A digital-asset business that expands internationally without mapping its tax footprint can crystallize a permanent establishment (a taxable presence in a foreign jurisdiction, distinct from the entity's registered seat) before its founders realize the exposure exists. That is the central risk this guide addresses. Under the OECD Model Tax Convention – the template that most bilateral tax treaties follow – a permanent establishment arises when an enterprise carries on business in a second jurisdiction through a fixed place of business or through a dependent agent with authority to conclude contracts there. For crypto firms, whose technical infrastructure is distributed and whose staff routinely work across borders, the analysis is rarely simple.
As regulators converge on MiCA in the European Union and as VARA, the MAS Payment Services Act and other activity-based regimes tighten supervision worldwide, the PE question intersects directly with licensing: a taxable presence in a jurisdiction often implies a regulated one, and vice versa. This guide maps the PE risk for digital-asset businesses, explains the structuring levers available, and identifies the points where the tax and licensing analyses must be run in parallel.
What Is Permanent Establishment and Why Does It Matter for Crypto?
A permanent establishment (PE) is the legal threshold at which a foreign state acquires the right to tax a non-resident enterprise on the profits attributable to its presence there. The concept originates in bilateral tax treaties and in domestic legislation that mirrors the OECD Model, though treaty networks differ in scope and carve-out provisions. For a crypto firm, a PE determination means that profits generated by the relevant activities may become taxable in the second jurisdiction – even when the entity is incorporated elsewhere and its founders believe the business sits cleanly offshore.
The stakes are material. A PE that is identified only during a tax authority inquiry can trigger back-taxes, interest, penalties and, in some regimes, personal liability for directors or founders who controlled the activities in question. We have seen businesses operating across three jurisdictions discover, only at the due-diligence stage of an investment round, that they had an unregistered PE in a jurisdiction with a corporate tax rate well above their base. The cost of remediation – back-taxes, restructuring, legal fees – far exceeded what a pre-launch structuring exercise would have cost.
The practical consequence is that PE analysis is not a tax technicality to address after the business is running. It is a structural decision made at formation, or remade every time the business adds a jurisdiction, a new staff member, a node operator, or a new user base.
How Does a Permanent Establishment Arise for Digital-Asset Businesses?
A PE arises for a crypto firm through three principal routes: a fixed place of business, a dependent agent, and – increasingly relevant – a digital-economy nexus concept where local legislation departs from the classic treaty model.
Fixed place of business. This is the traditional route. An office, a co-location data center, a mining facility, or even a habitually used desk in a co-working space can constitute a fixed place of business if the enterprise's core activities are carried on there. For exchanges and custodians, the question turns on where trading decisions are made, where customer contracts are executed, and where key management functions sit. An entity incorporated in, say, a low-tax offshore jurisdiction but whose CTO and compliance team work from an EU capital has a credible PE exposure in that EU member state under MiCA-era regulatory logic and under the applicable tax treaty.
Dependent agent. A person – individual or company – who habitually acts on behalf of the enterprise and has authority to conclude contracts in its name constitutes a PE even without any fixed office. In a token-issuing structure, a founder who signs term sheets, negotiates exchange listings, or represents the entity in investor discussions from a jurisdiction other than the entity's seat may create an agent PE. The "dependent" element requires that the agent not be economically independent; a sole founder acting exclusively for one entity almost never qualifies as independent.
Digital nexus / significant economic presence. A growing number of jurisdictions have introduced or are piloting rules that attribute taxable nexus based on revenue derived from users in a territory, even in the absence of physical presence. These rules – broadly aligned with OECD Pillar One concepts, though implemented unevenly – are particularly consequential for exchanges and protocol operators with large retail user bases concentrated in one country. Where such rules apply, a crypto firm can acquire a taxable presence solely through the digital nature of its services.
Cross-Border Structuring: How Do Leading Crypto Firms Manage PE Risk?
Effective cross-border structuring for digital-asset businesses aligns three elements: the jurisdiction of incorporation, the substance test requirements of that jurisdiction, and the day-to-day operational reality of where decisions are made and where staff are located. When those three elements diverge, PE risk emerges in the gap.
In our practice advising exchanges, custodians and token issuers, we regularly see two recurring structural errors. First, founders select an offshore domicile – the British Virgin Islands under the BVI FSC VASP Act 2022, the Cayman Islands under the CIMA VASP Act, or a Maltese entity under the MFSA framework transitioning to MiCA – but then conduct all material business from a high-tax jurisdiction where they personally reside. The offshore entity holds the IP and the treasury, but the people making the decisions are elsewhere. That divergence is precisely what PE doctrine is designed to catch.
