← Regulations / Uganda / Operating Models / Crypto debit card

Crypto-funded debit card in Uganda

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Uganda with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer Due Diligence (CDD) required under the Anti-Money Laundering Act, 2013 and AML Regulations, 2015 — obtain and verify full name, permanent address, date of birth, national ID/passport for individuals
  • Beneficial ownership identification required — identify and verify natural person(s) who ultimately own or control the customer
  • Purpose and intended nature of business relationship must be documented
  • Ongoing transaction monitoring to ensure consistency with customer risk profile
  • Enhanced Due Diligence (EDD) required for PEPs, customers from high-risk jurisdictions (FATF-listed), transactions involving large amounts or complex structures
  • Suspicious Transaction Reports (STRs) must be filed with the Financial Intelligence Authority (FIA) promptly, typically within 48 hours of forming suspicion
  • No-tipping-off prohibition — must not disclose STR filing to customer or third parties
  • Record-keeping: all CDD, transaction records (including wallet addresses, transaction hashes, amounts), and business correspondence must be retained for minimum 5 years after business relationship ends
  • Simplified Due Diligence (SDD) permitted only in limited low-risk circumstances as permitted by regulations

Key Restrictions

  • Bank of Uganda Circular No. 008 of 2022 explicitly prohibits all supervised financial institutions (SFIs) and Payment Service Providers (PSPs) from facilitating cryptocurrency transactions, converting crypto to fiat, or holding crypto — this makes partner-bank/BIN-sponsor arrangements with regulated entities effectively impossible
  • Cryptocurrencies are not recognized as legal tender in Uganda and no cryptocurrency businesses are licensed or regulated by the Bank of Uganda
  • No specific e-money or payment institution license exists for crypto-funded debit card programs — any such program would operate in a regulatory grey area
  • If a crypto debit card program involved fiat-to-crypto or crypto-to-fiat conversion, it could theoretically be deemed a Payment Service Provider under the National Payment Systems Act, 2020, requiring a PSP/PSO license — but no such license has been granted for crypto activities
  • Local entity incorporation would likely be required for any attempt to obtain a PSP license under the NPS Act
  • All income or gains from crypto activities exceeding UGX 2,820,000 per annum must be declared to the Uganda Revenue Authority (URA) and taxed at standard individual (up to 40%) or corporate (30%) rates

Key Risks

  • BoU circulars have effectively pushed crypto operations out of the formal financial system — no regulated bank or PSP can legally partner with a crypto-funded debit card issuer
  • Enforcement risk is high: regulated financial institutions that violate the BoU prohibition face regulatory action; unlicensed operators face legal uncertainty and potential future enforcement
  • No specific VASP licensing framework exists — the program would operate in a complete regulatory grey area with no ability to obtain formal regulatory approval
  • Tax ambiguity: the Uganda Revenue Authority (URA) has not issued specific crypto guidance, creating uncertainty around VAT treatment of crypto-to-fiat conversion fees and card services
  • Reputational risk from public BoU warnings that characterize crypto as high-risk for fraud, money laundering, and loss of funds

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

The Bank of Uganda has not licensed any institution to sell cryptocurrencies or to facilitate trade in cryptocurrencies, and its Governor states that virtual assets are not legal tender in Uganda and that participation is at one's own risk.

licensing 80% confidence

Uganda's payment-services statute is the National Payment Systems Act, 2020 (Act 15 of 2020, Cap. 59), assented on 29 July 2020 and commenced on 4 September 2020, supplemented by the National Payment Systems Regulations, 2021 gazetted on 5 March 2021; the Act carries no reference to virtual assets, cryptocurrency or digital currency.

licensing 80% confidence

National Payment Systems Regulations, 2021: (Often published as a statutory instrument, typically available via the Uganda Legal Information Institute or Ministry of Finance archives).

licensing 80% confidence

Current Situation: No specific license. Many operate in a grey area.

