Operating a fiat on/off-ramp in Bermuda without a clear grasp of the regulatory and banking requirements is one of the fastest ways to lose your payment rails. Bermuda's Digital Asset Business Act – the DABA regime – requires any business conducting digital asset activity, including fiat-to-crypto conversion and crypto-to-fiat settlement, to hold a licence or registration before touching a client's money. Without that licence, the banking relationship that powers the ramp simply will not exist: Bermudian and correspondent banks require demonstrated regulatory standing before they extend fiat settlement accounts to a digital asset business.
The Bermuda Monetary Authority – the BMA, Bermuda's integrated financial regulator – administers both the DABA regime and the island's broader financial services licensing. For an inbound business, this dual role is relevant: the same regulator approves your digital asset licence and supervises the banks you must bank with. Getting both relationships right, simultaneously, is the practical challenge. This page maps the regulated basis, the application path, the cross-border considerations and the decision points a general counsel needs before committing capital and structure.
What Is a Fiat On/Off-Ramp Under Bermuda Law?
A fiat on/off-ramp under the DABA regime is any service that converts sovereign-currency deposits into digital assets for a customer (the on-ramp) or converts digital assets into fiat currency and credits that value to a customer's bank account (the off-ramp). Both directions are regulated activities. The BMA treats them as an integrated payment and exchange function, not as two separate product lines.
Businesses that operate these rails – whether as a primary product or as an ancillary function embedded in an exchange or custody service – fall within the definition of a Digital Asset Business under the DABA framework. The relevant activity categories include issuing, selling or redeeming digital assets, operating as an exchange and providing digital asset payment services. A business offering a ramp as part of a broader product is not exempt: the BMA has consistently applied the regime to embedded payment functions, not just standalone conversion businesses.
This creates a threshold question for in-house counsel: does your product architecture touch the fiat layer? If the answer is yes – even at the settlement or treasury layer – then you are inside the DABA perimeter and you need either a Class F licence (full licence) or a Class M registration (for businesses in an earlier operational stage), depending on the scale and nature of the activity. The distinction matters because the application process, capitalisation expectations and supervisory intensity differ materially between the two tracks.
CTA #1 — For the reader meeting the issue for the first time: The process above describes the standard path. Your facts – the entity structure, the customer base, the banking layer and the specific ramp direction – change the analysis materially. For a scoped assessment of your Bermuda ramp structure, contact OBOLUS at info@oboluslaw.com.
How Does the BMA's DABA Regime Govern Fiat Rails?
The BMA administers the Digital Asset Business Act as the primary regulatory instrument for digital asset activities in Bermuda, including fiat on/off-ramp services, and applies it alongside the island's broader AML/CFT regime.
Under the DABA framework, the BMA evaluates applicants across four principal dimensions: fitness and propriety of controllers and senior management, adequacy of the business plan and systems, AML/CFT programme quality, and financial soundness. All four must be demonstrated before a licence or registration is granted. The BMA has been explicit that it applies enhanced scrutiny to any business whose model involves direct fiat-to-crypto conversion, because the fiat gateway is the highest-risk chokepoint for financial crime.
AML/CFT obligations under the DABA regime align with the Financial Action Task Force's Recommendation 15 framework for virtual assets. This means a licensed ramp operator must implement a risk-based customer due-diligence programme, maintain transaction monitoring capable of flagging suspicious conversion activity, and – critically for multi-counterparty ramps – apply the Travel Rule (the obligation to transmit originator and beneficiary data alongside a transfer) to qualifying transfers. The Travel Rule threshold and implementation mechanics are subject to BMA guidance and should be verified against current regulatory notices before build-out.
The BMA also expects operators to maintain a Bermuda-based senior representative or a substantive local presence. A pure brass-plate structure will not clear fitness-and-propriety review. This is a meaningful cost and operational commitment, and it is one that operators in lighter jurisdictions routinely underestimate when they first model the Bermuda path.
Why Is Banking Access the Central Problem for Ramp Operators?
