Crypto-funded debit card in Mali

No BCEAO instrument numbered 'Circular N°0000000001/M/DG/2021' exists, and the BCEAO has never issued any instrument prohibiting supervised institutions from virtual-asset activity. The BCEAO's own complete LBC/FT index and complete payment-systems index (2002-2024) contain no such text; BCEAO numbering is of the form nnn-mm-yyyy (e.g. 008-05-2015), never '/M/DG/'. As of August 2026 the BCEAO's only crypto-specific action is the C-CRYPTO drafting committee created in May 2026. The operative rule is instead La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

There is no BCEAO prohibition of cryptocurrencies for the Governor to have reiterated. BCEAO output on virtual assets consists of public risk warnings, not a prohibitory instrument; the BCEAO only began drafting a crypto framework with the C-CRYPTO committee in May 2026. La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

No July 2023 BCEAO communication on virtual assets could be located in any BCEAO index, and in any event the BCEAO maintains no prohibition to confirm. La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

True that no registration or licensing regime is operational and nothing can be applied for. False if read as meaning no legal authorisation requirement exists: La loi uniforme UMOA du 31 mars 2023 (art. 58) interdit l'exercice professionnel de l'activite de prestataire de services d'actifs virtuels sans agrement ou autorisation prealable de l'autorite competente, et l'art. 59 renvoie tout le regime PSAV a cette autorite ; aucune autorite competente n'a ete designee, de sorte qu'aucun agrement PSAV n'est obtenable ni delivre. L'instrument malien de transposition n'a pas pu etre identifie (predecesseur presume : Loi n° 2016-008 du 17 mars 2016, non verifiee).

They are not recognized as legal tender within the UEMOA zone.

'Strongly discouraged' is defensible - the BCEAO has repeatedly warned publicly about virtual-asset risks. 'Prohibited' is not: no BCEAO instrument prohibits banks, EME or SFD from virtual-asset activity, and neither the complete LBC/FT index nor the complete payment-systems index contains any such text. The binding constraint is instead the art. 58 prior-agrement requirement on PSAV activity itself, with no competent authority designated.

Operating as a payment processor might fall under existing general financial services laws if it involves traditional fiat currency transfers, but integrating crypto would likely be viewed as non-compliant with the BCEAO's directives.

No BCEAO communique numbered 'N° 006/CP/GOV/BCEAO/2018 du 21 mars 2018' could be located. The URL cited for it silently redirects to the BCEAO homepage - the established signature of a fabricated citation in this corpus - and the reference format 'CP/GOV/BCEAO' is not a BCEAO numbering convention. The substance attributed to it (virtual currencies are not legal tender and are unregulated, hence risky) is broadly right, but the instrument as cited is not verifiable. The verifiable BCEAO record on crypto as of Aug 2026 is the 8 May 2026 Dakar conference and the C-CRYPTO drafting committee.

Evidence fact ml.aml.customer-identification-and-verification not found (may have been renamed).

For natural persons: Collecting and verifying identity (e.g., name, address, date of birth, nationality, unique identification number via official documents like passport or national ID card).

For legal entities: Collecting and verifying legal name, registered address, legal form, proof of incorporation, names of directors/authorized signatories, and identification of beneficial owners.

Beneficial Ownership Identification: Identifying and verifying the natural persons who ultimately own or control the customer, or the natural person on whose behalf a transaction is being conducted.

Purpose and Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship or occasional transaction.

Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure consistency with the institution’s knowledge of the customer, their business, and risk profile.

Risk-Based Approach: Applying enhanced due diligence (EDD) for higher-risk customers (e.g., politically exposed persons - PEPs, customers from high-risk jurisdictions, or those engaged in complex/unusual transactions) and simplified due diligence (SDD) for lower-risk scenarios.

Obligation: Any transaction (regardless of amount) that an institution knows, suspects, or has reasonable grounds to suspect is related to money laundering or terrorist financing must be reported.

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that an STR has been filed or that a money laundering or terrorist financing investigation is being conducted.

Transaction Records: All transaction data, including the amount, currency, date, and details of the parties involved (originator and beneficiary), should be kept.

Customer Identification Records: Records obtained through CDD measures (copies of identification documents, account files, business correspondence) must be retained.

The retention period in Mali is ten (10) years, not five. Art. 23 of Ordonnance n.2024-011/PT-RM du 30 aout 2024 requires the assujettis to keep client-identification and transaction records 'pendant une duree de dix ans'. This mirrors art. 23 of the UMOA loi uniforme du 31 mars 2023. The five-year figure is the FATF Recommendation 11 international minimum imported in place of reading the local text.

Cellule Nationale de Traitement des Informations Financières (CENTIF): Mali's FIU, responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs).

There is no BCEAO instrument banning or prohibiting cryptocurrency activity in UEMOA; BCEAO's LBC/FT regulation index and its communiqués-de-presse index contain no such act, and the only crypto item BCEAO publishes is the 8 May 2026 Dakar conference. Nor does BCEAO sanction under the AML framework: under the uniform law as transposed by Ordonnance n°2024-011/PT-RM, administrative sanctions are imposed by the autorité de contrôle of the entity concerned (and, in Mali, targeted financial sanctions and asset freezes are ordered by arrêté of the Ministre de l'Économie et des Finances — e.g. Arrêté n°2026-0346/MEF-SG du 5 mars 2026), not by BCEAO and not by CENTIF. The real constraint on crypto activity in Mali is art. 58 of the Ordonnance plus the absence of a designated competent authority under art. 59.

Entity Targeted: Individuals or informal groups promoting and operating cryptocurrency-based investment scams or pyramid schemes. Violation Type: Fraud, swindling (escroquerie), illegal financial operations, often disguised as crypto investment opportunities. Penalty Amount: Varies depending on the scale of the fraud; can include prison sentences and financial reparations to victims. Specific public records of these amounts for crypto-specific cases in Mali are difficult to pinpoint from international sources. Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.

Outcome: A de facto ban on formal cryptocurrency operations within Mali's regulated financial sector. Financial institutions are prohibited from offering crypto services, and the public is warned about the risks and lack of regulatory protection.

Outcome: Arrests, investigations, and potential prosecutions of individuals involved in scams. Public awareness campaigns to warn citizens against unregulated crypto investment opportunities.

Businesses (Companies): If a company holds cryptocurrency as an asset and disposes of it at a gain, that gain would be considered part of the company's taxable profit and subject to the Corporate Income Tax (Impôt sur les Sociétés - IS).

Corporate Income Tax Rate: The standard corporate income tax rate in Mali is generally 30%.

Evidence fact ml.tax.standard-vat-rate-the not found (may have been renamed).

Services related to crypto: However, services performed for a fee in relation to cryptocurrencies (e.g., exchange fees charged by a platform, brokerage fees for facilitating transactions, wallet services, auditing smart contracts, etc.) would likely be considered taxable services and subject to the standard 18% VAT if the service provider is based in Mali and the service falls within the scope of VAT.

Individuals: Mali's CGI generally levies taxes on income derived from industrial, commercial, agricultural, and non-commercial activities, as well as salaries, property income, and certain capital gains.