RESEARCH: Mozambique Cryptocurrency and Digital Asset Travel-Rule Regulatory Requirements

Executive Summary

• As of January 2025, zero virtual asset service providers (VASPs) are licensed, registered, or authorized by any Mozambican authority to conduct cryptocurrency exchange, custody, transfer, or related services. Any entity operating in this space does so without official approval. [Lei n.º 15/2013 (Lei das Instituições de Crédito e Sociedades Financeiras), Art. 12–15; BoM Licensing Register (consulted Jan 2025); ESAAMLG Mutual Evaluation Report (MER) Mozambique, 2022, ¶247]
• Mozambique has not enacted any specific cryptocurrency or digital asset legislation, and no dedicated regulatory framework for virtual assets exists as of the 2025–2026 period. The primary financial legal framework comprises the Lei Orgânica do Banco de Moçambique (Lei n.º 1/2013, de 18 de Janeiro), the Lei das Instituições de Crédito e Sociedades Financeiras (Lei n.º 15/2013, de 12 de Agosto) (hereafter "Financial Institutions Law"), and the Lei de Prevenção e Combate ao Branqueamento de Capitais e Financiamento do Terrorismo (Lei n.º 14/2013, de 12 de Agosto) (hereafter "AML/CFT Law"), none of which define or regulate virtual assets. [Boletim da República, I Série, Nos. 3, 32, 33 (2013); BoM "Avisos e Circulares" database search 2018–2025: no results for "cripto", "ativo virtual", "VASP", "virtual asset"]
• No Mozambican authority has been designated as the primary regulator for cryptocurrency activities. The Banco de Moçambique (BoM) is the central bank and prudential supervisor for credit institutions and payment systems; the Gabinete de Informação Financeira (GIFi), established under Law 14/2013 Art. 20, is the financial intelligence unit (FIU); and the Comissão do Mercado de Valores Mobiliários (CMVM), created under the Securities Market Law, regulates securities — but none has issued binding rules on VASPs. [Lei n.º 1/2013 Arts. 5, 15; Lei n.º 15/2013 Art. 3; Lei n.º 14/2013 Art. 20; CMVM enabling law]
• The FATF travel rule (Recommendation 16) and VASP regulatory requirements (Recommendation 15) have not been transposed into Mozambican law. Mozambique's ESAAMLG 2nd Round Mutual Evaluation Report (adopted Sept 2022) rated the country Partially Compliant (PC) on Rec. 15 and PC on Rec. 16, noting the absence of a VASP framework and travel-rule implementation. Mozambique was placed on the FATF "grey list" (Jurisdictions under Increased Monitoring) in Oct 2022 and removed in Feb 2024 after progress on its action plan, but the VASP gap remains unaddressed. [ESAAMLG MER Mozambique 2022, pp. 89–94, 112–118; FATF Public Statements Oct 2022, Feb 2024]
• No licensing regime exists for cryptocurrency exchanges, custodians, or other digital asset businesses. The Financial Institutions Law requires licensing for banks, payment institutions, and electronic money institutions (EMIs), with minimum capital of MZN 50 million (~€700,000 / $760,000) for payment institutions and MZN 100 million (~€1.4M / $1.5M) for EMIs (BoM Notice 6/GBM/2018), but its definitions do not extend to VASPs. [Lei n.º 15/2013 Arts. 12–15, 45–48; Aviso 6/GBM/2018]
• The practical reality is that cryptocurrency businesses operate in a regulatory void: no licensing pathway, no AML/CFT obligations specific to virtual assets, no tax guidance, and no enforcement precedent. General financial laws (Financial Institutions Law Art. 45, AML/CFT Law Art. 3) may implicitly prohibit unlicensed financial activity, but no prosecutorial guidance or case law clarifies application to crypto. [Lei n.º 15/2013 Art. 45; Lei n.º 14/2013 Art. 3; BoM sanction powers Art. 112–115; GIFi Annual Reports 2020–2023: no crypto-related STRs or enforcement]

