Launching a wallet under central-bank rules
What a central bank expects from an e-money issuer: licence routes, safeguarding of customer funds, KYC tiers, AML, IT security and reporting, and a launch plan that survives the first inspection.
A wallet is a regulated promise: every unit of e-money is money the issuer owes a customer. Central banks across Africa write similar rules to protect that promise. This paper groups those rules into eight areas, explains what an inspector looks for in each, and ends with a twelve-week plan from contract to launch.
Written for
Founders, executives and compliance officers at banks, microfinance institutions, telecoms and fintechs preparing to issue e-money.
Key takeaways
- Choose the licence route first; it decides capital, governance and who holds the customer funds.
- Safeguarding is the heart of the rules: e-money outstanding must be covered by funds in trust or escrow every day.
- Tiered KYC lets low-risk customers start quickly while keeping limits that satisfy the regulator.
- Sanctions screening, monitoring and suspicious-transaction reporting must work from the first customer.
- Regulators judge you on evidence: reconciliations, logs, reports and complaint records you can produce on demand.
What's inside
- 1. Choose your licence route
- 2. Capital and governance
- 3. Safeguard every unit of e-money
- 4. Know your customer, in tiers
- 5. Fight money laundering from day one
- 6. Treat customers fairly
- 7. Secure the technology
- 8. Report on time, from the system
- 9. A twelve-week plan, once credentials are in hand
- 10. How PesaBridge helps you pass inspection
- Readiness checklist
This paper is general guidance, not legal advice. Licence conditions, capital, limits and reporting differ by country and change over time; confirm the current requirements with your regulator and legal counsel.
More whitepapers
Building an agent network in West Africa
How to recruit, fund, supervise and keep the agents who turn cash into e-money and back, and where the rules differ between WAEMU, Ghana and Nigeria.
Read the summary WhitepaperHow mobile money interoperability works
How wallets, banks and national switches connect: the models, what happens to one payment from end to end, how settlement works, and what it means for your launch.
Read the summary关于牌照、KYC 和反欺诈的问题
什么是 KYC 等级？
等级把客户可做的事与您对客户的了解程度挂钩：手机号可开通低限额钱包，身份核验可提高限额，完整核验可取消大部分限额。各等级的限额在后台设置。
如何发现欺诈？
规则会监控每笔交易，识别金额异常、短时间内大量付款或新设备等模式。每条警报都会带着原因和负责人进入审核队列。
监管机构需要哪些记录？
完整的审计轨迹（谁在何时做了什么）、客户档案、交易记录以及每日对账报告。平台从第一天起就保存这些记录。
真合规，非做样子
监管方认可的 KYC、限额与审计。
合规不是最后添加的一个页面。在 PesaBridge 中，它由账本在每一笔交易上强制执行。
KYC 分等级。客户仅凭手机号即可开立基础钱包，限额较低；提高限额需提交身份证件和自拍照，在应用内采集并审核。每个等级都有各自的单笔与每日上限，在任何资金流动之前强制执行——因此限额不是建议，而是不变量。按照设计，未经基础身份核验，资金无法离开钱包，因为凭有效证件开户是央行设定的底线。
其上是反洗钱控制——制裁名单与政治公众人物筛查接口、标记异常行为供审核的流速与阈值规则——以及一份完整、不可篡改的审计追踪。每一笔交易、冲正和 KYC 决定都被记录且可导出，附带监管就绪的报告包。
而且，由于每家运营商运行各自的部署与数据库，您客户的数据归您所有：没有共享租户，没有共享超级管理员，不与任何其他机构混同。
KYC 等级
安全与合规
信任即产品。
金融服务的存亡系于正确性与可控性。PesaBridge 将两者都烙进核心。
结构性复式记账
每一次流动都记录平衡的借贷分录——账目始终对账归零。
PIN 码、KYC 与限额
可配置的 KYC 等级、单笔与每日限额、PIN 码尝试次数与钱包锁定。
幂等且可冲正
幂等键杜绝重复扣款；统一冲正引擎可撤销任意业务部门的交易。
签名 Webhook
HMAC-SHA256 签名与重试，让合作系统信任每一次回调。
完整审计追踪
不可篡改的账本分录与交易历史，供监管方与争议处理使用。
分国家合规
证件类型、KYC 规则与费率随市场自动切换，皆由配置驱动。
运作方式
以周计上线，而非以年计。
配置品牌与国家
在管理后台设置名称、标识、配色、货币、语言和 KYC 等级——应用即刻换肤。
接入支付通道
通过适配器接入银行、移动货币、卡组织、账单机构、税务和电信——只接入市场所需。
在应用、USSD 与网页上线
将自有应用上架双端商店，开通 USSD 短代码和网页门户——全部来自同一平台。