South Africa’s National Treasury has recently published the Draft Capital Flow Management Regulations, 2026 in the Government Gazette. The regulations are designed to replace the Exchange Control Regulations of 1961, rules first written in the immediate aftermath of Sharpeville to stem capital flight from the apartheid economy, and to drag crypto assets, for the first time, formally inside the country’s capital control framework.
The draft has triggered an unusually sharp reaction. Industry exchanges are calling it overly restrictive. Legal commentators are flagging constitutional red lines. Bitcoiners are comparing the proposed regime, only half-jokingly, to North Korea’s. And the public has been given somewhere between 30 and 53 days to respond, with Treasury itself unable to agree on which.
What the draft actually does
Strip away the macroeconomic framing and three core mechanics emerge.
Crypto is reclassified as “capital.” The 1961 regulations were never designed to contemplate digital bearer assets. The draft fixes that by explicitly pulling crypto into the same regulatory bucket as foreign currency, gold and securities. Cross-border movement of crypto would require Reserve Bank permission, mirroring the rules that already govern moving rand offshore.
Mandatory declarations above an undisclosed threshold. Any South African resident holding crypto above a threshold (to be set later by the Minister of Finance via Gazette notice) would have to declare those holdings to Treasury within 30 days of acquisition, including details of where and how they were acquired. Above that line, transactions can only be conducted through an “authorised crypto asset service provider.” Peer-to-peer trades above the threshold become illegal. The threshold itself is conspicuously absent from the document the public is being asked to comment on.
Search, seizure, and forced key disclosure. This is the provision attracting the most heat. Regulation 25(5) would empower enforcement officers to demand any “password, pin, private key, or other information” needed to access crypto assets, not via court order, but on demand at ports of entry and exit. Refusal becomes a criminal offence carrying a fine of up to R1 million or five years in prison, or the value of the crypto involved, whichever is greater. Treasury also retains broad discretionary powers to ban specific persons, providers, foreign governments or funds from transacting.
Treasury’s case
The official justification, set out in Treasury’s media statement and the Gazette notice, runs as follows. Since the abolition of the financial rand in 1991, South Africa has been “gradually recalibrating” exchange controls. The 2026 framework is pitched as a modernisation: a shift from the old pre-approval model toward a “positive bias,” risk-based system focused on reporting and surveillance of high-impact, high-risk cross-border flows, rather than blanket permission requirements for every transaction.
Treasury frames the crypto inclusion as plugging a gap. The amendments, the department says, address gaps in the current regulations relating to cross-border crypto asset transactions, and are intended to complement existing regulation by the Financial Sector Conduct Authority and Financial Intelligence Centre. Four supporting rationales appear in the Gazette: alignment with OECD and FATF recommendations, AML and counter-terrorist financing, bringing crypto under the exchange control framework, and imposing sanctions for non-compliance.
There is also a backstory Treasury has not advertised but which is essential context.
The court case behind the crackdown
In May 2025, the Gauteng High Court delivered a ruling in Standard Bank of South Africa v South African Reserve Bank and Others that effectively gutted SARB’s ability to police crypto under existing law. The case arose out of a SARB Financial Surveillance investigation into Leo Cash and Carry (LCC), which had moved roughly 4,400 bitcoin, worth around R556 million at the time, to Seychelles-based exchange Huobi Global, allegedly to circumvent exchange controls.
SARB tried to forfeit R16.4 million sitting in LCC’s Standard Bank account. Standard Bank challenged the forfeiture and won. Judge Mandlenkosi Motha held that cryptocurrencies are neither “money” nor “capital” within the meaning of the 1961 Regulations, and refused to be drawn into rewriting the law from the bench. The court explicitly noted the apartheid origins of the framework and questioned whether the 1961 rules were “fit for purpose to deal with the machinations in the world of crypto-currency.”
SARB appealed. The appeal is suspended pending a Supreme Court of Appeal hearing, which means, in practice, that until now exchange controls have continued to be enforced against crypto in defiance of a high court ruling that says they don’t apply.
The Draft Capital Flow Management Regulations are, in effect, Treasury’s legislative answer to the court. Where the High Court said the 1961 rules don’t reach crypto, the 2026 rules will explicitly redefine “capital” to include it. The loophole, as Moneyweb’s Ciaran Ryan put it, is being closed by statute rather than by appeal.
The pushback
Reaction from the local industry and legal community has been swift and unusually pointed.
VALR, one of South Africa’s largest licensed crypto exchanges, said publicly it considers the provisions “overly restrictive” and warned they “undermine the nature of crypto assets and the practical exercise of self-custody rights.” VALR is urging customers to make submissions and committing to its own detailed engagement with regulators.
