Crypto Regulation in South Africa: CASP Licensing, Requirements and What Businesses Need to Know

South Africa has developed one of the more structured cryptocurrency regulatory frameworks in Africa.

Rather than banning crypto assets outright, South Africa has brought certain crypto-related activities into its existing financial-services regulatory framework.

The turning point came in October 2022, when the Financial Sector Conduct Authority (FSCA) formally declared crypto assets to be financial products under the Financial Advisory and Intermediary Services Act, 2002 (FAIS Act). The declaration was published as Government Notice 1350 in Government Gazette 47334.

Since then, South Africa has developed a licensing and supervision framework for Crypto Asset Service Providers (CASPs).

The framework now involves several institutions, including the FSCA, Financial Intelligence Centre (FIC), South African Reserve Bank (SARB), National Treasury and South African Revenue Service (SARS).

For businesses considering entering the South African crypto market, understanding which regulator does what is just as important as understanding the licensing requirement itself.

Regulatory note: This analysis discusses South African regulatory requirements based on official materials available as of August 23, 2026. It is intended for informational purposes and is not legal advice. Businesses should confirm their obligations with the relevant regulator or qualified South African legal counsel before commencing regulated activities.

How South Africa Regulates Cryptocurrency

South Africa does not treat every interaction with a crypto asset as identical. The regulatory framework is focused particularly on activities involving the provision of financial services or services connected to crypto assets.

The FSCA is the country's primary market-conduct regulator for CASPs. The authority states that crypto asset service providers must obtain a licence to conduct business.

This framework sits within the broader FAIS regulatory architecture. In 2022, the FSCA declared crypto assets to be financial products for purposes of the FAIS Act. The government publication confirms that the declaration was made under the Financial Advisory and Intermediary Services Act. That decision effectively moved qualifying crypto-related financial services into a regulated environment.

What Is a Crypto Asset Service Provider?

A Crypto Asset Service Provider, commonly abbreviated as CASP, is a business providing specified services involving crypto assets within the South African regulatory framework. The term matters because simply owning Bitcoin or another crypto asset does not automatically make an individual a CASP.

The regulatory question is generally about what service a business is providing. For example, a company involved in providing crypto-related financial services to customers may fall within the regulatory perimeter, while an individual simply holding crypto for personal purposes is a different situation. Businesses therefore need to assess their actual activities rather than relying solely on the label they use for their product.

When Did Crypto Licensing Begin in South Africa?

South Africa's licensing framework developed after the FSCA's 2022 declaration. The FSCA established a process through which businesses providing qualifying crypto-asset financial services could apply for authorisation.

The licensing process opened in June 2023, and the regulatory framework subsequently developed into an operational CASP licensing regime. The FSCA's own licensing information now states clearly that CASPs must obtain a licence to conduct business. This means South Africa is no longer operating in a situation where crypto businesses can simply assume that the sector is unregulated. For qualifying activities, regulatory authorisation is a central requirement.

How Large Is South Africa's Licensed CASP Sector?

The scale of the licensing programme has grown considerably. According to an FSCA update covering the financial year ending 31 March 2026, the regulator had received 533 CASP licence applications and had 310 licensed CASPs/cr3ad_document/$value) by that date. That is a significant development.

Three years earlier, the country had no licensed CASPs under the newly established framework. By the end of March 2026, the number had reached 310/cr3ad_document/$value).

The FSCA also publishes lists of licensed CASPs/cr3ad_document/$value), allowing businesses and consumers to verify authorised entities rather than relying solely on marketing claims made by crypto platforms. For users, that public register provides an important practical tool. For businesses, it demonstrates that licensing is not merely a theoretical requirement.

Which Regulator Oversees Crypto Assets?

South Africa's crypto regulatory environment involves several institutions.

Financial Sector Conduct Authority

The FSCA is the primary market-conduct regulator for CASPs. Its responsibilities include licensing and supervising financial institutions within its mandate and protecting financial customers. The FSCA describes itself as South Africa's market-conduct regulator for financial institutions, including crypto asset service providers. For businesses seeking CASP authorisation, the FSCA is therefore one of the most important regulatory authorities to understand.

Financial Intelligence Centre

The Financial Intelligence Centre (FIC) plays a different role. CASPs are included as accountable institutions under Schedule 1 of the Financial Intelligence Centre Act (FICA). The FIC has issued guidance specifically addressing CASPs and their obligations within South Africa's anti-money-laundering and counter-terrorist-financing framework.

This means obtaining a CASP licence is not the end of a business's compliance obligations. AML and counter-terrorist-financing controls are also central to operating within the regulated environment.

South African Revenue Service

The South African Revenue Service (SARS) oversees taxation. SARS states that normal income-tax rules apply to crypto assets and that taxpayers must declare taxable crypto-asset gains or losses where applicable.

