Why Choose South Africa for Crypto Licensing?
South Africa is the largest and most-regulated crypto market in Africa, and the Financial Sector Conduct Authority is actively licensing Crypto Asset Service Providers under it. Operators licensed under the Financial Advisory and Intermediary Services Act gain access to a sophisticated banking sector, English-derived common law and a gateway to the broader Southern African Development Community.
Africa’s Largest Crypto Market by Both User Base and Regulation
Africa’s largest regulated crypto market sits in South Africa. The South African Reserve Bank’s Financial Stability Review of November 2025 records nearly 7.8 million registered users across the three largest licensed platforms by the end of July 2025, up from roughly 4.3 million in 2022.[1] Independent on-chain analysis ranks Sub-Saharan Africa among the fastest-growing crypto regions, with South Africa as its largest market by value received.[22] Custody assets at the same three providers grew from under ZAR 10 billion at the start of 2023 to ZAR 25.3 billion at end-2024. Unlike Nigeria, where regulatory clarity remains in flux as of , South Africa offers an operating licence today.
In practice, applicants who already trade in South Africa under the General Exemption framework convert to full FSP status more cleanly than greenfield entrants, because business-model evidence is already in hand.
A Pragmatic, Operator-Tested FSP Regime
South Africa chose to regulate crypto under an existing statute rather than draft a new one. The FSCA declared crypto a “financial product” under section 1(h) of the FAIS Act via General Notice 1350 of 2022, gazetted on .[2] This means CASPs licence as FSPs, the same regime used by financial advisers and intermediaries for two decades. The advantage is regulatory familiarity for the financial services industry. The trade-off is that crypto business models must be translated into a financial-advisory taxonomy.
The FAIS route is a defensible interim choice and works well for established business models, but operators with novel structures (DAO-led, custodial-staking-as-service, tokenised real-world assets) should expect the FSCA to ask harder questions about how their model maps onto “advice” or “intermediary services”. The forthcoming Conduct of Financial Institutions framework is expected to consolidate conduct regulation over time, but it is not yet enacted as of .[18]
Off the FATF Grey List Since October 2025
South Africa exited the FATF grey list on after completing all 22 action items from its February 2023 listing.[3] The European Union removed South Africa from its High-Risk Third Country Jurisdictions list in January 2026, restoring it to non-enhanced AML status across the EEA. Correspondent banking risk premiums incurred during the grey-list period are unwinding through 2026 and into 2027.
Gateway to the SADC and Broader African Markets
SADC member states recognise South African corporate vehicles and regulated providers as preferred counterparties. For pan-African crypto and stablecoin payment rails, an FSCA-licensed entity is the most credible single point of regulatory anchoring on the continent as of . Compared with offshore alternatives such as Mauritius or Seychelles (where formation is straightforward but African banking acceptance is uneven), a South African FSP carries greater weight with regional banking counterparties.
Regulatory Framework
South Africa regulates crypto under the Financial Advisory and Intermediary Services Act 37 of 2002 (FAIS Act), with three regulators sharing the file: the FSCA for conduct and licensing, the FIC for AML/CFT, and the SARB Prudential Authority for exchange control and financial stability. Crypto was declared a financial product on , opening the FSP route.[2]
Definition: Crypto Asset FSP
A Crypto Asset FSP is a person authorised by the Financial Sector Conduct Authority under section 8 of the FAIS Act to render financial services in respect of crypto assets, meaning advice and/or intermediary services on the buying, selling, holding or arrangement of crypto assets. The authorising statute is the FAIS Act;[20] the activating instrument is FSCA General Notice 1350 of 2022. Tax treatment: 27% corporate income tax; 21.6% effective on corporate crypto capital gains; VAT exempt on supply of the crypto asset itself.
Regulatory History
Crypto regulation in South Africa has moved through three phases. From 2014 to 2018 the SARB and National Treasury issued consumer-warning position papers without legislating. From 2018 to 2022 the Intergovernmental Fintech Working Group (IFWG) and its Crypto Assets Regulatory Working Group developed the position paper that ultimately framed the FAIS declaration. The current phase began with FIC Act Item 22 on [21] and FSCA General Notice 1350 effective .[2] Existing providers had a transitional window from to to file applications.
In practice, most withdrawals during the transitional window were business-model issues that the FSCA’s pre-application engagement surfaced before the formal decline letter.
