Operating a digital-asset business without the right licence is not a compliance oversight — it is an enforcement target. Frozen banking rails, regulator-imposed wind-downs and reputational damage follow quickly. For founders and general counsel evaluating where to anchor a crypto licensing strategy, the British Virgin Islands and Switzerland represent two genuinely different propositions: one a common-law offshore registry with a defined but lighter registration regime, the other a Tier-1 onshore jurisdiction with a global financial brand and a demanding supervisory process. The choice is not obvious, and the wrong call is expensive to reverse.
This analysis compares the BVI and Switzerland across every axis that matters — regulator posture, licence categories, VASP registration requirements, substance expectations, AML/Travel Rule obligations, tax treatment and banking access. It closes with a decision matrix by operator profile: exchange, custodian, token issuer and fund. No blanket verdict is offered, because no single jurisdiction is the right answer for every business model.
What Are the Two Regulatory Architectures?
The BVI and Switzerland approach digital-asset regulation from opposite starting points, and understanding that difference is the foundation of any licensing decision.
The BVI Financial Services Commission administers the Virtual Asset Service Providers Act 2022 (the BVI VASP Act), which introduced a registration-based regime for VASPs operating in or from the BVI. The framework is relatively compact. It draws on FATF Recommendation 15 for its AML/CFT spine, requires registration rather than a full authorisation process, and sits within a well-developed common-law system that practitioners in disputes and recovery work already use. The BVI is not a pass-through jurisdiction in the way critics sometimes claim — the VASP Act carries real compliance obligations — but it is structurally leaner than a Tier-1 onshore regime.
Switzerland's FINMA operates at the other end of the spectrum. FINMA applies a token taxonomy — distinguishing payment tokens, utility tokens and asset tokens — and routes businesses to the appropriate licence track accordingly. Possible routes include a fintech licence, a full banking licence or affiliation with an SRO (self-regulatory organization) for AML purposes. FINMA expects material substance, a credible governance structure and detailed documentation. Switzerland's financial reputation is a genuine commercial asset for businesses that clear the bar, but the process demands serious resourcing.
In our advisory practice, the most common mistake we observe is founders treating these two regimes as interchangeable — picking the BVI because it appears faster, or Switzerland because it appears prestigious, without mapping either choice back to the actual business model and intended user base.
Who Needs a Licence in Each Jurisdiction?
The regulatory authorisation threshold in both jurisdictions turns on what the business does and where it does it — not simply where it is incorporated.
Under the BVI VASP Act, any entity conducting virtual asset services in or from the BVI requires registration. The BVI FSC has defined the scope of covered activities broadly, consistent with FATF guidance. A BVI-incorporated exchange, custodian or transfer agent conducting business with clients outside the BVI still falls within the regime's reach if the activity originates from BVI infrastructure or management. Exemptions exist — notably for businesses that are already licensed in a recognized jurisdiction — but they are narrow and require careful legal analysis before being relied upon.
In Switzerland, the entry point depends on what the business actually does with client assets. A business that holds or transfers value on behalf of clients, or that issues tokens that qualify as securities or deposits, will almost certainly require a FINMA licence, an SRO membership or both. The FINMA token taxonomy determines the classification, and that classification drives the applicable regime. A business that issues a token structured as an asset token — carrying debt-like rights against the issuer — faces a very different regulatory path than one issuing a pure utility token with no financial rights.
The cross-border dimension compounds both analyses. A BVI-registered entity serving EU clients must consider whether MiCA obligations apply to its EU-facing activity. A Swiss FINMA-licensed firm operating into the UK faces FCA financial-promotion rules regardless of its Swiss authorisation. Licensing in one jurisdiction does not extinguish the regulatory obligations that attach to the clients, assets or transactions in another.
For a scoped assessment of your licensing trigger and cross-border exposure, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts — the entity, the user base, the banking — change the analysis significantly.
What Licence Categories Exist in Each Regime?
The BVI and Swiss regimes define their licence categories differently, and the categories do not map neatly onto each other — a point that matters when structuring a multi-entity group.
