Withdraw Your Consent.
On 17 April 2026, South Africa's National Treasury published the most significant overhaul of cross-border financial controls since 1961. It quietly redefines private property — crypto, foreign currency, gold, securities, and intellectual property — as "capital" requiring State permission to move. What happens here sets a precedent. You have until 18 May to be heard.
10 Changes most people haven't been told about.
In plain EnglishWhat's actually in the regulations. Each card below is a direct change from the draft, with regulation numbers. If you only read one section of this page, read this one.
Crypto and foreign currency above an undefined threshold must be declared to Treasury within 30 days. No subsequent transfer without written permission.²
Reg 10Only Treasury-authorised CASPs may buy, sell, lend, or borrow crypto above the threshold. Selling sats to a friend is a contravention.³
Reg 3Direct merchant acceptance is structurally a non-CASP-to-non-CASP transaction. Must route through an authorised intermediary.³
Reg 3Spending it triggers capital movement rules even when nothing crosses a border. Local trades treated as exports.⁴
Reg 1Sending crypto out of SA needs Treasury permission. A seed phrase memorised in your head still counts as being "in control" for export.⁵
Reg 4On forfeiture, owners must hand over passwords, PINs, and codes for the State to access digital assets. Refusal is a criminal offence.⁵
Reg 25(5)Treasury can attach or seize on "reasonable suspicion" — no court order required. Forced sale to Treasury at market-related rand price applies.⁶
Reg 8, 24Officers may search persons, luggage, mail, and parcels at ports of entry and exit, and seize on suspicion. Written declarations mandatory.⁵
Reg 4, 5The draft repeatedly references a "determined threshold" — but never defines it. Regulators can change it administratively, without a new law.⁵
ThroughoutPenalties of R1,000,000 or the asset's value (whichever is greater), plus up to five years' imprisonment, for non-compliance.⁵
Reg 29Six reasons this draft is constitutionally and practically unsound.
In plain EnglishWhy the draft is more than just "modernisation". The government says it's an update. Constitutional lawyers, the licensed exchanges, and even a South African court (in 2025) disagree. Here's the case against it.
It contradicts what was promised.
The official media statement¹ promises a "positive bias" with fewer pre-approvals and a focus only on "high-impact and high-risk" transactions. The actual draft applies a blunt, permission-based regime to all crypto regardless of value.
Werksmans Attorneys⁷ calls this "truly a remarkable statement given that the draft regulations largely reflect the current Exchange Control Regulations". Luno and VALR⁵ both confirm wholly-onshore trades would be treated as "capital exports" — even though no money has left the country.
Critical terms are left undefined.
"Determined threshold." "Reasonable suspicion." "High-impact." "High-risk." The draft references these throughout but defines none of them.⁵
The rule of law requires that legal rules be ascertainable in advance. A framework that says "above a threshold to be set later" is regulator-made law, not legislator-made law.
It engages four Constitutional rights.
Property (s. 25), just administrative action (s. 33), freedom of trade (s. 22), and privacy (s. 14) are all engaged by forced sales, administrative forfeiture without court order, restrictions on lawful peer-to-peer activity, and compelled disclosure of private keys.⁸
Section 36 requires limitations to be reasonable and to use the least restrictive means. The draft does not engage these tests.
It duplicates existing regulation.
Crypto is already regulated under FAIS by the FSCA (since October 2022, when crypto was declared a financial product), under the FIC Act for AML/CFT obligations (since December 2022, with CASPs as accountable institutions), and taxed by SARS under the Crypto Asset Reporting Framework (CARF) since 1 March 2026.⁴
The CFM draft adds a fourth, conflicting layer with a different and broader scope — the opposite of "international best practice alignment".
The FATF justification is hollow.
South Africa exited the FATF grey list on 24 October 2025⁹ following 33 months of reform — without these regulations existing. The FATF specifically cited "improving the risk-based supervision" as a delisting reason.
A regime just removed from the grey list cannot credibly claim that further sweeping controls are necessary for FATF compliance.
It came after a court loss.
In Standard Bank v. SARB [2025] ZAGPPHC 481 (15 May 2025), the Gauteng High Court held that crypto assets are neither "currency" nor "capital" under the 1961 regulations.¹⁰
SARB appealed; the Minister then announced these draft regulations in the February 2026 Budget Speech. The CFM draft is not a clarification — it is a substantive expansion of regulatory reach following an adverse court ruling.
This is not just a Bitcoin issue.
