The British Virgin Islands sits at the intersection of common-law predictability and offshore commercial flexibility, making it one of the most frequently chosen domiciles for token issuers targeting global markets. A token offering (a public or private distribution of digital tokens to investors or users) structured through a BVI entity is not, by default, unregulated – but the specific obligations turn entirely on how the token is classified and where it is offered.
Token issuance in the BVI is governed by a layered regime: the BVI Financial Services Commission (FSC) administers the Virtual Asset Service Providers Act 2022 (the VASP Act), which imposes registration requirements on entities carrying on VASP activities from within the territory. Separately, the BVI's existing securities legislation – the Securities and Investment Business Act – may catch tokens that carry the economic characteristics of investment contracts, regardless of any utility label in the offering document. Mis-classifying a token can convert a product launch into an unregistered securities offering, with consequences that extend well beyond the BVI itself.
This page sets out how the BVI classification framework operates, when registration is required, what a compliant offering looks like in practice, and how a BVI structure interacts with the regulatory obligations of the jurisdictions where tokens are actually sold.
How does token classification work in the BVI?
Token classification in the BVI follows a substance-over-label approach: the regulator and, where relevant, a court will look at the rights a token actually confers, not the name given to it in a whitepaper. The FSC has signalled alignment with international standards – principally the FATF Recommendation 15 framework for virtual assets – while the securities analysis draws on established common-law principles for determining what constitutes a security or a collective investment scheme.
Three broad classifications matter for most issuers. First, a payment token (a token functioning solely as a means of exchange) sits closest to the pure virtual asset definition and is most squarely caught by the VASP Act when a service provider is involved. Second, a utility token (a token conferring a right to access a specific product or service) can fall outside securities regulation if the right is genuine, exercisable, and not primarily investment-driven – but a utility label alone does not settle the question. Third, a security token (a token conferring equity, debt, revenue-sharing, or other investment rights) is subject to the Securities and Investment Business Act and requires compliance with its prospectus and dealing provisions.
In our practice, the utility/security line is where most disputes originate. A token marketed as granting "platform access" but structured with profit-sharing mechanics, secondary-market liquidity promises, or issuer repurchase rights will almost certainly be treated as a security on the BVI analysis – and on the analysis of every major market into which it is sold. That dual exposure is the core risk for any token issuer choosing BVI as its base.
CTA #1: If you are at the classification stage, the right time to seek counsel is before the whitepaper is finalised. The structure, rights, and distribution mechanism all feed the analysis. Map your options with the OBOLUS team before locking in the offering terms.
When does the VASP Act apply to a token issuer?
The BVI VASP Act 2022 requires entities carrying on virtual asset service activities in or from the BVI to register with the FSC. The activities caught include exchange, transfer, custody, and certain advisory and issuance-related services in relation to virtual assets. A pure token issuer – one that creates and distributes tokens but does not operate an exchange or custody function – does not automatically require VASP registration. The analysis turns on whether the issuer is also conducting activities that fall within the enumerated VASP categories.
For most BVI-domiciled token issuers, the critical question is whether a post-issuance activity – running a token sale platform, facilitating secondary-market trading, or holding tokens on behalf of contributors – tips the entity into a regulated VASP activity. Where it does, registration with the FSC is required before that activity commences. The FSC has the authority to impose conditions on registration, to request business plans and AML/CFT policies, and to conduct ongoing supervisory reviews.
Separately, BVI's AML/CFT regime – aligned with FATF standards – applies to any registered VASP. That means a documented risk-based approach, customer due diligence, transaction monitoring, and compliance with the Travel Rule (the obligation to pass originator and beneficiary data with qualifying virtual asset transfers). The threshold at which the Travel Rule applies varies by jurisdiction and remains subject to regulatory updates; issuers should verify the current position with counsel before structuring cross-border flows.
What does a compliant BVI token offering look like?
A compliant offering from a BVI issuer has three structural pillars: a classification opinion, a distribution regime, and an AML/KYC framework that matches the target investor base.
