Guinea’s anti-money laundering law, published by the BCRG, provides specific guidance on VASPs and their supervision. This guide explains how to connect those rules to an operational structure, without presenting a universal licensing application. The exact requirements and applicable decisions must be confirmed with the authorities and qualified advisers before any service goes live.
In brief
- Article 6 defines commercial VASP functions; Article 101 requires prior approval or authorization from the BCRG.
- Article 97 addresses the Central Bank’s AML/CFT supervision of VASPs.
- Payments, custody, data and incident processes should be mapped before accepting client funds.
Crypto regulation in Guinea: classifying the functions
The comparison framework for platforms and their statuses can help break down a project. Distinguish the company displaying prices, the one receiving GNF and the one controlling the assets. A shared brand does not mean that all these functions belong to the same entity or have the same legal basis.
The Guinean anti-money laundering law published by the BCRG defines VASPs in Article 6, point 63. It notably covers exchanges between virtual assets and fiat currency, exchanges between virtual assets, transfers, and certain custody or administration services. The fact that the activity is carried out commercially in the name of or on behalf of a client is relevant to this definition.
Article 101 requires approval or authorization from the Central Bank for the professional provision of virtual asset services. Article 97 assigns it responsibility for regulating and monitoring compliance with the relevant AML/CFT obligations. These provisions do not amount to a collective license for companies that add identity checks to an application.
Describe what the service can actually do. Can it move funds without the client’s decision? Does it set the rate and choose the counterparty? Does it hold the keys or approve withdrawals? A company presented as a technology provider may in practice perform other functions. Classification should follow those responsibilities rather than the marketing language used for the product.
We are not presenting a consolidated list of all current decisions, amendments and implementing measures. No operator receives any certification here. Before launching, provide a complete description of the model to qualified contacts. An appropriate response requires the flows, contracts and countries of execution—not just the name of the asset offered to the public.
Mapping fund flows and related contracts
Consider a fictional service that receives GNF and delivers a token. The customer, seller, payment provider, liquidity provider and any custodian should all be represented. Each step must specify who holds what and under which obligation. Outsourcing a function does not automatically remove responsibility toward the end customer.
The guide to buying crypto with Mobile Money shows why payment and delivery should remain distinct. An electronic money operator does not necessarily provide a crypto service simply because a seller receives payments on its network. The partnership should define permitted uses, controls and suspension procedures instead of relying on a technical possibility.
The refund process requires the same level of precision. If payment arrives but delivery fails, which company makes the decision and in which currency? How is an expired quote or an incompatible destination handled? A credible answer must exist before the first order, without promising the technical cancellation of a transfer already confirmed on a blockchain.
Pricing should also match the accounting for the transaction journey. The crypto fees report distinguishes conversion margin, payment costs and withdrawals. Each amount should be traceable to an order and a net result. An all-in price can remain clear, provided it does not conceal necessary fees that appear only after payment has been collected.
For international flows, identify the countries and providers involved. A Guinean customer, a foreign platform and a settlement account located elsewhere may be subject to different requirements. Do not assume that authorization obtained in one country covers every function everywhere. The analysis must examine the contracts and relevant rules for the actual arrangement, not merely the location of the interface.
Organizing customer controls and protecting data
Consistent controls begin with the information required and the decision criteria. They do not consist of collecting the maximum number of documents without explaining how they will be used. Exact obligations depend on the rules and the business model. This guide does not establish any universal legal threshold at which a transaction automatically becomes professional or always requires the same documents.
The guide to KYC, data and recourse raises practical questions: who collects the information, who can access it and how can an error be corrected? An identity file should not circulate through the personal messaging accounts of several employees. Access should match job responsibilities, and retention should follow applicable rules rather than an improvised period.
A mismatch between the payer and the account holder calls for a verification procedure. It justifies neither automatic acceptance nor an improvised criminal accusation by support staff. The company must understand the flows, document its decisions and have an escalation path. Consistency protects both the integrity of the controls and bona fide customers.
Confidential information requires clear separation. A commercial explanation concerning a case does not mean that every piece of information connected to an analysis or report can be disclosed. Teams must understand the limits on communication. A poorly worded promise of complete transparency may conflict with legal obligations and expose other people’s data.
Also prepare for the correction of an unreadable document, a misspelled name or an expired document. Contradictory requests can trap a customer in a sequence of refusals with no way forward. A serious process provides a timeline, reasons that can be communicated and an authorized person who can review the situation, without bypassing required controls or inventing an exception for every complaint.
Securing custody and reconciling transactions
The crypto wallet guide distinguishes control of private keys from the simple display of a balance. If the company holds assets for customers, it must be able to describe transfer authorities and approval mechanisms. If it only provides a personal tool, its communications should explain the respective responsibilities without promising recovery it cannot perform.
Security depends in particular on access controls, backups and decisions involving sensitive operations. A project dependent on one person’s phone has an obvious operational weakness. Plan for a lost device, an employee’s departure and the unavailability of a manager. Procedures should limit unnecessary powers and enable controlled continuity without distributing secrets across the entire team.
Reconciliation should connect the order, payment, delivery and any refund. An overall balance is not enough to determine each customer’s position. Pending transactions and discrepancies should be shown separately, with someone responsible for resolving them. This traceability supports accounting and incident reviews, without replacing the professional obligations that must be confirmed for the model.
For a token circulating across several networks, technical references must remain explicit. Two transfers using the same symbol do not necessarily involve the same asset accepted by the destination. Support staff must be able to identify the relevant chain and contract, distinguish errors and avoid guaranteeing recovery before confirming the technical capabilities and scope of intervention.
An external provider may also suspend withdrawals. Define who blocks new orders affected by the suspension, how customers are informed and which alternatives remain permissible. Continuing to accept funds on the assumption that the partner will soon reopen increases obligations without a certain solution. The continuity plan should prioritize risk control over the immediate preservation of commercial volume.
Preparing for incidents and reviewing evidence
The complaints procedure should begin with a shared timeline: quote, validity period, payment, delivery and final status. A case number makes follow-up easier. Teams must distinguish a technical issue, a commercial dispute and a situation requiring specific legal treatment. Responding to everything with an opaque formula makes it impossible to correct errors or understand recurring causes.
Commercial communications also require review. The Guinean ministry’s denial of a fake crypto partnership highlights the risk of falsely claiming public guarantees. A company must be able to substantiate the relationships it advertises and prevent intermediaries from promising returns or protections unsupported by any document.
Review the framework whenever a partner, contracting entity or country of execution changes. A modification presented as technical may affect the data collected, available remedies and required authorizations. The review should take place before the new process is activated generally. Keeping the previous version of the contracts also helps explain which commitments applied to a given order.
A professional activity must also document accounting and tax responsibilities with specialists. No universal rate or treatment can be inferred from the word stablecoin or Bitcoin alone. The organization must be able to explain its revenue, costs and relevant assets. Questions should be based on transactions and supporting documents, not on an interpretation found for another country.
Crypto regulation in Guinea therefore requires prior authorization, the functions actually performed and the procedures governing fund flows to be considered together. A KYC form or terms-and-conditions page cannot do this work on its own. Before offering a service to the public, the project must obtain the appropriate confirmations and have a chain of responsibility it can explain and demonstrate.
