Skip to content

South Africa: Hand Over Your Private Keys or Go to Jail

South Africa wants every crypto holder to hand over private keys, passwords and PINs to border agents on request. Refusal risks five years in prison.

Updated 25 Aug 2026 4 min read How we work

A 1961 law, a 2026 problem

It all starts with a regulation written under apartheid. The Exchange Control
Regulations of 1961, created to stop capital flight from a regime under
international pressure, are finally being replaced. South Africa's National
Treasury has published the Draft Capital Flow Management Regulations 2026,
a framework meant to modernize the country's controls on capital flows.
So far, nothing unusual. The problem is that crypto assets ended up inside it,
and not as honored guests.

For the first time in South Africa's history, crypto assets are being treated
like gold and foreign currency: "controlled capital," subject to the same
reporting, restriction and surveillance rules. A regulatory leap that has shaken
the entire ecosystem, coming from Africa's second-largest crypto market.

What the regulation says

  • Mandatory declaration of crypto assets held above a threshold
    (not yet specified, estimated at around R50,000 / about $2,700) within 30 days
  • Transactions above the threshold only through authorized providers
  • Ban on exporting crypto without explicit Treasury authorization
  • Search and seizure powers for officials at entry and exit ports
  • Obligation to hand over passwords, PINs and private keys on request from agents
  • Refusal is a criminal offense punishable by a fine of up to R1 million, five years in prison,
    or the equivalent value of the crypto involved (whichever is higher)
REGULATION 25(5): THE MOST CONTROVERSIAL POINT
An enforcement agent can demand that any person hand over
passwords, PINs, private keys or any other information needed to
access their digital assets, without a court order.
Refusing is a criminal offense.

"Unconstitutional": the industry's response

VALR, one of the country's largest and most regulated exchanges, called
the provisions "excessively restrictive," warning that they "undermine
the very nature of crypto assets and the practical right to self-custody."
Cape Crypto went further, calling it openly unconstitutional: a government
that requires you to declare your assets and then restricts their use
does not recognize property rights, it merely tolerates them, conditionally.
Gareth Jenkinson, a widely followed voice in the local community, used
even blunter words: this is the apparatus of control doing its best
to stop us from using decentralized money.

Chainalysis Data 2025

Crypto volume in Sub-Saharan Africa — share by country

Nigeria 35% South Africa 20% Kenya 12% Ghana 8% Others 25%
Nigeria 35%, South Africa 20%, Kenya 12%, Ghana 8%, Others 25%.

The criticism also touches on constitutional grounds. Section 35 of the
South African Constitution protects the right against self-incrimination.
Section 25 protects property rights. Handing over private keys effectively
means handing over control of an entire digital estate, a point several
legal observers consider unlikely to survive a challenge before the
Constitutional Court.

The technical problem no law can solve

Bitcoin doesn't fit in a suitcase. You can cross any border in the world
carrying a billion dollars in crypto inside your own memory, twelve
words, a seed phrase. No search can find it. No agent can seize it.
Applying the logic of physical goods control to an asset that is natively
digital and borderless is the contradiction at the heart of the entire
proposal. The regulation is written as if crypto assets behaved like
gold bars, but they don't, and they never will.

Did you know?
A 12-word seed phrase can be memorized. No physical surveillance system
can detect it. South Africa's proposal runs into a structural
technical limit, not a regulatory one.

The context: Africa's second-largest crypto market

South Africa is no marginal player in the crypto ecosystem: it is the
continent's second-largest market by volume, after Nigeria, with on-chain
flows dominated mainly by institutions and professionals (Chainalysis).
It ended up on the FATF grey list in 2023 over anti-money-laundering
gaps, only coming off it at the end of 2025. The regulation is partly
a response to that international pressure.

What happens now: two deadlines, zero clarity

The deadline for public comments is confused even at the
bureaucratic level. The Government Gazette lists 18 May 2026 (30 days
after publication). The Treasury's press release says 10 June 2026.
The two documents even list different email addresses. A government
proposing five years in prison for non-compliance couldn't manage to
coordinate an internal date, which says everything about how solid the proposal is.

Anyone wanting to submit comments should send them to both
addresses, treating 18 May as the safer deadline.

You have until 18 May 2026 to submit official comments
to South Africa's National Treasury on the Draft Capital Flow Management
Regulations 2026. The alternative deadline given by the Treasury is
10 June 2026: send to both addresses to be safe.

The global picture: South Africa against the world

The direction is the opposite of almost everything happening elsewhere.
In Europe, the MiCA Regulation aims for transparency without criminalizing
self-custody. In the United States, SEC Chair Paul Atkins has just
announced an Innovation Exemption that opens the door to on-chain trading
of tokenized securities. Australia and Singapore are building frameworks
that attract capital and talent. South Africa, with this draft, risks
doing exactly the opposite, driving away those who have already chosen
to build within its local crypto ecosystem.

Consent Preferences