Securing a BMA licence is a necessary condition for operating a fiat ramp in Bermuda – but it is not sufficient to guarantee banking access, and the gap between the two is where most inbound projects stall.
Bermuda has a small domestic banking sector. The island's licensed banks apply rigorous correspondent-banking risk assessments to digital asset business accounts, and their correspondent US dollar and sterling clearing banks impose an additional layer of scrutiny. A business presenting to a Bermudian bank needs to demonstrate: a clean DABA licence or registration, an AML programme that satisfies both BMA standards and correspondent bank expectations, a credible operational model showing how fiat funds are segregated, and evidence that senior management have digital asset compliance experience. Banks will also examine the geographic profile of the customer base – a ramp serving high-risk jurisdictions will face materially harder onboarding, regardless of licence status.
In our practice, we have seen licensed operators lose their banking access because a change in the correspondent bank's internal policy reclassified crypto-adjacent businesses as outside the bank's risk appetite. The licence itself did not change. The bank's tolerance did. This is the systemic banking risk that every fiat ramp operator in any jurisdiction must plan for: the ramp is only as resilient as the weakest link in the correspondent chain.
The practical answer is banking diversification: maintaining relationships with at least two institutions in different jurisdictions, so that a single account closure does not take the ramp offline. For a Bermuda-domiciled operator, this typically means a primary Bermudian account supplemented by a relationship with an EMI (electronic money institution) licensed in the EU or UK, or a payment institution in a jurisdiction that has established a track record of banking digital asset businesses. The EU and UK EMI tracks are the most common supplement we work with for Bermuda-based clients.
What Does the BMA Licence Application Process Involve?
A DABA licence application to the BMA is a structured, document-intensive process that typically runs over several months from first filing to conditional approval, with the timeline driven largely by the completeness of the initial submission and the BMA's current queue.
The application requires, at a minimum: a detailed business plan covering the ramp mechanism, the customer onboarding journey, the fee model and projected transaction volumes; full personal questionnaires for all controllers, directors and senior managers; an AML/CFT policy manual and risk assessment; a technology and security description; evidence of capitalisation; and a Bermuda-nexus confirmation. For a Class F licence, the documentation burden is heavier than for a Class M registration – the BMA scrutinises projected volumes and systemic risk indicators more closely at the full-licence level.
Post-submission, the BMA typically issues a first round of questions within a few weeks. The gap between first submission and approval depends on the quality of that first round of responses: applicants who resolve queries in a single cycle move materially faster than those who require multiple exchanges. Operators we advise routinely benefit from a pre-application meeting with the BMA, which the regulator makes available and which substantially reduces first-round query volume.
Once conditional approval is issued, the operator must satisfy any licence conditions – which may include demonstrating banking arrangements, completing a systems audit or appointing a Bermuda-based compliance officer – before the licence becomes unconditional. Only then may the ramp go live with Bermudian fiat rails.
A representative timeline for a well-prepared Class F application, from first submission to unconditional licence, is measured in months rather than weeks. Plan for a materially longer runway if the business model involves novel instruments or if the principal controllers have not previously held regulated roles.
How Do Tax and Cross-Border Structure Interact With Bermuda Ramp Operations?
Bermuda has no corporate income tax, capital gains tax or withholding tax on dividends – this is the headline attraction for many operators. But the tax efficiency of a Bermuda structure is only realisable if the structure has genuine economic substance on the island.
Bermuda's Economic Substance Act requires relevant entities – including those conducting digital asset business – to demonstrate adequate substance in Bermuda: core income-generating activities conducted locally, qualified employees present, management decisions made in Bermuda. A company that holds a DABA licence but makes all commercial decisions from a director's home office in London or New York does not satisfy substance requirements. The BMA and the Registrar of Companies both supervise this: failure to satisfy substance requirements exposes the entity to penalties and, potentially, to the loss of the licence itself.
