Uganda: crypto & digital assets regulation

Partially regulated

Uganda: No specific crypto license; CMA regulates securities aspects under Fit & Proper framework

Also involved
Bank of Uganda (BoU) (payments/banking) · Uganda Communications Commission (UCC) (telecoms)
Core law
Capital Markets Act (Cap 286)
Entry capital
—
Approval timeline
—
Customer assets
No specific custodial regime; general fiduciary duties apply
Data protection
Data Protection and Privacy Act 2019 · Office of the Data Protection Officer
Sandbox
Yes - EASRA regional sandbox framework
Monthly snapshots:2026-092026-08

Uganda does not have a dedicated licensing regime for crypto assets or virtual asset service providers (VASPs). The Capital Markets Authority (CMA) is the primary regulator for activities that constitute securities or derivatives. The CMA has adopted regional EASRA frameworks for fit-and-proper assessments and regulatory sandboxes. The Bank of Uganda (BoU) maintains a restrictive stance on crypto as legal tender but has not issued a comprehensive ban on all crypto activities, creating a regulatory gap for non-securities crypto services.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Exchange / trading platformUncertainverify with regulator

Unclear if spot crypto exchanges are classified as securities dealers

———
Custody of client assetsUncertainverify with regulator

No specific custodian license for crypto; general trust law may apply

———
Token issuance / public offeringLicenceSecurities Dealer License[1][2]

If tokens are deemed securities, CMA licensing and prospectus approval required

——CMA
Broker-dealer / OTC deskUncertainverify with regulator

OTC desks may fall under securities dealer rules if trading securities

———
Stablecoin issuanceProhibited

BoU prohibits use of crypto as legal tender; stablecoins face high scrutiny

——BoU
Crypto payments acceptanceRestricted

BoU restricts crypto payments; traditional payment licenses required for fiat

——BoU
Mining / staking servicesUnregulatedverify with regulator

No specific regulation for mining or staking services

———
Advisory / portfolio managementUncertainverify with regulator

Crypto advisory may require CMA license if involving securities advice

———

New — what changed recently

  • 2025-06-02EASRA Regional Framework Adoption — Uganda's CMA agreed to regional ESG and carbon credit frameworks, signaling alignment with broader East African fintech standards.[1]
  • 2018-07-18EASRA Fit & Proper & Sandbox Agreement — Adoption of regional fit-and-proper criteria and regulatory sandbox framework for fintech and blockchain innovation.[2]

Market-entry checklist

  1. 1Determine if tokens are securitiesConsult CMA to assess if token issuance falls under the Capital Markets Act requiring a prospectus.
  2. 2Apply for CMA Fit & ProperEnsure key personnel meet the EASRA regional fit-and-proper assessment criteria for market practitioners.
  3. 3Engage BoU on paymentsClarify with the Bank of Uganda that crypto is not legal tender and plan fiat on-ramps via licensed banks.
  4. 4Register with UCCObtain necessary telecommunications and internet service provider licenses from the Uganda Communications Commission.
  5. 5Implement AML/CFT policiesAdopt robust Anti-Money Laundering and Counter-Terrorism Financing frameworks aligned with FATF recommendations.
This guide is compiled automatically from 2 primary-source documents published by Uganda's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-10-01). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.