--- title: "Rwanda Crypto Regulation Monitor | cryptoassets.gi" canonical: https://cryptoassets.gi/jurisdictions/rwanda/ source_html: /jurisdictions/rwanda/index.html description: "Rwanda crypto asset regulation: 9 categories, 46 sourced findings, updated 2026-11-04. Licensing, token classification, stablecoins, tax treatment." generated_at: 2026-11-07T14:19:44Z content_sha256: 0183a3f5f32af4e9f55e484442b76f0f6e41bd9013a39838b571737ae3a4328f generator: "fe-fleet/md-twin@1.0" --- # Rwanda Crypto & Digital Asset Regulation schema crypto-v2.0.0 trajectory: not yet assessed in transition overlaps: [Sentinel (AML/CFT)](https://sentinel.gi/jurisdictions/rwanda/), [World Payments](https://payments.gi/jurisdictions/rwanda/) Last updated 2026-11-04 · 9 categories · 46 sourced findings · 21 sources in the cumulative register Download report (PDF) Expand all Evidence re-verified: 2026-11-04 · Position last changed: 2026-11-04 · Record history & provenance ▾ Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently. Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26 [Open in Co-Pilot ↗](/reports/?type=copilot&j=RWANDA)[Build Report](/reports/?j=RWANDA)[Compare](/compare/?j=RWANDA) Framework posture In transition 8 of 9 modules populated · AI-synthesised · Tier-1/2 verified Lead supervisory authority The New Times (Rwanda) Primary statutory & supervisory perimeter Next milestone (> 2026-10-26) 2026-Q4 CMA implementing regulations for Law N 023/2026 expected Module coverage & confidence 8 / 9 modules assessed 0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed 9 Categories 0 Moved this cycle 0 Key judgments 2 Open gaps 46 Findings 3 Tier-1 sources Confidence mix 9 unpopulated (sums to 9 rendered categories; click to filter) No categories moved this cycle. ## Jurisdiction lead brief ###### Latest update · 4 November 2026 #### Lead Signal Rwanda's regime for virtual-asset business remains anchored to Law N 023/2026, in force since 28 May 2026, which requires any legal entity providing virtual asset services in or from Rwanda to hold a licence from the Capital Market Authority. Natural persons are barred from directly providing such services. The licensing perimeter and the exclusion of natural persons are corroborated across multiple secondary sources, though the pinpoint statutory provision has not yet been confirmed against the Official Gazette text. This is the single enabling statute from which every other development below derives, and its practical operation still depends on implementing regulations the Capital Market Authority has not yet published. The law's scope is bounded by explicit exclusions: algorithmic stablecoins, privacy-focused cryptocurrencies, non-fungible tokens, central bank digital currencies, capital-markets-regulated securities and closed-loop-system assets all sit outside its ambit. At the more restrictive end of the same statute, cryptocurrency mining and mixer or tumbler services are prohibited outright, a finding that currently rests on a single lower-tier source and is held at an uncertain confidence tier pending further corroboration. #### Other Developments Payments restriction confirmed. Virtual assets are not legal tender in Rwanda and cannot be used as a direct means of payment unless the National Bank of Rwanda specifically authorises such use. This restriction is clearly sourced and sits at a probable confidence tier, giving institutions a firm payments-law boundary even where other operative mechanics of the regime remain unpublished. Licensing mechanics still pending. Although the licensing requirement itself is in force, the Capital Market Authority has not yet published the implementing regulations that would operationalise it — procedure, fit-and-proper criteria and capital requirements remain outstanding. This gap is the practical reason the regime as a whole sits in an amber-to-red posture across several modules: the statutory perimeter is drawn, but the mechanics an applicant or a supervised entity would need to act on it are not yet in place. Prohibition and sandbox sit side by side. The statute simultaneously prohibits two specific on-chain activities outright and provides for a joint regulatory sandbox between the Capital Market Authority and the National Bank of Rwanda for innovative virtual-asset business models not otherwise covered. The combination illustrates a regime that is simultaneously restrictive on specific named activities and exploratory toward novel ones, a pattern consistent with an enabling law that was drafted ahead of its own implementing detail. #### Cross-Monitor Connections Rwanda's virtual-asset statute coexists with wider financial-integrity developments in the jurisdiction concerning sanctions and conflict-finance exposure tied to state-security-linked financial entities. No finding connects any Rwandan virtual-asset licensee or activity to those separate sanctions matters, but institutions assessing correspondent or counterparty exposure to Rwandan financial entities should treat the virtual-asset licensing perimeter as part of the same broader financial-crime risk surface being assessed elsewhere, given that both frameworks sit under overlapping supervisory and enforcement architecture within the same jurisdiction. #### Outlook The regime is best read as in transition: the enabling statute is in force and its scope, exclusions and two specific prohibitions are reasonably well established, but the licensing mechanics that would let the Capital Market Authority actually process applications have not yet been published. Implementing regulations covering licensing procedure, fit-and-proper criteria and capital requirements are anticipated within the current quarter, though this expectation carries meaningful uncertainty and should be treated as provisional rather than scheduled. Until those regulations appear, the practical licensing perimeter remains a statutory statement rather than an operating system, and token-classification and on-chain-activity findings will likely continue to rest on secondary-source corroboration rather than primary Gazette-level confirmation. 3 earlier updates not shown here. ###### Standing brief · as of 25 August 2026 Written before the update above. Where they differ, the update is the more recent position. #### Lead Signal Rwanda has moved, within the span of a single legislative act, from having no crypto-specific regulation to operating an in-force, CMA-licensed virtual-asset regime. Law N° 023/2026 Regulating Virtual Asset Business entered into force on 28 May 2026, designating the Capital Market Authority as lead licensing regulator and requiring incorporated legal entities to hold a CMA licence before providing virtual-asset services in Rwanda; individuals are barred outright from operating such businesses. Enforcement is already live and severe: individuals operating an unauthorised virtual-asset business face fines of RWF 30-50 million and up to five years' imprisonment, penalties enforceable notwithstanding the fact that implementing regulations have not yet been published. A CMA/BNR-managed regulatory sandbox offers a supervised testing route ahead of full licensure. The critical caveat running through this development is that the law's own implementing machinery — licensing procedure, capital and liquidity thresholds, reporting obligations, supervisory mechanisms and enforcement procedures — remains undefined pending future CMA/BNR regulations, leaving market entrants with an active prohibition and enforceable penalties but no fully defined pathway to lawful compliance. Confidence on the core licensing requirement was corrected this cycle from an initially asserted Confirmed rating to Probable, after review found the claim rested solely on tier-4 secondary press reporting without independent corroboration — a correction applied consistently across several other claims in this cycle's set that shared the same single-source sourcing pattern. #### Other Developments Token classification under the new law proceeds by exclusion rather than positive definition, and this cycle completed that exclusion list at seven categories: algorithmic stablecoins, privacy-focused (anonymity-enhanced) virtual assets, NFTs, central bank digital currencies, securities and capital-market-regulated instruments, Central-Bank-regulated payment instruments, and closed-loop system assets, alongside a separate exclusion of digital fiat-currency representations. The two categories completing this list were identified via challenger-fold review corroborated by independent tier-3 law-firm reporting, correcting an earlier claim that had captured only five of the seven categories. The stablecoin regime is unusually well specified for a first-generation African virtual-asset statute: issuers must segregate reserve assets from company funds and publish proof of reserves, and stablecoin holders rank ahead of general creditors in an issuer's insolvency. Algorithmic stablecoins sit outside the licensing perimeter entirely, and BNR retains financial-stability and systemic-risk oversight alongside CMA's licensing lead. Tokenisation of real-world assets is permitted under conditions requiring full collateralisation, independent valuation, licensed custody and regular audits, with sovereign assets, public infrastructure, personal data and artworks excluded as eligible underlying assets — the same conditions apply whether viewed through the