Before following a tutorial or sending money, it is therefore important to check the date of the relevant texts, the intermediary’s role and the exact scope of the activity. Law 3/24 prohibits mining, while Law 11/24 explicitly brings virtual-asset service providers into the supervisory framework. The two issues overlap, but they are not interchangeable.
In brief
- Law 3/24 specifically covers mining, mining equipment and certain infringements involving the national electricity system.
- Law 11/24 provides for the authorization or registration and supervision of virtual-asset service providers.
- A website’s accessibility, a foreign license or online advice does not prove that a specific service is authorized in Angola.
Buying Bitcoin in Angola: reading the applicable laws
Law No. 3/24 of 10 April 2024 is entitled the Law on the Prohibition of Mining Cryptocurrencies and Other Virtual Assets. Article 1 establishes this regime, Article 2 limits it to individuals and legal entities involved in mining, and Article 4 prohibits mining activities in the country as well as certain uses of electrical installations. The following articles define offenses related to equipment and energy.
The general overview of crypto in Angola sets out the national context. For more on the role of intermediaries and controls, the Bref Crypto guide to KYC and remedies provides additional context.
This reading of the law is more precise than a quick translation of its title, which could suggest that all crypto activity is prohibited in the same way. To check the original text, consult Law 3/24 hosted by the CMC and its notice in the CMC legislative register.
Law 3/24 should not, however, be considered in isolation from the rest of financial law. In July 2024, Law No. 11/24 amended Anti-Money-Laundering Law No. 5/20. Article 10-A covers virtual-asset service providers, assigns supervision to Banco Nacional de Angola for cryptocurrencies and to the CMC for other virtual assets, and refers to the licensing or registration of operators. This framework concerns providers’ activities and obligations; it does not grant blanket authorization to every service available online.
The cautious conclusion is therefore as follows: mining is subject to an explicit criminal prohibition; crypto services are governed by supervision, authorization or registration requirements; and the position regarding an individual purchase or holding cannot be inferred from a single legal provision. The circumstances, the provider’s role and supplementary rules all matter. The guide to crypto costs helps distinguish a simple price estimate from a transaction carried out by a third party.
Service provider and individual: two different roles
A platform that holds clients’ assets, exchanges cryptocurrencies, arranges transfers or provides certain professional services is not acting in the same capacity as someone who checks a price or holds a private key. Law 11/24 addresses providers’ activities and the risks involved. This distinction prevents users from automatically being assigned the same obligations as a business, while also avoiding the claim that all personal transactions carry no legal risk.
The law provides for risk-based supervision. Authorities may request information about the nature and ownership of assets, identify operators and impose control measures. Providers must implement customer-identification, risk-assessment and suspicious-transaction reporting procedures, in accordance with the applicable regime. These requirements are not merely a commercial formality: they determine whether the service can operate in compliance with the local framework.
Law 11/24, published by the Financial Intelligence Unit, also introduces due-diligence and information requirements for the relevant transactions. These details apply to the entities covered by the law. They are not a guide to evading controls, nor a promise of absolute confidentiality.
For readers, the practical takeaway is straightforward: do not assess a service solely by its interface, user numbers or presence in a mobile app. Identify the legal entity entering into the contract, the entity’s country, the service actually provided, its local status and its complaint procedures. A license issued in another country may be worth checking, but it does not by itself prove authorization in Angola.
What the CMC’s agenda indicates—and what it does not guarantee
In its 2026 regulatory agenda, the CMC announces a fourth-quarter regulation on obligations to prevent money laundering, terrorist financing and proliferation, including rules applicable to virtual-asset service providers under the changes introduced by Law 11/24. This is an institutional timetable signal, not the regulation itself.
An agenda can change, and a text may be subject to consultation or published with a specific effective date. It would therefore be imprudent to present the proposal as a definitively applicable rule—or, conversely, to conclude that no rules apply until the agenda shows a final text. The CMC’s 2026 regulatory agenda can be used to follow this work.
For an actual decision, checks should cover the Official Gazette, regulatory communications and the register of authorized entities, as of the date the service is used. A list consulted several months earlier may be outdated. If a company claims to be “licensed,” ask for the license number, the authority, the licensed entity and the scope of the authorization, then verify those details directly with the regulator.
This focus on precision is consistent with the Bref Crypto guide to platform verification criteria. Four levels must be separated: does the company exist? Does the domain name belong to it? Is its service authorized in that territory? Finally, does the contract genuinely protect the client in the event of a freeze or bankruptcy? A positive answer to one question does not automatically answer the other three.
An accessible website is not proof of authorization
A website may be accessible from Luanda without its operator being authorized to provide a local service. Likewise, the absence of a technical block is neither validation by the central bank nor a settlement guarantee. An app’s availability depends on commercial and technical factors that are not the same as the applicable law.
A well-known brand name can also obscure the legal identity of the counterparty. The terms may refer to an affiliate or a company located elsewhere, with different complaint procedures. Before engaging, read the terms of service, custody policy, withdrawal rules, stated jurisdiction and territorial restrictions. If the documents do not clearly identify the entity, the risk of confusion increases.
Caution is also necessary with informal intermediaries offering a “verified” account, a shared wallet or a purchase on behalf of a third party. Such an arrangement does not turn the service into an authorized operator. It adds risks of account theft, freezes, disputes and loss of control over the assets. The Bref Crypto guide to KYC, data and remedies helps distinguish a legitimate document request from questionable data collection.
Never provide a one-time password, recovery phrase or private key to “open” an account or confirm a transaction. Genuine regulatory checks may require a provider to collect identification or supporting documents, but they do not justify handing over the secrets that control a self-custodied wallet.
Questions to ask before committing
A proper review starts with the contracting entity. Is the name shown on the website, receipt and contract the same? Are the address and country consistent? What exactly is being offered: brokerage, exchange, custody, transfer or simply information? Does the operator identify its regulator and authorization number? Can the answer be confirmed through an official source?
Next, understand the flow of funds and the complaints process. Who receives the money? In which currency? What name appears on the beneficiary account? Does the provider explain fees, processing times and freeze conditions? Does it have a verifiable complaints channel? A request to pay into a personal account or to a wallet address sent through private messaging should halt the exchange until the identity and basis for the request have been established.
Finally, examine the commercial promise. No operator can guarantee the price of bitcoin, a fixed return or an instant withdrawal in every situation. Celebrity endorsements, screenshots of profits and messaging groups are no substitute for a contract. Scammers frequently reuse the logos and names of real entities to give fake services an appearance of legitimacy.
This checklist is not a substitute for local legal advice. It is primarily intended to identify missing information and help suspend a payment made under pressure. For questions involving a personal situation, a professional activity or funds already sent, an Angolan lawyer and the relevant authorities remain the appropriate contacts.
What to remember before making a decision
Angola’s legal texts call for an activity-based reading. Law 3/24 prohibits mining and targets offenses linked to that activity. Law 11/24 addresses virtual-asset service providers within the anti-money-laundering framework and provides for their supervision and authorization or registration. The CMC’s regulatory program shows that additional implementing rules were on the 2026 agenda.
These elements do not justify recommending a purchase, certifying a particular operator or concluding that every individual transaction is legal. They do, however, rule out two shortcuts: mining is not synonymous with all crypto activity, and an accessible website is not proof of authorization. A general article cannot replace an analysis of a contract or an individual case.
Before taking action, consult the latest version of the texts, confirm the provider’s identity with the relevant regulator and check that the proposed service falls within its declared scope. If a page pressures you to pay or bypass controls, do not proceed. In Angola, understanding who offers which service matters just as much as understanding bitcoin itself.
