Crypto Licensing Last updated:

Crypto Asset FSP License in South Africa

Complete guide to obtaining a crypto asset Financial Services Provider (FSP) licence in South Africa in 2026. FSCA review of about six to twelve months from a complete submission, about fourteen to twenty-two months end to end. No fixed minimum capital for Category I, ongoing solvency tests apply. FIC Travel Rule live since .

South Africa exited the FATF grey list on , and the EU followed in January 2026. As at , the FSCA had received 533 CASP licence applications: 310 approved, 17 declined and 124 voluntarily withdrawn. The FSCA now runs a supervisory programme alongside enforcement against unlicensed operators.

Crypto Asset FSP Licence in South Africa: Quick Overview
Licence TypeFSP Category I (advice + intermediary). Category II permitted where discretion is exercised.
RegulatorFinancial Sector Conduct Authority (FSCA), with the Financial Intelligence Centre (FIC) for AML/CFT and the South African Reserve Bank’s Financial Surveillance Department (SARB FinSurv) for exchange control.
Legal FrameworkFinancial Advisory and Intermediary Services Act 37 of 2002 (FAIS Act); FSCA General Notice 1350 of 2022 (declared crypto assets a financial product on ); Financial Intelligence Centre Act 38 of 2001 (Item 22, Schedule 1 from ).
TimelineAbout 6–12 months FSCA review from a complete submission; about 14–22 months end-to-end including formation, Key Individual onboarding and RMCP build-out.
Statutory cost, Year 1ZAR 43,600–93,600 (~EUR 2,300–5,000): FSCA application and key-individual approval fees plus the estimated first-year FSCA, ombud and tribunal levies
Typical build, Year 1 (quoted per case)ZAR 690,000–2,810,000 (~EUR 37,000–151,000), excluding commercial working capital
Min. CapitalNo fixed monetary minimum for Category I advice-only. Solvency, working-capital, and liquidity tests apply (Board Notice 194 of 2017).
Local PresenceGenuine SA operational presence required. Physical office, in-country books and records, at least one Key Individual managing operations.
Corporate Tax27% CIT (years of assessment ending on or after ). 21.6% effective on corporate crypto capital gains (80% CGT inclusion × 27%). VAT exempt on the supply of the crypto asset itself.
FATF StatusOff the FATF grey list since (32-month listing). EU removal January 2026.
EU PassportingNo. Domestic licence only.
Best ForCrypto exchanges, OTC desks, brokers, and asset managers anchoring African operations from a regulated base; pan-African fintechs requiring SADC market gateway.

Why Choose South Africa for Crypto Licensing?

South Africa is one of Africa’s largest and most regulated crypto markets, and the Financial Sector Conduct Authority is actively licensing Crypto Asset Service Providers. Operators licensed under the Financial Advisory and Intermediary Services Act gain access to a sophisticated banking sector, a mixed legal system of Roman-Dutch and English law,[31] and a gateway to the broader Southern African Development Community.

In short: South Africa is the right jurisdiction for crypto operators who want a credible African regulatory home with deep banking infrastructure and improving international standing. It is not the right choice for operators seeking EU passporting, light-touch offshore frameworks, or an unregulated path to market.

One of Africa’s Largest and Most Regulated Crypto Markets

South Africa’s licensed crypto market is large by regional standards. The South African Reserve Bank’s Financial Stability Review of November 2025 records nearly 7.8 million registered users across the three largest licensed platforms by the end of July 2025, up from roughly 4.3 million in 2022.[1] Independent on-chain analysis ranks Sub-Saharan Africa as the third-fastest-growing crypto region, with South Africa its second-largest market by value received after Nigeria and a regional leader in crypto infrastructure and compliance maturity.[22]

Custody assets at the same three providers grew from under ZAR 10 billion at the start of 2023 to ZAR 25.3 billion at end-2024.[1]

A Pragmatic, Operator-Tested FSP Regime

South Africa chose to regulate crypto under an existing statute rather than draft a new one. The FSCA declared crypto a “financial product” under section 1(h) of the FAIS Act via General Notice 1350 of 2022, gazetted on .[2] This means CASPs licence as FSPs, the same regime used by financial advisers and intermediaries for two decades. The advantage is regulatory familiarity for the financial services industry. The trade-off is that crypto business models must be translated into a financial-advisory taxonomy.

The FAIS route is a defensible interim choice and works well for established business models, but operators with novel structures (DAO-led, custodial-staking-as-service, tokenised real-world assets) should expect the FSCA to ask harder questions about how their model maps onto “advice” or “intermediary services”. The Conduct of Financial Institutions Bill, 2026, which would consolidate conduct regulation,[18] was introduced in the National Assembly in and is not yet law.[30]

Off the FATF Grey List Since October 2025

South Africa exited the FATF grey list on after completing all 22 action items from its February 2023 listing.[3] The European Union removed South Africa from its list of high-risk third countries with effect from , ending the enhanced due diligence that EU obliged entities had to apply under Article 18a of Directive (EU) 2015/849.[29]

Gateway to the SADC and Broader African Markets

For pan-African crypto and stablecoin payment rails, an FSCA-licensed entity gives regulatory anchoring in a market that on-chain analysts describe as a regional leader in crypto infrastructure and compliance maturity.[22] Operators weighing an offshore base in the region can compare Mauritius and Seychelles.

Regulatory Framework

South Africa regulates crypto under the Financial Advisory and Intermediary Services Act 37 of 2002 (FAIS Act), with three regulators sharing the file: the FSCA for conduct and licensing, the FIC for AML/CFT, and the SARB for exchange control (through its Financial Surveillance Department) and financial stability.[5] Crypto was declared a financial product on , opening the FSP route.[2]

In short: Three regulators, one licence: the FSCA grants and supervises the FSP; the FIC handles AML/CFT obligations including the Travel Rule live since ; the SARB’s Financial Surveillance Department administers exchange control, and its Prudential Authority supervises the banks.

Definition: Crypto Asset FSP

A Crypto Asset FSP is a person authorised by the Financial Sector Conduct Authority under section 8 of the FAIS Act to render financial services in respect of crypto assets, meaning advice and/or intermediary services on the buying, selling, holding or arrangement of crypto assets. The authorising statute is the FAIS Act;[20] the activating instrument is FSCA General Notice 1350 of 2022. Tax treatment: 27% corporate income tax; 21.6% effective on corporate crypto capital gains; VAT exempt on supply of the crypto asset itself.

Regulatory History

Crypto regulation in South Africa has moved through three phases. From 2014 to 2018 the SARB and National Treasury issued consumer-warning position papers without legislating. From 2018 to 2022 the Intergovernmental Fintech Working Group (IFWG) and its Crypto Assets Regulatory Working Group developed the position paper that ultimately framed the FAIS declaration. The current phase began with FIC Act Item 22 on [21] and FSCA General Notice 1350 effective .[2] Existing providers had a transitional window from to to file applications.

