For a digital-asset business choosing between the British Virgin Islands and the United Kingdom, the decision turns on more than registration speed or offshore credibility. The BVI offers a purpose-built VASP (virtual asset service provider) registration under the BVI Financial Services Commission and the VASP Act 2022 – a comparatively streamlined path suited to funds, holding vehicles and operationally lean structures. The UK requires FCA cryptoasset registration under the Money Laundering Regulations and, increasingly, compliance with its financial-promotion regime – a more demanding bar that carries genuine market-access weight in a G7 economy. The right answer depends on what the business does, where its users sit, and how the licence interacts with banking and tax.
This page compares both regimes across the axes that matter to operators: regulator posture, licence categories, timeline, substance requirements, AML obligations, tax and banking interaction, and cross-border reach. It closes with a decision matrix by operator profile. There is no blanket verdict – the structure that works for a custodian differs materially from the one that works for a retail exchange or a token issuer.
Regulator Posture: Two Different Philosophies
The BVI FSC and the FCA approach crypto supervision from fundamentally different starting points, and understanding that difference is the first step in any jurisdiction analysis.
The BVI Financial Services Commission operates within a well-developed offshore corporate law tradition. Its approach to VASPs is registration-first: the regime under the VASP Act 2022 establishes a defined set of registrable activities, sets baseline AML and governance expectations, and gives the FSC supervisory powers proportionate to a small jurisdiction with a significant international financial centre. The FSC is not a conduct regulator in the retail-investor sense; it does not typically require the same depth of product-conduct rules that a G7 regulator does.
The FCA, by contrast, is a full-spectrum financial regulator. Its cryptoasset registration under the Money Laundering Regulations is formally an AML/CFT measure, not a full authorisation – but the FCA applies authorisation-grade scrutiny in practice. Applicants face detailed fit-and-proper assessment, AML systems reviews, and a financial-promotions regime that restricts how registered firms market products to UK retail consumers. The FCA has consistently described its crypto register as a high-bar process, and rejection rates have been publicly noted as significant.
For an operator, the practical implication is this: BVI registration is achievable in a shorter timeframe and with a lighter ongoing compliance overhead. FCA registration is harder to obtain, operationally heavier, but it confers credibility with institutional counterparties and banking partners that the BVI alone cannot match in every situation.
To map which regime fits your operating model and user base, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity structure, the user geography, the banking relationships – change the analysis materially. Map your options
What Licence Categories Are Available?
Both jurisdictions define registrable or licensable activities by reference to what the business does, not what it calls itself – a classification principle that applies across all serious regulatory regimes.
Under the BVI VASP Act 2022, the FSC registers businesses engaged in exchange between virtual assets and fiat, exchange between one or more forms of virtual asset, transfer of virtual assets, safekeeping and administration of virtual assets, and participation in and provision of financial services related to a virtual asset issuance or sale. The regime covers the standard range of VASP activities defined under FATF Recommendation 15 – the Travel Rule (the obligation to pass originator and beneficiary data alongside a virtual asset transfer) baseline applies. There is no separate custody-specific licence tier in the BVI; custody is a registrable VASP activity within the main framework.
In the UK, FCA cryptoasset registration under the Money Laundering Regulations covers businesses carrying on cryptoasset exchange activities and custodian wallet provider activities as defined in that regime. The FCA does not, as of now, operate a full crypto-specific authorisation regime comparable to MiCA's CASP authorisation – but its financial-promotion rules impose additional obligations on any firm communicating crypto promotions to UK consumers, whether registered or not. Stablecoin issuance and custody are subject to evolving secondary legislation that is expected to expand the regulated perimeter.
A fund domiciled in the BVI offering crypto-asset strategies to professional investors operates under a different track entirely – the BVI Business Companies Act and relevant investment business registration – rather than the VASP Act. That layering is something operators frequently miss when mapping their structure.
How Long Does Each Process Take?
Timeline is one of the most commercially significant variables in a licence decision, and both jurisdictions differ markedly in practice.
BVI VASP registration, when the application is well-prepared and the FSC's information requirements are met upfront, is generally achievable within a matter of weeks to a few months – faster than most EU or major Asian regimes. The FSC publishes registration requirements and the process is relatively predictable for experienced practitioners. Incomplete applications or complex ownership structures extend the timeline.
UK FCA cryptoasset registration has historically taken considerably longer – a matter of months rather than weeks, and in some cases extending to the better part of a year. The FCA operates a temporary registration regime that has been used by existing businesses awaiting determination, but that option is not available to new applicants. The FCA's published expectations on AML systems and controls, and its track record of requiring significant remediation before registration, make timeline prediction difficult without a thorough pre-application gap analysis.
In our practice, we consistently advise clients that timeline planning for UK registration must build in time for pre-application engagement with the regulator, remediation of AML policy gaps, and the FCA's internal review cycles. Rushing the application to beat a deadline is the single most common cause of rejection or prolonged back-and-forth. A well-prepared BVI application, by contrast, can be structured and filed considerably faster – a relevant consideration when market windows are time-sensitive.