token-classification or on-chain-activity lens. Cryptocurrency mining, virtual-asset ATMs and mixer or tumbler services are all prohibited absent express CMA approval. Consumer-facing provisions restrict marketing to licensed providers and approved issuers and require licensed custodians for tokenised-asset custody, with proof-of-reserves and audit obligations functioning as investor risk-disclosure safeguards; a held challenger flag suggests the law may already impose further ongoing compliance duties — periodic reporting, suspicious-transaction reporting regardless of amount, audited financial statements — not yet confirmed in available sourcing. Virtual assets are confirmed non-legal-tender and barred from direct payment use, including cross-border payment use, absent specific BNR authorisation, though no dedicated crypto cross-border reporting threshold or travel-rule mechanism has been identified. Tax treatment remains the least developed area: the Rwanda Revenue Authority has issued no crypto-specific guidance since enactment, leaving general tax law as the only default basis for compliance pending clarification. #### Cross-Monitor Connections Rwanda's AML/CFT enforcement architecture is carried outside this monitor's independent analysis: the Financial Intelligence Centre remains the named enforcement body, and a National AML/CFT/CPF Policy 2025-2029 was published on 8 June 2026, but per fleet subscription rules this content is tracked through financial-integrity's aml_ctf module rather than duplicated here — flagged accordingly to financial_integrity. Separately, the stablecoin regime's reserve-segregation and redemption-priority provisions, the non-legal-tender/payment-use restriction on virtual assets, and the unresolved tax treatment of virtual-asset transactions all carry payments-adjacent and digital-services-tax relevance for world-payments' remit, and are flagged there for cross-monitor awareness. #### Outlook The defining tension in Rwanda's new regime is the gap between an enacted, in-force, criminally-enforced licensing prohibition and the absence of the implementing regulations needed to actually comply with it — CMA and BNR are expected to publish licensing procedure, capital and liquidity thresholds, and supervisory mechanics, and their timing will determine how quickly the current compliance gap closes. A held challenger flag concerning possible additional in-force ongoing compliance obligations remains unresolved and requires primary-source verification before it can be treated as confirmed. The Official Gazette/CMA-hosted primary text of the law has been registered as a source but not yet directly parsed, meaning the bulk of this cycle's claims rest on tier-4 secondary press reporting; retrieving and parsing that primary text is the single highest-value next step for upgrading confidence across the licensing, classification, stablecoin, consumer-protection and cross-border modules. Tax guidance from the RRA, and confirmation of treatment for staking, DeFi lending and validator activity, remain open questions for future cycles. Read full brief · 1432 words Key regulatory facts for Rwanda Regulatory Dimension Rwanda Standing Position Jurisdiction Rwanda (RW) Regulatory Scope Crypto & Digital Asset Regulation (9 modules, 46 sourced findings) Crypto Licensing Rwanda enacted Law N° 023/2026 of 25/05/2026 Regulating Virtual Asset Business, published in the Official Gazette on 28 May 2026, which is now in force and designates the Capital Market Authority (CMA) as lead... Token Classification The law does not adopt an EU-MiCA-style ART/EMT taxonomy; instead it defines 'virtual asset' broadly while expressly carving out fiat currencies (including the Rwandan Franc), algorithmic stablecoins, privacy-focused... On-Chain Activity Regime The law directly addresses tokenisation of real-world assets and prohibits mining operations absent CMA approval; it is silent in publicly available secondary reporting on staking, DeFi lending, DEX activity, node... Stablecoin Regime Law N° 023/2026 provides Rwanda's first stablecoin-specific rules: issuers must segregate reserve assets from company funds, publicly disclose proof of reserves, and stablecoin holders rank ahead of general creditors... Primary Instruments Cited The New Times (Rwanda), The New Times (Rwanda), Capital Market Authority (CMA), Law N°023/2026 Regulating Virtual Asset Business, Law N 023/2026 Last Confirmed / Updated 2026-11-04 (21 sources in cumulative register) 9 of 9 categories Signal Moved Judgment Gap Density Comfortable Compact Expand all sources Reset all Selections OR within a group, AND across groups. Press / to search. ### Rwanda: C1 Crypto LicensingAmberEnacted in forceModule confidence: Probable▾ Rwanda enacted Law N° 023/2026 of 25/05/2026 Regulating Virtual Asset Business, published in the Official Gazette on 28 May 2026, which is now in force and designates the Capital Market Authority (CMA) as lead licensing regulator (BNR retains a narrower financial-stability/payment-systems role). Only incorporated legal entities may be licensed to provide virtual asset services; individuals are barred from operating such businesses. Detailed implementing regulations (licensing procedure, fit-and-proper standards, capital and liquidity requirements) had not been published as of the research date, so granular licensing mechanics remain pending even though the enabling statute is in force. Certain activities (mining, VA ATMs, mixer/tumbler services) are prohibited absent express CMA approval, and unauthorised operation already carries enforceable criminal penalties. Open gap — crypto-int-1 Article-level pinpoints for Law N 023/2026's licensing, prohibition and penalty provisions are unconfirmed against the Official Gazette text; no primary-source copy was reached. tax_treatment is a structurally thin module across the crypto estate; genuine absence, not a search failure. Open gap — crypto-int-2 Whether the CMA has published implementing regulations (licensing procedure, fit-and-proper criteria, capital requirements) since the May 2026 enactment could not be established this cycle. DeFi and validator-level on-chain activity in an emerging-market jurisdiction is a known under-index vector. Horizon · 2026-Q4 (± six months) CMA/BNR implementing regulations for licensing procedure, capital requirements Proposed · Tier 3 source Horizon · 2026-Q4 (± six months) CMA/BNR implementing regulations for licensing procedure, capital requirements Proposed · Tier 3 source Horizon · 2027-Q1 (± six months) CMA secondary VASP licensing regulations expected Consultation · Tier 2 source Horizon · 2026-Q4 (± a quarter) CMA implementing regulations for VASP licensing finalised Consultation · Tier 3 source Horizon · 2026-Q4 (± six months) CMA implementing regulations for Law N 023/2026 expected Adopted, not yet in force · Tier 4 source #### Crypto Licensing Rwanda's Capital Market Authority (CMA) became the country's first dedicated virtual-asset licensing regulator when Law N° 023/2026 Regulating Virtual Asset Business entered into force on 28 May 2026. The statute requires incorporated legal entities to hold a CMA licence before providing virtual asset services in Rwanda, and it bars individuals outright from operating such businesses at all — a structural design choice that channels market entry through corporate vehicles from day one. Confidence on this core requirement was corrected during this cycle from an initially asserted Confirmed rating to Probable, after a challenger-fold review found the claim rested solely on a single tier-4 secondary press source without independent tier-1 or tier-2 corroboration; the same confidence-floor correction was applied elsewhere in the licensing module for consistency. Running alongside the licensing mandate, the CMA and the National Bank of Rwanda (BNR) jointly manage a regulatory sandbox that allows firms to trial virtual-asset products under supervision ahead of seeking a full licence — a transitional on-ramp rather than a substitute for eventual licensure. Enforcement teeth are already live: individuals operating an unauthorised virtual-asset business face fines of RWF 30-50 million and up to five years' imprisonment, and these criminal penalties are enforceable notwithstanding the fact that implementing regulations have not yet been published. That gap is the defining feature of this module. The law itself leaves licensing procedures, capital requirements, liquidity ratios, reporting obligations, supervisory mechanisms and enforcement procedures to future CMA/BNR implementing regulations that have not yet appeared. Firms and individuals in Rwanda's virtual-asset space are consequently operating under a regime where the prohibition and its penalties are active, but the pathway to lawful compliance — the licence itself — cannot yet be fully pursued because its procedural mechanics are undefined. A held challenger flag from this cycle also raises the possibility that the enacted law already imposes additional ongoing compliance obligations, such as periodic reporting or suspicious-transaction reporting irrespective of amount, that have not yet been confirmed in available sourcing and require primary-text verification before they can be asserted with confidence. The near-term evidentiary weakness across this module is structural rather than incidental: the Official Gazette/CMA-hosted primary text of Law N° 023/2026 has been registered