SARS has also been developing the country's crypto-asset reporting framework. Its current Crypto-Asset Reporting Framework information states that SARS is engaging local CASPs to obtain reportable crypto-asset transaction information for tax-compliance purposes. This means crypto businesses operating in South Africa need to consider tax compliance alongside financial regulation and AML requirements.

South African Reserve Bank

The South African Reserve Bank (SARB) has a different but increasingly important role in the country's crypto-asset ecosystem. While the FSCA is responsible for the market-conduct regulation and licensing of CASPs, SARB's responsibilities become particularly relevant where crypto assets intersect with payments, financial stability, monetary policy, exchange controls and cross-border movement of capital.. SARB itself explains that it does not currently supervise or regulate crypto assets as a general asset class, but it continues to monitor the sector and address specific risks arising from crypto-asset activity.

One of the most important areas is cross-border crypto transactions. Because crypto assets can move across borders without passing through traditional banking channels, they create challenges for South Africa's exchange-control framework and for the monitoring of illicit financial flows. SARB's Financial Surveillance Department (FinSurv) is therefore particularly relevant to businesses moving value between South Africa and foreign markets.

This area is becoming increasingly active in 2026. In August 2026, SARB and National Treasury published a draft Crypto Assets Manual for cross-border activities, designed to work alongside the draft Capital Flow Management Regulations. The proposed framework addresses how cross-border crypto-asset transactions involving authorised CASPs would be treated, including permissions, conditions and reporting obligations to FinSurv.

The draft Manual proposes a specific reporting trigger for certain transactions. For example, a crypto-asset transfer between a South African authorised CASP and an offshore CASP, or between a domestic authorised CASP and a non-custodial wallet where the transaction creates a cross-border inflow or outflow, can fall within the proposed reporting framework.

This is particularly relevant to businesses involved in international crypto payments, remittances, exchanges, custody and stablecoin settlement.

However, there is an important distinction between existing requirements and proposed reforms. As of August 24, 2026, the Crypto Assets Manual and the associated Capital Flow Management Regulations remain draft measures undergoing development and public consultation. SARB and National Treasury have explicitly stated that the draft framework remains subject to refinement following stakeholder comments.

SARB's role also extends to the national payment system. The central bank has been examining how crypto assets and distributed-ledger technology could interact with payment infrastructure. Its Digital Payments Roadmap notes that crypto assets could potentially serve as alternative digital payment methods while highlighting risks relating to financial stability, monetary policy, payment systems and consumers. SARB has also identified stablecoins used for domestic payments as an area for testing through its regulatory sandbox.

There is therefore an important distinction for businesses to understand:

• The FSCA asks: Is this business providing a regulated crypto-asset financial service?
• The FIC asks: Are the business's AML/CFT controls adequate?
• SARS asks: Are the relevant tax and reporting obligations being met?
• SARB asks, among other things: How does this activity affect payments, exchange controls, cross-border capital flows and financial stability?

That division of responsibilities is particularly important for a company operating across borders. A CASP licence from the FSCA should not automatically be interpreted as permission to move capital across South African borders without satisfying applicable exchange-control or reporting requirements.

SARB's own research illustrates why the issue has become increasingly important. Its 2025 Financial Stability Review reported that crypto assets' borderless nature can create channels for circumventing exchange controls and noted substantial outward volumes associated with Bitcoin wallets hosted by South African crypto-asset trading platforms. The report also highlighted the [rapid growth of USD-pegged stablecoins in South Africa, with trading volumes increasing materially between 2022 and 2025](www.resbank.co.za/content/dam/sarb/publications/reviews/finstab-review/2025/second-edition/Second Edition 2025 Financial Stability Review.pdf).

For businesses building cross-border crypto payment or settlement products, this is one of the most important parts of the South African regulatory landscape to monitor.

What Does a CASP Licence Actually Mean?

A CASP licence does not simply mean that a company has been “approved to do crypto.”

The specific activities a business performs matter. A business may provide services involving crypto-asset advice, intermediation or other regulated activities, and its regulatory obligations depend on the services it actually provides.

This is why businesses should determine their regulatory classification before launching the product, rather than building first and attempting to resolve licensing questions afterwards. The FSCA maintains licensing information and provides the formal route for financial-service providers seeking authorisation.

Why the FAIS Act Matters

The Financial Advisory and Intermediary Services Act, 2002 forms a major part of South Africa's crypto regulatory architecture. The 2022 declaration brought crypto assets into the definition of financial products for purposes of the framework.

The government notice establishing that declaration is publicly available, making it possible for businesses and researchers to examine the regulatory foundation directly rather than relying on summaries from third-party websites. This is one of the most important developments to understand when studying South African crypto regulation.

