Crypto Exchange Setup in Bahamas: Legal Requirements for Businesses

Operating a crypto exchange (a platform facilitating the buying, selling or exchange of digital assets for fiat or other crypto-assets) without the correct authorisation in the Bahamas exposes the business to enforcement action, the suspension of payment rails and the loss of banking relationships that are already difficult to secure. The Bahamas has built a purpose-designed digital-asset regime through the Securities Commission of the Bahamas (SCB) and the Digital Assets and Registered Exchanges Act (DARE Act), making it one of the few jurisdictions globally with a dedicated statutory framework for crypto businesses. This page sets out the regulated basis, the application process, the cross-border interactions and the decision points that matter before you commit to structure.

What Legal Regime Governs Crypto Exchanges in the Bahamas?

The Securities Commission of the Bahamas administers a mandatory authorisation regime for digital asset businesses under the DARE Act, covering exchange operators, custodians, broker-dealers and issuers. Any business that operates a platform allowing users to trade, exchange or transfer digital assets – and that either is incorporated in the Bahamas or solicits Bahamian residents – must hold a digital asset business (DAB) authorisation from the SCB before commencing operations. The SCB also retains supervisory authority over fit-and-proper assessments for key personnel and applies AML/CFT requirements (anti-money laundering and countering the financing of terrorism) aligned to FATF Recommendation 15 on virtual assets.

The DARE Act distinguishes between several regulated activities. Exchange operators, custodians, marketplace operators and those offering digital asset derivatives each occupy a defined category. The scope of your authorisation must match every service layer in your model. Running custody operations on a platform-only licence, for example, creates a regulatory gap that the SCB has scrutinised closely in recent supervision cycles.

Importantly, the Bahamas also operates a broader financial services licensing environment through the Central Bank of the Bahamas for payment-related activity. Where an exchange routes fiat on-ramps or off-ramps through a local entity, the intersection with payment and money-transmission requirements must be assessed separately. In our practice, we see businesses underestimate this interaction and structure only for the DAB authorisation, leaving the payment layer unaddressed.

Who Must Obtain a Bahamas Digital Asset Authorisation?

Any entity operating a digital asset exchange, brokerage, custody platform or marketplace as a business in or from the Bahamas must be authorised under the DARE Act. The regime catches businesses incorporated in the Bahamas, as well as those that, though incorporated elsewhere, actively solicit or service Bahamian residents. A foreign exchange seeking only a favourable domicile without any Bahamian user activity sits in a different risk profile, but the SCB's jurisdictional reach is fact-specific and should not be assumed away.

The regulated activities that trigger an authorisation requirement include operating a digital asset exchange or marketplace, providing digital asset custody, facilitating digital asset payment services, and managing digital asset funds. Operating a validator node or providing pure software infrastructure without customer-facing service activity generally falls outside the perimeter, but that boundary is not absolute. Token issuers with secondary-market activity may also trigger the exchange or broker-dealer categories.

A common mistake we encounter is the assumption that a Cayman or BVI holding structure insulates the operating entity from Bahamian regulation. It does not. The SCB looks at where operations are conducted and where customers are solicited. Structure alone does not determine the regulatory perimeter.

For a scoped assessment of your entity's regulatory footprint in the Bahamas, contact OBOLUS now. The process above describes the standard path, but your facts – the entity chain, the user base, the service layers – change the analysis materially. Map your options.

How Does the Bahamas DARE Authorisation Process Work?

The SCB operates a structured application process for digital asset businesses, requiring submission of a detailed application pack, fit-and-proper documentation for controllers and key personnel, a business plan, a financial crime compliance programme, and audited or management accounts demonstrating the financial standing of the applicant. The SCB also expects applicants to demonstrate technology and security controls commensurate with the scale and nature of the proposed business.

The application process typically proceeds in several stages. First, pre-application engagement with the SCB is common practice for substantive applicants; the regulator has indicated willingness to receive pre-filing queries on activity classification. Second, the formal application is submitted with the full pack. Third, the SCB conducts a completeness review and may issue a request for information (RFI). Fourth, once satisfied on completeness and substance, the SCB issues a decision.

