Custodial wallet / SaaS in Tanzania
Hosted wallet provider that holds keys on behalf of end users, often white-labeled to businesses (custody as a service).
Custodial SaaS is conditionally permitted in Tanzania with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Full KYC/CDD on all customers (natural persons: name, DOB, address, nationality, national ID; legal entities: registration number, directors, beneficial ownership) per the Anti-Money Laundering Act, 2006 and AML Regulations, 2012
- Beneficial ownership identification and verification for all legal entity customers
- Ongoing transaction monitoring to detect unusual/suspicious patterns
- Enhanced Due Diligence (EDD) for PEPs, high-risk jurisdictions, complex/unusually large transactions, cross-border virtual asset transfers, and anonymity-favoring technologies
- Suspicious Transaction Reporting (STR) to the Financial Intelligence Unit (FIU) Tanzania without delay
- No-tipping-off prohibition regarding STR submissions
- Record-keeping for a minimum of 5 years post-relationship or post-transaction, including all CDD data, business correspondence, transaction records (dates, amounts, asset types, addresses), and STR records
- General AML/CFT obligations apply to VASPs even though they are not explicitly listed — AML framework covers 'financial institutions' and 'other reporting institutions' broadly
Key Restrictions
- No specific crypto custodian license exists — entity would operate in a legally ambiguous space with no clear regulatory safe harbor
- Bank of Tanzania has repeatedly stated cryptocurrencies are not legal tender and financial institutions are prohibited from facilitating crypto transactions (BoT stance reaffirmed 2021)
- If activities involve fiat conversion or payment processing, the entity may fall under the National Payment Systems Act, 2015 (BoT-administered), requiring a payment system license
- If digital assets are classified as securities, CMSA jurisdiction would apply
- Local incorporation, physical office, and local management are highly likely prerequisites for any regulated financial activity in Tanzania
- No specific segregation-of-client-assets rules exist, but general financial governance principles would strongly imply such segregation if operating
Key Risks
- High enforcement risk — BoT has publicly warned that crypto is not legal tender and has prohibited financial institutions from facilitating crypto transactions; operators could be deemed unauthorized financial institutions
- Regulatory ambiguity — no framework exists, leaving custodial wallet/SaaS operators without a clear licensing pathway or legal protection
- Future regulatory change risk — any emerging framework (expected under BOT/CMSA) could impose retroactive requirements or disrupt existing operations
- Reputational risk from operating outside an established regulatory perimeter in a jurisdiction where the central bank has issued public warnings against crypto
- Tax treatment of custodial services and client assets is undefined
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Tanzania has no crypto-custodian licence and no virtual-asset service provider authorisation of any kind: the Bank of Tanzania Act, Cap. 197 creates no such category, the Bank of Tanzania's published Regulations and Guidelines registers carry no virtual-asset instrument, and the Capital Markets and Securities Authority has issued no crypto circular, so a crypto custodian in Tanzania is unlicensed and unsupervised rather than caught by general financial-service rules.
The Bank of Tanzania is Tanzania's central bank under the Bank of Tanzania Act, Cap. 197 and holds the sole right to issue notes and coins under section 26, but it supervises no virtual-asset activity; Governor Emmanuel Tutuba said on 30 July 2026 that the Bank had completed its assessment and submitted a concept on the regulation and supervision of virtual assets to the Ministry of Finance, so the drafting now sits with the Ministry and no framework is in force.
Capital Markets and Securities Authority (CMSA): If digital assets are classified as securities, the CMSA would likely have jurisdiction over certain aspects, including custody for such assets.
Tanzanian virtual-asset custodians carry no AML/CFT obligations: the Anti-Money Laundering (Amendment) Act, 2022 (Act No. 2 of 2022) inserted definitions of 'virtual asset' and 'virtual asset service provider' into section 3 of the Anti-Money Laundering Act, Cap. 423 but did not add virtual-asset service providers to the section 3 'reporting person' list, whose paragraphs (a) to (i) name no virtual-asset business, and the Minister has published no Gazette notice under paragraph (j) designating them.
Tanzanian law imposes no duty to segregate client digital assets from a custodian's proprietary assets: no Tanzanian virtual-asset instrument exists, the Bank of Tanzania's Regulations and Guidelines registers carry no digital-asset client-asset rule, and the Bank of Tanzania (Fintech Regulatory Sandbox) Regulations, 2024 (GN No. 540 of 5 July 2024) make no reference to virtual assets or to safekeeping of client assets.
