Digital-Asset Licensing in Bahamas: What Businesses Need to Know

Operating a digital-asset business (any exchange, custodian, broker or token issuer serving external clients) without the appropriate regulatory authorisation in the Bahamas exposes the business to enforcement action, terminated banking relationships and bars to future licensing in other jurisdictions. The Bahamas enacted a purpose-built regime under the Digital Assets and Registered Exchanges Act (the DARE Act) that the Securities Commission of the Bahamas (SCB) administers. For inbound operators, the question is not whether the regime applies – it almost certainly does – but which registration or licence category fits the business model, how it interacts with the jurisdictions where users and banking actually sit, and what the application process demands in practice.

This page maps the SCB's framework, the categories of regulated activity, the cross-border realities that most applicants underestimate, and the structural decisions that determine whether a Bahamas authorisation is the right foundation for a multi-market digital-asset build.

The SCB and the DARE Act: The Regulatory Foundation

The Securities Commission of the Bahamas is the competent authority for digital-asset regulation, operating under the DARE Act framework. The SCB's mandate covers registration of digital-asset businesses (DABs) – a category broad enough to capture exchanges, custodians, broker-dealers, token issuers and advisors operating in or from the Bahamas. The DARE Act established a tiered system: some activities require full licensing, others registration. The distinction turns on the nature and scale of the activity, not merely on the operator's corporate seat.

The regime is designed to attract institutional-grade digital-asset operators. The Bahamas sits in a time zone that bridges US East Coast and European trading hours. It has an established common-law legal system derived from English law, an independent judiciary and a sovereign risk profile that appeals to fund administrators and custody providers already familiar with the jurisdiction's offshore financial-services tradition. For operators already structured in the Cayman Islands or BVI, the Bahamas presents a familiar governance environment with a more defined digital-asset-specific statutory hook.

In our practice, we see two distinct profiles arriving at the Bahamas question: exchanges seeking a credible Atlantic-basin licence after a period of informal operation, and custody or fund-administration businesses selecting a new domicile ahead of institutional capital deployment. Each requires a different reading of the DARE Act categories and a different sequencing of the cross-border compliance stack.

Who Needs a DARE Act Authorisation?

Any person conducting digital-asset business in or from the Bahamas requires authorisation under the DARE Act framework, unless a specific exemption applies. "In or from the Bahamas" is not limited to Bahamian entities serving Bahamian residents. A company incorporated in another jurisdiction but directing activities from the Bahamas, or using a Bahamian legal address as its primary place of business, falls within the SCB's jurisdictional reach.

The DARE Act captures the following activity categories, among others:

• Operating a digital-asset exchange (a platform matching buyers and sellers of digital assets)
• Providing digital-asset custody services (holding or controlling digital assets on behalf of third parties)
• Acting as a digital-asset broker or dealer (executing transactions as agent or principal)
• Offering digital-asset advisory services (advice on buying, selling or holding digital assets as a business)
• Issuing or offering digital tokens by way of a public or private sale in circumstances that bring the token within the SCB's perimeter

The perimeter question is substance-over-form: the label an operator attaches to its service is secondary to the economic function performed. We regularly advise businesses that assume their "software-as-a-service" or "protocol" wrapper takes them outside the DARE Act perimeter, only to find that the SCB's functional analysis brings them within it. If the business holds customer assets, matches orders or earns fees on asset transactions, the default assumption should be that authorisation is required.

Operating without authorisation risks enforcement notices, activity suspension and, in serious cases, referral for prosecution. The SCB has signaled its intention to police the perimeter actively as the regime matures.

For a scoped assessment of whether your activity requires DARE Act authorisation, contact OBOLUS at info@oboluslaw.com. The analysis above describes the standard perimeter. Your specific facts – the entity, the user geography and the custody model – change the result. Map your options.

What Are the Licence Categories Under the DARE Act?

The DARE Act provides for distinct registration and licensing tracks that correspond to different business activities, each carrying its own capital adequacy, governance and operational requirements. The SCB issues a digital-asset business licence to the categories of operator described above, and in certain cases a registration (rather than a full licence) may suffice for lower-risk or lower-volume activities.

