Mauritius has built a distinct regulatory channel for virtual asset issuers (entities that create and offer digital tokens to the public) through the Virtual Asset and Initial Token Offering Services (VAITOS) Act 2021, administered by the Financial Services Commission (FSC). A stablecoin issuer targeting that channel must secure authorisation before marketing or distributing tokens — the Act does not carve out an exemption for assets pegged to a reference value. Mis-classifying a token as a utility instrument and launching without authorisation can convert a product launch into an unregistered securities offering, with enforcement consequences that follow the business wherever it operates. This page sets out the regulated basis, the inbound-operator process, the cross-border interactions with banking and tax, and the decision points that typically arise in our practice.
Why Mauritius for stablecoin issuance?
Mauritius offers a mid-shore common-law jurisdiction with a purpose-built token-issuance regime, double-tax treaties with key investor markets, and an FSC that has signalled openness to structured digital-asset business. For a stablecoin issuer, that combination is commercially relevant. The VAITOS Act 2021 defines a distinct initial token offering pathway alongside a digital-asset custody and exchange regime, meaning an issuer does not have to force its authorisation request into a securities or banking bucket. That structural clarity matters when regulators in larger jurisdictions — the EU under MiCA, the UK FCA, the UAE's VARA — are still finalising their stablecoin-specific rules. Operators we advise regularly use Mauritius as a launchpad for an offering that will later passport into additional markets once those regimes mature.
The FSC also benefits from a well-established cross-border treaty network. That network informs structuring decisions: where the issuer sits, where reserve assets are held, and where revenues are recognised each carry distinct tax and regulatory consequences. We return to those interactions in the cross-border section below.
What does the VAITOS Act 2021 actually cover?
The VAITOS Act 2021 creates a licensing and registration regime specifically for virtual asset service providers and token issuers operating in or from Mauritius. It sits alongside, but is distinct from, the Financial Services Act that governs investment dealers and fund managers. The Act establishes the FSC as the competent authority for both issuer authorisation and ongoing supervision. Key regulated activities include the issuance of tokens to the public, the operation of token-trading platforms, and the provision of custody services for virtual assets.
For a stablecoin issuer, the operative questions under the Act are: (1) does the token constitute a virtual asset as defined; (2) is the issuance an initial token offering requiring FSC approval; and (3) does the peg mechanism — reference to a fiat currency, a commodity, or a basket — trigger any additional classification as an asset-referenced instrument under the FSC's evolving guidance? The Act's definitions are broadly drafted, and the FSC has indicated a substance-over-form approach to classification. A stablecoin that grants redemption rights, distributes yield, or confers governance participation may attract a more demanding authorisation pathway than a simple payment-use token.
Critically, the Act requires a token offering document — functionally analogous to a whitepaper — that discloses the issuer, the token mechanics, the reserve structure, and the risk factors applicable to holders. The content requirements are set by FSC rules, and the FSC must approve the document before the offering commences. Issuers who distribute a document that materially diverges from the approved version face suspension of their offering authority.
CTA #1: The authorisation path above describes the standard route. Your facts — entity domicile, reserve custodian, investor base, peg mechanism — change the analysis materially. For a scoped assessment of your stablecoin structure against the VAITOS Act, contact OBOLUS at info@oboluslaw.com.
Token classification: the decisive first step
Token classification under Mauritius law — as under every serious regime — turns on the substance of the rights the token confers, not the label placed on it in a marketing document. A common assumption among issuers is that a "utility" label on a whitepaper settles the legal classification. It does not. The FSC applies a substance-over-label test: if a token holder has an economic interest in a reserve pool, a right of redemption at a defined rate, or a governance claim over the issuer's assets, the token is unlikely to be treated as a plain utility instrument regardless of what the issuance documents call it.
For stablecoins specifically, the classification analysis typically centres on three questions. First, what is the redemption right — does the holder have a legal claim against the issuer or only a secondary-market expectation? Second, where are the reserve assets held, and who controls them? Third, does the peg mechanism involve active management that could attract fund-management regulation? A fiat-pegged token with direct redemption rights and FSC-recognised reserve custody lands in one classification. An algorithmic stablecoin with no reserve and a governance token that controls the peg mechanism lands in a very different place — and may not be authorisable in Mauritius at all under current guidance.
We assess classification against the substance of rights conferred — reserve mechanics, redemption architecture, governance structure — and map the result to the FSC's category definitions before any filing is made. A mis-classification identified at the application stage costs weeks. One identified after marketing has commenced can cost the entire programme.
What does the FSC authorisation process look like in practice?
The FSC authorisation process for a token issuer under the VAITOS Act proceeds in structured stages, and applicants who front-load the preparation work typically move through it materially faster than those who respond reactively to FSC queries.
The sequence, as we see it in practice, runs as follows. The issuer first establishes a Mauritius-incorporated entity — a Global Business Company (GBC) is the standard vehicle for cross-border digital-asset operations — and appoints a licensed Management Company as the required local agent. The entity must then prepare and submit the token offering document to the FSC, together with the technical and legal due-diligence package the FSC expects. That package includes the issuer's AML/CFT policies, the token's technical white paper, evidence of reserve custodianship, corporate governance materials, and fit-and-proper information for beneficial owners and directors.
