Uganda: crypto & digital assets regulation

Partially regulated

Uganda: No specific crypto license; CMA regulates securities aspects under Fit & Proper framework

Also involved
Bank of Uganda (BoU) (payments/banking) · Uganda Communications Commission (UCC) (telecoms)
Core law
Capital Markets Act (Cap 286)
Entry capital
Approval timeline
Customer assets
No specific custodial regime; general fiduciary duties apply
Data protection
Data Protection and Privacy Act 2019 · Office of the Data Protection Officer
Sandbox
Yes - EASRA regional sandbox framework

Uganda does not have a dedicated licensing regime for crypto assets or virtual asset service providers (VASPs). The Capital Markets Authority (CMA) is the primary regulator for activities that constitute securities or derivatives. The CMA has adopted regional EASRA frameworks for fit-and-proper assessments and regulatory sandboxes. The Bank of Uganda (BoU) maintains a restrictive stance on crypto as legal tender but has not issued a comprehensive ban on all crypto activities, creating a regulatory gap for non-securities crypto services.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Exchange / trading platformUncertainverify with regulator

Unclear if spot crypto exchanges are classified as securities dealers

Custody of client assetsUncertainverify with regulator

No specific custodian license for crypto; general trust law may apply

Token issuance / public offeringLicenceSecurities Dealer License[1][2]

If tokens are deemed securities, CMA licensing and prospectus approval required

CMA
Broker-dealer / OTC deskUncertainverify with regulator

OTC desks may fall under securities dealer rules if trading securities

Stablecoin issuanceProhibited

BoU prohibits use of crypto as legal tender; stablecoins face high scrutiny

BoU
Crypto payments acceptanceRestricted

BoU restricts crypto payments; traditional payment licenses required for fiat

BoU
Mining / staking servicesUnregulatedverify with regulator

No specific regulation for mining or staking services

Advisory / portfolio managementUncertainverify with regulator

Crypto advisory may require CMA license if involving securities advice

New — what changed recently

  • 2025-06-02EASRA Regional Framework AdoptionUganda's CMA agreed to regional ESG and carbon credit frameworks, signaling alignment with broader East African fintech standards.[1]
  • 2018-07-18EASRA Fit & Proper & Sandbox AgreementAdoption of regional fit-and-proper criteria and regulatory sandbox framework for fintech and blockchain innovation.[2]

Market-entry checklist

  1. 1Determine if tokens are securitiesConsult CMA to assess if token issuance falls under the Capital Markets Act requiring a prospectus.
  2. 2Apply for CMA Fit & ProperEnsure key personnel meet the EASRA regional fit-and-proper assessment criteria for market practitioners.
  3. 3Engage BoU on paymentsClarify with the Bank of Uganda that crypto is not legal tender and plan fiat on-ramps via licensed banks.
  4. 4Register with UCCObtain necessary telecommunications and internet service provider licenses from the Uganda Communications Commission.
  5. 5Implement AML/CFT policiesAdopt robust Anti-Money Laundering and Counter-Terrorism Financing frameworks aligned with FATF recommendations.
This guide is compiled automatically from 2 primary-source documents published by Uganda's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.