South Africa Wants the Power to Jail You for Refusing to Hand Over Your Bitcoin Keys
South Africa’s National Treasury has published a draft regulation that would make it a criminal offence to refuse to hand over a Bitcoin private key to a government enforcement officer. Five years in prison, a R1 million fine, or the value of the Bitcoin itself — whichever is greater.
This is Regulation 25(5) of the Draft Capital Flow Management Regulations 2026, which the Treasury published this week to replace the country’s 1961 exchange control rules. Public comments close on 18 May 2026, although the Treasury has managed to contradict itself across its own Gazette notice and media statement on whether the real deadline falls on 18 May or 10 June.
What the draft actually does
In short, the regulation does five things.
First, it reclassifies Bitcoin as a controlled capital asset, placing it alongside foreign currency and gold under exchange control. A June 2025 Pretoria High Court ruling had held crypto was not subject to exchange controls. Consequently, this draft serves as the executive branch’s legislative answer to that ruling.
Second, the rules force declaration. Residents holding crypto above a threshold — which the document does not disclose, and which the Minister of Finance will set later — must declare those holdings within 30 days. In other words, the public must comment on a framework without knowing who it applies to.
Third, the draft restricts transactions. Anyone buying, selling, lending, or borrowing above the threshold must go through an authorised service provider. Peer-to-peer transactions above the threshold become illegal, and exporting crypto without Treasury permission also becomes prohibited.
Fourth, the regulation grants search and seizure powers at ports of entry and exit.
Finally, and most importantly, it allows officers to compel disclosure of “any password, pin, private key, or other information” needed to access crypto assets. No court order. An officer at a checkpoint. Refusal becomes a criminal offence carrying up to five years’ imprisonment, plus forfeiture of the coins on top.
Why key disclosure is the line
A private key is not a password to an account. Rather, it is the single cryptographic object that proves ownership of Bitcoin on the blockchain. Handing it over is not analogous to opening a suitcase. Instead, it is analogous to signing, under duress, a document that transfers every satoshi you own to whoever holds the copy.
The UK’s Regulation of Investigatory Powers Act 2000 contains a similar compelled-decryption provision, and civil liberties groups have criticised it for two decades as incompatible with the right against self-incrimination. However, South Africa’s proposal goes further. In the UK, these powers sit with law enforcement conducting an investigation. In this draft, by contrast, they sit with border enforcement officers.
Three South African constitutional rights come into play here:
- Section 14 — privacy, including protection against searches of possessions and communications.
- Section 25 — property rights. Conditional ownership you can only exercise with state permission is not ownership.
- Section 35(3)(j) — the right against self-incrimination. Compelling someone to sign the cryptographic proof that they own an asset is a textbook case.
The stated justification doesn't hold up
The Treasury cites alignment with FATF recommendations, AML/CFT, and bringing crypto under exchange control. However, South Africa already has an AML framework for crypto. FICA already designates crypto asset service providers as accountable institutions. Moreover, the FSCA has licensed 59 crypto exchanges since October 2022, and the travel rule came into force in April 2025. The regulatory perimeter around crypto businesses already exists.
What’s new in this draft is therefore not the regulation of service providers. Rather, it is the reach past the exchanges and into the wallets of individual citizens — and into the pockets of anyone crossing a South African border with a phone.
Notably, no money-laundering data accompanies the draft. No baseline of illicit flows. No impact assessment. No sunset clause. The public must surrender fundamental rights on the strength of the acronym “AML” alone.
The technical absurdity
Beyond the constitutional concerns, the regulation reads as if Bitcoin behaves like physical gold. A border officer can search a bag for krugerrands. Searching a person for Bitcoin, however, is a different problem entirely.
Bitcoin can sit on a hardware wallet at home while its owner flies through OR Tambo. Alternatively, it can sit on a custodial platform in Singapore, or a multisig quorum can co-sign it across three continents. Most importantly, it can live entirely in a 12- or 24-word seed phrase committed to memory. In practice, you can cross any border in the world carrying a billion dollars in Bitcoin with nothing but what’s in your head.
As a result, a regulation that punishes you for failing to declare what you “possess” cannot even define possession coherently here. Does knowing a seed phrase count? Does access to a hosted wallet? The draft doesn’t say — which means the answer in practice will be whatever the officer at the checkpoint decides.
Why this matters beyond South Africa
South Africa leads the continent’s crypto market by almost every measure: the deepest liquidity, the most licensed exchanges, the most developed legal scholarship. Consequently, whatever framework Pretoria enacts becomes the reference point for every Treasury memo from Lagos to Nairobi for the next decade. If forced key disclosure becomes the template in a developed African jurisdiction, similar provisions will likely land on every Ministry of Finance already nervous about capital outflows and stablecoin adoption.
The bigger picture
Bitcoin’s censorship resistance means no authority can compel the network to freeze coins — unlike stablecoins, where a single issuer can blacklist addresses on request. However, a government that cannot compel the network can still try to compel the individual. That is precisely the move this draft attempts.
Sixty-five years ago, a different South African government wrote the first version of these exchange control rules to stop capital from leaving the country. Officials justified them on national security grounds. The current draft is not that regime. Nevertheless, it reaches for the same tool — and the people who built post-apartheid South Africa’s constitutional protections understood why that tool, once picked up, is hard to put down.
If you hold Bitcoin in South Africa, the public comment period remains open. Bitcoin ZAR has published a submission template at ag.bitcoinzar.co.za. To be safe, submit to both email addresses listed and assume the earlier deadline of 18 May 2026. After all, the best time to push back on a regulation is before it becomes law.