AML and Travel Rule Obligations
Both jurisdictions impose AML/CFT obligations aligned with FATF standards – the question is depth of implementation and supervisory intensity.
BVI registered VASPs are subject to AML/CFT requirements under the FSC's framework, including the Travel Rule obligation to transmit originator and beneficiary information with virtual asset transfers above applicable thresholds. The FSC supervises compliance through its inspection and supervisory review process. In practice, the AML infrastructure required for BVI registration is substantive but typically less documentation-intensive than the FCA's detailed expectations around systems, controls and risk assessments.
The FCA's AML expectations are among the most detailed in any English-speaking jurisdiction. Applicants must demonstrate a credible, documented AML framework: a comprehensive risk assessment, policies and procedures, transaction monitoring capabilities, a fit-and-proper Money Laundering Reporting Officer, and evidence of a testing and audit programme. The FCA has been explicit that inadequate AML systems are the primary reason for refusing or withdrawing crypto registrations. The UK's Travel Rule obligations, implemented via secondary legislation under the Money Laundering Regulations, apply to cryptoasset businesses operating in the UK and carry specific data-passing requirements for qualifying transfers.
For any operator with global ambitions, the cross-border dynamic is important: a business registered only in the BVI will face AML due-diligence scrutiny from banking counterparties and institutional clients who expect to see the underlying AML framework regardless of where the licence sits. That scrutiny is often more intense for BVI-only structures when serving clients in FATF member jurisdictions.
Tax and Banking: The Hidden Differentiators
Licence jurisdiction and tax residence are not the same thing – and the interaction between them, combined with banking access, frequently determines whether a structure is operationally viable.
The BVI imposes no corporate income tax on BVI companies. This makes it attractive as a holding or fund domicile. However, operational substance is increasingly scrutinised: FATF mutual evaluations and correspondent banking risk assessments treat BVI-incorporated operating companies without genuine local substance with heightened caution. Banking for a BVI VASP that processes retail flows is harder than it has been historically. Many BVI-registered crypto businesses bank in other jurisdictions – the UK, Singapore, or the EU – which reintroduces those regulators' AML and reporting expectations into the operational picture.
The UK is a high-tax environment for operating companies. Corporate tax rates, employment costs, and the cost of maintaining a regulated business add up. Against that, UK banking access for FCA-registered crypto firms – while not automatic – is materially better than for most offshore structures. A UK-registered, FCA-supervised firm has a credible answer to the question every correspondent bank and institutional client asks: "Who regulates you?" That answer opens doors.
Operators we advise routinely encounter a split-structure approach: a UK entity for customer-facing regulated activities and banking, paired with a BVI holding company for IP ownership, fund structures or treasury. That approach has legitimate uses but requires careful transfer-pricing analysis and must not be used to circumvent the UK's substance and tax-residency rules.
If a prior banking relationship stalled or a regulatory application hit unexpected friction, a second read of the structure often surfaces the reason. To discuss your situation, write to info@oboluslaw.com or message us at t.me/oboluslaw. Map your options
The Cross-Border Reality: Where Your Users Are Matters
A licence in the BVI or the UK does not automatically authorize activity in every jurisdiction where a user connects from – and operating as though it does is one of the most consequential mistakes we see in practice.
UK FCA registration covers UK-nexus cryptoasset activities. A firm registered with the FCA cannot use that registration as a passport into the EU – MiCA's CASP authorisation is a separate process, and EU competent authorities have been explicit that third-country firms serving EU retail clients without authorization face enforcement exposure. Similarly, a BVI VASP registration does not provide market access in Singapore (where MAS licensing applies), Hong Kong (where the SFC's VATP regime applies), or any other jurisdiction with its own VASP rules.
The cross-border reality is that most digital-asset businesses need a licence stack – not a single registration – that maps to their actual user base and operational footprint. A BVI entity as a holding vehicle, a UK entity for UK and potentially English-law-governed institutional business, an EU entity for the retail EU market, and local registrations where specific jurisdictions require them. We have seen businesses operate on the assumption that a single offshore registration covers their global activity, only to discover enforcement action or banking closure when that assumption is tested.
In a recent matter, a custody business incorporated in the BVI sought to onboard EU institutional clients. Counterparty due-diligence requirements from those clients triggered a MiCA-readiness review; we advised on a parallel EU entity structure and coordinated AML policy alignment across both jurisdictions to satisfy the institutional requirements without disrupting the existing BVI registration.
A Common Assumption: "One Offshore Licence Is Enough"
The belief that a single offshore registration confers global operating permission is persistent – and wrong. It surfaces most often among early-stage founders who obtained a BVI or Cayman registration quickly and then built a customer base across multiple jurisdictions before legal infrastructure kept pace.
