Is Crypto Legal in Mali?

No BCEAO instrument numbered 'Circular N°0000000001/M/DG/2021' exists, and the BCEAO has never issued any instrument prohibiting supervised institutions from virtual-asset activity. The BCEAO's own complete LBC/FT index and complete payment-systems index (2002-2024) contain no such text; BCEAO numbering is of the form nnn-mm-yyyy (e.g. 008-05-2015), never '/M/DG/'. As of August 2026 the BCEAO's only crypto-specific action is the C-CRYPTO drafting committee created in May 2026. The operative rule is instead La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

There is no BCEAO prohibition of cryptocurrencies for the Governor to have reiterated. BCEAO output on virtual assets consists of public risk warnings, not a prohibitory instrument; the BCEAO only began drafting a crypto framework with the C-CRYPTO committee in May 2026. La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

No July 2023 BCEAO communication on virtual assets could be located in any BCEAO index, and in any event the BCEAO maintains no prohibition to confirm. La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

Ordinary criminal enforcement (fraud, scams) in Mali does lie with the police judiciaire and the parquet, but they are not financial regulators. In the UMOA AML/CFT architecture the FIU receiving suspicious-transaction reports is CENTIF-Mali (art. 60) and administrative sanctions are imposed by the 'autorite de controle', not by the FIU or the police (art. 182). For virtual-asset service providers specifically, La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

They are not recognized as legal tender within the UEMOA zone.

Half right. It is true that no supervisory regime is operational and that no authority actually supervises virtual-asset activity. But it is wrong to say virtual assets are 'not regulated': La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee). This is the symmetric error - the correct position is a statutory prohibition on unlicensed PSAV activity coupled with an undesignated competent authority, so nothing is obtainable and nothing is supervised.

'Strongly discouraged' is defensible - the BCEAO has repeatedly warned publicly about virtual-asset risks. 'Prohibited' is not: no BCEAO instrument prohibits banks, EME or SFD from virtual-asset activity, and neither the complete LBC/FT index nor the complete payment-systems index contains any such text. The binding constraint is instead the art. 58 prior-agrement requirement on PSAV activity itself, with no competent authority designated.

No BCEAO communique numbered 'N° 006/CP/GOV/BCEAO/2018 du 21 mars 2018' could be located. The URL cited for it silently redirects to the BCEAO homepage - the established signature of a fabricated citation in this corpus - and the reference format 'CP/GOV/BCEAO' is not a BCEAO numbering convention. The substance attributed to it (virtual currencies are not legal tender and are unregulated, hence risky) is broadly right, but the instrument as cited is not verifiable. The verifiable BCEAO record on crypto as of Aug 2026 is the 8 May 2026 Dakar conference and the C-CRYPTO drafting committee.

The conclusion (no crypto-specific licence can be obtained in Mali) is right; the stated reason is wrong. It is not that 'there is no dedicated crypto regulatory framework' in the sense of no legal requirement - La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee). So the correct statement is: an agrement is legally required and simultaneously unobtainable.

Operating as a payment processor might fall under existing general financial services laws if it involves traditional fiat currency transfers, but integrating crypto would likely be viewed as non-compliant with the BCEAO's directives.

True that no registration or licensing regime is operational and nothing can be applied for. False if read as meaning no legal authorisation requirement exists: La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

Right that this is not a deliberate light-touch approach and that operators sit outside any recognised framework. Wrong that the disallowance is merely 'implicit': under art. 58 of the UMOA uniform law the prohibition on unlicensed PSAV activity is express. La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

Capital requirements specific to crypto services.

Mali's GIABA membership is correct and it is correct that no crypto-licensing-specific AML regime is operational. But the claim that general AML law could reach virtual-asset businesses only 'by analogy' is wrong at the regional level: the UMOA uniform law of 31 March 2023 makes prestataires de services d'actifs virtuels assujettis expressly, by name, at art. 3(c), with virtual assets defined at art. 2. Whether that is in force domestically in Mali depends on a national transposition instrument that could not be identified. The closing 'would be well-advised to adhere to international best practices' is advice, not law.

GIABA is Mali's regional FATF-style body (Mali is a GIABA member, not a FATF member), but it is an assessment and typologies body, not Mali's AML/CFT authority. Mali's national financial intelligence unit is CENTIF-Mali, to which suspicious-transaction reports are made (art. 60 of the uniform law); administrative sanctions are imposed by the autorite de controle (art. 182).

Local presence mandates under a specific crypto licensing regime. If an entity were to operate legally within the traditional financial sector, it would certainly require local incorporation and presence.

Il n'existe effectivement aucune procedure operationnelle d'agrement PSAV au Mali : aucune autorite competente n'a ete designee, aucun dossier ne peut donc etre depose ni instruit. Mais la premisse « aucune licence specifique n'existe » est inexacte en droit : art. 58 de la loi uniforme UMOA du 31 mars 2023 (transposant la Directive n° 01/2023/CM/UEMOA du meme jour) : « Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente » ; art. 59 renvoie toutes les modalites a une autorite competente qu'aucun Etat membre n'a designee. L'obligation d'agrement existe donc sur le papier ; c'est son autorite d'application qui manque.

Legal Uncertainty: The activities are not formally recognized, leaving operators in a legal grey area. This could lead to sudden regulatory crackdowns, asset freezes, or legal prosecution under existing financial laws if authorities deem the activities to be encroaching on regulated financial services without authorization.

Banking Difficulties: Entities dealing with virtual assets often face severe challenges in accessing traditional banking services, as banks are bound by BCEAO directives and their own risk assessments.

Consumer Protection: Without regulation, there are no formal mechanisms for consumer redress or protection, increasing risks for users.

Des regles LBC/FT specifiques aux actifs virtuels existent bien au niveau regional : la loi uniforme UMOA du 31 mars 2023 definit l'actif virtuel (art. 2(2)) et le PSAV, y compris « la conservation et l'administration d'actifs virtuels » (art. 2(51)), et range les PSAV parmi les assujettis (art. 3(c)), avec conservation des documents pendant 10 ans (art. 23) et declarations de soupcon a la CENTIF (art. 60). Il est donc inexact de dire qu'un operateur ne serait rattrape que par le droit LBC/FT general. Reserve : l'instrument malien de transposition n'a pas pu etre identifie, de sorte que l'applicabilite interne au Mali n'est pas verifiee par fetch.

