Law No. 2024-01 already brings virtual asset service providers within the anti-money laundering framework. At the same time, the BCEAO is working on a regional crypto-asset framework. For entrepreneurs and users, the challenge is to distinguish between applicable obligations, regulatory work in progress and commercial promises. Here is a working framework based on accessible texts, without inventing an unverified license or register.
In brief
- A professional service provider must examine the prior authorization required under Article 58 of Benin’s law.
- Due diligence obligations cover both clients and transactions; a KYC form does not represent the entire framework.
- Changes to electronic-money rules do not amount to the creation of a crypto license.
Map the business activities before discussing compliance
The crypto rules in WAEMU provide regional context, but a compliance file must begin with the actual activity. Map the flows: who receives XOF, who exchanges the tokens, who controls the keys and who transfers the assets? This exercise exposes responsibilities that the broad label “platform” often leaves unclear.
An application may display a wallet without holding the keys itself. Conversely, a service promising a “personal address” may control every customer’s withdrawals. Marketing does not determine the legal classification. The relevant questions concern the architecture, contract, access rights and the user’s actual ability to transfer funds without the provider’s intervention.
An intermediary that regularly converts other people’s assets raises another question. Frequency, remuneration, mandate and commercial organization all help define the activity. A service presented as informal assistance may take on a professional dimension. Before building a customer base, obtaining a written local analysis can prevent a business model from being built on an assumed distinction rather than a demonstrated one.
Our guide to crypto in Benin does not replace this operational assessment. An entrepreneur should draw up a precise list of services: buying and selling, custody, transfers, possible advice, collection or software only. Each service must then be assessed against the relevant texts and authorities. Adding a banking partner does not automatically remove the need to review the remaining activities.
For customers, the same map becomes a selection tool. If a company cannot explain where funds move and who can transfer them, readers cannot assess the risk. A smooth interface and a Cotonou address do not make up for the absence of an understandable contract. The first protection is knowing which commercial promise depends on which entity.
Use Articles 58 and 59 as a basis, not as a license catalogue
The law published in the Official Gazette contains a specific chapter on virtual asset service providers. Article 58 requires approval or prior authorization to conduct the activity professionally. This point belongs in a service’s launch file, not only in the response to a user complaint.
Article 59 refers to the relevant anti-money laundering provisions and to specific requirements set by the competent authorities. Authorization and preventive measures must therefore be read together. A company saying “we do KYC” has not necessarily demonstrated that it is authorized. Likewise, proof of authorization does not summarize every duty relating to clients, transactions and risks.
Verifying a document requires four matches: the entity, the service, the territory and the validity period. Authorization granted to a foreign subsidiary does not automatically extend to another company. A payment-related number does not necessarily cover crypto-asset custody. A commercial certificate identifies a declared activity but, on its own, does not prove the regulatory right to conduct it.
The sources consulted do not make it possible to compile a complete directory here of all VASPs authorized in Benin. That limitation rules out two opposite shortcuts: claiming that nobody can obtain authorization, or asserting that a known operator has one without evidence. A provider claiming a regulatory status should supply verifiable references and clearly define its scope, so customers can check them independently.
For a business project, the useful file describes the model, executives, partners, flows, custody mechanisms and control procedures. The relevant authority or qualified adviser should be asked which requirements apply to the specific activity. This guide is not a universal license application form. It organizes the questions needed to avoid an imprecise application or purely declarative compliance.
Build consistent due diligence around people and transactions
Knowing the customer involves more than photographing an identity document. The holder’s identity, account information and the nature of the relationship must be reconciled. Our guide to KYC, data and remedies explains how to prepare consistent supporting documents. Contradictory records complicate checks and can make it harder to distinguish a legitimate customer from an account used by a third party.
For a legal entity, the person placing an order does not necessarily represent the service’s beneficial owner. The provider must examine authority to act, the entity and the information required under the applicable framework. A company should not open a personal account in an employee’s name to conceal business flows. Such an arrangement can later undermine ownership of the funds, accounting and the handling of disputes.
Transaction monitoring addresses a different question: does the movement match what the file makes it possible to understand? A change in volume, counterparty or destination may require an explanation. That does not automatically prove an offense. A sound procedure provides for a proportionate review of the relevant elements, their documentation and the follow-up required by the rules, rather than a verdict based on a single indicator.
Supporting documents should explain the economic origin, not merely the technical route. A blockchain identifier confirms an observed transfer but does not explain why a person received the money. An invoice, contract or purchase history may provide that information. The two categories of evidence complement each other. Customers should preserve source documents before a review forces them to reconstruct months of transactions.
Data protection remains inseparable from this organization. Collecting more documents does not guarantee better controls if no one manages access to them. A service should explain the purposes, channels and procedures used for sensitive documents. Customers should not send copies to several personal messaging accounts. Secrets that enable funds to be spent must never be included in a compliance file.
Do not confuse crypto-assets, electronic money and instant payments
The BCEAO’s list of electronic-money issuers concerns a distinct business. A mobile account denominated in XOF represents a relationship with an issuer, while a token circulating on a blockchain depends on another structure. The first authorization does not automatically extend to the second. A partnership must specify each party’s tasks and the limits of its responsibility.
On October 8, 2026, the BCEAO published Instruction No. 020 amending the electronic-money rules. It enters into force on November 2, 2026. The difference between the publication date and the effective date means a new limit cannot immediately be presented as available to every customer.
For a crypto journey funded through mobile money, this instruction does not create a token-custody license. It amends a separate framework. The operating limits of an account may still depend on its identification status and the service’s terms. Copying a regulatory limit into an advertisement without specifying its date and scope can therefore mislead readers, even when the figure comes from an authentic document.
Regional instant payments require the same caution. An infrastructure transferring XOF between compatible institutions does not become a public blockchain or a USDT redemption service. The routes may complement one another, but their safeguards must be assessed separately. Our guide to buying crypto with mobile money helps distinguish monetary settlement, conversion and asset delivery.
When a company combines these rails, a failure scenario should specify who handles a debit without a corresponding credit. The payment provider may have completed its role while the exchange has not delivered the token. A complaint must identify the failed stage and the references for both systems. Without this organization, customers risk being passed between several support teams, each insisting that its own interface is working.
Track developments and establish limited compliance evidence
The BCEAO’s communication of May 8, 2026 states that a committee is working on the crypto-asset framework. This announcement belongs in a regulatory watchlist, not in the column for authorizations already obtained. A future text may define activities or obligations without allowing readers to anticipate its exact content or effective date.
An actionable regulatory watch should record the official source, publication date, effective date and services concerned for each text. Earlier versions remain useful for understanding a transition, but should not circulate as the sole permanent reference. If a rule changes between account creation and a new transaction, the user should reread the terms governing that transaction rather than rely on an old screenshot.
Customers can create a short checklist covering the contracting entity, proof of status, asset custody, fees, withdrawals, complaints and the date of the review. The criteria for assessing crypto platforms can help structure it. Any unknown item should remain clearly marked. Replacing that uncertainty with a reassuring rating or arbitrary score would conceal precisely the issues that still require verification.
For professionals, compliance does not end with authorization. Services, partners and risks can change. A new custody function, international corridor or yield-generating product requires the scope to be reviewed again. The file must describe the business as it operates, not merely the model presented at launch. This discipline helps identify a new activity before it creates overlooked obligations.
Crypto regulation in Benin therefore already sets out concrete requirements, while leaving certain points of application to be checked for each business activity. The right approach is neither to wait passively for a future text nor to treat technical access as permission. It links every service to evidence and every change to a date. That traceability makes an offering verifiable for both customers and authorities.
