Uganda UG

Uganda's virtual-asset sector presents a stark enablement gap: substantial informal flows persist despite a formal conversion ban and the absence of any licensing perimeter. According to a Financial Intelligence Authority risk assessment reported via press coverage, Ugandans moved $564m in virtual-asset inflows and $546m in outflows between July 2020 and June 2024. This scale of activity occurred even as Bank of Uganda's Directive NPSD 306, issued 29 April 2022, bars entities licensed under the National Payment Systems Act from converting cryptocurrency into official currency or mobile money, a directive subsequently upheld by Uganda's High Court in 2023. The persistence of large informal flows alongside an enforced conversion ban is itself an analytically significant finding: it demonstrates that prohibition without a corresponding licensing and monitoring perimeter does not eliminate underlying demand, it merely displaces it outside the visibility of the formal financial system.

Against this backdrop, Bank of Uganda's Governor used a BIS-hosted keynote address in November 2025, published in February 2026, to announce a forthcoming six-pillar VASP regulatory framework. The six pillars as announced are licensing and fit-and-proper standards, client-asset protection, AML/CFT compliance including the FATF Travel Rule, cybersecurity, market integrity, and transparency and data reporting. This is a Tier 1 source confirming the announcement itself, though the framework remains at announcement stage only, with no draft legislation published as of this cycle. If enacted broadly as described, the framework would represent a substantial architectural shift from the current AML-registration-only perimeter toward a genuine licensing and supervisory regime, and would be the first Ugandan instrument to introduce a FATF Travel Rule mechanism for virtual-asset transfers.

The control-gap signal here is structurally significant under a three-pillar analytical lens: the AML dimension is partially addressed through FIA's accountable-person registration requirement for VASPs, but the absence of any licensing regime means CTF and CPF risk in the virtual-asset space is effectively unmonitored beyond whatever visibility FIA's registration perimeter provides. The scale of informal flows identified in the FIA risk assessment, if accurate, indicates this gap is material rather than marginal.

Outlook

The determinative question for the coming cycle is whether the announced six-pillar framework advances from keynote rhetoric to draft legislative text, and whether independent retrieval of the underlying FIA National ML/TF Risk Assessment on Virtual Assets becomes possible, which would allow the informal-flow scale finding to be corroborated beyond a single secondary press source. Until either development occurs, Uganda's virtual-asset sector should be read as a jurisdiction where formal prohibition and substantial informal activity coexist, with the licensing vacuum as the structural feature explaining that coexistence.

Uganda's traditional AML/CTF regime presents a stable and FATF-validated posture this cycle. Uganda was removed from the FATF grey list in February 2024 after completing a structured action plan addressing identified deficiencies, and Uganda's own Ministry of Finance, Planning and Economic Development confirms that the country successfully completed reforms for combating money laundering, countering terrorism financing, and proliferation financing in line with international standards. This Tier 1 confirmation is corroborated by press reporting of the relevant FATF plenary statement, which recorded Uganda's removal from the list of jurisdictions under increased monitoring alongside Barbados, Gibraltar, and the United Arab Emirates. Uganda remains absent from the 2026 grey list, indicating the delisting has held stable through at least two years of subsequent monitoring cycles.

A 2024 mutual evaluation follow-up assessment is reported, via a commercial compliance database at a lower evidentiary tier, to have found Uganda rated Compliant or Largely Compliant on 25 of the FATF's 40 Recommendations. This figure has not been independently corroborated against a primary FATF or national publication this cycle and should be treated as indicative pending stronger sourcing, though it is broadly consistent with the confirmed grey-list exit.

On sanctions administration, Uganda's Financial Intelligence Authority applies the OFAC-SDN List, UN Security Council Resolution 1267, and UN Security Council Resolution 1373 lists on an administrative basis, but maintains no autonomous sanctions list of its own. This is a common architectural choice among jurisdictions that rely on incorporation of externally maintained designations rather than independent listing authority, and it should be read as a structural feature of Uganda's sanctions-implementation architecture rather than a gap in itself.

Weighed against this traditional-regime stability is the crypto-sector enablement gap documented separately under Crypto, Digital Assets, and Financial Innovation: Uganda's AML/CTF success in the conventional financial sector has not yet extended to bringing the virtual-asset sector's substantial informal flows within a comparable supervisory perimeter.

Outlook

Uganda's grey-list exit is likely to remain stable absent a material new deficiency finding, and the near-term AML/CTF story for Uganda is less about the traditional regime, which appears settled, than about whether the announced six-pillar VASP framework closes the parallel gap in the virtual-asset space. Independent corroboration of the reported MER follow-up compliance figures at a primary-source level would strengthen confidence in the overall compliance picture for the coming cycle.