as a source but was not directly parsed this cycle, so the substantial majority of licensing claims rest on tier-4 secondary press reporting. That constrains how far confidence can responsibly climb until the primary statutory text is retrieved and cross-checked. #### Outlook The near-term trajectory here is defined less by the substance of the prohibition — which is now settled and enforced — than by the absence of the machinery needed to comply with it. Until CMA/BNR implementing regulations specify licensing procedure, capital and liquidity thresholds, and supervisory mechanics, market entrants face a live compliance gap: the requirement to be licensed exists, but the practical route to obtaining that licence does not yet. Watch for publication of those implementing regulations, for resolution of the escalated challenger flag concerning possible additional in-force obligations, and for direct parsing of the primary gazetted text, which would allow sourcing across this module to move beyond tier-4 secondary reporting. Read full sub-brief · 519 words Periodic update · new data 2026-11-04 #### Crypto Licensing Rwanda's licensing regime for virtual-asset business rests on Law N 023/2026, in force since 28 May 2026. The statute requires any legal entity providing virtual asset services in or from Rwanda to hold a licence issued by the Capital Market Authority; natural persons are expressly barred from providing such services directly. This licensing perimeter is corroborated across multiple secondary legal-commentary sources, giving it a probable confidence tier even though the precise statutory article has not been confirmed against the Official Gazette text itself. What the statute does not yet supply is the operative mechanics of licensing. No implementing regulation covering application procedure, fit-and-proper criteria for applicants, or capital requirements has been identified as published by the Capital Market Authority since the law's enactment in May 2026. This is the central open question for the module: the legal obligation to be licensed exists and is in force, but the pathway to obtaining that licence has not yet been made operational in any sourced material. An entity seeking to provide virtual asset services in Rwanda today faces a licensing requirement without a confirmed, published procedure for satisfying it. This gap is consistent with a broader pattern of an enabling statute preceding its implementing detail, and it is the primary driver of the amber posture on this module. The regime is neither unregulated nor fully operative; it sits in the space between enactment and implementation, where the legal obligation binds but the administrative mechanism to comply with it is still being built. #### Outlook Implementing regulations from the Capital Market Authority are anticipated within the current quarter, covering licensing procedure, fit-and-proper criteria and capital requirements, though this expectation itself carries considerable uncertainty and should be read as provisional rather than confirmed. Until such regulations are published, the licensing module will likely remain in its current in-force-but-not-yet-operational posture, and any entity attempting to secure a licence under the statute faces continued procedural uncertainty regardless of its underlying compliance intent. 4 earlier distinct update(s) Periodic update · new data 2026-11-03 #### Crypto Licensing Rwanda's Law N 023/2026, in force since its publication on 25 May 2026, establishes the jurisdiction's first dedicated licensing perimeter for virtual asset business. Any legal entity providing virtual asset services in or from Rwanda must obtain a licence from the Capital Market Authority, and the statute expressly prohibits natural persons from conducting or purporting to conduct virtual asset business, a bar that goes further than a mere registration requirement by removing individuals from the regulated perimeter as a category rather than subjecting them to a lighter-touch regime. Separate reporting on the same law confirms that only incorporated legal entities will be permitted to provide virtual asset services, reinforcing that the regime was designed around institutional providers from inception. The practical significance of this architecture is that Rwanda has moved directly to an incorporated-entity-only licensing model without an intermediate phase for individual or informal operators, which is a different sequencing than jurisdictions that first tolerate informal activity before formalising a licensing perimeter. This is an architectural choice worth noting on its own terms: it signals an intent to channel virtual asset business through entities that can be held to corporate governance, capital and fit-and-proper standards from the outset, even though the specific standards themselves have not yet been published through implementing regulations. That absence of implementing detail is the central operational gap at this stage. No Capital Market Authority or National Bank of Rwanda source setting out licensing procedure, fit-and-proper criteria or capital requirements has been identified. The statute is in force in the sense that its prohibitions and requirements are legally binding now, but the mechanics by which an entity actually obtains a licence remain unpublished so far as the available primary sources show. Firms considering entry into the Rwandan market should treat the licensing obligation as current and binding while recognising that the application pathway itself is not yet operable on the evidence reviewed. #### Outlook The document to watch for is a Capital Market Authority implementing regulation or guidance note setting out licence application procedure and criteria. Until that is published and confirmed through a primary regulatory source, the Rwandan licensing regime remains in the position of a statute that defines who must be licensed without yet defining how licensing is obtained, a gap that market entrants and advisers should treat as an open operational question rather than an oversight likely to resolve on any fixed timetable. Periodic update · new data 2026-10-25 #### Crypto Licensing Rwanda's Law No. 023/2026 Regulating Virtual Asset Business, gazetted and in force from 28 May 2026, requires that virtual-asset service providers and issuers be licensed or approved by the Capital Market Authority, and restricts eligibility for such a licence to incorporated legal entities. This establishes the CMA as the lead regulator for the sector and creates, in principle, a licensing gateway for exchanges, custodians and other virtual-asset businesses operating in or targeting Rwanda. The gateway is, however, enacted but not yet operational. The CMA has stated it is currently drafting secondary and implementing regulations covering licensing procedure, fit-and-proper criteria and capital requirements, and as of the most recent reporting these have not been published. No primary copy of the gazetted law's text was retrieved, so the pinpoint article numbers governing the licensing gateway, custody duties and enforcement penalties remain unconfirmed against the enacted text, though the substance of the requirement — mandatory licensing, entity-incorporation eligibility, and CMA supervisory authority — is corroborated across multiple secondary sources. The practical consequence for a prospective entrant is that the legal basis for licensing exists but the procedural mechanism does not. An applicant cannot yet complete a licensing process because the rules governing that process have not been issued. This places Rwanda in a transitional posture: the statute signals regulatory intent and establishes the supervisory architecture, but market access for new virtual-asset businesses is effectively paused pending the CMA's secondary rulemaking. Separately, the law prohibits specific categories of activity — cryptocurrency mining, virtual-asset ATMs, and mixer or tumbler services — unless expressly approved by the CMA. This default-prohibition approach to higher-risk activity types operates independently of the general licensing gateway and applies regardless of whether an operator holds or is seeking a virtual-asset business licence. #### Outlook The CMA's secondary regulations are expected around the first quarter of 2027. Once issued, these will determine actual market entry conditions for virtual-asset businesses in Rwanda; until then, the enabling statute is in force but the licensing gateway remains procedurally inoperative for new licensees, and the enforcement penalty regime underlying the law cannot be assessed with confidence absent the primary gazetted text. Periodic update · new data 2026-10-11 #### Crypto Licensing Rwanda's Law No. 023/2026 Regulating Virtual Asset Business, gazetted and in force from 28 May 2026, requires that virtual-asset service providers and issuers be licensed or approved by the Capital Market Authority, and restricts eligibility for such a licence to incorporated legal entities. This establishes the CMA as the lead regulator for the sector and creates, in principle, a licensing gateway for exchanges, custodians and other virtual-asset businesses operating in or targeting Rwanda. The gateway is, however, enacted but not yet operational. The CMA has stated it is currently drafting secondary and implementing regulations covering licensing procedure, fit-and-proper criteria and