Recent Regulatory Developments
- – FIC draft Public Compliance Communication 123 published for consultation. Detailed implementation guidance for Travel Rule Directive 9, including handling of unhosted wallet transfers and counterparty CASP due diligence.[4]
- – SARB FinSurv Exchange Control Circular No. 3/2026. Confirms that draft regulations under the Currency and Exchanges Act 1933 will bring crypto into the Capital Flow Management Framework.[5]
- – SARS CARF regulations take effect. First reporting year 2026/27, bringing South Africa into the OECD Crypto-Asset Reporting Framework.[6]
- – 2026 Budget Speech. Minister of Finance Godongwana announces formal inclusion of crypto in the Exchange Control Regulations.[5]
- – EU removes South Africa from its High-Risk Third Country list.[3]
- – FSCA Update on Licensing and Supervision of CASPs. 300 approvals out of 512 applications; 14 declined; 121 withdrawn; 77 under review.[7]
- – SARB Financial Stability Review (Second Edition 2025). Adds “technology-enabled financial innovation” as a financial-stability risk category; stablecoin trading volumes grew from under ZAR 4 billion in 2022 to nearly ZAR 80 billion in the year to October 2025.[1]
- – South Africa exits FATF grey list after a 32-month listing.[3]
- – Standard Bank v SARB High Court judgment. Held that crypto is not “capital” under the 1961 Exchange Control Regulations. SARB has been granted leave to appeal to the SCA.[8]
- – FIC Directive 9 (Travel Rule) takes effect.[9]
Regulatory Overlap (FSCA / FIC / SARB / SARS)
| Overlapping regime | Triggering activity | Practical consequence |
|---|---|---|
| FAIS Act (FSCA) | Advice or intermediary services on crypto assets | FSP licence required |
| FIC Act, Item 22 Schedule 1 (FIC) | Acting as a CASP for clients | Accountable institution registration; RMCP; Travel Rule compliance; STR/CTR reporting |
| Currency and Exchanges Act 1933 + Exchange Control Regulations 1961 (SARB) | Cross-border crypto flows | (Under amendment; see Recent Developments) will require SARB approval or fit within personal/corporate allowances |
| Income Tax Act 58 of 1962 (SARS) | Any crypto transaction generating gain | CIT/CGT/income tax; CARF reporting from 2026/27 |
| Financial Markets Act 19 of 2012 | Crypto-asset derivatives | Securities regulation; separate licensing pathway |
The Multi-Regulator Structure in Practice
Three regulators do not equal three licences. A licensed crypto FSP holds a single authorisation from the FSCA. Registration with the FIC as an accountable institution is automatic for in-scope activities and is supervised in coordination with the FSCA through the Crypto Asset Supervisory Engagement Forum established .[7] SARB engagement is event-driven: triggered by cross-border flows, prudential thresholds or financial-stability concerns rather than ongoing supervision.
License Types and Activities Covered
Two FSP categories cover almost all crypto business models in South Africa. Category I authorises advice and intermediary services on crypto assets and is sufficient for exchanges, brokers, OTC desks and crypto advisers. Category II is required where the FSP exercises discretion over client crypto assets, which captures managed crypto portfolios and discretionary asset management for retail or institutional clients.
Category I FSP (advice + intermediary)
- Crypto exchange and brokerage operation
- OTC desk activity
- Advice on the purchase, sale or holding of crypto assets
- Intermediation in transactions in crypto assets
- Operating a crypto savings or earn product (subject to FSCA case review)
Category II FSP (discretionary)
- Discretionary management of client crypto portfolios
- Tokenised fund management where the manager exercises investment discretion
- Discretionary staking/yield programmes structured as managed products
Activities Currently Outside the FSP Perimeter
- Pure crypto mining and node operation, where no client interaction occurs
- Pure NFT service provision, pending further policy
- Genuine peer-to-peer transactions undertaken not as a regular feature of business
- Crypto-asset derivatives, which fall under the Financial Markets Act 2012 and require a separate authorisation as a securities services provider
Requirements
Six layers of requirement apply to a crypto asset FSP applicant. The corporate vehicle and beneficial ownership; the Key Individuals and Representatives; the Compliance Officer; the operational infrastructure (premises, systems, records); the AML/CFT programme; and the financial soundness baseline. The FSCA assesses fit-and-proper, operational ability and financial soundness as the three statutory tests under Board Notice 194 of 2017.[10]
| Requirement | Standard |
|---|---|
| Corporate vehicle | South African Private Company ((Pty) Ltd) under the Companies Act 71 of 2008 |
| Foreign ownership | 100% permitted. No restriction specific to FSPs |
| Beneficial owners | Disclosed to CIPC beneficial-ownership register and to the FSCA |
| Key Individuals | At least one per category; fit-and-proper; honesty/integrity; competence (RE1); recognised qualification; operational-ability evidence |
| Representatives | RE5 within 24 months of date of first appointment; class-of-business and product training |
| Compliance Officer | FSCA-approved; in-house or outsourced |
| Physical presence | Genuine SA operational presence. No virtual mailbox. Books and records in South Africa |
| Financial soundness | BN 194 of 2017 Chapter 6: solvency (assets > liabilities), working capital, liquidity (Category-specific) |
| AML/CFT | FIC registration; RMCP under s.42 FIC Act; Travel Rule capability for transfers in/out from |
| Professional indemnity | Required; quantum proportional to business scale |
Key Individual Fit-and-Proper Bar
The Key Individual role carries personal regulatory accountability and the FSCA assesses each KI individually. Competence requires the RE1 regulatory examination, which became fully mandatory for crypto FSPs on when the temporary exemption expired with no further extension.[11] The FSCA increasingly declines applications where leadership cannot demonstrate technical understanding of crypto assets at the operational level, including private-key management, distributed ledger technology basics and stablecoin mechanics.[12]
In practice, sourcing a Key Individual who has both passed RE1/RE5 and can demonstrate practical crypto experience remains the single hardest hire in the South African application, so start the recruitment process six to nine months before targeted submission.
Operational Substance
Operational substance is not a checkbox. The FSCA’s inspection programme that began in tests genuine local activity: premises, on-site staff, in-country systems and an SA-resident operational head.[7] A holding-company-style structure with a thin local layer does not pass post-licensing supervision.
