Bitcoin & Cryptocurrency Regulation in Malawi

• Legal: Not banned but unregulated and not recognised, not legal tender
• Tax: No crypto-specific tax, income generally taxable under existing law
• Buying: No licensed local exchange, via offshore platforms and P2P

Malawi sits in the cautious-but-watching camp on cryptocurrency. The Reserve Bank of Malawi (RBM) has repeatedly stated that Bitcoin and other digital assets are not legal tender and are not regulated or endorsed, while stopping short of a clear, codified ban on individuals owning or trading them. The practical result is a legal grey area: as of 2026 Malawi has no dedicated virtual-assets statute, no licensing regime for exchanges, and no formal consumer-protection backstop, yet a growing number of Malawians buy, sell and receive crypto through peer-to-peer platforms and offshore exchanges. The clearest signal of where things are heading is the government's first Virtual Assets and Virtual Asset Service Providers Risk Assessment Report, published in June 2025 by the Financial Intelligence Authority, which recommends that Malawi urgently define a policy stance and build a proper legal framework. This page explains where Malawi stands on legality, the regulators, the law, exchanges, tax, AML/KYC, buying and using crypto, mining, recent developments and risk. See also our general guide to crypto regulation.

This article is general information as of 2026 and is not legal, tax or financial advice. Crypto rules in Malawi are unsettled and evolving. Always verify the current position with the Reserve Bank of Malawi and the Malawi Revenue Authority, and consult a qualified Malawian professional before acting.

There is no Malawian law that makes simply holding or trading Bitcoin a criminal offence, but there is also no law that formally legalises or licenses crypto activity. The most accurate description of the position in 2026 is unregulated and not recognised rather than clearly banned or clearly permitted.

The Reserve Bank of Malawi has issued public cautions making clear that:

• Cryptocurrencies are not legal tender in Malawi and are not a substitute for the Malawi kwacha (MWK).
• The RBM does not regulate crypto and will not approve or recognise any inbound or outbound foreign investment in cryptocurrencies.
• Crypto businesses operating locally are not licensed by the Registrar of Financial Institutions, so disputes and scams are treated as criminal or law-enforcement matters rather than regulated financial-services complaints.
• Anyone using crypto does so at their own risk, with no central authority to turn to if funds are lost, stolen or frozen.

At the same time, the authorities are actively reviewing this stance. The June 2025 government risk assessment explicitly recommends that Malawi define a clear policy and build a legislative framework for virtual assets, so the legal status could change. Until formal legislation is passed, treat crypto as a high-risk, unsupervised activity.

No single body has a dedicated crypto mandate yet. Oversight is shared among existing financial authorities, with the central bank as the most likely future regulator:

• Reserve Bank of Malawi (RBM): the central bank and monetary authority. It acts as the Registrar of Financial Institutions, oversees the payments system, currency and exchange-control matters, and has issued the main public statements on crypto. The risk assessment notes the RBM has begun receiving applications for formal VASP licensing, even though no licensing regime yet exists. Official site: Reserve Bank of Malawi (rbm.mw).
• Financial Intelligence Authority (FIA): Malawi's anti-money-laundering agency, established under the Financial Crimes Act, 2017. It led the 2025 virtual-assets risk assessment and is responsible for AML/CFT supervision. Official site: Financial Intelligence Authority (fia.gov.mw).
• Malawi Revenue Authority (MRA): the tax administration, relevant to any income or gains arising from crypto. Official site: Malawi Revenue Authority (mra.mw).
• Ministry of Finance and Economic Affairs: sat on the technical working group for the 2025 assessment and would lead any new legislation.

If and when a framework is enacted, the RBM and FIA are the bodies most likely to supervise exchanges and enforce AML rules.

As of 2026 there is no comprehensive cryptocurrency or virtual-assets statute in Malawi and no dedicated licensing law for exchanges or wallet providers. Crypto is instead touched indirectly by existing legislation and by central-bank guidance:

• Financial Crimes Act, No. 14 of 2017: establishes the FIA and the AML/CFT regime; the framework into which any future crypto rules would have to fit.
• Financial Services Act and Banking Act: the prudential laws under which the RBM licenses and supervises banks and other financial institutions. Crypto firms are not licensed under these.
• Exchange-control rules: govern moving money in and out of Malawi and converting kwacha to foreign currency. Because crypto can move value across borders, regulators view it partly through this lens.