Exact sur le fond pour la monnaie electronique : l'Instruction n° 008-05-2015 du 21 mai 2015 ne contient aucune occurrence de « crypto », « actif virtuel » ou « monnaie virtuelle » et ne saurait couvrir un stablecoin ; aucun instrument BCEAO n'etablit de taxonomie de jetons. Inexact sur un point : la qualification de valeur mobiliere ne releve pas de la BCEAO mais de l'AMF-UMOA (ex-CREPMF), dont le test d'appel public a l'epargne est le test formel de l'art. 19 de l'Annexe a la Convention du 3 juillet 1996.

La notion d'« actif virtuel » est definie a l'art. 2(2) de la loi uniforme LBC/FT/FP du 31 mars 2023, adoptee par le Conseil des Ministres de l'UMOA (et non par la BCEAO), et sa definition large englobe les stablecoins. Mais aucun texte BCEAO ne « classe » les stablecoins : la BCEAO les traite au contraire comme une categorie distincte des crypto-actifs dans sa communication du 8 mai 2026 (« l'essor de crypto-actifs non regules, l'expansion rapide des stablecoins »).

Correct sur trois points : les actifs virtuels n'ont pas cours legal dans l'UEMOA (seul le franc CFA emis par la BCEAO l'a), ne beneficient d'aucune garantie de la BCEAO, et sont presentes par elle comme risques et speculatifs - la BCEAO parle elle-meme de « crypto-actifs non regules » (8 mai 2026) et son Gouverneur declarait en juillet 2026 « Ce n'est pas une monnaie. Ce n'est pas reglemente. Donc soyez prudents. » Inexact sur le dernier terme : « unregulated » est excessif, puisque art. 58 de la loi uniforme UMOA du 31 mars 2023 (transposant la Directive n° 01/2023/CM/UEMOA du meme jour) : « Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente » ; art. 59 renvoie toutes les modalites a une autorite competente qu'aucun Etat membre n'a designee.

Aucun instrument de la BCEAO n'interdit aux banques, systemes financiers decentralises ou etablissements de monnaie electronique d'exercer des activites liees aux actifs virtuels. L'index reglementaire LBC/FT de la BCEAO ne recense aucun texte de ce type, et l'Instruction n° 008-05-2015 sur la monnaie electronique ne mentionne ni « crypto », ni « actif virtuel », ni « monnaie virtuelle ». La BCEAO a emis des mises en garde, non des interdictions ; la seule regle prohibitive en vigueur est art. 58 de la loi uniforme UMOA du 31 mars 2023 (transposant la Directive n° 01/2023/CM/UEMOA du meme jour) : « Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente » ; art. 59 renvoie toutes les modalites a une autorite competente qu'aucun Etat membre n'a designee, qui vise les PSAV non agrees et non les institutions financieres.

URL (Example of a reliable source reporting it, as BCEAO archive links can be tricky, the essence is widely reported): https://www.africaintelligence.com/west-africa/2021/06/25/bceao-tightens-its-stance-on-cryptocurrencies,109670732-art (Note: While this is a news report, it accurately reflects the BCEAO's official communication. The BCEAO website's press release section (Communiqués de presse) would contain the original, but finding direct PDFs can be challenging. A direct search on bceao.int for "Communiqué 16 juin 2021 monnaies virtuelles" might yield it).

L'« Instruction N°004/2018/RB/BCEAO » n'existe pas : le format de numerotation des instructions BCEAO est nnn-mm-aaaa et jamais « /RB », et l'URL citee redirige silencieusement vers la page d'accueil de la BCEAO. Le texte reel regissant les etablissements de monnaie electronique dans l'UMOA est l'Instruction n° 008-05-2015 du 21 mai 2015 regissant les conditions et modalites d'exercice des activites des emetteurs de monnaie electronique. La conclusion accessoire (les stablecoins n'entrent pas dans ce cadre) est exacte : l'instruction ne comporte aucune occurrence de « crypto », « actif virtuel » ou « monnaie virtuelle ».

None for Stablecoins (as "Virtual Assets"): Since stablecoins are not recognized or regulated, there are no specific reserve requirements imposed by the BCEAO for them.

L'instrument cite (« Instruction N°004/2018 ») n'existe pas. Les regles reelles figurent dans l'Instruction n° 008-05-2015 du 21 mai 2015 : art. 32, les fonds recus sont « domicilies, sans delai, dans un compte exclusivement dedie a cette fin aupres d'une ou de plusieurs banques » ; art. 33, « les montants recus par les etablissements emetteurs en contrepartie des unites de monnaie electronique doivent en permanence etre superieurs ou egaux a l'encours de la monnaie electronique en circulation ». La conclusion (ce cadre ne s'applique pas aux stablecoins) est exacte.

Exact au sens ou aucun regime d'agrement propre aux emetteurs de stablecoins n'existe au Mali ni dans l'UEMOA, et aucune autorite competente n'a ete designee. Incomplet neanmoins : art. 58 de la loi uniforme UMOA du 31 mars 2023 (transposant la Directive n° 01/2023/CM/UEMOA du meme jour) : « Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente » ; art. 59 renvoie toutes les modalites a une autorite competente qu'aucun Etat membre n'a designee, et la definition du PSAV a l'art. 2(51) englobe les services lies a l'offre et a la vente d'actifs virtuels par un emetteur. L'emission de stablecoin peut donc relever de l'obligation d'agrement de l'art. 58 - obligation aujourd'hui inapplicable faute d'autorite designee.

