Is crypto legal in South Africa?

This guide describes the South African position, and other markets regulate crypto assets differently, so nothing here is a statement of the law where you are.

People ask whether crypto is legal in South Africa because the answer used to be genuinely unclear. It is not unclear any more. Since October 2022 a crypto asset has been a declared financial product, since December 2022 the businesses that deal in it have been accountable institutions for anti-money-laundering purposes, and since November 2023 operating without a licence has no longer been permitted. What has not changed is that a crypto asset is not money: the Reserve Bank has never recognised it as legal tender.

Legal to hold, regulated to sell

There is no South African law prohibiting an individual from owning, buying, selling or transferring a crypto asset. What is regulated is the business of doing it for other people.

By General Notice 1350 in Government Gazette 47334 of 19 October 2022, the Financial Sector Conduct Authority declared a crypto asset to be a financial product under the Financial Advisory and Intermediary Services Act. The consequence is mechanical: giving advice about, or rendering intermediary services in relation to, a financial product requires an FSCA Financial Services Provider licence. A Crypto Asset Service Provider is licensed as an FSP with crypto-asset permissions.

• Category I covers advice and intermediary services. An OTC desk that buys and sells crypto assets for clients sits here.
• Category II is discretionary management, where a provider trades on your behalf under a mandate. Conexus does not do this and does not hold that authorisation.

The transitional exemption that let existing operators keep trading while their applications were considered closed on 30 November 2023. After that date, an unlicensed person rendering these services is operating unlawfully. Section 7(1) of the FAIS Act prohibits acting as, or offering to act as, a financial services provider without authorisation, and the penalties in section 36 are serious. This is why the licence question is the first thing to ask any desk, and why our compliance page publishes our position rather than asserting a status.

The anti-money-laundering layer

Separately from FAIS, a crypto asset service provider became an accountable institution under Item 22 of Schedule 1 to the Financial Intelligence Centre Act with effect from 19 December 2022. That brings a specific and non-negotiable set of duties:

On top of that, FIC Directive 9 of 2024 has implemented the FATF Travel Rule since 30 April 2025, with no minimum threshold. Originator and beneficiary information accompanies crypto transfers between institutions. Below R5 000 a reduced information set applies and the ordering institution need not verify it. That is verification relief for small amounts, not anonymity, and it should never be sold to you as privacy.

Not legal tender, and not money

The South African Reserve Bank’s Financial Surveillance Department has been consistent: a crypto asset is not legal tender. Nobody is obliged to accept it in settlement of a debt. Joint Communication 1 of 2026, issued on 28 May 2026, restated the point and went further: crypto is not money and not funds, so it falls outside the National Payment System Act, and a person who facilitates a customer paying a merchant in crypto is rendering an intermediary service under FAIS. Property is expressly included, which is why our property guide is written the way it is.

The exchange-control position follows from the same premise. FinSurv will not approve cross-border transfers for the purpose of purchasing crypto assets; buying crypto in South Africa in order to externalise capital contravenes the Exchange Control Regulations and is a criminal offence; and value cannot be repatriated into South Africa through crypto under the allowances. On 3 August 2026 the Reserve Bank and National Treasury published a draft Crypto Assets Manual for cross-border activities, open for comment until 30 September 2026. It is a draft. It is not law, and nobody should plan around it as though it were.

What “regulated” does and does not protect you from

Two of those deserve emphasis. First, a licence is a conduct standard, not a credit rating: it does not tell you a firm is solvent. Second, no regulator in South Africa will make you whole because a crypto asset fell in value. Investing in crypto assets may result in the loss of capital, and the ARB Code of Advertising Practice requires that to be stated, which is the strip at the bottom of this page.

Advertising rules, and how to read a desk’s marketing

Section 14 of the FAIS General Code of Conduct governs how a regulated provider may advertise: factually correct, balanced between risk and benefit, no exaggerated urgency, plain language, a source and a date on any statistic, and testimonials that are genuine, attributed, and accompanied by a statement that the endorsement is not financial advice. Section III clause 17 of the ARB Code, in force since 23 January 2023, requires crypto advertising to state that investing in crypto assets may result in the loss of capital.

This gives you a practical test. A South African crypto site promising returns, running a countdown timer, displaying unverifiable trust badges or quoting a client without a non-advice statement is not merely tacky; it is advertising in a way the codes do not permit. Treat that as information about the firm.

Tax is separate, and it applies

Legality is not the same as invisibility. SARS treats crypto assets as assets of an intangible nature and taxes gains under ordinary principles, on revenue or capital account. South Africa adopted the OECD Crypto-Asset Reporting Framework from 1 March 2026, with the first return due to SARS by 31 May 2027. The supply of a crypto asset is a deemed financial service and is exempt from VAT under section 2(1) of the VAT Act, though a separate service fee can still attract VAT. Our crypto tax guide sets this out properly.

How to check a provider before you deal with one

1. Ask for the registered company name, the CIPC registration number and the FSP number in writing.
2. Search the FSCA register for that FSP number and confirm the entity name matches exactly, that the licence is active and that it carries crypto-asset permissions.
3. Check the FSCA press releases and public warnings for the name.
4. Confirm the company exists at CIPC and that the trading name relates to the registered entity.
5. Confirm you are on the real communication channel before you send anything. The step-by-step version is in avoiding crypto scams.