Crypto
NBFIRA releases Botswana national ML TF risk assessment covering virtual asset sector under revised 2025 framework
NBFIRA published Botswana's 2025 National Risk Assessment report on 16 April 2026, identifying money laundering and terrorist financing risks across the virtual asset sector under the Virtual Assets Act 2022 as amended in 2025, with findings covering VASP supervision and licensing.
· 3 min
Expert analysis before drafting:
1. Legal/supervisory development: NBFIRA published Botswana's 2025 National ML/TF Risk Assessment on 16 April 2026, covering the virtual asset sector under the Virtual Assets Act 2022 as amended in 2025.
2. What is actually new: This is the first NRA to assess virtual asset risks under the revised 2025 legislative framework, meaning the risk findings are anchored to updated VASP licensing and supervision requirements rather than the original 2022 Act alone. It gives the sector its first formal, published threat calibration under the current regime.
3. What remains open: The specific risk ratings assigned to sub-categories of VASPs exchanges, custodians, etc. and any remediation timelines are not confirmed from the summary alone. Whether NBFIRA has issued supervisory guidance or enforcement priorities off the back of the NRA is unclear.
4. Who is affected first: Licensed and licence-seeking VASPs operating in or from Botswana, their compliance functions, and correspondent banks or partners assessing Botswana's AML/CFT framework maturity.
5. Commercial/operational consequence: VASPs will need to align their own business-wide risk assessments to NBFIRA's published findings; international partners and FATF mutual evaluators will treat this NRA as the reference point for Botswana's virtual asset risk posture.
6. What happens next and when: NBFIRA is expected to translate NRA findings into supervisory priorities, inspection thematic areas, and potentially updated licensing conditions for VASPs. Botswana's FATF mutual evaluation timeline will be influenced by how credibly this NRA is implemented.
Best series: Regulatory Catalyst - this is a substantive published framework document with sector-specific findings, premium depth is warranted, and the 800-1200 word range fits the available signal.
---
markdown
---
title: "Botswana's 2025 National Risk Assessment sets the ML/TF baseline for its virtual asset sector"
slug: "botswana-2025-nra-virtual-asset-ml-tf-risk-assessment-nbfira"
excerpt: "NBFIRA's 2025 National Risk Assessment, published in April 2026, is the first to calibrate money laundering and terrorist financing risks across Botswana's virtual asset sector under the revised Virtual Assets Act framework. VASPs operating in or from Botswana now have a formal risk reference point that will shape NBFIRA's supervisory priorities and inform international assessments of the jurisdiction."
category: "Crypto"
serieskey: "regulatory-catalyst"
series: "Regulatory Catalyst"
publicationdate: "17/04/2026"
readtime: "8 min read"
featured: false
premium: true
tags:
- "Botswana"
- "AML/CFT"
- "Virtual Assets"
- "VASP"
- "National Risk Assessment"
- "NBFIRA"
officialsources:
- "NBFIRA | Botswana ML/TF National Risk Assessment Report 2025 | https://www.nbfira.org.bw/wp-content/uploads/2026/04/Botswana-ML-TF-National-Risk-Assessment-Report-2025-issued-2026.pdf"
coverimageprompt: "Aerial view of Gaborone financial district at dusk, muted blues and golds, documentary editorial style"
newsletterline: "Botswana's NBFIRA has published its 2025 NRA covering virtual asset ML/TF risks under the revised Virtual Assets Act - the first formal risk calibration VASPs in the jurisdiction must align to."
linkedinteaser: "Botswana's financial intelligence regulator has published the country's first ML/TF National Risk Assessment to cover virtual assets under its revised 2025 legislative framework. For VASPs operating in or from Botswana, this document now defines the risk baseline that NBFIRA will supervise against - and that FATF evaluators will scrutinise. Key read for compliance teams with Botswana exposure."
---
The Non-Bank Financial Institutions Regulatory Authority published Botswana's 2025 National ML/TF Risk Assessmenthttps://www.nbfira.org.bw/wp-content/uploads/2026/04/Botswana-ML-TF-National-Risk-Assessment-Report-2025-issued-2026.pdf on 16 April 2026. It is the first NRA to assess the virtual asset sector against the Virtual Assets Act 2022 as amended in 2025, giving licensed VASPs and their counterparties a published regulatory baseline that did not previously exist under the current statutory framework.
What the revised framework adds
The Virtual Assets Act 2022 established Botswana's initial VASP licensing and supervision regime. The 2025 amendments - whose scope the NRA now reflects - tightened that framework, and the risk assessment is the first document to map ML/TF vulnerabilities and threats explicitly against the amended obligations rather than the original Act.
That distinction matters practically. An NRA drafted under superseded legislation would carry limited weight with FATF assessors and would give VASPs a misleading picture of where NBFIRA's supervisory attention will fall. By anchoring findings to the revised statute, NBFIRA has produced a document that is current in legal terms and therefore usable as a compliance planning reference.
