Operating a digital-asset business without the right regulatory authorisation is not merely a compliance gap. It is a direct operational threat: banking relationships terminate, payment rails freeze and enforcement actions can reach directors personally. For businesses that have chosen the British Virgin Islands as their base – or are weighing it against a roster of competing hubs – the first question is whether a VASP (virtual asset service provider) registration under the BVI VASP Act creates a workable, defensible foundation, or whether it is simply the lightest hurdle on a longer road.
The short answer is that the BVI Financial Services Commission administers a VASP registration regime under the Virtual Asset Service Providers Act 2022 that is genuine, internationally recognised and increasingly scrutinised. It is not a rubber-stamp. It carries AML/CFT obligations, beneficial-ownership disclosure and FATF Travel Rule alignment. For the right operator profile, it is a highly efficient entry point. For others, it is one layer in a multi-jurisdiction stack. This page sets out the regime in detail, the process for an inbound business and the cross-border reality that every applicant must face.
What the BVI VASP Act Covers – and What It Does Not
The Virtual Asset Service Providers Act 2022 brought the British Virgin Islands into alignment with the FATF Recommendation 15 standard, which requires jurisdictions to regulate VASPs for AML/CFT purposes. The BVI FSC is the competent authority for registrations and ongoing supervision under the Act.
The regulated perimeter covers entities that, as a business, provide any of the following services with respect to virtual assets: exchange between virtual assets and fiat currencies, exchange between one or more forms of virtual assets, transfer of virtual assets, safeguarding and administration of virtual assets or instruments enabling control over virtual assets, and participation in and provision of financial services related to an issuer's offer or sale of virtual assets. If any of those activities occurs in or from the BVI – or if the entity is incorporated in the BVI and conducts those activities elsewhere – the Act applies.
What the regime does not do is create a passporting right into other markets. A BVI VASP registration is a domestic regulatory status. It satisfies BVI law. It does not grant a right to solicit clients in the EU (where MiCA applies), the UK (where FCA registration is required), Singapore (where the MAS Payment Services Act governs) or the United States (where the SEC, CFTC and FinCEN maintain overlapping federal authority, alongside state money-transmitter licensing). The cross-border reality is that the BVI registration is one node, not the whole network.
In our practice, we see operators regularly underestimate this point at the outset. A BVI entity with a valid VASP registration that actively markets to EU retail clients without a MiCA CASP authorisation is exposed under both MiCA and the domestic rules of member states. The BVI registration protects the BVI-incorporated entity from BVI regulatory action. It does not protect it from Frankfurt or Paris.
Who Needs a BVI VASP Registration?
Any entity incorporated or registered in the BVI that carries on virtual asset business as defined under the Act needs a VASP registration before commencing that business. This includes BVI business companies, limited partnerships and certain other vehicles where the business activity meets the statutory definition.
Foreign entities that carry on VASP activities in or from the BVI – through a branch, an employee or a directed solicitation into the BVI – may also fall within the scope. The FSC has signalled that substance and actual activity, not just the formal legal address, drive the analysis.
Entities that conduct virtual asset business solely through a regulated subsidiary in another jurisdiction, and that have no BVI-touching activity, are outside the Act's direct reach. However, that distinction requires careful analysis. A BVI holding company that exercises management and control over an operating VASP raises its own question about whether the holding entity is itself carrying on virtual asset services.
One category that operators sometimes overlook is token issuance. A BVI entity that issues tokens and provides related services – particularly where those services include safeguarding, transfer facilitation or secondary-market operations – may well require VASP registration even if the entity does not think of itself as an exchange. The Act's language is activity-based, not label-based.
For a scoped assessment of whether your BVI entity triggers the registration requirement, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity type, the services, the user geography – change the analysis significantly. Map your options.
How Does the BVI VASP Registration Process Work?
