# South Africa

> South Africa (FSCA · Financial Intelligence Centre · Information Regulator): A travel rule that starts at any value above zero. Region: Middle East & Africa. Restricts anonymity: Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.

Part of the Soda Labs Privacy Hub regulation map, which reads the instruments
themselves rather than summarising the summaries: https://www.sodalabs.xyz/privacy-hub/regulation

## Key facts

- Entry type: Jurisdiction
- Region: Middle East & Africa
- Subject: A travel rule that starts at any value above zero
- Authority: FSCA · Financial Intelligence Centre · Information Regulator
- Stance on on-chain confidentiality: Restricts anonymity. Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.
- Tags: zero threshold, Directive 9, unhosted risk-based, POPIA
- Canonical page: https://www.sodalabs.xyz/privacy-hub/regulation/jur-south-africa

## What it actually says

The most precisely drafted travel rule in this section, and the one that leaves least room. Where other regimes debate where to set a minimum, South Africa defined a qualifying transfer as any crypto asset transfer above zero, then used its R5,000 line to reduce how much data is required rather than whether the rule applies at all. Providers must refuse to execute where they cannot comply. Self-custody is treated the way most of the world treats it (a risk category requiring documented policy, not a prohibition), and 2026 guidance singles out peer-to-peer and wallet-to-wallet transfers as higher risk. The tightening arrived alongside the country's exit from the FATF grey list in October 2025, which is the usual pattern.

## The instruments that matter

- **Directive 9 of 2024, in operation 30 April 2025**: defines a qualifying transfer as one involving a crypto asset which is any value above zero, so full originator identification travels with every single transfer
- **Below R5,000**: a reduced dataset applies and need not be verified absent money-laundering suspicion; the threshold reduces the data, it does not switch the rule off
- **Paragraph 4.8**: bars execution of a transfer where the rule cannot be met
- **Section 8 and PCC 61 of 2026**: unhosted wallets require documented risk-based policies rather than prohibition, with peer-to-peer and unhosted-to-unhosted transfers flagged as heightened risk

## Sources

- [Directive 9 on the travel rule](https://www.fic.gov.za/wp-content/uploads/2024/11/Directive-9-Travel-rule-relating-to-crypto-asset-transfers.pdf)
- [PCC 61 of 2026](https://www.fic.gov.za/wp-content/uploads/2026/03/2026.3-PCC-_Travel-Rule-for-CASPS.pdf)

## Related entries

- [Bahrain](https://www.sodalabs.xyz/privacy-hub/regulation/jur-bahrain): A listing test written against effects, not asset names
- [Kenya](https://www.sodalabs.xyz/privacy-hub/regulation/jur-kenya): The ban written into primary legislation, not a rulebook
- [Qatar](https://www.sodalabs.xyz/privacy-hub/regulation/jur-qatar): Exclusion by perimeter rather than prohibition
- [South Korea](https://www.sodalabs.xyz/privacy-hub/regulation/jur-south-korea): Identity-maximalist, and exporting the model
- [United Arab Emirates](https://www.sodalabs.xyz/privacy-hub/regulation/jur-uae): The most explicit prohibition anywhere in this section
- [Ghana](https://www.sodalabs.xyz/privacy-hub/regulation/jur-ghana): The regulator that put self-custody in writing