Malawi is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG) and follows Financial Action Task Force (FATF) standards. The 2025 risk assessment was conducted specifically to meet FATF Recommendation 15 on new technologies, which requires countries to identify and mitigate virtual-asset risks. Note that Malawi is not in the EU, so the EU Markets in Crypto-Assets (MiCA) regulation does not apply here.

There is no VASP licensing or registration regime in Malawi as of 2026. The 2025 government risk assessment confirmed that virtual asset service providers operate without licensing, oversight or enforcement, and described this regulatory and supervisory vacuum as a high-risk gap.

What the assessment found on the ground:

• At least one VASP had a physical presence in Malawi, operating as an unlicensed and unregistered business offering currency exchange and Bitcoin; for the year ending April 2025 it recorded over 84,000 customers and around USD 2.4 million in transaction volume.
• Around eleven firms were identified providing online wallet, exchange and investment services to Malawian users, several of them foreign-based platforms operating without local scrutiny.
• The RBM has reportedly begun receiving applications for formal VASP licensing, but there is currently no legal mechanism to grant such a licence.

For users this means a local crypto service is not supervised by the RBM, and standard safeguards such as custody audits, capital requirements and formal dispute resolution are not guaranteed. A licensing framework is likely only after Malawi enacts the legislation recommended in the 2025 assessment.

Malawi has no crypto-specific tax legislation and no official guidance setting dedicated rates or thresholds for digital assets. That does not mean crypto is automatically tax-free: income and gains are generally taxable under Malawi's existing tax law, administered by the Malawi Revenue Authority, and crypto-related profits could fall within those general rules depending on the facts.

For context, Malawi's headline taxes include a top personal income tax rate and corporate income tax around 30 percent, and Malawi does not levy a standalone capital-gains tax, though gains on business assets can be brought into taxable business income. Because there is no published crypto tax framework, this page deliberately states no specific crypto rate. As general principles only, and subject to confirmation with a Malawian tax professional:

• Profits from selling or trading crypto may be treated as taxable income depending on how the activity is characterised.
• Crypto received as payment for goods, services or work may be taxable at its kwacha value when received.
• Mining, staking or other rewards could also be treated as taxable.
• Keep dated records of purchases, sales, transfers and the kwacha value at each point.

The treatment of any specific transaction is uncertain under current law. Do not rely on this section as tax advice; confirm with the Malawi Revenue Authority or a qualified adviser. See also our general guide to crypto taxes.

Malawi's anti-money-laundering and counter-terrorist-financing regime is set by the Financial Crimes Act, 2017, supervised by the FIA together with the RBM. Banks, mobile-money operators and other reporting institutions must perform customer due diligence (KYC), monitor transactions and file suspicious-transaction reports.

Crypto sits awkwardly inside this regime. Because VASPs are not licensed, they are not directly captured as reporting institutions, so AML obligations apply to crypto only indirectly, mainly where a crypto firm interacts with a bank or mobile-money provider. The 2025 risk assessment rated Malawi's overall money-laundering, terrorist-financing and proliferation-financing risk from virtual assets as high, driven by:

• Peer-to-peer transactions, custodial wallet services and cross-border platforms, which raise anonymity and traceability challenges.
• Unlicensed and foreign-based VASPs entering the market without oversight.
• Limited capacity among regulators and law-enforcement agencies to monitor and investigate crypto-related crime.

The assessment recommends bringing VASPs into the AML/CFT framework once enabling legislation exists. In practice today, reputable offshore platforms still apply their own KYC checks, and you should expect to verify your identity when using them.

