How to Check If a Bank or Lender Is Licensed in Sudan (2026)

The war has closed branches and pushed people toward whatever financial service is actually reachable — and that gap has reportedly been filled in places by services operating outside CBOS oversight. Before you trust anyone with your money in Sudan, here's the one check that matters most, and how to actually do it.

The one thing to check: is it on the CBOS list?

The Central Bank of Sudan (CBOS) is the sole licensing authority for commercial banks operating in Sudan. Before opening an account, taking a loan, or sending money through any institution, check it against the CBOS commercial-bank locator: https://cbos.gov.sd/en/commercial-bank-locator.

• If it's not there, it is not a licensed bank — whatever it calls itself.
• For microfinance lenders specifically, check the Microfinance Unit (MFU) register at https://mfu.gov.sd instead — banks and microfinance institutions are licensed through different channels.

Why this actually matters right now

This isn't a theoretical warning. Two real, reported examples show both sides of the risk:

• The vacuum gets filled. As commercial bank branches closed or became unreachable during the war, unlicensed alternatives have reportedly stepped into that gap in some areas — . The lesson isn't "avoid all new services" — some legitimate CBOS-licensed fintechs exist too — it's "check the list before you trust the name."
• CBOS does enforce this. The Central Bank has previously cancelled the operating licence of a local fintech firm following concerns about how it launched and its ownership structure — proof that licensing checks aren't just paperwork; CBOS actively pulls licences when it finds a problem.

What licensing actually protects you from

A CBOS-licensed bank operates under prudential supervision — capital requirements, reporting obligations, and (per Islamic banking rules) Sharia board oversight of how your money is actually used (see Islamic banking basics for what that supervision is checking). An unlicensed operator has none of that. If something goes wrong with an unlicensed service, there is no regulator to complain to and no supervisory framework that was ever protecting you in the first place.

It's worth being precise about what licensing does and doesn't promise:

• It does mean the institution met capital requirements, submits to supervision, and can have its licence pulled — which, as above, CBOS actually does.
• It does not mean every product it sells is right for you, that returns are guaranteed, or that the institution cannot fail. Licensing is a floor, not a warranty.
• It does not extend to an agent or intermediary acting in the bank's name. A licensed bank behind a transaction doesn't make the person arranging it legitimate — verify the institution and the channel.

The specific traps to watch for

Most losses don't come from an obviously fake "bank." They come from narrower deceptions:

• The near-identical name. Registers are checked by eye, and an operator one letter or one word away from a licensed institution's name is a deliberate tactic. Match the name character for character, and be suspicious of an unfamiliar suffix ("… Financial Services", "… Capital") bolted onto a name you recognise.
• The real bank, the wrong account. A genuine bank name on an invoice says nothing about who owns the destination account. Confirm account details through a channel you initiated — not a number or IBAN sent to you in the same message that requested payment.
• "Licensed" as a bare claim. A logo, a licence number in a footer, or a certificate image proves nothing; all are trivially copied. The claim only counts if you found the institution on the register yourself.
• Pressure to bypass the check. Any variation of "the offer closes today," "transfer first and we'll register you after," or "the branch system is down, use this personal account" is the moment to stop entirely.
• Recovery scams after a loss. If you've already lost money, expect approaches from people promising to recover it for an upfront fee. This is a second theft aimed at the same victim — no legitimate recovery service works that way.

A simple checklist before you commit money anywhere

1. Search the CBOS locator for the bank's exact name — not a similar- sounding one.
2. For a lender or microfinance product, check the MFU register instead.
3. Be wary of any service that only exists as an app or a phone number, with no listed licensed institution behind it.
4. If a "bank" pressures you to move fast ("limited time," "special access") — that pressure itself is a red flag regulated institutions don't need to use.
5. Ask directly: a legitimate CBOS-licensed institution will confirm its licence status without hesitation; an unlicensed one will deflect.
6. Verify the app, not just the brand — install only from the official app-store listing, never a link. Our Bankak guide covers this in detail for the app most Sudanese households actually use.
7. Get it in writing before money moves, dated. In a currency as volatile as the Sudanese pound, an undated verbal quote isn't something to act on.

This applies to insurers too

The same discipline covers insurance. Sudan's insurers are licensed by the Insurance Supervisory Authority (ISA) rather than CBOS — a different regulator, same principle: confirm the licence before you hand over money. See insurance in Sudan explained for how that market is structured.

Likewise, if you're formalising a business, the entity you register with is the Commercial Registrar — a different body again, covered in how to register a business in Sudan. The habit generalises: identify which authority licenses the thing you're dealing with, then check that specific register.

Checking from outside Sudan

If you're in the diaspora — sending money home, or helping family decide where to hold it — you can do this check yourself without being in the country, and it's often more useful coming from you, because you likely have steadier internet than the person relying on the money does.

Two things worth doing from abroad specifically:

• Verify the receiving institution before the first transfer, not after a problem. The full sending guide covers choosing the channel; this check covers who ends up holding the money at the other end.
• Be the second opinion on anything urgent. Pressure tactics work best on someone isolated and stressed. A relative abroad who can spend ten minutes checking a register is a genuine safeguard — and if a request reaches you claiming to be from family and demanding speed and secrecy, verify it by calling them on a number you already had.

Do the maths before you commit

Once you've confirmed a bank or lender is real, use our personal loan calculator or savings calculator to work out what a real offer actually costs or earns you.

Frequently asked questions

Is Bank of Khartoum licensed? Yes — Bank of Khartoum is a long-standing CBOS-licensed commercial bank; you can confirm it (and any other bank) directly on the CBOS locator.

What if a bank was licensed before the war but I can't reach its branch now? Licensing status and branch accessibility are different questions. A bank can remain licensed while a specific branch is closed or hard to reach — — check its own current channels (app, alternate branches) directly.

Is a mobile-money-style app automatically unlicensed? No — some are run by CBOS-licensed banks (like Bankak, from Bank of Khartoum) and are exactly as protected as the bank behind them. The question is always which licensed institution stands behind the app, not the app format itself.

What about hawala agents — are they licensed? Hawala operates as an informal network rather than a licensed institution, which is a different question from whether it's illegal. For the great majority of remittances into Sudan it's the channel that actually works, and our guide to receiving money from abroad covers the honest trade-offs. The key distinction: with a licensed bank your protection is supervision; with a hawala agent your protection is the agent's reputation and your own diligence. Neither is "safe" or "unsafe" in the abstract — they're different risk models, and you should know which one you're relying on.

Someone offered me a much better exchange rate than the banks. Is that a scam? Not necessarily — the parallel market is a real feature of Sudan's economy, not by itself a fraud. But an unusually good rate from an unfamiliar counterparty is exactly the bait a scam uses, and an informal transaction leaves you no recourse if it goes wrong. Judge the counterparty, not the rate.

How often should I re-check a register? Before any significant new commitment, and certainly before a first transaction with an institution you haven't dealt with before. Licences get revoked — CBOS has cancelled at least one fintech's licence — so a check you did a year ago isn't evidence about today.

I think I've already sent money to an unlicensed operator. What now? Contact your own bank immediately if the transfer went through them; speed matters most in the first hours. Report it to CBOS, and keep every record — messages, receipts, account details, dates. And be ready for the recovery scam described above: nobody legitimate will ask for an upfront fee to get your money back.