The BVI FSC registration process follows a structured submission pathway: prepare a compliant application package, submit it to the Commission, respond to any queries during the FSC's review, and receive the registration certificate on approval. Each stage has practical depth that operators should understand before they begin.
The application package typically includes corporate documents for the BVI entity (certificate of incorporation, memorandum and articles), details of all directors, beneficial owners and senior management (with full KYC documentation for each individual), a business plan describing the virtual asset services to be provided, the proposed compliance programme and AML/CFT policies, and confirmation of the AML compliance officer appointment. The FSC expects a genuine, operating compliance programme – not a template downloaded and filed without adaptation.
Beneficial ownership disclosure is a central element. The BVI has operated a beneficial ownership register under its Beneficial Ownership Secure Search system for some years; the VASP Act layers on top of that, and applicants with complex ownership structures – multiple holding layers, nominee arrangements or trust-held shares – need to work through the disclosure chain with precision. We regularly advise clients on preparing the beneficial ownership analysis before any FSC communication begins.
The FSC review period varies. For a well-prepared application with clean ownership structures and experienced principals, the process tends to move efficiently. Applications that arrive incomplete, or that involve complex group structures with prior regulatory history in other jurisdictions, take longer. The Commission may raise queries; prompt, substantive responses to those queries are the single most effective way to control timeline.
Ongoing obligations follow registration. The registered VASP must maintain its AML/CFT programme, file annual returns, notify the FSC of material changes (change of control, new services, new directors) and cooperate with FSC supervisory requests. The BVI is no longer the unmonitored offshore vehicle it was sometimes portrayed as a decade ago. The FSC supervises its register, and registration lapses or enforcement actions are real outcomes for non-compliant registrants.
AML, the Travel Rule and FATF Alignment
The BVI VASP regime is built on the FATF standard, which means the Travel Rule (the obligation to pass originator and beneficiary identifying information with a virtual asset transfer above the applicable threshold) applies to registered BVI VASPs. This is not optional compliance – it is a registration condition.
FATF Recommendation 15 requires that jurisdictions apply AML/CFT measures to VASPs equivalent to those applied to financial institutions. The BVI has adopted this standard through the VASP Act and the FSC's supervisory approach. In practice, this means a registered VASP must implement a Travel Rule solution capable of communicating with counterparty VASPs in other jurisdictions, maintain transaction monitoring, file suspicious transaction reports with the BVI Financial Intelligence Agency, and conduct ongoing customer due diligence and enhanced due diligence for higher-risk relationships.
The cross-border dimension of Travel Rule compliance is genuinely complex. A BVI VASP transacting with counterparties in Singapore (where MAS applies the Travel Rule under the Payment Services Act), the EU (where MiCA and the EU TFR apply) and the United States (where FinCEN's rules govern) must navigate the different data fields, thresholds and network solutions that each regime requires. We advise clients to build their Travel Rule infrastructure before going live, not as a retrofit after the first supervisory query.
One practical point: the BVI's Travel Rule threshold, like those in most FATF-aligned jurisdictions, applies to transfers above a defined value. Because that figure is set by regulation and is subject to revision, operators should confirm the current threshold with the FSC or with qualified BVI counsel rather than relying on a number cited in a third-party summary. The principle – that the rule applies above a de minimis level and to all transfers in some circumstances – is settled; the exact figure requires current verification.
Tax, Banking and the Cross-Border Stack
The BVI entity structure is attractive partly because the British Virgin Islands levies no corporate income tax, no capital gains tax and no VAT on profits earned outside the territory. This is a well-established feature of BVI law that applies to BVI business companies operating internationally. However, the tax position of the BVI entity is only part of the analysis.
A BVI holding or operating entity that derives its income from services provided to clients in taxing jurisdictions – the EU, the UK, the United States, Singapore – will typically create tax exposure in those jurisdictions based on substance, nexus and the specific rules applicable to the services in question. The BVI entity's own zero-tax position does not insulate the group from tax obligations elsewhere. Operators who structure through the BVI without mapping the full tax stack regularly discover unexpected liabilities in their active jurisdictions after the fact.