capital requirements, and as of the most recent reporting these have not been published. No primary copy of the gazetted law's text was retrieved this cycle, so the pinpoint article numbers governing the licensing gateway, custody duties and enforcement penalties remain unconfirmed against the enacted text, though the substance of the requirement — mandatory licensing, entity-incorporation eligibility, and CMA supervisory authority — is corroborated across multiple secondary sources. The practical consequence for a prospective entrant is that the legal basis for licensing exists but the procedural mechanism does not. An applicant cannot yet complete a licensing process because the rules governing that process have not been issued. This places Rwanda in a transitional posture: the statute signals regulatory intent and establishes the supervisory architecture, but market access for new virtual-asset businesses is effectively paused pending the CMA's secondary rulemaking. Separately, the law prohibits specific categories of activity — cryptocurrency mining, virtual-asset ATMs, and mixer or tumbler services — unless expressly approved by the CMA. This default-prohibition approach to higher-risk activity types operates independently of the general licensing gateway and applies regardless of whether an operator holds or is seeking a virtual-asset business licence. #### Outlook The CMA's secondary regulations are expected around the first quarter of 2027. Once issued, these will determine actual market entry conditions for virtual-asset businesses in Rwanda; until then, the enabling statute is in force but the licensing gateway remains procedurally inoperative for new licensees, and the enforcement penalty regime underlying the law cannot be assessed with confidence absent the primary gazetted text. Periodic update · new data 2026-09-28 #### Crypto Licensing Rwanda's Capital Market Authority (CMA) is designated as the licensing authority for virtual asset business under Law N° 023/2026, Regulating Virtual Asset Business, gazetted 25 May 2026. The statute requires any company wishing to provide virtual asset services in Rwanda to obtain a CMA licence, and restricts eligibility to incorporated legal entities: individuals are barred from operating a virtual-asset business, though the statute does not prohibit individuals from personally holding or trading virtual assets in a private capacity. This entity-only, single-regulator licensing gate is a materially cautious architecture by design, but it is not yet a fully operable one. Implementing regulations that would define the licensing procedure itself, fit-and-proper standards for applicants, and capital requirements have not yet been published, and are expected in the fourth quarter of 2026. Until they appear, an entity wishing to be licensed under Law N° 023/2026 cannot complete an actual application, notwithstanding that the enabling statute is formally in force. This is the central fact of Rwanda's crypto-licensing posture this cycle: an enacted, in-force legal gate paired with an as-yet-unusable procedural pathway. #### Outlook The near-term development to watch is the publication of CMA and BNR implementing regulations, which will convert the current enabling-but-inoperable licensing requirement into an actionable process. Until then, Rwanda's crypto-licensing regime should be read as in-transition rather than fully regulated. Sources and findings (9) - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect) — Only incorporated legal entities may provide virtual asset services in Rwanda and must be licensed by the Capital Market Authority (CMA), which is designated lead regulator alongside a narrower BNR role on financial stability and payment systems. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect) — Licensing procedures, capital requirements, liquidity ratios, reporting obligations, supervisory mechanisms and enforcement procedures under Law N° 023/2026 remain undefined pending future CMA/BNR implementing regulations, so exact licence-holder requirements are not yet determinable. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect) — The law establishes a regulatory sandbox jointly managed by the CMA and the National Bank of Rwanda, allowing firms to test virtual asset products under supervision before applying for a full licence. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect/amp) — Cryptocurrency mining operations, virtual asset ATMs, and mixer or tumbler services used to obscure transaction flows are prohibited under the law unless expressly approved by the CMA. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect) — Individuals operating a virtual-asset business without authorisation face fines ranging from Rwf30 million to Rwf50 million and up to five years' imprisonment; these criminal penalties are already enforceable notwithstanding pending implementing regulations. - T3[Capital Market Authority (CMA)](https://www.ensafrica.com/news/detail/11972/rwanda-gazettes-first-law-regulating-virtual-) — Any legal entity providing virtual asset services in or from Rwanda, under Law N 023/2026; natural persons barred. - T3[Law N°023/2026 Regulating Virtual Asset Business](https://blog.norebase.com/crypto-license-in-rwanda/) — Unlicensed operation of a virtual-asset business carries criminal and administrative penalties; secondary sources diverge: RWF 70-100m (post-enactment) vs RWF 50-100m plus 3-5 years imprisonment for individuals (pre-enactment draft). - T3[Law N 023/2026](https://rw.andersen.com/dist/virtual-assets.html) — in_force - T3[Capital Market Authority (CMA)](https://blog.norebase.com/crypto-license-in-rwanda/) — Implementing regulations on licensing procedure, fit-and-proper standards and capital requirements had not been published as of this cycle; secondary commentary projects Q3-Q4 2026 finalisation. ### Rwanda: C2 Token ClassificationAmberEnacted in forceModule confidence: Probable▾ The law does not adopt an EU-MiCA-style ART/EMT taxonomy; instead it defines 'virtual asset' broadly while expressly carving out fiat currencies (including the Rwandan Franc), algorithmic stablecoins, privacy-focused cryptocurrencies, NFTs, central bank digital currencies and certain securities-regulated instruments from the licensing regime. Reserve-backed stablecoins and tokenised real-world assets are addressed with specific conditions (collateralisation, custody, audit) rather than being left as a residual 'utility token' catch-all. Periodic update · new data 2026-11-04 #### Token Classification Law N 023/2026 draws its own scope boundaries by express statutory exclusion rather than by a positive classification test. Algorithmic stablecoins, privacy-focused cryptocurrencies, non-fungible tokens, central bank digital currencies, capital-markets-regulated securities and closed-loop-system assets are all carved out of the statute's ambit. This exclusion list is sourced to the enabling law itself, though the precise pinpoint provision remains unconfirmed against primary Gazette text, which keeps the finding at a probable rather than confirmed tier. The practical effect of a scope defined by exclusion is that anything not expressly carved out falls, by implication, within the statute's reach and therefore within the Capital Market Authority's licensing perimeter. This is a meaningfully different drafting approach from a jurisdiction that defines virtual assets positively and then exempts specific categories, and it means the boundary cases — tokenised real-world assets, for instance, or hybrid instruments that sit near the securities exclusion — do not yet have a confirmed classification test available in the sourced material. No implementing regulation addressing how borderline tokens should be classified against these exclusions has been identified. The exclusions themselves are reasonably clear as drafted, which is why this module sits at amber rather than red: the boundary of what is excluded is known, even though the test for classifying assets that fall inside the remaining scope is not yet published. #### Outlook As the Capital Market Authority's implementing regulations develop, classification tests for assets near the statutory exclusion boundaries — particularly tokenised real-world assets and hybrid stablecoin-adjacent instruments tested through the joint regulatory sandbox — are the area most likely to generate interpretive detail. Until such guidance appears, market participants operating near these boundaries face continued classification uncertainty. Periodic update · new data 2026-10-25 #### Token Classification Rwanda's virtual-asset law approaches token classification principally through exclusion rather than through a positively defined taxonomy. Two carve-outs are evidenced. First, non-fungible tokens are expressly excluded from the statute's definition of "virtual asset," meaning NFT activity in Rwanda sits outside the scope of the CMA's virtual-asset licensing and supervisory regime entirely, at least as that regime is currently constituted. Second, within the category of fiat-referenced tokens, a distinction is drawn between stablecoins that meet full-reserve, CMA-approved, custodian-held criteria — which are treated as regulated stablecoins — and algorithmic stablecoins, which are excluded from that regulated-stablecoin treatment. This carve-out structure has a practical implication for any entity seeking to classify a specific