La conclusion est correcte - un emetteur de stablecoin opererait hors du systeme financier reglemente - mais le fondement juridique invoque est faux : des « mises en garde » de la BCEAO n'ont aucune portee normative et ne peuvent etre violees. Le fondement reel est art. 58 de la loi uniforme UMOA du 31 mars 2023 (transposant la Directive n° 01/2023/CM/UEMOA du meme jour) : « Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente » ; art. 59 renvoie toutes les modalites a une autorite competente qu'aucun Etat membre n'a designee, dont la meconnaissance est ce qui rend l'activite illicite ; les sanctions relevent de l'autorite de controle (art. 182) et non de la CENTIF.

L'instrument cite n'existe pas. Le regime reel resulte de l'Instruction n° 008-05-2015 du 21 mai 2015 : art. 8, « a l'exception des banques et des etablissements financiers de paiement habilites par la loi portant reglementation bancaire, aucune structure ou etablissement ne peut exercer des activites d'emission de monnaie electronique, sans avoir ete dument agree ou autorise prealablement par la Banque Centrale » ; art. 11, « le capital social minimum d'un etablissement de monnaie electronique est de trois cents millions FCFA » (300 000 000 FCFA), integralement libere. La substance de l'enregistrement est donc juste, sa citation est fabriquee ; noter aussi l'exemption des banques et etablissements financiers de paiement, que l'enregistrement omet.

No Guaranteed Redemption Rights: Since stablecoins are not recognized as legal tender or regulated financial products, users of stablecoins have no legally guaranteed right to redeem them for fiat currency through official financial channels in Mali. Redemption would depend solely on the issuer's terms and ability, which are not supervised by the BCEAO.

None: Given the complete lack of specific stablecoin regulation, there are no specific rules or prohibitions targeting algorithmic stablecoins. Such stablecoins would fall under the general classification of "virtual assets" and be subject to the same warnings and lack of recognition by the BCEAO. The inherent risks of algorithmic stablecoins (e.g., de-pegging, volatility) would reinforce the BCEAO's general cautionary stance on virtual assets.

BCEAO Exploring CBDC: The BCEAO has announced that it is exploring the possibility of issuing a Central Bank Digital Currency (CBDC) for the UEMOA region. This exploration is part of a broader global trend by central banks.

Potential Impact on Stablecoins: If the BCEAO were to issue a CBDC, it would be the official digital form of the CFA Franc (the common currency in UEMOA). This would likely lead to an even stronger regulatory stance against private stablecoins, which could be seen as competing with the official CBDC and potentially undermining monetary sovereignty. Private stablecoins might face outright bans or extremely stringent regulations if a BCEAO CBDC were launched.

Status: As of now, no UEMOA CBDC has been launched.

La BCEAO est bien l'institut d'emission commun aux Etats membres de l'UMOA, Mali compris, et ses instructions s'imposent aux etablissements assujettis. Deux imprecisions : (i) la BCEAO edicte des instructions et decisions (numerotees nnn-mm-aaaa, ex. Instructions n° 001-03-2025 a 003-03-2025 du 18 mars 2025) tandis que les directives et reglements sont des actes du Conseil des Ministres de l'UEMOA/UMOA ; (ii) une directive n'est pas directement applicable - la Directive n° 01/2023/CM/UEMOA du 31 mars 2023 et la loi uniforme du meme jour n'ont d'effet interne qu'apres transposition par chaque Etat, ce qui est precisement le point ouvert pour le Mali.

Il n'existe pas de « Banque Centrale du Mali ». Le Mali n'a pas de banque centrale nationale : la BCEAO est l'institut d'emission commun aux huit Etats membres de l'UMOA et opere au Mali par une direction nationale (Direction nationale de la BCEAO, Bamako), qui n'est pas une banque centrale ni un regulateur distinct. Le registre officiel des institutions publiques maliennes tenu par le Secretariat General du Gouvernement ne mentionne aucun organisme de ce nom ; l'autorite nationale competente en matiere financiere est le Ministere de l'Economie et des Finances, et la cellule de renseignement financier est la CENTIF-Mali.

Le Ministere de l'Economie et des Finances existe bien au Mali (www.finances.gouv.ml, recense par le Secretariat General du Gouvernement) et c'est aupres de lui qu'est rattachee la CENTIF-Mali. En revanche l'idee qu'il « s'en remet aux directives regionales de la BCEAO » en matiere d'actifs virtuels est fausse : l'art. 59 de la loi uniforme du 31 mars 2023 renvoie expressement a l'autorite competente designee par chaque Etat membre, et une directive UEMOA requiert une transposition nationale. La designation de l'autorite competente pour les PSAV est donc une decision malienne, non un renvoi a la BCEAO - et elle n'a pas ete prise.

Faux a deux titres. D'une part il existe bien une « loi » : la loi uniforme LBC/FT/FP du 31 mars 2023 adoptee par le Conseil des Ministres de l'UMOA, doublee de la Directive n° 01/2023/CM/UEMOA du 31 mars 2023, l'une et l'autre transposees en droit interne par chaque Etat membre. D'autre part un communique de la BCEAO n'a aucune valeur normative et ne constitue pas un cadre reglementaire : les actes contraignants de la BCEAO sont ses instructions et decisions, publiees et numerotees (nnn-mm-aaaa).

Ni « Communique No. 1362/SP/BCEAO/2021 » ni « Circular No. 2021/CIR/0002/SP/BCEAO » n'existent. Aucun de ces formats ne correspond a la numerotation de la BCEAO, dont les instructions et decisions suivent le schema nnn-mm-aaaa (par exemple Instruction n° 008-05-2015 du 21 mai 2015, Instructions n° 001-03-2025 a 003-03-2025 du 18 mars 2025, Decision n° 021 du 21 decembre 2023). L'index reglementaire LBC/FT de la BCEAO ne recense aucune piece de juin 2021, et l'URL source de cet enregistrement redirige vers la page d'accueil.

Virtual assets, including cryptocurrencies, are not legal tender in the UEMOA zone.

