← Regulations / Cote d'Ivoire / Operating Models / Custodial SaaS

Custodial wallet / SaaS in Cote d'Ivoire

Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).

Conditional AI-Generated · Unreviewed

Custodial SaaS is conditionally permitted in Cote d'Ivoire with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • CDD required under Loi n°2014-393 (as modified by Ordonnance n°2019-1089): verify identity for individuals (name, DOB, nationality, address, national ID) and legal persons (name, legal form, registration, directors, authorized representatives).
  • Beneficial ownership identification and verification required for all clients (legal persons).
  • Ongoing transaction monitoring required to ensure transactions are consistent with customer profile and risk.
  • Enhanced Due Diligence (EDD) required for PEPs, high-risk countries, complex/unusual/large transactions, non-face-to-face relationships, and transactions involving new technologies (including virtual assets).
  • Suspicious Transaction Reports (STRs) must be filed with the FIU (CELLIF) for any suspected ML/TF transactions, with no-tipping-off obligations.
  • Record-keeping: all customer identification data, account files, and business correspondence must be retained for the statutory period under the AML law.
  • If the custodial wallet service touches fiat (on/off ramps), AML obligations may require Payment Institution or Electronic Money Issuer licensing under BCEAO directives (Directive 03/2018/CM/UEMOA, Instruction 002/2019/RB/UEMOA).
  • Regional AML framework applies via Règlement n°07/2002/CM/UEMOA du 19 septembre 2002.

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender by the BCEAO and are not regulated by the central bank; BCEAO has consistently warned financial institutions and the public against engaging with crypto.
  • No specific crypto custody licensing framework exists — custody of crypto assets has no dedicated regulatory status under BCEAO.
  • If the service involves fiat currency handling, on/off-ramp, or payment initiation, it requires approval as a Payment Institution or Electronic Money Issuer (EME) from the BCEAO with significant capital requirements, local presence, and management.
  • No segregation-of-assets rules, insurance mandates, or cold-storage mandates exist specifically for crypto assets — the traditional financial segregation rules do not cover crypto.
  • Local incorporation (RCCM registration) and tax registration in Côte d'Ivoire are required.
  • No 'qualified custodian' definition exists for digital assets in this jurisdiction.

Key Risks

  • Regulatory ambiguity: no specific VASP or custody framework exists, leaving operators exposed to BCEAO enforcement based on its anti-crypto communiqués.
  • Banking friction: Regulated banks (under BCEAO) are discouraged from servicing crypto businesses, creating operational difficulties for fiat on/off ramps.
  • FATF monitoring exposure: Côte d'Ivoire is under increased FATF monitoring (October 2025), which may result in rapidly evolving regulatory obligations with limited transition periods.
  • Enforcement risk from BCEAO: BCEAO has publicly warned against crypto and may treat custodial wallet services as facilitating unregulated financial activity, potentially triggering administrative or criminal liability.
  • No asset segregation or insurance requirements for crypto means customer funds may be at risk in the event of insolvency or hack, creating consumer protection / PR exposure.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

custody 80% confidence

The BCEAO's official website (https://www.bceao.int/) designates its "Publications" and "News" sections, primarily in French, as the official channels for updates on its stance regarding digital currencies. No direct "custody regulation" document exists on the site as of this date.

custody 85% confidence

There are no specific BCEAO licensing requirements for crypto custody, as cryptocurrencies are not recognized or regulated by the BCEAO. However, entities engaged in activities that intersect with traditional financial services (e.g., handling fiat currency, money transfers, or operating as a bank or payment institution) are subject to existing WAEMU financial licensing requirements, including AML/KYC obligations under the BCEAO's regulatory framework. National-level business licensing (e.g., registration with the Commercial Court in Côte d'Ivoire) also applies.

custody 80% confidence

The BCEAO's regulatory framework does not include specific rules for the segregation of cryptocurrency assets. While BCEAO regulations mandate segregation for fiduciaires in the traditional financial system (e.g., for securities maintained by investment service providers), these regulations explicitly exclude digital assets not recognized as financial instruments. Entities holding crypto assets may still be subject to general consumer protection or business contract laws at the national level in Côte d'Ivoire, but no specific segregation mandate from the BCEAO exists.

custody 85% confidence

The BCEAO has not issued any mandates requiring insurance or bonding for digital asset custodians. This is consistent with the broader lack of regulation for crypto assets. However, entities that also operate as traditional financial institutions may be subject to existing insurance/bonding requirements for their licensed activities (e.g., operational risk insurance for banks), but these do not specifically cover crypto custody. The absence of such protections increases risk for users in the event of loss, theft, or custodian insolvency.

