For a digital-asset business choosing between EU regulatory substance and an offshore registration, the decision between Lithuania and the British Virgin Islands turns on more than cost and speed. It turns on where your users sit, where your banks will operate, and how much regulatory capital you can absorb at launch. Getting that call wrong means frozen payment rails, enforcement action, and a relaunch from scratch.
Lithuania offers a CASP authorisation (Crypto-Asset Service Provider licence) under the MiCA regime, supervised by the Bank of Lithuania, with EU-wide passporting rights for operators who qualify. The British Virgin Islands offers VASP registration under the BVI FSC (Financial Services Commission) through the Virtual Asset Service Providers Act 2022 – a lighter-touch offshore instrument suited to a different operator profile. Neither jurisdiction is universally superior. Each answers a specific business question.
This comparison maps both jurisdictions across six decision axes: regulatory posture, licence categories and scope, application process and timeline, substance and ongoing compliance, AML and Travel Rule obligations, and tax and banking interaction. A decision matrix by operator profile closes the analysis.
Regulatory Posture: EU Supervision vs. Offshore Registration
Lithuania sits inside the European Union and, since MiCA came into full effect, its crypto operators are supervised by the Bank of Lithuania as the national competent authority under a harmonised EU regime. That is a structural advantage for operators targeting EU resident users – and a structural constraint for operators who want to move quickly with minimal capital commitment.
The Bank of Lithuania has historically been one of the more approachable EU supervisors for fintech authorisation. Under the prior VASP regime it attracted a significant volume of European crypto registrations. The MiCA transition has raised the bar: CASP authorisation requires a formal application, fit-and-proper assessments, a documented compliance programme, and minimum own-funds that vary by service category. The upside is passporting – a CASP authorised in Lithuania may provide services across the EU and EEA without a fresh authorisation in each member state.
The BVI Financial Services Commission operates under a different philosophy. The Virtual Asset Service Providers Act 2022 creates a registration – not a full prudential authorisation – for VASPs operating from BVI soil. The FSC's posture is pragmatic: it expects documented AML/CFT compliance and fit-and-proper principals, but it does not impose the capital and governance architecture that MiCA demands. The BVI instrument is recognised in a number of banking and structuring contexts, but it carries no passporting rights into the EU or any other major retail market.
The practical divergence is this: Lithuania gives you regulated access to EU markets; BVI gives you a recognised offshore compliance baseline for a business that is not primarily serving EU retail.
What Does Each Licence Actually Cover?
Lithuania's CASP authorisation under MiCA covers a defined set of crypto-asset services: custody, operation of a trading platform, exchange of crypto for fiat and crypto for crypto, execution of orders, placing of crypto-assets, reception and transmission of orders, portfolio management, transfer services, and advice. Each service category may carry its own own-funds requirement. An operator seeking to run an exchange and a custody wallet for the same user base needs authorisation for both activities – or a combined licence covering all intended services.
MiCA also introduces separate authorisation tracks for issuers of ART (asset-referenced tokens) and EMT (e-money tokens, which require e-money authorisation). A token issuer expanding into the EU must determine whether its token falls into one of these categories or into the residual "other crypto-assets" class, each of which carries different whitepaper and ongoing obligations.
The BVI VASP Act 2022 covers persons who conduct as a business any of the FATF-defined virtual asset activities: exchange, transfer, safekeeping/administration, participation in and provision of financial services related to an issuer's offer. The FSC has articulated separate registration tracks, and the regime is still maturing in terms of supervisory guidance. Critically, it does not segment custody from trading at the granular level MiCA does, and it does not create a passportable authorisation.
For a fund structure holding digital assets on behalf of sophisticated investors, the BVI has an established investment-funds regulatory regime that operates in parallel with the VASP Act – a combination that fund managers find commercially useful. Lithuania is a less common fund domicile for this purpose, though its licensed CASP status is attractive to a fund that also wants to offer trading or custody services to EU clients.
CTA #1
The licence category is the starting point, not the answer. The services you intend to offer, the clients you intend to serve, and the jurisdictions where those clients sit all shape which authorisation you need – and whether one jurisdiction is enough. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. Map your options with the OBOLUS licensing team.
How Does the Application Process Compare?