token under Rwandan law: the relevant question is not which affirmative category the token fits, but which exclusion applies to it, if any. A token that does not fall within an express carve-out presumably falls within the general virtual-asset definition and its associated licensing and compliance obligations, though the general definition itself was not independently retrieved from the primary gazetted text. The classification approach corresponds to the broader structure of Law No. 023/2026, under which the CMA is positioned as the body responsible for determining how specific instruments are treated, including through its approval function over stablecoin issuance and its supervisory role over tokenisation of real-world assets. No classification detail specific to security-type tokens, utility tokens, or governance tokens was located. #### Outlook The pending CMA secondary regulations, expected around the first quarter of 2027, are the most likely vehicle for further elaboration of the classification taxonomy, including any additional carve-outs or sub-categories within the virtual-asset definition. Until then, classification questions for novel token types in Rwanda default to the exclusion-based framework set out in the primary law. Periodic update · new data 2026-10-11 #### Token Classification Rwanda's virtual-asset law approaches token classification principally through exclusion rather than through a positively defined taxonomy. Two carve-outs are evidenced this cycle. First, non-fungible tokens are expressly excluded from the statute's definition of "virtual asset," meaning NFT activity in Rwanda sits outside the scope of the CMA's virtual-asset licensing and supervisory regime entirely, at least as that regime is currently constituted. Second, within the category of fiat-referenced tokens, a distinction is drawn between stablecoins that meet full-reserve, CMA-approved, custodian-held criteria — which are treated as regulated stablecoins — and algorithmic stablecoins, which are excluded from that regulated-stablecoin treatment. This carve-out structure has a practical implication for any entity seeking to classify a specific token under Rwandan law: the relevant question is not which affirmative category the token fits, but which exclusion applies to it, if any. A token that does not fall within an express carve-out presumably falls within the general virtual-asset definition and its associated licensing and compliance obligations, though the general definition itself was not independently retrieved from the primary gazetted text this cycle. The classification approach corresponds to the broader structure of Law No. 023/2026, under which the CMA is positioned as the body responsible for determining how specific instruments are treated, including through its approval function over stablecoin issuance and its supervisory role over tokenisation of real-world assets. No classification detail specific to security-type tokens, utility tokens, or governance tokens was located this cycle. #### Outlook The pending CMA secondary regulations, expected around the first quarter of 2027, are the most likely vehicle for further elaboration of the classification taxonomy, including any additional carve-outs or sub-categories within the virtual-asset definition. Until then, classification questions for novel token types in Rwanda default to the exclusion-based framework set out in the primary law. Periodic update · new data 2026-09-28 #### Token Classification Law N° 023/2026 defines its own scope substantially through exclusion. Algorithmic stablecoins, privacy-focused cryptocurrencies, non-fungible tokens, central bank digital currencies, securities already regulated under capital markets legislation, and virtual assets used within closed-loop systems are all explicitly carved out of the statute's coverage. What remains within scope, by implication, is the broader category of virtual assets not otherwise excluded, including the stablecoins that do not qualify for the algorithmic exclusion. For those in-scope stablecoins, the statute additionally requires that issuers obtain CMA approval and maintain full reserve backing at all times, independently verified, audited, and held by licensed custodians, a requirement that sits at the boundary between token classification and the dedicated stablecoin-regime module. Beyond these carve-outs and the stablecoin-specific reserve rule, no further granular sub-classification guidance has yet been published. #### Outlook Watch for CMA guidance that further sub-classifies the in-scope category beyond the current exclusion-based definition, particularly as the first licence applications, once implementing regulations are published, begin to test the boundaries of the statute's scope. C2 · Token Classification — Full Module Record 0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login) [View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C3 On-Chain Activity RegimeAmberEnacted in forceModule confidence: Probable▾ The law directly addresses tokenisation of real-world assets and prohibits mining operations absent CMA approval; it is silent in publicly available secondary reporting on staking, DeFi lending, DEX activity, node operation, or validator services, which are presumed to fall under the general licensing perimeter but lack activity-specific rules pending implementing regulations. Periodic update · new data 2026-11-04 #### On-Chain Activity Regime Law N 023/2026 prohibits cryptocurrency mining and mixer or tumbler services outright. This finding currently rests on a single lower-tier secondary source, and the precise statutory provision has not been confirmed against primary text, which holds the finding at an uncertain confidence tier rather than a higher one. The prohibition nonetheless represents the clearest on-chain restriction identified in Rwanda's virtual-asset framework to date: two specific categories of on-chain activity are named and barred, rather than left to a general licensing or registration requirement. Beyond these two named prohibitions, no rule has been identified governing other categories of on-chain activity, such as staking, decentralised-exchange operation, or self-custody wallet provision. This leaves a substantial portion of the on-chain activity landscape without a sourced rule in either direction, which is the reason this module carries a red rather than amber posture: the regime is clear and restrictive on the narrow slice it addresses, but silent on the much larger remainder. The prohibition on mixer and tumbler services, if it is confirmed by further sourcing, would align Rwanda with a broader regional and international trend of specifically targeting obfuscation-focused services as a category distinct from on-chain activity generally, reflecting an anti-money-laundering rationale for the restriction rather than a general hostility to on-chain activity as such. #### Outlook Further corroboration of the mining and mixer prohibitions against primary statutory text would raise the confidence tier on this finding. Whether the Capital Market Authority's anticipated implementing regulations will extend coverage to the currently unaddressed categories of on-chain activity, such as staking or decentralised-exchange operation, is not yet established in the sourced material and remains an open question for the module. Periodic update · new data 2026-10-25 #### On-Chain Activity Regime Rwanda's treatment of on-chain activity under Law No. 023/2026 is, at this stage, narrowly addressed rather than comprehensive. Two specific activities are explicitly covered. Cryptocurrency mining operations are prohibited unless expressly approved by the Capital Market Authority, placing mining under a default-prohibition regime rather than a permissive or unaddressed one. Separately, the CMA approves and supervises tokenisation of real-world assets as a defined regulatory function, indicating that real-world-asset tokenisation is treated as a distinct, CMA-governed activity category rather than being left to fall under general virtual-asset licensing alone. Beyond these two activities, the on-chain activity regime is substantially undeveloped in the available sourcing. No provision addressing staking, decentralised-finance lending, decentralised exchanges, or validator-node operation under Rwandan law was located, despite active search. This is treated as a genuine research gap rather than a confirmed absence of regulation: it reflects a structurally thin area of sourcing for an emerging-market jurisdiction's on-chain activity framework, not necessarily an absence of any rule governing these activities under the broader statute or forthcoming secondary regulation. The combination of an explicit mining prohibition-absent-approval and an explicit tokenisation-supervision function, against a backdrop of unaddressed DeFi and staking treatment, suggests the law was drafted with particular attention to two specific activity types rather than as an exhaustive on-chain activity code. Where it is silent, the general virtual-asset licensing and consumer-protection provisions of the statute would presumably apply by default, though this inference is not independently confirmed against primary text. #### Outlook Whether the CMA's forthcoming secondary regulations will extend specific treatment to staking, DeFi and validator activity is not yet known. Market participants