The classification opinion is a written legal analysis concluding whether the token is a security, a virtual asset outside the securities perimeter, or something requiring a hybrid treatment. It is not a marketing document. It sits in the issuer's compliance file, informs the whitepaper's legal characterisation section, and is the first document a regulator in a secondary jurisdiction will request. We assess classification against the substance of rights, not the marketing label – and the opinion should reflect that rigour, because regulators in the US, EU, Singapore, and Hong Kong apply exactly the same test.
The distribution regime addresses who may receive tokens and on what terms. A BVI issuer selling tokens into the EU is subject to MiCA's whitepaper requirements for certain crypto-asset categories – the BVI domicile does not create an exemption. Sales into the US raise the Howey test analysis and the question of whether a Regulation S or Regulation D exemption structure is appropriate. Sales into Singapore engage the MAS Payment Services Act and, for security tokens, the Securities and Futures Act. In each case, the BVI structure is the starting point, not the finish line.
The AML/KYC framework must be operationally live before the token sale opens. That means identity verification for contributors above de-minimis thresholds, sanctions screening against OFAC and equivalent lists, and a documented process for rejecting or returning contributions from prohibited jurisdictions. For issuers accepting stablecoins – particularly USDT or USDC – it is worth noting that Tether and Circle hold contract-level freeze authority over their issued tokens and will act on law-enforcement or regulatory instruction. A contribution from a sanctioned address in USDC is not a completed, clean payment.
How does the cross-border dimension change the analysis?
A BVI entity is almost never the only regulatory touch-point for a token offering. The relevant regulatory exposure depends on where the token is marketed, where contributors are located, where the issuer team operates, and where the tokens are listed after issuance.
For a BVI issuer marketing into the EU, MiCA is operative. Tokens qualifying as asset-referenced tokens (ARTs) or e-money tokens (EMTs) require issuer authorisation from a national competent authority and an ESMA-notified whitepaper before public offer. Tokens outside those categories still require a whitepaper submitted to the relevant NCA, with mandatory disclosures and a 20-business-day notification window. The BVI entity cannot simply point to its domicile; MiCA applies on the basis of where the token is offered, not where the issuer is incorporated.
For US exposure, the analysis turns on the securities classification. A token that passes the Howey test – an investment of money in a common enterprise with an expectation of profits from others' efforts – is a security under federal law regardless of BVI classification. Issuers that structure a Regulation S exemption (sales to non-US persons outside the US) must build genuine geo-blocking, IP-restriction, and representation-collection mechanisms into the sale process, and must ensure that no directed selling efforts are made into the US. The mechanics of Regulation S compliance are operationally non-trivial and are commonly under-engineered by issuers relying on BVI counsel alone.
In our cross-border practice, we see token issuers regularly underestimate the reach of the MAS regime in Singapore and the SFC regime in Hong Kong. Both regulators have taken the position that soliciting investors in their jurisdictions – even from an offshore entity – brings the issuer within their regulatory perimeter for certain purposes. A BVI structure provides no safe harbour against either.
CTA #2: If a prior token sale encountered a regulatory challenge, a de-novo structural review can surface the gap and identify the remediation path. Map your options with the OBOLUS team before the next offering launches.
What is the whitepaper obligation for BVI issuers?
The BVI does not impose a domestic whitepaper mandate comparable to MiCA's requirements, but that does not mean a BVI issuer can offer tokens without a disclosure document. Market practice, the requirements of exchanges listing the token, and the laws of the jurisdictions into which the token is sold all create whitepaper obligations in substance even where BVI law does not impose one in form.
A well-constructed whitepaper for a BVI issuer addresses: the nature and rights of the token (with the classification analysis embedded, not merely asserted); the issuer's identity, corporate structure, and jurisdiction of incorporation; the use of proceeds; the risk factors specific to the token, the technology, and the regulatory environment; and the restrictions on sale (listing the jurisdictions from which contributions are excluded). It also includes a legal notice drafted with input from counsel in each primary target jurisdiction.
