South Africa, The Sofa and Bitcoin

In February 2020, burglars broke into the South African president’s private game farm and walked off with hundreds of thousands of US dollars in cash that had been stitched into a leather sofa.

Cyril Ramaphosa never reported the theft to the police. His Presidential Protection Unit ran a private cross-border manhunt into Namibia. A domestic worker who knew about the cash was allegedly paid off and reinstated.

The country only found out two years later, when a former spy chief filed a criminal complaint. After all of that, the Reserve Bank ruled that no exchange control offence had occurred because the underlying foreign currency transaction was deemed “incomplete.”

Ramaphosa walked away scot-free, despite holding hundreds of thousands of undeclared US dollars on private property in apparent contravention of South Africa's exchange control rules.

Now, hold that ruling in your mind for just a moment.

The same Reserve Bank, in April 2026, has now published draft regulations that would jail ordinary South Africans for five years for failing to declare their Bitcoin within 30 days.

One rule for the President and his sofa stuffed with contraband dollars. Another rule for everyone else.

If you hold Bitcoin and live in South Africa, or you keenly watch what governments will attempt to do to Bitcoin holders as a leading indicator for what your own may try - this story is worth paying attention to.

The proposal is called the Draft Capital Flow Management Regulations 2026. Strip away the bureaucratic language, and four things stand out.

Above a threshold (still to be set by the Minister of Finance), every resident must declare their crypto holdings within 30 days. Industry estimates suggest the threshold may land around R50,000, roughly $2,700, although the actual figure has not yet been published.

Once you have declared, you can no longer freely transact. Each move requires a stated purpose. Cross-border transfers, sending Bitcoin to a non-resident wallet, paying a foreign supplier, and receiving money from one - all need prior regulatory approval.

Refusing to hand over your private keys to an authorized officer becomes a criminal offence. Regulation 25(5) gives officials the power to compel the disclosure of passwords, PINs, and the keys themselves. There is no carve-out for self-custody, and that is highly unlikely to be an oversight.

Officials at ports of entry and exit can search your devices and require you to unlock them on demand. Penalties include fines of up to R1 million, up to five years in prison, asset seizure, and the forced sale of holdings at state direction.

Calling this a tax update or an anti-money-laundering tune-up would be a generous understatement of its scope. What the draft actually creates is a comprehensive prior-permission regime for an entire asset class, backed by criminal law and capable of forcing people to incriminate themselves with the keys to their own savings.

There are three main drivers behind this proprosed regulatory overhaul.

First, the Financial Action Task Force placed South Africa on its grey list in 2023 due to weaknesses in anti-money laundering controls. Coming off that list required visible action, and tightening crypto rules was always going to be on the menu.

Then, in 2024, the High Court ruled that the existing exchange control framework, enacted in 1961, did not apply to cryptocurrency. To regulate crypto under exchange control, a new framework was needed

The third pressure is a more existential problem for South Africa. The country has a chronic capital outflow problem.

Skilled emigration and informal capital flight have been bleeding the country for years, and the rand has spent a decade as one of the world’s most volatile major currencies.

Anything that lets people move value across the border outside the formal banking system is, from Treasury’s perspective, a hole that needs plugging. The 1961 framework was built to plug that hole when value moved as paper and physical gold. The 2026 draft is a belated attempt to extend the same control over the cryptographic technologies that have made the original framework toothless.

There is a deeper logic to why this is happening now.

In January 2025, South Africa enacted the Expropriation Act, which permits the state to expropriate property without compensation under defined circumstances. Land was the political headline, but the Act covers property more broadly, and its passage marked a shift in how the state thinks about the asset side of the citizen’s balance sheet.

The Capital Flow Management Regulations apply that same logic to a different asset. Although the mechanism differs from outright seizure, the end state for any holder targeted by the regime is functionally similar.

Your Bitcoin is yours unless and until the state asserts a stronger claim.

What is striking is that recognition has now become the precondition for control. Under the old law, the Reserve Bank's attempts to seize crypto under exchange control regulations fell apart because crypto was not yet "property" in the sense the statute required.

The new law is designed to fix that gap. You cannot expropriate what does not legally exist. The first step in any expropriation is recognition, and South Africa has now taken that step.

