Operating an exchange without the correct authorisation in its home jurisdiction exposes the business to enforcement action, frozen correspondent-banking rails and regulatory disqualification across every market the platform touches. For operators asking whether Seychelles can serve as that home, the direct answer is this: Seychelles does not operate a bespoke crypto exchange licensing regime in the same sense as the Virtual Assets Regulatory Authority (VARA) in Dubai or the Monetary Authority of Singapore (MAS) under the Payment Services Act. What it offers instead is a well-established corporate and IBC environment, a dealer-in-securities or money-transmission registration pathway for certain activities, and – critically – a legal and tax baseline that only works if the operator maps the full cross-border compliance stack before the first transaction clears. This page sets out what that mapping requires.
What is the regulated basis for a crypto exchange in Seychelles?
The starting point for any inbound operator is that Seychelles does not yet have a standalone virtual-asset service provider (VASP) statute modelled on the FATF Recommendation 15 framework, which requires jurisdictions to license or register entities that exchange, transfer, or safeguard digital assets. The Financial Services Authority of Seychelles (FSA Seychelles) supervises the financial-services sector, and the Seychelles International Business Companies Act governs the most common corporate vehicle. Activity that amounts to dealing in securities, operating a collective investment scheme, or providing money or value transfer services requires FSA authorisation under the applicable domestic legislation. Whether a crypto exchange triggers one or more of those categories turns on the assets traded and the services offered. Spot trading of utility tokens may fall outside the securities perimeter entirely. Exchange of assets that are structured as investment products almost certainly does not. The analysis is substance-over-label: the rights conferred by the token, not the marketing description, determine the category.
Operators also need to account for the Seychelles Anti-Money Laundering Act and the reporting obligations it places on designated non-financial businesses and professionals. An exchange processing significant transaction volumes will generally be treated as a reporting entity regardless of whether it holds a specific financial-services licence. The AML/CFT baseline derives from FATF membership obligations, including the Travel Rule – the obligation to pass originator and beneficiary data with each qualifying transfer. Seychelles has made regulatory commitments to implement these obligations, but the practical supervisor for AML purposes at the exchange level will typically be the FSA Seychelles or the Financial Intelligence Unit, depending on the activity type.
The practical takeaway for an inbound operator is that Seychelles can be used as an incorporation base for a crypto exchange, but the licensing posture is more permissive – and therefore more legally uncertain – than in dedicated digital-asset regimes. That uncertainty is the core risk to manage.
For a scoped assessment of how your exchange activity maps to the Seychelles regulatory perimeter, contact OBOLUS at info@oboluslaw.com. The process above describes the standard analytical path. Your facts – the assets traded, the user base, the banking relationships – change the analysis materially. Map your options
Who needs FSA authorisation and who can register an IBC instead?
The threshold question is whether the exchange's primary activities constitute regulated financial-services activity under Seychelles law, or whether the entity is simply incorporated in Seychelles but operates its regulated activity under a licence held elsewhere. Many exchange businesses use a Seychelles IBC as a holding or IP-holding vehicle, with the trading or custody activity licensed in a separate jurisdiction – Singapore, Dubai, or a European Union member state under the MiCA (Markets in Crypto-Assets Regulation) CASP authorisation. That structure is legitimate and widely used, but it requires the operator to be honest about where regulated activity actually takes place, because mischaracterising the activity location is one of the most common triggers for enforcement.
Where the exchange intends to hold the regulated activity in Seychelles – because it wants the tax environment, the corporate flexibility, or the cost base – the analysis runs as follows. If the activity is confined to non-securities digital assets and the exchange does not hold or safeguard client assets, it may operate under general corporate registration with robust AML/CFT compliance but without a specific FSA financial-services licence. If the exchange deals in tokenised securities, operates a lending book, or offers leveraged products, FSA authorisation for dealing in securities or derivatives is required. Custody of client assets – holding private keys, maintaining omnibus wallets – is a separate activity analysis. Custody is a regulated activity in most flagship regimes and is treated as such by the FSA Seychelles where it falls within the scope of securities law.
In our licensing practice, operators frequently underestimate the securities perimeter. A token that carries a revenue-sharing right, a buyback commitment, or a governance right tied to profit distribution is likely to be treated as a security in any serious analysis. The consequence of getting that classification wrong in Seychelles is enforcement by the FSA and, more dangerously, enforcement by the regulators of every jurisdiction where the token was sold to users.
What does the Seychelles authorisation process look like in practice?
For exchanges seeking formal FSA Seychelles authorisation to deal in securities or carry out money-transfer activities, the application process follows the standard pattern for Commonwealth offshore financial-centre licensing. The business must first incorporate a Seychelles IBC or a company under the Companies Act; the IBC is the more common vehicle. The FSA application then requires a business-plan submission, a description of the products and services, ownership and control disclosure to the beneficial-owner level, AML/CFT policy documentation, and fitness-and-propriety information on directors and principal officers. The regulator reviews the application and may request additional information; a decision follows in a period that varies by licence type and complexity.
AML/CFT documentation is particularly important. The FSA Seychelles expects a written AML policy, a customer due-diligence framework, a transaction monitoring procedure, and a named compliance officer. For a crypto exchange, these documents must address the specific risks of pseudonymous blockchain transactions, including Travel Rule compliance, chain analytics procedures, and the handling of privacy-enhanced assets. Regulators in all leading hubs increasingly expect these procedures to be operational – not aspirational documents filed to satisfy the checklist.