Where MiCA applies to the offering – because tokens are being offered to EU persons – the whitepaper must meet MiCA's mandatory content requirements and be submitted to the relevant NCA before publication. An NCA in a member state that has implemented MiCA may object to the whitepaper or request amendments within the statutory review window. The BVI issuer has no mechanism to avoid this review by pointing to its offshore domicile.
One practical point that token issuers frequently overlook: the whitepaper is a legal document, not a marketing document with a legal disclaimer appended to the end. Representations in it about the utility of the token, the development roadmap, or the expected token economics can create civil liability in the jurisdictions where it is distributed. Drafting a whitepaper with counsel who has visibility across the target markets is not optional for a serious offering.
How does banking and tax interact with a BVI token issuance?
The BVI is a zero-corporate-tax jurisdiction: there is no corporate income tax, capital gains tax, or withholding tax at the BVI entity level. That makes it structurally attractive for holding intellectual property, token issuance vehicles, and foundation structures. However, the tax advantage at the BVI level does not eliminate the tax exposure of the people and activities behind it.
Founders resident in high-tax jurisdictions – the EU, the UK, the US, Australia – remain subject to their home-country tax rules on income and gains, including controlled-foreign-corporation provisions that can attribute the BVI entity's income to them directly. An opinion from BVI counsel on the BVI tax position is not a substitute for advice on the founders' personal tax exposure in their jurisdictions of residence.
Banking for a BVI token issuer is a practical constraint that shapes the structure significantly. Most mainstream correspondent banks remain cautious about accounts for BVI entities engaged in token sales, absent a clear regulatory registration, a strong compliance posture, and transaction flows that can be explained to a compliance team. In practice, issuers frequently combine a BVI holding structure with an operating entity in a regulated hub – Singapore, the UAE, Lithuania, or Switzerland – where banking relationships are more accessible for digital-asset businesses with the appropriate licence or registration.
The interaction between the BVI issuer, a regulated operating entity in a second jurisdiction, and the founders' tax residence creates a three-layer structure that requires coordinated advice. We structure licensing, banking, and tax as one mandate rather than three disconnected workstreams, because a gap in any one layer typically creates a problem in the other two.
Illustrative matter
In a recent engagement, a technology company incorporated in the BVI had completed an initial token distribution to early contributors under a simple agreement for future tokens. When it sought a listing on a regulated exchange, the exchange's legal team flagged that the token's revenue-sharing mechanics exposed it to securities classification risk in several target markets. We conducted a multi-jurisdiction classification review covering the BVI, the EU under MiCA, and two Asia-Pacific regimes. The review identified a structural adjustment – removing the revenue-sharing feature and replacing it with a governance right – that resolved the securities concern without requiring a reissuance. The listing proceeded in the following quarter. No claim was made, and no regulatory action was initiated.
Which issuer profile fits the BVI token issuance path?
Not every token issuer is well-served by a BVI structure. The decision turns on the issuer's target markets, the nature of the token, and the operational footprint of the business.
Profile A is a technology issuer with a genuine utility token, a non-US, non-EU primary market, and founders comfortable with VASP registration if required. For this profile, a BVI issuance vehicle combined with a regulated operational entity in Singapore or the UAE gives strong structural flexibility, reasonable banking access, and a credible regulatory posture. The timeline to a compliant structure – including classification opinion, whitepaper, and VASP registration if applicable – is typically a matter of months.
Profile B is an issuer targeting EU retail investors with a token that may qualify as an ART or EMT under MiCA. For this profile, a BVI issuer is structurally problematic: MiCA requires the authorised issuer to be EU-incorporated for ART and EMT categories. A BVI holding structure may still be used above an EU operating entity, but the regulated issuance must sit within the EU. The BVI-only structure will not satisfy MiCA's requirements, and an attempt to avoid that by marketing through a BVI entity without EU authorisation creates direct regulatory exposure.