Most South Africans hold crypto on centralized exchanges like Luno or VALR. The exchange already knows them. The exchange can already be subpoenaed. Under the new rules, the exchange becomes, in effect, an arm of exchange control: monitoring transactions, flagging cross-border activity, freezing accounts on instruction. You retain the convenience of holding Bitcoin, while losing all self-determination.

For self-custodians, the picture is far murkier. According to the new regulations, you must declare above a yet-to-be-determined threshold. Once declared, every meaningful transaction needs a stated purpose.

Cross-border sends require approval. Travel becomes a legal hazard. If you are ever investigated, you are required to surrender control of your wallet to state officers.

The people most likely to be caught by this law, in descending order of likelihood, are the honest, the careful, the small, and the unconnected. The people least likely to be caught are the rich, the politically wired, the criminal, and anyone with the technical skill to disappear. They will find their way around it as they always have.

Which brings us back to the sofa.

You may also like…

The Bitcoiner's Guide to Second Residency

·

Mar 4

The financial case for seriously considering a second residency has never been stronger for Bitcoiners. And many governments are making it stronger by the year.

George Orwell’s Animal Farm closes with the original commandment, painted on the side of the barn, amended by the pigs:

All animals are equal, but some animals are more equal than others.

It is hard to read the Phala Phala ruling and not recall that line.

The President of South Africa held hundreds of thousands of dollars in undeclared foreign cash on a private property. The cash was hidden in furniture. He did not report the burglary to the police. He used state security resources for a private manhunt.

The exchange control offence, for which an ordinary citizen would face prosecution, was found not to have occurred because the underlying transaction was “incomplete.”

Now read what the new framework does to a citizen who fails to declare a Bitcoin holding within 30 days.

• Up to R1 million in fines

• Up to five years in prison

• Forced sale of the asset

• A criminal record on top

• A separate criminal offence if they refuse to hand over their private keys

For undeclared foreign cash hidden in furniture by the head of state: no offence, transaction “incomplete.” For undeclared crypto on a phone in the pocket of a tradesman in Bloemfontein: criminal liability and forced surrender of the keys.

You can believe Ramaphosa’s version of the facts. You can accept that he indeed sold rare buffalo to a Sudanese businessman, and that the cash hidden in his sofa was legitimate. It’s totally believable.

But none of that touches on the basic point. The framework is being applied with one hand to ordinary citizens and the other to the politically connected.

The proverbial pigs are now walking on two legs.

In Mossel Bay, on the Garden Route, sits a township called JCC Camp. In 2021, a project called Bitcoin Ekasi began paying surf instructors there in Bitcoin.

The instructors had been functionally locked out of the formal financial system for various reasons, including a lack of identity documents and bank fees that consumed their savings. Now they are paid in Bitcoin and spend it at local spaza shops that accept it. Tourists can buy surf lessons over the Lightning Network.

Further along the coast, Plettenberg Bay went from five Bitcoin-accepting merchants to over seventy in a few months. Witsand has more than forty-five. The 300-kilometre stretch from Mossel Bay to Storms River has become one of the world’s most interesting circular Bitcoin economies, run by South Africans, mostly small operators, paying their taxes and building something productive.

It exists because Bitcoin solves real problems for real people in a country with 32% unemployment, and many unbanked.

A surfing instructor paid in rand watches inflation eat his salary while the bank takes fees on his deposits. A small business taking Bitcoin from a foreign tourist avoids the 3% card processing fee, the FX margin, and the multi-day settlement delay.

A family in a Free State town receiving Bitcoin from a son working in Australia keeps almost all of what was sent, instead of losing close to a tenth of it to MoneyGram.

The proposed regulations criminalize the cross-border use cases that make Bitcoin most useful in this context. Treasury talks about modernizing the financial system, but the Garden Route IS the modernization. And the state is proposing to outlaw it.

A self-custodied wallet, properly held, is twelve to twenty-four words memorized in someone’s head. It leaves no forensic trace. It is not stored on a device. It cannot be detected at a border. There is no transaction record on the South African banking system, no exchange to subpoena, nothing to find unless the holder cooperates.

The regulation’s answer is to make non-cooperation a crime. The problem is that you cannot prosecute someone for refusing to hand over a key you cannot prove they have. You can search a phone and find nothing because there is nothing on the phone. You can demand passwords and be told there are none, because the relevant data exists only as words in someone’s memory.

