DeFi protocol frontend in Gabon
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Gabon without local incorporation, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- CEMAC AML Regulation No. 01/16-CEMAC-UMAC-CM applies — VASPs performing functions akin to traditional financial services are expected to comply — customer identification and verification using reliable independent source documents (national ID, passport, etc.)
- Ongoing due diligence on business relationships and transaction scrutiny
- Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, complex/unusually large transactions, and virtual-asset-specific source-of-funds/wealth scrutiny
- Suspicious Transaction Reports (STRs) must be filed promptly with Gabon's FIU (CENAREF) when suspicion of criminal proceeds or terrorist financing arises
- No-tipping-off prohibition applies
- Record-keeping for at least 5 years after end of business relationship or occasional transaction — includes identification documents, transaction records, account correspondence, and STR records
- If the frontend takes fees or offers services akin to traditional financial intermediation, it may be treated as a financial institution and must comply with broader CEMAC AML/CFT obligations including CDD on all users
Key Restrictions
- CEMAC Instruction n°001/GR/2021 prohibits financial institutions under BEAC supervision from dealing in crypto-assets — a DeFi frontend that is not a financial institution may operate in a legal grey area without explicit authorization
- If the frontend facilitates investment tokens (securities), a COSUMAF-approved prospectus and prior authorization for public offering may be required
- Payment tokens and stablecoins fall under BEAC jurisdiction and may be treated as electronic money, triggering additional regulation
- No specific licensing framework exists for DeFi frontends — operation depends on non-prohibition to non-financial entities, creating legal uncertainty
- Fee-taking by the frontend (e.g., swap fees, routing fees) increases likelihood of classification as a regulated financial activity under CEMAC rules
Key Risks
- Legal grey area — no specific DeFi or VASP regulation means the frontend could face future enforcement or outright ban via BEAC/CEMAC regulatory changes
- FATF-driven regulatory evolution in CEMAC zone could retroactively classify current operations as unlawful
- If the frontend does not geofence Gabon/CEMAC residents, it could inadvertently facilitate unlicensed financial services activity
- Fee collection creates risk of being classified as a financial institution — triggering BEAC prohibition on crypto activities
- Gabon's FIU (CENAREF) may assert AML/CFT jurisdiction over any entity providing crypto services to residents, regardless of whether a specific VASP license exists
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
BEAC Instruction n° 001/GR/2021 defines the operating procedures of the Centrale des Incidents de Paiement and carries no crypto-asset provision, and BEAC has issued no instruction banning crypto-assets in the CEMAC zone; the CEMAC measure on crypto-assets is Décision COBAC D-2022/071 du 6 mai 2022, which binds only institutions supervised by COBAC.
Reference: While a direct official BEAC publication link for this specific instruction can be hard to find publicly, its existence and content are widely reported by regional news outlets and financial sector analyses. This instruction effectively prohibits financial institutions under BEAC supervision from engaging in crypto-asset-related activities.
Décision COBAC D-2022/071 du 6 mai 2022 bars every COBAC-supervised institution operating in Gabon, including credit institutions, microfinance establishments and payment institutions, from acquiring, holding, transferring or converting crypto-assets and from booking them on their balance sheets, which forecloses bank-provided crypto custody; the décision binds supervised institutions only and leaves holding of crypto by private persons lawful.
Custody of digital assets for third parties is a licensed activity in Gabon: article 160 of Règlement n° 01/22/CEMAC/UMAC/CM/COSUMAF du 21 juillet 2022 places prestation de services sur actifs numériques under the COSUMAF regime, article 1 of the Règlement Général COSUMAF du 23 mai 2023 defines the prestataire de services sur actifs numériques by reference to conservation d'actifs numériques, and article 42 of Règlement n° 02/24/CEMAC/UMAC/CM du 20 décembre 2024 forbids carrying on virtual-asset service activity without prior agrément; COSUMAF has issued no PSAN agrément to date.
The instrument closing the crypto channel for Gabonese banks is Décision COBAC D-2022/071 du 6 mai 2022, taken by COBAC and not by BEAC, and non-bank operators are not in an unregulated space: the Règlement Général COSUMAF du 23 mai 2023 subjects prestataires de services sur actifs numériques to a COSUMAF agrément at articles 336 and following, and article 42 of Règlement n° 02/24/CEMAC/UMAC/CM requires prior agrément before any virtual-asset service activity is carried on.