licensing 80% confidence

Potential Interpretation: If an exchange facilitates transactions between fiat currency and virtual assets (or vice versa), it could theoretically be deemed to be performing functions similar to a money remitter or payment service provider. In such a scenario, they might be required to obtain a Payment Service Provider (PSP) license or a Payment System Operator (PSO) license under the National Payment Systems Act, 2020, regulated by the Bank of Uganda.

aml 80% confidence

Uganda's Anti-Money Laundering Act, 2013 (Act 12 of 2013), consolidated as Chapter 118, imposes its obligations on accountable persons, defined as any person listed in its Second Schedule, and section 18 establishes the Financial Intelligence Authority; the Act reaches virtual asset service providers by express designation rather than by interpretation, because the Anti-Money Laundering (Amendment of Second Schedule) Instrument, 2020 (Statutory Instrument 136 of 2020) added virtual asset service providers to that Schedule with effect from 27 November 2020, and they stand as paragraph 16 of Schedule 2 in the Financial Intelligence Authority's signed registration guidelines of January 2024, which require every accountable person to register with the Authority.

aml 80% confidence

Uganda's Anti-Money Laundering Regulations, 2015 are Statutory Instrument 75 of 2015, made on 24 December 2015 under the Anti-Money Laundering Act, 2013, and they do carry the implementing detail the claim describes: Part V, regulations 13 to 27, sets out customer due diligence and verification for natural persons, foreign nationals, entities, partnerships and trustees; regulation 42 requires an accountable person to keep transaction and due-diligence records for a minimum of five years from completion of the relevant business or transaction; and regulation 39 governs suspicious transaction reporting to the Financial Intelligence Authority, with regulation 39(3) additionally requiring reports of cash transactions above one thousand currency points.

aml 80% confidence

Uganda has no Financial Intelligence Authority Act, of 2013 or of any year; the Uganda Legal Information Institute's consolidated index of legislation carries no such title. The Financial Intelligence Authority is established by section 18 of the Anti-Money Laundering Act, 2013 (Act 12 of 2013), Chapter 118, which reads 'There is established a Financial Intelligence Authority', and the Authority's functions of receiving, analysing and disseminating financial intelligence flow from that Act rather than from a separate statute.

Evidence fact ug.aml.identification-and-verification not found (may have been renamed).

aml 80% confidence

Individual Customers: Obtain and verify the customer's full name, permanent address, date of birth, national identification number (e.g., National ID, passport), and other relevant identification documents.

aml 80% confidence

Beneficial Ownership: Identify and verify the identity of the beneficial owner(s) – the natural person(s) who ultimately own or control the customer, or the natural person(s) on whose behalf a transaction is being conducted.

aml 80% confidence

Purpose and Intended Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or the transaction.

aml 80% confidence

Ongoing Monitoring: Continuously monitor the business relationship and transactions undertaken by the customer to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including the source of funds where necessary.

aml 80% confidence

Enhanced Due Diligence (EDD): Apply EDD for higher-risk customers, transactions, or business relationships. This includes:

aml 80% confidence

Report Suspicious Transactions: Report any transaction (attempted or completed) where there is a reasonable suspicion that the funds involved are proceeds of crime, or are linked to money laundering, terrorist financing, or proliferation financing.

aml 80% confidence

Regulation 39 of Uganda's Anti-Money Laundering Regulations, 2015 (Statutory Instrument 75 of 2015) requires an accountable person to report a suspicious transaction to the Financial Intelligence Authority as soon as is practicable and in any case not later than forty-eight hours, on the prescribed form, while section 9(2) of the Anti-Money Laundering Act, 2013 sets the statutory limit as without delay and not later than two working days from the date the suspicion was formed, so the forty-eight-hour figure is the regulation's and the two-working-day figure is the Act's.

aml 80% confidence

No Tipping-Off: Not disclose to the customer or any third party that a suspicious transaction report has been made or that a money laundering investigation is being conducted.

aml 80% confidence

Customer Identification Records: All records obtained during CDD processes (identification documents, verification records, beneficial ownership information).

aml 80% confidence

Transaction Records: Records of all domestic and international transactions, including the amount, currency, date, type of transaction, and parties involved. For virtual assets, this would include wallet addresses, transaction hashes, and amounts.

