# Rwanda

> Rwanda (Capital Market Authority · National Bank of Rwanda): Anonymity defined out of the regime rather than banned. Region: Middle East & Africa. Confidential with disclosure: Confidentiality is workable so long as the regulated firm can identify the parties and disclose on demand. Encrypted amounts are not the thing being restricted.

Part of the Soda Labs Privacy Hub regulation map, which reads the instruments
themselves rather than summarising the summaries: https://www.sodalabs.xyz/privacy-hub/regulation

## Key facts

- Entry type: Jurisdiction
- Region: Middle East & Africa
- Subject: Anonymity defined out of the regime rather than banned
- Authority: Capital Market Authority · National Bank of Rwanda
- Stance on on-chain confidentiality: Confidential with disclosure. Confidentiality is workable so long as the regulated firm can identify the parties and disclose on demand. Encrypted amounts are not the thing being restricted.
- Tags: scope exclusion, mixers licensable, Law 023/2026, regulations pending
- Canonical page: https://www.sodalabs.xyz/privacy-hub/regulation/jur-rwanda

## What it actually says

Rwanda uses a technique worth understanding because it is different from a ban. Rather than prohibiting anonymity-enhanced assets, the law writes them out of the definition of a virtual asset altogether, alongside NFTs, algorithmic stablecoins and central bank digital currencies. The effect is that no licensed provider can deal in them, because they are not the thing the licence covers. Whether dealing in them is otherwise lawful is left unanswered, which is a meaningfully different position from prohibition. More surprising is the treatment of mixers: operating one without authorisation is an offence, and the drafting implies such services could in principle be authorised. Very few regimes anywhere treat mixing as licensable rather than forbidden.

## The instruments that matter

- **Law nº 023/2026 of 25 May 2026, gazetted 28 May 2026**: Rwanda's first law regulating virtual asset business, with the Capital Market Authority as lead regulatory authority
- **Anonymity-enhanced assets are excluded from the definition**: the definition of virtual asset expressly excludes them, alongside central bank digital currencies, NFTs, algorithm-based stablecoins and closed-loop systems, so they sit outside the licensed perimeter entirely
- **Mixers are licensable, not banned**: operating mixer or tumbler services, mining facilities or crypto ATMs without authorisation is an offence, which implies such services can in principle be authorised
- **Travel rule mandatory**: originator and beneficiary information requirements apply to virtual asset transfers, with suspicious transaction reporting regardless of amount
- **Implementing regulations not yet issued**: licence categories remain undefined and transition arrangements for existing operators are unspecified

## Sources

- [Rwanda gazettes first virtual asset law](https://www.ensafrica.com/news/detail/11972/rwanda-gazettes-first-law-regulating-virtual-)
- [Analysis of Law nº 023/2026](https://www.mondaq.com/financial-services/1801206/rwanda-gazettes-first-law-regulating-virtual-asset-business)

## Related entries

- [Ghana](https://www.sodalabs.xyz/privacy-hub/regulation/jur-ghana): The regulator that put self-custody in writing
- [Israel](https://www.sodalabs.xyz/privacy-hub/regulation/jur-israel): Light on-chain, heavy on data protection
- [Mauritius](https://www.sodalabs.xyz/privacy-hub/regulation/jur-mauritius): A mature licensing regime that never mentions anonymity
- [Nigeria](https://www.sodalabs.xyz/privacy-hub/regulation/jur-nigeria): Securities-first, with banking access restored
- [Seychelles](https://www.sodalabs.xyz/privacy-hub/regulation/jur-seychelles): No anonymity rule, but the offshore route is closing
- [Bahrain](https://www.sodalabs.xyz/privacy-hub/regulation/jur-bahrain): A listing test written against effects, not asset names