Centralized exchange in Togo
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Togo without local incorporation, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/CDD: Implement customer identification and verification under Loi n° 2018-009 du 22 juin 2018 (tg.aml.loi-n-2018-009-du-22).
- Screen customers and transactions against the UN Consolidated Sanctions List per binding UN Security Council Resolutions (tg.aml.compliance-requirement-togo-is-a).
- Screen against OFAC SDN List if dealing with U.S. persons, USD, or U.S.-linked systems (tg.aml.compliance-requirement-while-ofac-sanctions).
- Screen against EU Consolidated Financial Sanctions List if dealing with EU persons or EU financial systems (tg.aml.compliance-requirement-eu-sanctions-are).
- Ongoing transaction monitoring for suspicious activity (tg.aml.conduct-ongoing-monitoring-monitor-customer).
- Report suspicious transactions (STRs) to CENTIF (tg.aml.report-suspicious-transactions-strs-report).
- Maintain records of customer identification and transactions for specified period (tg.aml.maintain-records-keep-records-of).
- Travel Rule: For transfers ≥ EUR 1,000, obtain and transmit originator info (name, address, wallet address, unique TX ID) and beneficiary info (name, wallet address, unique TX ID) — per BCEAO Instruction N° 003/2022/RB/BCEAO (tg.travel-rule.for-transactions-equal-to-or; tg.travel-rule.originator-information-name-physical-address; tg.travel-rule.beneficiary-information-name-account-number).
- For transfers < EUR 1,000, collect and retain originator name/account and beneficiary name as part of CDD (tg.travel-rule.for-transactions-below-eur-1000).
- Retain all Travel Rule data for at least 5 years (tg.travel-rule.data-retention-retain-all-collected).
- Transmit Travel Rule information immediately and securely to beneficiary VASP (tg.travel-rule.transmit-required-information-immediately-and).
- Adhere to FATF Recommendation 15 on VASP regulation and Travel Rule, as transposed by BCEAO Instruction N° 003/2022/RB/BCEAO (tg.aml.compliance-requirement-fatf-recommendation-15; tg.travel-rule.regional-adoption-the-bceao-issued).
Key Restrictions
- Financial institutions (banks, microfinance, PSPs) are prohibited by BCEAO Circular from dealing in crypto — no formal banking relationships available (tg.licensing.bceao-circular-no-00000002rb2020-on; tg.licensing.for-financial-institutions-the-bceao).
- Any exchange operating within Togo would be unlicensed/unregulated and face severe operational risks (tg.licensing.exchanges-any-cryptocurrency-exchange-operating).
- No legal recourse or consumer protection for crypto activities (tg.licensing.high-risk-and-unregulated-however).
- Conversion of crypto to fiat through formal banking channels is effectively blocked due to BCEAO prohibitions (tg.licensing.difficulty-interfacing-with-traditional-finance).
- VASPs must be licensed/registered under regional BCEAO framework (Instruction N° 003/2022/RB/BCEAO) — but national implementing legislation in Togo is still a work in progress (tg.travel-rule.national-status-in-togo-while).
- Cannot deal with U.S. persons, USD, or U.S.-linked systems without OFAC sanctions compliance programs (tg.aml.compliance-requirement-while-ofac-sanctions).
- No explicit ban on ownership/trading via foreign unregulated platforms, but those platforms face banking obstacles (tg.licensing.no-explicit-ban-on-ownership).
Key Risks
- Regulatory ambiguity: BCEAO has issued clear regional directives but national transposition in Togo is incomplete — grey-area operating environment (tg.enforcement.lack-of-specific-crypto-legislation).
- No specific crypto enforcement actions recorded to date, but the regulatory posture is hostile; proactive enforcement could blindside operators (tg.enforcement.absence-of-specific-enforcement-actions).
- Banking access risk: inability to establish formal banking relationships makes fiat on/off-ramps near-impossible (tg.licensing.exchanges-any-cryptocurrency-exchange-operating).
- FATF mutual evaluation risk: Togo's VASP regime is evolving; regulatory expectations may shift suddenly under regional pressure (tg.aml.compliance-requirement-fatf-recommendation-15).
- Sanctions compliance complexity: operators must screen against UN, OFAC, and EU sanctions lists simultaneously despite no local regulatory clarity on which is mandatory (tg.aml.compliance-requirement-togo-is-a; tg.aml.compliance-requirement-while-ofac-sanctions; tg.aml.compliance-requirement-eu-sanctions-are).
- Administrative sanctions under BCEAO instruction include fines, suspension, revocation, and restrictions (tg.travel-rule.administrative-sanctions-fines-suspension-of); criminal penalties for AML breaches include imprisonment (tg.travel-rule.criminal-penalties-for-serious-breaches).