Financial Soundness (no fixed monetary minimum)
Unlike MiCA’s EUR 50,000 to EUR 150,000 capital floors (Estonia, Malta) or Mauritius’s tiered MUR 2 to 6.5 million paid-up capital, South Africa imposes no fixed monetary minimum for a Category I advice-only FSP. Board Notice 194 of 2017 instead requires ongoing assets-greater-than-liabilities, working-capital and liquidity tests, with an Early Warning trigger at less than 10% buffer.[10] Commercial capitalisation in the ZAR 5 to 25 million range (approximately EUR 250,000 to 1.25 million) is typical for a serious exchange or custody business.
Application Process
The application process runs in four stages over six to twelve months from formation to grant. Stage 1: form the South African operating company. Stage 2: build the Key Individual bench and Compliance Officer arrangement. Stage 3: prepare and pre-engage with the FSCA. Stage 4: submit, respond to information requests and complete licensing on grant.
Formation and Capitalisation
Incorporate the (Pty) Ltd, register with the South African Revenue Service for tax, appoint a public officer, open a ZAR operating account and capitalise sufficient working capital. For full requirements and tax setup, see the South Africa company formation guide.
Key Individual and Compliance Officer Onboarding
Identify, vet and onboard Key Individuals; complete RE1 and RE5 examinations; appoint or contract the Compliance Officer; document the operational ability evidence base.
RMCP, Business Plan and Pre-Engagement
Draft the FIC RMCP, the business plan, the Travel Rule technology arrangement, conflicts of interest policy and the operational risk framework. Hold pre-application engagement with the FSCA Licensing Division.
Submission, Queries and Grant
File Forms FSP 2, FSP 4C, FSP 4D and FSP 5 (revised post-October 2022 to include crypto sub-categories). Respond to FSCA information requests. Receive authorisation.
Sequencing matters. Most declined or withdrawn applications stumbled on three predictable issues, Key Individual competence, business-plan-to-FAIS-taxonomy mapping, and Travel Rule readiness, that surface in pre-application engagement rather than at the formal decision stage. Jagelski & Partners coordinates the South African licensing pathway end-to-end, including company formation, Key Individual sourcing where required, RMCP drafting and the FSCA pre-engagement protocol, so the formal submission represents an already-aligned position rather than a starting point.
Required Documents
The FSCA application package combines incorporation evidence, fit-and-proper documentation for each Key Individual and Representative, the business plan, the financial soundness statement, the Compliance Officer arrangement and a complete set of operational and AML policies. Below are the policies and frameworks that the regulator expects to see jurisdiction-tailored to South Africa.
Compliance Documentation
Jagelski & Partners’ compliance partner capability delivers South Africa-specific documentation: the FSCA expects bespoke policies tailored to FAIS, the FIC Act and Directive 9, not generic templates. Each policy below is drafted to address South African statutory and supervisory expectations, including the General Code of Conduct (BN 80 of 2003), the Financial Sector Regulation Act and the FSCA’s published licensing guidance, and reviewed against the latest Board Notices.
- AML/CFT Policy Manual. Mandatory FIC Act framework for accountable institutions. Establishes the firm’s anti-money-laundering and counter-financing-of-terrorism control environment under the Financial Intelligence Centre Act, identifies the compliance officer and reporting lines into the FIC, and addresses crypto-specific typologies including mixers, anonymity-enhanced coins and self-hosted wallet transfers.
- Enterprise-Wide Risk Assessment. Customer, geographic, product and channel risk under FIC Act s.42. Documents inherent and residual money-laundering and terrorist-financing risk across customer types, jurisdictions, products and delivery channels, with controls calibrated to each risk tier and quantified residual-risk scoring after controls.
- Risk Appetite Statement. Recommended baseline for the FSCA’s risk-based supervision. Sets the board-approved thresholds for the risk the firm will and will not accept, specific enough that the FSCA can test whether the proposed operating model is consistent with the stated tolerance.
- Sanctions Screening Procedures. UN Security Council lists, the FIC Targeted Financial Sanctions list, and OFAC where applicable, with refresh frequency, screening hit-rate testing, escalation matrix and freezing procedures for both natural-person and wallet-address designations.
- Restricted Countries & Jurisdictions Matrix. Updated to reflect post-grey-list peer status. Territory-by-territory eligibility classification referenced to FATF status, EU AML list and national prohibitions, reviewed at least annually.
- Transaction Monitoring Framework. Risk-tiered scenarios mapped to FIC Act red-flag indicators. Includes crypto-specific typologies (chain-hopping, peel-chain laundering, mixer ingress and egress) with an alert-handling and disposition workflow.
- Travel Rule Implementation (FIC Directive 9). Information collection at zero threshold; verification at ZAR 5,000+; counterparty CASP due diligence; unhosted wallet handling. Operationalises Directive 9 covering originator and beneficiary data capture and the self-hosted-wallet protocol.
- STR/SAR Procedures. FIC reporting through goAML; CTR thresholds; Terrorist Property Reports under s.28A. Sets the internal escalation, decision and filing procedures, with tipping-off prohibitions and record-keeping obligations.