Profile C is an issuer with a security token – a token that deliberately confers investment rights and is designed to be distributed to accredited or professional investors. For this profile, the BVI structure is workable for the holding and governance layer, but the offering must be structured under appropriate private placement exemptions in each target jurisdiction. That means Regulation D (US), professional-investor carve-outs under MiCA or national prospectus regimes (EU), and equivalent treatment in Singapore and Hong Kong. Each exemption has its own conditions; they do not translate across borders.
In each profile, the cross-border dimension is determinative. A BVI structure that is coherent in isolation may be non-compliant the moment the token is marketed outside the territory.
What are the most common mistakes BVI token issuers make?
A common assumption is that BVI incorporation and a utility label on a whitepaper provide sufficient legal protection for a token offering. They do not. The BVI domicile determines which BVI-law obligations apply; it does not affect the obligations arising under the laws of the jurisdictions where the token is distributed.
The second common mistake is treating the whitepaper as a marketing exercise with a pro forma legal section. A whitepaper that overstates the utility of a token, understates the investment characteristics, or omits material risk factors creates civil and, in some jurisdictions, criminal exposure for the officers who sign it. We have seen issuers incur regulatory scrutiny specifically because their whitepaper described the token as a utility instrument while the underlying smart contract encoded profit-sharing mechanics.
The third mistake is structuring for tax efficiency without addressing the regulatory and banking requirements. A BVI entity that pays no corporate tax but cannot open a bank account and cannot list its token on a reputable exchange has optimised the wrong variable. The tax advantage is only realised if the business can operate commercially – which requires banking, exchange listings, and regulatory credibility.
The fourth mistake is geo-blocking without operational discipline. An issuer that nominally excludes US persons from its token sale but fails to implement robust IP-restriction, uses a public Telegram group with no geographic controls, and accepts contributions in pseudonymous wallets has not, in practical terms, excluded US persons. The SEC's enforcement record on Regulation S compliance is consistent on this point.
Related at OBOLUS
- Token offerings and securities for digital-asset businesses – cross-border classification, structuring and compliant distribution for token issuers
- Token legal classification in Abu Dhabi Global Market (ADGM) – how the FSRA regime classifies tokens and what it means for BVI-based issuers targeting the UAE
- Transaction monitoring setup in South Korea – AML and transaction monitoring obligations for issuers distributing tokens into the Korean market
FAQ
Is my token a security?
Whether a token is a security depends on the rights it confers, not the label it carries. The BVI analysis applies common-law investment contract principles; the US Howey test, MiCA's ART/EMT categories, and the MAS framework each apply their own tests. A token with profit-sharing mechanics, a managed secondary market, or issuer repurchase rights is at high risk of security classification across multiple jurisdictions. The answer requires a written classification opinion from counsel with visibility across your target markets – not an assertion in the whitepaper.
Do I need a MiCA whitepaper?
If your token is offered to persons in the European Union or the EEA, MiCA applies regardless of whether the issuer is incorporated in the BVI. Most crypto-asset categories require a whitepaper submitted to the relevant national competent authority before the public offer. ART and EMT issuers face additional authorisation requirements and must be EU-incorporated for those categories. A BVI domicile does not create an exemption from MiCA's whitepaper or authorisation obligations.
How should an airdrop be structured legally?
An airdrop – a gratuitous distribution of tokens to wallet addresses or users – can still engage securities law if the recipients performed a service, completed a task, or participated in a scheme in expectation of value. "Free" does not mean unregulated. A compliant airdrop structure identifies the classification of the token being distributed, excludes recipients in restricted jurisdictions (including the US for securities-risk tokens), and documents the basis for the distribution. AML/KYC obligations may apply depending on the value distributed and the jurisdictions involved.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance infrastructure that surrounds them. Digital assets are the whole of our practice. We assess classification against the substance of rights, not the marketing label, and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your token issuance or offering, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel – specialising in token classification, smart-contract governance, and the multi-jurisdiction regulatory treatment of on-chain instruments.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.