Recent Regulatory Developments

  • – Draft Crypto Assets Manual for cross-border activities. National Treasury and SARB publish it for comment until .[27]
  • – Mangundhla v SARB High Court judgment. Holds that Bitcoin is “money” and “capital” under the 1961 Exchange Control Regulations and that Standard Bank was clearly wrong.[26]
  • – Draft Capital Flow Management Regulations, 2026 published for comment (Government Notice 7375, Government Gazette 54520), to replace the 1961 Regulations.[25]
  • – FSCA update on licensing and supervision of CASPs. The release reports the application population as at : 533 received, 310 approved, 17 declined and 124 voluntarily withdrawn. The remaining applications were still being considered; the FSCA did not publish their number.[23]
  • – FIC issues final Public Compliance Communication 61 (PCC 61). Detailed implementation guidance for Travel Rule Directive 9, including handling of unhosted wallet transfers and counterparty CASP due diligence; supersedes Draft PCC 123, published for consultation on under the FIC’s separate draft-numbering series.[4]
  • – SARB FinSurv Exchange Control Circular No. 3/2026. Confirms that draft regulations under the Currency and Exchanges Act 1933 will bring crypto into the Capital Flow Management Framework.[5]
  • – SARS CARF regulations take effect. First reporting year 2026/27, bringing South Africa into the OECD Crypto-Asset Reporting Framework.[6]
  • – 2026 Budget Speech. Minister of Finance Godongwana announces draft regulations to bring crypto assets into the capital flow management regime.[5]
  • – EU removal from its high-risk third-country list takes effect (Commission Delegated Regulation (EU) 2026/83, published 9 January 2026).[29]
  • – FSCA update on licensing and supervision of CASPs. The release reports the application population as at : 512 received, 300 approved, 14 declined and 121 voluntarily withdrawn. The remaining applications were still being considered; the FSCA did not publish their number.[7]
  • – SARB Financial Stability Review (Second Edition 2025). Adds “technology-enabled financial innovation” as a financial-stability risk category; stablecoin trading volumes grew from under ZAR 4 billion in 2022 to nearly ZAR 80 billion in the year to October 2025.[1]
  • – South Africa exits FATF grey list after a 32-month listing.[3]
  • – Standard Bank v SARB High Court judgment. Held that crypto is not “capital” under the 1961 Exchange Control Regulations. SARB has been granted leave to appeal to the SCA.[8][32]
  • – FIC Directive 9 (Travel Rule) takes effect.[9]

Regulatory Overlap (FSCA / FIC / SARB / SARS)

Overlapping regimeTriggering activityPractical consequence
FAIS Act (FSCA)Advice or intermediary services on crypto assetsFSP licence required
FIC Act, Item 22 Schedule 1 (FIC)Acting as a CASP for clientsAccountable institution registration; RMCP; Travel Rule compliance; STR/CTR reporting
Currency and Exchanges Act 1933 + Exchange Control Regulations 1961 (SARB)Cross-border crypto flows(Under amendment; see Recent Developments) individuals may use their allowances; the Authorised Dealer manuals give no route for other transfers made to buy crypto assets
Income Tax Act 58 of 1962 (SARS)Any crypto transaction generating gainCIT/CGT/income tax; CARF reporting from 2026/27
Financial Markets Act 19 of 2012Crypto-asset derivativesDerivatives are securities: advice and intermediary services on them need FAIS authorisation, and providers of the derivatives also remain subject to the FMA

The Multi-Regulator Structure in Practice

Three regulators do not equal three licences. A licensed crypto FSP holds a single authorisation from the FSCA. Registration with the FIC as an accountable institution is a separate duty under section 43B of the FIC Act,[21] and the FSCA supervises CASPs’ FIC Act compliance as well as their FAIS conduct; in it set up the Crypto Asset Supervisory Engagement Forum for regular engagement with the industry.[23] SARB engagement is event-driven: triggered by cross-border flows, prudential thresholds or financial-stability concerns rather than ongoing supervision.

License Types and Activities Covered

Two FSP categories cover almost all crypto business models in South Africa. Category I authorises advice and intermediary services on crypto assets and is sufficient for exchanges, brokers, OTC desks, and crypto advisers. Category II is required where the FSP exercises discretion over client crypto assets, which captures managed crypto portfolios and discretionary asset management for retail or institutional clients.

In short: Most operators apply for Category I FSP authorisation with a crypto sub-category endorsement. Discretionary managers add Category II. Crypto asset miners, node operators and NFT-related services are exempt from FAIS licensing under an FSCA exemption, and people who do not act for clients as a regular feature of a business are not FSPs.

Category I FSP (advice + intermediary)

  • Crypto exchange and brokerage operation
  • OTC desk activity
  • Advice on the purchase, sale or holding of crypto assets
  • Intermediation in transactions in crypto assets
  • Operating a crypto savings or earn product (subject to FSCA case review)

Category II FSP (discretionary)

  • Discretionary management of client crypto portfolios
  • Tokenised fund management where the manager exercises investment discretion
  • Discretionary staking/yield programmes structured as managed products

Activities Exempt from or Outside FAIS Licensing

The FSCA’s crypto declaration of brought crypto financial services inside FAIS, and an exemption issued with it lifted the licensing requirement for three groups. We found no amendment or withdrawal of that exemption when we checked the FSCA’s published notices on .[34]

  • Crypto asset miners and node operators: exempt from FAIS licensing until the FSCA amends or withdraws the exemption (FSCA FAIS Notice 90 of 2022, reissued on 21 October 2022); they must still give the FSCA information on request.[34]
  • Financial services related to non-fungible tokens: exempt on the same basis; the FSCA said such services should not “at this stage” be subject to its oversight.[35]
  • Persons who do not give advice or render intermediary services as a regular feature of a business, such as an individual trading for their own account: not financial services providers under section 1 of the FAIS Act.[20]

Crypto-asset derivatives are not outside the perimeter. Advice and intermediary services on them have always required FAIS authorisation, because derivatives are securities under the Financial Markets Act; the 2022 exemption does not cover them, and their providers remain subject to the Financial Markets Act 2012.[35]

Requirements

Six layers of requirement apply to a crypto asset FSP applicant. The corporate vehicle and beneficial ownership; the Key Individuals and Representatives; the Compliance Officer; the operational infrastructure (premises, systems, records); the AML/CFT programme; and the financial soundness baseline. The FSCA assesses fit-and-proper, operational ability, and financial soundness as the three statutory tests under Board Notice 194 of 2017.[10]

RequirementStandard
Corporate vehicleSouth African Private Company ((Pty) Ltd) under the Companies Act 71 of 2008
Foreign ownership100% permitted. No restriction specific to FSPs
Beneficial ownersDisclosed to CIPC beneficial-ownership register and to the FSCA
Key IndividualsAt least one per category; fit-and-proper; honesty/integrity; competence (RE1); recognised qualification; operational-ability evidence
RepresentativesRE5 within 24 months of date of first appointment; class-of-business and product training
Compliance OfficerFSCA-approved; in-house or outsourced
Physical presenceGenuine SA operational presence. No virtual mailbox. Books and records in South Africa
Financial soundnessBN 194 of 2017 Chapter 6: solvency (assets > liabilities), working capital, liquidity (Category-specific)
AML/CFTFIC registration; RMCP under s.42 FIC Act; Travel Rule capability for transfers in/out from
Professional indemnityRequired; quantum proportional to business scale

Key Individual Fit-and-Proper Bar

The Key Individual role carries personal regulatory accountability and the FSCA assesses each KI individually. Competence requires the RE1 regulatory examination, which became fully mandatory for crypto FSPs on when the temporary exemption expired with no further extension.[11] The FSCA has declined applications where applicants failed to demonstrate the requisite knowledge and practical experience pertaining to crypto assets.[23][12]

In practice, sourcing a Key Individual who has both passed RE1/RE5 and can demonstrate practical crypto experience remains the single hardest hire in the South African application, so start the recruitment process six to nine months before targeted submission.

