African bloc

Nigeria's licensing architecture rests on a different statutory foundation. The Investments and Securities Act 2025 formally recognises virtual and digital assets as securities and empowers the Securities and Exchange Commission to license VASPs. The Act sets a minimum paid-up capital requirement of N500,000,000 for a standard VASP licence -- a capitalization threshold substantially higher than what is typically associated with earlier-stage VASP regimes elsewhere in the bloc, and one that will likely narrow the field of firms able to obtain a standard licence to better-capitalized incumbents. The securities-based classification underpinning Nigeria's regime also means licensing and classification questions are closely intertwined there in a way they are not in Kenya's activity-based model.

Mauritius continues to operate under the Virtual Asset and Initial Token Offering Services (VAITOS) Act 2021, administered by the Financial Services Commission. That regime licenses broker-dealers, custodians, wallet providers and marketplaces, and represents the most established -- in tenure terms -- of the licensing frameworks covered in the bloc this cycle. Unlike Kenya's 2026 regulations or Nigeria's 2025 legislation, Mauritius's framework has now been in force for several years, and this cycle's evidence does not indicate material amendment to its core licensing structure, though the Financial Services Commission's parallel work on stablecoin guidance suggests the regime continues to evolve at the margins.

South Africa's licensing posture was not directly evidenced with new claims this cycle beyond what is captured in the token classification and stablecoin modules, though the module tracker notes that crypto-asset service providers there continue to be treated as intermediaries regulated under the Financial Advisory and Intermediary Services Act -- a framework that predates the dedicated VASP-style licensing approaches now emerging in Kenya and already in force in Nigeria and Mauritius. This puts South Africa in a structurally different position from its three bloc peers: rather than a purpose-built crypto licensing statute, crypto activity there continues to be routed through a pre-existing intermediary-licensing framework, layered on top of the unresolved classification conflict addressed in the token classification module.

The overall picture across the four jurisdictions with material licensing evidence this cycle is one of convergence toward mandatory licensing as the default posture, but at sharply different levels of implementation maturity -- from Mauritius's several-years-old operating regime, to Nigeria's securities-anchored 2025 framework with its high capital floor, to Kenya's freshly gazetted and more granular 2026 rules, to South Africa's continued reliance on a pre-existing intermediary framework.

Outlook

Kenya's November 2026 compliance deadline is the most concrete near-term marker in this module: firms operating in or targeting the Kenyan market will need to have obtained the relevant licence, whether for general exchange and custody activity, stablecoin issuance, or tokenization services, by that date. How strictly and how quickly Kenyan authorities move to enforce against unlicensed activity once the deadline passes is not yet evidenced and will be a signal worth tracking in subsequent cycles. Nigeria's high capital floor may prompt consolidation or exit among smaller VASPs unable to meet the N500,000,000 threshold, though no evidence of market response was located this cycle. Whether South Africa moves toward a purpose-built licensing statute, rather than continuing to rely on the Financial Advisory and Intermediary Services Act, remains an open question that is likely to be shaped by how the token-classification conflict between the Joint Communication and the Mangundhla ruling is ultimately resolved.

Nigeria's classification framework, by contrast, is more legislatively settled but still carries open perimeter questions. The Investments and Securities Act 2025 classifies virtual and digital assets as securities and places them under Securities and Exchange Commission jurisdiction. The Tax Administration Act 2025, however, clarifies that not all virtual assets are necessarily SEC-regulated securities, which leaves open exactly where the securities perimeter ends and other categories of digital asset might fall outside SEC jurisdiction. This is a narrower and more contained form of classification uncertainty than South Africa's cross-statute conflict, but it is a genuine gap nonetheless.

Kenya's contribution to this module this cycle is structural rather than doctrinal: its VASP Regulations 2026 introduce dedicated regimes for stablecoins and for real-world-asset tokenization that are distinct from general exchange and custody licensing. This amounts to a classification choice made through regulatory architecture -- treating stablecoins and tokenized real-world assets as categorically different from other digital assets requiring their own licensing tracks -- rather than through statutory definition or judicial ruling, which is the pattern seen in South Africa and Nigeria respectively.

Outlook

South Africa's classification conflict is the item most likely to require resolution in coming cycles, given its direct bearing on cross-border transfer treatment and the pending Draft Capital Flow Management Regulations, which would formally bring crypto assets into the capital-flow framework. Whether the Mangundhla ruling is appealed, distinguished, or effectively absorbed into the incoming capital-flow rules is an open question flagged in this cycle's review and worth tracking closely. Nigeria's SEC-versus-non-security perimeter question may be clarified through subsequent SEC rulemaking or guidance, though no such clarification was evidenced this cycle. Kenya's activity-based classification approach, once its November 2026 compliance deadline passes, will offer an early test of whether structural separation of stablecoin and tokenization tracks from general VASP licensing proves durable in practice.