With no licensed local exchanges, most Malawians use international platforms or peer-to-peer (P2P) marketplaces. A cautious approach looks like this:

• 1. Choose a method. The main options are P2P marketplaces (trading directly with other users via bank transfer or mobile money, with crypto held in escrow) and offshore or pan-African exchanges that accept Malawian customers.
• 2. Complete identity checks. Reputable platforms require KYC (ID and sometimes proof of address). Avoid services that ask for no verification, as these carry higher fraud and AML risk.
• 3. Fund and trade. Deposit kwacha via the supported method and buy your chosen asset. On P2P platforms, only confirm or release funds through the platform's escrow and dispute process.
• 4. Secure your holdings. Move significant amounts to a wallet you control, enable two-factor authentication, and never share private keys or recovery phrases.

Before sending money, check fees and exchange-rate spreads, verify the counterparty's reputation, and remember that Malawi's exchange-control rules may apply to cross-border funding. There is no local regulator to recover lost funds, so caution is essential. Physical Bitcoin ATMs are not an established part of Malawi's landscape, so do not assume a working machine is available.

No Malawian law specifically prohibits cryptocurrency mining, so mining is generally understood to be permitted by default rather than expressly authorised. The 2025 risk assessment noted that some organisations, academics and students were already engaged in mining, research and awareness activity. As with trading, the absence of a clear rule means miners operate without specific protection or recognition.

The bigger constraints in Malawi are practical rather than legal:

• Electricity supply: Malawi has historically faced power shortages and load-shedding, and mining is energy-intensive. Reliable, affordable electricity is the single largest hurdle.
• Hardware and import costs: mining equipment must usually be imported, adding cost and exchange-control considerations.
• Tax: any income from mining could be taxable under general MRA rules.
• Environmental footprint: the energy demands of mining raise environmental concerns; operators increasingly look to renewable or surplus power.

Anyone considering more than hobby-scale mining should verify the current legal and tax position locally and plan around Malawi's energy realities.

The most significant recent step is the Virtual Assets and Virtual Asset Service Providers Risk Assessment Report, published in June 2025 by the Financial Intelligence Authority, with the RBM and Ministry of Finance and Economic Affairs. It was Malawi's first such assessment and was conducted to meet FATF Recommendation 15. Its headline findings and recommendations:

• Malawi faces a high overall ML/TF/PF risk from virtual assets, due to weak controls, no licensing and growing public use.
• The country should urgently define a clear policy stance on whether to allow or prohibit virtual assets and create the necessary legislation in line with international standards.
• It should strengthen institutional capacity, improve inter-agency and international cooperation, run public-awareness programmes, and develop procedures for investigating and seizing illicit virtual assets.

Earlier, RBM officials had publicly described Malawi as being on the borderline, neither saying yes nor no to crypto, and noted that an outright ban could push activity underground beyond AML oversight. The bank has consistently said it supports the underlying blockchain technology even while warning against crypto trading. Across the region, neighbours have moved to formal regulation, increasing pressure on Malawi to follow. Kenya enacted its Virtual Asset Service Providers Act, 2025, which received presidential assent on 15 October 2025 and came into force on 4 November 2025, placing licensing under the Central Bank of Kenya and the Capital Markets Authority (no VASP licences had been issued at the point the Act took effect). Nigeria has also moved toward formal oversight. A framework for Malawi, whether enabling or restrictive, is plausible in the coming years; watch official RBM and FIA channels for announcements.

Domestic pressure has been part of the picture. Bodies including the ICT Association of Malawi and the Economic Association of Malawi have urged the RBM to allow regulated crypto use rather than an outright ban, and RBM officials have publicly acknowledged the concern that a blanket prohibition could push users underground beyond anti-money-laundering oversight. The RBM has also indicated it is monitoring blockchain developments to judge whether regulatory intervention is needed, while continuing to caution that crypto is not legal tender.

The defining feature of crypto in Malawi is the absence of a safety net. Because crypto is unregulated and unrecognised, there is no compensation scheme, deposit guarantee or financial regulator to appeal to if something goes wrong.

