Burundi Cryptocurrency Regulation: Read the Payment Warning Before the Licence Claim
Examine Burundi’s crypto payment warning, the 2025–2026 AML reforms and the evidence needed before claiming a provider is authorised.
On this page
Burundi’s central bank has warned that crypto is not legal tender and that no entity was authorised to provide remittance or other payment services using it at the date of its notice.
That warning needs its date and scope. It should not be expanded into an unsupported statement about every form of personal possession, or silently treated as a current licence census.
Our Africa cryptocurrency regulation directory compares the legal evidence and remaining questions across countries.
What did the BRB warning say?
The BRB’s archived cryptocurrency notice, posted on 2 September 2019, addresses virtual-currency investment and trading risks.
It states that the currencies described do not have legal-tender status in Burundi. It also says no entity or financial institution was then authorised to offer remittance or other payment services using virtual currency.
The notice warns about volatility, platform failure and difficulties obtaining recourse. Those statements should be attributed to that historical notice.
This review did not independently confirm a later withdrawal or replacement of the notice. Nor did it verify a named crypto provider’s approval.
Why distinguish legal tender from service approval?
Legal tender, permission to run a financial business and a person’s treatment under criminal or tax law are separate questions.
The notice directly informs the payment-service discussion. It does not by itself provide a complete legal opinion on possession, trading, mining or every offshore arrangement.
A proposed business should identify its actual activity and the company performing it. Avoid using a single phrase such as “crypto is legal” or “crypto is banned” to stand in for that analysis.
What changed in the AML framework?
In its 13 February 2026 announcement, the BRB describes an AML/CFT regulation issued on 30 January 2026.
The announcement links the reform to Law No. 1/08 of 27 March 2025, amending the 2008 AML law. It describes stronger governance, customer checks, monitoring and reporting duties, accompanied by five implementing circulars.
Those are material changes to the wider compliance framework. They do not, in that announcement, establish a complete VASP licensing process or a named crypto approval.
Does the 2025 law mention virtual-asset services?
Yes. Article 3(21) of the 2025 AML law, on page 7, defines a virtual-service provider. It describes commercial activities for another person involving virtual assets, including exchange, sale, transfer, holding or management and related services.
That definition matters. It would be misleading to say the newer law contains no reference to virtual-asset services. But a definition does not itself grant a company permission to operate.
The law’s activity scope and the provider’s business model still require analysis. This review did not establish a complete current VASP application route or a named provider approval.
Who falls within the 2026 regulation?
Article 2 of BRB Regulation No. 02/2026 lists credit institutions, the national post office, exchange bureaus, payment institutions, financing or guarantee funds and microfinance institutions. It does not separately list VASPs.
For institutions within that scope, Article 4 requires AML strategies and controls. Article 5 addresses customer identification. Article 11 provides for keeping identification records for at least ten years after the customer relationship ends. Article 14 requires prompt suspicious-transaction reporting to the CNRF.
These provisions should not be copied into a VASP licensing checklist without resolving their application to the actual entity. A payment institution’s AML duties and a crypto provider’s operating permission are separate questions.
What does ESAAMLG’s earlier crypto survey establish?
ESAAMLG’s September 2025 virtual-assets follow-up study used responses collected in January and February 2025 about calendar year 2024. Its Table 1 recorded no specific VA/VASP regulation for Burundi. The report says Burundi did not specify its risk-management approach.
That is a dated survey finding. It should not override the later March 2025 law or be presented as proof of today’s entire legal position.
What is the status of the newer mutual evaluation?
ESAAMLG’s September 2026 meeting outcomes say the Council approved Burundi’s mutual evaluation. The announcement says publication would follow the global quality-and-consistency review.
Approval of a report is not a provider licence. This review did not retrieve the full 2026 mutual evaluation and does not attribute crypto findings to it.
The public country page and targeted source searches did not provide the full text during this review. That retrieval gap is not a claim that the report remains unpublished.
What should a provider resolve?
Start with a written description of the service. Explain the payer, customer agreement, movement of fiat, control of crypto and party responsible for refunds.
Then obtain the rules and company-specific permissions covering each part. A bank account, incorporation certificate or payment integration should not replace those documents.
| Question | Evidence to request |
|---|---|
| Can the proposed activity operate? | Current BRB position and applicable legal provisions |
| Which entity serves the customer? | Customer agreement and company identity |
| What does the permission cover? | Decision, conditions and activity scope |
| Which AML duties apply? | Current law, regulation and implementing directions |
| What happens to customer assets? | Custody, reconciliation and withdrawal terms |
The table is a research checklist. It is not an official application pack.
What capital amount is established?
A universal current Burundian VASP capital requirement was not independently verified. Do not substitute a bank, microfinance or payment-institution threshold without establishing that it applies.
Separate regulatory capital from operating liquidity and customer funds. Request the legal instrument and service category behind any quotation.
Users should also read the withdrawal and complaint terms. Verify the legal entity and permission before relying on a claim that a platform is locally authorised.
For comparison, read Rwanda’s cryptocurrency regulatory framework, Tanzania’s cryptocurrency laws and restrictions and Uganda’s VASP and AML regulation.
Research scope and limits
Research reviewed 6 November 2026. The review examined the archived BRB warning, the 2025 law’s virtual-service definition, the 2026 regulation’s scope and obligations, and ESAAMLG’s dated publications. The full 2026 mutual evaluation, a complete VASP application route, current provider approvals and a later withdrawal or replacement of the 2019 warning were not independently verified. No provider is certified by this article. Obtain current BRB confirmation before relying on an operating-permission claim.