aml 80% confidence

Uganda's Anti-Money Laundering Act 2013 s. 7(3) requires records to be kept for a minimum period of ten years from the date on which the evidence of identity of a person was obtained, the date of any transaction or correspondence, or the date on which the account is closed or the business relationship ceases, whichever is the later.

stablecoin 60% confidence

The Bank of Uganda's operative crypto instrument is a circular of 29 April 2022 issued under sections 13(1)(b) and (f) of the National Payment Systems Act 2020, which direct the central bank's power to act against a licensee that fails to adhere to its directives or endangers financial stability; the circular binds Bank of Uganda licensees and supervised financial institutions, names no stablecoin, and creates no statutory prohibition on issuing, holding or trading stablecoins in Uganda.

stablecoin 0% confidence

Bank of Uganda Circular No. 008 of 2022 – Warning Against Dealing in Cryptocurrencies:

enforcement 30% confidence

Entity Targeted: All Regulated Financial Institutions (e.g., Commercial Banks, Payment Service Providers, Microfinance Deposit-taking Institutions). Violation Type: N/A (this was a pre-emptive prohibition, not an action against a prior violation by a crypto firm). Penalty Amount: N/A (the circular itself did not impose a fine on a crypto entity, but implied penalties for regulated entities that failed to comply with the directive). Outcome: The BoU issued a circular directing all supervised financial institutions to cease facilitating transactions related to virtual currencies. This effectively cut off cryptocurrency exchanges and related businesses from accessing formal banking services in Uganda. The BoU cited concerns over consumer protection, money laundering, terrorism financing, and the lack of specific regulations. This directive has made it extremely challenging, if not impossible, for crypto businesses to operate formally within the Ugandan financial system.

enforcement 30% confidence

Entity Targeted: The general public and unregulated virtual asset service providers (implicitly). Violation Type: N/A (warnings about risks, not specific violations). Penalty Amount: N/A. Outcome: These warnings emphasize that cryptocurrencies are not legal tender, are not regulated by the BoU, and carry high risks of fraud, money laundering, and loss of funds. The FIA has also highlighted AML/CFT risks. The lack of a specific licensing and regulatory framework for VASPs means that any entity operating with virtual assets does so without official recognition or oversight, increasing their operational risk and exposure to potential future actions should a framework be introduced. This environment largely prevents formal enforcement actions against VASPs for regulatory non-compliance because there aren't specific VASP regulations to violate yet, other than general financial laws (e.g., fraud).

tax 80% confidence

Uganda has no crypto-asset tax provision, and a resident individual's gain on disposing of crypto held outside a business is not added to other income: the Income Tax Act, Chapter 338, exempts any capital gain that is not included in business income, other than a gain derived from the sale of shares in a private limited company, and Uganda levies no separate capital gains tax.

tax 80% confidence

A Ugandan company's gain on disposing of crypto held as a business asset is included in business income and taxed at the 30% corporate rate, because the Income Tax Act, Chapter 338, imposes no separate capital gains tax and gains on disposal of non-depreciable business assets fall into business income; no crypto-specific provision produces that result.

tax 80% confidence

Services Related to Crypto: If a business provides services related to cryptocurrency (e.g., exchange services, wallet services, advisory services), the fees charged for these services would likely be subject to VAT. For example, the commission charged by a crypto exchange for facilitating a trade would probably be VATable.

tax 80% confidence

Income and gains from cryptocurrency dealings are chargeable in Uganda only under the general charge of the Income Tax Act, Cap. 338, where gains on the disposal of a business asset enter business income under section 18(1)(a), and returns are furnished under section 16 of the Tax Procedures Code Act, Cap. 343; the form cited as "ITF1" is not a Uganda Revenue Authority return.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card program is effectively impossible to operate lawfully in Uganda today because the Bank of Uganda's 2022 circular prohibits all regulated financial institutions and payment service providers from facilitating crypto transactions or crypto-to-fiat conversion, cutting off access to the partner-bank and BIN-sponsor infrastructure required for such a card program, leaving any such operation in a high-risk regulatory grey area.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?