Tanzania imposes no insurance, bonding or proof-of-reserves duty on crypto custodians: the Bank of Tanzania Act, Cap. 197 is silent on virtual assets and on custody of client assets, the Bank's published Regulations and Guidelines registers carry no virtual-asset instrument, and the Bank of Tanzania (Fintech Regulatory Sandbox) Regulations, 2024 create no custodian insurance or reserve obligation.
No Tanzanian instrument mandates cold storage or any other technical custody standard for client digital assets: the Bank of Tanzania Act, Cap. 197 is silent on virtual assets, and the Bank of Tanzania's published Regulations and Guidelines registers contain no digital-asset custody or storage standard.
Tanzanian law contains no definition of a qualified crypto custodian and no custodian authorisation category for virtual assets: 'qualified custodian' is United States Securities and Exchange Commission vocabulary with no standing in Tanzania, and neither the Bank of Tanzania Act, Cap. 197 nor the Anti-Money Laundering Act, Cap. 423 creates such a status.
Tanzania has no virtual-asset licensing regime: as at 21 August 2026 there is no VASP licence class, no minimum-capital floor, no application process, no fee schedule, no register and no licensed firm. Tanzanian law does nevertheless define the terms — the Anti-Money Laundering (Amendment) Act, 2022 (Act No. 2 of 2022, assented 23 February 2022, in force 8 March 2022) inserted definitions of "virtual asset" and "virtual asset service provider" into section 3 of the Anti-Money Laundering Act, Cap. 423, without attaching any obligation to them. The Bank of Tanzania's public notices of 12 and 29 November 2019, issued under sections 26 and 27 of the Bank of Tanzania Act, 2006 (Act No. 4 of 2006, Cap. 197) and the Foreign Exchange Act, 1992, remain the operative central-bank position, and ESAAMLG rated Tanzania Partially Compliant with Recommendation 15 in its 1st Enhanced Follow-Up Report of September 2022.
Current Stance (Implied): While formal prohibition may not be explicit in specific crypto legislation, the lack of a regulatory framework and the BOT's historical cautious stance on unregulated financial activities mean that operating an unlicensed crypto business could face significant legal uncertainty and potential challenges under existing general financial laws.
Custody Providers: If a provider holds significant assets on behalf of clients, it could potentially be viewed through the lens of trust services or asset management, which are typically regulated.
The National Payment Systems Act, 2015 (Act No. 4 of 2015) licenses payment systems under section 7, payment instruments under section 17 and the issuance of electronic money under section 26, and its text contains no reference to virtual assets, cryptocurrency or digital currency. Its definition of electronic money requires "monetary value as represented by a claim on its issuer, that is electronically stored in an instrument or device, issued against receipt of funds of an amount not lesser in value than the monetary value issued" and redeemable in cash, which excludes virtual assets. A Bank of Tanzania payment-system, payment-instrument or electronic-money licence therefore reaches the fiat payment leg only and is not a virtual-asset licence, and the Bank of Tanzania has licensed no virtual-asset service provider under this or any other statute.
Tanzania's anti-money-laundering statute is the Anti-Money Laundering Act, originally Act No. 12 of 2006 and consolidated as Cap. 423 R.E. 2022, administered by the Financial Intelligence Unit established under it. Banks, financial institutions, cash dealers and the designated non-financial businesses and professions set out at section 3 paragraphs (a) to (i) are reporting persons and owe customer due diligence, record-keeping and suspicious-transaction reporting duties. Virtual asset service providers appear nowhere in that list, so the Tanzanian AML perimeter does not reach them, and the Anti-Money Laundering (Amendment) Regulations, 2023, G.N. No. 853E of 22 November 2023, made under section 29 of Cap. 423, contain no virtual-asset provision.
Highly Likely: For any regulated financial service, a local presence (e.g., a locally incorporated entity, physical office, local management) is typically a prerequisite in Tanzania. This would almost certainly be a requirement for any future crypto licensing.
