To start fintech compliance, first qualify your activity precisely: payments, credit, savings, foreign exchange, or simply technology supplied to a licensed institution. That qualification decides whether you fall under Bank Al-Maghrib, the BCEAO or a regulated partner. Here is a practical method, to be validated with specialist legal counsel.
Qualify your activity first
The first question is not which licence you need but what your product actually does with customer money. Do you hold funds, initiate payments, grant credit, or supply software to a bank?
A simple diagram of money and data flows, from the user to the bank, clarifies your position. It is the starting document for any discussion with a regulator or partner.
- Holding or transiting customer funds.
- Initiating or executing payments.
- Granting, brokering or scoring credit.
- Pure technology service for a licensed institution.
Morocco and WAEMU: two distinct frameworks
In Morocco, payment and credit institutions are supervised by Bank Al-Maghrib under the banking legal framework in force. In the WAEMU zone, the BCEAO sets the common framework, notably for electronic money and digital financial services, with national implementations.
Texts evolve. Always consult up-to-date official sources and a local lawyer before launching, rather than relying on old summaries or on what other players seem to do.
Participative finance: additional requirements
If you offer Islamic-finance compliant products, specific requirements apply. In Morocco, participative products are regulated and subject to a religious compliance validation by the competent body, on top of banking regulation.
Even if your fintech does not sell these products itself, it helps to know who carries compliance in the chain: you, the partner participative bank or a third party.
- Identify the entity responsible for compliance validation.
- Document clearly how the product works and what it costs.
- Keep marketing messages separate from legal commitments.
A realistic starting plan
Many fintechs start by relying on an already licensed partner, a bank or payment institution, which limits their direct regulatory scope. This requires a solid contract, clear responsibilities and a good grasp of the obligations passed on to you.
In every case, put the foundations in place from the start: customer identification procedures, anti-money-laundering controls, personal data protection, transaction traceability and complaint handling.
- Map flows, actors and responsibilities.
- Get legal advice before your first customer.
- Document KYC, AML and data security.
- Choose the regulated partner and formalise the contract.
Frequently asked questions
Do I need a licence to launch a fintech in Morocco?
It depends on your activity. Holding funds, offering payment services or credit generally falls under a regulated framework. Specialist legal advice is essential before launch.
Is a BCEAO licence valid in every country of the zone?
The framework is common across the WAEMU zone, but national procedures and specifics may apply. Check country by country with the authorities and local counsel.
Can I start without my own licence?
Often yes, by relying on a licensed partner who carries the regulated activity. The contract must then define each party's role precisely.