In plain EnglishYou're probably affected even if you don't own a single Bitcoin. The draft's definition of "capital" includes foreign currency, gold, securities, and intellectual property. If you hold any of those — or even just travel internationally — read on.
The draft's redefinition of "capital" sweeps in foreign currency, gold, securities, and intellectual property with monetary value. Even South Africans with zero crypto exposure are now living under a more expansive surveillance and pre-approval perimeter than they were under the 1961 framework — at the moment the State said it was moving to a lighter, risk-based model.⁴
| You are… | Today | Under the draft |
|---|---|---|
| A self-custody Bitcoin user | Hold your own keys, send to whom you choose | Holdings declared in 30 days; transfers above threshold require permission; keys may be compelled on forfeiture |
| Someone who paid in BTC | Lawful payment to a willing merchant | Effectively prohibited — must route through an authorised CASP |
| Holding USD savings | Lawful within ordinary allowances | Above threshold, declared in 30 days; possible forced sale to Treasury at market-related rand |
| A gold holder or numismatist | Free to hold, sell, transfer privately | Captured by expanded "capital" definition; permission required to export |
| An IP owner with international income | Licensable under existing rules | IP with monetary value brought back into "capital" — the issue from Oilwell (2011) reopened |
| A traveller leaving OR entering SA | Standard customs declaration | Officers may search person, luggage, mail, parcels — and seize on suspicion |
| A merchant accepting BTC via Scan-to-Pay | Lawful — ~650,000 outlets do this today | Structurally a non-CASP-to-non-CASP transaction — at risk of contravention |
| A licensed CASP / exchange | FSCA-licensed, FIC accountable, SARS-reporting | New "authorised CASP" layer; onshore trades treated as exports — burning offshore allowances |
What this tool does, and what it cannot do.
In plain EnglishYour privacy is protected here. Nothing you type is sent anywhere or stored. The tool runs entirely on your phone or computer. When you click "send", your normal email app opens — you review the message, then you send it yourself.
A submission about State surveillance is not the place to compromise on your own privacy. This tool was built to make compromise impossible. Every claim below is verifiable by viewing the page source.
Runs entirely in your browser
This page is a single, static HTML file. There is no server logic, no API, no database. All form processing happens locally on your device. You can prove this by saving the page and opening it offline — it works exactly the same.
No localStorage, no sessionStorage
Your name, ID number, location, story, and selections are kept only in volatile memory. Reload the page and everything is gone. Close the tab and everything is gone. Nothing is written to disk by this tool.
No tracking pixels, no third-party scripts
There is no Google Analytics, no Plausible, no Meta Pixel, no Hotjar, no Sentry. The only external resource the page loads is Google Fonts for typography — which can be self-hosted if even that is unacceptable to you.
Nothing set, nothing read
This page does not set cookies. It does not read cookies. There is no session, no fingerprint, no consent banner — because there is nothing to consent to.
The tool never sends anything for you
The "Open in Email" button uses a standard mailto: link — your email app opens with the message pre-filled, and you review and send it yourself. The Gmail and Outlook buttons open those services in your browser with the message pre-filled. The Copy and Download buttons let you handle it your own way.
No "submission counter" you can be a number in
Some similar tools count submissions. We don't. There is no way for this page to know whether you submitted or not, because nothing leaves your device. The trade-off is no public number, but the gain is that the tool cannot be used to identify or count anyone.
Right-click → View Page Source
Every line of code is visible. You can read the JavaScript, see the email templates, and verify there are no hidden network requests. If you want, save the file and host it yourself — it works without modification on any web server, or simply opened from your hard drive.
Your submission is the public-facing record
Your email goes from your email account to Commentdraftlegislation@treasury.gov.za. From that point on, it is in Treasury's hands and may be released under PAIA or in their official summary of comments. That's not us — that's how public consultation works. Submitting is exercising your constitutional right (s. 17 / s. 16); it is not a declaration of holdings or any admission.
Make your voice count — in under 60 seconds.
Pick the persona that fits you, tick the concerns that matter, and we'll draft a serious, well-argued email to National Treasury. Edit before you send. Nothing is stored, nothing is sent automatically — your email client opens with the draft already in it.
What does this persona do? Privacy trade-off ↗
The persona puts an opening sentence in your email body identifying you as that category — for example, "I am a South African citizen who holds and self-custodies cryptocurrency."
