CASP Authorisation Under MiCA in Guernsey

A crypto-asset service provider expanding into or out of Europe faces a structural question the moment it looks at Guernsey: the island sits outside the European Union, MiCA does not apply to it directly, and yet the businesses that use Guernsey as a domicile – funds, custodians, payment vehicles – frequently need to access EU counterparties, EU banking rails and EU institutional investors who operate under MiCA (the EU's Markets in Crypto-Assets Regulation). The practical consequence is that a Guernsey-domiciled entity cannot simply rely on Guernsey's domestic regulatory status to passport crypto-asset services into the EU. It must structure around that gap. Understanding precisely where that gap sits, how Guernsey's own regulatory regime operates, and how the two can be combined in a workable group structure is the starting point for any serious inbound operator.

Guernsey is a Crown Dependency. It is not an EU member state, not an EEA participant, and not subject to MiCA directly. The Guernsey Financial Services Commission (GFSC) is the island's sole financial regulator, operating its own licensing regime for digital asset businesses under the Lending, Credit and Finance (Bailiwick of Guernsey) Law and the GFSC's registration framework for virtual asset service providers. Any business that wants to serve EU clients, EU-based institutional investors or EU-regulated counterparties from a Guernsey base will typically need to hold a separate CASP authorisation (crypto-asset service provider authorisation under MiCA) in an EU member state in parallel – or structure the group so that the EU-facing activity sits in the passportable entity.

This page maps the Guernsey regulatory regime, the MiCA interaction, the inbound structuring options and the practical steps an operator should take before committing capital to a Guernsey domicile.

What Is Guernsey's Regulatory Position on Digital Assets?

Guernsey has maintained a proactive posture toward digital asset business since the GFSC's first published guidance on the sector, and it has built a registration-and-licensing model that applies to a defined category of virtual asset activity on the island. Businesses operating as virtual asset service providers – including exchanges, custodians, token issuers and certain investment management activities with digital asset exposure – are required to seek registration or licensing from the GFSC before commencing regulated activity. The GFSC applies FATF Recommendation 15 standards to VASPs, meaning that AML/CFT obligations, beneficial-ownership verification and the Travel Rule (the obligation to pass originator and beneficiary data with each qualifying transfer) apply in full.

The Guernsey framework is deliberately open to offshore and international group structures. A Guernsey fund, a Guernsey custody vehicle or a Guernsey holding company can form the hub of a multi-jurisdictional group. The island's legal infrastructure – common law, English-language courts, a mature fund administration sector – makes it a credible home for institutional digital asset structures. What it cannot offer, as a non-EU jurisdiction, is the right to passport into EU markets under MiCA. That is the central tension every inbound operator must resolve.

In our licensing practice, we regularly advise groups that arrive at Guernsey with one of two profiles: a well-capitalised operator that wants the island's fund and custody environment and is comfortable maintaining a separate EU-authorised CASP for its European user base; or a smaller operator that has been told Guernsey is a lower-friction entry point and has not yet modelled the cost of the EU layer. The first profile is workable. The second requires a structural reset before capital is committed.

For a scoped assessment of your group's Guernsey and EU licensing stack, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis materially. Map your options.

How Does MiCA Apply to a Guernsey-Domiciled Business?

MiCA does not apply to Guernsey as a jurisdiction, and it does not automatically follow a Guernsey-incorporated entity. The regulation applies to businesses that provide crypto-asset services to clients located in the European Union or that offer crypto-assets to the public in the EU. Whether a Guernsey entity is caught depends on where its clients are, where the service is solicited and whether the entity has a branch or representative in any member state.

The EU standard under MiCA is essentially a territorial effects test. A Guernsey exchange that actively markets to French or German retail clients, that holds EU-resident client assets, or that routes transactions through an EU payment institution will in most cases be providing crypto-asset services within the EU's regulatory perimeter. In that scenario, the Guernsey GFSC licence does not substitute for CASP authorisation. The relevant EU national competent authority – supervised at the apex by ESMA (the European Securities and Markets Authority) – will expect the EU-facing activity to be housed in an authorised CASP.

MiCA also introduces three distinct token regimes that carry their own requirements regardless of the issuer's domicile if the token is offered to EU persons: the ART regime (asset-referenced tokens), the EMT regime (e-money tokens) and the broader "other crypto-assets" category that requires a published whitepaper. A Guernsey-based token issuer targeting EU institutional investors will need to assess whether its token triggers one of these regimes, and if so, whether it can rely on a passportable EU CASP authorisation or whether it must obtain issuer authorisation in a member state directly.

The critical planning point: Guernsey and MiCA are not mutually exclusive. They are parallel regimes that a well-structured group can operate simultaneously. The question is not which one to choose but how to allocate activity between the two entities so that each licence covers what it needs to cover.

What Does the GFSC Licensing Process Involve?

Obtaining GFSC registration or licensing for a virtual asset business in Guernsey follows a structured application process that the GFSC has worked to keep accessible for well-organised applicants. The core elements – fitness and propriety assessment, AML/CFT systems and controls, business plan and financial projections, management structure and governance – will be familiar to any operator that has gone through a licensing exercise in another common-law jurisdiction.

