Self-custodial wallet / non-custodial software in Togo
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Togo without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No direct AML obligations attach to the publisher of self-custodial wallet software in Togo, because the publisher never holds, controls, or has access to user funds and is not a regulated financial institution or VASP under current Togolese/WAEMU law.
- The BCEAO Circular No. 00000002/RB/2020 prohibition on crypto activities applies specifically to financial institutions (banks, microfinance, payment service providers), not to software publishers.
- However, if the wallet software is distributed to users in Togo, general AML/CFT laws (Loi n° 2018-009 du 22 juin 2018) could theoretically be interpreted to apply to any activity facilitating value transfer, creating legal ambiguity.
- International sanctions screening obligations (UN, OFAC, EU) are a practical compliance expectation for any software provider with global distribution, including wallet publishers.
Key Restrictions
- The publisher must not custody, control, or have access to user private keys or funds — this is definitional to the operating model.
- The publisher must not be, and must not partner with, a regulated financial institution in Togo/WAEMU for crypto-related services, as BCEAO Circular No. 00000002/RB/2020 prohibits financial institutions from engaging in crypto activities.
- No banking relationships with Togolese financial institutions are available for crypto-related activities; fiat on/off ramps through the formal banking system are effectively blocked.
- The wallet software cannot offer any feature that constitutes money transmission, payment services, or exchange services in WAEMU without triggering unlicensed financial activity.
Key Risks
- Legal ambiguity: Togo/WAEMU has no comprehensive VASP framework, so a wallet publisher operates in a grey zone — not explicitly permitted or prohibited for software-only publishers.
- Regulatory shift risk: FATF Recommendation 15 and potential future WAEMU crypto regulations could retroactively impose licensing/registration on wallet software providers.
- Enforcement risk from CENTIF (FIU): If wallet software is used in money laundering schemes, the publisher could face investigation under general AML law (Loi n° 2018-009) even without custody.
- Banking access: No ability to open corporate bank accounts in Togo for crypto-related business; fiat rails are effectively inaccessible.
- Consumer expectation risk: Users may misunderstand the non-custodial nature and seek recourse against the publisher; no consumer-protection framework exists for crypto in Togo.
- BCEAO warnings create a hostile regulatory posture — any perceived facilitation of crypto transactions could attract regulatory attention.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
'BCEAO Circular No. 00000002/RB/2020 on the Prohibition of the Use of Cryptocurrencies and other Digital Assets in WAEMU Member States' does not exist. No BCEAO instrument prohibits cryptocurrency in UEMOA. The numbering format is also wrong: BCEAO instructions are numbered nnn-mm-yyyy (e.g. Instruction n° 008-05-2015), never with an /RB/ segment. The BCEAO's exhaustive published index of payment-system instruments 2002-2024 contains no such circular, and bceao.int returns nothing on crypto-actifs beyond the 8 May 2026 Dakar conference. The real constraint is art. 58 of the Loi uniforme of 31 March 2023: professional PSAV activity requires prior agrement from a competent authority which no member state has designated.
There is no instrument to date. No BCEAO circular prohibiting cryptocurrency was issued in 2020 or in any other year, and no 'subsequent reminders' exist. The only dated BCEAO virtual-asset activity on record is the 8 May 2026 Dakar conference and the creation of the C-CRYPTO drafting committee in May 2026.
No BCEAO instrument prohibits banks, microfinance institutions or payment service providers from buying, selling, holding or facilitating cryptocurrency transactions. This is the phantom-BCEAO-ban pattern in its fullest form. What exists is: (i) art. 58 of the Loi uniforme of 31 March 2023 requiring prior agrement for professional PSAV activity, with art. 59 deferring the detail to a competent authority no state has designated; and (ii) verbal caution from BCEAO leadership (Governor Kassi Brou, July 2026). A warning is not a prohibition, and no UEMOA text restricts what financial institutions may do with crypto-assets.
No BCEAO directive prohibits banks, microfinance institutions or payment service providers in Togo from crypto activity — no such instrument exists. The BCEAO's own exhaustive payment-systems register lists 12 instruments from 2002 to 2024 and contains nothing on crypto-actifs or stablecoins; a full-text fetch of Instruction n° 008-05-2015 (e-money) returns zero occurrences of 'crypto', 'actif virtuel', 'stablecoin' or 'blockchain'. As of the 8 May 2026 Dakar conference the BCEAO had only just created the C-CRYPTO drafting committee, and as of July 2026 was still drafting a roadmap. The real constraint is national and different in kind: art. 58 of Loi n° 2026-001 makes professional PSAV activity conditional on a prior agrément from an 'autorité compétente' that art. 59 leaves undesignated — so no agrément can be obtained. That Togolese banks decline crypto counterparties is commercial de-risking, not compliance with a prohibition. The claim's practical conclusion ('you cannot legally buy or sell crypto through traditional banks') therefore lands near the right outcome via a fabricated cause.
Evidence fact tg.licensing.for-individuals-and-unlicensed-entities not found (may have been renamed).
Correct on the narrow point: Togolese law contains no prohibition on an individual owning or trading virtual assets. Loi n° 2026-001 regulates prestataires, not holders, and imposes no restriction on natural persons holding actifs virtuels. But 'there isn't a direct law' is no longer accurate as a general statement — since 2 March 2026 there is a direct law: art. 2 defines 'actif virtuel', art. 3 makes PSAV assujettis, art. 58 forbids anyone from carrying on PSAV activity professionally without a prior agrément. And the qualifier 'or through unregulated, foreign platforms' overreaches: the individual user is outside art. 58, but a foreign platform providing exchange, transfer or custody services in Togo on a commercial basis is within it, and cannot lawfully do so because no competent authority has been designated under art. 59 to issue the agrément.
