Operating a digital-asset business from the British Virgin Islands without secured correspondent banking access is not a theoretical risk – it is the failure mode that ends otherwise well-structured operations. A virtual asset service provider (VASP) registered under the BVI Financial Services Commission's regime can hold a valid licence and still find itself unable to move fiat, process client redemptions or settle with counterparties, because its principal bank has declined to maintain a correspondent relationship with any entity in the chain. That gap between legal authorization and operational banking is the precise problem this page addresses.
The BVI's Virtual Asset Service Providers Act 2022 (VASP Act) governs registration and conduct of VASPs under the BVI Financial Services Commission (BVI FSC). The Act creates a clear regulated perimeter, but it does not create a banking relationship. Correspondent banking – the mechanism by which a local or offshore bank gains access to major currency clearing networks through a larger partner bank – is controlled by those partner banks, which apply their own de-risking criteria independently of what any regulator has approved. For a BVI-incorporated digital-asset business, managing that gap is as important as obtaining the licence itself.
This page maps the BVI regulatory basis, the correspondent banking dynamic, the practical steps for securing and protecting fiat rails, the cross-border interaction with tax and EMI infrastructure, and the point at which structural legal advice changes the outcome.
What does the BVI VASP Act establish for digital-asset businesses?
The BVI VASP Act creates a mandatory registration and, for certain activities, a licensing regime administered by the BVI Financial Services Commission. Any person carrying on virtual-asset business in or from the BVI must register as a VASP before commencing operations. The FSC assesses fitness and propriety of principals, adequacy of AML/CFT controls, and compliance with the applicable conduct standards. Failure to register is a criminal offence under BVI law, which matters because unregistered status is one of the first things a correspondent bank's compliance desk will flag during onboarding.
The Act recognizes several categories of virtual-asset service: exchange between virtual and fiat currency, exchange between virtual assets, transfer of virtual assets, custody and safekeeping, and participation in and provision of financial services related to token issuances. Each category carries its own obligations. A business that provides more than one service must ensure its registration covers all of them – partial registration is a de-risking trigger, not a safe harbour.
In our practice, we regularly see BVI entities that registered under the narrowest available category to minimize initial fees, then expanded their operational scope without updating their registration. That discrepancy is material when a correspondent bank runs its periodic review. Regulators in the leading hubs increasingly expect the regulatory perimeter to match the economic reality of the business, and correspondent banks apply the same logic.
How does correspondent banking actually work for BVI crypto entities?
Correspondent banking access for a BVI digital-asset entity is almost never a direct relationship between the BVI company and a major clearing bank. The typical structure involves a local BVI bank, an offshore EMI, or a payment institution in a recognized financial centre maintaining an account for the BVI entity, while that local institution in turn holds a nostro account at a correspondent bank in the US, UK or eurozone. Each link in that chain applies its own compliance screen.
The correspondent bank at the top of the chain – often a US bank subject to FinCEN supervision, a UK bank under FCA oversight, or a eurozone institution navigating both AML and MiCA-adjacent regulatory expectations – is the entity with the most to lose from a relationship that generates regulatory scrutiny. Their de-risking decisions are commercial, not regulatory. No regulator compels them to bank a particular VASP. That asymmetry is the core of the problem.
The practical consequence is that a BVI VASP must demonstrate compliance not just to the BVI FSC but effectively to the correspondent bank's standards, which often incorporate FATF Recommendation 15 expectations, the Travel Rule (the obligation to pass originator and beneficiary data with every qualifying transfer), and enhanced due diligence criteria drawn from the jurisdiction risk ratings of the US OCC, FATF and the Wolfsberg Group. A BVI entity whose compliance documentation is built only to satisfy the BVI FSC is likely to fail at the correspondent bank's desk.
To map your specific correspondent banking exposure before committing to a structure, contact OBOLUS at info@oboluslaw.com. The process above describes the standard risk path. Your facts – the entity type, the user base, the currency pairs you settle – change the analysis considerably.
What steps does a BVI VASP need to take to secure fiat rails?
Securing fiat rails for a BVI digital-asset business requires a sequenced approach that begins with the compliance file, not the bank application. The first step is confirming that the BVI FSC registration accurately reflects every service being offered and every jurisdiction from which clients will be onboarded. Gaps between registered scope and commercial reality are the fastest route to a declined application or a closed account.