Tanzania's principal AML statute is the Anti-Money Laundering Act, Cap. 423 (Act No. 12 of 2006, R.E. 2023, commenced 1 July 2007), which imposes obligations on the class of 'reporting person' defined in section 3 paragraphs (a) to (j); the Anti-Money Laundering (Amendment) Act, 2022 (Act No. 2 of 2022, in force 8 March 2022) inserted definitions of 'virtual asset' and 'virtual asset service provider' into section 3 but left virtual asset service providers outside that class, which only a notice published in the Gazette by the Minister under paragraph (j) can extend.
Tanzania's operative AML subsidiary legislation is the Anti-Money Laundering Regulations, 2022 (Government Notice No. 397 of 3 June 2022), amended by the Anti-Money Laundering (Amendment) Regulations, 2023 (Government Notice No. 853E of 22 November 2023); regulation 30 of GN No. 397 revoked the Anti-Money Laundering and Counter Terrorist Financing Regulations, 2012 (GN No. 289 of 2012), and neither the 2022 regulations nor the 2023 amendment mentions virtual assets or virtual asset service providers.
Evidence fact tz.aml.identification-and-verification-of-customers not found (may have been renamed).
Beneficial Ownership: Identifying and verifying the identity of the ultimate beneficial owner(s) of the virtual assets or the entity, ensuring that the VASP knows who ultimately owns or controls the funds/assets.
Ongoing Monitoring: Continuously monitoring the business relationship and transactions undertaken by the customer to ensure that they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes monitoring for unusual or suspicious activities.
Enhanced Due Diligence (EDD): Applying EDD for higher-risk situations, which may include:
Tanzania imposes no suspicious-transaction reporting duty on virtual asset service providers: section 18 of the Anti-Money Laundering Act, Cap. 423 R.E. 2023 (section 17 in the R.E. 2022 numbering) binds only a "reporting person", and the section 3 definition of reporting person, at paragraphs (a) to (j), names banks and financial institutions, cash dealers, accountants, real estate agents, auditors, tax advisers, dealers in precious stones, works of art or metals, trust and company service providers, motor vehicle dealers, clearing and forwarding agents, advocates and notaries, pension fund managers, securities market intermediaries, financial leasing entities, microfinance service providers and auctioneers, but no virtual asset service provider, even though section 3 has defined both "virtual asset" and "virtual asset service provider" since the Anti-Money Laundering (Amendment) Act, 2022 (Act No. 2 of 2022) came into force on 8 March 2022.
Tanzania's anti-money-laundering record-retention period is ten years, not five: section 17(1)(b) of the Anti-Money Laundering Act, Cap. 423 R.E. 2023 (section 16 in the R.E. 2022 numbering) requires every reporting person to retain records for a minimum period of ten years from the date the transaction is completed, the business relationship ends or the risk assessment is completed, and the duty binds only the reporting persons listed at paragraphs (a) to (j) of section 3, a list that omits virtual asset service providers.
Records of all virtual asset transactions, including transaction dates, amounts, types of virtual assets, sending and receiving addresses (if applicable), and originating/beneficiary information.
Entity Targeted: The general public, financial institutions, and any individuals or entities attempting to deal in, facilitate, or operate businesses involving cryptocurrencies. Violation Type: Dealing in, facilitating, or promoting instruments not recognized as legal tender; operating unauthorized financial services. Penalty Amount: Not a specific fine amount applied in a single action, but the outcome implies potential prosecution under existing financial laws for unauthorized activities.
Cryptocurrencies are not legal tender in Tanzania - section 26 of the Bank of Tanzania Act, Cap. 197 gives the Bank the sole right of issue and makes its notes and coins the only legal tender, and the Bank's notices of 12 and 29 November 2019 restate this - but no Tanzanian instrument prohibits financial institutions from facilitating crypto transactions, and the High Court held in Yellow Card Tanzania Limited v Nyamwero Michael Nyamwero, Commercial Case No. 12171 of 2024 (13 December 2024) that crypto trading is not illegal in Tanzania.
Evidence fact tz.enforcement.bank-of-tanzanias-stance-via not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — custodial wallet/SaaS operations in Tanzania face a legally ambiguous environment with no specific crypto custodian license; operators must navigate existing AML/CFT obligations, likely need local incorporation, face BoT enforcement risk due to crypto's non-legal-tender status, and should monitor for emerging BOT/CMSA frameworks.
Questions this verdict aims to answer
- What custody license / qualified-custodian status applies?
- What segregation, insurance, and proof-of-reserves rules apply?
- What AML obligations attach to the SaaS vs the white-label client?