Why it helps: Treasury can dismiss generic "concerned citizen" letters as a form-letter campaign. Persona-tagged submissions carry rhetorical weight because the people being regulated are speaking by name about how the regulation affects them.
What's the trade-off: Your email — including the persona statement and your name, if you provide one — sits in Treasury's inbox and may be disclosed under PAIA on request. Treasury already has SARS, FIC, and CASP data on actual holders, so the persona's marginal informational value to the State is small, and your statement is voluntary public-comment speech (not an admission of any offence under existing law).
If in doubt, choose "Concerned citizen — no category". It still produces a substantive submission citing every concern; it just doesn't add a self-identifying opening line.
🌍 International submitter — a note on awareness
Thank you for caring about this. International voices matter because regulatory precedents travel between jurisdictions, and a submission from outside South Africa is harder for Treasury to dismiss as a niche local complaint.
This email is addressed to South African Treasury only. That is the correct recipient — they are the body running the consultation. We do not recommend pinging your own country's Treasury or Reserve Bank about this, since the matter is not under their jurisdiction.
However, if you would like to share this with your home country's digital-policy organisations, civil-society groups, or relevant journalists for awareness purposes, that is a useful way to surface what's happening in South Africa as a precedent worth watching. You can use the share buttons below the tool, or simply BCC them on your email to Treasury (your call — leave them off if you prefer).
This is about spreading awareness across borders that people, globally, do not consent to this approach. Not about flooding inboxes.
If you tick none, a sensible default selection will be used for your persona.
A real name carries more weight than an anonymous comment, but you can use initials or leave it blank for an unsigned submission.
+ Add credibility (optional, can be skipped) ↗
These fields make your submission harder for Treasury to dismiss as a form letter, but they are completely optional. Skip the whole section if you prefer.
South African citizens: including your 13-digit ID signals you're a verified person — harder for Treasury to dismiss. International submitters: skip this field.
Personal context is what separates a copy-paste form-letter from a submission Treasury must take seriously.
Live Preview
mailto: link. Gmail / Outlook buttons open those services in your browser with the message pre-filled. Review before you send.
Your email is on its way to Treasury.
Forward this to one or two people who'd care — in SA or elsewhere. A personal message lands higher than a repost.
Questions worth asking before you submit.
Why does the deadline say 18 May, not 10 June?
The two official sources currently conflict. The original Treasury press release on gov.za (published 20 April 2026 and still live as of today) says 10 June 2026. The South African Reserve Bank's media release, ENS Africa, Baker McKenzie, VALR, and Werksmans all say Treasury subsequently revised the deadline to 18 May 2026.
We use 18 May as the deadline shown in this tool because it is the earlier of the two and submitting before the earlier date cannot be wrong. Submitting after 18 May relying on gov.za's 10 June date carries risk if Treasury treats 18 May as authoritative. If you can submit by 18 May, do.
Is submitting a public comment actually useful?
Yes. Section 4 of PAJA and the constitutional principle of public participation require government to genuinely consider written submissions on draft regulations. Volume matters, but quality matters more — Treasury must respond to substantive arguments. A short, personal, specific comment will outweigh a hundred copy-paste form letters.
Can the government identify or punish me for submitting?
No. Submitting a public comment is the exercise of a constitutional right (s. 17 — assembly, demonstration, picket, petition; s. 16 — freedom of expression). It is not a declaration of any holdings, not an admission of any conduct, and not a basis for any sanction. You can submit anonymously if you prefer, but a named submission carries more weight.
Is it safe to identify myself as a "crypto holder" in the persona?
The risk is real but small, and worth knowing about:
What's real: Your email — including the persona statement and your name, if you provide one — sits in Treasury's inbox and may be disclosed under PAIA on request.
What's overstated: Holding crypto is currently lawful. A voluntary public-comment statement that is itself about lawful activity cannot be evidence of an offence. Treasury already has SARS, FIC, and CASP transaction data on actual holders — the marginal informational value of a self-identified hobbyist list is small.
If in doubt: use the "Concerned citizen — no category" persona. It still produces a substantive submission citing every concern; it just doesn't add a self-identifying opening line.
Why include my ID number?
Optional. Including it signals you are a real person — a verified citizen comment is harder to discount than an anonymous one. The number is not transmitted anywhere except to Treasury via your own email client when you send. If you'd rather leave it out, the tool works fine without it.
What if my email app doesn't open from the button?
Some browsers (especially in privacy / incognito mode) block mailto: links. If the "Open Default Email App" button does nothing, use the Gmail or Outlook web buttons instead, or use Copy / Download to handle the email yourself.