- KYC & Client Onboarding (incl. KYB). CDD/EDD under FIC Act ss.20–24; beneficial-owner identification. Documents customer and business due diligence, enhanced measures for higher-risk clients and politically exposed persons, and beneficial-ownership verification at onboarding and review.
- Compliance Monitoring Programme. Quarterly compliance officer reporting to the FSCA. Defines the annual testing schedule, scope and reporting lines for ongoing monitoring of AML controls, sanctions effectiveness and Travel Rule compliance.
- Data Protection Policies. Protection of Personal Information Act 4 of 2013 (POPIA) compliance. Governs lawful processing, security safeguards, retention schedules and data-subject rights for client and counterparty personal information.
- Key/Wallet Management Procedures. Custody, cold/hot wallet segregation, private-key access controls. Specifies private-key generation, storage, segregation and access controls for any custodial or operational wallet infrastructure.
Costs and Pricing
Total realistic Year 1 cost of obtaining and maintaining a Category I + II crypto asset FSP licence ranges from ZAR 750,000 to ZAR 2,800,000 (approximately EUR 37,000 to EUR 140,000), excluding the commercial working capital that financial soundness and banking counterparties expect. Government fees are modest; the cost driver is the build-out, and a thin preparation proves expensive in deferred terms.
Government Fees
| Fee | Amount (ZAR) | Reference |
|---|---|---|
| Category I FSP authorisation application | 2,697.00 | FSCA Determination of Fees, General Notice 1 of 2024[13] |
| Category II FSP authorisation application | 16,313.00 | Same |
| Multi-category discount | 10% off second category | Same |
| Annual FSCA levy – Category I base | 4,006.80 (proposed 2025/26) | Levies Act schedule[14] |
| Annual FSCA levy – Category II base | 8,347.50 | Same |
| Annual FSCA levy – per KI/Rep (Cat I) | 551.20 | Same |
| Ombud Council levy | 2.5% of FSCA levy | Same |
| Tribunal levy | 2.76% of FSCA levy | Same |
| FAIS Ombud levy | R1,100 base + R722 per KI/Rep | Same |
Total Cost Summary (Year 1, Advised Route)
| Item | Range (ZAR) |
|---|---|
| FSCA application fees (Cat I + II, post-discount) | 17,000–35,000≈ EUR 850–1,750 |
| Annual FSCA, ombud and tribunal levies (Cat I + II) | 25,000–60,000≈ EUR 1,250–3,000 |
| Legal and compliance build-out (RMCP, AML, business plan) | 250,000–1,200,000≈ EUR 12,500–60,000 |
| Compliance Officer (outsourced, annual) | 120,000–360,000≈ EUR 6,000–18,000 |
| Key Individual recruitment + RE1/RE5 + qualifications | 80,000–300,000≈ EUR 4,000–15,000 |
| PI insurance + cyber cover | 60,000–300,000≈ EUR 3,000–15,000 |
| Travel Rule technology subscription (annual) | 100,000–400,000≈ EUR 5,000–20,000 |
| Audit (statutory, annual) | 80,000–250,000≈ EUR 4,000–12,500 |
| Total Year 1 (excluding commercial working capital) | 750,000–2,800,000≈ EUR 37,000–140,000 |
Self-managed application is technically permitted, but the FSCA’s 24% withdrawal rate is concentrated among applicants who did not pre-engage and who underestimated operational-ability evidence requirements.[7]
Timeline
End-to-end realistic timeline is 9–18 months from initial decision to FSP authorisation, with 6–12 months allocated to the FSCA review itself once a complete application is filed. The FSCA does not publish a statutory service standard for CASP applications, but the supervisory programme begun in has produced consistent cycle times.[7]
- Months 0–2 – Decision, formation, banking. Incorporate the (Pty) Ltd; appoint directors and public officer; open primary ZAR banking; capitalise. (Banking onboarding for an unlicensed crypto applicant company is realistic at this stage as a basic operating account; full crypto operating banking follows licence grant.)
- Months 2–6 – KI and CO recruitment, RE exams. Recruit Key Individuals; complete RE1 / RE5; appoint Compliance Officer.
- Months 4–8 – Documentation build. Business plan; RMCP; AML/CFT manual; Travel Rule technology contract; PI insurance; opening balance sheet.
- Months 6–8 – Pre-engagement. FSCA Licensing Division pre-application meeting.
- Months 8–10 – Submission. Forms FSP 2, FSP 4C, FSP 4D, FSP 5; supporting documentation.
- Months 10–18 – FSCA review, queries, grant. Information requests; conditional grant or full authorisation.
Two delays dominate. Key Individual sourcing, finding the right combination of FAIS competence and crypto experience, accounts for most multi-month slippage. Travel Rule technology procurement is the second; the FIC’s expectation of demonstrated capability from means the technology arrangement must be in place at submission, not at grant.
Taxation
The South African Revenue Service treats crypto assets as “assets of an intangible nature”, not legal tender. Income or capital gains characterisation depends on intention and conduct. Corporate income tax sits at 27%, with an effective 21.6% rate on corporate crypto capital gains (80% CGT inclusion). VAT applies to platform and advisory fees but not to the supply of the crypto asset itself.[15]
Corporate Income Tax and Capital Gains
A South African crypto FSP holding company is subject to 27% CIT on net revenue, and 21.6% effective CGT on crypto held on capital account. Trading-account treatment (full income-tax rates) applies where assets are held primarily for resale, which is the typical exchange or OTC business case. Mining and staking rewards are ordinary income at fair value on receipt.