Timeline from submission to authorisation varies by complexity and completeness of the application pack. In our experience advising businesses entering Caribbean and Atlantic licensing jurisdictions, a well-prepared application moves faster, but all timelines are subject to the regulator's current workload and the responsiveness of the applicant to information requests. We advise clients to plan for a process that spans several months and to align their technology build and banking roadmap accordingly.

Minimum capital requirements apply and are differentiated by licence category under the DARE Act framework. The figures are set by SCB regulation and subject to change; applicants should consult current SCB guidance rather than relying on secondary summaries. What is consistent is that the SCB expects ongoing minimum capital to be maintained, not merely demonstrated at the point of application.

AML, Travel Rule and Ongoing Compliance Obligations

The Travel Rule (the obligation, derived from FATF Recommendation 16, to pass originator and beneficiary identifying information with every qualifying virtual asset transfer) applies to licensed digital asset businesses in the Bahamas. The SCB has adopted the FATF framework on virtual assets and expects virtual asset service providers (VASPs) to implement technical solutions for Travel Rule compliance at the threshold applicable in the Bahamas at the time of the transfer.

Beyond the Travel Rule, licensed businesses must maintain a Financial Crime Compliance (FCC) programme covering customer due diligence (CDD), enhanced due diligence for high-risk relationships, transaction monitoring, suspicious activity reporting, and sanctions screening. The SCB can and does conduct on-site inspections and off-site monitoring. Failures in the AML/CFT programme are among the most common grounds for enforcement action at the SCB and at peer regulators across the major licensing hubs.

Operators we advise routinely underestimate the cost and complexity of building a compliant AML programme for a crypto exchange. The expectation is not merely a written policy; it includes documented risk assessments, technology integration and trained personnel. The SCB looks at substance, not paperwork thickness.

How Do Tax and Banking Interact with a Bahamas Crypto Exchange?

The Bahamas operates as a no-income-tax, no-capital-gains-tax environment for businesses incorporated and operating there, making the jurisdiction genuinely tax-efficient for digital asset exchanges generating trading revenue. However, the tax position of the principals, shareholders and beneficiaries of the structure depends on their own residence and the tax rules of their home jurisdictions – not on the Bahamas tax profile alone.

Crypto exchange operators sitting between the Bahamas and a higher-tax jurisdiction, such as the US or UK, must model the personal and corporate tax exposure at both ends of the structure. A Bahamian entity generates no Bahamian tax, but if control is exercised from a higher-tax jurisdiction, controlled foreign company (CFC) rules, transfer pricing and economic substance requirements may attribute income to that jurisdiction. In our cross-border practice, we map both ends of the structure before advising on domicile.

Banking for Bahamian crypto exchanges is constrained. The domestic banking sector remains cautious toward digital asset businesses, and access to correspondent banking for a Bahamian DAB licensee requires early-stage outreach and a well-prepared compliance profile. The practical reality is that most licensed exchanges in the Bahamas supplement domestic banking relationships with fintech infrastructure and e-money accounts in other jurisdictions. This multi-banking approach is not unusual and, structured correctly, is workable – but it adds complexity to the onboarding timeline. We have seen licensing timelines extended not because the SCB was slow, but because the banking layer was not addressed in parallel.

If your prior application stalled or your banking rails were suspended, a second read can surface the structural reason and the route back. Contact OBOLUS at Map your options.

The Cross-Border Reality: Where Your Entity Sits vs. Where Your Users Are

A Bahamian DAB authorisation covers operations in and from the Bahamas – it is not a global passport to serve users in every jurisdiction. This is the most consequential myth we address with inbound operators. MiCA requires a separate CASP authorisation to serve EU users. The FCA requires UK registration or authorisation to serve UK persons. The SEC and CFTC apply their own tests to US-connected activity regardless of where the exchange is licensed.

For an exchange with a genuinely global user base, the Bahamas DAB authorisation functions as the primary operating licence, not the only one. The decision matrix for multi-jurisdictional deployment typically turns on: the geographic distribution of users, the nature of the products offered (spot vs. derivatives vs. staking vs. structured products), and the exchange's willingness to geo-block restricted jurisdictions against the commercial cost of doing so.

Profile A: an exchange seeking a credible offshore domicile with regulatory standing, serving non-EU/non-UK users, should assess the Bahamas DAB against VARA (Dubai) and the Cayman VASP regime. The Bahamas offers a well-regarded common-law environment, an established financial services regulator and relative proximity to North American markets, but VARA offers a higher-profile brand recognition and DIFC Courts access. The Cayman regime offers strong fund-structuring synergies.