The supervisory signal embedded in an NRA
National risk assessments are not enforcement documents, but they function as a regulator's published statement of where it believes risk concentrates. For VASPs, an NRA carries two direct obligations. First, the Financial Action Task Force's Recommendation 1 requires countries to take a risk-based approach, and licensed entities operating in a jurisdiction are expected to align their own business-wide risk assessments to national findings. A VASP whose internal risk rating for a product or customer segment sits materially below what the NRA identifies nationally will need to justify that divergence.
Second, NBFIRA will use its own published findings to set thematic inspection priorities. Areas the NRA rates as higher risk are the areas likely to appear on examination schedules first. Compliance teams that read the NRA only as a background document rather than a forward indicator of supervisory focus will find themselves under-prepared.
VASP licensing under examination
The NRA covers VASP supervision and licensing specifically, which signals that NBFIRA is not treating virtual assets as a peripheral sector appended to a broader financial services assessment. The inclusion of licensing as a risk area suggests the authority has identified gaps or vulnerabilities in the licensing perimeter itself - whether in the completeness of applications, the adequacy of fit-and-proper assessments, or the coverage of business models that may fall at the edge of the statutory definition.
For firms that have applied for a VASP licence or are operating under an existing one, the NRA's findings on licensing risk are likely to translate into closer scrutiny of licence conditions, enhanced information requests, and potentially revised requirements around beneficial ownership disclosure or capital adequacy.
The correspondent banking dimension
Botswana-based VASPs seeking banking relationships with domestic or international institutions will find that the NRA changes the due diligence dynamic. Correspondent banks and payment partners conducting country-level risk assessments of Botswana's virtual asset sector will now have a formal regulatory document to cite. Where the NRA identifies elevated risk in specific VASP categories, those firms should expect that correspondent banks will require greater evidence of controls before opening or maintaining accounts.
Conversely, a credible, current NRA that demonstrates NBFIRA's active oversight of the sector can support the argument that Botswana's regime meets a minimum threshold of supervisory seriousness - which is itself a factor that banks weigh when assessing jurisdiction risk.
What the NRA does not resolve
Published NRAs typically set sector-level risk ratings but leave firm-level risk calibration to supervisory guidance issued separately. What the 2025 NRA is unlikely to specify is how NBFIRA expects individual VASPs to translate national risk findings into their own customer risk scoring, transaction monitoring thresholds, or suspicious activity reporting triggers.
That translation layer - from NRA finding to firm-level control - is where implementation pressure will sit. NBFIRA may issue sector-specific guidance or typologies documents in the months following the NRA's publication, as several FATF-member jurisdictions do. Whether it intends to do so, and on what timeline, is not confirmed by the assessment itself.
Why the timing matters for FATF purposes
Botswana's progress on AML/CFT compliance is subject to ongoing review within the Eastern and Southern Africa Anti-Money Laundering Group ESAAMLG, the FATF-style regional body with jurisdiction over the country. A current, legally-grounded NRA that addresses virtual assets is a prerequisite for a credible mutual evaluation outcome. Jurisdictions that enter a mutual evaluation without an up-to-date NRA covering emerging sectors are routinely marked down on technical compliance and effectiveness.
Publishing the NRA in April 2026 positions Botswana to demonstrate active risk identification ahead of any upcoming evaluation cycle. For VASPs operating in the jurisdiction, a favourable mutual evaluation outcome reduces the risk of Botswana being placed on an FATF grey list - a designation that would significantly complicate cross-border business relationships and correspondent banking access.
Where implementation pressure will sit
The firms most immediately affected are VASPs licensed under the Virtual Assets Act or currently in the licensing pipeline. Their compliance obligation is to review the NRA findings, identify any divergence between NBFIRA's national risk picture and their own internal assessments, and document the rationale for any differences.
Firms that have not conducted a formal business-wide risk assessment since the 2025 Act amendments should treat the NRA publication as the trigger to do so now. An internal risk assessment that predates the revised legislative framework and makes no reference to national findings will be difficult to defend in an examination.
What to watch
The key next development is whether NBFIRA follows the NRA with sector-specific supervisory guidance for VASPs - particularly on customer due diligence standards, transaction monitoring calibration, and suspicious activity reporting for virtual asset transactions. That guidance, if issued, would convert the NRA's risk ratings into operational requirements with direct compliance deadlines. The other milestone to monitor is ESAAMLG's next engagement with Botswana, which will indicate how the NRA feeds into the country's formal evaluation status.
Sources
- NBFIRA - Botswana ML/TF National Risk Assessment Report 2025https://www.nbfira.org.bw/wp-content/uploads/2026/04/Botswana-ML-TF-National-Risk-Assessment-Report-2025-issued-2026.pdf