The FSC reviews the application and may issue queries; responsive engagement with those queries is the single largest variable in the timeline. Once the FSC approves the offering document and grants the issuer authorisation, the token offering may commence. Post-authorisation obligations include periodic reporting to the FSC, maintenance of the AML/KYC programme, and notification of material changes to the token's structure or the issuer's control group.
Timelines vary by the complexity of the token structure and the quality of the submission package. A straightforward fiat-pegged token with clean corporate ownership and a well-drafted offering document generally moves faster than a multi-peg or yield-bearing instrument. We do not quote a standard timeline as a commitment — the FSC's review queue and the depth of its queries are variables outside any applicant's control — but in our cross-border practice, well-prepared submissions proceed materially more quickly than piecemeal ones.
AML, FATF and Travel Rule obligations for Mauritius stablecoin issuers
Mauritius aligns its AML/CFT framework with the FATF Recommendations, including Recommendation 15, which applies the FATF standards to virtual asset service providers. A stablecoin issuer authorised under the VAITOS Act is a VASP for FATF purposes and must implement a full AML/CFT programme: customer due diligence, transaction monitoring, suspicious-transaction reporting, and record-keeping obligations.
The Travel Rule — the obligation to pass originator and beneficiary data with a virtual asset transfer — applies to VASP-to-VASP transfers above the applicable threshold. Issuers building a distribution architecture that routes tokens through third-party exchanges or wallets must account for Travel Rule compliance from the design stage. Retrofitting compliance into a distribution network that was built without it is significantly more expensive than building it in at the outset. The FSC expects issuers to demonstrate, at the authorisation stage, that their distribution model is Travel-Rule compliant.
For an issuer whose token will trade on exchanges outside Mauritius — in Singapore under the MAS Payment Services Act regime, in Hong Kong under the SFC's VASP framework, or in EU markets under MiCA — the AML architecture must be capable of satisfying multiple simultaneous regulatory expectations. In our practice, a cross-border AML matrix that maps each jurisdiction's Travel Rule threshold and data-format requirement is a standard deliverable for any multi-venue stablecoin launch.
How do banking and tax interact with a Mauritius stablecoin structure?
The cross-border interaction between the Mauritius FSC authorisation, the banking relationship for reserve custody, and the tax treatment of issuance proceeds is the most structurally complex element of a stablecoin programme — and the one most frequently underweighted in early-stage planning.
On the banking side, the stablecoin's reserve assets must be held with a custodian acceptable to the FSC. Mauritius has a functional banking sector for Global Business Companies, and several local and international banks service the digital-asset sector, but correspondent banking restrictions mean that some reserve asset classes — particularly those involving non-Mauritian fiat currencies — require careful custodian selection. An issuer planning to hold USD-denominated reserves needs a banking relationship that can actually receive and hold those dollars without triggering a derisking closure. We work through the banking architecture in parallel with the FSC application, not after it.
On the tax side, a Mauritius GBC issuing a stablecoin will generally be subject to Mauritius corporate tax, with treaty relief available depending on where income is sourced and where investors are domiciled. The characterisation of issuance proceeds — whether as a liability (the issuer owes redemption) or as income — and the treatment of reserve income (interest, yields on collateral) are questions that require specific analysis under Mauritius law and potentially under the tax law of the issuer's target markets. A stablecoin issuer that ignores the VAT and withholding-tax position of distributions to holders in EU or UK markets creates a retroactive liability that can materially erode the programme's economics.
We routinely map the licence, banking and tax stack together as a single integrated analysis for stablecoin clients, because optimising each element in isolation produces a structure that works on paper but fails in practice. To map the full stack for your build, write to info@oboluslaw.com.
Decision matrix: which issuer profile fits a Mauritius authorisation?
Not every stablecoin issuer should pursue a Mauritius authorisation as the primary regulatory home. The decision turns on the issuer's target market, its reserve model, and its appetite for ongoing FSC engagement.
Profile A — the multi-market payment stablecoin issuer. A business building a USD- or EUR-pegged payment token for use across African, Asian and Middle Eastern markets, with no immediate EU passporting requirement, is well served by a Mauritius GBC structure. The VAITOS Act provides a credible regulatory home, the treaty network supports reserve custody, and the FSC's authorisation is recognisable to institutional distribution partners in the target corridors. Timeline to authorisation is a function of submission quality. Key risk: banking for USD reserves requires careful relationship management.
Profile B — the EU-focused stablecoin issuer. An issuer whose primary distribution target is the EU retail or payments market needs a MiCA e-money token (EMT) or asset-referenced token (ART) authorisation from an EU national competent authority. Mauritius cannot substitute for that authorisation — MiCA requires an EU-domiciled entity. A Mauritius structure may still serve as the reserve-holding or technology-services entity, but the regulated issuer entity must sit inside the EU. In our cross-border practice, we see issuers use a dual-entity structure: EU entity for MiCA compliance, Mauritius entity for reserve management and non-EU distribution.
