Discussing crypto legality in Mali requires separating several questions: holding an asset, selling it occasionally, safeguarding clients’ funds, or operating an exchange service. A single answer would obscure the differences between these activities and could give individuals or entrepreneurs a false sense of security.
Two Malian texts provide a concrete starting point: the ordinance of August 30, 2024, on combating money laundering, followed by its amendment and ratification in December. They notably regulate virtual asset service providers, without automatically turning every accessible application into an authorized service.
In brief
- Article 58 of the 2024 ordinance requires prior approval or authorization to operate professionally as a VASP.
- A payment authorization does not prove that a provider is authorized to exchange or safeguard cryptoassets.
- The status of a transaction depends on its nature, the parties involved, the flows and the applicable rules—not merely on the token’s name.
What Mali’s legal texts actually establish
The national framework must be read alongside the relevant monetary and financial rules of the Union. Our report on crypto rules in WAEMU and the BCEAO’s role helps distinguish these levels, but does not replace an analysis of a specific Malian case. A recommendation issued for another country is not enough to draw a conclusion here.
In the Official Gazette of September 2, 2024, Ordinance No. 2024-011/PT-RM of August 30, 2024 devotes a chapter to virtual asset service providers. Article 58 requires prior approval or authorization from the competent authority to conduct this activity professionally. The professional distinction therefore directly matters when reading the text.
Article 59 subjects these providers to the relevant provisions on combating money laundering, terrorist financing and proliferation, as well as applicable preventive measures. It also refers to the competent authorities for the clarification of certain requirements and sanctions. A service therefore cannot infer from the mere existence of this chapter that it already has the right to operate.
Law No. 2024-022 of December 11, 2024 amends and then ratifies the ordinance. It notably concerns Articles 2 and 205. In this ratification law, Articles 58 and 59 are not among the provisions amended. This reading describes the documents consulted; it does not claim to provide an exhaustive inventory of all subsequent texts.
One limitation must remain clear: we do not have an exhaustive, verified and up-to-date register of all VASP approvals in Mali, nor of all individual decisions. We therefore certify no operator. Anyone seeking to launch a service should obtain directly relevant confirmation from the authorities and qualified counsel.
Personal holdings and professional activity are not the same
Buying a small amount for your own account does not have the same characteristics as regularly receiving money from third parties to provide them with tokens. In the latter case, remuneration, frequency, advertising and responsibility for the funds may change the analysis. No universal threshold should be extracted from a tutorial without an identified legal basis.
Consider someone who occasionally resells an asset they already held. Compare that with a group that publishes opening hours, accepts deposits from the public, promises a rate and holds its customers’ keys. Even if both use USDT, their economic functions differ. The classification must examine the facts, not merely the label chosen on social media.
The absence of a general prohibition identified in the documents reviewed does not mean that every transaction is unconditional. Rules on payments, external financial relations, taxation, data protection or offenses may apply depending on the arrangement. A serious assessment always specifies what it covers and what it leaves unresolved.
Custody deserves particular attention. If a company controls the keys and decides on withdrawals, the client depends on its operations and solvency. If the user keeps their own keys, other risks arise: lost backups, an incorrect address or an irreversible transaction. Our guide to crypto wallets and their security explains this technical distinction, which by itself does not resolve the legal question.
A merchant wishing to accept a crypto-related payment should also review its accounting and the terms of its payment provider. Converting a token immediately into CFA francs does not magically eliminate the intermediary transactions. It is necessary to identify who buys, who sells, who receives the payment and which supporting documents accompany each step.
A payment license does not authorize crypto exchange
The BCEAO publishes a list of electronic money institutions and their partnerships. For Mali, this list notably identifies Orange Finances Mobiles Mali and SAMA Money, as well as the BDM and SOTELMA-MALITEL partnership for Moov Money. These entries concern electronic money, not a general authorization to conduct crypto intermediation.
A seller who accepts a transfer to one of these wallets does not therefore become authorized by association. The receipt may prove a payment to a particular beneficiary. It does not prove the nature of the token delivered, the seller’s status or the possibility of recovering the funds after a commercial dispute.
Ask for the counterparty’s full legal name, its country of establishment and the exact nature of the authorization being invoked. A screenshot bearing an institutional logo does not provide enough evidence. The reference should be traceable to an official publication or written confirmation obtained through a channel independent of the seller.
Then verify the scope: payment, custody, transfer, exchange or another activity. A decision concerning a foreign subsidiary does not necessarily cover the company signing your contract. Likewise, a company registered with the commercial registry does not automatically hold all the financial authorizations required for its offering.
Our method for comparing crypto platforms and their regulatory statuses recommends documenting these differences before looking at fees. A cheaper operator that cannot be identified does not win the comparison. When evidence is missing, the correct conclusion remains “unverified,” rather than a validation based on popularity.
Identity, supporting documents and obligations: preparing a consistent file
A platform may request identity documents, an explanation of the source of funds or information about the beneficiary. That alone does not prove that it is authorized. However, refusing all traceability while demanding rapid payment is a warning sign requiring increased vigilance, especially when third parties appear in the flow.
Checks should be conducted through the service’s official channels. Do not send a complete copy of your documents to a supposed agent encountered in a messaging app. The guide to crypto KYC, data and remedies covers useful questions: who controls the processing, the purpose of collection, retention and the dispute procedure.
Keep the documents that explain your transaction: quotation, contractual identity, payment receipt, order reference, destination address and transaction ID when available. Keep this evidence separate from security secrets. A recovery phrase or private key has no place in a file sent to commercial support.
For a professional activity, maintaining a file is not just a matter of collecting screenshots. You must be able to reconcile amounts, understand the counterparties and reconstruct a timeline. The specific obligations, their scope and any required filings must nevertheless be determined with the applicable texts and competent contacts, without inventing a universal procedure here.
Taxation requires the same caution. A conversion between two assets, a service paid in tokens and a personal resale may raise different questions. We do not cite any rate or exemption without a verified applicable source. A tax adviser will need to know your residence, your activity and the actual documents—not merely the amount displayed in a wallet.
How to decide without turning uncertainty into permission
Before any transaction, prepare a short fact sheet: purpose, maximum amount, asset, network, seller, payment method, storage location and intended exit. Add one column for the evidence available and another for unconfirmed points. This document immediately highlights claims based solely on a commercial promise.
A second check concerns cost and practical consequences. Crypto purchase fees in Africa may include a conversion margin, a transfer and a withdrawal. A legally clear quote that is economically unfavorable does not become attractive. Conversely, a good price does not offset a beneficiary different from the advertised seller.
Stop the process if you are asked to conceal the actual purpose of the payment, use a relative’s identity or artificially split transactions to avoid a check. Do not treat these requests as normal local workarounds. They may weaken your evidence and expose you to difficulties far greater than the initial amount.
In a dispute, distinguish the contested payment from the missing crypto delivery. Contact each provider through its official details, with the relevant facts and without disclosing your secrets. A transaction confirmed on a blockchain generally cannot be technically canceled in the same way as an amendment to a private database; that does not eliminate all possible action against an identified seller.
For Mali, the useful conclusion is therefore not an “authorized” or “prohibited” label applied to every use case. The texts reviewed establish a prior requirement for professional VASP activity and a framework for preventing financial risks. Before committing funds or opening a service, this framework must be connected to the specific transaction and the missing confirmations must be obtained.