A Lithuanian CASP application under MiCA involves a formal submission to the Bank of Lithuania covering: constitutional documents, business plan, governance structure, AML/CFT programme, internal controls, fit-and-proper documentation for all key function holders, and minimum own-funds evidence. The Bank of Lithuania then has a statutory review period under the MiCA regime. In our cross-border practice, the realistic timeline from instruction to authorisation – assuming a well-prepared application – is measured in months rather than weeks, and applicants should plan for at least one round of regulatory queries. Operators who previously held a Lithuanian VASP registration under the prior regime have navigated a transition process to the new CASP framework.
A BVI VASP registration application is submitted to the BVI FSC. The documentation set is lighter: constitutional documents, AML/CFT policy, principal fit-and-proper materials, and evidence of operational readiness. The FSC's review timeline is generally shorter than a full MiCA authorisation process. In practice, operators with clean principals and a well-drafted compliance manual can often achieve registration in a matter of weeks rather than months, though this varies with the FSC's current workload and the completeness of the submission.
Neither jurisdiction should be treated as a rubber stamp. Both regulators make fitness-and-properness enquiries. Both will reject applications from principals with adverse regulatory history. The BVI process is faster and less capital-intensive at the application stage; the Lithuanian CASP process is more demanding and more valuable for operators who need EU market access.
A practical note on sequencing: operators we advise who are targeting both EU and non-EU markets sometimes structure a BVI holding vehicle above a Lithuanian operating entity – using the BVI's flexibility for ownership structure while placing the regulated operating activity inside the EU. That structure has its own legal, tax and substance implications, discussed below.
Substance and Ongoing Compliance: What Does Each Jurisdiction Require?
Substance – the requirement to have genuine management, staff and decision-making in the licensing jurisdiction – matters more than ever. Both the Bank of Lithuania and the BVI FSC expect it; they differ in the depth of what they require.
Lithuania, as an EU member state, operates under MiCA's expectation that a CASP has its registered office and at least part of its management in the authorising state. The Bank of Lithuania has been explicit that letter-box entities will not receive CASP authorisation. In practice, a Lithuanian CASP needs at least a physical office presence, a locally engaged compliance officer, and management who can demonstrate engagement with the Lithuanian supervisory process. This is not uniquely onerous by EU standards, but it is a genuine commitment – not a nominal address.
The BVI FSC requires that a VASP registered in the BVI be managed and controlled from the territory, or at minimum that the registered office and at least one director with genuine oversight sit there. In practice, BVI structures frequently use a licensed registered agent to satisfy the administrative requirements. The FSC is alert to shell registrations – it has disqualified applicants for failing to demonstrate operational substance – but the threshold is materially lower than the Bank of Lithuania's expectations under MiCA.
Ongoing compliance in Lithuania includes annual reporting to the Bank of Lithuania, regular AML/CFT audits, and the broader MiCA obligation set: market abuse rules, custody safeguarding, complaints handling, and the obligation to update the regulator on material changes. BVI ongoing obligations focus primarily on AML/CFT reporting, renewal filings, and notifying the FSC of material changes to principals or business activities. The MiCA compliance burden is significantly heavier – but it is the price of EU market access and the credibility that comes with it.
AML and the Travel Rule: Where Do the Two Regimes Differ?
Both Lithuania and the BVI are FATF member jurisdictions and apply FATF Recommendation 15 (virtual assets) and the Travel Rule – the obligation to pass originator and beneficiary data with a virtual-asset transfer above the applicable threshold. The implementation detail differs.
Under MiCA and the EU's Transfer of Funds Regulation, the Travel Rule applies to all transfers regardless of value – the EU removed the de-minimis threshold that some other jurisdictions retain. Lithuanian CASPs must therefore capture and transmit originator and beneficiary information on every crypto transfer, and they must use a compliant Travel Rule solution capable of operating with counterpart VASPs in other jurisdictions. ESMA has published detailed guidance on expected compliance standards.
The BVI's Travel Rule implementation follows the FATF standard more closely in its current form, with a threshold above which the obligation to pass information applies. The precise threshold is set by the FSC's operative guidance and should be confirmed against current regulations before reliance. BVI VASPs are required to have a documented AML/CFT programme, a Money Laundering Reporting Officer, and risk-based customer due diligence procedures consistent with FATF standards.