engaging in on-chain activity beyond mining and real-world-asset tokenisation should treat the absence of specific rules as an open question rather than as settled permissiveness, pending further primary-source retrieval or the CMA's secondary rulemaking. Periodic update · new data 2026-10-11 #### On-Chain Activity Regime Rwanda's treatment of on-chain activity under Law No. 023/2026 is, at this stage, narrowly addressed rather than comprehensive. Two specific activities are explicitly covered. Cryptocurrency mining operations are prohibited unless expressly approved by the Capital Market Authority, placing mining under a default-prohibition regime rather than a permissive or unaddressed one. Separately, the CMA approves and supervises tokenisation of real-world assets as a defined regulatory function, indicating that real-world-asset tokenisation is treated as a distinct, CMA-governed activity category rather than being left to fall under general virtual-asset licensing alone. Beyond these two activities, the on-chain activity regime is substantially undeveloped in the available sourcing. No provision addressing staking, decentralised-finance lending, decentralised exchanges, or validator-node operation under Rwandan law was located this cycle, despite active search. This is treated as a genuine research gap rather than a confirmed absence of regulation: it reflects a structurally thin area of sourcing for an emerging-market jurisdiction's on-chain activity framework, not necessarily an absence of any rule governing these activities under the broader statute or forthcoming secondary regulation. The combination of an explicit mining prohibition-absent-approval and an explicit tokenisation-supervision function, against a backdrop of unaddressed DeFi and staking treatment, suggests the law was drafted with particular attention to two specific activity types rather than as an exhaustive on-chain activity code. Where it is silent, the general virtual-asset licensing and consumer-protection provisions of the statute would presumably apply by default, though this inference is not independently confirmed against primary text. #### Outlook Whether the CMA's forthcoming secondary regulations will extend specific treatment to staking, DeFi and validator activity is not yet known. Market participants engaging in on-chain activity beyond mining and real-world-asset tokenisation should treat the absence of specific rules as an open question rather than as settled permissiveness, pending further primary-source retrieval or the CMA's secondary rulemaking. Periodic update · new data 2026-09-28 #### On-Chain Activity Regime Law N° 023/2026 addresses on-chain activity narrowly. Cryptocurrency mining operations, virtual-asset automated teller machines, and mixer or tumbler services are each prohibited unless expressly approved by the Capital Market Authority. This is the full extent of the statute's explicit treatment of on-chain activity categories: staking, decentralised finance protocols, decentralised exchange operation, and node operation are none of them addressed in the sourcing reviewed this cycle, leaving their regulatory status genuinely undefined rather than merely under-detailed. This is a materially incomplete regime by comparison with jurisdictions that have addressed a fuller range of on-chain activity categories, and it is flagged here as thin signal: the sourcing available supports only the mining-and-obfuscation-services prohibition, not a broader on-chain activity framework. #### Outlook Whether implementing regulations expected in the fourth quarter of 2026 extend beyond licensing mechanics to address staking, DeFi, or DEX activity is the key open question for this module; nothing in the sourcing reviewed this cycle indicates that they will. C3 · On-Chain Activity — Full Module Record 0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C4 Stablecoin RegimeAmberEnacted in forceModule confidence: Probable▾ Law N° 023/2026 provides Rwanda's first stablecoin-specific rules: issuers must segregate reserve assets from company funds, publicly disclose proof of reserves, and stablecoin holders rank ahead of general creditors on issuer insolvency. Algorithmic stablecoins are excluded from the licensing perimeter entirely. Systemic-risk oversight of stablecoin activity sits with BNR alongside CMA's licensing lead. Detailed prudential thresholds (minimum reserve ratios, redemption timelines) are not yet published. Periodic update · new data 2026-10-25 #### Stablecoin Regime Rwanda's stablecoin regime under Law No. 023/2026 is built on an authorisation-plus-reserve model. Stablecoin issuers must obtain Capital Market Authority approval before issuing a fiat-referenced token, and reserves backing any issued stablecoin must be maintained in full at all times and be independently verified and audited by a licensed custodian. This combination — prior approval and continuous full-reserve verification — places Rwanda's stablecoin framework in line with reserve-backing principles seen in more developed regimes, albeit set out at the level of primary law rather than through a detailed prudential rulebook. The classification carve-out that excludes algorithmic stablecoins from this regulated-stablecoin treatment means the full-reserve and custodian-audit requirements apply specifically to fiat-referenced, full-reserve instruments, not to algorithmic designs; the regulatory status of an algorithmic stablecoin issued into or targeting the Rwandan market is accordingly less clear and was not resolved by any source reviewed. A joint regulatory sandbox, managed by the CMA together with the National Bank of Rwanda, permits controlled testing of novel virtual-asset products, including presumably novel stablecoin designs, with a stated pathway from successful sandbox completion to a full licence. This sandbox mechanism offers a route for market entry that does not require immediate compliance with the full licensing framework, which is otherwise not yet operational pending secondary regulation. The minimum capital figure applicable to stablecoin issuers has not been located in any source and is understood to be a matter left to the CMA's pending secondary regulation. #### Outlook The detailed prudential rulebook for stablecoin issuance — including minimum capital, operational-risk requirements and the mechanics of custodian audit — remains pending CMA secondary regulation, expected around the first quarter of 2027. Until then, the full-reserve and prior-approval principles set in primary law are the operative standard, with the joint CMA/BNR sandbox offering the only confirmed near-term route to market testing. Periodic update · new data 2026-10-11 #### Stablecoin Regime Rwanda's stablecoin regime under Law No. 023/2026 is built on an authorisation-plus-reserve model. Stablecoin issuers must obtain Capital Market Authority approval before issuing a fiat-referenced token, and reserves backing any issued stablecoin must be maintained in full at all times and be independently verified and audited by a licensed custodian. This combination — prior approval and continuous full-reserve verification — places Rwanda's stablecoin framework in line with reserve-backing principles seen in more developed regimes, albeit set out at the level of primary law rather than through a detailed prudential rulebook. The classification carve-out that excludes algorithmic stablecoins from this regulated-stablecoin treatment means the full-reserve and custodian-audit requirements apply specifically to fiat-referenced, full-reserve instruments, not to algorithmic designs; the regulatory status of an algorithmic stablecoin issued into or targeting the Rwandan market is accordingly less clear and was not resolved by any source reviewed this cycle. A joint regulatory sandbox, managed by the CMA together with the National Bank of Rwanda, permits controlled testing of novel virtual-asset products, including presumably novel stablecoin designs, with a stated pathway from successful sandbox completion to a full licence. This sandbox mechanism offers a route for market entry that does not require immediate compliance with the full licensing framework, which is otherwise not yet operational pending secondary regulation. The minimum capital figure applicable to stablecoin issuers has not been located in any source this cycle and is understood to be a matter left to the CMA's pending secondary regulation. #### Outlook The detailed prudential rulebook for stablecoin issuance — including minimum capital, operational-risk requirements and the mechanics of custodian audit — remains pending CMA secondary regulation, expected around the first quarter of 2027. Until then, the full-reserve and prior-approval principles set in primary law are the operative standard, with the joint CMA/BNR sandbox offering the only confirmed near-term route to market testing. Periodic update · new data 2026-09-28 #### Stablecoin Regime Stablecoin issuance in Rwanda requires approval from the Capital Market Authority, with coordination from the National Bank of Rwanda given the payment-system and financial-stability implications of stablecoin activity. Issuers must maintain full reserve backing at all times, independently verified and audited, and held by licensed custodians. This dual-regulator coordination model and strict, always-on reserve-backing standard are explicit and already in force under