Ghana’s Securities and Exchange Commission has admitted 11 crypto-asset companies into a regulatory sandbox, marking the first operational step under the country’s Virtual Asset Service Providers Act 2025 — the legislation that formally legalised cryptocurrency activity in Ghana. The admissions, confirmed on March 10 and 11, 2026, move Ghana from legislation to live regulation faster than most observers expected.
The sandbox is not a soft landing. SEC Ghana has been explicit that three categories of rule are non-negotiable regardless of sandbox status: anti-money laundering and counter-financing of terrorism controls, fit-and-proper requirements for directors and key personnel, and client money protections. Everything else — reporting frequency, capital requirements, operational procedures — is subject to relaxation during the supervised period to allow firms to build and test their compliance frameworks without being immediately held to the full weight of a regime designed for mature, fully operational businesses.
That distinction is what makes a sandbox meaningful. Ghana is not granting exemptions from the rules that matter most. It is giving firms room to grow into the others.
What the VASP Act 2025 Created
The Virtual Asset Service Providers Act 2025 was Ghana’s comprehensive answer to the question of how to regulate an industry that had been operating in legal ambiguity for years. The Act established a dual-regulator framework that reflects the two-dimensional nature of crypto assets: they function simultaneously as investment instruments and as payment tools.
SEC Ghana holds primary regulatory authority over virtual asset service providers — exchanges, brokers, investment platforms, custody services — as investment-side entities. The Bank of Ghana acts as Virtual Asset Regulatory Office (VARO), overseeing the payment and monetary system dimensions of crypto activity. The two institutions are required to coordinate on licensing decisions, enforcement actions, and policy, a structure designed to prevent regulatory gaps and duplication simultaneously.
The 11 firms admitted to the sandbox represent the range of business models the Act covers: exchanges facilitating buy-sell activity, wallet providers holding customer assets, payment platforms using crypto rails for cross-border transfers, and custody services. A number of these firms had been operating informally or under letters of no-objection from the Bank of Ghana — the sandbox formalises their position while the full licensing pathway is completed.
The Path from Sandbox to Full Licence
Sandbox duration in most comparable jurisdictions runs 12 to 24 months. During that period, firms operate under a supervised exemption — they can serve customers, process transactions, and build their compliance infrastructure, but they are subject to heightened supervisory scrutiny and reporting obligations to SEC Ghana. At the end of the period, the regulator makes one of three determinations:
- Full licensing: The firm has demonstrated it can meet all VASP Act requirements and is granted a permanent operating licence
- Conditional licensing: The firm receives a licence subject to time-bound remediation of identified compliance gaps
- Exit: The firm has not demonstrated sufficient compliance capability and must wind down regulated activities
Firms that entered the sandbox knowing they cannot ultimately meet full licensing requirements are — in theory — wasting everyone’s time. In practice, the sandbox serves a secondary purpose: it gives regulators detailed visibility into how these businesses actually operate, which informs the calibration of licensing requirements before they are finalised. Ghana’s sandbox is as much a learning exercise for SEC Ghana as it is for the 11 admitted firms.
What Firms Must Demonstrate
The non-negotiable requirements give a clear picture of what Ghana’s crypto regulator considers foundational. On AML and CFT, firms must have written policies, transaction monitoring systems, and documented suspicious activity reporting procedures in place from day one. The Bank of Ghana’s Financial Intelligence Centre is the supervisory counterpart on this dimension.
Fit-and-proper requirements apply to directors, chief executives, and anyone in a key function role — compliance, technology, finance. Ghana’s test follows the broadly accepted international standard: honesty, competence, and financial soundness. Firms with founding teams that include individuals who have been directors of failed regulated entities, or who have criminal records involving financial crime, will not be admitted regardless of the strength of their technology.
Client money rules require that customer assets held by a VASP are segregated from the firm’s own assets, cannot be used for the firm’s operational purposes, and are held in a manner that allows return to customers in a firm failure scenario. This is the rule that the collapse of FTX, Celsius, and similar platforms demonstrated the global industry had most egregiously ignored. Ghana is making it non-negotiable from the first day of operation.
Why Ghana Is Now the Regional Benchmark
West Africa’s three major economies have each taken a different approach to crypto regulation, and the contrast is now sharp enough to be instructive.
Nigeria launched the Securities and Exchange Commission’s VARA framework and subsequently issued guidelines for Virtual Asset Service Providers, but enforcement has been inconsistent and a regulatory standoff with major exchanges — including the high-profile Binance episode in 2024 — created a chilling effect on the market. Nigeria has the largest crypto user base in West Africa but not yet the clearest regulatory pathway.
Ghana’s VASP Act 2025 followed by an operational sandbox within months of passage represents a more structured sequencing: legislate comprehensively, then operationalise methodically. Kenya, further east, is still working through a VASP Bill that has not yet passed — making Ghana the first Anglophone sub-Saharan African country to have both a comprehensive crypto law and an active licensing process in place simultaneously.
For regional and international firms looking to establish a compliant African crypto operation, Ghana has just become the most legible entry point. A VASP licence issued by SEC Ghana under a completed statutory framework carries weight that a no-objection letter or an informal arrangement with a central bank simply cannot match. For firms considering where to base their West African operations and compliance architecture, the admission of 11 firms to Ghana’s sandbox is the starting gun.
What Comes Next
SEC Ghana has not published a public list of the 11 admitted firms as of this writing — a transparency gap that the regulator should address. Markets function better when participants and observers can see who is operating under supervision and who is not. The names of sandbox entrants are a matter of public interest, particularly for consumers who may be interacting with these platforms.
The Commission is also expected to publish detailed guidance on the full licensing application process, including capital adequacy thresholds, technology and cybersecurity requirements, and the reporting framework that sandbox firms and ultimately licensed VASPs must comply with. That guidance will determine whether Ghana’s sandbox produces a cohort of well-capitalised, professionally managed crypto operators — or whether it simply validates the incumbents who had the resources to navigate a complex application process in the first place.
Either way, the region is watching. The VASP Act 2025 sandbox is Africa’s most structurally complete attempt yet to bring crypto regulation from statute into practice. What happens to those 11 firms over the next 12 to 24 months will define how the next generation of African crypto regulation is designed.
UphivaBETAR
