Regulations

Republic of the Congo Cryptocurrency Regulation: Prior Approval and the Implementation Gap

Understand Congo-Brazzaville’s VASP prior-approval framework, COBAC payment restrictions, GABAC implementation findings and unverified capital requirements.

Shakila Afshar
Shakila Afshar
Compliance & Digital Finance ResearcherPublished 7 min read
Editorial illustration of a Bitcoin paperweight on a document folder overlooking an imagined Congo River city at dawn.

For Congo-Brazzaville, the first legal check is the country name. The Republic of the Congo uses XAF and belongs to CEMAC. DR Congo uses CDF and has a different legal framework.

The Republic of the Congo’s March 2026 GABAC follow-up describes a prior-approval requirement for professional virtual-asset services. It also identifies implementation gaps.

Use our Africa cryptocurrency regulation directory to compare the jurisdictions separately.

Which Congo does this guide cover?

This article concerns the Republic of the Congo, associated with Brazzaville.

Our DR Congo VASP prohibition and BCC rules guide concerns the Democratic Republic of the Congo, associated with Kinshasa. Its statutory analysis should not be imported into the Republic of the Congo.

The similar names also matter when reading exchange documents. A CDF payment row does not establish an XAF route, and a regional financial-market rule is not automatically a DRC rule.

JurisdictionReference cityCurrency used in this comparison
Republic of the CongoBrazzavilleXAF
Democratic Republic of the CongoKinshasaCDF

Keep the full legal entity, country and activity together throughout an authorisation check.

What does GABAC say about prior approval?

The March 2026 Congo follow-up report, criterion 15.4 on printed pages 18–19, cites Article 42 of CEMAC Regulation No. 02/24.

It describes a requirement for prior approval or authorisation before professional VASP activity. It also refers to COSUMAF’s approval and registration powers under the regional financial-market framework.

The report rates the criterion partially met. This is more specific than saying no relevant regulation exists.

However, a requirement to obtain permission does not establish that an exchange has received it. We did not verify an individual provider’s current Congo-Brazzaville approval.

Which implementation gaps matter?

Under criterion 15.5, the report says the competent authority contemplated for the relevant control and enforcement task had not yet been designated by the Congo at the assessment date.

It also identifies a gap concerning sanctions for providers operating without approval. Other passages discuss weaknesses in risk assessment, supervision and preventive arrangements.

There is an important qualification in the same report. Criterion 15.7 describes COSUMAF as the designated authority. Read alongside criterion 15.5, this wording leaves a question about the allocation of the particular control and enforcement functions. A business should seek authoritative clarification of the body responsible for each task.

These are dated findings. They do not prove that no later instrument has been issued.

They also do not create an exemption from the prior-permission rule. A missing implementation measure should not be treated as a licence issued by default.

Before relying on an application route, obtain current authority-designation documents, service-specific instructions and the official decision covering the entity.

How does COSUMAF fit into the analysis?

The COSUMAF intermediaries page describes professional digital-asset service categories, including exchange, custody and operating a trading platform.

A service description helps identify the regulatory question. It does not settle whether a particular token, contract or business model is eligible, approved or outside scope.

The report’s discussion of regional powers and national implementation should therefore be read together. Do not describe COSUMAF and a national authority as interchangeable without checking the task assigned to each.

The 2023 COSUMAF General Regulation supplies specific approval conditions. Article 336 requires adequate resources, own funds proportionate to the service and risks, internal controls, AML arrangements and secure, resilient IT.

Articles 337–338 address managers’ integrity, competence and experience, and the application’s organisational, business-plan and financial information. Article 339 covers the AML programme, risk classification, suspicious operations and asset freezing.

Articles 341–343 describe a written application, an independent expert’s opinion and a decision within 60 working days of receipt of a complete file. A business must establish which assets and services fall within these provisions. The regulation’s digital-asset definition refers to the tokens covered by Article 76 of the 2022 market regulation.

Why does the banking restriction still matter?

The COBAC communiqué dated 6 May 2022 addresses institutions under its supervision. It covers credit institutions, microfinance institutions and payment institutions, and recalls restrictions involving crypto holdings and crypto-linked exchange, conversion and settlement.

Its focus is institutional conduct. The notice should not be rewritten as proof of a universal offence covering every individual’s passive holding.

For an exchange or payments business, however, the banking side remains essential. A platform’s product permission and its payment partner’s legal ability to process a transaction are separate questions.

The IMF’s December 2023 CEMAC report, paragraph 31, discusses tensions between the banking, payments and market frameworks. It is dated context, not a fresh provider approval.

What AML duties does the report identify?

Criterion 15.9 of the GABAC report identifies preventive AML obligations under Article 42 of the CEMAC framework. These include obtaining, retaining and securely transmitting required originator and beneficiary information for virtual-asset transfers.

The report also describes monitoring, access to information for competent authorities, freezing measures and restrictions involving designated persons or entities. A provider should map these duties to its actual transfer and custody model.

The assessment’s implementation gaps concern the operation of the framework. Businesses still need to establish their obligations under the applicable texts and any later implementing instructions.

Is a minimum VASP capital amount verified?

No universal, current fixed minimum for every Republic of the Congo VASP service was independently established in this review.

This must not be translated into a zero-capital rule or a promise that ordinary incorporation is enough.

Obtain the applicable service category, financial-resource conditions and any current instructions. Verify whether the business also performs separately regulated payment or investment services.

Figure or documentWhy it needs care
A stockbroker’s capital requirementNot automatically the requirement for a VASP
A bank or payment-institution minimumRelates to a different regulated activity
Client crypto or fiat balancesNot interchangeable with the firm’s own funds
An application budgetDoes not establish the statutory capital requirement
A foreign group-company permissionDoes not establish approval for the local serving entity

A legal adviser or regulator should be able to identify the exact instrument behind a capital estimate.

What does the October 2026 amendment change?

COSUMAF’s official legal-text index dates its listing of amending Regulation No. 03 to 13 October 2026. The original amendment is dated 7 October 2026.

It replaces Articles 88–91 and adds Articles 91-1 to 91-3 of the 2022 financial-market regulation. Its subject is private placements, qualified investors, registration and transfers of the securities concerned.

Article 4 sets entry into force on the first day of the month following adoption. With the stated adoption date, that gives 1 November 2026. The amendment does not revise the digital-asset approval provisions examined here.

We did not independently establish a later Congo-specific instrument resolving the national designation issue identified by GABAC. That remains a source limit when assessing a proposed operation.

What should users ask about an XAF route?

Identify the serving company, the permission claimed and the actual payment institution. Confirm whether the route is direct or involves a merchant counterparty.

Then check the recipient account, permitted transaction direction, refund rules and complaint process. A shared XAF currency does not produce identical eligibility in every CEMAC country.

Our Congo-Brazzaville exchange and XAF settlement review separates country-specific documentation from broader currency-level claims.

The Cameroon financial-institution restrictions and COSUMAF guide provides a neighbouring comparison. Its national facts do not replace Congo-specific evidence.

Research scope

Research checked 5 November 2026. This article distinguishes GABAC’s March assessment from later legal developments and separates institutional restrictions from individual conduct.

The October 2026 regional amendment and the 2023 COSUMAF approval provisions were reviewed directly. Later Congo-specific implementation measures were not independently established. No named exchange approval, universal capital threshold or lawful tested local payout was established.

Share
View all

Ready to move money globally?

Buy crypto, send money and access modern financial infrastructure with Finlazo.