Law N° 023/2026. What remains undetailed in the sourcing reviewed this cycle is the redemption-right mechanics available to stablecoin holders, and whether any systemic-designation framework exists for stablecoin issuers that reach sufficient scale to raise financial-stability concerns of their own. These are meaningful operational gaps in an otherwise clearly specified reserve regime, and they sit at the intersection of stablecoin regulation and payment-system oversight that the CMA-BNR coordination requirement is designed to manage. #### Outlook Watch for whether implementing regulations, or separate BNR guidance, address redemption rights and systemic-designation criteria, particularly once the first stablecoin issuer approaches CMA for issuance approval. C4 · Stablecoins & EMTs — Full Module Record 0 sub-modules · 180 words · 10 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C5 Consumer ProtectionAmberEnacted in forceModule confidence: Probable▾ The law introduces consumer-facing safeguards: marketing of virtual asset services is restricted to licensed providers or approved issuers, tokenised-asset custody must sit with licensed custodians, and reserve/audit disclosure requirements function as a risk-disclosure mechanism for stablecoin products. Dedicated complaint-handling and suitability/appropriateness rules for retail investors were not identified in available secondary sources and likely await implementing regulations. #### Consumer Protection Consumer-facing obligations under Law N° 023/2026 concentrate in three areas identified this cycle. Marketing of virtual-asset services is restricted to licensed providers or approved issuers, closing off promotional activity to unauthorised market participants. Custody of tokenised real-world assets is restricted to licensed custodians as a condition of the tokenisation regime described in the token-classification and on-chain-activity modules. And stablecoin issuers must satisfy public proof-of-reserves and audit requirements that function as investor risk-disclosure safeguards, giving retail holders a documented basis for assessing issuer solvency. A held challenger flag from this cycle is material to how this module should be read going forward: independent tier-3 law-firm reporting suggests the enacted law may already impose additional ongoing compliance obligations — periodic reporting, suspicious-transaction reporting irrespective of transaction amount, audited financial statements, and event-based notification duties — that have not yet been confirmed in this cycle's sourcing. That flag remains escalated and unresolved pending primary-source verification, and dedicated complaint-handling and suitability or appropriateness rules for retail investors also remain unconfirmed in available public sources. #### Outlook The confirmed elements of consumer protection — marketing restriction, custody restriction, and reserve-disclosure-as-safeguard — are enacted and in force, but they describe a narrower slice of consumer protection than a mature regime typically carries. Whether Rwanda's framework already extends to complaint-handling, suitability assessment, and the broader ongoing-compliance obligations flagged by the held challenger review is the open question for this module, and its resolution depends on retrieval of the primary statutory text rather than further secondary reporting. Read full sub-brief · 250 words Periodic update · new data 2026-10-25 #### Consumer Protection The consumer-protection dimension of Rwanda's virtual-asset framework under Law No. 023/2026 is, at this stage, anchored principally around marketing restriction rather than a fully built-out protection regime. Marketing of virtual-asset services is restricted to licensed providers or approved issuers, meaning an entity that has not obtained CMA licensing or approval is not permitted to market virtual-asset services to Rwandan consumers, regardless of where that entity is based. This restriction functions as a consumer-facing complement to the licensing gateway described under Crypto Licensing: it closes off the marketing channel to unlicensed actors even in circumstances where the CMA's full licensing procedure remains inoperative pending secondary regulation, meaning the marketing restriction is one of the few consumer-protection provisions under the law that is fully enforceable today rather than awaiting implementing detail. Beyond the marketing restriction, detailed consumer-protection provisions — covering matters such as client-asset custody segregation, market-abuse prohibitions, complaint-handling mechanisms, or compensation arrangements for consumers in the event of issuer or exchange failure — were not located in any source reviewed. This represents a genuine gap in available sourcing rather than a confirmed absence of such provisions in the underlying statute, and reflects the broader pattern across this law of principles being set out at a high level in primary legislation while implementing detail awaits CMA secondary regulation. #### Outlook Whether the CMA's pending secondary regulations will add custody-segregation, market-abuse, or compensation-scheme detail to the consumer-protection framework is not yet known. In the interim, the marketing restriction to licensed providers and approved issuers stands as the principal enforceable consumer-protection measure under the statute. 1 earlier distinct update(s) Periodic update · new data 2026-09-28 #### Consumer Protection Law N° 023/2026 restricts marketing of virtual asset services to licensed providers or approved issuers, a protection aimed at preventing unlicensed offerings from being promoted to Rwandan consumers before any licensing regime is fully operative. Separately, the National Bank of Rwanda has stated that virtual assets are not legal tender and cannot be used as a direct means of payment for goods, services, or financial obligations unless explicitly authorised by BNR, a general protection against virtual assets being represented as, or relied upon as, a guaranteed payment mechanism. Both protections are explicit and already in force. What is not detailed in the sourcing reviewed this cycle is any dedicated complaint-handling mechanism or consumer-redress pathway specific to virtual-asset services, separate from Rwanda's general consumer-protection law. #### Outlook Watch for whether implementing regulations articulate a dedicated redress pathway for virtual-asset consumers, and whether the marketing restriction is tested against unlicensed offerings once CMA begins active supervision. Sources and findings (6) - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect/amp) — Marketing of virtual asset services is restricted to licensed providers or approved issuers. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect/amp) — Tokenised real-world assets must be securely held by licensed custodians as a condition of the tokenisation regime. - T4[The New Times (Rwanda)](https://www.newtimes.co.rw/article/36172/news/law/what-to-know-as-virtual-assets-law-takes-effect/amp) — Public proof-of-reserves and audit requirements for stablecoin issuers function as investor risk-disclosure safeguards under the law. - T2[Law N°023/2026 Regulating Virtual Asset Business](https://allafrica.com/stories/202605060071.html) — Unauthorised promotion or advertising of virtual assets is a criminalised offence under the law. - T2[Virtual-asset marketing in Rwanda](https://news.bitcoin.com/rwandas-cma-moves-to-license-crypto-exchanges-as-unapproved-platforms-face-penalties/) — Marketing of virtual-asset services is restricted to licensed providers or approved issuers ### Rwanda: C6 Tax TreatmentRedEnacted in forceModule confidence: Probable▾ No crypto-specific tax statute or Rwanda Revenue Authority (RRA) guidance on capital gains, income tax, VAT or withholding treatment of virtual asset transactions was identified as of the research date. Rwanda's general VAT/digital-services rules (e.g., new VAT collection mechanisms for foreign digital service providers) are in force but were not confirmed to specifically address virtual asset trading or issuance. Tax treatment of virtual assets under Law N° 023/2026 therefore remains an open, unresolved question pending RRA guidance. C6 · Tax Treatment — Full Module Record 0 sub-modules · 180 words · 1 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C7 Cross-Border TransferAmberEnacted in forceModule confidence: Probable▾ Virtual assets remain non-legal-tender in Rwanda under Law N° 023/2026 and cannot be used as a direct means of payment — including for cross-border payment purposes — unless specifically authorised by the National Bank of Rwanda. No dedicated crypto cross-border reporting-threshold or travel-rule-crossborder regime was identified in public secondary sources at the research date; these likely fall to the shared FIM aml_ctf module and/or pending implementing regulations. Periodic update · new data 2026-11-04 #### Cross-Border Transfer Virtual assets are not legal tender in Rwanda and cannot be used as a direct means of payment unless the National Bank of Rwanda specifically authorises such use. This restriction is clearly and directly sourced, carrying a probable confidence tier, even though the precise statutory provision establishing it has not been confirmed against primary Gazette text. The restriction functions as a default prohibition on payment use with a