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
'BCEAO Circular No. 00000002/RB/2020 on the Prohibition of the Use of Cryptocurrencies and other Digital Assets in WAEMU Member States' does not exist. No BCEAO instrument prohibits cryptocurrency in UEMOA. The numbering format is also wrong: BCEAO instructions are numbered nnn-mm-yyyy (e.g. Instruction n° 008-05-2015), never with an /RB/ segment. The BCEAO's exhaustive published index of payment-system instruments 2002-2024 contains no such circular, and bceao.int returns nothing on crypto-actifs beyond the 8 May 2026 Dakar conference. The real constraint is art. 58 of the Loi uniforme of 31 March 2023: professional PSAV activity requires prior agrement from a competent authority which no member state has designated.
No BCEAO directive prohibits banks, microfinance institutions or payment service providers in Togo from crypto activity — no such instrument exists. The BCEAO's own exhaustive payment-systems register lists 12 instruments from 2002 to 2024 and contains nothing on crypto-actifs or stablecoins; a full-text fetch of Instruction n° 008-05-2015 (e-money) returns zero occurrences of 'crypto', 'actif virtuel', 'stablecoin' or 'blockchain'. As of the 8 May 2026 Dakar conference the BCEAO had only just created the C-CRYPTO drafting committee, and as of July 2026 was still drafting a roadmap. The real constraint is national and different in kind: art. 58 of Loi n° 2026-001 makes professional PSAV activity conditional on a prior agrément from an 'autorité compétente' that art. 59 leaves undesignated — so no agrément can be obtained. That Togolese banks decline crypto counterparties is commercial de-risking, not compliance with a prohibition. The claim's practical conclusion ('you cannot legally buy or sell crypto through traditional banks') therefore lands near the right outcome via a fabricated cause.
Evidence fact tg.licensing.for-individuals-and-unlicensed-entities not found (may have been renamed).
Correct on the narrow point: Togolese law contains no prohibition on an individual owning or trading virtual assets. Loi n° 2026-001 regulates prestataires, not holders, and imposes no restriction on natural persons holding actifs virtuels. But 'there isn't a direct law' is no longer accurate as a general statement — since 2 March 2026 there is a direct law: art. 2 defines 'actif virtuel', art. 3 makes PSAV assujettis, art. 58 forbids anyone from carrying on PSAV activity professionally without a prior agrément. And the qualifier 'or through unregulated, foreign platforms' overreaches: the individual user is outside art. 58, but a foreign platform providing exchange, transfer or custody services in Togo on a commercial basis is within it, and cannot lawfully do so because no competent authority has been designated under art. 59 to issue the agrément.
High Risk and Unregulated: However, the environment is highly risky. There is no consumer protection, no regulatory oversight for exchanges operating in the grey area, and no legal recourse if funds are lost.
The premise is false and everything is derived from it. Togolese financial institutions are not 'prohibited from dealing with crypto' — no BCEAO or Togolese instrument imposes such a prohibition, as the BCEAO's own payment-systems register and the full text of Instruction n° 008-05-2015 confirm. Fiat on/off-ramp friction in Togo is real, but its causes are (a) bank de-risking, a commercial choice, and (b) art. 58 of Loi n° 2026-001, which makes professional PSAV activity conditional on an agrément that cannot currently be issued because art. 59 leaves the competent authority undesignated. The AML/CFT-scrutiny sentence is right for the wrong reason: scrutiny arises because PSAV are themselves assujettis under art. 3, must report suspicions to CENTIF-Togo under art. 60 and retain records 10 years under art. 23 — not because converting crypto is forbidden.
'Unlicensed' is right; 'unregulated' is wrong. Art. 58 of Loi n° 2026-001 du 2 mars 2026 provides that 'Nul ne peut se livrer à l'activité professionnelle de prestataire de services d'actifs virtuels s'il n'a pas obtenu l'agrément ou l'autorisation préalable de l'autorité compétente', and art. 59 defers the specific requirements and sanctions to 'les autorités compétentes' — which Togo has not designated. So any exchange operating in Togo is necessarily unlicensed, and indeed in breach of art. 58, since no licence can be issued. But it is not outside regulation: a PSAV is an assujetti under art. 3, owes customer due diligence and suspicious-transaction reporting to CENTIF-Togo under art. 60, and must retain records for 10 years under art. 23. 'Operating outside the formal financial system' is a description of banking practice, not a legal status.