Profile C — the institutional yield-bearing stablecoin. A token that distributes reserve yield to institutional holders — in effect a tokenised money-market instrument — may require a fund management licence alongside the VAITOS Act authorisation. The FSC has jurisdiction over both, but the regulatory burden is meaningfully higher. Timeline extends, capital expectations rise, and investor-eligibility restrictions apply. This profile should not be entered without a full pre-application meeting with the FSC. We facilitate those meetings as part of our engagement scope.
How a stablecoin authorisation obstacle was resolved
In a recent matter, a fintech operator had begun pre-marketing a USD-pegged stablecoin to institutional counterparties in the Gulf and South-East Asia before completing the FSC authorisation process. When a distribution partner in one of the target markets raised a regulatory-compliance query, the operator needed to demonstrate an authorisation pathway quickly or risk losing the relationship. We reviewed the token's reserve and governance architecture, identified that the yield-distribution mechanism had caused the FSC to request additional fund-management analysis, and restructured the yield-pass-through to remove the regulatory trigger while preserving the economic model. The revised offering document was resubmitted and the FSC query was resolved. The distribution relationship closed on schedule.
What are the most common mistakes in a Mauritius stablecoin authorisation?
In our cross-border practice, four mistakes recur with enough frequency that they are worth naming directly.
Treating the utility label as a regulatory defence. As discussed in the classification section, the FSC applies a substance test. An issuer that drafts its token offering document around a utility narrative but builds a redemption-right structure will face re-classification at the review stage. The time to address classification is before the document is drafted, not during the FSC's review.
Separating the banking and licensing workstreams. An issuer that secures FSC authorisation but has not confirmed a banking relationship for reserve custody cannot commence the offering. The two workstreams must run in parallel. We have seen programmes delayed by months because the banking onboarding — which itself requires AML documentation that overlaps with the FSC submission — was started only after the authorisation was granted.
Ignoring the distribution jurisdiction's requirements. FSC authorisation covers the issuance in and from Mauritius. It does not authorise distribution to retail investors in the EU, the UK, or jurisdictions that maintain their own token-offering restrictions. A compliant Mauritius issuer that distributes tokens to UK persons without regard to FCA rules faces UK regulatory exposure. The offering document must include geographic restrictions that the issuer can actually enforce.
Under-resourcing the AML programme. The FSC expects a functional AML/CFT programme, not a policy document. Issuers who submit a template AML policy without a demonstrated compliance infrastructure — a compliance officer, a transaction-monitoring system, a suspicious-activity-reporting pathway — will receive substantive FSC queries that delay the authorisation and sometimes require the entire compliance architecture to be rebuilt under time pressure.
If a prior application has stalled or a banking relationship has closed, a structured review of those workstreams can identify the underlying issue and the route forward. Write to OBOLUS at info@oboluslaw.com to discuss a second-read engagement.
Related at OBOLUS
- Token Offerings & Securities – legal counsel on token classification, issuance structure and securities compliance across jurisdictions
- Stablecoin Issuance Authorisation: Practical Lessons for Boards – board-level analysis of structuring decisions and residual risk in stablecoin programmes
- Tokenised Fund Structuring in Georgia – the Georgia regime for tokenised fund vehicles and cross-border structuring considerations
FAQ
Is my token a security?
Whether a token is a security depends on the rights it confers, not the label applied to it. Under Mauritius law and in most leading regimes, a substance-over-form test applies: if the token grants profit-participation rights, a redemption claim against an issuer's assets, or economic exposure to a managed pool, it is likely to be treated as a security or asset-referenced instrument. Classification should be assessed before the offering document is drafted, because re-classification during a regulatory review is costly and sometimes fatal to the programme's timeline.
Do I need a MiCA whitepaper?
A MiCA whitepaper is required for tokens offered to the public in the EU or listed on an EU trading platform, regardless of where the issuer is domiciled. A Mauritius-authorised issuer distributing tokens to EU persons cannot substitute the FSC-approved token offering document for a MiCA-compliant whitepaper. If the issuer's target market includes EU users, a separate MiCA whitepaper — and potentially an EU entity authorisation — is required. The two documents serve different regulatory purposes and must each satisfy their own regime's content rules.
How should an airdrop be structured legally?
An airdrop that distributes tokens of value to recipients without payment can still constitute a regulated offer in jurisdictions that define an offer broadly. The key variables are: whether recipients are selected (targeted vs. open), whether any condition attaches to receipt, and whether the token would itself require authorisation if sold. In Mauritius, an airdrop of VAITOS-Act-covered tokens should be reviewed against the FSC's offer definition before distribution. Globally, airdrop structures often require jurisdiction-specific legal opinions, particularly where the token has economic value and recipients are in regulated markets.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance programmes that sit around them. Digital assets are the entirety of our practice. We assess token classification against the substance of rights conferred, not the marketing label — and we structure stablecoin programmes to work across the full licence, banking and tax stack simultaneously. To discuss your situation, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel — specialising in token architecture, digital-asset regulatory classification, and cross-border structuring for stablecoin and DeFi issuers.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.