In cross-border transfers between a Lithuanian CASP and a BVI VASP, the Lithuanian side of the transaction bears the more demanding obligation. Operators running entities in both jurisdictions need to map the data flows carefully to ensure the EU-side entity is not in breach of the Transfer of Funds Regulation when the counterpart BVI entity does not hold all required originator data. We have seen this create compliance friction in dual-structure operations, and it is a factor that the compliance architecture must resolve before go-live.
Tax and Banking: The Stack That Determines Viability
A licence without banking is an incomplete structure. Both Lithuania and the BVI have distinct banking profiles for crypto businesses, and the interaction with tax is significant.
Lithuania is an EU member state with corporate tax rates that are competitive within Europe. Profits earned by a Lithuanian CASP are subject to Lithuanian corporate income tax, and the entity sits within the EU VAT regime. The EU's DAC8 information-exchange framework – applying to crypto-asset service providers – means that Lithuanian CASPs will report client data to Lithuanian tax authorities, who share it with other EU member states. For operators whose principals are EU tax residents, this transparency is a feature of the regime, not a surprise.
Banking for Lithuanian crypto entities has historically been available through Lithuanian EMIs (electronic money institutions) and a small number of regional banks willing to serve licensed VASPs. The MiCA authorisation pathway has, if anything, improved banking access at the margin – EU banks are more comfortable with a MiCA-authorised CASP than with an entity holding only a legacy VASP registration. That said, EU-wide correspondent banking constraints mean that a Lithuanian CASP still needs a banking solution that is operationally robust.
The BVI has no corporate income tax, no capital gains tax, and no VAT – making it structurally attractive for holding structures and for businesses whose principals are not tax-resident in high-tax jurisdictions. However, the BVI's inclusion on various EU and OECD watch-lists of non-cooperative jurisdictions has, at times, complicated banking access. BVI VASPs frequently bank through third-country correspondent banks or in jurisdictions with more liberal onboarding for offshore entities. The substance-over-form analysis for tax purposes – particularly for principals in OECD countries – must account for where management and control genuinely sits, not simply where the entity is registered.
A dual structure – BVI holding, Lithuanian operating – consolidates the tax efficiency of the BVI with the EU market access of the Lithuanian CASP. But transfer pricing between the two entities, the substance requirements at both levels, and the reporting obligations that flow from DAC8 and the OECD's CARF (Crypto-Asset Reporting Framework) all require deliberate structuring. The tax and banking stack is not an afterthought; it is a design constraint.
CTA #2
If you have already taken a first step – a BVI registration, a Lithuanian application – and found that the banking or tax interaction was not as expected, a structural review can identify the gap. If a prior application stalled or an account was closed, a second read can surface the structural reason and the route back. Map your options with the OBOLUS team.
Decision Matrix: Which Profile Fits Which Jurisdiction?
The right choice depends on operator profile, user base, and build stage. No single jurisdiction is the answer for every business. The following profiles reflect the patterns we regularly advise on.
Profile A – EU-facing retail exchange or custody provider. The operator intends to serve EU resident users at scale, needs banking with EU institutions, and can commit to genuine substance in Lithuania. The instrument is a Lithuanian CASP authorisation under MiCA, with passporting as the pathway to multi-market EU presence. The timeline is measured in months. The key risk is underpreparing the compliance programme – the Bank of Lithuania will query an application that does not demonstrate a fully operational AML/CFT framework from day one.
Profile B – Global OTC desk or institutional broker serving non-EU sophisticated counterparties. The operator's client base is institutional, non-EU, and does not require EU retail authorisation. Speed to market and cost efficiency matter. The instrument is a BVI VASP registration. Timeline is materially shorter than a full CASP process. The key risk is assuming the BVI registration satisfies regulatory expectations in the jurisdictions where the clients actually sit – it may not.
Profile C – Token issuer preparing an EU distribution. The operator is launching a token that may qualify as an ART or EMT under MiCA. The instrument is a Lithuanian CASP authorisation combined with the appropriate MiCA whitepaper approval process. A BVI structure at the holding level does not resolve the EU distribution question. The key risk is misclassifying the token and discovering at the whitepaper review stage that the authorisation track is wrong.
