South Africa brings crypto inside exchange control: what the draft Capital Flow Management Regulations mean

South Africa's National Treasury has published draft regulations that would formally subject crypto assets to the country's exchange control framework — the first time the government has moved to govern cross-border digital asset flows under capital controls rather than purely through conduct licensing.

The trigger was the 2026 Budget Speech, delivered by Finance Minister Enoch Godongwana on 25 February 2026. Godongwana announced that amendments to the Exchange Control Regulations of 1961, under the Currency and Exchanges Act 9 of 1933, would be published for public comment. National Treasury acted on that announcement on 17 April 2026, publishing the draft Capital Flow Management Regulations, 2026 (Government Notice No. 54520, Government Gazette No. 7375). The draft regulations would replace the Exchange Control Regulations of 1961 in their entirety. The comment period, initially set to close 18 May, has been extended to 30 June 2026. National Treasury has also signalled that a complementary cross-border crypto asset manual will be released for comment separately, to define which transactions trigger capital flow management obligations.

What exchange control actually is

The Exchange Control Regulations of 1961 are the statutory instrument through which South Africa has historically managed the cross-border movement of capital — covering foreign currency, securities, and transfers out of the country. The enabling legislation is the Currency and Exchanges Act 9 of 1933. Practically, the framework works through a system of authorised dealers (commercial banks) and National Treasury approval thresholds. South African residents can transfer funds offshore within annual discretionary allowances; amounts above those limits require Reserve Bank or Treasury approval. Unauthorised capital outflows are a criminal offence.

The draft Capital Flow Management Regulations extend this architecture to crypto assets. The draft treats crypto as capital alongside foreign currency and gold, requiring disclosure of holdings above a threshold to be determined by the Finance Minister. Where that threshold is crossed, holders would be required to sell assets to National Treasury or an authorised dealer within 30 days at a price not below market value, settled in rand. Enforcement provisions in the draft include powers to search devices and require disclosure of private keys, with non-compliance punishable by fines up to R1 million or imprisonment up to five years.

How this differs from FSCA licensing

South Africa already has a functioning crypto conduct regime. The Financial Sector Conduct Authority (FSCA) classified crypto assets as financial products under the Financial Advisory and Intermediary Services (FAIS) Act in 2022. From June 2023, firms providing financial services related to crypto — advice, intermediary services, investment management — have been required to hold a Financial Services Provider (FSP) licence with explicit crypto-asset authorisation under FAIS Subcategory 1.28. By June 2024, 138 entities held CASP licences.

The FSCA framework governs conduct: who can offer services, what fit-and-proper standards apply, what AML and consumer protection obligations attach to licensed entities. It does not regulate the movement of capital itself. An FSP-licensed exchange can facilitate a client's crypto transfer abroad without any exchange control obligation arising under the current FAIS regime.

The Capital Flow Management Regulations would add a separate and structurally distinct layer. Where the FSCA framework asks whether an entity is properly authorised, the exchange control framework asks whether a capital movement is permitted at all. An SA resident transferring bitcoin to an offshore wallet, or holding crypto in a foreign custody arrangement, would face obligations under the new framework regardless of whether their domestic service provider is FSCA-licensed. The two regimes operate on different axes — entity conduct versus capital flows — and both would apply simultaneously.

Status and what comes next

The draft regulations are not yet law. They are out for public comment until 30 June 2026. Promulgation of final regulations would replace the Exchange Control Regulations of 1961 and implement the capital flow management framework the minister outlined in the Budget Speech. National Treasury's statement notes that the cross-border crypto asset manual — which will define the precise transaction perimeter — has not yet been published, meaning the full operational scope of the framework remains unclear.

The distinction between what constitutes a cross-border crypto transaction (triggering obligations) versus a domestic one is not yet defined. That definition matters: self-custodied crypto, offshore-domiciled exchanges used by SA residents, and multi-chain protocols all sit in grey space until the manual is published.

Regional context

Kenya and Nigeria are both advancing crypto regulatory frameworks in 2026, but neither has moved to apply exchange control mechanisms. Kenya's National Treasury published draft VASP Regulations 2026 for public comment, developed with the Central Bank of Kenya and Capital Markets Authority, focused on licensing, AML compliance, and transaction oversight. Nigeria's approach similarly works through licensing standards for virtual asset exchange platforms, built on the country's existing payments system frameworks.

Both approaches ask the licensing question: which entities are authorised to operate. South Africa is asking a different question: which capital movements are permitted. That distinction is not semantic. Exchange control is an instrument of macroeconomic policy — it governs what residents can do with their wealth, not just who can serve them. Applying it to crypto represents SA's government treating digital assets as the same species of cross-border capital risk that has governed rand management since 1961.

Africa's most developed formal financial market has moved crypto from a conduct-regulated product into the capital account. The practical consequences — declaration obligations, forced conversion thresholds, private-key disclosure powers — will be determined by final regulations and the still-unpublished operational manual. For operators and institutional participants, the open comment period through 30 June is the primary mechanism for influencing both.