VAT
The Value-Added Tax Act 89 of 1991 was amended in 2019 to add section 2(1)(o), treating the supply of crypto assets as an exempt financial service. Standard 15% VAT continues to apply to taxable services such as platform fees, advisory fees and software services. A VAT-registered FSP must distinguish these revenue streams in its accounts.
Crypto-Asset Reporting Framework (CARF) from 1 March 2026
South Africa adopted the OECD’s Crypto-Asset Reporting Framework with SARS regulations effective . First reporting year is 2026/27.[6] Licensed CASPs will be required to collect tax-residency and identifying information on reportable users and to report aggregated transaction data to SARS, which exchanges with OECD partners. Implementation systems must be operational by end of the 2026/27 tax year.
Ongoing Compliance & Post-Registration
Once authorised, a crypto asset FSP operates under continuous obligation across four streams: financial and regulatory reporting to the FSCA; AML/CFT reporting and supervision through the FIC; conduct of business supervision; and supervisory inspection. The FSCA’s inspection programme launched in has expanded to a planned 30 supervisory FICA inspections in the 2025/26 cycle.[7]
Annual Reporting and Filings
- Annual Financial Statements to FSCA within four months of year-end (FAIS Act s.19).
- Annual Compliance Officer report to FSCA.
- Liquidity Calculation Declaration (annual for Cat I; bi-annual for Cat II/IIA/III).
- Continuing Professional Development hours for Key Individuals and Representatives (BN 194 Chapter 4).
- Annual statutory audit by a registered auditor.
Annual Fees and Levies
- FSCA annual levy per the most recent Levies Act schedule.[14]
- Ombud Council levy (2.5% of FSCA levy).
- Tribunal levy (2.76% of FSCA levy).
- FAIS Ombud levy.
Supervisory Inspections
FSCA risk-based inspections cover business conduct, fit-and-proper continuity and AML/CFT effectiveness. By , the FSCA had completed 21 of a planned 30 supervisory FICA inspections of licensed CASPs in the 2025/26 cycle.[7] The Crypto Asset Supervisory Engagement Forum, established , coordinates inspection findings across regulators.
Enforcement
The FSCA reported 81 unlicensed-operator investigations open as at , of which 25 were closed (dormant) and 56 ongoing.[7] The Tribunal can impose administrative penalties; FIC Act non-compliance attracts financial penalties up to ZAR 10 million for natural persons and ZAR 50 million for legal persons per instance (FIC Act s.45C).[9]
Banking
Banking access for licensed crypto FSPs in South Africa has improved materially since the de-banking wave of 2019–2021. The SARB Prudential Authority’s Guidance Notes G10/2022 and G1/2023 direct banks to apply a risk-based approach rather than blanket account closure.[16] Combined with the FATF grey-list exit, banking is no longer the binary blocker it was three years ago.
Banking Reality for Licensed FSPs
Three archetypes serve the licensed crypto market in South Africa. The Tier-1 universal SA bank archetype provides primary ZAR banking and SWIFT correspondent access; expect a full compliance review including FSP licence verification, FIC registration confirmation, Travel Rule capability evidence and a senior compliance contact. The mid-market business-banking specialist archetype offers more flexible onboarding for second-bank diversification. The regulated foreign-currency EMI archetype provides multi-currency and international rail diversification alongside the primary ZAR account.
Cross-Border Flows and Exchange Control
The 1961 Exchange Control Regulations were drafted long before crypto and the Standard Bank v SARB High Court judgment of held that crypto is not “capital” under those Regulations.[8] SARB has been granted leave to appeal directly to the Supreme Court of Appeal, and the National Treasury announced in the Budget Speech that draft regulations under the Currency and Exchanges Act 1933 will formally include crypto in the Capital Flow Management Framework.[5][19]
As of the prudent planning assumption is that cross-border crypto flows by corporate entities will require either SARB approval or fit within the existing R1 billion corporate annual offshore allowance once draft regulations land; structuring around the litigation outcome alone is high-risk.
A licence without banking access is a certificate on the wall. Jagelski & Partners coordinates banking pre-qualification for South Africa-licensed FSPs across multiple institution types, sequencing the banking application so that primary ZAR, secondary ZAR and foreign-currency rails come online in step with operational launch rather than as a 12-month post-licence afterthought.
For a licensed South African FSP the sequence is domestic-first: primary ZAR banking at a Tier-1 universal bank, second-bank diversification through mid-market business-banking specialists, and regulated foreign-currency EMIs for international rails, timed in step with the FSCA application rather than after grant. The partner network maintains live account-opening routes in every jurisdiction Jagelski & Partners services, and banking feasibility is confirmed at the scoping stage, before any licence application is filed.
Explore Banking SolutionsInternational Standing
South Africa’s international regulatory standing improved on three fronts between October 2025 and January 2026: the FATF grey-list exit and EU follow-on (covered under Why South Africa); and the FSCA’s transition from licensing to active supervision. Whether these gains translate into operational improvements for individual operators depends on banking, correspondent and cross-border relationships built afterwards.