For sophisticated holders, the toolkit goes further. Most Bitcoin wallets support passphrase-protected hidden wallets. One passphrase reveals a small decoy balance. Another, never disclosed, reveals the real one. There is no technical way to prove the second exists.

And a secure passphrase can never be cracked or guessed. This is a standard wallet feature, designed for exactly this scenario.

The regulation, then, will catch the honest, who declare and accept the new compliance burden. It will catch the technically unsophisticated, whose holdings are revealed via exchange records or device searches.

It will not catch anyone willing to memorize their seed phrase. It will not catch anyone with the means to set up a hidden wallet, the offshore connections to move value outside of the country, or the political access that has historically softened enforcement on the well-connected.

This is a feature of capital controls, not a bug. They have always been a tax on the unconnected.

South Africa is certainly not the first country to attempt to essentially ‘ban’ Bitcoin.

China has banned cryptocurrency in 2013, 2017, and 2021. Each ban was greeted in the Western press as the end of crypto in China. Each one failed. Today, peer-to-peer trading via offshore exchanges and VPNs continues at scale, and Chinese mining operations that were “shut down” simply migrated to Kazakhstan, the United States, and Canada, making the network more decentralized rather than less.

India chose punitive taxation rather than an outright ban: 30% on gains, no loss deductions, 1% withholding on every transaction. Formal volumes collapsed. Informal volumes surged. The state collects less revenue and has less visibility than it did before.

Nigeria told its banks in 2021 that they could not service crypto exchanges. Adoption increased anyway. Peer-to-peer volumes reached their highest levels in Africa. By 2023, the central bank had reversed course, conceding the policy had failed.

Turkey banned crypto payments in 2021 after the lira collapsed, prompting citizens to move savings into Bitcoin and stablecoins to preserve purchasing power. Today, Turkey has one of the highest per-capita crypto adoption rates in the world.

The pattern is so consistent that it should be a textbook chapter. When a state cannot offer its citizens a stable currency or a credible economic future, the citizens find an alternative. The activity does not go away - it disappears underground. The state ends up with less information and less revenue, not more.

South Africa is now joining the list of countries about to learn this lesson at its own population’s expense.

If the regulations pass in their current form, every Bitcoin holder in South Africa will face an unpleasant decision forced upon them by the state.

The first option is to comply. Declare your holdings, accept the prior-permission regime, and watch the asset class you bought because it sat outside the system become, for you, fully inside the system. Whatever Bitcoin was solving for you, it no longer solves.

The second option is to refuse. Hold your keys, transact privately, and accept that you are now in violation of the law. Any future investigation could surface that violation. Border crossings carry legal risk. You have become a criminal in the eyes of your own government, for the act of holding savings in a form the state cannot easily see.

The third option is to leave. Join the thousands of skilled South Africans who have already decided the country’s trajectory is no longer compatible with their plans, and take what you have built somewhere else.

There is no fourth option in which an honest, self-custodying citizen continues to live in South Africa, hold their savings in Bitcoin, transact normally, and remain on the right side of the law. That option is what these regulations will remove.

What you can do as a South African citizen, while the public comment window remains open until 10 June 2026, is the following.

• Submit a comment to the National Treasury. The official email address for submissions is published on the Treasury website. Even brief, well-argued comments are counted in the formal record.

• Join coordinated industry responses. Organizations including the Crypto Asset Industry Working Group are coordinating formal submissions, and individual signatures added to those submissions carry weight.

• Take the regulation as the prompt to learn proper self-custody. Understand passphrase-protected wallets. Understand seed phrase backup. Understand what a private key actually is and why no third party can hold yours for you. If your keys are on an exchange, they are not your keys.

• Talk about it. The Phala Phala scandal stayed buried for two years. This regulation will work only if the public does not notice in time to push back.

A state that recently cleared its own president of an exchange control offence involving foreign cash hidden in a sofa does not get to threaten a tradesman in Bloemfontein with five years in prison for an undeclared wallet.

You do not need to be a libertarian, a crypto enthusiast, or a Ramaphosa critic to see that something has gone badly wrong here. You only need to look at the sofa, and then at Bitcoin, and consider which one the law actually came for.

The regulation will ask of every South African Bitcoin holder, a single question:

Will you hand us your private keys?

The answer most of them will give, in one form or another, is the answer the state should have expected from the moment it asked.

You may also like…