There is no BCEAO instrument prohibiting financial institutions from virtual-asset activity. The BCEAO's own exhaustive LBC/FT regulatory index lists every UMOA AML instrument from Directive n°04/2007 through Instructions n°001-003-03-2025 and contains no such prohibition; the cited communiques page carries nothing on crypto. BCEAO created the C-CRYPTO drafting committee in May 2026 precisely because no framework exists - a standing prohibition would make that drafting exercise pointless. The correct statement is that crypto-asset activity is unregulated in the UMOA, that BCEAO has issued public risk warnings, and that Malian banks abstain as a matter of prudential caution and correspondent-banking risk, not because of any legal ban.

BCEAO has indeed warned publicly about crypto-asset risks, and its stated risk list closely matches the claim: 'crypto-actifs non reglementes, expansion rapide des stablecoins, desintermediation potentielle du systeme bancaire traditionnel, menaces croissantes de cybersecurite, risque systemique et fragmentation possible des systemes de paiement internationaux' (Dakar conference, 8 May 2026). But the warning is not carried by the communique the record cites, and it is a warning, not the accompanying 'directive'/'prohibition' the neighbouring records assert. There is no Mali-specific CENTIF or DGI warning on record.

BCEAO Official Website (Press Releases): https://www.bceao.int/fr/press-release (You may need to search this page or navigate to the relevant year/section for the specific communiqué).

No 'BCEAO directive' on virtual assets exists. The only UMOA-level directives on the BCEAO's LBC/FT index are Directive n°04/2007/CM/UEMOA (terrorism financing) and Directive n°02/2015/CM/UEMOA (AML/CFT), neither of which mentions virtual assets, and the latter was superseded by the loi uniforme of 31 March 2023. What is true, and independently established: peer-to-peer crypto trading in Mali operates entirely outside any regulated framework and carries no legal protection or recourse - because Mali has no crypto framework whatsoever, not because a directive discourages it.

Banks and other regulated financial entities in Mali are not legally forbidden from crypto-related activity: no Malian or UMOA instrument imposes such a prohibition. Mali's operative AML statute, Loi n°2016-008 du 17 mars 2016, contains no virtual-asset provisions at all - the words 'actif virtuel', 'monnaie virtuelle' and 'crypto' do not appear in it - and the BCEAO's LBC/FT index contains no prohibiting instrument. Malian banks in practice do not offer crypto services, but that is commercial and prudential abstention, not a legal ban.

The conclusion is right - no licensed or regulated crypto exchange operates in Mali and foreign platforms have no legal standing or supervision there - but the stated cause is wrong, and Mali's position differs from its UEMOA neighbours. In CI, SN, BJ and BF the transposed loi uniforme of 31 March 2023 makes unlicensed PSAV activity a statutory offence (art. 58: 'Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente'), with art. 59 deferring every operative requirement to a competent authority no state has designated. Mali, on the evidence of CENTIF-Mali's own register, has not transposed that law: its operative statute remains Loi n°2016-008 du 17 mars 2016, which has no PSAV category and no agrement requirement. So in Mali there is neither a licence to obtain nor - so far as national law goes - a statutory prohibition on operating without one: the activity is simply outside the legal perimeter. No 'official authorization' exists to be sought.

Directive n.02/2015/CM/UEMOA du 2 juillet 2015 is a real instrument but is no longer the operative AML/CFT framework. At the regional level it has been replaced by Directive n.01/2023/CM/UEMOA du 16 juin 2023 relative a la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la proliferation des armes de destruction massive, and by the UMOA loi uniforme LBC/FT/FP du 31 mars 2023. For Mali specifically the operative instrument is Ordonnance n.2024-011/PT-RM du 30 aout 2024, which transposes the 2023 uniform law and is what Malian decrees have cited since.

Full Name: Directive relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme dans les États membres de l’UEMOA. (Directive on the fight against money laundering and terrorist financing in UEMOA member states).

The 2015 directive no longer sets the foundational standard. Since 16 June 2023 the regional instrument is Directive n.01/2023/CM/UEMOA, implemented through the UMOA loi uniforme LBC/FT/FP du 31 mars 2023, and Mali transposed it by Ordonnance n.2024-011/PT-RM du 30 aout 2024. Mali's own AML statute now covers proliferation financing and virtual assets, neither of which is in the 2015 directive. Note also that Mali is a member of GIABA, the FATF-style regional body, not of the FATF itself.

No such instrument sits in Mali's AML/CFT chain. Mali's predecessor uniform law is Loi n.2016-008 du 17 mars 2016 portant Loi uniforme relative a la lutte contre le blanchiment de capitaux et le financement du terrorisme - cited verbatim in the visas of Arrete n.2024-3011/MEF-SG du 26 aout 2024, i.e. still the operative AML basis days before the new ordinance. Mali's current AML statute is Ordonnance n.2024-011/PT-RM du 30 aout 2024 portant lutte contre le blanchiment de capitaux, le financement du terrorisme et de la proliferation des armes de destruction massive (JO n. special 17 du 2 septembre 2024). Independently, the cited number/date pairing is internally impossible: Malian laws are numbered sequentially by adoption date within the year, and Loi n.2018-043 was adopted on 27 juin 2018, so a 'Loi n.2018-024' cannot bear the date 21 aout 2018. Neither 'Loi n.2018-024' nor 'Ordonnance n.2015-032/P-RM du 19 juin 2015' appears in the visas of any Malian LBC/FT instrument located.

False since 30 August 2024. Ordonnance n.2024-011/PT-RM defines 'actif virtuel' expressly at art. 2(2) ('La representation numerique d'une valeur qui peut etre echangee ou transferee par un procede numerique') and 'prestataire de services d'actifs virtuels' at art. 2(51), covering exchange fiat/VA, VA-to-VA exchange, transfer, custody and administration of virtual assets, and participation in/provision of financial services related to virtual-asset offerings. Art. 3(c) makes PSAV assujettis in their own right, and arts. 58-59 address them directly. No interpretive stretch of 'financial institution' is needed or appropriate - art. 2 defines institutions financieres separately from PSAV. The claim was accurate of the predecessor Loi n.2016-008 du 17 mars 2016 only.

