Operating a crypto exchange (a platform that facilitates the buying, selling or trading of digital assets for users) without proper authorisation in the Bahamas exposes a business to enforcement action, banking termination and reputational damage that accumulates quickly. The Bahamas has positioned itself as a purpose-built jurisdiction for crypto exchange licensing, anchored by the Digital Assets and Registered Exchanges Act (DARE Act) – a bespoke statutory regime administered by the Securities Commission of the Bahamas (SCB). Understanding what authorisation is required, how the process runs and how the Bahamas structure interacts with a business's global footprint is the work OBOLUS does before a client commits.
This page explains the Bahamas regulatory regime for crypto exchanges, the practical licensing process, the cross-border tax and banking questions that arise alongside it, and where this jurisdiction fits in a broader licensing strategy.
The Bahamas Regulatory Regime for Crypto Exchanges
The Bahamas established a standalone digital-asset licensing regime before most comparable jurisdictions had enacted primary legislation. The DARE Act places the Securities Commission of the Bahamas as the competent authority for digital asset businesses (DABs) – a defined category that covers exchanges, custodians, issuers and related service providers. Under the DARE Act, operating as an exchange or offering custody of digital assets without SCB registration or a licence is a criminal offence.
The SCB issues two principal instruments under the regime: registration, available to lower-risk or smaller-volume operators, and licensing, required for businesses operating at scale or offering a broader range of activities. The distinction matters at the application stage. A business that files for registration when the SCB considers its activities to require a full licence – or vice versa – will face a protracted back-and-forth that adds months to the timeline. We see this error repeatedly in inbound applications where counsel has not read the SCB's published guidance carefully.
The SCB's mandate under the DARE Act is broader than a simple registration function. The regulator sets conduct-of-business standards, AML and Travel Rule (the obligation to pass originator and beneficiary data with each digital asset transfer) compliance expectations, and ongoing supervision obligations that track closely to FATF Recommendation 15 on virtual assets. Businesses that are used to lighter-touch offshore regimes find the SCB's supervisory posture more hands-on than anticipated.
The process above describes the standard path. Your facts – the entity structure, the user base geography, the banking arrangements – change the analysis materially. To confirm whether your activity requires registration or a full licence under the DARE Act, contact OBOLUS at info@oboluslaw.com.
Who Needs a Licence – and Who Can Register?
Any person conducting a digital asset business as defined under the DARE Act and operating from or in the Bahamas is subject to SCB oversight. The SCB interprets "from the Bahamas" broadly – a business incorporated in the Bahamas but serving clients elsewhere is within scope, as is a business with operational staff or a registered office in the Bahamas even if its users are predominantly offshore.
The activities that trigger the licensing or registration requirement include: operating a digital asset exchange or trading platform; providing digital asset custody or management services; dealing in digital assets as principal or agent; arranging transactions in digital assets; and providing advisory services in relation to digital assets. The regime is activity-based, not entity-based. A holding company that does not itself conduct these activities will not require a DAB licence, but the operating subsidiary or the platform entity that does conduct them will.
The SCB has discretion to classify an applicant as a registrant or a licensee based on volume, complexity, the range of activities and the degree of risk to clients. Applicants cannot self-select the lower tier without engaging with the SCB's classification criteria. In our practice, we advise clients to prepare for the licensing standard even when registration appears available – the documentation and governance requirements differ less than operators expect, and building to the higher standard from the outset avoids a costly upgrade later.
What Does the Application Process Involve?
The Bahamas DAB application is a structured submission to the Securities Commission of the Bahamas, covering corporate documentation, AML/CFT policies, business plans, technology due diligence and fit-and-proper assessments of key individuals. The SCB has published guidance on required documents, but the guidance is a floor, not a ceiling – applications that arrive at the minimum standard without demonstrating genuine operational readiness tend to attract additional information requests that extend the process significantly.
The key workstreams in a well-prepared application are: entity incorporation or re-domiciliation in the Bahamas; registered office appointment; preparation of the AML/CFT compliance programme (aligned to FATF standards and local AML legislation); technology and cybersecurity documentation; preparation of the business plan and financial projections; and fit-and-proper submission for directors, officers and beneficial owners.
The SCB has not published a fixed statutory clock for processing, so the timeline varies by complexity and by the completeness of the initial submission. In our cross-border practice, we have seen well-prepared applications for comparable regimes process in a matter of months; incomplete applications or those requiring multiple rounds of clarification can extend materially beyond that. Clients should plan for the possibility of a back-and-forth with the regulator and build that buffer into project timelines.
Ongoing obligations post-authorisation are significant. The SCB expects regular reporting, annual audits, incident notifications and ongoing AML/CFT monitoring. A business that treats the licence as a box to check rather than a live compliance commitment will find supervisory intervention follows relatively quickly in a jurisdiction of this size.