The error is understandable. Offshore registrations are faster and cheaper than EU or UK authorisations. They satisfy the minimum threshold for some early institutional counterparties. And – for a period – enforcement in the major markets was slow enough that the gap was not immediately apparent. That period is closing. ESMA and the national competent authorities under MiCA are actively monitoring third-country firms accessing EU retail clients. The FCA has taken public action against unregistered crypto businesses marketing to UK consumers. The SFC in Hong Kong has demonstrated willingness to pursue unlicensed exchanges.
The test is not where the entity is incorporated. It is where the activity is conducted and where the users are. FATF's guidance on virtual assets is explicit on this point. A business registered in the BVI with 80% of its users in the UK and the EU is, as a matter of regulatory substance, conducting regulated activity in those jurisdictions – and needs the corresponding authorisations.
Decision Matrix: Which Profile Points Where?
The following matrix describes the general alignment between operator profile and jurisdiction, based on structural and regulatory factors. It is not a recommendation for any specific situation; every structure requires analysis of the specific facts.
Profile A – Crypto fund (professional investors, no retail). A fund targeting professional or institutional investors, with no retail client base, and managed by a team that does not need a UK brand signal. The BVI remains a well-established fund domicile for this profile. A BVI VASP registration addresses the activity-based requirement; investment business registration may also apply depending on the strategy. Banking can be structured through a separate operating jurisdiction. Timeline to registration is relatively short. Key risk: substance scrutiny from banking counterparties and increasing FATF mutual-evaluation pressure on BVI as a domicile for operating businesses.
Profile B – Retail or institutional exchange, UK or EU user base. A platform offering exchange or trading services to UK consumers or EU retail clients. The BVI alone is not a viable primary regulatory answer for this profile. UK FCA registration is required for UK-nexus activity; MiCA CASP authorisation is required for EU retail access. Timeline is measured in months to potentially over a year for UK registration; EU timelines under MiCA vary by member-state NCA. Key risk: delay-to-market and the cost of maintaining a high-substance regulatory operation.
Profile C – Custodian serving institutional clients globally. A custody business with a sophisticated client base, no retail exposure, and a need for strong counterparty credibility. A UK FCA-registered custodian structure carries significant weight with prime-brokers, fund administrators and institutional allocators. A BVI entity as a parallel vehicle for non-UK business can complement it. Key risk: the UK's evolving custody regulation – anticipated secondary legislation will likely raise the bar further, and the cost of maintaining two parallel structures requires careful planning.
Profile D – Token issuer, no ongoing service provision. An issuer conducting a one-time token generation or structured offer, with no ongoing exchange or custody business. For issuance activity, the BVI offers a flexible corporate law environment and a VASP registration that covers the relevant activity. Whether the token is a security or a regulated instrument in the user's jurisdiction is the critical question – that analysis must be run for every material market before tokens are distributed. Key risk: mischaracterisation of the token's legal nature in a major market jurisdiction.
We regularly advise clients across all four profiles, and the most common finding is that the initial structure was built around one of these profiles but the business subsequently expanded into another – triggering a licensing gap that was not anticipated at incorporation.
Related at OBOLUS
- Licensing and Registration for Digital-Asset Businesses – the full-scope licensing service across 70+ jurisdictions, from initial analysis to filing
- VARA Licence Application in the Bahamas – process, timeline and requirements for Bahamas VASP authorisation
- Founder Relocation and Tax in Brazil – tax and residency planning for digital-asset founders considering Brazil
FAQ
How long does a crypto licence take to obtain?
Timeline varies significantly by jurisdiction and preparation quality. BVI VASP registration, when the application is complete and ownership structures are clear, typically takes weeks to a few months. UK FCA cryptoasset registration has historically taken considerably longer – often several months to over a year – given the depth of AML systems review the FCA applies. EU MiCA CASP authorisation timelines vary by member-state NCA. A thorough pre-application gap analysis is the most reliable way to reduce delay in any jurisdiction.
Which jurisdiction is best for licensing my crypto business?
There is no single best jurisdiction. The right regime depends on where your users are, what activities you conduct, your banking requirements and your investor or counterparty base. A BVI registration suits lean fund or holding structures with professional-investor clients and no retail exposure. UK FCA registration is required for UK-nexus activity and carries stronger institutional credibility. Most serious operators need a jurisdiction stack – multiple registrations aligned to their actual operating footprint – rather than a single registration applied globally.
Do I need a separate custody licence?
In the BVI, custody of virtual assets is a registrable VASP activity under the VASP Act 2022 – there is no separate custody-specific licence track, but the activity must be covered by the registration. In the UK, custodian wallet provider activity is a defined registrable activity under the Money Laundering Regulations; a separate registration or regulatory permission is required if custody is not already covered. In other major regimes – MiCA, MAS, SFC – custody is separately regulated and typically requires its own authorisation layer. Operators combining exchange and custody services should map both activities explicitly.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We map the licence stack across operating, custody and payment layers before you commit – so structural gaps are identified before they become enforcement events. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when asset recovery is required. To discuss your situation, contact info@oboluslaw.com.
By Aisha Tan, Licensing & Jurisdictions Analyst – cross-border VASP registration strategy, jurisdiction selection and regulatory gap analysis for digital-asset operators.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.