For a ramp operator, the cross-border picture is complicated by the permanent establishment risk. If the operator has sales staff, customer-support personnel or technical infrastructure in another jurisdiction, that jurisdiction's tax authority may assert a taxable presence – even if the legal entity sits in Bermuda. This is particularly acute for operators serving EU or US customers through a Bermuda entity: both the EU and the United States apply aggressive PE rules to digital service businesses with local users.
The interaction between the DABA licence and the operator's banking jurisdiction adds a second structural layer. If the ramp settles fiat through a UK or EU EMI, the EMI's home regulator – the FCA in the UK, or the relevant national competent authority under the EU's Payment Services Directive – will have its own view of the settlement entity. A Bermuda-licensed ramp operator that routes payments through an EU-regulated EMI is effectively operating under two regulatory regimes simultaneously, and the requirements of both must be satisfied. We map this multi-layer picture before a client commits to a structure, not after the banking application stalls.
Illustrative Matter: Ramp Operator, Banking Account Closure
In a recent cross-border structuring matter, a digital payments company approached us after its primary fiat settlement account was closed by a correspondent bank, without notice, three weeks before a scheduled product launch. The company held a valid licence in its home jurisdiction but had not anticipated that a change in the correspondent bank's internal digital-asset risk policy would reclassify its account category. We worked through the banking documentation, identified two alternative EMI providers with established digital asset onboarding programmes, restructured the fiat settlement flow to use a dual-institution model, and the ramp launched – delayed, but with a more resilient banking architecture than the original design. The structural lesson: a single banking relationship, however well-documented, is an operational single point of failure for any fiat ramp business.
Who Needs a DABA Licence to Operate a Fiat Ramp in Bermuda?
Any person or entity conducting digital asset business activities from or within Bermuda requires a DABA licence or registration – this covers both Bermuda-incorporated entities and, under the BMA's extraterritorial provisions, businesses that direct their services at Bermuda residents from offshore.
The most common profiles we advise include: standalone ramp operators whose primary product is fiat-to-crypto conversion; exchanges that embed a ramp as a customer onboarding feature; custodians that offer a ramp as a liquidity service to institutional clients; and payment aggregators that use digital assets as a settlement layer and convert back to fiat for the end beneficiary. All four models fall within the DABA perimeter.
A common assumption in this space is that a business incorporated offshore – in the BVI, Cayman Islands or another Crown dependency – can serve Bermuda customers or conduct Bermuda-nexus activity without a BMA authorisation. That assumption is incorrect. The BMA applies a substance-and-nexus test: if the activity has a Bermuda connection (a Bermuda-based customer, a Bermuda-based director taking decisions, or infrastructure located in Bermuda), the BMA will assert jurisdiction. Allied counsel familiar with BVI FSC and Cayman's CIMA regime regularly surface this issue when clients try to use an existing offshore structure to access the Bermuda market.
CTA #2 — For the reader who has already encountered a problem: If a prior banking application stalled, an account was closed or a licensing query went unanswered, a structural review can surface the underlying cause and map the route forward. Write to OBOLUS at info@oboluslaw.com or message us via t.me/oboluslaw.
What Are the Client-Money Safeguarding Obligations for a Fiat Ramp?
Client-money safeguarding – the obligation to hold customer fiat funds in accounts that are legally and operationally separate from the firm's own funds – is a central compliance requirement for any fiat ramp operating under the DABA regime.
The BMA expects licensed ramp operators to maintain clear segregation between client fiat holdings and proprietary funds. This means dedicated client-money accounts at a licensed Bermudian bank, with account titles and documentation that establish the trust character of the holdings. The practical consequence: if the operator becomes insolvent, client funds are not available to general creditors. Regulators across every major hub – the BMA, the FCA under the UK's Payment Services Regulations, MAS under Singapore's Payment Services Act – now treat segregation as a threshold compliance issue, not a best-practice aspiration.
For a dual-jurisdiction operator – a Bermuda-licensed entity settling through a UK or EU EMI – safeguarding obligations apply at both layers. The Bermuda layer requires BMA-compliant segregation. The UK or EU payment layer requires FCA or NCA-compliant safeguarding under the applicable payment services regime. These regimes are not identical. The documentation, the permissible investment of safeguarded funds and the audit trail requirements differ. Operators who assume that satisfying one regime automatically satisfies the other typically discover the gap during a supervisory review or – worse – during an account closure.
