Home › Crypto Regulation › Malawi

Quick answer — Malawi, 2026

• Legal: Not banned but unregulated and not recognised, not legal tender
• Tax: No crypto-specific tax, income generally taxable under existing law
• Buying: No licensed local exchange, via offshore platforms and P2P

Malawi sits in the cautious-but-watching camp on cryptocurrency. The Reserve Bank of Malawi (RBM) has repeatedly stated that Bitcoin and other digital assets are not legal tender and are not regulated or endorsed, while stopping short of a clear, codified ban on individuals owning or trading them. The practical result is a legal grey area: as of 2026 Malawi has no dedicated virtual-assets statute, no licensing regime for exchanges, and no formal consumer-protection backstop, yet a growing number of Malawians buy, sell and receive crypto through peer-to-peer platforms and offshore exchanges. The clearest signal of where things are heading is the government's first Virtual Assets and Virtual Asset Service Providers Risk Assessment Report, published in June 2025 by the Financial Intelligence Authority, which recommends that Malawi urgently define a policy stance and build a proper legal framework. This page explains where Malawi stands on legality, the regulators, the law, exchanges, tax, AML/KYC, buying and using crypto, mining, recent developments and risk. See also our general guide to crypto regulation.

This article is general information as of 2026 and is not legal, tax or financial advice. Crypto rules in Malawi are unsettled and evolving. Always verify the current position with the Reserve Bank of Malawi and the Malawi Revenue Authority, and consult a qualified Malawian professional before acting.

Next: Buying safely without a local exchange · Why some states ban crypto
Nearby: Kenya · Madagascar · Mauritius · Mozambique
All countries: browse the 205 country guides

On this page: Legal status · Who regulates it · Taxes · How to buy · Mining

There is no Malawian law that makes simply holding or trading Bitcoin a criminal offence, but there is also no law that formally legalises or licenses crypto activity. The most accurate description of the position in August 2026 is unregulated but no longer unclaimed. Crypto is not legal tender, and no statute either licenses or bans it, but the Reserve Bank of Malawi has now formally taken ownership of the file in its National Payments System Vision and Strategy Framework 2026-2030, published 16 April 2026, and set itself a 2026 to 2028 window to draft and consult on the rules.

The Reserve Bank of Malawi has issued public cautions making clear that:

• Cryptocurrencies are not legal tender in Malawi and are not a substitute for the Malawi kwacha (MWK).
• The RBM does not regulate crypto and will not approve or recognise any inbound or outbound foreign investment in cryptocurrencies.
• Crypto businesses operating locally are not licensed by the Registrar of Financial Institutions, so disputes and scams are treated as criminal or law-enforcement matters rather than regulated financial-services complaints.
• Anyone using crypto does so at their own risk, with no central authority to turn to if funds are lost, stolen or frozen.

At the same time, the authorities are actively reviewing this stance. The June 2025 government risk assessment explicitly recommends that Malawi define a clear policy and build a legislative framework for virtual assets, so the legal status could change. Until formal legislation is passed, treat crypto as a high-risk, unsupervised activity.

No single body has a dedicated crypto mandate yet. Oversight is shared among existing financial authorities, with the central bank as the most likely future regulator:

• Reserve Bank of Malawi (RBM): the central bank and monetary authority. It acts as the Registrar of Financial Institutions, oversees the payments system, currency and exchange-control matters, and has issued the main public statements on crypto. The risk assessment notes the RBM has begun receiving applications for formal VASP licensing, even though no licensing regime yet exists. Official site: Reserve Bank of Malawi (rbm.mw).
• Financial Intelligence Authority (FIA): Malawi's anti-money-laundering agency, established under the Financial Crimes Act, 2017. It led the 2025 virtual-assets risk assessment and is responsible for AML/CFT supervision. Official site: Financial Intelligence Authority (fia.gov.mw).
• Malawi Revenue Authority (MRA): the tax administration, relevant to any income or gains arising from crypto. Official site: Malawi Revenue Authority (mra.mw).
• Ministry of Finance and Economic Affairs: sat on the technical working group for the 2025 assessment and would lead any new legislation.