Regulatory Framework

• The Banco de Moçambique (BoM), established under Lei Orgânica do Banco de Moçambique (Lei n.º 1/2013, de 18 de Janeiro), is the central bank and primary financial regulator. It supervises credit institutions, payment systems, and EMIs under the Financial Institutions Law (Lei n.º 15/2013, de 12 de Agosto). BoM has not issued any regulation, circular, notice, or guideline specifically addressing cryptocurrency, digital assets, or VASPs. A search of the BoM "Avisos e Circulares" database (2018–2025) yields zero results for "criptomoeda", "ativo virtual", "virtual asset", "VASP", or "blockchain". [Lei n.º 1/2013 Arts. 5, 15, 35; Lei n.º 15/2013 Arts. 3, 45; BoM website "Avisos e Circulares" section, consulted Jan 2025]
• The Financial Institutions Law (Lei n.º 15/2013) defines "instituições de crédito" and "sociedades financeiras" (Art. 2) and requires BoM authorization for any entity conducting "operações financeiras" (Art. 12). Its definitions do not mention virtual assets, cryptocurrency, or distributed ledger technology. No amendment has extended its scope. [Lei n.º 15/2013 Arts. 2, 12, 45; Boletim da República I Série No. 32 (2013)]
• Mozambique is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), a FATF-style regional body. The ESAAMLG 2nd Round Mutual Evaluation Report (MER) for Mozambique (adopted Sept 2022, published 2023) explicitly states: "Mozambique has not yet implemented a regulatory framework for virtual assets or VASPs" (¶247) and "Recommendation 15 requirements for VASPs are not met" (¶251). The MER rated Mozambique Partially Compliant on Rec. 15 (VASPs) and Partially Compliant on Rec. 16 (Wire Transfers/Travel Rule), citing the absence of VASP licensing, supervision, and travel-rule transposition. [ESAAMLG MER Mozambique 2022, ¶¶247–255, 278–285]
• No law, decree, or official gazette (Boletim da República) publication has been identified that addresses FATF Recommendation 15 (new technologies/VASPs) or the FATF travel rule (Recommendation 16) as applied to virtual assets. A systematic search of the Boletim da República (2013–2025) and the Legislação de Moçambique legal database confirms no such instrument. [Boletim da República search via Imprensa Nacional de Moçambique; Legislação de Moçambique database, consulted Jan 2025]
• The Comissão do Mercado de Valores Mobiliários (CMVM), established under the Securities Market Law, regulates traditional securities, collective investment undertakings, and public offers. It has not extended its jurisdiction to initial coin offerings (ICOs), security tokens, or digital securities, and has issued no public warnings or circulars on crypto assets. [CMVM enabling law; CMVM "Comunicados e Alertas" database 2018–2025: no crypto-related entries]
• The Gabinete de Informação Financeira (GIFi), Mozambique's FIU established under Law 14/2013 Art. 20, receives suspicious transaction reports (STRs) from reporting entities listed in Art. 3 (banks, insurers, money remitters, casinos, etc.). VASPs are not listed as reporting entities, and GIFi has not issued guidance bringing them within scope. GIFi Annual Reports (2020–2023) record zero STRs related to virtual assets. [Lei n.º 14/2013 Arts. 3, 20, 25–28; GIFi Relatórios Anuais 2020–2023]
• Mozambique's AML/CFT framework is based on Law No. 14/2013 of 12 August and its amendments (Law 11/2019, Law 6/2022), but these laws do not contain specific provisions for virtual assets or VASPs. The definition of "entidades obrigadas" (obliged entities) in Art. 3 does not include VASPs. [Lei n.º 14/2013 Arts. 3, 25; Lei n.º 11/2019; Lei n.º 6/2022]
• No bilateral or multilateral agreements require Mozambique to implement the FATF travel rule for virtual asset transfers beyond its FATF/ESAAMLG membership obligations. [ESAAMLG MER 2022, Ch. IV; FATF Methodology 2022]
• Mozambique's regulatory approach to financial innovation remains oriented toward traditional banking and payment systems. No regulatory sandbox, innovation hub, or fintech working group has been established by BoM. BoM's Strategic Plan 2020–2024 references "modernização do sistema de pagamentos" but does not mention fintech, blockchain, or virtual assets. [BoM Plano Estratégico 2020–2024; BoM "Gabinete de Inovação" — no such office exists per BoM organogram 2024]