The principal categories in practice are:

• Digital-Asset Exchange licence – for operators running a centralized matching platform. This is the most scrutinized category: the SCB expects robust AML/CFT programs, technology resilience, customer-asset segregation and management with relevant experience.
• Digital-Asset Custodian licence – for entities holding or controlling assets on behalf of clients. The SCB's expectations align broadly with those of leading custody regimes: cold-storage protocols, insurance coverage and segregation of proprietary from client assets.
• Digital-Asset Broker-Dealer licence – for operators executing transactions as agent for clients or on a proprietary basis. Risk capital expectations reflect the bilateral exposure of dealer activity.
• Digital-Asset Advisory licence – for entities advising on digital-asset portfolios or strategies. Lower capital thresholds typically apply compared to execution-facing categories.
• Token issuance / Initial Digital Asset Offering (IDAE) – the DARE Act includes a regime for issuers conducting public digital-asset offerings. Disclosure and whitepaper obligations apply.

Capital requirements across all categories are set by the SCB and vary by licence class. Because the SCB has indicated flexibility in calibrating requirements to the operator's risk profile and the nature of the client base, applicants should not rely on informal market estimates. The applicable minimum capital for your category must be confirmed directly with the SCB or through current official guidance at the time of application. We describe the model qualitatively here: requirements are meaningful but designed to attract well-capitalized operators, not to exclude them.

How Does the DARE Act Application Process Work?

The SCB's application process for a digital-asset business licence is document-intensive and demands substantive demonstration of fitness, not merely a completed form. The process operates in broadly sequential stages, though the SCB retains discretion over pacing and may issue information requests that extend the timeline.

The standard path runs as follows:

1. Pre-application engagement. The SCB encourages applicants to engage before formal submission. This stage is an opportunity to confirm the correct licence category, flag any structural or ownership complexities and anticipate information requests. Skipping this step is the single most common cause of delayed applications in our experience.
2. Formal application submission. The application package includes corporate constitutional documents, a detailed business plan, a financial-projections model, AML/CFT policies, technology security documentation, personal questionnaires and criminal-history declarations for all principals and beneficial owners, and evidence of minimum capital.
3. Vetting and information rounds. The SCB reviews the submission and typically issues written requests for additional information. The quality of the initial submission determines the number of rounds. A well-prepared file with no structural ambiguities may proceed with limited back-and-forth; a file with gaps in ownership disclosure or incomplete AML documentation can generate multiple rounds and material delay.
4. In-principle approval and conditions. The SCB may issue an in-principle approval subject to satisfaction of pre-licensing conditions. These commonly include deposit of required capital with a licensed institution, appointment of a compliance officer and finalization of policies.
5. Licence grant and ongoing supervision. Once conditions are met, the licence is granted. Post-licensing obligations include periodic reporting, regulatory returns and maintenance of AML/CFT programs.

Timeline is not fixed by statute and varies with application quality and SCB workload. Operators we advise typically plan for a multi-month process. Complex ownership structures, prior regulatory history and multi-category applications add time. A clean corporate structure, experienced management and a complete first submission are the fastest levers an applicant controls.

What Does the Bahamas AML and FATF Posture Mean for Your Business?

The Bahamas is a member of the Caribbean Financial Action Task Force (CFATF) and has structured its AML/CFT regime in alignment with FATF Recommendations, including Recommendation 15 covering virtual assets and virtual asset service providers (VASPs). DARE Act licensees are subject to the full suite of AML obligations: customer due diligence, enhanced due diligence for higher-risk customers, transaction monitoring, suspicious transaction reporting and record-retention requirements.

The Travel Rule – the obligation to pass originator and beneficiary data alongside a virtual-asset transfer – applies to Bahamian licensees. The threshold below which the Travel Rule does not apply is subject to FATF guidance and the SCB's implementing rules; operators should confirm the current applicable threshold directly rather than rely on informal market estimates. Implementation demands technology investment: most exchange and custodian applicants need a Travel Rule solution (a VASP-to-VASP data-sharing protocol) in place before or shortly after licence grant.

The Bahamas has, at various points, been subject to enhanced scrutiny in international AML evaluation processes. Operators and their banking partners monitor this closely. A jurisdiction's FATF status directly affects correspondent banking willingness and the ease of opening operational accounts in major financial centers. At the time of any licensing decision, the current status of the Bahamas in ongoing FATF and CFATF evaluation processes should be independently verified by counsel and the operator's banking team.