The BVI VASP Act covers the range of virtual asset activities defined under FATF Recommendation 15: exchange between virtual assets and fiat, exchange between virtual assets, transfer, safekeeping/administration and participation in token offerings. A single registration can cover multiple activities, subject to the FSC's confirmation that the applicant's governance and AML controls are commensurate with the scope sought.
Switzerland's FINMA framework offers several distinct routes. The fintech licence — introduced as a proportionate option for smaller deposit-taking businesses — covers the holding of client funds below defined thresholds but does not permit interest payment. A full banking licence is required where the business model crosses those thresholds or involves deposit-taking at scale. Businesses that engage in securities-related activities involving tokenized instruments may instead require a securities firm licence. SRO membership is a parallel AML obligation, not a substitute for a substantive licence where one is required.
The practical implication for a group structure is significant. A fund vehicle domiciled in Cayman or the BVI, a Swiss operating entity holding the FINMA licence, and a BVI custodian registered under the VASP Act are a workable combination for some business models — but the intercompany flows, governance lines and substance requirements must be mapped at each layer. We regularly advise on exactly this kind of layered structure, and the sequencing of applications matters as much as the choice of jurisdiction.
How Long Does the Process Take in Each Jurisdiction?
Timeline in both jurisdictions varies by the complexity of the application, the completeness of the submission and the current workload at the relevant authority — but the structural difference between a registration regime and a full authorisation process is measurable.
BVI VASP registration tends to move faster than a full licensing process in a Tier-1 jurisdiction. The FSC reviews the application, the fitness-and-propriety of the principals, the AML/CFT policies and the business description. Where the submission is complete and the business model is within the standard scope of the VASP Act, the process can conclude in a matter of weeks rather than months. That said, the FSC has increased scrutiny over time, and incomplete applications or unusual business models will extend the timeline materially.
A FINMA process — whether for a fintech licence, a banking licence or a securities firm licence — is more structured and considerably longer. FINMA pre-licensing dialogue, the formal application, review of governance documentation, fit-and-proper assessments for key personnel and the review of the capitalization structure together constitute a multi-stage process that typically runs over many months. Businesses that engage FINMA pre-application and present a well-organized submission perform better on timeline, but there is no shortcut to the substantive review.
In both cases, engaging counsel early reduces avoidable delay. We have seen applications in both jurisdictions stall at the same pressure point: the AML/CFT program documentation. Regulators in both the BVI and Switzerland expect a purpose-written compliance framework, not a generic policy borrowed from another jurisdiction. That document is the single most common cause of a request for further information, and it is one of the first things we address in any new licensing mandate.
How Do AML and the Travel Rule Apply in Each Jurisdiction?
Both the BVI and Switzerland are FATF member or observer jurisdictions and have implemented the Travel Rule — the obligation to pass originator and beneficiary data with virtual asset transfers above the applicable threshold — into their domestic regimes, though the specifics of implementation differ.
In the BVI, the VASP Act incorporates FATF-aligned AML/CFT requirements. VASPs must conduct customer due diligence, maintain transaction records and comply with Travel Rule data-passing obligations for transfers above the relevant threshold. The BVI FSC monitors compliance through supervisory engagement, and failures in the AML program — particularly incomplete KYC or absent Travel Rule procedures — are the most frequently cited deficiency in FSC supervisory correspondence that we review.
Switzerland's AML obligations are administered through FINMA and through the SRO network. The Swiss Anti-Money Laundering Act applies to financial intermediaries, including VASPs, and the Travel Rule threshold is set within that domestic legislative architecture. Switzerland has been an active participant in FATF processes and has implemented a detailed Travel Rule compliance framework. Businesses regulated by FINMA face regular AML audits conducted by FINMA-recognized audit firms — an ongoing cost and governance obligation that the BVI registration regime does not replicate at the same intensity.
