Economic Substance for Licensed VASPs in British Virgin Islands

A virtual asset service provider (VASP) registered in the British Virgin Islands faces an obligation that sits quietly alongside its licence: economic substance. Under the BVI Economic Substance Act, entities carrying on relevant activities – which regulators now treat as encompassing licensed VASP operations – must demonstrate genuine physical and operational presence in the territory. Failing that test does not merely attract a fine. It exposes the registered entity to annual penalties, exchange of information with foreign tax authorities, and, in the most serious cases, strike-off. For a business that chose BVI precisely for its flexibility, the substance requirement rewrites the calculus.

With VASP supervision under the BVI Financial Services Commission tightening and the international push against nominal offshore structures intensifying, the question is no longer whether substance applies – it is whether yours is sufficient. This page maps the legal regime, the application process, the cross-border interaction with tax and banking, and the point at which the analysis tips from manageable to urgent.

What legal framework governs VASPs in the British Virgin Islands?

The BVI VASP Act 2022 created a registration and licensing regime administered by the BVI Financial Services Commission (FSC), requiring persons who carry on virtual asset services in or from the BVI to hold authorisation before commencing business. The regime follows the FATF Recommendations on virtual assets, including the Travel Rule (the obligation to pass originator and beneficiary data with a virtual asset transfer), and mirrors AML/CFT baseline standards that any FATF-aligned jurisdiction now imposes. A VASP that obtained registration under the transitional arrangements remains subject to ongoing supervision – and to the economic substance overlay that sits in a separate but interlocking statute.

The FSC has made clear that registration is not a light-touch administrative step. Applicants must satisfy fitness and propriety requirements for controllers and senior management, demonstrate adequate AML/CFT policies and procedures, and show that their operational model is coherent and genuinely managed from within the BVI or, at minimum, that the relevant high-level management decisions occur there. That last requirement feeds directly into the substance analysis.

In our licensing practice, operators frequently underestimate the degree to which the FSC triangulates the substance position against the licence application. The two regimes are formally separate. In practice, an FSC reviewer who sees a bare-shelf application will flag substance concerns at the authorisation stage, not after.

What does economic substance mean for a BVI-registered VASP?

Economic substance under the BVI Economic Substance Act requires an entity engaged in a relevant activity to be directed and managed in the BVI, to conduct core income-generating activities (CIGAs) there, and to maintain adequate employees, premises and expenditure proportionate to its operations. For a licensed VASP, the relevant activity is likely to fall within the financial services category, which carries the strictest substance standard in the BVI regime.

CIGAs for a financial services business typically include taking decisions on the management of risk, deciding on hedging positions, taking decisions on how assets are managed, and managing capital and liquidity. For a crypto exchange or custodian, this maps onto decisions about order books, wallet infrastructure, counterparty risk, and custody segregation. Those decisions must demonstrably occur in the BVI – not merely be ratified there after the real decision was made elsewhere.

Three elements are assessed annually: first, whether the board or management meets in the BVI with a quorum physically present; second, whether qualified staff are employed there or accessible to the entity on a full-time basis; and third, whether the entity has adequate physical infrastructure – an office, not a registered agent's address alone. "Adequate" is measured proportionately, but proportionality does not permit a zero footprint. A VASP generating material revenue from its licensed activities will face a correspondingly higher substance bar.

Operators we advise routinely arrive having treated the registered agent address as sufficient. It is not. The registered agent satisfies the statutory registered office requirement; it does not satisfy the economic substance requirement.

How does BVI economic substance interact with tax and banking across borders?

The cross-border dimension of BVI economic substance is where the stakes become most concrete. The BVI participates in the OECD Common Reporting Standard and the exchange of information under the BEPS framework. An entity that fails its annual substance assessment triggers an automatic information-exchange report to the jurisdiction where its beneficial owners are tax-resident. That report flows to the tax authority in the parent jurisdiction – often the EU, UK or US – and, in many cases, to the home regulator of the ultimate beneficial owner.

For a crypto business whose founders are tax-resident in a high-tax jurisdiction, the practical consequence is a domestic tax re-characterization of BVI profits, potential transfer-pricing challenge, and – where the home regulator is also supervising a related licensed entity – a licensing risk that runs upstream. The BVI substance failure is no longer contained within the BVI. It propagates.

Banking is the second pressure point. Correspondent banks and fintech payment partners conducting enhanced due diligence on a BVI-incorporated VASP routinely request evidence of substance as part of their own risk-scoring. A BVI entity that cannot produce board minutes evidencing in-territory meetings, a local office lease, and a record of employed or contracted staff will struggle to open and maintain banking relationships with any tier-one institution. In the current environment, where VASP banking is already structurally difficult, a substance gap is an underwriting failure, not a legal technicality.

In a recent engagement, a custodian incorporated in the BVI was asked by its correspondent bank to demonstrate that strategic decisions over its custody infrastructure were made in the territory. The entity's documentation showed that all such decisions were made at a parent-company board in a European capital. We worked with the client to restructure its governance – including appointing a BVI-resident director with genuine authority, formalising a local office arrangement, and commissioning a legal opinion on the substance position. The banking relationship was preserved.