Cape Crypto, in an editorial published on 24 April under the byline Leon Kowalski, took the gloves off entirely, calling the draft “Orwellian,” accusing Treasury of authoritarian overreach, and arguing the regulations infringe at least three sections of the Bill of Rights: Section 14 (privacy), Section 25 (property), and Section 35 (the right against self-incrimination, which sits awkwardly alongside compelled key disclosure).
Carel van Wyk, CEO of Money Badger, the fintech behind bitcoin payments in Pick n Pay stores, described the draft as “one of the biggest regulatory changes in the SA financial space in decades” and called for very wide public participation.
Ricki Allardice, CEO of Orange Global Services, raised a financial inclusion angle that has been largely absent from Treasury’s framing: roughly 11 million South African adults remain unbanked, and self-custodied crypto has become a primary mechanism for savings, remittances and global participation for that cohort. A regulatory framework that reaches into individual wallets at undefined thresholds is not neutral on that population.
Carel de Jager, founder of crypto data analytics firm Sixpence, calls the regulations “draconian and unfruitful”, saying he and his team are responding through official channels.
The constitutional argument deserves closer attention than it has received in mainstream coverage. South Africa’s Constitution was drafted, in part, as a deliberate repudiation of the kind of state control over property and movement that defined the apartheid economy, the same economy whose exchange controls these regulations are nominally replacing. The forced key disclosure provision goes further than the United Kingdom’s much-criticised Regulation of Investigatory Powers Act 2000, by placing the demand power in the hands of border enforcement officers rather than judicial oversight.
The enforcement problem
There is also a more prosaic objection: large parts of the draft may simply be unenforceable.
A Bitcoin holding can sit on a hardware wallet, a mobile app, a custodial platform in another jurisdiction, or, most awkwardly for border officers, as a 12-word seed phrase committed to memory. The 1961 framework was designed for an era in which capital meant something you could put in a suitcase. Crypto was specifically engineered to defeat that assumption. As the High Court itself observed in the Standard Bank judgment: how does one declare bitcoin at a border? How does one deposit it with the authorities?
Moneyweb captured the underlying anxiety neatly: the real concern for SARB is not that money moves, but that it moves unseen. The shift to “risk-based surveillance” is a tacit concession that flows will happen, and an attempt to insist on observing them anyway. Self-custodied bitcoin breaks that visibility entirely. States, the argument goes, do not tolerate blind spots.
There is also a free-speech wrinkle. Bitcoin’s underlying code has been widely treated by courts internationally as protected speech. Regulations that effectively criminalise certain uses of that code may face challenges on grounds beyond property and privacy.
The deadline confusion
In a detail that has not exactly inspired confidence, Treasury has published two different deadlines and two different email addresses for public submissions.
The Gazette notice gives 30 days, putting the deadline at 18 May 2026, with submissions to one Treasury address. The gov.za media statement gives 10 June 2026 and a different address. The two documents have not been reconciled. VALR, Cape Crypto and Bitcoin ZAR are advising stakeholders to assume the earlier date and submit to both addresses.
For a draft regulation that proposes five-year prison sentences for non-compliance, the inability of the issuing department to coordinate a deadline across its own publications is, at minimum, an awkward look.
What happens next
Public comments close on either 18 May or 10 June 2026, depending on which Treasury document one chooses to believe. After that, Treasury and SARB will consider submissions and finalise the framework. The final regulations would replace the 1961 Exchange Control Regulations entirely.
In parallel, the SARB appeal in Standard Bank v SARB is expected to be heard at the Supreme Court of Appeal in 2026, though if the new regulations are gazetted in their current form first, the appeal becomes largely academic.
The substantive questions for South African crypto holders, builders and exchanges are now sharply defined:
- The threshold matters more than anything else. A R10 million threshold targets HNW capital flight. A R50,000 threshold reaches into ordinary retail wallets. Treasury has refused to disclose the figure during the comment period.
- Self-custody becomes a regulatory category, not a personal choice. The draft contemplates a world in which non-custodial holdings above the threshold are presumptively suspect.
- The constitutional case is real. Whether through Standard Bank on appeal, fresh litigation, or eventual constitutional challenge, the Section 14, 25 and 35 questions are unlikely to remain unlitigated for long.
- The ecosystem response window is now. Treasury is on the back foot. The deadline confusion, the missing threshold, and the live court case all point to a draft that has been pushed out faster than its drafters were ready for. Industry submissions in the next several weeks will materially shape what gets gazetted.
For anyone holding, building on, or investing through crypto rails in South Africa, this is no longer a watching brief. The framework being proposed would not merely regulate exchanges. It would reach into individual wallets, condition disposal on government permission, and place an officer’s demand for a private key on the same footing as a customs declaration.
Whatever one’s view on the merits, the country has not seen a financial regulatory shift of this size in decades. It deserves to be argued out loudly while there is still a draft to argue with