For natural persons: Collecting and verifying identity (e.g., name, address, date of birth, nationality, unique identification number via official documents like passport or national ID card).

For legal entities: Collecting and verifying legal name, registered address, legal form, proof of incorporation, names of directors/authorized signatories, and identification of beneficial owners.

Beneficial Ownership Identification: Identifying and verifying the natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

Purpose and Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship or occasional transaction.

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure consistency with the institution’s knowledge of the customer, their business, and risk profile.

Risk-Based Approach: Applying enhanced due diligence (EDD) for higher-risk customers (e.g., politically exposed persons - PEPs, customers from high-risk jurisdictions, or those engaged in complex/unusual transactions) and simplified due diligence (SDD) for lower-risk scenarios.

Obligation: Any transaction (regardless of amount) that an institution knows, suspects, or has reasonable grounds to suspect is related to money laundering or terrorist financing must be reported.

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that an STR has been filed or that a money laundering or terrorist financing investigation is being conducted.

Transaction Records: All transaction data, including the amount, currency, date, and details of the parties involved (originator and beneficiary), should be kept.

Customer Identification Records: Records obtained through CDD measures (copies of identification documents, account files, business correspondence) must be retained.

The retention period in Mali is ten (10) years, not five. Art. 23 of Ordonnance n.2024-011/PT-RM du 30 aout 2024 requires the assujettis to keep client-identification and transaction records 'pendant une duree de dix ans'. This mirrors art. 23 of the UMOA loi uniforme du 31 mars 2023. The five-year figure is the FATF Recommendation 11 international minimum imported in place of reading the local text.

Cellule Nationale de Traitement des Informations Financières (CENTIF): Mali's FIU, responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs).

Mali's FIU is not CENAREF. It is the CENTIF (Cellule nationale de Traitement des Informations financieres), the standard UEMOA/francophone designation, to which art. 60 of Ordonnance n.2024-011/PT-RM du 30 aout 2024 directs suspicious-transaction declarations, and whose members are appointed by presidential decree (e.g. Decret n.2025-0006/PT-RM du 9 janvier 2025). CENAREF (Cellule Nationale des Renseignements Financiers) is the Democratic Republic of the Congo's FIU and has no role in Mali. The description of the FIU's functions is otherwise accurate; only the institution's name is wrong.

Built on the same non-existent institution: there is no 'CENAREF Mali'. Mali's FIU is the CENTIF. The record's secondary point - that no stable public website exists - happens to hold (centif.ml, centif.gouv.ml and centif-mali.org do not resolve), but the authoritative publication channel is not the Ministry of Economy and Finance or 'the UEMOA regional bodies': Malian LBC/FT instruments, including the appointment decrees of CENTIF members and the AML statute itself, are published by the Secretariat General du Gouvernement in the Journal officiel de la Republique du Mali at sgg-mali.ml.

Correct that the BCEAO is the regional central bank supervising financial institutions in the eight UMOA states including Mali, and that it has publicly urged caution on crypto-assets (it created the C-CRYPTO drafting committee in May 2026 and held the Dakar crypto-assets conference of 8 May 2026). Wrong that it has issued crypto 'guidelines': the BCEAO's own LBC/FT and payment-system registers contain no crypto-asset instrument of any kind, and there is no BCEAO prohibition either. The final proposition is correct for the right reason only since 30 August 2024: AML/CFT obligations bind virtual-asset actors in Mali because Ordonnance n.2024-011/PT-RM makes PSAV assujettis at art. 3(c) and defines them at art. 2(51) - not because of anything the BCEAO issued.

'Communique N.18/2021' does not exist. The BCEAO's own LBC/FT register lists twelve instruments - Instructions n.001-03-2025 to 003-03-2025, the loi uniforme, Decisions n.021 (21 dec. 2023) and n.003 (28 mars 2024) on thresholds, Instructions n.007 to 010-09-2017, and Directives n.02/2015 and 04/2007 - and contains no 2021 communique and no crypto-asset item at all. This is a new fabrication in the same family as the previously identified BCEAO 'Communique N.004/2020/RB' and the /RB-suffixed instructions; the BCEAO's numbering format is nnn-mm-yyyy. The claim that the BCEAO would supervise VASPs is also unfounded: art. 59 of Ordonnance n.2024-011/PT-RM defers PSAV requirements to 'les autorites competentes' without naming any, and Mali has designated none.

Role: Responsible for overall economic and financial policy, including the transposition and enforcement of AML/CFT legislation.

The symmetric art. 58 error. Correct that no VASP licence is obtainable in Mali and that operational, authorisation and prudential detail is undefined. Wrong that VASPs are merely 'implicitly covered' and that there is no explicit requirement: art. 58 of Ordonnance n.2024-011/PT-RM du 30 aout 2024 provides 'Nul ne peut se livrer a l'activite professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrement ou l'autorisation prealable de l'autorite competente', and PSAV are named assujettis at art. 3(c) with a dedicated definition at art. 2(51) including custody and administration of virtual assets. The accurate position: a statutory prohibition on unlicensed PSAV activity is in force in Mali, but art. 59 leaves every PSAV-specific requirement and sanction to 'les autorites competentes' and Mali has designated none, so no licence can in fact be obtained and no supervisor is operational.

Mali does have explicit national VASP legislation: Ordonnance n.2024-011/PT-RM du 30 aout 2024 defines actifs virtuels (art. 2(2)) and PSAV (art. 2(51)), makes PSAV assujettis (art. 3(c)) and imposes a prior-agrement requirement (art. 58), which is the substance of FATF Recommendation 15. The travel-rule half remains wrong in the other direction: the originator/beneficiary provisions are arts. 39-47 and are drafted for 'institutions financieres', a category art. 2 defines separately from PSAV, so no crypto travel rule is in force in Mali. Mali is a member of GIABA, the FATF-style regional body for West Africa, not of the FATF; the framing 'expected to adhere to international best practices' has no domestic legal force either way.

Risk and Uncertainty: Operating as a VASP in Mali carries regulatory uncertainty due to the evolving framework. It is crucial for any entity considering VASP activities to seek specific legal counsel in Mali to understand the current interpretations of existing laws and any new directives that may emerge.

