 2 point 2) and 'prestataire de services d'actifs virtuels' (art. 2 point 51, expressly including custody), makes PSAV assujettis (art. 3), and by art. 58 prohibits professional PSAV activity without prior agrément or autorisation from the competent authority. Art. 59 defers all PSAV-specific requirements to that competent authority, which Burkina Faso has not designated — so a criminal/administrative prohibition exists on paper with no route to compliance and no supervisor to enforce it.
Nature of Reported Incidents: Any incidents related to cryptocurrencies in Burkina Faso are more likely to be:
Violation Type: N/A (warnings, not enforcement) / Operating outside regulated financial system. Penalty Amount: N/A.
GIABA membership and FSRB status are correct: FATF lists GIABA as a FATF-Style Regional Body and Burkina Faso among its members. But it is no longer accurate that there is 'no specific crypto AML/KYC framework': Loi n°046-2024/ALT du 30 décembre 2024 names prestataires de services d'actifs virtuels among the assujettis at art. 3, so the full CDD/record-keeping/STR obligations of that law apply to VASPs by name, not merely 'by expectation'. Note Burkina Faso is a GIABA member, not a FATF member.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet software publisher likely does not trigger VASP classification or AML obligations in Burkina Faso under current law, but operates in a legal grey area with no available regulatory recognition, banking access risks, and exposure to future regulatory changes.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?