The Reserve Bank of Malawi has now named itself as the regulator. Section 4.4.3 of its National Payments System Vision and Strategy Framework 2026-2030, published 16 April 2026 and signed by Governor Dr George Partridge, commits the RBM to establish a proportionate, risk-based regulatory framework for virtual assets and VASPs aligned with FATF standards. The Financial Intelligence Authority continues to run AML supervision under the Financial Crimes Act No. 14 of 2017, which does not yet list VASPs as reporting institutions.

As of 2026 there is no comprehensive cryptocurrency or virtual-assets statute in Malawi and no dedicated licensing law for exchanges or wallet providers. Crypto is instead touched indirectly by existing legislation and by central-bank guidance:

• Financial Crimes Act, No. 14 of 2017: establishes the FIA and the AML/CFT regime; the framework into which any future crypto rules would have to fit.
• Financial Services Act and Banking Act: the prudential laws under which the RBM licenses and supervises banks and other financial institutions. Crypto firms are not licensed under these.
• Exchange-control rules: govern moving money in and out of Malawi and converting kwacha to foreign currency. Because crypto can move value across borders, regulators view it partly through this lens.

Malawi is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG) and follows Financial Action Task Force (FATF) standards. The 2025 risk assessment was conducted specifically to meet FATF Recommendation 15 on new technologies, which requires countries to identify and mitigate virtual-asset risks. Note that Malawi is not in the EU, so the EU Markets in Crypto-Assets (MiCA) regulation does not apply here.

There is no VASP licensing or registration regime in Malawi as of 2026. The 2025 government risk assessment confirmed that virtual asset service providers operate without licensing, oversight or enforcement, and described this regulatory and supervisory vacuum as a high-risk gap.

What the assessment found on the ground:

• At least one VASP had a physical presence in Malawi, operating as an unlicensed and unregistered business offering currency exchange and Bitcoin; for the year ending April 2025 it recorded over 84,000 customers and around USD 2.4 million in transaction volume.
• Around eleven firms were identified providing online wallet, exchange and investment services to Malawian users, several of them foreign-based platforms operating without local scrutiny.
• The RBM has reportedly begun receiving applications for formal VASP licensing, but there is currently no legal mechanism to grant such a licence.

For users this means a local crypto service is not supervised by the RBM, and standard safeguards such as custody audits, capital requirements and formal dispute resolution are not guaranteed. The RBM has now put dates against that work. Under the 2030 Framework it will review international best practices in 2025 to 2026, engage stakeholders in 2026 to 2027, and draft and consult on virtual asset regulations and a comprehensive legal framework across 2026 to 2028. As of August 2026 no draft has been published and nothing has been tabled in the National Assembly, so a working exchange licence cannot realistically exist before that drafting and consultation window closes in 2028.

Malawi has no crypto-specific tax legislation and the Malawi Revenue Authority has published no crypto guidance, but the default is not a blank. Section 11 of the Taxation Act (Chapter 41:01) provides that a person's income includes any capital gain accruing from a source within or deemed to be within Malawi, and section 2 defines a capital gain as the excess of the amount realized on disposal of a capital asset over its adjusted basis. Malawi has no separate capital gains tax, so a gain on selling crypto falls into ordinary income tax rather than into a gap. That does not mean crypto is automatically tax-free: income and gains are generally taxable under Malawi's existing tax law, administered by the Malawi Revenue Authority, and crypto-related profits could fall within those general rules depending on the facts.