Licensing Requirements

• No licensing regime exists for VASPs (cryptocurrency exchanges, wallet providers, custodians, transfer services, or any other virtual asset service provider) in Mozambique. This is the single definitive statement; all other sections cross-reference this fact.
• The Financial Institutions Law (Lei n.º 15/2013) requires licensing for:
  • Banks (minimum capital MZN 1.5 billion / ~€21M / $23M)
  • Payment institutions (minimum capital MZN 50 million / ~€700,000 / $760,000 per Aviso 6/GBM/2018)
  • Electronic money institutions (minimum capital MZN 100 million / ~€1.4M / $1.5M per Aviso 6/GBM/2018)
  • Microbanks, credit unions, and other financial societies Its definitions (Art. 2) and licensing provisions (Arts. 12–15, 45–48) do not extend to VASPs. [Lei n.º 15/2013 Arts. 2, 12–15, 45–48; Aviso 6/GBM/2018]
• Zero entities have been licensed, registered, or otherwise authorized by any Mozambican authority to conduct VASP activities. The BoM public register of licensed institutions (updated monthly) lists only credit institutions, payment institutions, EMIs, and foreign exchange bureaus — no VASP category exists. [BoM "Lista de Instituições Licenciadas", Jan 2025]
• No application process, forms, fees, or structural requirements (local presence, board composition, corporate governance) exist for VASPs because no legal basis for such requirements exists. [Lei n.º 15/2013; BoM licensing guidelines for payment institutions/EMIs — no VASP analogue]
• No timeline for license approval/denial exists for cryptocurrency activities.
• No grandfathering provisions or transitional arrangements have been made for existing cryptocurrency businesses, because the legal framework does not acknowledge their existence.
• The absence of a VASP licensing framework contrasts with the comprehensive licensing regime for traditional financial institutions under Lei n.º 15/2013 and BoM supervisory framework.

AML/CFT Obligations

• Existing AML/CFT obligations under Law 14/2013 apply only to "entidades obrigadas" listed in Art. 3 (banks, other credit institutions, payment institutions, EMIs, insurers, securities firms, money remitters, casinos, real estate agents, precious metals dealers, lawyers/notaries/accountants in certain transactions, etc.). VASPs are not included.
• Customer due diligence (CDD) requirements (Art. 25), including identification, verification, beneficial ownership identification, and understanding the nature of the business relationship, are mandatory for listed obliged entities only. No CDD obligations have been extended to VASPs.
• Enhanced due diligence (EDD) for politically exposed persons (PEPs) (Art. 26) applies to obliged entities only; no equivalent for VASPs.
• Suspicious transaction reporting (STR) obligations (Art. 28) require obliged entities to report to GIFi without delay. GIFi's reporting portal and forms do not accommodate VASPs. GIFi Annual Reports 2020–2023 show zero VASP-related STRs.
• Record retention requirements (Art. 30): obliged entities must retain CDD and transaction records for 10 years after relationship ends/transaction completed. No such requirement exists for VASPs.
• Beneficial ownership identification (Art. 25(2)) applies to corporate accounts for obliged entities only.
• FATF Travel Rule (Rec. 16) implementation: Law 14/2013 Art. 29 requires obliged entities to include originator/beneficiary information in wire transfers (implementing Rec. 16 for traditional wire transfers), but this does not apply to virtual asset transfers because VASPs are not obliged entities. No threshold has been set for VA transfers.
• GIFi supervisory role: GIFi monitors compliance of obliged entities (Law 14/2013 Art. 20) but has no mandate over VASPs. No GIFi guidance, circular, or notice addresses virtual assets.
• No AML/KYC compliance obligations specific to virtual assets have been imposed. A cryptocurrency business operating in Mozambique has no statutory AML/CFT duties beyond general commercial law (Código Comercial) and tax law.

Enforcement Actions

• No enforcement actions have been identified against any VASP or cryptocurrency business in Mozambique, because no specific prohibition or regulation exists to be enforced, and no entity is licensed or registered as a VASP.
• The BoM has sanction powers under Financial Institutions Law Arts. 112–115 (warnings, fines up to 5% of own funds, suspension/revocation of license, prohibition from management roles) but these apply only to licensed institutions. No BoM sanction decision references cryptocurrency.
• GIFi enforcement: GIFi may impose administrative fines for AML/CFT violations (Law 14/2013 Art. 35) but only against obliged entities. No GIFi enforcement action involves virtual assets.
• Criminal provisions: Law 14/2013 Arts. 38–40 criminalize money laundering and terrorist financing; Penal Code (Código Penal, Lei n.º 35/2014) Arts. 298–300 cover unlicensed banking/financial activity. No arrests, prosecutions, or convictions under these provisions for cryptocurrency activity have been documented in court records (Tribunal Judicial da Província de Maputo, Supremo Tribunal de Justiça jurisprudence databases 2018–2025).
• No court cases or administrative rulings interpret or apply Mozambican law to digital assets. The legal status of cryptocurrencies (property, currency, commodity, security) is entirely unexamined by the judiciary.
• Practical risk: General financial crime laws (unlicensed activity under Financial Institutions Law Art. 45, money laundering under Law 14/2013) could be applied to crypto businesses, but absence of guidance creates unpredictability.

