Crypto ATM / kiosk operator in Togo

'BCEAO Circular No. 00000002/RB/2020 on the Prohibition of the Use of Cryptocurrencies and other Digital Assets in WAEMU Member States' does not exist. No BCEAO instrument prohibits cryptocurrency in UEMOA. The numbering format is also wrong: BCEAO instructions are numbered nnn-mm-yyyy (e.g. Instruction n° 008-05-2015), never with an /RB/ segment. The BCEAO's exhaustive published index of payment-system instruments 2002-2024 contains no such circular, and bceao.int returns nothing on crypto-actifs beyond the 8 May 2026 Dakar conference. The real constraint is art. 58 of the Loi uniforme of 31 March 2023: professional PSAV activity requires prior agrement from a competent authority which no member state has designated.

No BCEAO instrument prohibits banks, microfinance institutions or payment service providers from buying, selling, holding or facilitating cryptocurrency transactions. This is the phantom-BCEAO-ban pattern in its fullest form. What exists is: (i) art. 58 of the Loi uniforme of 31 March 2023 requiring prior agrement for professional PSAV activity, with art. 59 deferring the detail to a competent authority no state has designated; and (ii) verbal caution from BCEAO leadership (Governor Kassi Brou, July 2026). A warning is not a prohibition, and no UEMOA text restricts what financial institutions may do with crypto-assets.

'Unlicensed' is right; 'unregulated' is wrong. Art. 58 of Loi n° 2026-001 du 2 mars 2026 provides that 'Nul ne peut se livrer à l'activité professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrément ou l'autorisation préalable de l'autorité compétente', and art. 59 defers the specific requirements and sanctions to 'les autorités compétentes' — which Togo has not designated. So any exchange operating in Togo is necessarily unlicensed, and indeed in breach of art. 58, since no licence can be issued. But it is not outside regulation: a PSAV is an assujetti under art. 3, owes customer due diligence and suspicious-transaction reporting to CENTIF-Togo under art. 60, and must retain records for 10 years under art. 23. 'Operating outside the formal financial system' is a description of banking practice, not a legal status.

The premise is false and everything is derived from it. Togolese financial institutions are not 'prohibited from dealing with crypto' — no BCEAO or Togolese instrument imposes such a prohibition, as the BCEAO's own payment-systems register and the full text of Instruction n° 008-05-2015 confirm. Fiat on/off-ramp friction in Togo is real, but its causes are (a) bank de-risking, a commercial choice, and (b) art. 58 of Loi n° 2026-001, which makes professional PSAV activity conditional on an agrément that cannot currently be issued because art. 59 leaves the competent authority undesignated. The AML/CFT-scrutiny sentence is right for the wrong reason: scrutiny arises because PSAV are themselves assujettis under art. 3, must report suspicions to CENTIF-Togo under art. 60 and retain records 10 years under art. 23 — not because converting crypto is forbidden.

Correct on the narrow point: Togolese law contains no prohibition on an individual owning or trading virtual assets. Loi n° 2026-001 regulates prestataires, not holders, and imposes no restriction on natural persons holding actifs virtuels. But 'there isn't a direct law' is no longer accurate as a general statement — since 2 March 2026 there is a direct law: art. 2 defines 'actif virtuel', art. 3 makes PSAV assujettis, art. 58 forbids anyone from carrying on PSAV activity professionally without a prior agrément. And the qualifier 'or through unregulated, foreign platforms' overreaches: the individual user is outside art. 58, but a foreign platform providing exchange, transfer or custody services in Togo on a commercial basis is within it, and cannot lawfully do so because no competent authority has been designated under art. 59 to issue the agrément.

High Risk and Unregulated: However, the environment is highly risky. There is no consumer protection, no regulatory oversight for exchanges operating in the grey area, and no legal recourse if funds are lost.

No BCEAO directive prohibits banks, microfinance institutions or payment service providers in Togo from crypto activity — no such instrument exists. The BCEAO's own exhaustive payment-systems register lists 12 instruments from 2002 to 2024 and contains nothing on crypto-actifs or stablecoins; a full-text fetch of Instruction n° 008-05-2015 (e-money) returns zero occurrences of 'crypto', 'actif virtuel', 'stablecoin' or 'blockchain'. As of the 8 May 2026 Dakar conference the BCEAO had only just created the C-CRYPTO drafting committee, and as of July 2026 was still drafting a roadmap. The real constraint is national and different in kind: art. 58 of Loi n° 2026-001 makes professional PSAV activity conditional on a prior agrément from an 'autorité compétente' that art. 59 leaves undesignated — so no agrément can be obtained. That Togolese banks decline crypto counterparties is commercial de-risking, not compliance with a prohibition. The claim's practical conclusion ('you cannot legally buy or sell crypto through traditional banks') therefore lands near the right outcome via a fabricated cause.