In our cross-border practice, we flag the FATF dimension to every client considering a Bahamas structure. A licence that is structurally sound but issued from a jurisdiction under enhanced international scrutiny creates friction in banking, payment processing and institutional counterparty relationships that can undermine the commercial case for the structure.

The Cross-Border Reality: Where Users Are Matters as Much as Where the Licence Sits

A Bahamas licence authorizes the holder to operate in and from the Bahamas – it does not confer a right to solicit or serve clients in other regulated markets. This is the myth most frequently encountered among applicants who assume a single offshore authorisation resolves their global regulatory posture. It does not.

An exchange licensed under the DARE Act that actively markets to EU residents without the necessary authorisation under the MiCA regime (or, during the transition period, the applicable national VASP registration) exposes itself to enforcement action by the relevant ESMA-supervised authority. An operator targeting UK retail without FCA authorization faces parallel risk under the FCA's financial-promotion and registration regimes. A business with US-person exposure must confront the FinCEN, SEC and CFTC perimeters at the federal level and money-transmitter licensing requirements at the state level.

The Bahamas licence is most defensible commercially when it forms part of a layered structure: a Bahamian entity serving institutional and sophisticated clients in jurisdictions where those clients' own compliance frameworks permit dealing with a non-domestically licensed counterparty, paired with separately licensed or registered entities for markets where local authorisation is mandatory. The alternative – routing all activity through a single DARE Act licence and relying on terms-of-service geographic exclusions – is increasingly ineffective as regulators in Europe, the UK and Asia pursue enforcement on an economic-effects basis.

For businesses targeting both the Atlantic corridor and the EU, a common structural question is whether to pair the Bahamas with a MiCA-authorised CASP in an EU member state (Lithuania and Malta are frequently considered for their established CASP infrastructure under the transition regime), or to use the Bahamas as the institutional-services vehicle while a separate EU entity handles retail. Neither path is universally correct. The right answer depends on the user base, the token type, the custody model and the banking stack.

If a prior application stalled or banking was lost on a single-jurisdiction structure, a second read frequently surfaces the structural reason and the route forward. Message OBOLUS at info@oboluslaw.com or via t.me/oboluslaw. Map your options.

How Do Banking and Tax Interact With a Bahamas Digital-Asset Licence?

Securing an SCB authorisation is a necessary but not sufficient condition for operational readiness. The two ancillary requirements that most frequently delay or derail a Bahamas launch are banking and tax structuring.

On banking: the Bahamas has a domestic banking sector that includes international banks familiar with digital-asset businesses. However, the willingness of any given institution to bank a licensed DAB depends on the institution's own risk appetite, the licence category (custody and exchange operators face the most scrutiny), the beneficial-owner profile and the origin of initial capital. Operators we advise begin banking conversations in parallel with the SCB application, not after licence grant. A licence without a bank account is commercially inoperable, and the timeline for banking approval can rival the regulatory timeline.

On tax: the Bahamas imposes no income tax, capital gains tax or corporate tax on companies operating from the jurisdiction. This makes it attractive as an operating entity for businesses whose principals are tax-resident in zero or low-rate jurisdictions. However, operators whose beneficial owners are tax-resident in high-tax jurisdictions – the US, the UK, Germany and others – must ensure that the Bahamian structure does not generate taxable income in those home jurisdictions through controlled-foreign-corporation rules, permanent-establishment attribution or similar mechanisms. The Bahamas' tax neutrality is real but it is not universally portable. Tax counsel review at the structuring stage, before incorporation and before licence application, avoids reconstructing a structure that was efficient on paper but taxable in practice.

Which Operator Profile Is Best Served by a Bahamas Licence?

Not every digital-asset business is best served by a Bahamas authorisation. The following profiles map the fit qualitatively.

Profile A – Institutional exchange or OTC desk. A business serving professional counterparties in the Atlantic corridor, with a management team experienced in regulated financial services and a capitalization consistent with SCB expectations, is well suited to the DARE Act. The common-law jurisdiction, the English-derived governance framework and the SCB's regulatory posture all align with institutional client expectations. The cross-border note: if this exchange also wants to serve EU or UK institutional clients, allied counsel in those jurisdictions should assess whether a local registration or passporting arrangement is required.