Banking is the more immediate operational constraint. BVI entities that operate as registered VASPs face the same banking access challenges as digital-asset businesses generally: correspondent bank de-risking, account closure policies and the reluctance of traditional credit institutions to maintain accounts for crypto-adjacent entities. In our experience, the registration itself is a necessary but not sufficient condition for obtaining and maintaining a stable banking relationship. Banks want to see the registration, the AML programme, the nature of the client base and the transaction flows. A well-documented VASP with clean compliance posture can open accounts; an underprepared VASP with an opaque structure typically cannot.
The banking analysis is also cross-border. Most BVI VASPs bank offshore – in EMI accounts in the EU or UK, with regulated payment institutions in Singapore or Hong Kong, or with specialist crypto-friendly institutions in the US. Each of those banking relationships comes with its own regulatory classification and due-diligence expectations. We map the banking stack as part of the pre-launch analysis, not as an afterthought when the first account application is declined.
If a prior application stalled or an account was closed, a second read of the structure can surface the underlying cause and the path forward. Contact OBOLUS at info@oboluslaw.com to discuss where the process broke down. Map your options.
Who Should Choose the BVI – and Who Should Not
The BVI VASP regime suits a specific operator profile. It is not the right first choice for every crypto business, and the decision should be driven by the actual service model, user geography and capital deployment plan rather than by the registration cost or speed.
The BVI works well for a holding or management company that controls operating entities licensed in active markets, where the BVI entity itself engages in fund management, treasury operations or the administration of token structures without directly serving retail clients in regulated markets. It also works for a genuinely international exchange or OTC desk that operates on a B2B or institutional basis, with clients that are themselves regulated entities or sophisticated counterparties in jurisdictions where BVI registration is a recognised credential. And it works for early-stage projects that need a clean corporate home and a regulatory baseline while they build out the licence stack in their target markets.
The BVI is not the right primary structure for an operator that intends to serve EU retail clients under MiCA (which requires CASP authorisation from an EU member-state competent authority), for a business that needs a recognisable retail licence in a market where regulators actively require local authorisation (Hong Kong's SFC VATP regime, for instance, or Singapore's MAS major payment institution licence), or for any business where the primary banking and revenue base is in a jurisdiction that does not recognise BVI VASP status for its own regulatory purposes.
A business incorporated in the BVI and licensed there, that also needs to operate in the EU, would typically maintain the BVI holding structure while seeking CASP authorisation through a subsidiary in a MiCA-aligned member state – Lithuania, Malta or another jurisdiction with an efficient NCA. The BVI entity and the EU entity serve different functions in that structure, and the compliance programme must cover both.
A Recent Cross-Border Structuring Matter
In a recent licensing matter, a digital-asset trading desk incorporated in the BVI sought to expand its institutional client base into Europe and Southeast Asia. The entity held a BVI VASP registration but had no presence in either target market. We conducted a jurisdictional mapping exercise, identified that the proposed EU-facing activities would require CASP authorisation under MiCA and that the Singapore client strategy triggered MAS Payment Services Act registration obligations. The BVI entity was restructured to function as the group holding and treasury vehicle. Two operating subsidiaries – one in an EU member state pursuing MiCA CASP authorisation and one in a Singapore-adjacent jurisdiction – were established alongside. The banking stack was mapped separately, with accounts opened for the operating entities in their respective jurisdictions. The BVI registration remained in place for the holding layer. The client launched commercially within its targeted timeline.
Which Profile Should Choose Which Approach
A BVI-only structure works for the institutional OTC desk or token management vehicle that does not solicit retail clients in regulated markets. The timeline to registration, once a complete application is submitted, is typically a matter of weeks for a straightforward case. The primary risk is market access: if the business model evolves toward retail or regulated-market clients, the BVI registration alone will not be sufficient.
