ARTICLE
21 August 2026

After The Freeze: What Happens Next For Crypto Arbitrage And Exchange Control Risk?

E
ENS

Contributor

ENS is an independent law firm with over 200 years of experience. The firm has over 600 practitioners in 14 offices on the continent, in Ghana, Mauritius, Namibia, Rwanda, South Africa, Tanzania and Uganda.
The South African Reserve Bank's dispute with fintech Kastelo has evolved from an account freeze into a pivotal test case for how exchange control regulations apply to crypto arbitrage platforms. As the litigation moves beyond procedural questions to substantive regulatory compliance, businesses operating cross-border digital asset models face critical uncertainty about when client foreign exchange allowances can legitimately support platform-based crypto transactions. The unresolved merits may fundamentall
South Africa Finance and Banking
Angela Itzikowitz’s articles from ENS are most popular:
  • within Finance and Banking topic(s)
  • in European Union
  • with readers working within the Pharmaceuticals & BioTech industries
ENS are most popular:
  • within Immigration, Consumer Protection and Transport topic(s)

The dispute between the South African Reserve Bank (the “SARB”) and Fintech company Kastelo has moved beyond the first shock of a frozen account (Read our previous article here). The more important question now is what the matter means for businesses whose models depend on cross-border flows, foreign client investment allowances and digital asset infrastructure.

Latest reports suggest that Kastelo is considering whether to continue challenging the blocking order imposed on its bank account, while also maintaining that the SARB acted prematurely in freezing its crypto arbitrage business. That shift matters. It moves the story from the fact of regulatory intervention to the harder question of how far regulators may go when they suspect exchange control contraventions, particularly in a sector where the commercial model may be novel, but the underlying regulatory framework is not.

The litigation has not yet resolved the substantive exchange control questions. In January 2026, the Johannesburg High Court dismissed Kastelo’s urgent application to review and set aside the blocking order, but the ruling was confined to urgency. The Court did not decide whether the blocking order was substantively justified, nor whether Kastelo’s business model complied with the Exchange Control Regulations.

That distinction is important. A blocking order is an interim regulatory measure. It can have immediate and severe commercial consequences, but it is not itself a finding of wrongdoing. Public commentary on the judgment records that the order froze Kastelo’s Access Bank account pending a regulatory investigation and that the SARB acted after receiving information from Kastelo’s bank, whistleblowers and certain clients indicating that the nature of the transactions appeared to contravene exchange control rules. Kastelo disputes that characterisation.

At the centre of the dispute is the use of individual foreign exchange allowances in crypto arbitrage transactions. South African residents may externalise limited amounts annually through the Single Discretionary Allowance and the Foreign Investment Allowance, subject to applicable conditions. The publicly reported concern is not that crypto arbitrage is unlawful in itself, but whether the structure through which clients’ allowances were used remained consistent with the purpose and requirements of the exchange control framework.

Kastelo’s reported position is that it obtained legal advice that its model did not breach exchange controls, including where funds were advanced to qualifying clients. The SARB’s concern, as reported, appears to be that the use of client allowances in an intermediate, loan-funded model may have crossed the line from personal offshore investment into something closer to the use of allowances for a third party’s commercial purpose.

This is the regulatory significance of the matter. It is not simply a crypto case. It is an exchange control case that happens to involve crypto assets.

That framing is vital as far as any business operating in the digital asset space is concerned. The fact that crypto assets are technologically novel does not mean that the surrounding activity is novel for regulatory purposes. A transaction may still involve the externalisation of value, the use of foreign exchange allowances, client disclosures to authorised dealers, cross-border settlement flows, credit arrangements, financial services, or anti-money laundering obligations. Regulators are likely to look at the substance of the arrangement rather than the language used to describe it.

The matter also highlights the risk of building a business model around permissions that were originally designed for individuals. Foreign exchange allowances are personal in nature. Where a platform depends on the repeated use of multiple clients’ allowances, particularly where clients may be funded, incentivised or guided through a standardised process, the business should expect close scrutiny of who is really controlling the transaction, who bears the risk, who receives the economic benefit and whether the authorised dealer has been given a complete and accurate picture.

For fintechs, the key lesson is not that innovation should stop. It is that innovation in regulated financial markets must be capable of withstanding regulatory reconstruction. If the regulator strips away the interface, marketing language and transaction flow, the business should still be able to explain why the model complies with the legal framework that governs the underlying activity.

The case also demonstrates the commercial force of interim regulatory action. A blocking order may be provisional, but its practical impact can be immediate. It can affect liquidity, client confidence, contractual performance, bank relationships and investor sentiment before the merits are finally determined. Businesses operating in sensitive regulatory areas should therefore treat regulatory-response planning as part of their ordinary risk management framework, not as an emergency exercise once a bank account has already been frozen.

This is especially important in crypto arbitrage, where market conditions have already changed. Moneyweb has reported that the arbitrage spread has narrowed substantially, with the premium hovering around or below 1% in 2026 compared with far higher spreads in earlier years. That means regulatory disruption now arises in a market where margins may already be compressed and where delays, frozen funds or reputational uncertainty may have an outsized impact.

The broader industry should therefore watch the Kastelo matter closely, not because it will determine the future of crypto arbitrage on its own, but because it may clarify how exchange control principles apply to intermediated digital asset models. The unanswered questions go to the heart of the market: when is a client genuinely using their own allowance, when is a platform merely facilitating a permitted transaction, and when does the structure become a regulatory workaround?

Until those questions are resolved, businesses should avoid assuming that historic market practice amounts to regulatory approval. Ongoing engagement with banks or regulators is important, but it is not a substitute for a clear legal basis for the activity being conducted.

The next phase of the Kastelo dispute may therefore be more important than the first. The urgent application told the market that procedural timing matters. The unresolved merits may tell the market something far more significant: how South Africa’s exchange control regime will treat crypto-enabled, platform-based cross-border value flows.

We continue to monitor the case with interest and will provide updates as they are develop.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More