Second, a business scales into a new market by hiring a local business development manager without restructuring. That individual negotiates agreements with local exchanges, attends meetings with local regulators, and closes commercial relationships. Under many treaty definitions, that activity is sufficient to constitute an agent PE in the new market. The business has acquired a taxable presence without a licence, a bank account, or a deliberate decision to enter that jurisdiction.
The structuring response involves several levers. Substance at the holding level – board meetings held in the jurisdiction, directors who are resident there and make decisions there, operational management genuinely located at the seat – is the foundational requirement. A holding company that can demonstrate real economic substance in its domicile is better positioned to resist a PE claim in another jurisdiction, particularly where a tax treaty is in force between the two. For businesses using intermediate holding structures to separate IP, treasury, operations and licensing entities, the transfer pricing rules that govern intra-group transactions must be designed alongside the PE analysis, not separately.
For a scoped PE and structuring assessment across your operating jurisdictions, contact OBOLUS at info@oboluslaw.com. The process above describes the standard analytical path. Your facts – the entity structure, the staff locations, the user geography – will change the analysis materially.
What Holding Structure Should a Crypto Firm Use?
The right holding structure for a digital-asset business depends on the business model, the founder's personal tax residency, the target licensing jurisdiction, and the anticipated exit path – and all four must be considered together, not sequentially.
A common structure for an exchange or custodian seeks to place the licensing entity – the entity holding the operational licence from VARA, MAS, the SFC, or an EU NCA under MiCA – in the jurisdiction where users and regulatory obligations are concentrated, while locating IP ownership and treasury management in a separate holding entity with a strong treaty network and genuine substance. The two entities are connected by a management services agreement and, where relevant, a royalty or licence agreement for the IP.
The tax efficiency of this arrangement depends critically on two things. First, the holding jurisdiction must impose no – or minimal – withholding tax on dividends, interest and royalties paid to the ultimate shareholders, and must have a treaty network that protects those flows from double taxation. Second, the substance test must be satisfied: the holding jurisdiction's tax authority, and those of counterparty jurisdictions, must accept that the holding entity is genuinely managed and controlled there.
For token issuers, the analysis shifts. A token-issuing entity must be positioned in a jurisdiction whose regulatory regime does not inadvertently classify the token as a security, an asset-referenced token under MiCA, or an e-money token, unless the issuer is prepared to meet the corresponding regulatory capital and disclosure requirements. The interaction between the tax classification of token proceeds – income versus capital, at entity level and at founder level – and the regulatory classification of the token is a threshold structural question.
Operators we advise routinely separate the issuing entity from the development company and the foundation, each in a jurisdiction suited to its function. The foundation handles community governance; the development company holds the IP and employs the engineering team; the issuing entity manages the token sale and treasury. Each of those entities has its own tax profile, its own substance obligations, and its own PE risk. The holding structure must account for all three.
Does a Founder's Personal Relocation Change the Group's Tax Position?
Personal relocation does not, by itself, change a corporate group's tax position – and the assumption that it does is one of the most persistent and costly errors we encounter in cross-border digital-asset work.
A common assumption is that if the founder moves to a zero- or low-income-tax jurisdiction – Dubai, Singapore, the Cayman Islands – the business's tax profile follows. In practice, the two analyses are largely independent. The corporate group's tax position is determined by where the entities are incorporated, where they are managed and controlled, where their PEs are located, and what treaty network applies between those jurisdictions. The founder's personal tax residency affects the taxation of dividends, capital gains and employment income received by the founder personally. It does not relocate the entity's deemed residence, and it does not eliminate a pre-existing PE in the jurisdiction the founder left.
More acutely: a founder who relocates but continues to make material business decisions – approving term sheets, directing treasury management, hiring key personnel – for an entity that remains operationally active in the origin jurisdiction may not have severed the management-and-control nexus that determines where the entity is resident for tax purposes under that jurisdiction's domestic rules. The relocation is personal; the control remained behind.
Personal and corporate tax residency must be designed together. That means aligning the founder's departure from the origin jurisdiction (with a clean tax residency break, where the domestic rules require one), the transition of management functions to the new jurisdiction, and the restructuring of the corporate group to reflect the new operational reality. Done in the wrong order, or done incompletely, the result is a structure that satisfies neither jurisdiction's test and attracts scrutiny from both.
We align founder residency with the holding structure and the exit plan as a single integrated mandate. In our experience, the businesses that encounter PE and residency problems at the due-diligence stage of a funding round or a sale are those where personal and corporate planning were treated as separate workstreams.