Superseded on 2 March 2026. Togo's AML/CFT law IS now crypto-specific. Loi n° 2026-001 du 2 mars 2026 — Togo's transposition of the UMOA Loi uniforme LBC/FT/FP du 31 mars 2023 (itself giving effect to Directive n° 01/2023/CM/UEMOA) — defines 'actif virtuel' at art. 2 as 'la représentation numérique d'une valeur qui peut être échangée ou transférée par un procédé numérique', defines the prestataire de services d'actifs virtuels (PSAV) including custody/administration, lists PSAV among the assujettis at art. 3, and at art. 58 prohibits professional PSAV activity without prior agrément. The bill was adopted in first reading 29 December 2025 and finally on 2 March 2026, replacing the framework built on Loi n° 2018-004 du 4 mai 2018, under which the 'not crypto-specific' description was accurate. Separately: Togo is NOT a FATF member — it is a GIABA member — though its law does follow the FATF Recommendations. And the laws do more than 'could potentially be invoked': PSAV are directly assujettis with CDD, STR (art. 60, to CENTIF-Togo) and 10-year record-retention (art. 23) duties.
The instrument number and date are wrong, and the substance is outdated. Togo's pre-2026 AML/CFT statute was the loi uniforme n° 2018-004 du 4 mai 2018 relative a la lutte contre le blanchiment de capitaux et le financement du terrorisme — not 'Loi n° 2018-009 du 22 juin 2018'. That 2018 law has been superseded by Loi n° 2026-001 du 2 mars 2026 relative a la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la proliferation des armes de destruction massive (JO n° 71, numero special, 2 mars 2026), which transposes the UMOA loi uniforme du 31 mars 2023. Adoption sequence: Assemblee nationale first reading 29 December 2025, Senat 26 February 2026, Assemblee nationale definitive adoption 27 February 2026, promulgation 2 March 2026. Contrary to the claim, the governing law does NOT rely on 'broad definitions ... interpreted to encompass new technologies': it defines actif virtuel (art. 2(2)) and PSAV (art. 2(51), custody included) explicitly and makes PSAV assujettis at art. 3(c). Record retention is 10 years (art. 23).
Compliance Requirement: Togo is a signatory to various international conventions against terrorism and money laundering and is a UN member state. As such, VASPs operating in Togo must comply with all UN Security Council Resolutions, particularly those related to terrorism financing (e.g., Resolution 1373) and proliferation financing, which mandate asset freezes against designated individuals and entities (e.g., Al-Qaeda, ISIS/Da'esh, and DPRK designations under resolutions 1267, 1989, and others).
Compliance Requirement: While OFAC sanctions are primarily binding on "U.S. persons" (U.S. citizens, permanent residents, entities organized under U.S. law, and anyone within the U.S.), their broad extraterritorial reach means that non-U.S. VASPs dealing with U.S. persons, transacting in USD, using U.S.-based infrastructure, or facilitating transactions that touch the U.S. financial system, can face significant penalties for non-compliance. OFAC maintains various sanctions programs targeting specific countries (e.g., Iran, Cuba, North Korea, Syria, Venezuela, Russia) and individuals/entities (e.g., Specially Designated Nationals and Blocked Persons List - SDN List).
Compliance Requirement: EU sanctions are binding on all persons and entities operating within the jurisdiction of EU member states, as well as EU nationals and entities wherever they are located. Similar to OFAC, non-EU VASPs dealing with EU persons or transacting within the EU financial system may be indirectly affected and face reputational and operational risks for non-compliance. The EU maintains various restrictive measures against countries, individuals, and entities.
Compliance Requirement: FATF Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate VASPs for AML/CFT purposes, license/register them, and apply the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers).
Implement CDD/KYC: Identify and verify the identity of customers and beneficial owners.
Conduct Ongoing Monitoring: Monitor customer transactions for suspicious activity.
Report Suspicious Transactions (STRs): Report any suspected money laundering or terrorist financing activities to the Cellule Nationale de Traitement des Informations Financières (CENTIF), Togo's Financial Intelligence Unit (FIU).
Maintain Records: Keep records of customer identification and transactions for a specified period.
The BCEAO has issued no instruction on virtual assets or VASPs. 'Instruction N° 003/2022/RB/BCEAO' does not exist. The real regional AML/CFT instrument is the **Loi uniforme LBC/FT/FP du 31 mars 2023 (UMOA)**, transposed in Togo by **Loi n° 2026-001 du 2 mars 2026**. That law does bring PSAV within scope (art. 2(2), art. 2(51), art. 3(c)) and imposes a prior-authorisation requirement (art. 58), but it transposes nothing resembling FATF R.16 for VASPs: art. 59 defers all PSAV-specific requirements to 'les autorités compétentes', which Togo has not designated.
No instrument was published on 24 March 2022; the cited instruction is fabricated, so it has no effective date. The operative Togolese instrument is Loi n° 2026-001 du 2 mars 2026, adopted in first reading 29 December 2025, by the Sénat 26 February 2026 and definitively by the Assemblée nationale 27 February 2026. It imposes no VASP travel-rule obligation.