Gabon applies the CEMAC prestataire de services sur actifs numériques regime, under which digital-asset custody is licensed by COSUMAF, and no CEMAC or COSUMAF text yet imposes a rule segregating client digital assets from a custodian's own holdings; the segregation duty would come from the COSUMAF implementing instruction for PSAN, which remains unpublished more than three years after the Règlement Général was adopted.
The absence of specific regulations, leading to a legal grey area.
The potential for future regulatory changes, which could include outright bans, strict licensing, or a more facilitative framework.
CEMAC law recognises a single undifferentiated jeton, defined at article 1 of the Règlement Général COSUMAF du 23 mai 2023 as an intangible asset representing one or more rights in digital form issued, recorded, held or transferred through a dispositif d'enregistrement électronique partagé, and it creates no category of jeton d'investissement resting on a 2000 instrument on the harmonisation of financial instruments; article 76 of Règlement n° 01/22/CEMAC/UMAC/CM/COSUMAF du 21 juillet 2022 instead brings jetons numériques within the appel public à l'épargne regime.
Evidence fact ga.licensing.payment-tokens-jetons-de-paiement-these not found (may have been renamed).
A public offering of jetons numériques in Gabon does require COSUMAF clearance, but not under any article 5: article 76 of Règlement n° 01/22/CEMAC/UMAC/CM/COSUMAF du 21 juillet 2022 applies the appel public à l'épargne regime to jetons numériques, and the procedure sits at articles 125 to 163 of the Règlement Général COSUMAF du 23 mai 2023, with the visa granted at articles 150 to 161.
Règlement n° 01/16-CEMAC-UMAC-CM du 11 avril 2016 governed AML/CFT in Gabon until the UMAC Ministerial Committee adopted Règlement n° 02/24/CEMAC/UMAC/CM at Libreville on 20 December 2024; the 2024 règlement supersedes it, defines actif virtuel and PSAV at article 2, lists PSAV among the assujettis at article 6 and requires prior agrément plus a virtual-asset travel rule at article 42.
Note: While this regulation predates FATF's specific guidance on virtual assets (Recommendation 15 and its Interpretative Note from 2018), its broad scope often means VASPs are expected to comply as "financial institutions" or similar entities if they perform functions akin to traditional financial services.
Evidence fact ga.aml.identification-and-verification not found (may have been renamed).
Individuals: Obtain and verify identity using reliable, independent source documents (e.g., national ID cards, passports, driver's licenses) for name, date of birth, place of birth, address, and nationality.
Purpose and Nature of the Business Relationship: Understand the purpose and intended nature of the business relationship or the specific transaction.
Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Enhanced Due Diligence (EDD): Apply EDD in situations identified as higher risk, including:
Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds (fiat or virtual assets) are the proceeds of a criminal activity, or are related to terrorist financing, must report its suspicions.
Suspicious transaction reports in Gabon are filed with the Agence Nationale d'Investigation Financière (ANIF), the administrative financial intelligence unit attached to the Ministry of the Economy, which receives, analyses and transmits them to the competent judicial authorities under Règlement n° 02/24/CEMAC/UMAC/CM.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been filed.
Article 39 of Règlement n° 02/24/CEMAC/UMAC/CM requires obliged entities in Gabon, including virtual-asset service providers, to keep customer identification documents and transaction records for a minimum of ten years after the account is closed or the business relationship ends, not five years.
Evidence fact ga.aml.cenaref-website-while-cenarefs-website not found (may have been renamed).
Evidence fact ga.aml.general-principle-if-virtual-asset not found (may have been renamed).
CENAREF Website: While CENAREF's website might not specifically mention "virtual assets" or "VASPs" in its publicly available texts, it is responsible for implementing AML/CFT laws that are generally aligned with FATF recommendations.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — DeFi protocol frontends can technically operate in Gabon's legal grey area because the BEAC ban only covers financial institutions, not non-financial entities, but there is no permissive licensing framework, AML obligations likely attach under CEMAC Regulation 01/16 if the frontend serves residents or takes fees, and the regulatory environment poses high ambiguity and future enforcement risk.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?