How Does Remote Working Create Permanent Establishment Risk for Crypto Teams?
Remote working creates a specific and frequently underestimated PE risk: an employee who works habitually from a jurisdiction where the employer has no registered presence may constitute a fixed-place-of-business PE in that jurisdiction, particularly if the employee performs core functions there – development, compliance, trading, or contract negotiation.
The risk was widely observed during and after the period of accelerated remote working, and tax authorities in several major jurisdictions issued guidance acknowledging the issue – though that guidance was largely temporary and the underlying treaty analysis has not changed. The relevant question is whether the employee's home, or a co-working space they use regularly, constitutes a fixed place through which the enterprise's business is carried on.
For most digital-asset businesses, the critical employees in this analysis are those with authority to bind the entity – the general counsel who signs client agreements, the COO who approves operational expenditure, the business development lead who concludes partnership arrangements. A junior developer working remotely presents a lower risk, though not a negligible one if the development activity constitutes the enterprise's core business and the developer works exclusively for the entity. A compliance officer who communicates with a foreign regulator on behalf of the entity from a personal address in that regulator's jurisdiction is a clearer case.
The structuring response involves formalizing the employment relationship in a way that routes the employee through a local subsidiary or a professional employment organization, ensures that the employee's authority to bind the parent entity is explicitly limited, and confirms that core management functions remain at the holding level in the correct jurisdiction. Operators we advise regularly implement these controls as part of a global mobility policy, reviewed whenever a new hire or contractor is engaged in a new jurisdiction.
If your team's distribution has outpaced your legal structure, write to OBOLUS at info@oboluslaw.com to map the exposure and the remediation path. If a prior application stalled or a structure was built before the remote-working risk was understood, a structural review can surface the issue and the route back to compliance.
Where Does the Permanent Establishment Analysis Intersect With Licensing?
The PE analysis and the licensing analysis converge at the point where regulatory substance requirements and tax substance requirements overlap – and, in the leading digital-asset hubs, that point is increasingly explicit.
Under VARA in Dubai, an entity seeking an operational licence must demonstrate that it genuinely conducts its regulated activities from within Dubai. Under MiCA and the CASP authorisation regime administered by ESMA and national competent authorities, an entity must be established in the EU member state from which it is authorised. Under the MAS Payment Services Act in Singapore, a licensed entity must have a physical presence and management in Singapore. Those substance conditions – which regulators impose to ensure that supervision is meaningful – are functionally similar to the substance conditions that tax authorities impose to determine where the entity is genuinely resident and where its PE is located.
The consequence is that a crypto firm that satisfies the substance test for its regulatory licence in one jurisdiction is, in most cases, on strong ground to argue that it is not creating a PE in a second jurisdiction through the same activities. Conversely, a firm that has thinly staffed its licensed entity and is running the business from elsewhere has a dual problem: it may fail the regulator's substance test and be exposed to a PE claim in the jurisdiction from which the business is actually run.
We structure licensing, banking and tax as one mandate rather than three disconnected workstreams. The licensing jurisdiction, the substance requirements of that licence, and the tax implications of the holding structure above it are mapped together at the start of an engagement. That integrated approach is the operative difference between a structure that holds under scrutiny and one that fractures at the first regulatory or tax audit.
A micro-matter from a recent engagement illustrates the point. A token-issuing business had obtained regulatory approval in an offshore jurisdiction and assumed that its tax position was correspondingly clean. When the business sought institutional investment, the due-diligence process revealed that the entity's two founders – who held all decision-making authority – had remained resident in a G7 jurisdiction throughout. Both the management-and-control residency test of that jurisdiction and a potential agent-PE claim in it applied. We restructured the holding arrangement, formalized the transition of management functions, and aligned the founders' personal residency plans with the corporate timeline before closing. The transaction completed, but the remediation required several months and added material cost that a pre-issuance structuring exercise would have avoided.
Which Structuring Profile Is Right for Your Business?
The appropriate structuring profile depends on the business's stage, model, and the founder's personal position. The following profiles represent the most common scenarios in our cross-border digital-asset practice.
Profile A – Early-stage token issuer. The business has not yet launched a token and is considering jurisdiction of formation. The founders are mobile. The optimal path typically involves a holding entity in a jurisdiction with a strong treaty network, genuine board-level substance, and a regulatory regime that does not inadvertently classify the intended token as a regulated financial instrument requiring capital or disclosure obligations. The tax analysis at this stage focuses on exit – where gains on the token treasury and the equity will be taxed – and the holding structure is built backwards from that exit scenario. Indicative timeline for the structuring work: several weeks for the analysis, several months for the formation and substance implementation.