Profile D – Digital-asset fund with global LP base. The operator is a fund manager targeting institutional LPs across multiple jurisdictions. A BVI investment fund structure, combined with BVI VASP registration, is a recognised and commercially tested approach. EU LPs may require additional comfort – a MiCA-authorised manager or a parallel EU structure. The key risk is assuming the BVI fund structure is passport-equivalent for EU distribution purposes under AIFMD or MiCA.
Profile E – Payments or remittance business with a cross-border corridor. The operator processes virtual-asset-denominated payments between multiple jurisdictions. If any leg of the corridor involves EU resident users, MiCA's Transfer of Funds Regulation and the CASP authorisation requirement bite. A BVI registration alone does not satisfy the EU-side obligation. The instrument is a Lithuanian CASP (or equivalent EU authorisation), potentially with a BVI entity handling non-EU flows. The key risk is underestimating the EU perimeter – it extends to where the user sits, not where the operator is registered.
The common thread across all profiles is this: a single registration in one jurisdiction rarely addresses the full regulatory perimeter of a live digital-asset business. The question is not which jurisdiction wins but which combination of instruments, at which layers, covers the actual activity.
A Common Assumption That Costs Operators
A common assumption in the market is that a single offshore registration – BVI, Cayman, Seychelles – is sufficient to serve clients globally without further authorisation. That assumption is wrong, and it is becoming more expensive to hold.
MiCA's geographic reach extends to any CASP providing services to EU resident users, regardless of where the CASP is incorporated. An operator with a BVI VASP registration who accepts EU retail clients without a MiCA authorisation is operating unlawfully in the EU. ESMA has been explicit on this point, and national competent authorities have already begun enforcement action against unlicensed operators targeting EU residents. The risk is not theoretical: it manifests as frozen fiat rails, bank account closure, and in serious cases, criminal referral under national implementing legislation.
The mirror problem applies to operators who obtain a Lithuanian CASP and assume it covers their activities in Asia, the US, or the Gulf. It does not. MiCA passporting operates within the EU/EEA only. A Lithuanian CASP serving Hong Kong retail users still needs to satisfy SFC requirements; one serving US users still engages the SEC, CFTC, and state money-transmitter licensing framework.
Operating without the right licence risks enforcement, frozen rails, and lost banking access – before the business has had a chance to generate the revenue to fund a remediation. The time to map the licence stack is before launch, not after the first compliance notice arrives.
Related at OBOLUS
- Licensing and Registration for Digital-Asset Businesses – end-to-end CASP and VASP authorisation across 70+ jurisdictions
- Crypto Regulation and Licensing in ADGM, Abu Dhabi – FSRA authorisation for operators targeting the Gulf and beyond
- Transfer Pricing for Crypto Groups in Seychelles – structuring the intra-group tax position for offshore digital-asset groups
FAQ
How long does a crypto licence take to obtain?
Timeline varies significantly by jurisdiction and licence type. A BVI VASP registration, with a well-prepared application and clean principals, can be completed in a matter of weeks. A Lithuanian CASP authorisation under MiCA typically takes several months, accounting for regulatory review periods and the likelihood of at least one round of follow-up queries from the Bank of Lithuania. Timelines in both jurisdictions lengthen if the application is incomplete or if fit-and-proper issues arise.
Which jurisdiction is best for licensing my crypto business?
There is no universal answer. Lithuania is the stronger choice for operators who need EU market access, passporting rights, or EU-facing banking. The BVI is better suited to operators serving institutional or non-EU clients who need a recognised offshore compliance baseline with a shorter setup timeline. Many businesses ultimately require instruments in more than one jurisdiction. The right structure depends on your user base, service model, capital position, and the jurisdictions where your principals and banking sit.
Do I need a separate custody licence?
Under MiCA, custody of crypto-assets on behalf of clients is a separately authorisable service category. A Lithuanian CASP providing custody must include that activity in its authorisation scope and satisfy the associated own-funds and safeguarding requirements. The BVI VASP Act covers safekeeping and administration of virtual assets as a registrable activity. Whether your existing or intended authorisation covers custody depends on how the licence was scoped – and that should be verified against the applicable regime before you offer the service.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We map the licence stack across operating, custody and payment layers before you commit – so that the structure you build is the one that holds. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when things go wrong. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialist in CASP authorisation, VASP registration and cross-border licence structuring for digital-asset operators across EU and offshore jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.