Requirements: VASPs operating in Mali must screen their customers (KYC/CDD) and transactions against the consolidated UN Security Council Sanctions List. This list includes individuals and entities designated under various regimes, such as:

Al-Qaeda and ISIL (Da'esh) Sanctions Committee

DPRK (North Korea) Sanctions Committee

Other country-specific sanctions (e.g., related to Libya, Somalia, Sudan, Yemen, etc.)

Obligations: If a VASP identifies a match (a customer or transaction linked to a sanctioned individual/entity), it must:

Immediately freeze all virtual assets and funds associated with the designated person/entity.

Prohibit making any virtual assets, funds, or economic resources available to, or for the benefit of, the designated person/entity.

Report the hit to Mali's Financial Intelligence Unit (FIU), the Cellule Nationale de Traitement des Informations Financières (CENTIF).

UN Security Council Resolutions: Various resolutions mandate sanctions.

UN Security Council Sanctions Committees

Requirements: VASPs in Mali should consider screening against the EU Sanctions Map/Database, especially if they have any operational nexus, customer base, or transaction flow involving EU jurisdictions or entities. This includes:

Freezing of funds and economic resources of designated persons/entities.

Prohibition on making funds or economic resources available to them.

Half right. Asset freezing plus reporting to CENTIF is the correct mechanism for persons and entities designated under UN Security Council resolutions (uniform law of 31 March 2023, art. 41 and arts. 89-92 / 175-181; art. 177 provides for publication of freezing decisions on the CRF website). But EU restrictive measures are NOT the equivalent of UN sanctions in Mali: EU Council Regulations and Decisions have no autonomous legal force in Mali and create no Malian freezing or reporting duty. An EU-list hit with no UN-list counterpart triggers no statutory obligation in Mali - at most a commercial/correspondent-banking risk decision. The claim also presupposes a functioning VASP regime that does not exist (art. 58 prohibition, art. 59 authority never designated).

Council Regulations and Decisions: Implement EU sanctions.

EU Sanctions Map (External Action Service)

Consolidated list of persons, groups and entities subject to EU financial sanctions (Council of the EU)

They process transactions through the U.S. financial system.

Their activities involve U.S. persons or U.S.-origin goods/services.

They facilitate transactions for OFAC-sanctioned entities or individuals.

They operate in a manner that "causes" a U.S. person to violate sanctions.

No Malian or UEMOA/BCEAO instrument requires screening against OFAC's SDN List, the Sectoral Sanctions Identifications List or the Non-SDN Palestinian Legislative Council List. Those are US Treasury programmes binding on US persons and on transactions with a US nexus; they are not law in Mali. The lists that carry legal force in Mali are those derived from UN Security Council resolutions, via the UMOA uniform LBC/FT/FP law of 31 March 2023 (art. 41; arts. 89-92 and 175-181). The BCEAO's own exhaustive LBC/FT register - Instructions n. 007-09-2017 to 010-09-2017, Decisions n. 021 du 21/12/2023/CM/UMOA and n. 003 du 28/03/2024/CM, Instructions n. 001-03-2025 to 003-03-2025 - contains no OFAC-screening obligation. Separately, there are no licensed VASPs in Mali on which such a duty could bite: art. 58 prohibits unlicensed PSAV activity and art. 59 defers the rules to a competent authority that has never been designated.

Obligations: If a VASP identifies a match (a customer or transaction linked to a sanctioned individual/entity), it must:

It must block (freeze) the funds and assets.

It must prohibit all dealings with the sanctioned party.

It must report the blocked property and rejected transactions to OFAC within specific timeframes.

OFAC Sanctions Programs and Information

OFAC Specially Designated Nationals (SDN) List

Correct that the BCEAO is the regional central bank supervising financial institutions in the eight UMOA states including Mali, and that it has publicly urged caution on crypto-assets (it created the C-CRYPTO drafting committee in May 2026 and held the Dakar crypto-assets conference of 8 May 2026). Wrong that it has issued crypto 'guidelines': the BCEAO's own LBC/FT and payment-system registers contain no crypto-asset instrument of any kind, and there is no BCEAO prohibition either. The final proposition is correct for the right reason only since 30 August 2024: AML/CFT obligations bind virtual-asset actors in Mali because Ordonnance n.2024-011/PT-RM makes PSAV assujettis at art. 3(c) and defines them at art. 2(51) - not because of anything the BCEAO issued.

There is no 'Law N°2014-047/AN-RM of 16 October 2014' operating as Mali's AML/CFT statute. Mali's AML/CFT statute was Loi n°2016-008/RM du 17 mars 2016 portant loi uniforme relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (JO n°2016-20 du 13 mai 2016, p.762), which transposed Directive n°02/2015/CM/UEMOA. It has been replaced by Ordonnance n°2024-011/PT-RM du 30 août 2024 (JO Spécial n°17 du 2 septembre 2024), Mali's transposition of the UMOA loi uniforme du 31 mars 2023. The sub-claim that VASPs are covered 'under FATF guidance' as financial institutions is also wrong for the 2016 text: Loi n°2016-008 contains no reference to actifs virtuels, monnaies virtuelles or PSAV anywhere; its assujettis are enumerated in art. 5. VASP coverage in Mali dates only from the 2024 ordonnance.

While a direct online link to this specific law in English is challenging to find, it is consistently cited as the main AML/CFT law in Mali by international bodies like GIABA.

FATF Recommendations: Mali, through its membership in GIABA, is expected to implement FATF standards, including Recommendation 15 on New Technologies, which specifically covers virtual assets and VASPs.

Customer Due Diligence (CDD): Identify and verify the identity of all customers (KYC) and beneficial owners. This includes collecting names, addresses, dates of birth, etc.

Sanctions Screening: Screen customer names, addresses, and other identifiers against the UN, EU, and OFAC sanctions lists at onboarding and on an ongoing basis. For crypto, this can extend to screening associated wallet addresses using blockchain analytics tools against lists of addresses known to be associated with sanctioned entities.