South Africa did not create an entirely separate crypto-only regulatory universe. Instead, it incorporated qualifying crypto-related activities into an existing financial-services framework.

AML and KYC Requirements for Crypto Businesses

Anti-money-laundering compliance is another major part of South Africa's framework. CASPs are included in Schedule 1 of FICA, meaning qualifying businesses become accountable institutions subject to the relevant AML/CFT obligations. These obligations can include areas such as:

- Customer identification - Customer due diligence - Risk assessment - Record keeping - Suspicious transaction reporting - Sanctions screening - Ongoing monitoring - Internal controls The exact obligations depend on the applicable legislation and the nature of the institution.

The FIC has published dedicated guidance and sector-risk material for CASPs, demonstrating that cryptocurrency businesses are firmly within South Africa's financial-crime compliance framework.

South Africa's Crypto Travel Rule

South Africa has also introduced requirements relating to the Travel Rule for crypto transactions. The FIC states that its Directive 9 of 2024 on implementation of the Travel Rule took effect on 30 April 2025. This Travel Rule is designed to increase transparency around certain crypto-asset transfers by requiring relevant information to accompany transactions.

The FIC has subsequently published further guidance for CASPs on implementation. Its 2026 public compliance communication provides practical guidance to CASPs operating as accountable institutions. For businesses operating crypto wallets, transfers or related services, this is an area that requires careful operational attention.

What About Crypto Exchanges?

Crypto exchanges can fall within the regulatory framework when they provide qualifying financial services involving crypto assets. A company operating an exchange in South Africa should therefore assess its activities against the applicable licensing framework rather than assuming that operating through an online platform places it outside South African jurisdiction.

The FSCA's published register of licensed CASPs/cr3ad_document/%24value) is particularly useful here. Consumers can use the regulator's information to check whether a service provider appears on the official list of authorised entities. This is an important distinction between having a website that offers cryptocurrency and being authorised to provide regulated crypto-asset services.

What About Crypto Custody?

Custody is another area that businesses need to examine carefully. A company holding or controlling customer crypto assets can have very different risk and operational characteristics from a business that simply publishes information about cryptocurrency. Custodial arrangements raise questions involving:

• Asset segregation
• Wallet security
• Private-key management
• Customer access
• Operational controls
• Cybersecurity
• Business continuity
• Recovery procedures

The precise regulatory treatment depends on the activities being provided and the applicable framework. Businesses should therefore avoid assuming that “wallet” or “custody” is merely a technical function with no regulatory consequences.

Stablecoins Are Part of the Regulatory Conversation

Stablecoins have become increasingly important in global digital-asset markets, and South Africa's regulatory framework is evolving alongside that development. A stablecoin may be designed to maintain a relatively stable value against an underlying asset such as the U.S. dollar.

But its regulatory treatment can depend on how it is structured and how it is used. For example, a company providing financial services involving stablecoins may need to consider the applicable CASP framework, AML requirements and other financial-sector rules. The regulatory classification should therefore be based on the actual product and service rather than simply calling something a “stablecoin.”

South African authorities have also been examining crypto assets in the context of payment systems and financial-market development. In May 2026, SARB and other authorities published a joint communication concerning [crypto assets used for domestic payment purposes](https://www.resbank.co.za/content/dam/sarb/what-we-do/payments-and-settlements/regulation-oversight-and-supervision/designation-notices/280526 Joint Communication_Crypto assets for domestic payment purposes.pdf). That development illustrates why businesses operating in this sector need to monitor more than one regulator.

Crypto Payments Are Also Becoming a Regulatory Issue

Payments are becoming increasingly important. A business that accepts crypto for goods or services may face different considerations from an investment platform. The underlying question is: What exactly is the business doing with the crypto asset? Is it:

• Accepting crypto directly?
• Converting crypto into rand?
• Holding customer funds?
• Providing a payment service?
• Facilitating transactions?
• Providing custody?
• Providing advice?
• Operating an exchange?

Each model can produce different regulatory considerations. This is why product design and regulatory analysis need to happen together.

What Does South Africa's Framework Mean for Crypto Users?

For consumers, regulation provides an additional layer of protection and transparency. One of the most practical steps a South African crypto user can take is to check whether a provider appears on the FSCA's published CASP list/cr3ad_document/%24value) where the service falls within the licensing regime.

Users should also understand that being licensed does not mean that cryptocurrency itself is risk-free. Crypto assets can remain volatile. Consumers can still lose money. Cybersecurity risks remain. Fraud remains possible.

Regulation should therefore not be confused with a guarantee of investment performance. Instead, regulation establishes rules around the conduct and operation of regulated financial services.

