Self-custodial wallet / non-custodial software in Rwanda
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Rwanda without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to a non-custodial wallet publisher that never holds, controls, or has access to user funds, because the publisher does not fall within the definition of a 'reporting person' (VASP) under Law N° 060/2021 of 14/10/2021 — the legal framework targets entities that provide custodial or intermediary services.
- If the wallet software were to incorporate any fiat on-ramp/off-ramp, integrated exchange, or other financial service, the operator would become a reporting person under the AML/CFT framework and would need to: apply CDD/EDD (customer identification, beneficial ownership verification, ongoing monitoring), file STRs with the FIC (no monetary threshold), maintain records for 5 years, and comply with sanctions screening obligations (UN consolidated list, OFAC SDN list given USD exposure).
Key Restrictions
- The publisher must not hold, control, or have access to user private keys or funds — if any custodial element is introduced, the operator becomes a VASP under Rwandan AML law.
- The BNR has issued ongoing public warnings that virtual currencies are not legal tender in Rwanda and carry risks — this creates consumer-prudence expectations even if no direct prohibition exists on software publishing.
- No specific consumer-protection or disclosure rules currently apply to non-custodial wallet software published from outside Rwanda.
Key Risks
- Regulatory ambiguity: Rwanda's framework for virtual assets is still evolving — a future law could expand the definition of 'reporting person' to include wallet publishers, retroactively creating compliance gaps.
- BNR's public stance discouraging cryptocurrency use may create reputational/PR risk if the publisher markets its software to Rwandan residents.
- Enforcement action under general fraud or financial crime laws (e.g., if users suffer losses and allege the software was misleading) remains possible even if no specific crypto-licensing regime exists.
- No formal licensing safe harbor currently exists — the absence of a license does not imply the absence of future liability if the regulatory framework changes.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Rwanda's anti-money-laundering statute is Law nº 001/2025 of 22/01/2025 on the prevention and punishment of money laundering, terrorist financing and the financing of proliferation of weapons of mass destruction, Official Gazette nº Special Bis of 22/01/2025, which superseded Law nº 028/2023 of 19/05/2023, itself the successor to Law nº 75/2019. No Rwandan anti-money-laundering statute carries the number 060/2021. Reporting persons on the Financial Intelligence Centre's published list are 435 financial institutions and 3,128 designated non-financial businesses and professions, a class that excludes virtual asset service providers, whose anti-money-laundering duty arises instead as a licensing condition under Article 10(2)(g) of Law nº 023/2026 of 25/05/2026, supervised by the Capital Market Authority of Rwanda under Article 6.
Rwanda's general anti-money-laundering compliance requirements for reporting persons are set by Regulations nº 002/FIC/2026 of 22/06/2026, Official Gazette nº 25 Bis of 22/06/2026, issued by the Director General of the Financial Intelligence Centre, whose Article 45 repeals Regulations nº 002/FIC/2023 of 26/06/2023, and the matching sanctions instrument is Regulations nº 001/FIC/2026 of 22/06/2026 of the same date and gazette. Both are Financial Intelligence Centre regulations rather than ministerial orders, and neither mentions virtual assets or virtual asset service providers.
Ministerial Order N° 002/2022 of 28/01/2022 determining procedures for combating money laundering and financing of terrorism: This order details the procedural aspects of AML/CFT compliance.
The National Bank of Rwanda has published no virtual-asset circular or guideline; ESAAMLG's July 2024 mutual evaluation of Rwanda records that the central bank issued a public notice in 2023 warning against crypto-asset activity until a regulatory framework was in place, and since Law nº 023/2026 of 25/05/2026 regulating virtual asset business the licensing of virtual asset service providers belongs to the Capital Market Authority of Rwanda, with the National Bank of Rwanda confined by Article 8 to cooperation with that Authority and to directives on matters falling under its own purview.
Rwanda's operative anti-money-laundering statute is Law nº 001/2025 of 22/01/2025 on the prevention and punishment of money laundering, terrorist financing and the financing of proliferation of weapons of mass destruction, which replaced Law nº 028/2023 of 19/05/2023, itself the repeal of Law nº 75/2019 of 29/01/2020; no Rwandan anti-money-laundering law is numbered 008/2020, and the Financial Intelligence Centre is governed by Law nº 045/2021 of 18/08/2021 as amended by Law nº 002/2025 of 22/01/2025.
Law nº 008/2021 of 16/02/2021 governs partnerships, not payment systems; Rwanda's payment-system statute is Law nº 061/2021 of 14/10/2021, which makes no reference to virtual assets, and virtual asset business is licensed by the Capital Market Authority of Rwanda under Law nº 023/2026 of 25/05/2026, the National Bank of Rwanda being confined to monetary and financial-stability oversight and cooperation rather than licensing.
Rwanda enacted a comprehensive virtual-asset statute on 25 May 2026: Law nº 023/2026 of 25/05/2026 regulating virtual asset business, Official Gazette nº Special of 28/05/2026, which sets licensing conditions at Article 10, suspension and revocation at Article 11, a regulatory sandbox at Article 13, the virtual-asset service list at Article 14, administrative sanctions at Article 32 and offences at Articles 33 to 38, and makes the Capital Market Authority of Rwanda the licensing and supervisory authority. The implementing regulations remain unmade, so the licensing regime is in force yet not operable. No National Bank of Rwanda virtual-asset warning exists as a published central-bank instrument.
Rwanda's virtual-asset investor-protection rules are statutory and belong to the Capital Market Authority of Rwanda, at Articles 25 to 27 of Law nº 023/2026 of 25/05/2026 on investor protection, market conduct and data and asset protection, with technology and information security at Article 28 and inspections at Article 29. No National Bank of Rwanda cryptocurrency warning exists as a published central-bank instrument, and the Capital Market Authority's licensee register carries ten categories, from exchanges to investment advisers, with no virtual-asset category and no licensed virtual asset service provider.
Rwanda has a statutory virtual-asset licensing regime at Article 10 of Law nº 023/2026 of 25/05/2026, and enforcement runs through that statute rather than through general financial law: Article 6(b) directs the Capital Market Authority of Rwanda to identify a virtual asset service provider that contravenes the Law, Article 29 provides for inspections, Article 30 for freezing of virtual assets, Article 32 for administrative sanctions and Articles 33 to 38 for offences. Because the implementing regulations are unmade, no licence has been issued and no enforcement action has been published.
Virtual assets are not legal tender in Rwanda, and the rule is statutory rather than declaratory: Article 15 of Law nº 023/2026 of 25/05/2026 provides that virtual assets are not legal tender and cannot be used as a direct means of payment unless the National Bank of Rwanda authorises it. The National Bank of Rwanda has published no instrument of its own stating that position.
Rwanda's official position on virtual assets is set by statute rather than by warning. Article 15 of Law nº 023/2026 of 25/05/2026 bars natural persons from carrying on virtual asset business, provides that virtual assets are not legal tender and cannot be used as a direct means of payment unless the National Bank of Rwanda authorises it, requires approval for mining facilities, virtual-asset automated teller machines and mixer or tumbler services, and restricts marketing to licensed providers. Article 4(3) excludes algorithmic stablecoins, non-fungible tokens and central bank digital currency from the Law's scope.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-custodial wallet software publisher that never holds user keys or funds does not trigger VASP classification or AML obligations under current Rwandan law (which targets custodial intermediaries), but the publisher must avoid any custodial feature and contend with BNR's public warnings against cryptocurrency use and an evolving regulatory environment.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?