The second step is building an AML/CFT programme that satisfies both the FATF baseline and the specific expectations of the target banking jurisdiction. That means a written risk assessment, a transaction monitoring policy calibrated to virtual-asset flows, Travel Rule-compliant data capture for transfers above the applicable threshold, and a sanctions screening protocol that references OFAC, the UN consolidated list and, where EU-facing operations are involved, EU restrictive measures. The programme must be documented and operational before the bank application is submitted – not assembled after a request for information arrives.
The third step is selecting the right banking entry point. For a BVI entity, the realistic options typically include: a banking relationship in a jurisdiction with a mature VASP-banking framework (Singapore under MAS supervision, the UK under FCA oversight, or Liechtenstein); an EMI licence in the EU operating under MiCA-adjacent payment rules; or a payment institution in a jurisdiction that has explicitly addressed crypto business banking. The choice is driven by the entity's client geography, the currencies it needs to settle, and the volume thresholds that determine whether a major payment institution licence is required.
In a recent matter, a BVI-registered exchange operator had applied to four banks across three jurisdictions without success. We reviewed the compliance file, identified that the sanctions screening policy predated the company's expansion into a higher-risk client geography, and that the Travel Rule documentation did not address outbound transfers to self-hosted wallets. After updating those materials and resequencing the applications by jurisdiction risk profile, the operator secured accounts at two institutions within a quarter.
How does the cross-border tax and EMI layer interact with correspondent banking?
A BVI entity's tax position directly affects its banking prospects, because correspondent banks and EMIs now routinely ask for evidence of beneficial ownership, economic substance and tax residency as part of their onboarding. The BVI introduced economic substance requirements that apply to entities carrying on relevant activities. A VASP that cannot demonstrate genuine economic presence – local directors, decision-making activity in the territory, proportionate operational expenditure – faces enhanced scrutiny from both the BVI FSC and from any bank that has reviewed the BVI's OECD peer-review history.
The interaction with EMI onboarding is particularly important for businesses that process payments in euros or sterling. An EMI (electronic money institution), licensed under the EU's payment services rules or the UK Electronic Money Regulations, can issue IBANs and provide settlement infrastructure. But onboarding a BVI VASP as a business customer requires the EMI to treat the client as a financial institution under its own AML framework – which triggers enhanced due diligence, a compliance pack review and, frequently, a site visit or video-call verification with the beneficial owners. EMIs that do onboard crypto businesses typically apply transaction limits that constrain scale until a track record is established.
The tax layer matters for a second reason: withholding tax on cross-currency settlements can erode the economics of a correspondent banking structure that looks viable on paper. BVI entities holding assets in US dollar instruments may face US withholding considerations depending on the nature of the assets and the entity's classification under US tax rules. Structuring the operating entity, the custody entity and the payment entity as distinct layers – with appropriate substance in each – is not tax avoidance. It is the documented, regulator-expected approach to operating a multi-jurisdiction digital-asset business.
How does EMI onboarding work for a BVI entity in practice?
EMI onboarding for a BVI VASP follows a defined process, but timelines vary significantly based on the EMI's current pipeline and the completeness of the submission. The process typically begins with a pre-onboarding questionnaire covering the entity's business model, client geography, expected transaction volumes, AML documentation and beneficial ownership structure. Incomplete questionnaires are the single most common cause of delay – not the EMI's assessment, but the time spent chasing missing documents.
Following the questionnaire, the EMI conducts a compliance review that may include a Wolfsberg-style correspondent bank questionnaire (CBPQ), independent verification of the BVI FSC registration, and a review of the entity's latest AML/CFT audit or independent compliance assessment. For higher-volume clients, a direct call with the compliance function is standard. The EMI then presents the application to its internal risk committee. Approval at that stage is followed by account agreement execution and technical integration.
Businesses we advise routinely underestimate the documentation burden at this stage. A BVI registration certificate and a basic AML policy are insufficient. The EMI is taking regulatory risk by onboarding a VASP, and it needs to demonstrate to its own correspondent bank that it has applied proportionate due diligence. That means the VASP must provide a documented risk appetite statement, evidence of board-level compliance oversight, a sample transaction monitoring alert and, where relevant, a Travel Rule solution implementation certificate.
If a prior EMI application stalled or an account was closed, a structured second-read can identify the cause. Contact OBOLUS at info@oboluslaw.com to discuss the position. We have seen structurally sound businesses declined for documentation reasons that are correctable with the right analysis.
What should a BVI VASP do if its banking is de-risked or closed?
De-risking – the termination or restriction of a banking relationship on risk grounds rather than for a specific compliance breach – is a defined operational threat for BVI digital-asset businesses, and the response window is short. When a bank issues a notice of account closure, the entity typically has a contractual notice period before settlement ceases. That period is the window for parallel-tracking a replacement relationship, not for negotiating with the departing bank.