For context, Malawi's headline taxes include a top personal income tax rate and corporate income tax around 30 percent, and Malawi does not levy a standalone capital-gains tax, though gains on business assets can be brought into taxable business income. Because there is no published crypto tax framework, this page deliberately states no specific crypto rate. As general principles only, and subject to confirmation with a Malawian tax professional:

• Profits from selling or trading crypto fall into ordinary income under section 11 of the Taxation Act. For an individual that means the personal income tax rates in force since 31 December 2025: nil on the first K2,040,000 of annual taxable income and 30 percent on the excess. For a company it means 30 percent up to K5 billion of annual taxable income and 40 percent above that. The MRA publishes a separate PAYE scale for employment income which rises to 40 percent above K10,000,000 per month.
• Crypto received as payment for goods, services or work may be taxable at its kwacha value when received.
• Mining, staking or other rewards could also be treated as taxable.
• Keep dated records of purchases, sales, transfers and the kwacha value at each point.

The treatment of any specific transaction is uncertain under current law. Do not rely on this section as tax advice; confirm with the Malawi Revenue Authority or a qualified adviser. See also our general guide to crypto taxes.

Malawi's anti-money-laundering and counter-terrorist-financing regime is set by the Financial Crimes Act, 2017, supervised by the FIA together with the RBM. Banks, mobile-money operators and other reporting institutions must perform customer due diligence (KYC), monitor transactions and file suspicious-transaction reports.

Crypto sits awkwardly inside this regime. Because VASPs are not licensed, they are not captured as reporting institutions under the Financial Crimes Act No. 14 of 2017, and the 2023 amendment did not add them. AML obligations therefore reach crypto only at the bank, mobile money or payment gateway edge. The June 2025 risk assessment rated the government's overall mitigation response as very low and stated that key fundamental elements, including the legal, regulatory and institutional frameworks, are non-existent. The 2025 risk assessment rated Malawi's overall money-laundering, terrorist-financing and proliferation-financing risk from virtual assets as high, driven by:

• Peer-to-peer transactions, custodial wallet services and cross-border platforms, which raise anonymity and traceability challenges.
• Unlicensed and foreign-based VASPs entering the market without oversight.
• Limited capacity among regulators and law-enforcement agencies to monitor and investigate crypto-related crime.

The assessment recommends bringing VASPs into the AML/CFT framework once enabling legislation exists. In practice today, reputable offshore platforms still apply their own KYC checks, and you should expect to verify your identity when using them.

With no licensed local exchanges, most Malawians use international platforms or peer-to-peer (P2P) marketplaces. A cautious approach looks like this:

• 1. Choose a method. The main options are P2P marketplaces (trading directly with other users via bank transfer or mobile money, with crypto held in escrow) and offshore or pan-African exchanges that accept Malawian customers.
• 2. Complete identity checks. Reputable platforms require KYC (ID and sometimes proof of address). Avoid services that ask for no verification, as these carry higher fraud and AML risk.
• 3. Fund and trade. Deposit kwacha via the supported method and buy your chosen asset. On P2P platforms, only confirm or release funds through the platform's escrow and dispute process.
• 4. Secure your holdings. Move significant amounts to a wallet you control, enable two-factor authentication, and never share private keys or recovery phrases.

Before sending money, check fees and exchange-rate spreads, verify the counterparty's reputation, and remember that Malawi's exchange-control rules may apply to cross-border funding. There is no local regulator to recover lost funds, so caution is essential. Physical Bitcoin ATMs are not an established part of Malawi's landscape, so do not assume a working machine is available.

No Malawian law specifically prohibits cryptocurrency mining, so mining is generally understood to be permitted by default rather than expressly authorised. The 2025 risk assessment noted that some organisations, academics and students were already engaged in mining, research and awareness activity. As with trading, the absence of a clear rule means miners operate without specific protection or recognition.

The bigger constraints in Malawi are practical rather than legal:

• Electricity supply: Malawi has historically faced power shortages and load-shedding, and mining is energy-intensive. Reliable, affordable electricity is the single largest hurdle.
• Hardware and import costs: mining equipment must usually be imported, adding cost and exchange-control considerations.
• Tax: any income from mining could be taxable under general MRA rules.
• Environmental footprint: the energy demands of mining raise environmental concerns; operators increasingly look to renewable or surplus power.

Anyone considering more than hobby-scale mining should verify the current legal and tax position locally and plan around Malawi's energy realities.