The cross-border implication for a business serving EU clients is that MiCA's Travel Rule provisions will apply to EU-facing transfers regardless of where the VASP is licensed. A BVI-registered entity or a Swiss-licensed firm sending or receiving transfers involving EU-based counterparties must satisfy the applicable EU data-passing standard. Operating without that capacity in place is a direct enforcement exposure in the EU, irrespective of the operator's own-jurisdiction status.
What Do Substance, Banking and Tax Look Like in Practice?
Substance, banking access and tax treatment are three variables that frequently determine the real operating cost and strategic value of a jurisdiction — and they are often underweighted at the point of the licensing decision.
The BVI has relatively low domestic substance requirements for VASP registrants compared to, for example, an EU CASP under MiCA or a FINMA-licensed Swiss entity. That said, the BVI's economic substance legislation applies to certain categories of BVI business, and a business that holds significant intellectual property, functions as the primary risk-bearing entity or employs the bulk of the management team will attract a higher substance expectation. Banking access for BVI entities in the digital-asset sector is available but requires careful preparation: correspondent banking relationships for BVI VASPs are not automatic, and the choice of banking jurisdiction is a separate workstream from the licensing decision.
Switzerland's tax environment is competitive for holding and operating structures, with cantonal variation in corporate tax rates meaning that the effective rate depends on the domicile within Switzerland. The Swiss Federal Tax Administration has published guidance on the tax treatment of certain token types, though the treatment of specific instrument categories — staking rewards, DeFi-derived income, token issuance proceeds — remains a developing area in most jurisdictions, including Switzerland. Transfer pricing obligations apply to intra-group arrangements in a Swiss-anchored group, and those obligations are not cosmetic: the arm's-length principle applies to flows between the Swiss operating entity and any offshore affiliates.
In our advisory practice, we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. A licensing choice that is not validated against the banking options and the tax position of the group has a material probability of requiring restructuring within 18 months. We have seen this repeatedly — most recently with an exchange group that obtained a BVI VASP registration and then discovered that the banking options available to that entity did not support the payment rails the business model required.
If a prior application stalled or a banking relationship failed to materialize, a second read of the structure can surface the reason — and the route forward. Contact OBOLUS at info@oboluslaw.com.
Which Profile Should Pick Which Jurisdiction?
No jurisdiction is universally superior, and the right answer depends on the operator's activity type, intended market, institutional ambitions and timeline. What follows is a decision matrix by operator profile.
Exchange operator (spot, fiat-crypto, retail-facing): A BVI VASP registration is faster and lower-cost to obtain, making it appropriate for an early-stage exchange seeking to establish a regulated presence while the business scales. However, a BVI-registered exchange serving EU clients will require MiCA CASP authorisation for that EU activity. A Swiss fintech or banking licence offers stronger institutional positioning but is disproportionate for most early-stage exchange models unless the target market is specifically Swiss or the business is raising institutional capital that requires a Tier-1 regulatory address. Timeline risk: the BVI process is faster; the Swiss process is more predictable at scale.
Custodian: Custody is a regulated activity in both regimes, and the choice turns partly on the client base. A custodian serving institutional clients in Europe will likely find that those clients require a licensed counterparty in a recognized financial jurisdiction — and FINMA carries more institutional weight than BVI FSC in that context. A custodian serving non-European institutional clients or structuring a custody vehicle within a larger group may find the BVI registration a proportionate solution for the custody layer, with the operating brand sitting in a higher-profile jurisdiction. The key risk in either case is the segregation and safeguarding expectation: both regulators expect client assets to be held separately from proprietary assets, and the documentation of that obligation must be airtight.
Token issuer: Token issuance sits at a particular intersection of securities law, AML and consumer-protection regulation. A token that carries financial rights — economic participation, debt-like obligations or profit-sharing — is likely an asset token under FINMA's taxonomy and a potentially regulated instrument under the BVI's securities legislation. Switzerland has a well-developed FINMA guidance framework for token classification and has positioned itself as an "innovation-friendly" jurisdiction for issuers who can meet the standard. The BVI offers a familiar corporate structure for issuance vehicles, but the regulatory analysis of the token itself is not avoided by using a BVI company: the laws of the jurisdictions where the token is offered apply to the offering, regardless of the issuer's domicile.
