Zimbabwe

Financial Intelligence Unit guidance, dated August 2026, for virtual asset service providers operating in or from Zimbabwe. Covers registration, risk assessment, customer due diligence, suspicious transaction and cash reporting, record keeping, targeted sanctions, the travel rule and red-flag indicators; the Act prevails where they conflict.

POTRAZ guideline issued 13 November 2024 and signed by its Director General. It requires a controller to notify the Authority in writing within 24 hours of becoming aware of an actual or suspected breach, using form DP3.

Applies to institutions licensed under the Banking Act, Building Societies Act and Microfinance Act. Requires board oversight with at least quarterly reporting (s 4.5), climate risk in ICAAP and ILAAP, scenario analysis (ss 4.46-4.50) and climate risk disclosure on governance, strategy, risk management and metrics (ss 6.1-6.3).

Reserve Bank sandbox framework issued February 2021. Allows testing for up to 24 months, requires a decision within 21 working days of a complete application, and lists mobile money, retail payments, digital KYC and regulatory technology products as eligible products. Crypto, digital currency and CBDC are listed as not eligible (Annex 3).