Tax Treatment

• No tax guidance has been issued for virtual assets by the Autoridade Tributária de Moçambique (AT). No rulings, circulars, "Ofícios Circulados", or public consultations address crypto.
• Corporate Income Tax (IRPC — Imposto sobre o Rendimento de Pessoas Coletivas), governed by Código do IRPC (Decreto n.º 34/2007, amended by Lei n.º 16/2014, Lei n.º 3/2019), taxes worldwide income of resident companies at 32%. No provision addresses cryptocurrency gains, mining income, staking rewards, or token sales. Unclear whether gains would be treated as business income (tributável) or capital gains (also tributável at 32% for companies).
• Personal Income Tax (IRPS — Imposto sobre o Rendimento de Pessoas Singulares), governed by Código do IRPS (Lei n.º 33/2007, amended by Lei n.º 17/2014, Lei n.º 3/2019), applies progressive rates up to 32%. No guidance on crypto trading, mining, or staking for individuals.
• Value Added Tax (IVA — Imposto sobre o Valor Acrescentado), governed by Código do IVA (Decreto n.º 12/2017, amended by Lei n.º 3/2019), standard rate 17%. VAT rules on digital services (Art. 7) and electronic transactions may technically apply to some crypto-related services (e.g., exchange fees), but no explicit guidance connects IVA law to virtual assets. Place-of-supply rules for B2B/B2C digital services (Art. 7) are untested for crypto.
• Capital gains tax: No separate capital gains regime; gains generally folded into IRPC/IRPS taxable income.
• Withholding tax: No rules for crypto payments, airdrops, or DeFi yield.
• Transfer pricing / thin capitalization: General rules (IRPC Art. 63, Regulamento de Preços de Transferência) could apply to related-party crypto transactions but untested.
• The lack of tax guidance creates significant uncertainty; businesses cannot determine filing obligations, tax base, or compliance requirements with confidence.

Key Gaps & Risks

• Complete regulatory void: No law, regulation, or official guidance addresses legality, licensing, or oversight of virtual assets. [Lei n.º 15/2013; Lei n.º 14/2013; BoM circulars search; Boletim da República search]
• FATF travel rule not implemented for VAs: No legal obligation for VASPs to collect, verify, or transmit originator/beneficiary information. ESAAMLG MER 2022 rates Rec. 16 PC specifically due to this gap. [ESAAMLG MER 2022 ¶¶278–285]
• Retroactive regulation risk: Future regulation could apply broad interpretations of existing financial laws (Financial Institutions Law Art. 45 — unlicensed activity; AML/CFT Law Art. 3 — obliged entity definition) to past crypto activity. No legal certainty.
• No licensing pathway: Legitimate VASPs cannot obtain authorization, creating reputational/legal uncertainty for operators and customers. Contrast with payment institution/EMI licensing (clear process, 60–90 day review per BoM guidelines).
• Banking access risk: Mozambican banks (e.g., Millennium bim, BCI, Standard Bank Moçambique) apply internal AML policies aligned with BoM/GIFi expectations; likely to refuse or terminate accounts for unlicensed crypto businesses due to regulatory ambiguity and FATF Rec. 15 expectations.
• ESAAMLG/FATF compliance risk: Despite grey-list removal (Feb 2024), Mozambique's post-observation period requires demonstrating effective VASP supervision. Continued inaction risks re-listing. [FATF Feb 2024 statement; ESAAMLG follow-up process]
• Zero enforcement precedent: No guidance on how authorities would treat violations, creating unpredictability.
• Tax compliance risk: Miners, traders, payment processors cannot determine IRPC/IRPS/IVA obligations; risk of penalties under general tax law (Lei n.º 3/2019 — Tax Procedure Code) for non-filing/underpayment.
• Interpretive uncertainty on travel-rule-equivalent provisions: Law 14/2013 Arts. 29 (wire transfer info), 31 (international cooperation), 32 (information exchange) could theoretically be argued to apply to VA transfers by analogy, but no authority has opined.
• No regulatory engagement channels: No BoM fintech office, CMVM innovation hub, or GIFi VASP desk. No policy dialogue initiated per public records (BoM annual reports 2020–2024, CMVM reports, GIFi reports).