Applicants are expected to demonstrate a genuine presence in Guernsey. A brass-plate structure with no local staff, no local management engagement and no meaningful operational nexus to the island will not satisfy the GFSC's substance expectations. In practice, this means a locally based compliance officer or an appointed representative with real responsibility, board-level engagement with Guernsey-resident directors and policies and procedures tailored to the Guernsey regulatory standard.

The GFSC's AML expectations are aligned to the FATF standard. Travel Rule compliance is expected for qualifying transfers. Customer due diligence, transaction monitoring and suspicious activity reporting obligations apply from the first day of activity. For a custody business, safeguarding and segregation requirements add a further layer of operational readiness the GFSC will examine at application stage.

Timeline is qualitative rather than fixed – it varies by licence category, application quality and the complexity of the applicant's structure. Operators we advise typically build a realistic preparation window into their project plan before submission, because an incomplete application or an underdeveloped AML framework will result in a request for information that extends the process materially.

Why a Parallel EU CASP Authorisation Is Often Necessary

For most Guernsey-based digital asset businesses with any EU client exposure, a parallel CASP authorisation in an EU member state is not optional – it is the structural mechanism through which EU-facing activity is made compliant. MiCA's passporting regime means that a CASP authorised in one member state can provide services across the entire EU/EEA without a separate licence in each country. That is a material benefit that Guernsey, as a non-EU jurisdiction, cannot replicate.

The member states most frequently considered for CASP authorisation alongside a Guernsey holding or custody structure include those with established VASP registration histories and regulatory offices experienced in reviewing crypto-asset applications. Under MiCA, the applicable national competent authority in the chosen member state becomes the home supervisor, and the ESMA register of authorised CASPs governs cross-border access. The choice of member state affects timeline, supervisory culture, the quantum of own-funds requirements and the availability of local compliance infrastructure.

In a well-structured dual-entity group, the Guernsey entity typically holds the fund structure, the custody vehicle or the group treasury function. The EU CASP entity holds client-facing activity directed at EU persons – trading, brokerage, staking or portfolio management. Intercompany agreements govern the delegation and service arrangements between the two, and the MiCA-authorised entity remains in full control of the regulated EU activity. Neither entity does the other's regulated job in its jurisdiction.

We have seen groups attempt to collapse this structure by directing all activity through the Guernsey entity and relying on a reverse-solicitation argument to avoid MiCA authorisation. That argument is narrow under MiCA, has not been treated generously in regulatory guidance from ESMA, and exposes the group to enforcement risk in every member state where clients are located. It is not a reliable structural position for a commercial-scale operation.

If a prior structure was built on reverse-solicitation assumptions and your banking or exchange relationships are now flagging the issue, contact OBOLUS at info@oboluslaw.com. A second read can surface the structural reason and the route back. Map your options.

How Do Tax and Banking Interact With a Guernsey Structure?

Guernsey's tax environment has historically been attractive to international financial structures. The island operates a zero-rate corporate income tax for most businesses, with a defined set of higher-taxed activities that do not typically apply to digital asset operations in the standard configuration. This makes Guernsey a credible holding jurisdiction for a group treasury or a custody vehicle, provided the substance requirements are met and the structure does not create taxable nexus in a higher-tax jurisdiction through the activities of the EU CASP entity.

Transfer pricing and value-allocation questions arise directly from the dual-entity model described above. If the Guernsey entity is the economic hub and the EU CASP entity is the client-facing regulated vehicle, the intercompany pricing must reflect the arm's-length allocation of value between them. Tax authorities in EU member states have grown attentive to group structures that use non-EU holding companies to extract value from EU-regulated activity. A group that has not documented its intercompany arrangements properly may find that the EU national tax authority disagrees with the allocation.

Banking is the other pressure point. Guernsey has a mature banking sector, but digital asset businesses consistently find that correspondent banking access – particularly for USD, EUR and GBP settlement – requires a demonstrable regulatory pedigree. A GFSC licence, combined with a published AML framework and evidence of Travel Rule compliance, substantially improves the banking conversation. A business that is operating in grey-registration territory, or that cannot demonstrate a clean VASP status in both its relevant jurisdictions, will find that banking relationships are harder to establish and more fragile when challenged.

Operators we advise treat the banking question as parallel to the licensing question, not sequential to it. A licence that cannot support a banking relationship is incomplete as a commercial structure. We map both layers before a client commits to a jurisdiction.

Which Operator Profile Should Use a Guernsey Structure?

Guernsey works well as a component of a larger group structure. It is less well-suited as a standalone, single-entity solution for a business with substantial EU retail exposure. The following profiles describe the decision branches we work through with clients.

Profile A – Institutional custody or fund administration hub: A business that holds digital assets for institutional clients, that operates a fund structure or that provides administration services to digital asset funds. Guernsey's fund infrastructure, its GFSC licensing framework and its tax position make it a natural home for this activity. EU-facing marketing, if any, is managed through a separately authorised EU CASP. The Guernsey entity does not provide retail-facing services. This profile is the most coherent use of Guernsey in the current regulatory environment.