Operational Substance

Operational substance is not a checkbox. The FSCA’s first round of supervisory inspections, between January and March 2025, examined governance arrangements, risk management and compliance programmes, and business risk assessments under the FIC Act, and later inspections covered the full range of FIC Act requirements.[7] A structure whose governance and compliance functions exist only on paper is exposed at that stage.

Financial Soundness (no fixed monetary minimum)

South Africa imposes no fixed monetary minimum for a Category I advice-only FSP, but financial soundness remains mandatory. The additional working-capital and liquidity tests in sections 46–49 of Board Notice 194 of 2017 apply according to category and client-asset handling. A Category I firm that holds, controls or can access client assets, or receives client money, must not budget as an advice-only firm without that exposure.[10]

For MiCA CASPs, prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement. MiCA Article 67(1)–(4).

Commercial capitalisation in the ZAR 5 to 25 million range (approximately EUR 270,000 to 1.3 million) is typical for a serious exchange or custody business.

Application Process

The application process runs in four stages over about fourteen to twenty-two months from formation to grant. Stage 1: form the South African operating company. Stage 2: build the Key Individual bench and Compliance Officer arrangement. Stage 3: prepare and pre-engage with the FSCA. Stage 4: submit, respond to information requests and complete licensing on grant.

Stage 1 Month 1–2

Formation and Capitalisation

Incorporate the (Pty) Ltd, register with the South African Revenue Service for tax, appoint a public officer, open a ZAR operating account and capitalise sufficient working capital. For full requirements and tax setup, see the South Africa company formation guide.

Stage 2 Month 2–6

Key Individual and Compliance Officer Onboarding

Identify, vet, and onboard Key Individuals; complete RE1 and RE5 examinations; appoint or contract the Compliance Officer; document the operational ability evidence base.

Stage 3 Month 4–8

RMCP, Business Plan, and Pre-Engagement

Draft the FIC RMCP, the business plan, the Travel Rule technology arrangement, conflicts of interest policy and the operational risk framework. Hold pre-application engagement with the FSCA Licensing Division.

Stage 4 Month 8–22

Submission, Queries, and Grant

File Forms FSP 2, FSP 4C, FSP 4D and FSP 5 (revised post-October 2022 to include crypto sub-categories) at about months 8 to 10. Respond to FSCA information requests during a review of about six to twelve months from a complete submission. Receive authorisation at about months 14 to 22.

Sequencing matters. The FSCA’s declines have included applicants that failed the operational ability requirement (unclear business plans and business-model descriptions) or the competency requirement (no demonstrated knowledge and practical experience of crypto assets), and other applicants withdrew after engagement with the FSCA on the appropriateness of their business and operating models, all issues that pre-application work can surface first.[23] An independent specialist introduced by Jagelski & Partners coordinates the South African licensing pathway end-to-end, including company formation, Key Individual sourcing where required, RMCP drafting, and the FSCA pre-engagement protocol, so the formal submission represents an already-aligned position rather than a starting point.

Required Documents

The FSCA application package combines incorporation evidence, fit-and-proper documentation for each Key Individual and Representative, the business plan, the financial soundness statement, the Compliance Officer arrangement and a complete set of operational and AML policies. Below are the policies and frameworks that the regulator expects to see jurisdiction-tailored to South Africa.

Compliance Documentation

The documentation below is drafted within the licensing engagement by the independent specialist introduced for the case: the FSCA expects bespoke policies tailored to FAIS, the FIC Act, and Directive 9, not generic templates. Each policy below is drafted to address South African statutory and supervisory expectations, including the General Code of Conduct (BN 80 of 2003), the Financial Sector Regulation Act and the FSCA’s published licensing guidance, and reviewed against the latest Board Notices.

  • AML/CFT Policy Manual. Mandatory FIC Act framework for accountable institutions. Establishes the firm’s anti-money-laundering and counter-financing-of-terrorism control environment under the Financial Intelligence Centre Act, identifies the compliance officer and reporting lines into the FIC, and addresses crypto-specific typologies including mixers, anonymity-enhanced coins, and self-hosted wallet transfers.
  • Enterprise-Wide Risk Assessment. Customer, geographic, product, and channel risk under FIC Act s.42. Documents inherent and residual money-laundering and terrorist-financing risk across customer types, jurisdictions, products, and delivery channels, with controls calibrated to each risk tier and quantified residual-risk scoring after controls.
  • Risk Appetite Statement. Recommended baseline for the FSCA’s risk-based supervision. Sets the board-approved thresholds for the risk the firm will and will not accept, specific enough that the FSCA can test whether the proposed operating model is consistent with the stated tolerance.
  • Sanctions Screening Procedures. UN Security Council lists, the FIC Targeted Financial Sanctions list, and OFAC where applicable, with refresh frequency, screening hit-rate testing, escalation matrix, and freezing procedures for both natural-person and wallet-address designations.
  • Restricted Countries & Jurisdictions Matrix. Updated to reflect post-grey-list peer status. Territory-by-territory eligibility classification referenced to FATF status, EU AML list, and national prohibitions, reviewed at least annually.
  • Transaction Monitoring Framework. Risk-tiered scenarios mapped to FIC Act red-flag indicators. Includes crypto-specific typologies (chain-hopping, peel-chain laundering, mixer ingress and egress) with an alert-handling and disposition workflow.
  • Travel Rule Implementation (FIC Directive 9). Information collection at zero threshold; verification at ZAR 5,000+; counterparty CASP due diligence; unhosted wallet handling. Operationalises Directive 9 covering originator and beneficiary data capture and the self-hosted-wallet protocol.
  • STR/SAR Procedures. FIC reporting through goAML; CTR thresholds; Terrorist Property Reports under s.28A. Sets the internal escalation, decision, and filing procedures, with tipping-off prohibitions and record-keeping obligations.
  • KYC & Client Onboarding (incl. KYB). CDD/EDD under FIC Act ss.20–24; beneficial-owner identification. Documents customer and business due diligence, enhanced measures for higher-risk clients and politically exposed persons, and beneficial-ownership verification at onboarding and review.
  • Compliance Monitoring Programme. The compliance officer reports to the FSCA in the manner and at the times the FSCA determines (FAIS Act s.17(4)).[20] Defines the annual testing schedule, scope, and reporting lines for ongoing monitoring of AML controls, sanctions effectiveness, and Travel Rule compliance.
  • Data Protection Policies. Protection of Personal Information Act 4 of 2013 (POPIA) compliance. Governs lawful processing, security safeguards, retention schedules, and data-subject rights for client and counterparty personal information.
  • Key/Wallet Management Procedures. Custody, cold/hot wallet segregation, private-key access controls. Specifies private-key generation, storage, segregation, and access controls for any custodial or operational wallet infrastructure.