Profile B: an exchange with significant EU user exposure should pair a Bahamas or offshore operating licence with a MiCA CASP authorisation – most commonly through a Lithuanian, Maltese or other EU/EEA entity – and accept that two regulatory relationships must be maintained. The cost of dual licensing is real; the cost of serving EU users without the right licence is higher.

A Recent Matter: Multi-Jurisdiction Licensing and Banking Sequencing

In a recent mandate, a payments and exchange business sought to domicile its primary operating entity in an Atlantic jurisdiction and extend services into the European market. The founders had already incorporated a holding entity but had not mapped the regulated activities against the applicable regime. We identified a gap between the intended custody function and the activity scope of the proposed authorisation. We restructured the entity stack, advised on the application presentation to the regulator, and ran the banking outreach in parallel with the authorisation process rather than sequentially. The business entered its target market within the projected build window, with both its operating licence and its primary banking relationships in place on go-live.

What Is the Right Decision Point Before Committing to the Bahamas?

The decision to structure a crypto exchange in the Bahamas should be made only after mapping the full licence, banking and tax stack – not on the basis of the authorisation alone. The SCB regime is credible, the legal environment is common law, and the jurisdiction carries no income tax burden. Those are genuine advantages. But the banking environment is constrained, the authorisation is not a global passport, and ongoing compliance obligations are substantive.

The self-assessment questions worth answering before you commit: Is your primary user base in a jurisdiction that requires a separate, locally regulated presence? Does your product set trigger activities beyond exchange – custody, derivatives, staking rewards, token issuance? Do your founders and shareholders sit in a jurisdiction with CFC rules that could attribute Bahamian income onshore? Have you run a banking outreach process and received a confirmed offer, or are you relying on the licence to open doors? If any of these answers is uncertain, the structure is not ready to be filed.

We map the licence stack across operating, custody and payment layers before you commit. That mapping exercise, conducted before any application is submitted, consistently reduces the time and cost of the authorisation process and reduces the risk of a post-licence restructure.

Related at OBOLUS

• Licensing and Registration for Digital Asset Businesses – the full cross-jurisdictional licensing mandate and how we structure it
• Digital Asset Licensing in the Isle of Man – a comparative Atlantic and offshore licensing view for inbound operators
• Crypto Fund Formation in El Salvador – structuring considerations for fund and exchange operators in emerging digital-asset regimes

FAQ

How long does a crypto licence take to obtain?

Timeline varies by jurisdiction, licence category and the completeness of the application pack. In well-prepared matters, major licensing regimes typically process applications within a period of several months, though complex structures, RFI rounds and banking-related delays extend that window. The Bahamas SCB has no published statutory decision deadline; applicants should plan for a multi-month process and build their operational and banking roadmap around it rather than treating authorisation as a pre-condition to starting preparation.

Which jurisdiction is best for licensing my crypto business?

No single jurisdiction is universally optimal. The right choice turns on your user base geography, product type, ownership structure and banking access. The Bahamas suits operators seeking a common-law, no-income-tax environment with Caribbean-Atlantic positioning. VARA suits those prioritising brand recognition and access to the Gulf. MiCA CASP authorisation suits those with EU user exposure. The practical answer for most global exchanges is a primary offshore licence plus a targeted EU or Asian presence. We assess all layers together rather than recommending a single jurisdiction in isolation.

Do I need a separate custody licence?

In most flagship regimes, including the Bahamas under the DARE Act, custody of digital assets is a separately regulated activity. Operating a custody function under an exchange-only authorisation creates a regulatory gap that supervisors scrutinise on inspection. Whether a separate licence or an extended authorisation scope is required depends on the regime and on how the custody function is structured. Operators that hold client digital assets, even operationally rather than as a defined service, should have the custody perimeter assessed before go-live.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams – so that a client entering the Bahamas or any other jurisdiction has its full operating stack mapped before it commits to structure. To discuss your situation, contact info@oboluslaw.com.

By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in DARE Act authorisations, Caribbean and Atlantic licensing structuring, and cross-border regulatory mapping for digital asset exchange operators.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.