DeFi protocol frontend in Congo
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Congo without local incorporation, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification of identity using reliable, independent source documents per Instruction n°001/GRT/2022.
- For legal persons: understand ownership/control structure and identify beneficial owners.
- Collect information on the purpose and intended nature of the business relationship.
- Conduct ongoing monitoring of the business relationship and transactions.
- Apply Enhanced Due Diligence (EDD) for higher-risk customers, PEPs, cross-border relationships, complex/unusually large transactions, high-risk countries.
- Immediately report suspicious transactions (including attempted transactions) to the national Financial Intelligence Unit (FIU).
- No tipping-off: prohibited from disclosing to the customer or third parties that a suspicious transaction report has been or will be submitted.
- Maintain customer CDD records for at least 5 years after the business relationship ends.
- Maintain transaction records (domestic and international) for at least 5 years after the transaction date.
- Records must be sufficient to permit reconstruction of individual transactions and provided promptly to competent authorities upon request.
Key Restrictions
- The BEAC Circular N° 001/GR/2022 prohibits all financial institutions from engaging in, facilitating, or being exposed to cryptocurrencies — this effectively bans any on-ramp/off-ramp through the formal banking system.
- No licensed or regulated crypto exchanges can legally operate within the formal financial system.
- Financial institutions are explicitly prohibited from opening accounts for or dealing with crypto exchange platforms or service providers.
- Any DeFi frontend taking fees and routing through the banking system faces a de facto banking ban.
- Individual peer-to-peer crypto ownership is not explicitly criminalized, but conversion to/from fiat through legitimate channels is extremely difficult or impossible.
Key Risks
- Enforcement risk: BEAC/COBAC have signaled a highly restrictive posture; any formal financial link invites regulatory action against the operator or its banking partners.
- Regulatory ambiguity: The BEAC circular targets financial institutions, not individual frontend operators directly, creating legal gray area for purely non-custodial frontends that do not touch fiat or banking rails.
- No consumer protection: Users operating in Congo face fraud, scams, and financial losses without regulatory recourse.
- Any fee-taking by the frontend could be characterized as 'offering services related to cryptocurrencies' or 'facilitating cryptocurrency transactions,' both prohibited activities under the BEAC circular.
- Tax/PR exposure: Operating a frontend accessible from Congo without geofencing could be viewed as facilitating activity that the central bank has publicly condemned, creating political and reputational risk.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The prohibition applicable in the Republic of the Congo is Décision COBAC D-2022/071 du 6 mai 2022, issued by the Commission Bancaire de l'Afrique Centrale and not by BEAC; it bars COBAC-supervised institutions — credit institutions, microfinance establishments and payment institutions — from acquiring, holding, transferring, converting or booking crypto-assets, and requires them to detect such operations and report them to COBAC and BEAC, while leaving private holding of crypto by the public lawful and leaving the COSUMAF PSAN licensing regime in force.
No BEAC circular of 21 December 2022 bans crypto-assets; the cited PDF at beac.int returns HTTP 404, beac.int indexes no crypto content, and the real CEMAC measure is Décision COBAC D-2022/071 du 6 mai 2022 restricting COBAC-supervised institutions.
The prohibition binding financial institutions in the Republic of the Congo comes from Décision COBAC D-2022/071 du 6 mai 2022, which forbids COBAC-supervised establishments from acquiring, holding, transferring, converting or booking crypto-assets and obliges them to detect and report such operations to COBAC and BEAC; no BEAC circular of December 2022 exists.
Offering services related to cryptocurrencies.
Facilitating cryptocurrency transactions for clients.
Opening accounts for cryptocurrency service providers.
A community licensing route for crypto exchanges exists in the Republic of the Congo: Règlement n° 01/22/CEMAC/UMAC/CM/COSUMAF du 21 juillet 2022 and the Règlement Général COSUMAF du 23 mai 2023 require COSUMAF agrément as prestataire de services sur actifs numériques, covering custody, buy-sell against legal tender, platform operation, reception-transmission of orders, portfolio management, advice and placement, although COSUMAF has granted no PSAN agrément to date.
Décision COBAC D-2022/071 du 6 mai 2022 bars COBAC-supervised institutions in the Republic of the Congo from every crypto-asset operation and obliges them to detect and report crypto-related flows to COBAC and BEAC, which closes banking relationships with crypto exchange platforms as a consequence of the general prohibition rather than through a separate account-opening clause.
No BEAC circular restricts crypto-assets in the Republic of the Congo; the measure in force is décision COBAC D-2022/071 du 6 mai 2022, which binds COBAC-supervised institutions only, so residents of Congo-Brazzaville remain free to hold and trade crypto-assets peer-to-peer while conversion through a regulated bank, microfinance institution or payment institution is closed.
It is extremely difficult and risky for individuals to convert fiat currency into crypto or vice-versa through legitimate channels.
COSUMAF is the designated competent authority for virtual-asset service providers in the Republic of the Congo and may grant PSAN agrément under the Règlement Général du 23 mai 2023, so an exchange platform can hold a lawful community licence, and articles 91 to 93 of that règlement place virtual-asset risks inside COSUMAF's risk-based AML/CFT supervision.
No Instruction n° 001/GRT/2022 exists; BEAC numbers its instructions n° 00X/GR/YYYY and has issued no virtual-asset instrument. Virtual-asset obligations in the CEMAC zone, including the Republic of the Congo, rest on Décision COBAC D-2022/071 du 6 mai 2022, Règlement n° 01/22/CEMAC/UMAC/CM/COSUMAF du 21 juillet 2022, the Règlement Général de la COSUMAF du 23 mai 2023 and Règlement n° 02/24/CEMAC/UMAC/CM du 20 décembre 2024, whose article 6(e) makes virtual-asset service providers assujettis.
Evidence fact cg.aml.identification-and-verification not found (may have been renamed).
Evidence fact cg.aml.ongoing-due-diligence not found (may have been renamed).
Evidence fact cg.aml.enhanced-due-diligence-edd not found (may have been renamed).
Reporting Obligation: Immediately report to the national Financial Intelligence Unit (FIU) any suspicious transactions, including attempted transactions, where they know, suspect, or have reasonable grounds to suspect that funds are the proceeds of a criminal activity, or are related to terrorist financing, regardless of the amount.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that a suspicious transaction report has been or will be submitted.
Article 39 of Règlement n° 02/24/CEMAC/UMAC/CM du 20 décembre 2024, directly applicable in the Republic of the Congo, requires assujettis including virtual-asset service providers to keep identification, account and transaction records for a minimum of ten years after the account is closed or the business relationship ends, not five years.
Article 39 of Règlement n° 02/24/CEMAC/UMAC/CM du 20 décembre 2024, directly applicable in the Republic of the Congo, requires assujettis including virtual-asset service providers to keep identification, account and transaction records for a minimum of ten years after the account is closed or the business relationship ends, not five years.
Availability: Records must be sufficient to permit the reconstruction of individual transactions and to provide evidence for prosecution of criminal activity. They must be made available promptly to the competent authorities upon request.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A DeFi protocol frontend accessible in Congo is not explicitly prohibited if purely non-custodial and not touching the formal banking system, but any fee-taking, fiat on-ramps/off-ramps, or banking relationships would trigger the BEAC's de facto ban; if the operator seeks to comply, it must navigate a high licensing burden under Instruction n°001/GRT/2022 with full AML obligations, though no licensed VASP path currently exists within the formal financial system.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?