For a mid-page assessment: The interaction between BVI substance rules and cross-border tax reporting is not a remote risk. It is the standard enforcement pathway. If your entity's CIGAs are genuinely sitting elsewhere, the question is whether the structure needs remediation or whether the BVI is the right domicile at all.

If you are uncertain whether your BVI VASP structure satisfies current substance requirements, a scoped assessment now is materially less costly than remediation after an FSC query or an information-exchange notification. Contact OBOLUS at info@oboluslaw.com to map your options – or see our full contact page.

What does the BVI VASP authorisation process involve?

Obtaining or maintaining a licence under the BVI VASP Act 2022 involves a structured submission to the FSC that addresses the applicant's business model, beneficial ownership, AML/CFT framework, and – critically – its operational infrastructure in or connected to the BVI. The FSC has discretion to request additional information at any stage, which means the realistic timeline from submission to authorisation varies; applicants should plan on a process that runs from a matter of weeks to several months, depending on the complexity of the structure and the FSC's query cycle.

The key documents include: a detailed business plan describing the VASP services to be provided; an AML/CFT policy manual and risk assessment; fitness and propriety materials for all controllers, directors and senior managers; and, critically, evidence of the entity's operational footprint in the BVI. That last category – the substance documentation – is the most commonly underprepared element of a BVI VASP application in our experience.

Applicants that arrive with a complete substance position at the filing stage – a local office, at least one BVI-resident officer with real authority, and documented governance processes – move through the FSC review more efficiently than those where substance is an afterthought. The FSC is not merely checking boxes; it is assessing whether the entity is genuinely directed and managed in the BVI.

For businesses seeking to relocate an existing VASP registration to the BVI from another jurisdiction, the substance requirement creates an additional workload: the entity must establish its BVI operational infrastructure before the licence application is materially advanced, not after authorisation is received. In our cross-border practice, we have seen applications stall where the applicant assumed it could build substance post-approval.

Who needs VASP registration in the BVI, and what activities are covered?

Any person who carries on a virtual asset service from within the BVI, or who holds itself out as doing so, requires authorisation from the FSC under the VASP Act 2022 unless a specific exemption applies. The covered activities map closely onto the FATF definitions: exchange between virtual assets and fiat currencies, exchange between one or more forms of virtual asset, transfer of virtual assets, safekeeping and administration of virtual assets, and participation in or provision of financial services related to an issuer's offer or sale of virtual assets.

The exemption landscape is narrow. Certain intra-group transfers and certain activities below defined operational thresholds may fall outside the registration requirement, but the FSC has been conservative in its interpretation of exemptions. Operators who assume an exemption applies without a formal legal analysis of their specific activity set are running a material risk.

The question of whether a BVI entity that serves clients exclusively outside the BVI requires registration is frequently raised. The answer, under the VASP Act, turns on where the services are carried on – and where the entity is incorporated and managed is a significant factor. A BVI company providing exchange services to non-BVI clients, managed from the BVI, is within the supervisory perimeter. That is precisely the structure that many offshore-registered operators have built.

Which operator profiles does the BVI VASP model fit – and which does it not?

The BVI is genuinely suited to a specific profile of crypto operator. It is less suited to others. Understanding the distinction before committing to the structure saves significant remediation cost later.

Profile A – the custody or fund-services vehicle. A crypto fund or custody entity whose principals are prepared to establish a genuine BVI operational presence – a local director with real authority, an office, management meetings held in territory – and whose clients are institutional counterparties comfortable with BVI domicile. This profile fits the BVI model well. The VASP Act's licensing framework is coherent, the FSC is accessible, and the BVI's established company law and court system provide a familiar contractual backdrop. The timeline and cost of establishing genuine substance are manageable relative to the revenue at stake.

Profile B – the retail-facing exchange seeking EU/UK market access. A business that wants to serve EU or UK retail clients will need authorisation in those jurisdictions under MiCA (the EU's Markets in Crypto-Assets Regulation) or FCA registration respectively. A BVI entity cannot passport into the EU or UK; the BVI licence does not substitute for a CASP authorisation (Crypto-Asset Service Provider) under MiCA or FCA registration under the Money Laundering Regulations. For this profile, the BVI may serve as a group holding or treasury vehicle, but it is not the primary licensing hub. Operators we advise who begin with a BVI-only structure and later seek EU access face a structural rebuild that is more disruptive and more expensive than getting the architecture right at the outset.

Profile C – the token issuer seeking a light-touch offshore structure. This is the profile for which the BVI substance requirement represents the greatest mismatch. A token issuer that wants to use a BVI entity for the issuance vehicle, while the real team and operations sit elsewhere, will find that the substance requirement is difficult to satisfy without either relocating meaningful activity to the BVI or accepting the risk of an information-exchange notification. In many cases, a different jurisdiction – the ADGM in Abu Dhabi, under the FSRA, or the AIFC in Kazakhstan under AFSA – provides a more coherent fit for a tech-first issuer whose team is physically present in one place.