conditional carve-out: the National Bank of Rwanda retains discretionary authority to permit specific payment uses, but no general payment right exists absent that authorisation. This payments restriction is the clearest sourced fact bearing on cross-border transfer in the current record, but it is a restriction on domestic payment use rather than a comprehensive cross-border transfer framework. No rule has been identified addressing the mechanics of cross-border virtual-asset transfers specifically — questions such as outbound transfer reporting, correspondent-style intermediary obligations for virtual-asset service providers, or foreign-exchange-control interaction with virtual-asset movement remain unaddressed in the sourced material. The amber posture on this module reflects that the one confirmed rule is significant but narrow, leaving the broader cross-border transfer question largely open. The conditional structure of the National Bank of Rwanda's authorisation power is worth noting as a design feature: rather than an outright ban, the law leaves room for the central bank to permit specific payment-related uses of virtual assets as circumstances warrant, which suggests a regime designed for calibrated rather than permanent restriction. #### Outlook Whether the National Bank of Rwanda will exercise its authorisation power to permit any specific payment use of virtual assets, and whether implementing regulations will address cross-border transfer mechanics more directly, are both open questions not yet resolved in the sourced material. Developments on either front would be the clearest signal of this module's trajectory going forward. Periodic update · new data 2026-11-03 #### Cross-Border Transfer Law N 023/2026 establishes that virtual assets are not legal tender in Rwanda and cannot be used as a direct means of payment unless specifically authorised by the National Bank of Rwanda. For any cross-border payment architecture that routes value through virtual assets into or out of Rwanda, this provision is the controlling constraint: settlement in virtual assets as a substitute for fiat payment is closed by default, and opened only by a specific National Bank of Rwanda authorisation that has not, on the evidence reviewed, yet been granted or published in any identified instance. This payments restriction is structurally distinct from the Capital Market Authority licensing requirement for virtual asset service provision, and the two should not be conflated. An entity could, in principle, be licensed by the Capital Market Authority to provide virtual asset services such as exchange or custody while remaining entirely unable to use virtual assets as a payment instrument for ordinary commercial settlement absent separate National Bank of Rwanda authorisation. For cross-border transfer use cases specifically, meaning the use of virtual assets to move value across Rwanda's borders as a substitute for conventional payment rails, the binding question is the central bank authorisation, not the Capital Market Authority licence. The practical effect is that virtual-asset-based remittance or payment corridors touching Rwanda face a second, independent regulatory gate beyond service-provider licensing. A provider licensed to operate a virtual asset exchange or wallet service is not, by virtue of that licence alone, authorised to facilitate payment settlement in virtual assets; that requires the separate and currently ungranted National Bank of Rwanda authorisation referenced in the statute. #### Outlook The development to watch is any National Bank of Rwanda authorisation, guidance, or framework permitting virtual assets to be used as a direct means of payment under the statutory exception. No such authorisation has been identified in the material reviewed this period. Until one is published, cross-border payment products built on virtual asset settlement into or out of Rwanda should be assessed as falling outside the currently authorised perimeter, regardless of whether the operating entity holds a Capital Market Authority service licence. C7 · Cross-Border & Travel Rule — Full Module Record 0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C8 AML/CFT RegimeGreenEnacted in forceModule confidence: Probable▾ Crypto AML/CFT obligations are governed under the fleet's shared Financial Integrity Module (FIM aml_ctf) subscription; this consumer baseline does not independently emit AML/CFT claims. For disambiguation context only: the Financial Intelligence Centre (FIC) is reported to remain the central AML/CFT/CPF enforcement body alongside the new virtual-asset law's CMA/BNR licensing architecture, and Rwanda's National AML/CFT/CPF Policy 2025-2029 was published by CMA on 8 June 2026. No claims are emitted in this module per fleet module-subscription rules. C8 · AML/CFT Regime — Full Module Record 0 sub-modules · 180 words · 1 traced claims · Re-verified 2026-11-04 The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month , or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products) . [Unlock with Free Pass / Sign In](https://a-i.gi/auth/login)[View Pro & Firm Plans (£39 / £199)](https://a-i.gi/licensing/#plans)[View Open Exemplar (Gibraltar)](/jurisdictions/gi/) ### Rwanda: C9 Commercial Activity ▾ ## Commercial Activity Commercial activity in Rwanda's virtual-asset sector this cycle is best characterised as pre-commercial and legislative-to-regulatory in nature, rather than transactional. Rwanda's Parliament adopted the Virtual Asset Business Bill on 5 May 2026, which became Law No. 023/2026 upon gazetting on 28 May 2026. Following that adoption, the Capital Market Authority publicly signalled that it is currently drafting the licensing regulations needed to formally launch its VASP licensing regime. No confirmed instance of a virtual-asset business operating under a completed CMA licence was located this cycle, consistent with the broader finding that the licensing gateway created by the enabling law is not yet procedurally operational. Commercial activity to date in Rwanda's virtual-asset sector is therefore concentrated at the legislative and regulatory-preparation stage: the law has been adopted and gazetted, and the regulator has publicly committed to a rulemaking process, but the transactional market — licensed exchanges, issuers and service providers actually operating under the new regime — has not yet come into being in confirmed form. This sequencing is itself a commercially relevant data point for any entity assessing Rwanda as a market: the absence of confirmed commercial activity under the new law is a function of regulatory timing rather than of market disinterest, given that the enabling statute itself establishes a licensing requirement that creates demand for CMA authorisation once the procedural mechanism exists. — Outlook: Commercial activity under the new regime should be expected to begin once the CMA's secondary regulations are published, expected around the first quarter of 2027. Until then, commercial developments in Rwanda's virtual-asset space will likely continue to consist of regulatory and institutional preparation rather than confirmed licensed operations. Periodic update · new data 2026-10-25 #### Commercial Activity Commercial activity in Rwanda's virtual-asset sector is best characterised as pre-commercial and legislative-to-regulatory in nature, rather than transactional. Rwanda's Parliament adopted the Virtual Asset Business Bill on 5 May 2026, which became Law No. 023/2026 upon gazetting on 28 May 2026. Following that adoption, the Capital Market Authority publicly signalled that it is currently drafting the licensing regulations needed to formally launch its VASP licensing regime. No confirmed instance of a virtual-asset business operating under a completed CMA licence was located, consistent with the broader finding that the licensing gateway created by the enabling law is not yet procedurally operational. Commercial activity to date in Rwanda's virtual-asset sector is therefore concentrated at the legislative and regulatory-preparation stage: the law has been adopted and gazetted, and the regulator has publicly committed to a rulemaking process, but the transactional market — licensed exchanges, issuers and service providers actually operating under the new regime — has not yet come into being in confirmed form. This sequencing is itself a commercially relevant data point for any entity assessing Rwanda as a market: the absence of confirmed commercial activity under the new law is a function of regulatory timing rather than of market disinterest, given that the enabling statute itself establishes a licensing requirement that creates demand for CMA authorisation once the procedural mechanism exists. #### Outlook Commercial activity under the new regime should be expected to begin once the CMA's secondary regulations are published, expected around the first quarter of 2027. Until then, commercial developments in Rwanda's virtual-asset space will likely continue to consist of regulatory and institutional preparation rather than confirmed licensed operations. Sources and findings (1) - T2[Capital Market Authority of Rwanda](https://news.bitcoin.com/rwandas-cma-moves-to-license-crypto-exchanges-as-unapproved-platforms-face-penalties/) — CMA stated it is currently drafting secondary regulations to formally launch its VASP licensing regime, following Parliament's adoption of the Law