Cryptocurrency Taxation in South Africa

Crypto regulation does not stop with financial-service licensing. Tax is another important consideration. SARS states that normal income-tax rules apply to crypto assets and that taxpayers must declare crypto-related taxable income.

This means a South African crypto user or business should not assume that cryptocurrency exists outside the tax system. SARS also states that taxpayers are responsible for declaring crypto-asset-related taxable income in the relevant tax year and warns that failure to comply can result in interest and penalties.

For businesses, the tax implications can become considerably more complex depending on the nature and frequency of transactions. Professional tax advice may therefore be appropriate.

South Africa Is Moving Toward Greater Crypto-Asset Transparency

SARS has also introduced the Crypto-Asset Reporting Framework (CARF). According to SARS, the framework is designed to strengthen transparency around crypto-asset transactions and involves engagement with local CASPs to obtain reportable information. SARS says CASPs are required to provide details for reportable crypto-asset users under the applicable reporting framework.

This represents an important shift. The crypto industry is becoming increasingly integrated with mainstream financial reporting systems. For users, exchanges and other crypto businesses, record keeping is therefore becoming increasingly important.

South Africa's Regulatory Approach Is Still Evolving

It would be a mistake to describe South African crypto regulation as a finished product. The framework continues to develop. Authorities are examining new risks and new technologies, including stablecoins, payment applications and blockchain-based financial infrastructure.

The FIC, for example, has continued developing practical guidance for CASPs, including material relating to Travel Rule implementation. SARB has also continued [examining crypto assets in the context of payments](https://www.resbank.co.za/content/dam/sarb/what-we-do/payments-and-settlements/regulation-oversight-and-supervision/designation-notices/280526 Joint Communication_Crypto assets for domestic payment purposes.pdf).

This means a business cannot simply obtain a licence and stop monitoring regulatory developments. Ongoing compliance is part of operating in a regulated financial market.

How South Africa Compares With Other African Markets

South Africa's framework stands out because it has moved beyond simply warning consumers about cryptocurrency. The country has created a formal licensing regime and brought qualifying crypto-related financial services into an established financial-services framework. The result is a market where crypto businesses can operate within a clearer regulatory perimeter.

That does not mean the framework is identical to those found elsewhere. Nigeria, Kenya, Ghana and other African markets are developing their own approaches. This fragmentation is important for businesses planning regional expansion. A company that is licensed in South Africa should not automatically assume that its licence authorises it to operate in another African jurisdiction. Each country needs to be assessed separately.

What Businesses Should Do Before Entering the South African Crypto Market

A company considering South Africa should start with its business model. Before launching, it should identify: 1. What services will we provide? 2. Will we provide financial advice or intermediary services? 3. Will we custody customer assets? 4. Will we facilitate transactions? 5. Will we convert crypto into fiat currency? 6. Will we provide payment-related services? 7. Which regulator or regulators may have jurisdiction? 8. What AML/CFT obligations apply? 9. What customer-identification controls are required? 10. What tax and reporting obligations apply? The answers should determine the compliance architecture. Trying to determine licensing requirements after a product has already launched can be considerably more complicated.

Why Regulatory Compliance Can Become a Competitive Advantage

Compliance is sometimes treated as an unavoidable cost. For financial businesses, it can also become a competitive advantage. A customer deciding between two crypto platforms may reasonably prefer the provider that:

- Is properly authorised - Clearly identifies its regulatory status - Maintains strong security controls - Implements KYC procedures - Provides transparent terms - Has accessible customer support - Takes financial crime seriously As cryptocurrency becomes more integrated with mainstream finance, trust can become one of the industry's most valuable assets. South Africa's licensing regime is helping push the market in that direction.

The Bottom Line

South Africa has moved from a largely uncertain crypto regulatory environment toward a formal system in which qualifying crypto-asset services are subject to financial regulation. The FSCA's declaration of crypto assets as financial products in 2022 created the foundation for the current licensing framework.

Since then, the CASP sector has expanded rapidly. By 31 March 2026, the FSCA reported 310 licensed CASPs and 533 applications received/cr3ad_document/%24value), illustrating the scale of the market's transition into a regulated environment.

But licensing is only one part of the picture. Businesses must also consider AML/CFT requirements, customer protection, tax, reporting, payment regulation and ongoing regulatory developments. For consumers, the most important lesson is equally straightforward: Do not assume that every crypto platform operating online is regulated simply because it operates in South Africa. Check the relevant regulator. Understand what the provider is authorised to do. And remember that regulation reduces certain risks without eliminating the underlying risks of cryptocurrency itself.

South Africa's experience demonstrates something broader for the rest of Africa: Crypto regulation does not necessarily require eliminating digital assets. It can instead focus on bringing legitimate crypto businesses into a framework of licensing, supervision, transparency and accountability.