The immediate steps are to obtain the bank's stated reason in writing, preserve all transaction records, and assess whether the closure is driven by a specific compliance concern (which may be addressable) or by a portfolio-level de-risking decision (which generally is not). The distinction matters because the response strategy is different. A specific concern can be answered; a portfolio decision requires a new banking partner rather than an appeal.
In parallel, the entity should audit its compliance documentation against the expectations of the target replacement bank or EMI before submitting an application. Submitting to a replacement bank with the same file that prompted the first closure simply replicates the problem. The compliance programme needs to address the specific gap, documented and evidenced, before the next application goes in.
Allied counsel in the relevant banking jurisdiction may be required where the closure raises a contractual dispute or where the entity has grounds to challenge the bank's conduct under applicable financial services law. The BVI's common-law framework is relevant to the contractual dimension; the banking jurisdiction's regulatory framework governs the bank's own obligations.
Which banking structure suits a BVI VASP at different stages of growth?
The right banking structure for a BVI digital-asset business depends on the operator's profile, transaction volume and client geography. There is no single correct answer, and a structure that works at launch may become a constraint within eighteen months.
An early-stage BVI VASP with a narrow product (for example, institutional OTC desk or a single-currency exchange) and a primarily professional or institutional client base is typically best served by a single EMI relationship in a well-regulated EU or UK jurisdiction, combined with a documented process for Travel Rule compliance. The key risk at this stage is volume constraints; the key legal task is ensuring the AML programme is built to institutional standards from the outset rather than scaled up reactively.
A growth-stage BVI VASP processing multiple currency pairs, serving both institutional and high-net-worth retail clients, and holding client assets in custody faces a more complex banking stack. It typically needs separate accounts for operational fiat, client money safeguarding (in compliance with the applicable payment services or custody rules of the jurisdiction where the EMI is licensed), and treasury management. The risk of co-mingling client funds with operational funds is both a regulatory breach and a correspondent banking trigger. Segregation must be documented in both the AML programme and the operational account structure.
A mature BVI VASP at significant scale – processing volume that requires a major payment institution licence threshold in the relevant EU or Singapore regime – needs banking relationships in more than one jurisdiction to manage concentration risk. The loss of a single banking relationship at this scale can disrupt settlement for clients and trigger regulatory notification obligations in the jurisdictions where those clients sit. Diversification across at least two independent banking or EMI relationships, in two different jurisdictions, is the minimum prudent standard we apply in practice.
Related at OBOLUS
Related at OBOLUS
- Banking, Payments and EMI Onboarding for Digital-Asset Businesses – the full practice overview covering account access, EMI structuring and payment licence strategy.
- De-risking and Account Closure Defence Under Heightened Scrutiny – strategy and legal response when a bank terminates or restricts a crypto business account.
- Crypto Fund Formation from a Cross-border Perspective – structuring digital-asset funds across BVI, Cayman and regulated EU/Asia feeder entities.
FAQ
Why do banks close crypto company accounts?
Banks close crypto company accounts primarily through de-risking – a risk-management decision to exit entire client categories rather than assess each client individually. Contributing factors include gaps in AML documentation, inadequate Travel Rule compliance, beneficial ownership that cannot be verified to the bank's standard, and portfolio-level decisions by correspondent banks that cascade to their client institutions. A well-documented compliance programme aligned to correspondent bank expectations significantly reduces but does not eliminate closure risk.
How can a VASP onboard with an EMI?
A VASP onboards with an EMI by completing the institution's pre-onboarding questionnaire, providing full AML/CFT documentation, evidence of regulatory registration (such as BVI FSC status under the VASP Act), a beneficial ownership declaration verified to the relevant standard, and – for higher-volume applications – a Travel Rule solution implementation record. The EMI then conducts an internal risk-committee review. Timelines vary by institution and pipeline. Preparation quality is the primary determinant of outcome.
What does client-money safeguarding require?
Client-money safeguarding requires that funds belonging to clients be held in accounts that are legally and operationally segregated from the entity's own operational and treasury funds. The specific rules depend on the jurisdiction in which the payment or EMI licence is held – not the BVI's. Under EU payment services rules and the UK Electronic Money Regulations, safeguarded funds must be held in designated accounts with an approved credit institution, and the safeguarding method must be documented in the entity's compliance framework and disclosed to clients.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams, and we map the licence stack across operating, custody and payment layers before you commit. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory and Compliance Analyst – specialist in VASP registration, correspondent banking compliance and cross-border AML programme design for digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.