Digital-asset fund: A fund structure typically separates the fund vehicle — often Cayman or BVI for established reasons of fund law and investor familiarity — from the fund manager, which carries the regulated activity. A Swiss fund manager licensed by FINMA carries real reputational weight with institutional limited partners. A BVI-registered manager is a lighter structure, appropriate for a fund that is not yet at a scale that justifies FINMA engagement or that does not require access to Swiss-domiciled institutional capital. In both cases, the relevant question is where the investment management activity takes place and where the investors are located: those facts drive the licensing analysis for the manager, not just the fund vehicle's domicile.
A Common Assumption Worth Examining
A common assumption among operators entering the licensing process is that a single offshore registration is sufficient to serve clients globally. That assumption is wrong, and it is increasingly expensive to maintain.
The global direction of travel — from MiCA in the EU to the SFC's VATP regime in Hong Kong to the FCA's expanded cryptoasset registration in the UK — is toward jurisdiction-specific authorisation for businesses that actively serve clients in those markets. Reverse solicitation (the principle that a client's unsolicited approach to a foreign-licensed firm may exempt that firm from local licensing) is a narrowly interpreted exception, not a strategy. Regulators in the major EU markets, Hong Kong and Singapore have all signalled that they view reverse solicitation claims skeptically where the firm's marketing, website or app is accessible to local users.
The practical consequence is that a BVI VASP registration or a Swiss FINMA licence is a foundation, not a ceiling. Either one gives the business a credible regulatory address and a formal AML/CFT framework. Neither one replaces the licensing or registration obligations that attach in the markets where clients are located. A well-advised operator maps the full licence stack — primary jurisdiction, passporting where available, market-access registrations where required — before committing to a structure.
Related at OBOLUS:
- Licensing & Registration for Digital-Asset Businesses – a full account of OBOLUS's licensing practice across 70+ jurisdictions
- Reverse Solicitation: A Legal Guide for Digital-Asset Businesses – when the exception applies and when it does not
- Transfer Pricing for Crypto Groups – managing intra-group pricing obligations across a multi-jurisdiction digital-asset group
FAQ
How long does a crypto licence take to obtain?
Timeline varies significantly by jurisdiction and licence type. A BVI VASP registration for a straightforward business model can conclude in a matter of weeks where the submission is complete. A FINMA process in Switzerland — covering a fintech licence, banking licence or securities firm licence — typically runs over many months and involves structured pre-application dialogue. In both cases, the quality and completeness of the AML/CFT documentation is the variable most within the applicant's control. Engaging counsel before the application is filed reduces avoidable delay in both regimes.
Which jurisdiction is best for licensing my crypto business?
There is no universal answer. The right jurisdiction depends on your activity type, intended user base, institutional ambitions, timeline and the banking options available to the structure. A BVI VASP registration is faster and proportionate for early-stage businesses, but it does not replace market-access authorisations in the jurisdictions where clients are located. A FINMA licence carries significant institutional weight and is appropriate for businesses targeting Swiss or European institutional capital, but the process is demanding and resource-intensive. A licensing assessment should map the full stack — primary licence, passporting and market-access obligations — before a jurisdiction is selected.
Do I need a separate custody licence?
In most regulated regimes, custody of virtual assets on behalf of clients is a separately regulated activity. Under the BVI VASP Act, safekeeping and administration of virtual assets is a covered activity requiring registration. Under FINMA, holding client assets may require a banking licence or fintech licence depending on the scale and structure. A business that combines exchange and custody functions — as most full-service platforms do — should confirm the scope of its registration or licence expressly covers both activities. Assuming that a single licence covers all activities is one of the most common structural errors we encounter.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We map the licence stack across operating, custody and payment layers before you commit — and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst — specialising in multi-jurisdiction licensing strategies for exchanges, custodians and token issuers across the BVI, Swiss and offshore financial centres.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.