A BVI-plus-EU structure suits the operator that wants the BVI's efficiency and tax profile at the holding level while accessing EU retail markets through a MiCA CASP subsidiary. The timeline is longer, driven by the NCA's processing time in the chosen member state, and the cost base is higher. The benefit is genuine EU market access and passporting across the EU and EEA.
A BVI-plus-Asia structure mirrors the above logic but targets MAS or SFC authorisation in Singapore or Hong Kong. BVI provides the holding layer; the regulated subsidiary holds the active licence. The timeline varies by the target regulator's current processing load and the complexity of the application.
For every profile, the common mistake is building the BVI entity first and layering the other jurisdictions later, without a coherent plan for the group structure, the inter-company agreements and the banking relationships. We have seen operators spend six months establishing a BVI VASP, then discover that their primary target market requires a local licence that treats the BVI entity as a foreign holding company with limited standing. Planning the full stack at the outset saves time and material cost.
Related at OBOLUS
- Licensing and registration for digital-asset businesses – our full service across 70+ jurisdictions and licence categories
- Digital asset custody authorisation in Hong Kong – SFC regime, application process and cross-border interaction
- Corporate bank account opening under heightened scrutiny – banking strategy for digital-asset businesses facing de-risking
A Common Assumption About Offshore Licences
A common assumption among founders approaching us for the first time is that a single offshore registration – whether in the BVI, Cayman or another traditional offshore centre – is sufficient to serve clients across multiple markets. It is not, and acting on that assumption creates real legal exposure.
The reason is structural. Each major market defines the regulated perimeter by the location of the client, the currency of the service and the marketing directed at that market – not solely by where the provider is incorporated or licensed. A BVI-registered VASP that advertises exchange services to UK residents is within the FCA's financial-promotion perimeter. The same entity marketing to EU residents is within MiCA's reach. The offshore registration is not a shield against extra-territorial regulatory application.
The appropriate response is not to avoid offshore structures – they serve genuine purposes in holding, treasury and certain institutional service models. The appropriate response is to map the regulatory perimeter of each target market before launch and to build the licence and entity structure around that map. We do that mapping as a standard first step for every new client engagement.
FAQ
How long does a crypto licence take to obtain?
For a BVI VASP registration, the timeline from submission of a complete application to receipt of the registration certificate varies by case complexity. A well-prepared application with clean ownership structure and experienced principals can be processed within a matter of weeks. Applications involving complex group structures, prior regulatory history or incomplete documentation take longer. Other jurisdictions – MiCA CASP authorisation in the EU, MAS licensing in Singapore, SFC authorisation in Hong Kong – operate on separate timelines, generally running from several months to over a year depending on the regulator and category.
Which jurisdiction is best for licensing my crypto business?
There is no universally best jurisdiction. The right choice depends on who your clients are, where they are located, what services you provide, where your banking sits and what your growth plan requires. The BVI suits holding structures and institutional B2B models efficiently. For retail-facing EU business, a MiCA CASP authorisation in a member state is necessary. For Asia, MAS or SFC licensing is the relevant standard. Most serious operators end up with a multi-layer structure, and the BVI often sits at the holding level within it.
Do I need a separate custody licence?
In the BVI, the custody of virtual assets and instruments enabling control over virtual assets falls within the VASP Act's regulated perimeter. A registered VASP that provides custody as one of its services does not need a separate custody-only registration under BVI law – the VASP registration covers the activity. However, if the same group provides custody services in another jurisdiction – for example, Hong Kong (where the SFC regulates custody as a distinct activity) or the EU (where MiCA sets specific custodian obligations for crypto-asset service providers) – a separate authorisation in that jurisdiction will be required.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses. We map the licence, banking and compliance stack across operating, custody and payment layers before you commit – so the structure you build is the one that holds. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in VASP registration across offshore and mid-shore jurisdictions, with a focus on the BVI, Cayman, AIFC and Caribbean regulatory environments.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.