Outlook

This module remains the weakest-evidenced of the eight canonical categories for this jurisdiction group, and that thinness reflects a genuine absence of located rulemaking rather than a research gap alone -- no regulator across Kenya, Nigeria, South Africa or Mauritius appears to have spoken directly to staking, DeFi, mining or validator activity this cycle. Whether Kenya's tokenization-specific coverage is extended to other on-chain activities as its VASP regime matures toward the November 2026 compliance deadline is worth monitoring, as is whether any of the other three jurisdictions move to address this gap independently.

Kenya's VASP Regulations 2026 take a structurally different approach, establishing a dedicated licensing track for stablecoin issuers that is separate from general VASP exchange and custody licensing. This positions Kenya as building stablecoin-specific regulatory infrastructure from the outset of its comprehensive licensing regime, rather than retrofitting stablecoin rules onto an existing framework, or -- as in South Africa's case -- addressing stablecoins primarily through payments-law guidance rather than a licensing framework.

Mauritius's Financial Services Commission issued additional stablecoin guidance in 2025 and is reported to be exploring a more comprehensive stablecoin regulatory framework. The substance and timeline of that fuller framework were not detailed in sources reviewed this cycle, and this claim should be read as an institutional signal of direction rather than confirmation of specific forthcoming rules.

Outlook

The Intergovernmental Fintech Working Group's report on rand-pegged stablecoin use cases, expected by late 2026, is the most concrete forward marker in this module and will indicate whether South Africa intends to pursue a domestically-anchored stablecoin policy distinct from its rejection of foreign-pegged instruments. Kenya's stablecoin-issuer licensing track will face its first real test as the November 2026 VASP compliance deadline approaches, and whether Mauritius's exploration of a more comprehensive stablecoin framework produces concrete rulemaking in coming cycles remains to be seen. Across all three jurisdictions, the module's trajectory is toward tightening and increasing specificity, but the substantive content of that tightening -- particularly in South Africa and Mauritius -- is not yet settled.

No comparably detailed consumer-protection package was located for Nigeria, South Africa or Mauritius this cycle. This does not necessarily indicate those jurisdictions lack consumer-protection obligations for crypto activity -- Nigeria's securities-based classification of digital assets under the Investments and Securities Act 2025, for instance, would ordinarily carry with it standard securities-law disclosure and conduct obligations -- but no claims specific to consumer protection in those jurisdictions were evidenced in sources reviewed this cycle.

Outlook

Kenya's suitability and disclosure requirements will begin to bind licensed firms as the November 2026 compliance deadline approaches, and how those requirements are operationalized -- particularly the suitability assessment, which requires firms to make judgments about individual customer circumstances -- will be worth monitoring as implementation guidance, if any, emerges. Whether Nigeria, South Africa or Mauritius introduce or surface comparable consumer-protection detail in subsequent cycles remains an open question; the current asymmetry may reflect a genuine gap in those regimes' consumer-facing rulemaking, or simply a gap in this cycle's research coverage, and the two possibilities are not yet distinguishable on the evidence available.

Kenya's tax treatment of crypto activity was not directly evidenced from a primary source this cycle; the research coverage notes that Kenya's precise Kenya Revenue Authority position on income and capital-gains treatment of crypto was not retrieved, meaning Kenya's tax position in this module rests on secondary legal commentary rather than confirmed primary-source detail. This is a genuine evidentiary gap rather than an indication that Kenya lacks a tax position on crypto; it reflects what was and was not retrieved during this research cycle.

No claims relating to tax treatment in South Africa or Mauritius were evidenced this cycle.

Outlook

Retrieving the Kenya Revenue Authority's primary-source position on crypto income and capital-gains treatment is a clear priority for the next research cycle, particularly given Kenya's parallel move toward comprehensive VASP licensing -- a licensing regime that will generate exactly the kind of transactional activity a settled tax position would need to address. Nigeria's 10% capital gains tax rate, being statutorily anchored, is unlikely to see near-term change absent further legislative action, though how it interacts with the classification perimeter questions raised by the Tax Administration Act's securities carve-out is worth monitoring. Whether South Africa or Mauritius surface material tax-treatment developments in subsequent cycles remains to be seen.

Kenya's VASP Regulations 2026 take a different approach to cross-border questions, asserting an extraterritorial scope such that offshore crypto platforms targeting Kenyan users fall within the regulatory perimeter regardless of where those platforms are incorporated. This is a perimeter-widening move rather than a capital-flow-control move: rather than regulating how value moves across Kenya's border, the regulations assert jurisdiction over any platform serving Kenyan users, wherever that platform is based.

Outlook

The close of South Africa's comment period at the end of June 2026 means the next concrete marker in this module is the publication of final Capital Flow Management Regulations, and whether that final text explicitly addresses -- or leaves unresolved -- the tension between the exchange-control classification established in Mangundhla and the payments-focused Joint Communication. Kenya's extraterritorial assertion will face its first practical test as the November 2026 compliance deadline approaches and Kenyan authorities determine how to identify and act against offshore platforms serving Kenyan users without a local licence -- an enforcement question that is distinct from, but related to, the licensing questions addressed in the crypto licensing module.