'Law N° 2018-006 of June 11, 2018' is not a Togolese AML law. Togo's predecessor AML/CFT statute was **Loi n° 2018-004 du 4 mai 2018**, superseded by **Loi n° 2026-001 du 2 mars 2026** relative à la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la prolifération des armes de destruction massive. There is also no BCEAO virtual-asset directive for Togo to transpose. Loi n° 2026-001 makes PSAV assujettis (art. 3(c)) and routes déclarations de soupçon to CENTIF-Togo (art. 60), but no supervisory authority for PSAV has been designated (art. 59), so nothing is operational.
No EUR 1,000 VASP travel-rule threshold exists in Togo. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated. Arts. 39-47 set no figure at all: thresholds are left to 'montants fixés par l'autorité compétente'. A EUR-denominated threshold is doubly implausible in a XOF jurisdiction — UMOA seuils are set in FCFA (see Décision n° 003 du 28/03/2024/CM).
No originator-information duty applies to VASPs in Togo. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated. Art. 39 does require the *financial institution* of the donneur d'ordre to obtain and verify full name, account number, address or national ID/birth details, but that duty does not reach PSAV.
No beneficiary-information duty applies to VASPs in Togo. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated. Art. 39 requires the beneficiary's name and account number to accompany transfers made by institutions financières only.
There is no EUR 1,000 de-minimis tier for VASPs in Togo because there is no VASP travel rule at all. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated.
Two errors. (1) There is no VASP travel rule in Togo, so there is no 'collected information' to retain under one. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated. (2) The retention period under Togolese AML/CFT law is **ten (10) years**, not five: art. 23 of Loi n° 2026-001 du 2 mars 2026 requires assujettis to 'conserve[r] pendant une durée de dix ans, à compter de la clôture de leurs comptes', and art. 50 imposes ten years on gaming operators.
No duty to transmit originator/beneficiary data 'immediately and securely' to a beneficiary VASP exists in Togo. There is no crypto travel rule in force in Togo or anywhere in UEMOA. Verified directly against Togo's own transposition: arts. 39-47 of Loi n° 2026-001 du 2 mars 2026 bind 'les institutions financières qui effectuent des virements électroniques', a category art. 2(41) defines by enumeration and which does not include PSAV; articles 39-47 contain no occurrence of 'actifs virtuels' or 'prestataires de services d'actifs virtuels'. PSAV are handled separately in Chapitre VI (arts. 58-59), and art. 59 defers every PSAV-specific requirement to competent authorities Togo has not designated. The quoted phrase is FATF INR.16 language attributed to a fabricated BCEAO instruction.
CENTIF-Togo is a financial intelligence unit and does not impose administrative sanctions. Under the UMOA uniform law of 31 March 2023 as transposed by Loi n° 2026-001 du 2 mars 2026, STRs go to CENTIF (art. 60) while administrative sanctions are imposed by the *autorité de contrôle* (art. 182), not by the CRF. For PSAV specifically, art. 59 defers the applicable requirements and sanctions to 'les autorités compétentes' — and no competent authority for PSAV has been designated in Togo, so no VASP-specific administrative sanction regime is operational. The supporting citation, 'Instruction n° 003/2022/RB/BCEAO', does not exist.
Criminal Penalties: For serious breaches, particularly those involving money laundering or terrorist financing, individuals and corporate officers can face imprisonment and substantial monetary fines. These penalties are determined by national criminal law and the AML/CFT framework.
Lack of Specific Crypto Legislation: Like many countries in the region, Togo has not yet enacted comprehensive, standalone legislation specifically regulating virtual assets or cryptocurrency service providers. Discussions are ongoing at the UEMOA level, but concrete national laws and enforcement frameworks are still developing.
Evidence fact tg.enforcement.absence-of-specific-enforcement-actions not found (may have been renamed).
Togo is a UEMOA/UMOA member and the BCEAO is the common central bank for the eight member states. However, the BCEAO has issued no formal public communique warning about virtual currencies at the cited URL, which redirects silently to the BCEAO homepage. The BCEAO's documented position as of August 2026 rests on (i) Governor Kassi Brou's July 2026 statement ('Ce n'est pas une monnaie. Ce n'est pas reglementee. Donc soyez prudents.') and (ii) the 8 May 2026 Dakar crypto-asset conference launching the C-CRYPTO drafting committee. The substance of the claim (not legal tender, not regulated by the BCEAO, users bear the risk) is correct; the evidentiary basis ('consistently issued warnings', with a specific communique) is not.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a centralized exchange could theoretically operate under the BCEAO's regional VASP framework (Instruction N° 003/2022/RB/BCEAO) but faces a near-hostile environment: banks are prohibited from servicing crypto, national implementing legislation in Togo is incomplete, no licensing pathway is operational, and the exchange would be unlicensed/unregulated with no banking access or consumer protection.
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?