Profile B – Exchange or broker with EU retail ambitions: A business that wants to serve EU retail clients directly, that will actively market into EU member states and that relies on EU-based payment institutions for settlement. This profile needs a MiCA-authorised CASP in the EU as its primary regulatory anchor. Guernsey can still hold the group treasury, the IP or the custody vehicle, but the EU CASP is the commercial and regulatory centre of gravity. The risk for this profile is building the Guernsey entity first and discovering the EU layer later – by which point the group structure may need to be unwound.

Profile C – Non-EU, non-EEA focused business: A business whose client base is entirely outside the EU – for example, in MENA, Asia or North America – and that uses Guernsey for its legal and tax attributes without any EU regulatory touchpoint. This profile faces the lowest structural complexity from a MiCA perspective. The GFSC licence, the substance build and the banking relationship are the primary tasks. CASP authorisation is not required unless the EU perimeter is subsequently crossed.

In our practice, we advise operators across all three profiles. The critical early question is always the same: where are your clients, and where does the regulated service actually occur? That answer drives the licensing structure, not the domicile preference.

A Recent Matter

In a matter concluded earlier this year, a custodian incorporated in Guernsey had been operating under an interim registration while preparing a full GFSC licence application. Its EU institutional clients – a group of family offices and a regulated fund – began receiving compliance queries from their own regulators about whether the custodian's Guernsey status satisfied MiCA's counterparty requirements. The custodian engaged us to map the gap. We identified that the EU-facing custody activity required a CASP authorisation in a member state and that the Guernsey entity needed to be restructured as the group's non-EU custody vehicle. Working with allied counsel in the relevant EU jurisdiction, we structured the group to establish a MiCA-authorised CASP for EU client activity while the Guernsey entity retained institutional custody mandates for non-EU clients. The custodian retained its EU institutional relationships and completed the GFSC licensing process without interruption to its non-EU book.

A Common Assumption That Can Cause Harm

A common assumption among operators approaching Guernsey is that a well-regarded offshore licence – from the GFSC, from CIMA, from the BVI FSC – is sufficient to serve a global client base, including EU clients, without a separate EU authorisation. This is not accurate under MiCA, and it was not fully accurate under the pre-MiCA national regimes either. The EU has consistently taken the position that providing crypto-asset services to EU-resident clients from a third-country entity triggers EU regulatory requirements, regardless of the quality of the third-country licence.

The offshore-licence-is-enough assumption causes harm in a specific, practical way: it leads operators to commit capital to a structure – Guernsey incorporation, GFSC licensing fees, local staff, local directors – that then needs to be supplemented or restructured when the EU banking or counterparty layer is engaged. The rework is avoidable. A clean structural analysis before the first incorporation filing takes a fraction of the time and cost of unwinding an incorrect structure after the fact.

Operating without the right regulatory authorisation in the relevant jurisdictions also exposes a business to enforcement risk, to the loss of banking relationships and to the freezing of payment rails – outcomes that are difficult to recover from once they occur. That risk is not theoretical; it is the enforcement reality that ESMA and national competent authorities have communicated as a priority under MiCA.

Related at OBOLUS

• Licensing and registration for digital asset businesses – how we scope and manage the full licence process across jurisdictions
• VASP licence application legal counsel – counsel for the application process from pre-filing through authorisation
• AIF for digital assets in Turkey – the alternative investment fund route in Turkey for digital asset structures

FAQ

How long does a crypto licence take to obtain?

Timeline varies materially by jurisdiction and licence category. In EU member states pursuing CASP authorisation under MiCA, the process typically runs for several months from submission of a complete application, with the timeline driven by the national competent authority's queue and the quality of the application. In Guernsey, the GFSC's timeline similarly depends on application readiness and structural complexity. Operators should build a realistic preparation phase into their project plan before the formal submission window begins.

Which jurisdiction is best for licensing my crypto business?

There is no single best jurisdiction. The right licensing domicile depends on where your clients are, what services you provide, where your banking relationships sit and the capital and operational commitments you can sustain. For EU-facing businesses, MiCA passporting through a single authorised member state is a strong structural anchor. For institutional custody or fund structures, Guernsey, Cayman or ADGM may serve better depending on the investor base. The answer is a function of your specific facts, not a general ranking.

Do I need a separate custody licence?

In most flagship digital asset regimes, custody of client crypto-assets is a regulated activity that requires either a specific custody authorisation or an explicit permission under a broader CASP or VASP licence. Under MiCA, the provision of crypto-asset custody and administration is one of the defined CASP services and requires its own authorisation scope. In Guernsey, the GFSC similarly treats custody as a regulated function. A business that holds client assets without the correct permission is operating outside its licence in most well-developed regulatory regimes.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses. Our approach is to map the licence, custody and payment stack before you commit to a structure – so that the regulatory and commercial layers align from the start. To discuss your Guernsey or EU licensing situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.

By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in VASP and CASP authorisation strategy for operators structuring across offshore and EU regulatory regimes.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.