custody 85% confidence

The BCEAO has not issued any specific mandates for cold storage or any other method of storing digital assets. This reflects the broader absence of a regulated crypto custody framework. In contrast, traditional financial institutions are subject to BCEAO prudential rules for the safekeeping of physical assets (e.g., cash in vaults, securities held by depositories), but no equivalent exists for unregulated digital assets.

custody 90% confidence

No specific definition for crypto assets. The concept of a "qualified custodian" as defined in jurisdictions like the US (e.g., under the Advisers Act) does not exist for digital assets in Cote d'Ivoire, as there's no framework to define or regulate such entities.

licensing 80% confidence

Règlement n° 06/2024/CM/UEMOA is real (signed at Bamako on 20 December 2024, relatif aux relations financières extérieures des Etats membres de l'UEMOA, applied from 1 August 2025 through 15 BCEAO instructions n°01 to 15/07/2025/RFE), but it is a foreign-exchange/external-settlements instrument and contains no rules on actifs virtuels or crypto-actifs. It does not create any virtual-asset framework. The only virtual-asset rule binding in Côte d'Ivoire is the AML/CFT layer: the UMOA uniform law of 31 March 2023, transposed nationally by Ordonnance n° 2023-875 du 23 novembre 2023, which defines 'actif virtuel' (art. 2, 2°) and 'prestataire de services d'actifs virtuels' (art. 2, 51°) and makes PSAV assujettis (art. 3, c). No competent authority has been designated, so no licensing regime is operational.

licensing 80% confidence

There is no BCEAO licence category for virtual-asset service providers. BCEAO agrément as an établissement de monnaie électronique (Instruction n°008-05-2015 du 21 mai 2015, art. 8; minimum capital 300,000,000 FCFA, art. 11) or as a payment institution (Instruction n°001-01-2024 du 23 janvier 2024) is required only where the firm actually issues e-money or provides payment services; neither instrument mentions crypto-actifs or actifs virtuels. A crypto exchange as such cannot obtain, and is not required to hold, either licence.

licensing 80% confidence

No 'Directive n° 03/2018/CM/UEMOA on the harmonisation of payment services regulation' could be located in any BCEAO or UEMOA source; the BCEAO compendium chapter on payment systems and instruments lists no 2018 directive (its instruments are Règlement n°15/2002/CM/UEMOA, Directive n°08/2002/CM/UEMOA, Instruction n°01/2003/SP, Instruction n°008-05-2015 and related texts). Payment-institution regulation in the UMOA is set by Instruction n°001-01-2024 du 23 janvier 2024.

licensing 80% confidence

No 'Instruction n° 002/2019/RB/UEMOA' exists; the citation format ('/RB/UEMOA') is not BCEAO's, which numbers instructions n°00X-MM-YYYY. Approval of e-money issuers is governed by Instruction n°008-05-2015 du 21 mai 2015 (art. 8 agrément préalable, art. 11 capital 300 million FCFA) and of payment institutions by Instruction n°001-01-2024 du 23 janvier 2024.

licensing 80% confidence

Required Compliance: Entities, even if not explicitly licensed for crypto, should adhere to general AML/CFT obligations if they deal with financial transactions. Once a specific VASP framework is established, these will be mandatory.

licensing 80% confidence

Directive n° 02/2015/CM/UEMOA du 2 juillet 2015 existed but has been superseded by the UMOA Loi uniforme relative à la lutte contre le blanchiment de capitaux, le financement du terrorisme et le financement de la prolifération du 31 mars 2023. In Côte d'Ivoire the operative national text is Ordonnance n° 2023-875 du 23 novembre 2023, which transposes that uniform law (definitions of actif virtuel and PSAV at art. 2, 2° and 51°; PSAV as assujettis at art. 3, c; ten-year record retention at art. 23; suspicious-transaction reporting to CENTIF).

licensing 50% confidence

Required Registration: Registration with the commercial registry (RCCM - Registre du Commerce et du Crédit Mobilier) and relevant tax authorities in Cote d'Ivoire.

licensing 80% confidence

Capital requirements (significant).

licensing 80% confidence

Local presence and management.

aml 80% confidence

No Ivorian AML/CFT instrument numbered 'Ordonnance n° 2019-1089 du 18 décembre 2019' or 'Loi n° 2014-393 du 20 juin 2014' exists. Côte d'Ivoire's AML/CFT statutory chain is: Loi n° 2005-554 du 2 décembre 2005 → Loi n° 2016-992 du 14 novembre 2016 relative à la lutte contre le blanchiment des capitaux et le financement du terrorisme → Ordonnance n° 2023-875 du 23 novembre 2023 relative à la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la prolifération des armes de destruction massive, which is Côte d'Ivoire's transposition of the UMOA Loi uniforme LBC/FT/FP du 31 mars 2023.