High Risk and Unregulated: However, the environment is highly risky. There is no consumer protection, no regulatory oversight for exchanges operating in the grey area, and no legal recourse if funds are lost.
The premise is false and everything is derived from it. Togolese financial institutions are not 'prohibited from dealing with crypto' — no BCEAO or Togolese instrument imposes such a prohibition, as the BCEAO's own payment-systems register and the full text of Instruction n° 008-05-2015 confirm. Fiat on/off-ramp friction in Togo is real, but its causes are (a) bank de-risking, a commercial choice, and (b) art. 58 of Loi n° 2026-001, which makes professional PSAV activity conditional on an agrément that cannot currently be issued because art. 59 leaves the competent authority undesignated. The AML/CFT-scrutiny sentence is right for the wrong reason: scrutiny arises because PSAV are themselves assujettis under art. 3, must report suspicions to CENTIF-Togo under art. 60 and retain records 10 years under art. 23 — not because converting crypto is forbidden.
Superseded on 2 March 2026. Togo's AML/CFT law IS now crypto-specific. Loi n° 2026-001 du 2 mars 2026 — Togo's transposition of the UMOA Loi uniforme LBC/FT/FP du 31 mars 2023 (itself giving effect to Directive n° 01/2023/CM/UEMOA) — defines 'actif virtuel' at art. 2 as 'la représentation numérique d'une valeur qui peut être échangée ou transférée par un procédé numérique', defines the prestataire de services d'actifs virtuels (PSAV) including custody/administration, lists PSAV among the assujettis at art. 3, and at art. 58 prohibits professional PSAV activity without prior agrément. The bill was adopted in first reading 29 December 2025 and finally on 2 March 2026, replacing the framework built on Loi n° 2018-004 du 4 mai 2018, under which the 'not crypto-specific' description was accurate. Separately: Togo is NOT a FATF member — it is a GIABA member — though its law does follow the FATF Recommendations. And the laws do more than 'could potentially be invoked': PSAV are directly assujettis with CDD, STR (art. 60, to CENTIF-Togo) and 10-year record-retention (art. 23) duties.
Togo has legislation in place to combat money laundering and terrorist financing, which would apply to financial activities, including those involving virtual assets.
The instrument number and date are wrong, and the substance is outdated. Togo's pre-2026 AML/CFT statute was the loi uniforme n° 2018-004 du 4 mai 2018 relative a la lutte contre le blanchiment de capitaux et le financement du terrorisme — not 'Loi n° 2018-009 du 22 juin 2018'. That 2018 law has been superseded by Loi n° 2026-001 du 2 mars 2026 relative a la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la proliferation des armes de destruction massive (JO n° 71, numero special, 2 mars 2026), which transposes the UMOA loi uniforme du 31 mars 2023. Adoption sequence: Assemblee nationale first reading 29 December 2025, Senat 26 February 2026, Assemblee nationale definitive adoption 27 February 2026, promulgation 2 March 2026. Contrary to the claim, the governing law does NOT rely on 'broad definitions ... interpreted to encompass new technologies': it defines actif virtuel (art. 2(2)) and PSAV (art. 2(51), custody included) explicitly and makes PSAV assujettis at art. 3(c). Record retention is 10 years (art. 23).
VASP Obligations: Under this law, VASPs (once regulated as reporting entities or covered by broad definitions) would be required to:
Compliance Requirement: FATF Recommendation 15 specifically addresses virtual assets and VASPs, requiring countries to regulate VASPs for AML/CFT purposes, license/register them, and apply the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers).
Lack of Specific Crypto Legislation: Like many countries in the region, Togo has not yet enacted comprehensive, standalone legislation specifically regulating virtual assets or cryptocurrency service providers. Discussions are ongoing at the UEMOA level, but concrete national laws and enforcement frameworks are still developing.
Evidence fact tg.enforcement.absence-of-specific-enforcement-actions not found (may have been renamed).
No named crypto enforcement action by a Togolese or UEMOA financial regulator could be found, so 'no named enforcement actions' is right. But 'the regulatory focus has primarily been on warnings' overstates the record: the cited BCEAO warning communique does not exist. Togo's documented regulatory activity on virtual assets consists of CENTIF-TG's national ML/TF risk assessment workshop on virtual assets (24 September 2025) and the transposition law adopted 27 February 2026 extending vigilance obligations to PSAV — not a warnings campaign. The remainder ('it is possible smaller localized fraud cases might occur') is unfalsifiable speculation.
Regulator Name: Central Bank of West African States (BCEAO)
Entity Targeted: General Public, financial institutions within UEMOA (including Togo). Violation Type: N/A (General warning regarding unregulated status and risks of cryptocurrencies). Penalty Amount: N/A.
CENTIF-Togo (Cellule Nationale de Traitement des Informations Financieres) is correctly named and is indeed the STR recipient (art. 60 of the loi uniforme). Two corrections: (i) it is no longer a matter of 'existing frameworks could be interpreted to apply' — since the transposition law adopted 27 February 2026 the PSAV are expressly assujettis (art. 3(c)) and 'actif virtuel' is defined (art. 2(2)), with vigilance obligations extended to PSAV verbatim in the government's own account of the bill; (ii) CENTIF monitors, receives and analyses STRs but does not sanction — under art. 182 sanctions are imposed by the autorite de controle of the sector concerned, and no autorite de controle has been designated for PSAV.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a self-custodial wallet software publisher can operate in Togo without a license because the BCEAO's crypto prohibition targets financial institutions, not software-only publishers, but faces significant legal ambiguity, no access to banking rails, and future regulatory risk from evolving FATF-aligned frameworks.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?