• No consumer protection: losses from hacks, scams or platform failure are generally unrecoverable; the RBM treats crypto scams as criminal matters for the police, not regulated complaints.
• Scam exposure: unregulated markets attract fraud, fake platforms and guaranteed-return schemes. The RBM's warnings followed real incidents in which Malawians lost significant sums.
• Volatility: prices can move sharply; only consider money you can afford to lose entirely.
• Regulatory and policy risk: the position is officially under review, so rules could tighten or formalise with limited notice.
• AML and exchange-control exposure: moving value across borders can intersect with Malawi's exchange-control and anti-money-laundering rules.

Protect yourself by using reputable platforms with strong security and proper KYC, enabling two-factor authentication, holding your own keys for larger amounts, keeping records, and ignoring social-media hype and unsolicited investment offers. This page does not give investment advice or price predictions.

Because Malawi's position is evolving, always confirm the current rules with the primary authorities rather than relying on third-party summaries. The key official sources are:

• Reserve Bank of Malawi for legal-tender status, exchange control, any future VASP licensing and public notices: rbm.mw.
• Financial Intelligence Authority for AML/CFT rules, the Financial Crimes Act and the June 2025 virtual-assets risk assessment: fia.gov.mw.
• Malawi Revenue Authority for tax obligations: mra.mw.

For wider context, compare other countries on our regulation hub. Remember that this article is general information as of 2026 and is not legal advice; verify your specific situation directly with the Reserve Bank of Malawi, the Malawi Revenue Authority and a qualified Malawian professional.

There is no law that criminalises simply holding or trading Bitcoin, but there is also no law that formally legalises or licenses it. The Reserve Bank of Malawi has stated that crypto is not legal tender and is not regulated, leaving it in an unregulated grey area. Verify the current position with the RBM before acting.

No single body has a dedicated crypto mandate yet. The Reserve Bank of Malawi is the central bank and the most likely future regulator, the Financial Intelligence Authority handles anti-money-laundering supervision, and the Malawi Revenue Authority handles tax. As of 2026 there is no crypto-specific licensing regime.

There is currently no VASP licensing regime, so there is no licence available to apply for. The 2025 government risk assessment found exchanges operating without any licensing or oversight and recommended that Malawi create a legal framework. The Reserve Bank has reportedly started receiving licensing applications, but no mechanism yet exists to grant them.

Malawi has no crypto-specific tax law, but income and gains are generally taxable under existing rules administered by the Malawi Revenue Authority, and crypto profits could fall within them depending on the facts. No official crypto rates or thresholds are published, so confirm your obligations with the MRA or a qualified tax adviser.

In June 2025 Malawi's Financial Intelligence Authority, with the Reserve Bank of Malawi and the Ministry of Finance, published the country's first Virtual Assets and VASPs money-laundering risk assessment, meeting FATF Recommendation 15. It rated the overall risk as high and recommended that Malawi urgently define a policy stance and enact legislation to regulate virtual assets.

Because there are no licensed local exchanges, most people use peer-to-peer marketplaces or offshore platforms that accept Malawian users, funding with bank transfer or mobile money. Use platforms with proper identity checks, secure your own wallet, and remember there is no local regulator to help recover lost funds.

No Malawian law specifically bans cryptocurrency mining, so it is generally understood to be permitted by default rather than expressly authorised, and the 2025 government risk assessment noted some mining, research and awareness activity already taking place. The practical hurdles are electricity supply and load-shedding, the cost of importing hardware, and possible tax on any income. There is no dedicated mining licence or legal protection, so verify the current position locally before scaling up.

Malawi is behind several regional peers. As of 2026 it has no virtual-assets statute and no licensing regime, whereas Kenya enacted its Virtual Asset Service Providers Act, 2025, which came into force in November 2025 with the Central Bank of Kenya and Capital Markets Authority as regulators, and Nigeria has also moved toward formal oversight. Malawi's June 2025 risk assessment recommended it define a policy and legislate, so the gap may narrow, but nothing is enacted yet.

Last updated: 2026-06-30.

• Crypto regulation in Burundi
• Crypto regulation in Comoros
• Crypto regulation in Djibouti
• Crypto regulation in Eritrea
• Crypto regulation in Ethiopia
• Crypto regulation in United States
• Crypto Taxes Explained
• How to Buy & Sell Crypto