aml 80% confidence

Under Ordonnance n° 2023-875 du 23 novembre 2023, PSAV (prestataires de services d'actifs virtuels) are named expressly: art. 2(2) defines 'actif virtuel', art. 2(51) defines PSAV — covering exchange virtual-asset/fiat, exchange between virtual assets, transfer, 'conservation et/ou administration d'actifs virtuels' and participation in issuer offers — and art. 3 lists PSAV alongside institutions financières and EPNFD (DNFBPs) as assujettis. VASPs are therefore explicitly named, not swept in by analogy.

aml 80% confidence

The 2002 UEMOA anti-money-laundering instrument no longer forms part of the applicable framework. The regional chain now runs: Directive n° 04/2007/CM/UEMOA du 4 juillet 2007 (financement du terrorisme) → Directive n° 02/2015/CM/UEMOA du 2 juillet 2015 → Loi uniforme LBC/FT/FP adoptée par le Conseil des Ministres de l'UMOA le 31 mars 2023, complétée par la Décision n° 021/CM/UMOA du 21 décembre 2023 et la Décision n° 003/CM/UMOA du 28 mars 2024 (seuils) et les Instructions BCEAO n° 001-03-2025 à 003-03-2025 du 18 mars 2025. In Côte d'Ivoire the applicable text is Ordonnance n° 2023-875 du 23 novembre 2023.

Evidence fact ci.aml.identification-and-verification-of-identity not found (may have been renamed).

aml 80% confidence

For Legal Persons/Entities (e.g., businesses): Obtaining and verifying the company's name, legal form, address of registered office, registration number, articles of incorporation, bylaws, and identifying the directors and persons authorized to represent the legal person.

aml 80% confidence

Correct in substance but imprecise on the threshold: Ordonnance n° 2023-875, art. 2(12), defines the bénéficiaire effectif as the natural person who ultimately owns or controls the client, and for companies as a person holding, directly or indirectly, 'plus de vingt-cinq pour cent du capital' — i.e. *more than* 25%, not '25% or more'. Côte d'Ivoire additionally created a beneficial-ownership register by Loi n° 2024-362 du 11 juin 2024, with access rules set by Décret n° 2024-583 du 26 juin 2024.

aml 80% confidence

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the obliged entity's knowledge of the customer, their business, and risk profile.

aml 80% confidence

Enhanced Due Diligence (EDD): Applying EDD measures in higher-risk situations, including:

enforcement 80% confidence

Entity Targeted: General public and financial institutions operating within the UEMOA zone (including Côte d'Ivoire). Violation Type: While not a "violation" in the traditional sense, the BCEAO's consistent stance warns against the use, holding, or facilitation of transactions involving cryptocurrencies, emphasizing their speculative nature, lack of regulatory oversight, and potential for fraud and money laundering. It effectively "enforces" a non-recognition policy. Penalty Amount: Not applicable, as this is a general regulatory stance and warning, not a specific penalty against an entity. Outcome: A clear declaration that cryptocurrencies are not legal tender, are not regulated, and pose significant risks. Financial institutions are generally dissuaded from engaging with them. This discourages formal crypto operations.

enforcement 80% confidence

Outcome: A clear declaration that cryptocurrencies are not legal tender, are not regulated, and pose significant risks. Financial institutions are generally dissuaded from engaging with them. This discourages formal crypto operations.

licensing 80% confidence

Côte d'Ivoire is not a FATF member; it is a GIABA member and is assessed by GIABA. Its second-round mutual evaluation was conducted by GIABA (on-site visit 6-24 June 2022, MER adopted 2023), not by an IMF-led team, and has been followed by three enhanced follow-up reports (2024, 2025, 2026). Côte d'Ivoire was under FATF increased monitoring during 2025 — it is on the EU high-risk third-country list from 5 August 2025 (Commission Delegated Regulation (EU) 2025/1184), which mirrors the FATF grey list, and it was not among the countries de-listed at the October 2025 plenary (Burkina Faso, Mozambique, Nigeria, South Africa). No evidence was found that its FATF action plan includes VASP regulation; the UEMOA-level VASP framework is still only in drafting (BCEAO C-CRYPTO committee, May 2026).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — custodial wallet/SaaS operations are possible in Côte d'Ivoire only if structured to avoid pure crypto-custody (which has no framework) and instead licensed as a Payment Institution or Electronic Money Issuer under BCEAO directives if the service touches fiat; general AML/CFT obligations under Ordonnance n°2019-1089 apply, but no specific crypto custody licensing, segregation, insurance, or qualified-custodian rules exist, creating significant regulatory ambiguity and enforcement risk.

Questions this verdict aims to answer

  • What custody license / qualified-custodian status applies?
  • What segregation, insurance, and proof-of-reserves rules apply?
  • What AML obligations attach to the SaaS vs the white-label client?