Effective 1 December 2023, all entities operating as Crypto Asset Service Providers in South Africa are legally required to obtain a Financial Service Provider (FSP) licence under the Financial Advisory and Intermediary Services (FAIS) Act, 2002. This follows the FSCA's declaration of crypto assets as a financial product, a pivotal move to protect consumers and mitigate financial crime risks.

This declaration mandates that any business providing advice or intermediary services related to crypto assets must be licenced. Failure to comply carries significant penalties, including fines and imprisonment, underscoring the urgency for immediate action by all affected entities.

The FSCA defines a CASP broadly, encompassing any person or entity that carries on the business of providing advice or intermediary services in relation to crypto assets. This includes, but is not limited to, crypto exchanges, platforms facilitating crypto asset transactions, crypto custodians, and providers of crypto asset investment advice.

Crucially, the definition extends to entities that operate outside South Africa but provide services to South African clients. Jurisdictional reach is a key consideration, meaning global CASPs with a South African client base must also seek local authorisation.

The application for a CASP FSP licence is comprehensive. It requires submission of detailed documentation covering the applicant's business model, operational infrastructure, governance arrangements, risk management frameworks, and compliance policies, particularly those relating to Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF).

Key personnel, including the Key Individual and representatives, must meet specific fit and proper requirements, demonstrating competence, integrity, and operational ability. This includes relevant qualifications, experience, and a clean regulatory record. The FSCA assesses each application rigorously to ensure market stability and consumer protection.

Crucial Deadline: CASPs that submitted their licence applications to the FSCA by 30 November 2023 are permitted to continue operating pending the outcome of their application. Those who failed to meet this deadline must cease all CASP-related activities immediately until a licence is granted.

Obtaining the licence is the initial step; maintaining it requires continuous adherence to regulatory standards. CASPs must implement robust internal controls, maintain adequate capital, conduct regular risk assessments, and ensure ongoing training for staff. Reporting obligations to the FSCA are also mandatory, covering financial performance, compliance posture, and any material changes to the business.

Furthermore, CASPs must comply with the Protection of Personal Information Act (POPIA), ensuring client data privacy, and the Financial Intelligence Centre Act (FICA), which governs AML/CTF measures. Regular audits and internal reviews are essential to demonstrate compliance and avoid regulatory penalties.

Navigating the complexities of FSCA licensing and ongoing compliance requires specialised expertise. Benfeiv offers comprehensive support to CASPs, from initial licence application preparation and submission to establishing robust compliance frameworks and providing ongoing regulatory advice.

Our team of regulatory specialists understands the nuances of the South African financial services landscape and the specific requirements for crypto assets. We assist in gap analysis, policy development, key individual and representative fit and proper assessments, and liaising with the FSCA, ensuring a streamlined and efficient compliance process for your organisation.