A common assumption in this market is that a single offshore licence is enough to serve clients across all geographies. That assumption is incorrect. The BVI VASP licence authorises activities in and from the BVI. It does not confer the right to operate in jurisdictions that require their own regulatory authorisation. A BVI-licensed operator serving EU residents from a BVI entity, without MiCA authorisation, is operating outside the regulated perimeter in the EU – regardless of what the BVI licence says.

What AML and Travel Rule obligations apply to BVI VASPs?

BVI VASPs are subject to the FATF Recommendations on virtual assets, including the Travel Rule obligation to collect, verify and transmit originator and beneficiary information on virtual asset transfers above the applicable threshold. The BVI's AML/CFT regime is aligned with these FATF standards, and the FSC monitors compliance through its supervisory programme.

In practice, Travel Rule compliance requires a VASP to have technical solutions in place that can transmit the required data to a counterpart VASP at the point of transfer. Many smaller operators licence a Travel Rule compliance tool from one of the established protocol providers. The BVI FSC expects to see evidence of this infrastructure – or a credible plan for it – at the authorisation stage.

The cross-border dimension of Travel Rule compliance is material for a BVI-registered VASP. If the counterpart VASP is in a jurisdiction with a different de-minimis threshold or a different data-format requirement, the BVI entity must be capable of meeting the higher standard. Regulators in the leading hubs increasingly expect VASPs to demonstrate interoperability, not merely technical compliance with the home-jurisdiction rule.

If a prior application stalled on AML/CFT documentation, or if the FSC has raised queries about Travel Rule infrastructure during a supervision cycle, the structural analysis is worth revisiting before the next submission. Contact OBOLUS at info@oboluslaw.com to discuss where the gap lies and the route back to compliance – or message us via t.me/oboluslaw. You can also map your options here.

Self-assessment: Is your BVI VASP substance position defensible?

Operators who have held a BVI VASP registration for more than one reporting cycle should periodically test their substance position against the following markers.

First: can you produce board or management meeting minutes that record substantive decisions – not merely ratifications – being made in the BVI, with a quorum physically present? If the minutes show unanimous written resolutions signed from multiple foreign jurisdictions, the substance position is vulnerable.

Second: does the entity have at least one officer or director who is resident in the BVI and who exercises genuine authority over the VASP's core activities? A nominee director with no operational involvement does not satisfy this requirement.

Third: does the entity maintain a physical office in the BVI – not merely the registered agent's address – and are adequate staff, whether employed or contracted, accessible to the entity on a basis that is proportionate to its revenue and activity level?

Fourth: have the entity's CIGAs – the decisions over risk management, capital, and asset custody – been documented as occurring in the BVI, or can a regulator or tax authority credibly argue that the real decisions are made elsewhere?

If any of these markers is weak, the annual substance return – which goes to the BVI Tax Authority and is the basis for international information exchange – may trigger consequences before the FSC licensing cycle raises the same issue. In our practice, the operators who face the most acute substance risk are those who built a BVI structure when the regime was lighter and have not updated their governance to reflect the current standard.

Related at OBOLUS

• VASP Licensing and Registration – how we scope and execute the full licence stack across operating, custody and payment layers.
• Digital Asset Licensing in Liechtenstein – a comparative view of a European jurisdiction with a distinct licensing architecture.
• Regulator AML Audit Defence: Practical Lessons for Boards – what happens when the FSC or a peer regulator comes in, and how to manage it.

FAQ

How long does a crypto licence take to obtain?

Timeline varies materially by jurisdiction and the completeness of the application. In the BVI, the FSC review cycle depends on how quickly queries are resolved and how well-prepared the substance documentation is at filing. Applicants should plan for a process measured in months rather than weeks for a full VASP authorisation. In our practice, the single biggest driver of delay is incomplete substance and governance documentation at the point of initial submission.

Which jurisdiction is best for licensing my crypto business?

There is no single best jurisdiction. The right answer turns on the operator's user base, the regulated activities it intends to carry on, where its team and infrastructure are physically located, its banking requirements, and its tax position. The BVI suits specific profiles – particularly custody and fund-services vehicles – and is poorly suited to businesses seeking EU or UK retail market access. We map the licence, banking and tax stack against the operator's specific facts before any commitment is made.

Do I need a separate custody licence?

In most flagship regimes, custody of virtual assets on behalf of third parties is a discrete regulated activity requiring its own authorisation, separate from exchange or brokerage. Under the BVI VASP Act 2022, safekeeping and administration of virtual assets is a defined VASP service. Whether a separate authorisation is required – or whether a single VASP registration covers both activities – depends on the scope of the registration sought and the FSC's current approach to combined-service applications. This should be confirmed with the FSC or through local legal advice before operations commence.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses. We map the licence stack across operating, custody and payment layers before you commit – so the structure is built to hold, not rebuilt after the first regulatory query. To discuss your BVI VASP substance position or a broader licence architecture review, contact info@oboluslaw.com.

By Aisha Tan, Licensing & Jurisdictions Analyst – specialises in VASP authorisation strategy and economic substance analysis across offshore and mid-shore digital-asset regimes.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.