Is this site affiliated with BitcoinZAR or Dear South Africa?
No. Both run independent campaigns on this same draft — worth submitting via their tools too. This page exists to reach people beyond the crypto community, and beyond SA. Many people affected by this haven't heard about it yet, and international submissions carry weight precisely because they're harder to dismiss as a local lobby.
What happens after 18 May 2026?
Treasury and SARB will consider the submissions and "make appropriate revisions where necessary". A revised draft may be re-published or the regulations may be promulgated as final under Government Gazette. There is no guarantee that comments will produce changes — but submission is the primary lawful mechanism to influence the outcome before the regulations have legal force.
Where can I read the draft myself?
The draft regulations and Government Gazette PDFs are published by Treasury here:
Draft Capital Flow Management Regulations 2026 (PDF)
Gazette — Capital Flow Management Regulations 2026 (PDF)
Every claim on this page, traced.
Primary government sources
- Treasury media statement (20 April 2026): gov.za press release — original source for publication date, gazette number, submission email, and original deadline (10 June, since revised).
- SARB updated media release (20 April 2026): resbank.co.za — confirms the revised 18 May 2026 deadline.
- SAnews press release: sanews.gov.za
- Draft Regulations PDF: Treasury Draft (FINAL).pdf
- Government Gazette PDF: Gazette No. 7375
- Government Gazette No. 7375, Government Notice No. 54520 (17 April 2026)
- 2026 Budget Speech, Minister of Finance Enoch Godongwana (25 February 2026)
Court ruling (Standard Bank v. SARB)
- Standard Bank of South Africa Ltd v South African Reserve Bank and Others, case 047643/2023 [2025] ZAGPPHC 481, judgment 15 May 2025, Gauteng Division of the High Court, Pretoria.
- Cowan-Harper-Madikizela (CHM Legal): "Bitcoin and Other Crypto-assets Are Neither 'Currency' Nor 'Capital'" (2025).
- ENS Africa: "Standard Bank vs. SARB: Important ruling on Cryptocurrencies and South African Exchange Controls".
- Cliffe Dekker Hofmeyr (CDH): "Implications for crypto asset service providers from High Court ruling on crypto and exchange control".
- PKF South Africa: "Is Cryptocurrency subject to exchange control?" (2025).
- Mayet & Associates: "Crypto Regulation in South Africa: Exchange Control Rules and the SBSA Decision".
Law-firm analysis of the draft
- Baker McKenzie: "South Africa: Crypto Assets Likely to Enter Exchange Control Regime" (March 2026).
- ENS Africa: "South Africa publishes Draft Capital Flow Management Regulations for public comment" — confirms revised 18 May deadline.
- Werksmans Attorneys (Kyle Fyfe, Director): "Proposed New Capital Flow Management Regulations fail to live up to expectations" (April 2026).
- Polity / Cliffe Dekker Hofmeyr: "Draft capital flow management regulations: Crypto assets enter the exchange control arena" (6 May 2026).
Industry & press
- TechCentral: "South Africa's crypto progress on the line" — direct comments from Marius Reitz (Luno) and Farzam Ehsani (VALR CEO).
- ITWeb: "Draft law puts crypto under SA exchange control regime".
- Moneyweb: "Bitcoiners outraged by SA's 'biggest exchange control' revamp in decades".
- VALR (official): "Your Action Required: Draft Capital Flow Management Regulations 2026".
- BitcoinKE East Africa: "South Africa's Draft Capital Flow Management Regulations, 2026".
- TechPoint Africa: "New draft rules could reshape crypto in South Africa".
- Moonstone Information Refinery: "New regulations will bring crypto into exchange control framework".
- African News Agency: "South Africa's National Treasury publishes draft regulations for capital flow management".
FATF & existing regulatory context
- FATF: "Jurisdictions under Increased Monitoring – 24 October 2025" — confirms South Africa exited the grey list on this date.
- Glacier Insights: "What being removed from the FATF grey list means for South Africa" (October 2025).
- FSCA: Declaration of crypto assets as financial products under FAIS Act (October 2022).
- FIC: Designation of CASPs as accountable institutions (December 2022).
- SARS: Crypto Asset Reporting Framework (CARF) — implemented 1 March 2026.
Related civic campaigns
- BitcoinZAR Advocacy Group: ag.bitcoinzar.co.za
- Dear South Africa: dearsouthafrica.co.za/crypto-regulations