AML, Travel Rule and Ongoing Compliance in the Bahamas
The Bahamas AML framework aligns to FATF standards, and the SCB's supervision of DABs is expressly FATF-informed. The Travel Rule – the obligation to collect, hold and transmit originator and beneficiary data with each digital-asset transfer above the applicable threshold – applies to licensed and registered DABs in the Bahamas. The specific data thresholds track the FATF guidance; the exact figures are subject to SCB rule-making and should be confirmed against current published requirements at the point of application.
For an exchange serving an international user base, Travel Rule compliance is an operational challenge as much as a legal one. The business must implement a VASP-to-VASP data transmission protocol that works across counterparties using different technical standards. In our practice, we regularly advise clients on the choice of Travel Rule solution and on how to document the compliance programme in a way the SCB finds credible at review. A technically capable exchange that cannot demonstrate a coherent Travel Rule workflow at application stage is a common cause of application delay.
KYC and customer due diligence obligations under the local AML regime are layered on top of the Travel Rule requirements. The SCB expects risk-based CDD, enhanced due diligence for higher-risk customers and documented suspicious-transaction reporting procedures. These are not unique to the Bahamas, but they require careful calibration of the compliance programme to the specific user base the exchange intends to serve.
Cross-Border Reality: Tax, Banking and Entity Structure
The licensing question in the Bahamas does not stand alone. Every operator we advise works through a parallel analysis: where the exchange entity is licensed, where revenue is recognised, where banking sits and whether the licensed entity will itself hold user funds or sit above a custody vehicle. These are distinct questions, and the answer to each shapes the others.
The Bahamas has no personal income tax, no capital gains tax and no corporate income tax under the standard regime. For a digital-asset business, this creates a structuring opportunity – but one that is bounded by economic substance requirements and by the tax rules of the jurisdictions where founders, staff and investors are resident. A Bahamas-licensed exchange owned by persons resident in high-tax jurisdictions does not automatically shelter those persons from their home-country tax obligations. The substance-over-form analysis that tax authorities in the US, UK and EU apply to offshore digital-asset structures is a live issue, and it must be part of the structuring conversation before incorporation, not after.
Banking access for crypto businesses in the Bahamas is available but requires active management. A small number of banks in the jurisdiction have demonstrated willingness to support DAB clients, and the SCB licence is a positive signal for banking relationships both locally and internationally. That said, banks conduct their own due diligence independently of the regulatory authorisation. A well-constructed application to the SCB will not automatically translate to a bank account. Operators should plan the banking strategy in parallel with the licensing process – we map both as part of the same engagement.
For businesses with users in the European Union, the United States, the United Kingdom or Singapore, the Bahamas licence does not substitute for local regulatory authorisation in those markets. Under MiCA (the EU's Markets in Crypto-Assets Regulation, administered by ESMA and national competent authorities), a CASP authorisation is required to serve EU-based clients at scale. Under the applicable US regime, state money-transmitter licensing and potential federal regulatory obligations layer on top of any offshore structure. The Bahamas licence is a genuine and credible regulatory foundation – it is not a global passport.
In a recent matter, an exchange operator with a Bahamas-registered entity had built a substantial user base in Europe before seeking authorisation under MiCA. The existing Bahamas structure had to be adapted to create a separate EU-facing entity with its own CASP application, and the existing corporate and compliance documentation had to be restructured to satisfy both regulators simultaneously. The work was manageable, but it was more complex – and more costly – than a coordinated approach at the outset would have required.
If a prior application stalled or your banking relationship was closed, a fresh structural analysis will often surface the reason and the path forward. Write to our team at info@oboluslaw.com.
Which Operator Profile Fits the Bahamas?
The Bahamas is a credible primary licensing jurisdiction for a specific class of digital-asset exchange operator. The decision to apply here rather than – or in addition to – another jurisdiction depends on the operator's profile, user base and strategic intent.
A globally-oriented exchange whose primary markets are not in the EU or UK will find the Bahamas regime operationally tractable: the SCB is accessible, the legal environment is English common law, the financial infrastructure is established and the tax regime is competitive. The timeline to authorisation, while not the shortest available, is materially shorter than many comparable regimes when the application is well-prepared. This profile should plan for a parallel AML/Travel Rule build and a banking strategy run alongside the SCB process.
An EU-focused operator will need a MiCA CASP authorisation in addition to any Bahamas entity. The Bahamas structure may still serve a useful purpose – as a holding entity, a custody layer or a non-EU-user-facing vehicle – but it will not replace the MiCA authorisation. Operators who expect a single Bahamas licence to cover EU retail users will face enforcement risk from national competent authorities acting under MiCA.