What Are the Most Common Mistakes Businesses Make With Bermuda Ramp Licensing?
Across the matters we handle, four mistakes recur with regularity among businesses entering the Bermuda ramp market for the first time.
The first is filing an incomplete application. The BMA's application documentation requirements are detailed. A business plan that describes the product at a high level without specifying the technical ramp architecture, the customer due-diligence workflow or the transaction monitoring logic will draw a heavy first-round query. Every query round adds weeks to the timeline.
The second mistake is sequencing the banking application after the licence application. The two processes must run in parallel. A bank will not open a fiat settlement account before it sees a licence, but the bank's account-opening process has its own timeline – typically several months for a digital asset business. Starting the banking process only after the licence arrives means the operator is licensed but non-operational, burning runway while waiting for rails.
The third mistake is treating the Bermuda substance requirement as a paperwork exercise. The BMA and the Registrar of Companies both audit substance. A company that has appointed a local director but has no other Bermuda footprint will not satisfy the standard. Real employees, real management decisions, real infrastructure – or an honest assessment that the Bermuda structure is not the right fit.
The fourth mistake is building on a single banking relationship. We have covered this above. It bears repeating: every fiat ramp business should model the consequences of its primary banking account being closed on a Tuesday morning with no notice, and build the architecture accordingly.
Related at OBOLUS
- Banking, Payments and EMI Onboarding for Digital Asset Businesses – full practice overview: EMI selection, fiat-rail structuring and account-opening strategy across major hubs.
- EMI Onboarding for VASPs: The Disputes Angle – what happens when an EMI relationship breaks down and the legal options available to a VASP.
- AIF for Digital Assets Under Heightened Scrutiny – structuring alternative investment funds that hold digital assets under intensified regulatory review.
FAQ
Why do banks close crypto company accounts?
Banks close digital asset company accounts primarily because of correspondent-banking pressure: the bank's own dollar or sterling clearing bank reclassifies crypto-adjacent businesses as outside its risk tolerance, and the domestic bank's risk appetite follows. Other triggers include AML programme gaps surfaced in the bank's own due-diligence cycle, changes in the business model that were not pre-disclosed, and adverse public information about associated parties. A licence does not insulate an account from closure. Structural resilience requires at least two banking relationships in different jurisdictions and a proactive disclosure posture with each institution.
How can a VASP onboard with an EMI?
A VASP (virtual asset service provider) onboarding with an EMI must present, at minimum: a valid licence or registration in the VASP's home jurisdiction, a documented AML/CFT programme, audited or management accounts, a description of the transaction-monitoring system, and evidence of the beneficial ownership chain. Most EMIs with a digital asset appetite also require a compliance officer introduction call and a sample of transaction flows before account approval. The process runs from several weeks to several months depending on the EMI and the complexity of the VASP's business model. Geographic profile of the customer base is the single largest factor in the EMI's decision.
What does client-money safeguarding require?
Client-money safeguarding requires an operator to hold customer fiat funds in accounts that are legally separate from the firm's own money – typically in a designated trust or pooled-client account at a licensed bank – so that those funds are not available to general creditors in an insolvency. The BMA, FCA, MAS and most other leading regulators treat this as a threshold licensing requirement. Permissible uses of safeguarded funds, the required investment restrictions, and the audit-trail obligations vary by regime. An operator bridging two regulatory layers – for example, a Bermuda licence with UK EMI settlement – must satisfy both regimes' safeguarding standards simultaneously.
About OBOLUS. OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We map the licence, banking and safeguarding stack across operating, custody and payment layers before you commit – identifying the structural gaps that most operators discover only after a bank account closes. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when recovery is needed. Digital assets are the whole of our practice. To discuss your Bermuda ramp structure, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specialising in DABA licensing, BMA engagement and cross-border banking structuring for digital asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.