The most significant recent step is the Virtual Assets and Virtual Asset Service Providers Risk Assessment Report, published in June 2025 by the Financial Intelligence Authority, with the RBM and Ministry of Finance and Economic Affairs. It was Malawi's first such assessment and was conducted to meet FATF Recommendation 15. Its headline findings and recommendations:

• Malawi faces a high overall ML/TF/PF risk from virtual assets, due to weak controls, no licensing and growing public use.
• The country should urgently define a clear policy stance on whether to allow or prohibit virtual assets and create the necessary legislation in line with international standards.
• It should strengthen institutional capacity, improve inter-agency and international cooperation, run public-awareness programmes, and develop procedures for investigating and seizing illicit virtual assets.

Earlier, RBM officials had publicly described Malawi as being on the borderline, neither saying yes nor no to crypto, and noted that an outright ban could push activity underground beyond AML oversight. The bank has consistently said it supports the underlying blockchain technology even while warning against crypto trading. Across the region, neighbours have moved to formal regulation, increasing pressure on Malawi to follow. Kenya enacted its Virtual Asset Service Providers Act, 2025, which received presidential assent on 15 October 2025 and came into force on 4 November 2025, placing licensing under the Central Bank of Kenya and the Capital Markets Authority (no VASP licences had been issued at the point the Act took effect). Nigeria has also moved toward formal oversight. A framework for Malawi, whether enabling or restrictive, is plausible in the coming years; watch official RBM and FIA channels for announcements.

Domestic pressure has been part of the picture. Bodies including the ICT Association of Malawi and the Economic Association of Malawi have urged the RBM to allow regulated crypto use rather than an outright ban, and RBM officials have publicly acknowledged the concern that a blanket prohibition could push users underground beyond anti-money-laundering oversight. The RBM has also indicated it is monitoring blockchain developments to judge whether regulatory intervention is needed, while continuing to caution that crypto is not legal tender.

The defining feature of crypto in Malawi is the absence of a safety net. Because crypto is unregulated and unrecognised, there is no compensation scheme, deposit guarantee or financial regulator to appeal to if something goes wrong.

• No consumer protection: losses from hacks, scams or platform failure are generally unrecoverable; the RBM treats crypto scams as criminal matters for the police, not regulated complaints.
• Scam exposure: unregulated markets attract fraud, fake platforms and guaranteed-return schemes. The RBM's warnings followed real incidents in which Malawians lost significant sums.
• Volatility: prices can move sharply; only consider money you can afford to lose entirely.
• Regulatory and policy risk: the position is officially under review, so rules could tighten or formalise with limited notice.
• AML and exchange-control exposure: moving value across borders can intersect with Malawi's exchange-control and anti-money-laundering rules.

Protect yourself by using reputable platforms with strong security and proper KYC, enabling two-factor authentication, holding your own keys for larger amounts, keeping records, and ignoring social-media hype and unsolicited investment offers. This page does not give investment advice or price predictions.

Because Malawi's position is evolving, always confirm the current rules with the primary authorities rather than relying on third-party summaries. The key official sources are:

• Reserve Bank of Malawi for legal-tender status, exchange control, any future VASP licensing and public notices: rbm.mw.
• Financial Intelligence Authority for AML/CFT rules, the Financial Crimes Act and the June 2025 virtual-assets risk assessment: fia.gov.mw.
• Malawi Revenue Authority for tax obligations: mra.mw.

For wider context, compare other countries on our regulation hub. Remember that this article is general information as of 2026 and is not legal advice; verify your specific situation directly with the Reserve Bank of Malawi, the Malawi Revenue Authority and a qualified Malawian professional.

Facts reviewed: 5 August 2026. Page updated: 5 August 2026.

More countries in the region

• Crypto regulation in Eritrea
• Crypto regulation in Ethiopia
• Crypto regulation in Rwanda
• Crypto regulation in Seychelles
• Browse all 205 country guides

Practical guides

• How crypto is taxed
• Setting up a hardware wallet
• Why exchange custody is risky