Costs and Pricing

South African cost divides in two, and the statutory half is small. FSCA application and key-individual approval fees and the estimated first year of FSCA, ombud and tribunal levies come to ZAR 43,600 to 93,600 (approximately EUR 2,300 to EUR 5,000).[13][14] The build on top, quoted per case, runs ZAR 690,000 to 2,810,000 (approximately EUR 37,000 to EUR 151,000) and excludes the commercial working capital that financial soundness and banking counterparties expect. The cost driver is the build-out, and a thin preparation proves expensive in deferred terms.

In short: Statutory fees and levies are about ZAR 43,600 to 93,600. The build quoted per case is ZAR 690,000 to 2,810,000, so plan for a total Year 1 outlay of about ZAR 733,600 to 2,903,600 excluding working capital. The cost driver is Key Individual recruitment, RMCP build, Travel Rule technology, and the Compliance Officer engagement.

Government Fees

FeeAmount (ZAR)Reference
Category I FSP authorisation application2,697.00FSCA Determination of Fees, General Notice 1 of 2024[13]
Category II FSP authorisation application16,313.00Same
Multi-category discount10% off an application made in addition to another, or by an authorised FSPSame
Key individual approval1,460.00 eachSame
Compliance officer approval (Phase I / Phase II)1,671.00 / 866.00Same
Annual FSCA levy – Category I base3,983.90Levies Act schedules as amended by GN 6889 of 28 November 2025[14]
Annual FSCA levy – Category II base8,299.80Same
Annual FSCA levy – per KI/Rep575.45Same
Annual FSCA levy – Category II on client investments0.0020578% of investments managed or administered at 31 AugustSame
Annual FSCA levy – maximum2,766,600.00Same
Authorised in more than one categoryOne levy on the most onerous base; KIs and reps counted onceSame
Ombud Council levy2.5% of FSCA levySame
Tribunal levy2.76% of FSCA levySame
FAIS Ombud levyR1,100 base + R720 per KI/RepSame

Statutory Cost: FSCA and Statutory Levies (Year 1, ZAR)

ChargeRange (ZAR)
FSCA application fees (Cat I ZAR 2,697 + Cat II ZAR 16,313 = ZAR 19,010, less up to the 10% multi-category discount)17,100–19,000≈ EUR 920–1,000
Key individual approvals (ZAR 1,460 each; one to ten key individuals)1,500–14,600≈ EUR 80–780
FSCA, ombud, and tribunal levies, Year 1 (planning estimate for a staffed Cat I + II firm with modest client investments)25,000–60,000≈ EUR 1,300–3,200
Statutory cost, Year 143,600–93,600≈ EUR 2,300–5,000

A Category I and II provider pays one FSCA levy, on the Category II base: ZAR 8,299.80 plus ZAR 575.45 per key individual and representative plus 0.0020578% of client investments managed or administered at 31 August, capped at ZAR 2,766,600, with the Ombud Council, tribunal, and FAIS Ombud levies on top.[14] The ZAR 25,000–60,000 levy line is a planning estimate for a staffed firm of roughly ten to forty key individuals and representatives with modest client investments; a one-person firm with no client investments would pay about ZAR 11,000 in levies, putting its statutory Year 1 near ZAR 30,000. The statutory figure also excludes the compliance officer’s FSCA approval: ZAR 866, plus ZAR 1,671 where the officer also needs Phase I approval.[13]

Typical Build, Quoted Per Case (Year 1, ZAR)

ItemRange (ZAR)
Legal and compliance build-out (RMCP, AML, business plan)250,000–1,200,000≈ EUR 13,000–64,000
Compliance Officer (outsourced, annual)120,000–360,000≈ EUR 6,400–19,000
Key Individual recruitment + RE1/RE5 + qualifications80,000–300,000≈ EUR 4,300–16,000
PI insurance + cyber cover (annual)60,000–300,000≈ EUR 3,200–16,000
Travel Rule technology subscription (annual)100,000–400,000≈ EUR 5,400–21,000
Audit (statutory, annual)80,000–250,000≈ EUR 4,300–13,000
Typical build, Year 1 (quoted per case, excluding commercial working capital)690,000–2,810,000≈ EUR 37,000–151,000
[ Scope ] The statutory figure is what the regulator and the state charge, from published schedules. Commercial preparation and ongoing-service costs and non-statutory timelines are indicative estimates. They vary by independent specialist, scope and client profile. Jagelski & Partners charges the client nothing. Both figures exclude regulatory capital, which is held rather than spent.

Timeline

End-to-end realistic timeline is about 14–22 months from initial decision to FSP authorisation, with about 6–12 months allocated to the FSCA review itself once a complete application is filed. The FSCA does not publish a statutory service standard for CASP applications, so both figures are planning estimates.

  • Months 1–2 – Decision, formation, banking. Incorporate the (Pty) Ltd; appoint directors and public officer; open primary ZAR banking; capitalise. (Banking onboarding for an unlicensed crypto applicant company is realistic at this stage as a basic operating account; full crypto operating banking follows licence grant.)
  • Months 2–6 – KI and CO recruitment, RE exams. Recruit Key Individuals; complete RE1 / RE5; appoint Compliance Officer.
  • Months 4–8 – Documentation build. Business plan; RMCP; AML/CFT manual; Travel Rule technology contract; PI insurance; opening balance sheet.
  • Months 6–8 – Pre-engagement. FSCA Licensing Division pre-application meeting.
  • Months 8–10 – Submission. Forms FSP 2, FSP 4C, FSP 4D, FSP 5; supporting documentation.
  • Months 8–22 – FSCA review, queries, grant. About six to twelve months from a complete submission, so grant falls at about months 14–22; information requests; conditional grant or full authorisation.

Two delays dominate. Key Individual sourcing, finding the right combination of FAIS competence and crypto experience, accounts for most multi-month slippage. Travel Rule technology procurement is the second; because Directive 9 has applied since , plan the technology arrangement before submission rather than after grant.

Taxation

The South African Revenue Service treats crypto assets as “assets of an intangible nature”, not legal tender. Income or capital gains characterisation depends on intention and conduct. Corporate income tax sits at 27%, with an effective 21.6% rate on corporate crypto capital gains (80% CGT inclusion). VAT applies to platform and advisory fees but not to the supply of the crypto asset itself.[15]

Corporate Income Tax and Capital Gains

A South African crypto FSP holding company is subject to 27% CIT on net revenue, and 21.6% effective CGT on crypto held on capital account. Trading-account treatment (full income-tax rates) applies where assets are held primarily for resale, which is the typical exchange or OTC business case. Mining and staking rewards are ordinary income at fair value on receipt.