FATF and AML Standing
South Africa was grey-listed by FATF on .[3] The next FATF Mutual Evaluation cycle opens in the first half of 2026 and concludes in October 2027.
Banking Reputation Post-Grey-List
As the correspondent banking risk premiums incurred during the listing unwind, international correspondent relationships are restoring faster than retail-tier ratings adjustments, which suggests an approximately 12–36-month tail on full normalisation across all counterparty tiers.[17]
EU Market Access (Reverse Solicitation)
A South African FSP licence is a domestic authorisation and does not confer the right to market crypto asset services into the European Union. The only legitimate channel for serving EU clients without an EU CASP authorisation is reverse solicitation, where the EU client initiates the engagement on their own exclusive initiative, and this is being narrowed under ESMA guidance as MiCA enforcement matures. See the reverse solicitation guide for the framework, the ESMA Q&A position and the operational tests that distinguish reverse solicitation from solicited cross-border provision.
Common Mistakes Operators Make
Of 512 applications filed since , the FSCA had approved 300, declined 14 and seen 121 voluntarily withdrawn by .[7] The withdrawal rate concentrates around five repeating issues, each preventable with appropriate sequencing.
- Treating the FSP licence as a “crypto licence” rather than a financial-services licence. Applicants who map their business onto “advice” and “intermediary services” in the FAIS taxonomy clear the operational-ability test. Applicants who present a crypto-native business model without that mapping struggle.
- Underweighting Key Individual experience. RE1 and RE5 alone are insufficient. The FSCA increasingly tests demonstrable crypto operational experience at KI level, private-key management, DLT mechanics, stablecoin operation, beyond the regulatory examinations.[12]
- Generic AML/CFT documentation. RMCPs imported from offshore VASP regimes fail the South African specificity test. The FIC expects FIC Act references, South African STR/CTR workflows, FIC TFS list integration, and POPIA-compliant data handling.
- Treating Travel Rule as a Year-2 problem. Directive 9 has been live since .[9] The FSCA expects an executed Travel Rule technology arrangement at submission, not a planned roadmap.
- Banking left to post-licence. Banking is the soft gate. Operators who plan the banking conversation early, typically beginning pre-qualification at Stage 2, achieve operational launch within 4–8 weeks of authorisation. Operators who treat banking as a post-licence task lose 3–6 months.
How South Africa Compares
South Africa is most relevantly compared against other regulated non-EU markets: Australia, the UAE and Labuan, with Estonia as the EU cross-tier reference. These comparators reflect where the FSCA regime actually sits: a full conduct-of-business authorisation closer to regulated mid-tier markets than to offshore registration regimes.
| Metric | South Africa | Australia | UAE (Dubai) | Labuan (Malaysia) | Estonia |
|---|---|---|---|---|---|
| Licence Type | Full conduct-of-business FSP licence (Cat I + II under FAIS) | AUSTRAC DCE/VASP registration + ASIC AFSL (where a financial product is offered) | VARA (Dubai) / SCA (UAE-wide) virtual asset framework | Labuan Digital Financial Services / Money Broking | MiCA CASP authorisation |
| Regulator | FSCA / FIC / SARB | AUSTRAC / ASIC | VARA / SCA | Labuan FSA | Financial Supervision Authority (Finantsinspektsioon) |
| Timeline | 6–12 months | AUSTRAC registration 4–12 weeks; ASIC AFSL 5–8 months where required | 6–12 months | 4–6 months | 6–12 months |
| Min. Capital | No fixed minimum (Cat I); BN 194 solvency tests | None for AUSTRAC registration; AFSL NTA from AUD 50k (AUD 10m for platform custody) under the 2027 regime | AED 100,000–1,500,000+ depending on activity | USD 50,000 paid-up | EUR 50,000–150,000 |
| Total Year 1 Cost | ZAR 750k–2.8m (~EUR 37k–140k) | AUD 60k–200k+ | AED 250k–800k+ | USD 75k–200k | EUR 80k–250k |
| Corporate Tax | 27% CIT | 30% CIT (25% small business) | 9% UAE federal CIT (mainland); free-zone qualifying income 0% | 3% on Labuan trading profits | 22% distributed profits (0% undistributed) |
| Local Presence | Genuine SA presence; KI; CO | Resident designated officer | Resident director; office | Substance per Labuan ES rules | EU/EEA director; office; AML officer |
| Client Base | Retail + institutional; largest regulated crypto market in Africa | Retail + institutional; Australia + APAC | Retail mixed (activity-specific); MENA + Asia + global non-EU | Non-Malaysian institutional and HNWI clients; no Malaysian retail | Retail + institutional across the EU/EEA |
| EU Passporting | No | No | No | No | Yes – MiCA passport to 30 EEA states |
| FATF Status | Off grey list since 24 Oct 2025 | Clear | Off grey list since Feb 2024 | Clear | Clear |
| Banking Access | Tier-1 domestic banks in 8–16 weeks; SARB guidance discourages blanket de-risking | Difficult; four majors constrained since 2023, debanking an ongoing risk | Moderate; national banks run VASP onboarding desks | Difficult; onshore Malaysian banks reluctant, fiat rails via international EMIs | Selective; multi-institution architecture standard |
| Best For | Exchanges, OTC desks and asset managers anchoring African operations from a regulated base | Institutional custody, AUD stablecoin issuers and tokenised RWA platforms targeting APAC | Operators serving MENA and Asia wanting tax efficiency and institutional brand | APAC institutional OTC desks and Shariah-compliant structures at 3% tax | EU CASPs needing full passporting at the lowest MiCA cost |
Compare every crypto jurisdiction side by side →
South Africa’s distinctive combination is regulated-market credibility, common-law continuity and a deep banking sector without an EU regulator’s documentation burden. The trade-off is no passporting. For African operations, this is the right choice. For EU customer-facing operations, an EU CASP (Estonia, Malta, Ireland) remains the structural solution.