A US-nexus operator faces the most complex multi-layer stack. The SEC, CFTC, FinCEN and state-level money-transmitter frameworks create an independent set of obligations that are not displaced by a Bahamas or any other offshore licence. We advise US-nexus operators to model the US regulatory exposure explicitly before committing to an offshore structure.
A fund or institutional operator seeking to run a digital-asset trading desk alongside a fund vehicle may find the Bahamas useful as part of a broader Cayman-Bahamas structure, leveraging the Cayman Islands Monetary Authority (CIMA) fund framework alongside the Bahamas DAB licence. This pairing is in active use in the market and is a coherent structure when properly documented.
What Are the Most Common Licensing Mistakes in the Bahamas?
The most frequent error we see is treating the DARE Act application as a documentation exercise rather than a substantive business-readiness review. The SCB will probe whether the business actually has the compliance infrastructure it claims on paper. An exchange that submits a polished AML policy but cannot demonstrate operational implementation – trained staff, functional monitoring systems, documented escalation procedures – will not pass the SCB's review at licence.
A second common mistake is misclassifying the activity. Operators who believe they are merely providing a "marketplace" or "technology layer" and therefore fall outside the DAB definition often find the SCB disagrees. The SCB applies a functional test: if the platform exercises discretion over matching, holds client assets at any point or sets the terms of exchange, the activity is likely to be caught. Taking legal advice on the classification question before investing in the application is not optional – it is the first step.
A third mistake is failing to address the cross-border dimension. An operator who obtains a Bahamas licence and then onboards EU retail clients without a MiCA authorisation, or UK clients without FCA registration, has not solved its regulatory problem – it has moved it offshore. Regulators in the EU and UK assess the regulatory status of the operator from their own perspective, not the operator's. We regularly advise operators who have discovered this reality after the licence was granted, and the remediation process is more complex than a proactive multi-jurisdiction filing would have been.
A Common Assumption That Creates Risk
A common assumption among operators approaching the Bahamas is that a DARE Act authorisation provides a broadly recognised global regulatory credential that satisfies correspondent banks and partner exchanges worldwide. It does not, automatically. The Bahamas regime is credible and well-structured – the SCB is a FATF-compliant regulator and the DARE Act is substantive legislation. But institutional counterparties, particularly US- and UK-domiciled banks and exchanges, will conduct their own regulatory due diligence on a Bahamas-licensed entity. The licence reduces friction; it does not eliminate it.
The practical implication is that a Bahamas-licensed exchange should invest in its own compliance documentation – detailed AML policies, Travel Rule compliance evidence, audited financials and governance records – not merely rely on the SCB authorisation letter as the answer to counterparty due diligence questions. In our practice, we help clients build the institutional-grade compliance dossier that sits alongside the licence and supports banking, exchange listing and investor onboarding conversations.
Related at OBOLUS
- Digital Asset Licensing and Registration – how we scope and manage licensing across 70+ jurisdictions
- Crypto Exchange Setup in Japan: FSA and JVCEA – the FSA and JVCEA regime for exchange operators entering Japan
- KYC and Onboarding in El Salvador – AML and customer onboarding obligations under El Salvador's digital-asset framework
FAQ
How long does a crypto licence take to obtain?
The Bahamas SCB has not published a fixed statutory timeline for DARE Act applications. Processing time depends on the complexity of the business, the completeness of the submission and the volume of applications the regulator is handling. A well-prepared application with thorough documentation typically completes in a matter of months; an application that requires multiple rounds of clarification can extend materially. Building a realistic buffer into project planning is essential.
Which jurisdiction is best for licensing my crypto business?
There is no single answer – the right licensing jurisdiction depends on your user base geography, your operator profile, your tax and banking needs and your growth timeline. The Bahamas suits globally-oriented exchanges whose primary markets are outside the EU and UK. EU-focused operators will need a MiCA CASP authorisation regardless of where the parent entity sits. US-nexus operators carry an independent federal and state-level stack. We map the full licence architecture before recommending a primary hub.
Do I need a separate custody licence?
Under the DARE Act, custody of digital assets is a distinct regulated activity. If an exchange also holds client assets – which most do, at least transiently – the custody activity is within scope of the SCB regime. Whether a separate licence or a single authorisation covering both activities is required depends on the structure of the business and the SCB's classification of the activities. This is a point we address in the pre-application scoping stage, before any documents are filed.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance structures that sit around them. Digital assets are the entirety of our practice. We map the licence, banking and compliance stack across operating, custody and payment layers before a client commits – not after the structure is live. To discuss your situation, contact info@oboluslaw.com or reach us at t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialist in digital-asset regulatory authorisation across the Americas, offshore financial centres and Asia-Pacific hubs including the Bahamas, Cayman, BVI and Singapore.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.