VAT

The Value-Added Tax Act 89 of 1991 was amended in 2019 to add section 2(1)(o), treating the supply of crypto assets as an exempt financial service. Standard 15% VAT continues to apply to taxable services such as platform fees, advisory fees, and software services. A VAT-registered FSP must distinguish these revenue streams in its accounts.

Crypto-Asset Reporting Framework (CARF) from 1 March 2026

South Africa adopted the OECD’s Crypto-Asset Reporting Framework with SARS regulations effective . First reporting year is 2026/27.[6] Reporting crypto-asset service providers have had to collect tax-residency and identifying information on reportable users since ; the first return, for the period to , is due by , and the first exchange with partner jurisdictions follows in September 2027.[6]

Ongoing Compliance & Post-Registration

Once authorised, a crypto asset FSP operates under continuous obligation across four streams: financial and regulatory reporting to the FSCA; AML/CFT reporting and supervision through the FIC; conduct of business supervision; and supervisory inspection.

Annual Reporting and Filings

  • Annual Financial Statements to FSCA within four months of year-end (FAIS Act s.19).
  • Annual Compliance Officer report to FSCA.
  • Liquidity Calculation Declaration (annual for Cat I; bi-annual for Cat II/IIA/III).
  • Continuing Professional Development hours for Key Individuals and Representatives (BN 194 Chapter 4).
  • Annual statutory audit by a registered auditor.

Annual Fees and Levies

  • FSCA annual levy per the most recent Levies Act schedule.[14]
  • Ombud Council levy (2.5% of FSCA levy).
  • Tribunal levy (2.76% of FSCA levy).
  • FAIS Ombud levy.

Supervisory Inspections

From to , the FSCA conducted 30 supervisory inspections of licensed CASPs, most covering the full spectrum of FIC Act compliance requirements. It aims to conduct 35 AML/CFT/CPF inspections during the 2026/27 financial year.[23] The Crypto Asset Supervisory Engagement Forum, established , coordinates supervisory engagement across regulators and the CASP industry.

Enforcement

By , the FSCA had initiated 81 investigations into potential unlicensed CASP businesses: 30 had been closed because no enforcement action was required, mainly where the investigated parties had ceased trading or were dormant, and 51 remained under investigation.[23] The Tribunal can impose administrative penalties; FIC Act non-compliance attracts financial penalties up to ZAR 10 million for natural persons and ZAR 50 million for legal persons per instance (FIC Act s.45C).[21]

Banking

Banking access for licensed crypto FSPs in South Africa has improved materially since the de-banking wave of 2019–2021. The SARB Prudential Authority’s Guidance Notes G10/2022 and G1/2023 direct banks to apply a risk-based approach rather than blanket account closure.[16] Combined with the FATF grey-list exit, banking is no longer the binary blocker it was three years ago.

In short: A licensed FSP can realistically expect to open primary ZAR banking with one of the Tier-1 universal South African banks within 8–16 weeks of completing onboarding documentation, with second-bank diversification standard practice.

Banking Reality for Licensed FSPs

Three archetypes serve the licensed crypto market in South Africa. The Tier-1 universal SA bank archetype provides primary ZAR banking and SWIFT correspondent access; expect a full compliance review including FSP licence verification, FIC registration confirmation, Travel Rule capability evidence and a senior compliance contact. The mid-market business-banking specialist archetype offers more flexible onboarding for second-bank diversification. The regulated foreign-currency EMI archetype provides multi-currency and international rail diversification alongside the primary ZAR account.

Cross-Border Flows and Exchange Control

The 1961 Exchange Control Regulations were drafted long before crypto and the Standard Bank v SARB High Court judgment of held that crypto is not “capital” under those Regulations.[8] SARB was granted leave to appeal directly to the Supreme Court of Appeal on ,[32] and the National Treasury announced in the Budget Speech that draft regulations under the Currency and Exchanges Act 1933 will formally include crypto in the Capital Flow Management Framework.[5][19] The draft Capital Flow Management Regulations, 2026, which would replace the 1961 Regulations, were published for comment on (Government Notice 7375, Government Gazette 54520),[25] and on National Treasury and SARB published a draft Crypto Assets Manual for cross-border activities for comment until ;[27] neither is final. On , in Mangundhla v South African Reserve Bank, the High Court in Johannesburg held that Bitcoin is both “money” and “capital” under the 1961 Regulations and that Standard Bank was clearly wrong, so two conflicting High Court decisions stand pending the appeal.[26] The Supreme Court of Appeal’s published court rolls up to its November 2026 term do not list the appeal.[33]

Neither Currency and Exchanges Manual for Authorised Dealers allows a cross-border transfer made for the purpose of buying crypto assets; individuals may use their single discretionary and foreign capital allowances, and the R1 billion company allowance covers outward foreign direct investment into companies, not crypto purchases. SARB’s Financial Surveillance Department says it is unable to approve transactions of this kind.[28] A corporate cross-border crypto flow therefore needs its exchange control position confirmed with an Authorised Dealer; structuring around either judgment alone is high-risk.

A licence without banking access is a certificate on the wall. An independent specialist introduced by Jagelski & Partners coordinates banking pre-qualification for South Africa-licensed FSPs across multiple institution types, sequencing the banking application so that primary ZAR, secondary ZAR, and foreign-currency rails come online in step with operational launch rather than as a 12-month post-licence afterthought.

Jagelski & Partners Banking Partner Network
90+Institutions
€14bnPlaced via the network in 2025
Pre-qualifiedBefore submission

For a licensed South African FSP the sequence is domestic-first: primary ZAR banking at a Tier-1 universal bank, second-bank diversification through mid-market business-banking specialists, and regulated foreign-currency EMIs for international rails, timed in step with the FSCA application rather than after grant. Jagelski & Partners scopes banking options in writing and introduces an independent specialist before a licence application is filed. You contract directly with the specialist; account approval remains the financial institution's decision.

Explore Banking Solutions →

International Standing

South Africa’s international regulatory standing improved on two fronts between October 2025 and January 2026: the FATF grey-list exit on , and the EU’s removal of South Africa from its High-Risk Third Country list in , both covered under Why South Africa. Separately and domestically, the FSCA has shifted from licensing to active supervision. Whether these gains translate into operational improvements for individual operators depends on banking, correspondent, and cross-border relationships built afterwards.

FATF and AML Standing

South Africa was grey-listed by FATF on .[3] FATF’s assessment calendar lists South Africa’s next mutual evaluation, by the FATF and ESAAMLG, with a possible on-site visit in February 2027 and plenary discussion in October 2027.[24]

Banking Reputation Post-Grey-List

The US International Trade Administration expects the October 2025 grey-list exit to reduce perceived market risk and ease cross-border payments.[17] No published source sets a timetable for correspondent and counterparty terms to normalise, so operators should expect the pace to vary by institution.