Versus the UAE, South Africa offers genuinely lower government fees and a more flexible capital regime, but a higher headline corporate tax (27% vs 9% mainland) and less aggressive marketing infrastructure. Versus Labuan, South Africa offers a stronger banking sector and English common law, but no comparable low-tax structure for offshore operators.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Advantages and Limitations
A South African crypto asset FSP licence buys regulated-market credibility, deep banking infrastructure and African market access, at the cost of no EU passporting, a grey-list legacy still unwinding in correspondent banking, and a FAIS framework that is not crypto-native.
- Largest regulated African crypto market. Leading by user base and on-chain activity.[1]
- Off the FATF grey list. Removed since ; EU removal January 2026.[3]
- English common law and constitutional rule of law. Mature Supreme Court of Appeal and Constitutional Court.
- Sophisticated banking sector. Active SARB Prudential Authority guidance discouraging de-risking.[16]
- No fixed minimum monetary capital for a Category I advice-only FSP. Commercial capitalisation, not statutory.[10]
- Time-zone overlap with both Europe and Asia.
- Gateway to SADC and broader pan-African crypto and stablecoin payment corridors.
- No passporting. Purely domestic authorisation. Mitigation: pair with an EU CASP (Estonia, Malta) where EU customer-facing operations are material; treat SA as the African pillar of a multi-jurisdiction stack.
- Grey-list legacy in correspondent banking. Mitigation: build banking redundancy from the outset, primary ZAR plus secondary ZAR plus regulated foreign-currency rail.
- Exchange control complexity, now in legislative flux. Mitigation: model cross-border flows under the post-25 February 2026 Budget regulatory direction rather than the Standard Bank v SARB High Court outcome alone.
- FAIS framework is not crypto-native. Mitigation: invest in business-plan-to-FAIS-taxonomy mapping at the pre-engagement stage rather than at formal submission.
- Higher headline CIT than offshore alternatives (27%). Mitigation: where tax efficiency is the primary driver, evaluate Mauritius, Seychelles or Labuan; SA’s value proposition is credibility plus market access, not tax.
Frequently Asked Questions
Yes. Operating a crypto exchange for South African clients constitutes intermediary services in respect of a financial product under section 1(h) of the FAIS Act, following FSCA General Notice 1350 of 2022.[2] Operating without authorisation exposes the entity and its directors to civil and criminal penalties under FAIS Act s.7 and to FSCA enforcement action. As of , the FSCA had 56 ongoing investigations into unlicensed CASP activity.[7]
Yes. South Africa imposes no foreign-ownership restriction specific to FSPs, and 100% foreign-owned (Pty) Ltd structures are routinely licensed. The FSCA does conduct fit-and-proper screening of qualifying owners, directors and beneficial owners. Material adverse regulatory history offshore can be a basis for declining the licence, so disclose proactively at pre-application stage.
There is no fixed monetary minimum for a Category I advice-only FSP. Board Notice 194 of 2017 imposes ongoing tests instead: assets must exceed liabilities, current assets must exceed current liabilities, and a liquidity buffer must be maintained.[10] An Early Warning report is triggered where the buffer falls below 10%. Commercial capitalisation in the ZAR 5 to 25 million range is typical for a serious exchange or custody business, driven by working-capital requirements and banking counterparty expectations rather than a statutory floor.
Plan for ZAR 750,000 to 2,800,000 of Year 1 outlay excluding commercial working capital. Statutory fees are a small fraction. The cost drivers are Key Individual recruitment, the Compliance Officer engagement, the RMCP build, Travel Rule technology, professional indemnity insurance and the legal and regulatory advisory cost. A genuinely DIY application is technically possible but consider that 121 of 512 applications were voluntarily withdrawn after FSCA engagement.[7]
6–12 months from a complete application to grant by the FSCA, and 9–18 months end-to-end if you include company formation, Key Individual onboarding (including RE1 and RE5 examinations) and full RMCP build-out. The FSCA does not publish a statutory service standard for CASP applications, but the supervisory programme since has produced consistent cycle times.[7] The single biggest slippage variable is Key Individual sourcing.
Primary ZAR business banking with a Tier-1 South African universal bank typically takes 8–16 weeks of compliance onboarding from a complete documentation pack. Foreign-currency and multi-currency arrangements through regulated EMI archetypes usually run in parallel. Start the banking pre-qualification conversation at Stage 2 of the application (RMCP build), not after grant: operators who treat banking as a post-licence task typically lose 3–6 months between authorisation and operational launch.