Transaction Screening: Monitor transactions in real-time or near real-time for links to sanctioned entities, high-risk jurisdictions, or suspicious patterns.

Source of Funds/Wealth: For high-risk customers or large transactions, inquire about the source of funds and source of wealth to ensure they are legitimate and not from sanctioned sources.

OFAC-Sanctioned Jurisdictions: Countries like Cuba, Iran, North Korea, Syria, and specific regions (e.g., Crimea, Donetsk, Luhansk regions of Ukraine).

High-Risk Jurisdictions: Countries identified by FATF or GIABA as having strategic AML/CFT deficiencies (e.g., those on the FATF 'grey list' or 'black list'). Transactions with such jurisdictions often require enhanced due diligence.

Countries under UN/EU Embargoes: Depending on the specific sanctions regime, certain transactions with or involving individuals/entities from embargoed countries may be prohibited.

Financial Penalties: Significant fines for institutions and individuals.

Imprisonment: For individuals found guilty of money laundering, terrorist financing, or serious breaches of compliance obligations.

License Revocation/Suspension: VASPs (if licensed or registered) could lose their operating authorization.

Reputational Damage: Significant harm to the business's standing and trust.

Asset Forfeiture: Proceeds of illicit activities may be confiscated.

Mali's general AML/CFT statute is not 'Loi n°2019-005 du 25 février 2019'. The backbone was Loi n°2016-008/RM du 17 mars 2016 portant loi uniforme relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (JO n°2016-20 du 13 mai 2016, p.762), and since 30 August 2024 it is Ordonnance n°2024-011/PT-RM du 30 août 2024 portant lutte contre le blanchiment de capitaux, le financement du terrorisme et de la prolifération des armes de destruction massive (JO Spécial n°17 du 2 septembre 2024), Mali's transposition of the UMOA loi uniforme du 31 mars 2023.

The premise is wrong (there is no Malian 2019 AML law) and the conclusion is superseded. Since Ordonnance n°2024-011/PT-RM du 30 août 2024, Malian law does contain specific virtual-asset provisions: art. 2(2) defines 'actif virtuel' as 'la représentation numérique d'une valeur qui peut être échangée ou transférée par un procédé numérique'; art. 2(51) defines the prestataire de services d'actifs virtuels, expressly including 'conservation et/ou administration d'actifs virtuels ou d'instruments permettant le contrôle d'actifs virtuels'; art. 3(c) makes PSAV assujettis; art. 58 prohibits unlicensed PSAV activity. What remains true is that no competent authority has been designated under art. 59, so no licensing regime is operational and no VASP-specific Travel Rule obligation exists.

Therefore, the FATF Travel Rule has not been specifically adopted or implemented for VASPs in Mali through dedicated legislation.

The first limb is right — no VASP/Travel-Rule-specific regime has an effective date in Mali because none is operational. The second limb is wrong: the general AML/CFT instrument is not a February 2019 law. Loi n°2016-008/RM du 17 mars 2016 (JO n°2016-20 du 13 mai 2016) governed until it was replaced by Ordonnance n°2024-011/PT-RM du 30 août 2024, published in JO Spécial n°17 du 2 septembre 2024 and in force from that publication.

The conclusion is correct — no threshold triggers a virtual-asset travel-rule obligation in Mali, because no such obligation exists. The premise is wrong: VASPs are specifically regulated on paper. Ordonnance n°2024-011/PT-RM art. 2(51) defines the PSAV, art. 3(c) makes them assujettis and art. 58 forbids unlicensed PSAV activity. The reason no threshold exists is not absence of regulation but art. 59's deferral to a competent authority Mali has never designated.

The figures and the legal source are both wrong. Thresholds in Mali are not fixed by Malian decrees but by UMOA/BCEAO instruments applying directly across the Union. The cash-transaction reporting threshold to CENTIF is fifteen million (15 000 000) FCFA — Instruction n°010-09-2017, art. 1: 'Est fixé à quinze millions de francs CFA le seuil pour la déclaration des transactions en espèces'. Under the 31 March 2023 uniform law the thresholds are set by Décision n°021 du 21 décembre 2023 and Décision n°003 du 28 mars 2024 of the UMOA Council of Ministers, supplemented by BCEAO Instructions n°001-03-2025 to n°003-03-2025. There is in any event no 2019 Malian AML law from which decrees could flow.

Ordonnance n°2024-011/PT-RM du 30 août 2024, art. 3, lists among the persons subject to the ordonnance: 'c) les Prestataires de Services d'Actifs Virtuels'. Exchanges and custodial wallet providers are therefore assujettis in Mali on exactly the same statutory footing as financial institutions, and owe the full preventive obligations including the ten-year record retention of art. 23 and suspicious-transaction reporting to CENTIF under art. 60. What is absent is supervision, not designation.

Incorrect. Under Ordonnance n°2024-011/PT-RM art. 3(c), a prestataire de services d'actifs virtuels is assujetti in its own right, with no requirement that it also hold a banking or financial-institution licence. Art. 58 goes further and makes the professional exercise of PSAV activity itself conditional on a prior agrément or authorisation from the competent authority. The genuine gap is that art. 59 leaves the specific PSAV requirements and sanctions to a competent authority Mali has not designated, so the obligations are unsupervised rather than inapplicable.

Mali has no crypto travel rule and therefore no technical implementation requirements for VASPs: Ordonnance n° 2024-011/PT-RM du 30 août 2024 reproduces the UMOA uniform law's originator/beneficiary articles (arts. 39-47), which are drafted for 'institutions financières' — a category art. 2 defines separately from 'prestataire de services d'actifs virtuels'. The premise that there is 'no specific regulatory framework' for VASPs is wrong: PSAV are expressly listed among the personnes assujetties at art. 3, and are subject to CDD, 10-year record retention (art. 23) and STR obligations (art. 60).

For traditional financial institutions, the requirements typically involve maintaining records of transactions, conducting customer due diligence (CDD), and reporting suspicious transactions to the Cellule Nationale de Traitement des Informations Financières (CENTIF) – Mali's Financial Intelligence Unit.