EU Market Access (Reverse Solicitation)

In short: South Africa is not part of the EU’s MiCA regulatory perimeter. A South African FSP licence does not authorise the marketing of crypto asset services to EU residents. Reverse solicitation under MiCA Article 61 covers only services an EU client requests on their own exclusive initiative, and ESMA’s guidelines judge solicitation on all the facts.

A South African FSP licence is a domestic authorisation and does not confer the right to market crypto asset services into the European Union. Without an EU CASP authorisation, a South African firm can serve an EU client only where the client initiates the service on their own exclusive initiative (MiCA Article 61). ESMA’s guidelines of 26 February 2025, applied from 27 April 2025, list signs that a firm is likely to be regarded as soliciting, judged on all the facts, and a firm that solicits EU clients cannot rely on the exemption.

See the reverse solicitation guide for the framework, the ESMA Q&A position and the operational tests that distinguish reverse solicitation from solicited cross-border provision.

Common Mistakes Operators Make

The FSCA identifies two recurring reasons for formal declines of CASP applications: failures in operational ability and failures to demonstrate the required competence.[23] The practical risks below combine those published reasons with broader application-planning guidance.

  • Treating the FSP licence as a “crypto licence” rather than a financial-services licence. Applicants who map their business onto “advice” and “intermediary services” in the FAIS taxonomy clear the operational-ability test. Applicants who present a crypto-native business model without that mapping struggle.
  • Underweighting Key Individual experience. RE1 and RE5 alone are insufficient. The FSCA has declined applications for failure to demonstrate knowledge and practical experience pertaining to crypto assets, which goes beyond the regulatory examinations.[23]
  • Generic AML/CFT documentation. RMCPs imported from offshore VASP regimes fail the South African specificity test. The FIC expects FIC Act references, South African STR/CTR workflows, FIC TFS list integration, and POPIA-compliant data handling.
  • Treating Travel Rule as a Year-2 problem. Directive 9 has been live since ,[9] so a licensed CASP applies it from its first transfer; plan the technology arrangement before submission rather than as a post-licence roadmap.
  • Banking left to post-licence. Banking is the soft gate. Operators who plan the banking conversation early, typically beginning pre-qualification at Stage 2, achieve operational launch within 4–8 weeks of authorisation. Operators who treat banking as a post-licence task lose 3–6 months.

How South Africa Compares

South Africa is most relevantly compared against other regulated non-EU markets: Australia, the UAE, and Labuan, with Estonia as the EU cross-tier reference. These comparators reflect where the FSCA regime actually sits: a full conduct-of-business authorisation closer to regulated mid-tier markets than to offshore registration regimes.

MetricSouth AfricaAustraliaUAE (Dubai)Labuan (Malaysia)Estonia
Licence TypeFull conduct-of-business FSP licence (Cat I + II under FAIS)AUSTRAC VASP registration + ASIC AFSL (where a financial product is offered)VARA (Dubai) / CMA (UAE-wide, formerly SCA) virtual asset frameworkMoney Broker (DA) / Credit Token / STO / Fund / s.134 ExchangeMiCA CASP authorisation
RegulatorFSCA / FIC / SARBAUSTRAC / ASICVARA / CMALabuan FSAFinancial Supervision Authority (Finantsinspektsioon)
TimelineAbout 14–22 months end to end (FSCA review about 6–12)About 2–5 months for AUSTRAC registration; 7–12 months where an AFSL is required6–12 months (VARA; Exchange 12+)4–6 months6–12 months
Capital / prudential safeguardsNo fixed minimum (Cat I); BN 194 solvency testsNone for AUSTRAC registration; AFSL: no general floor, AUD 10m NTA for custodiansAED 100,000–1,500,000+ depending on activityRM 300,000–1,500,000 paid-up by activity; RM 1,500,000 on the primary Money Broking (Digital Asset) pathwayAnnex IV class floors: EUR 50,000–150,000
Year 1 all-in (statutory + build)ZAR 734k–2.9m (~EUR 39k–156k)AUD 186,249–505,453 subtotal; add variable levies, additional AFCA charges, and capital lock-upGeneral VARA benchmark AED 1.33m to 7.26m≈ $360K–2M across activities, excluding paid-up capitalUSD 98.5k–245kEUR 131.8k–308.5k
Corporate Tax27% CIT30% CIT (25% small business)9% federal / 0% QFZP on qualifying income (licensed virtual-asset activities are not Qualifying Activities)3% LBATA (substance-conditional)22% distributed profits (0% undistributed)
Local PresenceGenuine SA presence; KI; COAU-resident director (Pty Ltd) + AML/CTF compliance officerUAE-resident MLRO + CO + SEO + office2 FTE in Labuan + RM 100k OPEXEU/EEA director; office; AML officer
Client BaseRetail + institutional; second-largest Sub-Saharan market by value receivedRetail + institutional; Australia + APACRetail mixed (activity-specific); MENA + Asia + global non-EUNon-Malaysian institutional and HNWI clients; no Malaysian retailRetail + institutional across the EU/EEA
EU PassportingNoNoNoNoYes – MiCA passport to the 30 EEA states
FATF StatusOff grey list since 24 Oct 2025ClearOff grey list since Feb 2024ClearClear
Banking AccessTier-1 domestic banks in 8–16 weeks; SARB guidance discourages blanket de-riskingDifficult; de-banking documented, acceptance assessed case by caseModerate; national banks run VASP onboarding desksDifficult; onshore Malaysian banks reluctant, fiat rails via international EMIsSelective; multi-institution architecture standard
Best ForExchanges, OTC desks, and asset managers anchoring African operations from a regulated baseInstitutional custody, AUD stablecoin issuers, and tokenised RWA platforms targeting APACOperators serving MENA and Asia wanting tax efficiency and institutional brandAPAC institutional OTC desks and Shariah-compliant structures at 3% taxEU CASPs needing full passporting at a comparatively low MiCA cost

For MiCA CASPs, the amounts shown are Annex IV class floors. Prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement. MiCA Article 67(1)–(4).

Compare every crypto jurisdiction side by side →

South Africa’s distinctive combination is regulated-market credibility, a mixed Roman-Dutch and English legal system, and a deep banking sector without an EU regulator’s documentation burden. The trade-off is no passporting. For African operations, this is the right choice. For EU customer-facing operations, an EU CASP (Estonia, Malta, Ireland) remains the structural solution.

Versus the UAE, South Africa offers genuinely lower government fees and a more flexible capital regime, but a higher headline corporate tax (27% vs the 9% federal rate) and less aggressive marketing infrastructure. Versus Labuan, South Africa offers a deeper domestic banking sector, but no comparable low-tax structure for offshore operators.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Advantages and Limitations

A South African crypto asset FSP licence buys regulated-market credibility, deep banking infrastructure, and African market access, at the cost of no EU passporting, a grey-list legacy still unwinding in correspondent banking, and a FAIS framework that is not crypto-native.

