Regulatory Compliance

FSCA CASP2 Licensing

FutureFund operates under the Financial Sector Conduct Authority (FSCA) Crypto Asset Service Provider (CASP) Category 2 license. This licence authorises us to provide intermediary services for crypto assets, including the conversion of fiat currency to stablecoins and the management of crypto asset portfolios on behalf of our clients.

As a licensed CASP, we are subject to ongoing regulatory oversight, regular reporting requirements, and compliance audits. Our licence requires us to maintain adequate capital reserves, implement robust governance structures, and adhere to the FSCA's conduct standards for crypto asset service providers.

The CASP licensing framework was established by the FSCA under the Financial Advisory and Intermediary Services Act (FAIS) and represents South Africa's regulatory approach to bringing crypto asset services within the formal financial regulatory perimeter.

Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF)

FutureFund maintains a comprehensive AML/CTF programme in compliance with the Financial Intelligence Centre Act (FICA) and FSCA requirements. Our programme includes:

• Customer due diligence (CDD) procedures for all new account holders
• Enhanced due diligence (EDD) for higher-risk customers and transactions
• Ongoing transaction monitoring using automated screening systems
• Suspicious transaction reporting (STR) to the Financial Intelligence Centre (FIC)
• Sanctions screening against United Nations, OFAC, and South African sanctions lists
• Regular staff training on AML/CTF obligations and red flag indicators
• Annual independent review of our AML/CTF programme effectiveness

Know Your Customer (KYC) Requirements

All FutureFund users must complete identity verification before accessing our savings services. Our KYC process is designed to be thorough yet user-friendly:

• Identity verification: Valid South African ID document or passport
• Address verification: Recent proof of address (utility bill, bank statement, or municipal account not older than three months)
• Selfie verification: Live photograph matched against identity document
• Risk assessment: Evaluation of source of funds and intended use of the platform

KYC verification is a once-off process that typically completes within 24 hours. We use industry-leading identity verification technology to ensure accuracy while minimising friction for our users. Periodic re-verification may be required in line with regulatory requirements.

Data Protection (POPIA)

FutureFund is fully compliant with the Protection of Personal Information Act (POPIA), South Africa's primary data protection legislation. Our data protection measures include:

• Appointment of a registered Information Officer
• Data processing impact assessments for all new features and services
• Lawful basis documentation for all categories of personal information processed
• Data minimisation principles: we collect only the information necessary for our services and regulatory obligations
• Clear data retention policies aligned with FICA and SARS requirements
• Data subject access request (DSAR) procedures enabling users to exercise their POPIA rights
• Breach notification procedures in compliance with POPIA Section 22

For full details on how we handle your personal information, please refer to our Privacy Policy.

Supported Jurisdictions

FutureFund is currently available in the following jurisdictions, with expansion planned across the continent:

We pursue appropriate licences and regulatory approvals in each jurisdiction before launching services. Our approach is to work collaboratively with local regulators to ensure full compliance with each country's financial regulatory framework.

DeFi Protocol Partners

FutureFund deploys user funds exclusively into established, audited decentralised finance protocols. Our current protocol partners include:

All protocol partnerships undergo rigorous due diligence, including smart contract audit review, team assessment, historical performance analysis, and ongoing risk monitoring. We maintain diversified protocol exposure to mitigate concentration risk.