Mali's operative AML/CFT statute is no longer any 2019 law: it is Ordonnance n° 2024-011/PT-RM du 30 août 2024 portant lutte contre le blanchiment de capitaux, le financement du terrorisme et de la prolifération des armes de destruction massive, published in JO n°2024-17 spécial du 2 septembre 2024 and taken under the habilitation of Loi n°2024-016 du 11 juillet 2024. It transposes Directive n°01/2023/CM/UEMOA du 31 mars 2023 and Décision n°04/31/03/2023/CM/UMOA. Administrative sanctions under this framework are imposed by the autorité de contrôle, not by CENTIF.

VASPs ARE explicitly designated reporting entities in Mali. Art. 3 of Ordonnance n° 2024-011/PT-RM du 30 août 2024 lists 'Prestataires de Services d'Actifs Virtuels' among the personnes assujetties alongside institutions financières and EPNFD, and art. 2(51) defines PSAV to include exchange, transfer and 'la conservation et l'administration d'actifs virtuels'. The AML obligations (CDD, 10-year retention, STRs to CENTIF) and their associated sanctions therefore apply to PSAV directly, with no need for 'loose interpretation'. What is genuinely absent is a crypto-specific travel rule and a designated competent authority under art. 59.

This law can be found on the website of CENTIF Mali (Malian Financial Intelligence Unit).

URL (example, GIABA hosts these reports): You would typically find this on the GIABA website under "Mutual Evaluations" or "Follow-Up Reports."

No BCEAO 'Communiqué N°18/2021' exists. BCEAO does not number its press releases in an N°nn/yyyy series, its communiqués-de-presse index contains no 2021 item on monnaies virtuelles or crypto-actifs, and its LBC/FT regulation index contains no virtual-asset instrument. The only crypto-related item BCEAO publishes is the Conférence internationale sur les crypto-actifs et innovations numériques of 8 May 2026. The substantive point that FCFA is the only legal tender is correct, but it rests on monetary law, not on this non-existent communiqué.

No BCEAO press release of 19 May 2021 on cryptocurrencies can be located in BCEAO's own communiqués-de-presse index, and BCEAO's LBC/FT regulation index lists no virtual-asset instrument. The claim that crypto is outside the supervision of national financial authorities is also wrong as of 30 August 2024: Ordonnance n°2024-011/PT-RM makes prestataires de services d'actifs virtuels personnes assujetties (art. 3) and forbids unlicensed PSAV activity (art. 58). BCEAO has never issued an instrument discouraging or prohibiting financial institutions from crypto activity.

Crypto custody is expressly inside Mali's AML/CFT framework. Art. 2(51) of Ordonnance n°2024-011/PT-RM defines a prestataire de services d'actifs virtuels to include 'la conservation et l'administration d'actifs virtuels', art. 3 makes PSAV assujettis, and art. 58 provides that 'Nul ne peut se livrer à l'activité professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrément ou l'autorisation préalable de l'autorité compétente.' A custodian is therefore not in an unregulated space — it is in a space where operating without an agrément is unlawful, and where art. 59 leaves the competent authority undesignated so no agrément can actually be obtained. It is also not a matter of contravening 'the spirit of BCEAO warnings'; no such BCEAO instrument exists.

Title: "Communiqué de presse sur les monnaies virtuelles" (Press Release on Virtual Currencies)

Note: Directly linking to a specific historical press release on the BCEAO site can be challenging as their structure changes. The information about the May 2021 warning is consistent across various financial news sources reporting on BCEAO's stance.

There is no obtainable custody licence in Mali, but not because there is no framework. Art. 58 of Ordonnance n°2024-011/PT-RM du 30 août 2024 prohibits carrying on PSAV activity — which art. 2(51) defines to include the custody and administration of virtual assets — without the prior agrément or authorisation of the competent authority; art. 59 then defers all PSAV-specific requirements to a competent authority that Mali has not designated. So a custody service would indeed be unauthorised, but by force of statute, not by force of BCEAO warnings, and no licence exists to apply for.

Segregation of Client Assets Rules:

No specific rules exist for the segregation of client assets for cryptocurrency custodians. This is due to the absence of a dedicated regulatory framework for crypto custody.

No specific insurance or bonding requirements are mandated for digital asset custodians.

No specific cold storage mandates or any other operational security requirements are legally defined for cryptocurrency custody in Mali.

No legal definition of a "qualified custodian" exists within the Malian or UEMOA financial regulatory framework concerning digital assets.

Legislation directly addressing virtual-asset custody is not pending — it is enacted. At regional level the UMOA loi uniforme LBC/FT/FP of 31 March 2023 (with Directive n°01/2023/CM/UEMOA and Décision n°04/31/03/2023/CM/UMOA of the same date) already defines PSAV to include the custody and administration of virtual assets. Mali transposed it by Ordonnance n° 2024-011/PT-RM du 30 août 2024, in force on publication in JO n°2024-17 spécial of 2 September 2024. Separately, BCEAO set up the C-CRYPTO drafting committee in May 2026 and held its Dakar crypto-assets conference on 8 May 2026, so regional work is ongoing rather than absent.

There is no BCEAO instrument banning or prohibiting cryptocurrency activity in UEMOA; BCEAO's LBC/FT regulation index and its communiqués-de-presse index contain no such act, and the only crypto item BCEAO publishes is the 8 May 2026 Dakar conference. Nor does BCEAO sanction under the AML framework: under the uniform law as transposed by Ordonnance n°2024-011/PT-RM, administrative sanctions are imposed by the autorité de contrôle of the entity concerned (and, in Mali, targeted financial sanctions and asset freezes are ordered by arrêté of the Ministre de l'Économie et des Finances — e.g. Arrêté n°2026-0346/MEF-SG du 5 mars 2026), not by BCEAO and not by CENTIF. The real constraint on crypto activity in Mali is art. 58 of the Ordonnance plus the absence of a designated competent authority under art. 59.