The instrument number and date are wrong, and the substance is outdated. Togo's pre-2026 AML/CFT statute was the loi uniforme n° 2018-004 du 4 mai 2018 relative a la lutte contre le blanchiment de capitaux et le financement du terrorisme — not 'Loi n° 2018-009 du 22 juin 2018'. That 2018 law has been superseded by Loi n° 2026-001 du 2 mars 2026 relative a la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la proliferation des armes de destruction massive (JO n° 71, numero special, 2 mars 2026), which transposes the UMOA loi uniforme du 31 mars 2023. Adoption sequence: Assemblee nationale first reading 29 December 2025, Senat 26 February 2026, Assemblee nationale definitive adoption 27 February 2026, promulgation 2 March 2026. Contrary to the claim, the governing law does NOT rely on 'broad definitions ... interpreted to encompass new technologies': it defines actif virtuel (art. 2(2)) and PSAV (art. 2(51), custody included) explicitly and makes PSAV assujettis at art. 3(c). Record retention is 10 years (art. 23).

VASP Obligations: Under this law, VASPs (once regulated as reporting entities or covered by broad definitions) would be required to:

Implement CDD/KYC: Identify and verify the identity of customers and beneficial owners.

Conduct Ongoing Monitoring: Monitor customer transactions for suspicious activity.

Report Suspicious Transactions (STRs): Report any suspected money laundering or terrorist financing activities to the Cellule Nationale de Traitement des Informations Financières (CENTIF), Togo's Financial Intelligence Unit (FIU).

Maintain Records: Keep records of customer identification and transactions for a specified period.

Compliance Requirement: FATF Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate VASPs for AML/CFT purposes, license/register them, and apply the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers).

VASP Obligations: VASPs must screen their customers (KYC) and transactions against the UN Consolidated Sanctions List.

VASP Obligations: VASPs should implement robust sanctions screening programs to ensure they are not directly or indirectly facilitating transactions with individuals, entities, or jurisdictions on the SDN list or other OFAC-administered lists. This includes screening against wallet addresses known to be associated with sanctioned entities where possible.

VASP Obligations: VASPs should screen customers and transactions against the EU Consolidated Financial Sanctions List.

Lack of Specific Crypto Legislation: Like many countries in the region, Togo has not yet enacted comprehensive, standalone legislation specifically regulating virtual assets or cryptocurrency service providers. Discussions are ongoing at the UEMOA level, but concrete national laws and enforcement frameworks are still developing.

The FIU name is correct: CENTIF-Togo, Cellule Nationale de Traitement des Informations Financieres (centif.tg). It is correct that there is no crypto-specific enforcement regime. But it is no longer accurate that virtual assets are covered only by 'general AML/CFT laws' by interpretation: the loi uniforme of 31 March 2023 (transposed by the law definitively adopted 27 February 2026) expressly makes PSAV assujettis (art. 3(c)) and defines actif virtuel (art. 2(2)). Also, CENTIF receives STRs (art. 60) but does NOT impose sanctions — under art. 182 sanctions are imposed by the autorite de controle.

Regulator Name: Central Bank of West African States (BCEAO)

Date: Various dates, with recurring warnings. An example from a few years ago that reflects their ongoing stance: December 3, 2020 (though the message has been reiterated since).

Evidence fact tg.enforcement.absence-of-specific-enforcement-actions not found (may have been renamed).

No named crypto enforcement action by a Togolese or UEMOA financial regulator could be found, so 'no named enforcement actions' is right. But 'the regulatory focus has primarily been on warnings' overstates the record: the cited BCEAO warning communique does not exist. Togo's documented regulatory activity on virtual assets consists of CENTIF-TG's national ML/TF risk assessment workshop on virtual assets (24 September 2025) and the transposition law adopted 27 February 2026 extending vigilance obligations to PSAV — not a warnings campaign. The remainder ('it is possible smaller localized fraud cases might occur') is unfalsifiable speculation.