Sources

• Primary Legislation (Boletim da República / Imprensa Nacional de Moçambique):
  • Lei n.º 1/2013, de 18 de Janeiro — Lei Orgânica do Banco de Moçambique
  • Lei n.º 14/2013, de 12 de Agosto — Lei de Prevenção e Combate ao Branqueamento de Capitais e Financiamento do Terrorismo
  • Lei n.º 15/2013, de 12 de Agosto — Lei das Instituições de Crédito e Sociedades Financeiras
  • Lei n.º 11/2019, de 7 de Agosto — Altera a Lei n.º 14/2013
  • Lei n.º 6/2022, de 6 de Maio — Altera a Lei n.º 14/2013
  • Decreto n.º 34/2007 — Código do IRPC (com alterações Lei n.º 16/2014, Lei n.º 3/2019)
  • Lei n.º 33/2007 — Código do IRPS (com alterações Lei n.º 17/2014, Lei n.º 3/2019)
  • Decreto n.º 12/2017 — Código do IVA (com alterações Lei n.º 3/2019)
  • Lei n.º 3/2019, de 3 de Janeiro — Código de Processo Tributário
  • Lei n.º 35/2014 — Código Penal
• Regulatory Instruments:
  • Aviso 6/GBM/2018 — Requisitos de Fundos Próprios Mínimos para Instituições de Pagamento e Instituições de Moeda Eletrónica
  • BoM "Avisos e Circulares" database (2018–2025) — searched via BoM website
  • BoM "Lista de Instituições Licenciadas" (monthly updates, consulted Jan 2025)
  • CMVM "Comunicados e Alertas" database (2018–2025)
  • GIFi Relatórios Anuais 2020, 2021, 2022, 2023
• FATF / ESAAMLG:
  • ESAAMLG Mutual Evaluation Report: Mozambique (2nd Round, adopted Sept 2022, published 2023)
  • FATF Public Statement: "Jurisdictions under Increased Monitoring" (Oct 2022 — Mozambique added)
  • FATF Public Statement: "Mozambique removed from grey list" (Feb 2024)
  • FATF Methodology 2022 (Rec. 15, 16 assessment criteria)
• Official Gazette / Legal Database Searches:
  • Boletim da República I Série (2013–2025) — systematic search via Imprensa Nacional de Moçambique
  • Legislação de Moçambique database (legislacaodemoçambique.gov.mz) — keyword search "cripto", "ativo virtual", "VASP", "virtual asset", "blockchain", "moeda digital"
• Travel Advisory Sources (retained per rules, but not authoritative for regulatory analysis):
  • Mozambique Travel Advisory | Travel.State.gov
  • Mozambique travel advice - GOV.UK
  • Mozambique Travel Advice & Safety | Smartraveller
  • Mozambique announces new pre-travel registration requirement for visa-exempt foreign nationals | EY - Global

Terminology Definitions (first use):

• Banco de Moçambique (BoM) — Central bank of Mozambique, established under Lei n.º 1/2013
• Gabinete de Informação Financeira (GIFi) — Financial Intelligence Unit of Mozambique, established under Lei n.º 14/2013 Art. 20
• Comissão do Mercado de Valores Mobiliários (CMVM) — Securities Market Commission, regulates securities markets
• Lei das Instituições de Crédito e Sociedades Financeiras (Lei n.º 15/2013) — Financial Institutions Law
• Lei de Prevenção e Combate ao Branqueamento de Capitais e Financiamento do Terrorismo (Lei n.º 14/2013) — AML/CFT Law
• Boletim da República — Official Gazette of Mozambique
• ESAAMLG — Eastern and Southern Africa Anti-Money Laundering Group
• VASP — Virtual Asset Service Provider (FATF definition)
• IRPC — Imposto sobre o Rendimento de Pessoas Coletivas (Corporate Income Tax)
• IRPS — Imposto sobre o Rendimento de Pessoas Singulares (Personal Income Tax)
• IVA — Imposto sobre o Valor Acrescentado (Value Added Tax)
• AT — Autoridade Tributária de Moçambique (Tax Authority)