South Sudan -- AML/CFT Compliance Regulatory Overview

Navigating the regulatory landscape for cryptocurrency/virtual asset service providers (VASPs) in South Sudan presents unique challenges, primarily due to the nascent stage of specific legislation for virtual assets. Like many developing nations, South Sudan's AML/CFT framework largely predates the widespread adoption of cryptocurrencies, meaning VASPs are typically expected to comply with existing general AML/CFT laws that apply to financial institutions, or operate in a less clearly defined regulatory space.

South Sudan is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG), which is an FATF-style regional body. This implies a commitment to implementing FATF Recommendations, even if the domestic transposition and enforcement for virtual assets are still developing.

Here's an overview based on the current understanding:

AML/CFT Requirements for Cryptocurrency/Virtual Asset Service Providers in South Sudan

1. AML/CFT Legislation

The primary legislation governing Anti-Money Laundering and Combating the Financing of Terrorism in South Sudan is:

• Anti-Money Laundering and Combating the Financing of Terrorism Act, 2012 (often referred to as the AML/CFT Act, 2012).

Key point: This Act, passed before the widespread emergence of cryptocurrencies, does not explicitly mention "virtual assets" or "cryptocurrencies." However, VASPs are generally expected to comply with its provisions by extension, or by analogy to "financial institutions" or "designated non-financial businesses and professions (DNFBPs)" if their activities fit those definitions. There is currently no specific legislation in South Sudan dedicated solely to the regulation of virtual assets or their service providers from an AML/CFT perspective.

2. Customer Due Diligence (CDD) Requirements

Based on the AML/CFT Act, 2012, and general FATF standards, VASPs would be expected to implement robust CDD measures, applied on a risk-based approach. These typically include:

• Identification and Verification:
  • For individuals: Obtaining and verifying identity using reliable, independent source documents, data, or information (e.g., full name, address, date of birth, nationality, unique identification number from a national ID card, passport, or driving license).
  • For legal entities/arrangements: Obtaining and verifying the name, legal form, proof of existence, powers that regulate and bind the entity, and the names of relevant persons holding senior management positions.
• Beneficial Ownership: Identifying and taking reasonable measures to verify the identity of the beneficial owner(s) of customers, including understanding the ownership and control structure of legal persons and arrangements.
• Purpose and Nature of Business Relationship: Understanding the purpose and intended nature of the business relationship.
• Ongoing Monitoring: Conducting ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
• Enhanced Due Diligence (EDD): Applying EDD measures for higher-risk categories, such as politically exposed persons (PEPs), cross-border correspondent relationships, or transactions with complex or opaque structures, or those involving high-risk jurisdictions.

3. Suspicious Transaction Reporting (STR)

All entities covered by the AML/CFT Act, 2012, including any entities that could be construed to cover VASPs (even if implicitly), are obligated to report suspicious transactions.

• Obligation: If a VASP knows, suspects, or has reasonable grounds to suspect that funds are the proceeds of a criminal activity, or are related to terrorist financing, they must promptly report their suspicions to the Financial Intelligence Unit.
• Content: Reports must include all available information concerning the customer, the transaction(s), and the grounds for suspicion.
• No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that a suspicious transaction report has been or will be submitted, or that an AML/CFT investigation is being conducted.

4. Record-Keeping Obligations

VASPs would be expected to maintain records for a specified period, consistent with the AML/CFT Act, 2012, and international standards.

• Duration: Records must typically be maintained for a period of at least five (5) years after the business relationship is ended, or after the date of the occasional transaction.
• Types of Records:
  • Records of all transactions, domestic and international.
  • Records of CDD information (identification data, account files, business correspondence).
  • Records of suspicious transaction reports filed.
  • Records of risk assessments and their updates.

5. Authority Overseeing Compliance

In the absence of specific VASP legislation, the primary authorities responsible for AML/CFT oversight in South Sudan are:

• Financial Intelligence Unit of South Sudan (FIUSS):

  • Role: The central national agency responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) and other financial information concerning money laundering and terrorist financing.
  • URL: Information on the FIUSS is typically found on the Bank of South Sudan's website or through regional bodies like ESAAMLG. A direct, standalone, regularly updated website for FIUSS may not be readily available. However, it operates under the broader framework overseen by the central bank.

• Bank of South Sudan (BSS):

  • Role: The central bank acts as the primary regulator for financial institutions in South Sudan. While it has not issued specific VASP regulations, it would be the de facto authority to extend existing AML/CFT compliance expectations to any entities falling under its general oversight or seeking to operate within the regulated financial system. The BSS would also be instrumental in developing any future specific VASP regulations.
  • URL: https://www.bankofsouthsudan.org/

Important Considerations for VASPs in South Sudan:

• Legal Uncertainty: The lack of specific VASP legislation creates significant legal uncertainty. While a VASP is expected to comply with general AML/CFT laws, the exact scope of "financial institution" or "DNFBP" and direct supervisory authority can be ambiguous.
• Consultation is Key: Any VASP considering operating in South Sudan should engage with local legal counsel and potentially the Bank of South Sudan directly to understand the current regulatory stance, potential interpretations of existing laws, and any upcoming policy developments.
• Evolving Landscape: The global regulatory environment for virtual assets is rapidly evolving. South Sudan, as an ESAAMLG member, is under increasing pressure to align its framework with FATF Recommendation 15 on virtual assets and VASPs. This means future specific regulations are highly likely.
• Risk-Based Approach: Even without explicit VASP rules, adopting a strong risk-based approach to AML/CFT is crucial. This involves assessing the risks associated with the specific services offered, customer base, geographic areas, and transaction types.

In summary, while South Sudan has an AML/CFT framework, it lacks specific legislation tailored to virtual assets. VASPs operating in the country are expected to adhere to the spirit and letter of the Anti-Money Laundering and Combating the Financing of Terrorism Act, 2012, applying its principles of CDD, STR, and record-keeping, and cooperating with the FIUSS and the Bank of South Sudan.