Profile B – Retail-facing multi-market exchange. A business targeting retail clients across multiple jurisdictions faces a more complex stack. The Bahamas licence covers the entity's home base; it does not displace the retail regulatory requirements of the markets where those clients live. The risk of enforcement in user-facing jurisdictions is higher for retail-focused operators. A Bahamas-first approach here requires parallel licensing in at least the EU, UK and any APAC markets targeted. The structural cost of this approach may exceed that of leading with a MiCA CASP authorisation in an EU member state and adding the Bahamas as an institutional-services complement.

Profile C – Token issuer or fund administrator. The DARE Act's IDAE provisions and the SCB's track record in investment fund regulation make the Bahamas a natural fit for token issuers conducting structured offerings to sophisticated investors and for fund administrators wrapping digital-asset exposure in a fund vehicle. The tax neutrality is commercially relevant here. The cross-border note: securities-law analysis in the jurisdictions of the investor base is mandatory; the Bahamas whitepaper obligation does not replace a Regulation D exemption analysis for US investors or a prospectus assessment under MiCA for EU investors.

Profile D – Custody specialist serving fund clients. A custody provider whose institutional clients already engage with the Bahamas through fund relationships benefits from the jurisdictional familiarity. The SCB custody licence, paired with a strong cold-storage and segregation framework, is a credible offering to institutional allocators. The key risk here is concentration: a custody business whose only regulatory authorisation sits in a single jurisdiction that may face FATF scrutiny carries counterparty-risk concerns for fund managers with their own regulatory obligations.

Related at OBOLUS

Related at OBOLUS

• Licensing and Registration for Digital-Asset Businesses – the full cross-jurisdictional licensing practice, from CASP to VASP across 70+ regimes.
• EMI Licence for Crypto Firms: The Disputes Angle – how electronic-money institution licensing intersects with enforcement and disputes exposure.
• Travel Rule Compliance from a Cross-Border Perspective – designing a Travel Rule program that works across multiple licensed entities and jurisdictions.

FAQ

How long does a crypto licence take to obtain?

Timeline varies by jurisdiction, licence category and application quality. In the Bahamas, the SCB's process involves pre-application engagement, a formal submission and one or more information rounds before a decision. Operators with clean corporate structures, experienced management and complete documentation typically plan for a multi-month process. Applications with complex ownership, prior regulatory history or gaps in AML documentation take longer. No statutory deadline binds the SCB's review, so the applicant controls timeline primarily through preparation quality.

Which jurisdiction is best for licensing my crypto business?

There is no universal answer. The right jurisdiction depends on the user base, the activity type, the custody model, the banking requirements and the beneficial-owner tax profile. The Bahamas suits institutional-facing operators and custody specialists in the Atlantic corridor. Businesses targeting EU retail clients may lead with a MiCA CASP authorisation. Multi-market operators typically need a layered structure. At OBOLUS we map the licence stack across operating, custody and payment layers before a commitment is made, so the structure matches the commercial reality.

Do I need a separate custody licence?

Under the DARE Act, custody of digital assets on behalf of third parties is a distinct regulated activity. An exchange licence does not automatically authorise custody services. Operators running an exchange that also holds customer assets in an omnibus or segregated wallet structure should assess whether their licence covers that activity or whether a separate custody authorisation is required. The SCB's licensing categories are activity-based, not entity-based: the function performed, not the label applied, determines the requirement. Counsel review before go-live avoids operating outside the authorised perimeter.

OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across more than 70 jurisdictions, on disputes and on-chain asset recovery across more than 25 forums, and on the tax, banking and compliance structures that sit around them. Digital assets are the whole of our practice. We map the licence stack across operating, custody and payment layers before you commit to a structure – so the regulatory authorisation matches the commercial reality. To discuss your situation, contact info@oboluslaw.com or message us via t.me/oboluslaw.

By Aisha Tan, Licensing & Jurisdictions Analyst – specialises in digital-asset licence strategy for exchanges, custodians and token issuers across Atlantic-basin and offshore common-law jurisdictions.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.