  • ✓ One of Africa’s largest regulated crypto markets. Nearly 7.8 million registered users on the three largest licensed platforms by July 2025, and the second-largest Sub-Saharan market by value received.[1][22]
  • ✓ Off the FATF grey list. Removed since ; EU removal effective .[3][29]
  • ✓ A mixed Roman-Dutch and English legal system and constitutional rule of law. Mature Supreme Court of Appeal and Constitutional Court.[31]
  • ✓ Sophisticated banking sector. Active SARB Prudential Authority guidance discouraging de-risking.[16]
  • ✓ No fixed minimum monetary capital for a Category I advice-only FSP. Commercial capitalisation, not statutory.[10]
  • ✓ Time-zone overlap with both Europe and Asia.
  • ✓ Gateway to SADC and broader pan-African crypto and stablecoin payment corridors.
  • × No passporting. Purely domestic authorisation. Mitigation: pair with an EU CASP (Estonia, Malta) where EU customer-facing operations are material; treat SA as the African pillar of a multi-jurisdiction stack.
  • × Grey-list legacy in correspondent banking. Mitigation: build banking redundancy from the outset, primary ZAR plus secondary ZAR plus regulated foreign-currency rail.
  • × Exchange control complexity, now in legislative flux. Mitigation: model cross-border flows under the draft Capital Flow Management Regulations (17 April 2026) and the draft Crypto Assets Manual (3 August 2026) rather than either High Court judgment alone.
  • × FAIS framework is not crypto-native. Mitigation: invest in business-plan-to-FAIS-taxonomy mapping at the pre-engagement stage rather than at formal submission.
  • × Higher headline CIT than offshore alternatives (27%). Mitigation: where tax efficiency is the primary driver, evaluate Mauritius, Seychelles or Labuan; SA’s value proposition is credibility plus market access, not tax.

Frequently Asked Questions

Eligibility & Scope

Yes. Operating a crypto exchange for South African clients constitutes intermediary services in respect of a financial product under section 1(h) of the FAIS Act, following FSCA General Notice 1350 of 2022.[2] Acting as an FSP without authorisation contravenes FAIS Act s.7(1), an offence under s.36 punishable by a fine of up to ZAR 10 million, imprisonment of up to 10 years, or both, and exposes the business to FSCA enforcement action.[20] By , the FSCA had initiated 81 investigations into potential unlicensed CASP businesses: 30 had been closed and 51 remained under investigation.[23]

Yes. South Africa imposes no foreign-ownership restriction specific to FSPs, and 100% foreign-owned (Pty) Ltd structures are routinely licensed. The FSCA does conduct fit-and-proper screening of qualifying owners, directors, and beneficial owners. Material adverse regulatory history offshore can be a basis for declining the licence, so disclose proactively at pre-application stage.

Capital & Cost

There is no fixed monetary minimum for a Category I advice-only FSP, but financial soundness remains mandatory. Additional working-capital and liquidity requirements under Board Notice 194 of 2017 depend on the category and whether the firm handles client assets or money.[10] The section 49 early-warning test includes asset and working-capital surpluses below 10% for firms within section 46; it is not a universal 10% liquidity-buffer rule. Commercial capitalisation in the ZAR 5 to 25 million range is typical for a serious exchange or custody business, driven by working-capital requirements and banking counterparty expectations rather than a statutory floor.

Two figures, not one. Statutory FSCA fees and levies are about ZAR 43,600 to 93,600 in Year 1, the levies part estimated, and the build on top, quoted per case, is ZAR 690,000 to 2,810,000, so plan for about ZAR 733,600 to 2,903,600 of Year 1 outlay excluding commercial working capital.

Statutory fees are a small fraction. The cost drivers are Key Individual recruitment, the Compliance Officer engagement, the RMCP build, Travel Rule technology, professional indemnity insurance, and the legal and regulatory advisory cost.

Timeline & Process

About 6–12 months from a complete application to grant by the FSCA, and about 14–22 months end-to-end if you include company formation, Key Individual onboarding (including RE1 and RE5 examinations) and full RMCP build-out. The FSCA does not publish a statutory service standard for CASP applications, so both figures are planning estimates. The single biggest slippage variable is Key Individual sourcing.

Primary ZAR business banking with a Tier-1 South African universal bank typically takes 8–16 weeks of compliance onboarding from a complete documentation pack. Foreign-currency and multi-currency arrangements through regulated EMI archetypes usually run in parallel. Start the banking pre-qualification conversation at Stage 2 of the application (Key Individual and Compliance Officer onboarding), not after grant: operators who treat banking as a post-licence task typically lose 3–6 months between authorisation and operational launch.

AML, Tax & Cross-Border

FIC Directive 9 of 2024 implements FATF Recommendation 16 (the Travel Rule) for South African CASPs. It took effect on .[9] CASPs must collect originator and beneficiary information for every crypto transfer (zero de minimis threshold for information collection; full verification required at ZAR 5,000+), screen against sanctions lists, perform counterparty CASP due diligence, and apply documented procedures for unhosted (self-hosted) wallet transfers. Final implementation guidance was issued as Public Compliance Communication 61 (PCC 61) on .

The legal position is in transition. The High Court in Standard Bank v SARB (2025) held crypto is not “capital” under the 1961 Exchange Control Regulations,[8] and SARB has been granted leave to appeal to the SCA; on , in Mangundhla v SARB, the High Court in Johannesburg held that Bitcoin is both “money” and “capital” and that Standard Bank was clearly wrong.[26] National Treasury published draft Capital Flow Management Regulations, 2026 on to replace the 1961 Regulations,[25] and a draft Crypto Assets Manual for cross-border activities followed on ;[27] neither is final. The Authorised Dealer manuals do not allow cross-border transfers made to buy crypto assets, and SARB’s Financial Surveillance Department says it is unable to approve them, so a corporate cross-border crypto flow needs its exchange control position confirmed with an Authorised Dealer.[28]

Partly. The FSCA licenses crypto-asset service providers and supervises tokenisation under the FAIS Act, but token issuers are not yet specifically regulated under the Financial Markets Act, a gap that reform (the COFI framework) is expected to close. A token that is a security follows the securities regime. Where the vehicle is a fund, route via fund licensing.

A South African crypto asset FSP licence does not grant EU market access or passporting rights. MiCA Article 61 lets a third-country firm serve an EU client only where the client initiates the service on their own exclusive initiative. ESMA’s guidelines of 26 February 2025, applied from 27 April 2025, list signs that a firm is likely to be regarded as soliciting, judged on all the facts, and a firm that solicits EU clients cannot rely on the exemption. Operators seeking systematic EU market access should obtain a separate CASP authorisation in an EU member state.

Start Your South Africa Crypto Asset FSP Application

Jagelski & Partners scopes your written brief and introduces the independent specialist who coordinates the South Africa licensing pathway end-to-end: formation, Key Individual sourcing where required, FSCA pre-engagement, RMCP and Travel Rule readiness, banking pre-qualification, and post-licensing supervision support. Book a confidential licensing assessment to map your route to authorisation.

Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.

References

Show all references
  1. South African Reserve Bank, Financial Stability Review (Second Edition 2025), resbank.co.za, accessed .
  2. Financial Sector Conduct Authority, General Notice 1350 of 2022 (declaration of crypto assets as a financial product under FAIS Act s.1(h)), Government Gazette 47334, , gov.za, accessed .
  3. Financial Action Task Force, Outcomes FATF Plenary October 2025 (South Africa removed from FATF grey list), 22–24 October 2025, fatf-gafi.org, accessed .
  4. Financial Intelligence Centre, Public Compliance Communication 61 (PCC 61): Implementation of the Travel Rule Relating to Crypto Asset Transfers, , fic.gov.za, accessed .
  5. South African Reserve Bank Financial Surveillance Department, Exchange Control Circular No. 3/2026, , resbank.co.za, accessed .
  6. South African Revenue Service, CARF Regulations (Crypto-Asset Reporting Framework), effective , sars.gov.za, accessed .
  7. Financial Sector Conduct Authority, Update on Licensing and Supervision of Crypto Asset Service Providers, released , application data as at , fsca.co.za, accessed .
  8. High Court of South Africa, Gauteng Division, Standard Bank of South Africa v South African Reserve Bank and Others (047643/2023) [2025] ZAGPPHC 481; 2025 (5) SA 289 (GP), , saflii.org, accessed .
  9. Financial Intelligence Centre, Directive 9 of 2024 (Travel Rule for CASPs), effective , fic.gov.za, accessed .
  10. Financial Services Board / FSCA, Board Notice 194 of 2017, Chapter 6, sections 46–49; the FSCA suspension notice, paragraphs 19.1–19.3, reproduced as annexure SR4 in the SARB court filing, confirms the Category I client-asset condition. Source passages checked .
  11. Financial Sector Conduct Authority, Communication on expiry of RE exemption for crypto FSPs (30 June 2025), fsca.co.za, accessed .
  12. DLA Piper, FSCA Update on Licensing and Supervision of Crypto Asset Service Providers, January 2026, dlapiper.com, accessed .
  13. Financial Sector Conduct Authority, General Notice 1 of 2024 – Determination of Fees (FAIS Act items 1.1-1.11), effective 1 October 2024, fsca.co.za, accessed .
  14. National Treasury / FSCA, Financial Sector and Deposit Insurance Levies Act, 2022: Amendment of Schedules 2, 3 and 5 (Government Notice 6889, Government Gazette 53742, 28 November 2025), fsca.co.za, accessed .
  15. South African Revenue Service, Crypto Assets and Tax (treatment guidance), sars.gov.za, accessed .
  16. South African Reserve Bank Prudential Authority, Guidance Note G1/2023 (and predecessor G10/2022) on the application of a risk-based approach to crypto-related accounts, resbank.co.za, accessed .
  17. International Trade Administration (US Department of Commerce), South Africa Financial Services: FATF Grey List Exit and Opportunities, trade.gov, accessed .
  18. Webber Wentzel, COFI Bill: What Financial Institutions Must Know, August 2025, webberwentzel.com, accessed .
  19. Werksmans Attorneys, Cracking Down or Catching Up? South Africa’s Approach to Crypto Regulation: Part 4 – Exchange Control Update, werksmans.com, accessed .
  20. Republic of South Africa, Financial Advisory and Intermediary Services Act 37 of 2002 (consolidated), gov.za, accessed .
  21. Republic of South Africa, Financial Intelligence Centre Act 38 of 2001 (consolidated, including Item 22 Schedule 1 amendment of 19 December 2022), fic.gov.za, accessed .
  22. Chainalysis, The 2025 Geography of Cryptocurrency Report – Sub-Saharan Africa, , chainalysis.com, accessed .
  23. Financial Sector Conduct Authority, Update on Licensing and Supervision of Crypto Asset Service Providers, released , application data as at , fsca.co.za, accessed .
  24. Financial Action Task Force, Assessments calendar (South Africa: FATF/ESAAMLG, possible on-site visit February 2027, possible plenary discussion October 2027), fatf-gafi.org, accessed .
  25. National Treasury and South African Reserve Bank, Joint statement: Draft Capital Flow Management Regulations open for public comment (Government Notice No. 7375, Government Gazette No. 54520, numbers as gazetted, which the statement transposes; 17 April 2026; updated 20 April 2026), resbank.co.za, accessed .
  26. High Court of South Africa, Gauteng Division, Johannesburg, Mangundhla and Another v South African Reserve Bank and Others (2022/029979) [2026] ZAGPJHC 579, , saflii.org, accessed .
  27. National Treasury and South African Reserve Bank, Joint statement: Draft Crypto Assets Manual for cross-border activities, , resbank.co.za, accessed .
  28. South African Reserve Bank, Frequently asked questions: exchange control (crypto assets; outward foreign direct investment by South African companies), resbank.co.za, accessed .
  29. European Commission, EU list of high-risk third countries (Delegated Regulation (EU) 2016/1675 as amended; South Africa removed by Commission Delegated Regulation (EU) 2026/83, published 9 January 2026, in force 29 January 2026), finance.ec.europa.eu, accessed .
  30. National Assembly, Notice of introduction in the National Assembly of the Conduct of Financial Institutions Bill, 2026 and publication of explanatory summary (Government Gazette 54520, 17 April 2026), gov.za, accessed .
  31. Supreme Court of Appeal of South Africa, History (South African law as a mixed legal system of European civil law and English common law), supremecourtofappeal.org.za, accessed .
  32. ENSafrica, Leave to appeal landmark crypto judgment granted (news flash, 18 September 2025, on the High Court order of 17 September 2025 granting SARB leave to appeal directly to the Supreme Court of Appeal; the order itself is not published on SAFLII), ensafrica.com, accessed .
  33. Supreme Court of Appeal of South Africa, Court Roll (final rolls for February–March, May and August–September 2026, and the November 2026 roll updated 15 September 2026), supremecourtofappeal.org.za, accessed .
  34. Financial Sector Conduct Authority, FSCA FAIS Notice 90 of 2022: Exemption of Persons rendering Financial Services in relation to Crypto Assets from section 7(1) of the FAIS Act, 2022 (reissued 21 October 2022, effective 19 October 2022; paragraphs 1 and 3: crypto asset miners, node operators and persons rendering financial services in relation to non-fungible tokens are exempt until the exemption is amended or withdrawn), published with General Notice 1350 of 2022, fsca.co.za (document bundle), accessed .
  35. Financial Sector Conduct Authority, Policy Document supporting the Declaration of a Crypto Asset as a Financial Product under the FAIS Act, issued , paragraphs 4.6–4.12 (mining nodes, node operators and NFTs not at this stage subject to FSCA oversight; crypto asset derivatives always subject to the FAIS Act and their providers to the FMA), fsca.co.za (document bundle), accessed .