Profile B – Operating exchange with an existing licence. The business holds a licence – from MAS, the SFC, VARA, or an EU NCA under MiCA – and is expanding its user base into new markets. The PE risk arises from business development activity, local marketing partnerships, and the possible appointment of a local representative. The structuring work involves formalizing the commercial relationships so that no individual in the new market has authority to bind the licensed entity, and assessing whether a local subsidiary – which would be a controlled PE, and therefore manageable – is preferable to an uncontrolled one. The licensing analysis for the new market runs in parallel. Key risk: a local regulatory requirement to be licensed may itself require a local entity, resolving the PE question by making it explicit.
Profile C – Founder relocating from a high-tax jurisdiction. The founder holds equity in an existing operating entity and intends to relocate personally to a low-tax or zero-tax jurisdiction. The structuring work involves a full tax residency break analysis in the origin jurisdiction, a personal tax plan for the destination, and a parallel corporate restructuring to ensure that management and control of the entity genuinely transfers with the founder. Key risk: the entity remains resident in the origin jurisdiction if the founder continues to make decisions for it there, regardless of where the founder is personally domiciled. Timeline: the personal and corporate work must be completed before the event – typically a token generation event, a dividend, or a sale – that triggers the tax consequence the founder is planning around.
A Common Assumption: Does the Treaty Protect Against PE Claims?
A common assumption among digital-asset founders is that if a bilateral tax treaty exists between the jurisdiction of incorporation and the jurisdiction of suspected PE, the treaty automatically resolves the issue. It does not.
A treaty limits the source jurisdiction's right to tax – it does not eliminate PE exposure where a PE genuinely exists. Where a PE is found to exist under the treaty definition, the source jurisdiction has the right to tax the profits attributable to that PE. The treaty then governs how that taxation interacts with the residence jurisdiction's tax – typically through a credit or exemption mechanism – but the PE-jurisdiction tax still applies.
Furthermore, not every jurisdiction has a treaty network that covers the relevant relationship. A crypto firm operating between a common-law offshore jurisdiction and an emerging market, or between two jurisdictions with competing domestic-law residency claims, may find that no treaty applies or that the applicable treaty's PE definition is narrower or broader than the OECD Model. In those cases, domestic law governs – and domestic PE rules vary considerably.
The treaty analysis must be combined with the domestic-law analysis in both jurisdictions. That combined exercise, updated whenever the business enters a new market or changes its operational footprint, is the minimum required to understand the actual exposure.
Related at OBOLUS
- Tax and cross-border structuring for digital-asset businesses – full-service structuring for exchanges, issuers and funds across jurisdictions
- Staking and rewards taxation in Mauritius – jurisdiction-specific analysis of staking income treatment under the VAITOS Act
- How to negotiate a PSP and acquiring agreement – practical guidance on payment structuring for crypto businesses seeking banking access
FAQ
Where should a token-issuing entity be domiciled?
The right domicile depends on the token's regulatory classification, the founder's personal tax residency, and the anticipated exit structure. Jurisdictions with a strong treaty network, genuine board-level substance capacity, and a regulatory regime that does not impose unintended obligations on the token type – such as MiCA's ART or EMT categories in the EU – are commonly preferred. The domicile decision must be made before the token generation event, not after.
How are staking rewards taxed?
Staking reward taxation varies by jurisdiction and depends on whether the domestic tax authority treats rewards as income on receipt, as capital on disposal, or as a hybrid. No single international standard applies. In most major jurisdictions, rewards received by an entity are treated as ordinary income when received, subject to deductions for associated costs. At the personal level, treatment differs further. A structuring analysis for staking income should be jurisdiction-specific and should account for both entity-level and founder-level tax positions.
Does remote working create tax residency risk?
Yes. An employee working habitually from a jurisdiction where the employer has no registered entity may create a fixed-place-of-business permanent establishment in that jurisdiction, particularly if the employee performs core functions or has authority to bind the employer. The risk is higher for senior employees with signing authority and lower – though not eliminated – for purely technical roles. A global mobility policy, reviewed for each new cross-border hire, is the standard risk-management tool.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance obligations that connect them. We align founder residency with the holding structure and exit plan as a single integrated mandate. Digital assets are the whole of our practice, and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your situation, contact info@oboluslaw.com.
By Lydia Brennan, Tax & Structuring Analyst – specialist in cross-border holding structures, PE analysis and token-related tax planning for digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.