FIC Directive 9 of 2024 implements FATF Recommendation 16 (the Travel Rule) for South African CASPs. It took effect on .[9] CASPs must collect originator and beneficiary information for every crypto transfer (zero de minimis threshold for information collection; full verification required at ZAR 5,000+), screen against sanctions lists, perform counterparty CASP due diligence, and apply documented procedures for unhosted (self-hosted) wallet transfers. Draft Public Compliance Communication 123 () provides implementation guidance.
As of the legal position is in transition. The High Court in Standard Bank v SARB (2025) held crypto is not “capital” under the 1961 Exchange Control Regulations.[8] SARB has been granted leave to appeal to the SCA. Separately, the National Treasury announced in the 25 February 2026 Budget Speech that draft regulations under the Currency and Exchanges Act 1933 will formally bring crypto into the Capital Flow Management Framework.[5] The prudent planning assumption is that cross-border corporate crypto flows will require either SARB approval or fit within the existing offshore allowance once the draft regulations land.
Partly. The FSCA licenses crypto-asset service providers and supervises tokenisation under the FAIS Act, but token issuers are not yet specifically regulated under the Financial Markets Act, a gap that reform (the COFI framework) is expected to close. A token that is a security follows the securities regime. Where the vehicle is a fund, route via fund licensing.
South Africa Company Formation
Register the (Pty) Ltd: CIPC incorporation, the public officer, beneficial-ownership filing, exchange-control mechanics and tax registration coordinated end-to-end.
Banking for South Africa-Licensed FSPs
Primary ZAR plus second-bank and foreign-currency rails through a vetted institution archetype map. Onboarding from 8 weeks for licensed CASPs.
Start Your South Africa Crypto Asset FSP Application
Jagelski & Partners coordinates the South Africa licensing pathway end-to-end, formation, Key Individual sourcing where required, FSCA pre-engagement, RMCP and Travel Rule readiness, banking pre-qualification and post-licensing supervision support. Book a confidential licensing assessment to map your route to authorisation.
Not ready to book? Ask Emma first. She answers now, and if it needs a human she takes your details so the consultation starts ahead.
References
Show all references
- South African Reserve Bank, Financial Stability Review (Second Edition 2025), resbank.co.za, accessed .
- Financial Sector Conduct Authority, General Notice 1350 of 2022 (declaration of crypto assets as a financial product under FAIS Act s.1(h)), Government Gazette 47334, , gov.za, accessed .
- Financial Action Task Force, Outcomes FATF Plenary October 2025 (South Africa removed from FATF grey list), 22–24 October 2025, fatf-gafi.org, accessed .
- Financial Intelligence Centre, Draft Public Compliance Communication 123 (Travel Rule implementation guidance for CASPs), , fic.gov.za, accessed .
- South African Reserve Bank Financial Surveillance Department, Exchange Control Circular No. 3/2026, , resbank.co.za, accessed .
- South African Revenue Service, CARF Regulations (Crypto-Asset Reporting Framework), effective , sars.gov.za, accessed .
- Financial Sector Conduct Authority, Update on the Licensing and Supervision of Crypto Asset Service Providers, , fsca.co.za, accessed .
- High Court of South Africa, Gauteng Division, Standard Bank of South Africa Ltd v South African Reserve Bank & Others (047643/2023) [2025] ZAGPPHC 481, , saflii.org, accessed .
- Financial Intelligence Centre, Directive 9 of 2024 (Travel Rule for CASPs), effective , fic.gov.za, accessed .
- Financial Services Board / FSCA, Board Notice 194 of 2017 – Determination of Fit and Proper Requirements for FSPs, fsca.co.za, accessed .
- Financial Sector Conduct Authority, Communication on expiry of RE exemption for crypto FSPs (30 June 2025), fsca.co.za, accessed .
- DLA Piper, FSCA Update on Licensing and Supervision of Crypto Asset Service Providers, January 2026, dlapiper.com, accessed .
- Financial Sector Conduct Authority, General Notice 1 of 2024 – Determination of Fees, effective 1 October 2024, fsca.co.za, accessed .
- National Treasury / FSCA, Financial Sector and Deposit Insurance Levies Act schedule 2025/26 (Government Notice 6889, 28 November 2025), fsca.co.za, accessed .
- South African Revenue Service, Crypto Assets and Tax (treatment guidance), sars.gov.za, accessed .
- South African Reserve Bank Prudential Authority, Guidance Note G1/2023 (and predecessor G10/2022) on the application of a risk-based approach to crypto-related accounts, resbank.co.za, accessed .
- International Trade Administration (US Department of Commerce), South Africa Financial Services: FATF Grey List Exit and Opportunities, trade.gov, accessed .
- Webber Wentzel, COFI Bill: What Financial Institutions Must Know, August 2025, webberwentzel.com, accessed .
- Werksmans Attorneys, Cracking Down or Catching Up? South Africa’s Approach to Crypto Regulation: Part 4 – Exchange Control Update, werksmans.com, accessed .
- Republic of South Africa, Financial Advisory and Intermediary Services Act 37 of 2002 (consolidated), gov.za, accessed .
- Republic of South Africa, Financial Intelligence Centre Act 38 of 2001 (consolidated, including Item 22 Schedule 1 amendment of 19 December 2022), fic.gov.za, accessed .
- Chainalysis, The 2025 Geography of Cryptocurrency Report – Sub-Saharan Africa, , chainalysis.com, accessed .