A practical note on timeline: because Seychelles does not have a dedicated VASP statute with codified processing windows, timelines vary more than in VARA Dubai or under MAS Singapore. Operators should plan for a process measured in weeks to a small number of months for straightforward applications, with more complex structures taking longer. We have seen applications stall where the beneficial-owner disclosure or the compliance documentation was incomplete at submission. Getting the package right before filing is consistently faster than attempting to cure deficiencies mid-review.
How does the Seychelles structure interact with tax and banking?
The cross-border interaction between a Seychelles-incorporated exchange and its tax and banking environment is the point where most structures either work or fail. Seychelles IBCs are generally exempt from Seychelles tax on income derived outside the jurisdiction, making them attractive for holding structures where the actual business is conducted elsewhere. However, the tax analysis does not stop at the Seychelles border. Controlled-foreign-corporation rules in the jurisdiction of the ultimate beneficial owners, permanent-establishment risk in jurisdictions where the exchange has employees or servers, and withholding-tax exposure on outbound payments all need to be mapped. A Seychelles IBC that generates real economic substance in a high-tax jurisdiction will not achieve the anticipated tax benefit; it will simply create an unregistered taxable presence in that jurisdiction.
Banking is the other pressure point. Seychelles-incorporated exchanges frequently report difficulty obtaining correspondent banking relationships for USD settlement. The reason is straightforward: global correspondent banks apply enhanced due diligence to accounts held by crypto-asset businesses, and a Seychelles IBC that lacks a recognised financial-services licence – or that holds a licence in a regime the correspondent bank does not recognise – will face account closure or refusal. The solution is not to change the corporate structure; it is to ensure that the regulatory posture in the operating jurisdiction is credible and documented, and that the exchange can demonstrate to a banking compliance officer exactly what it is licensed to do and where. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams, because the banking outcome depends directly on the licensing posture.
A micro-matter from our cross-border practice illustrates the dynamic. In a recent matter, an exchange operator had incorporated in Seychelles and was processing transactions through an account held at a bank in a separate offshore centre. The bank's compliance team issued a 30-day notice to close the account after a routine review flagged the absence of a named jurisdiction of regulation for the crypto-trading activity. We assisted the client in mapping its activity to the correct FSA Seychelles category, prepared the regulatory-posture documentation the bank required, and structured a parallel application in a second jurisdiction to provide the recognised-regulator reference the bank's policy demanded. The account was retained and the parallel licence application was filed within the notice period.
How does Seychelles compare with the leading crypto licensing hubs?
Seychelles sits in a different tier from the purpose-built crypto regulatory hubs – VARA Dubai, MAS Singapore, SFC Hong Kong, and the EU MiCA CASP regime – but it serves a different operator profile. The meaningful comparison is with BVI, Cayman Islands, and Mauritius as offshore incorporation jurisdictions that are used primarily as holding or IP structures rather than as the primary point of regulatory authorisation for customer-facing activity.
For a decision matrix: an exchange that serves institutional counterparties under bilateral agreements, holds no client assets, and executes purely OTC transactions in non-securities assets can credibly use a Seychelles structure with FSA AML registration and appropriate compliance infrastructure. The risk profile is manageable and the cost is lower than a full VARA Dubai or MAS Singapore authorisation. An exchange that offers a retail order book, holds client wallets, and operates across multiple user jurisdictions – including the EU or the UK – needs a licence that those jurisdictions will recognise. Seychelles alone does not provide that recognition. In that profile, a Seychelles IBC as the holding entity above an operating subsidiary in Dubai, Singapore, or an EU member state is the standard architecture. The holding entity captures the IP and the economic value; the operating subsidiary holds the regulated licence.
The AIFC/AFSA regime in Kazakhstan offers a third point on this spectrum – a common-law jurisdiction with a purpose-built digital-asset framework, lower capital demands than VARA, and growing recognition among Central Asian banking corridors. For operators targeting those markets, the AIFC may be a more efficient primary-licence jurisdiction than building from Seychelles upward. The choice between these paths turns on user geography, institutional counterparty requirements, and banking availability – not on the nominal cost of the licence.
If a prior application stalled or a banking relationship was closed, a second read can surface the structural reason and the route back. Write to OBOLUS at info@oboluslaw.com or message us via t.me/oboluslaw. Map your options
What are the most common legal mistakes in a Seychelles exchange setup?
The most consequential mistake is treating the Seychelles IBC as a regulatory solution rather than a corporate tool. Incorporation is not authorisation. An exchange that incorporates in Seychelles and then operates without analysing whether its activity requires FSA authorisation, without registering for AML/CFT purposes, and without building out its compliance infrastructure has not achieved a legitimate structure – it has deferred enforcement. When that enforcement comes, it typically comes from the user jurisdictions, not Seychelles, because the exchange has been actively marketing to users in those jurisdictions without the required local licence.
A common assumption is that a single offshore registration is enough to serve clients globally. This is the most persistent myth in exchange-licensing practice. MiCA requires that exchanges marketing to EU users hold a CASP authorisation, regardless of where the exchange is incorporated. The UK FCA financial-promotion regime requires that crypto promotions to UK persons be approved by an FCA-authorised person or issued by a registered cryptoasset business. The SFC in Hong Kong requires VASP licensing for platforms accessible to Hong Kong investors. None of these obligations disappears because the exchange incorporated in Seychelles. The offshore incorporation controls the tax and corporate-law dimension; the user-jurisdiction licensing obligations are a separate and parallel layer.
The second common mistake is failing to document beneficial ownership before seeking banking. Seychelles IBCs can have nominee structures that obscure beneficial ownership; banks see through those structures during due diligence. An exchange that cannot produce clean, current beneficial-ownership documentation will fail banking due diligence in every major financial centre, regardless of its compliance policies on paper.
The third mistake is treating AML/CFT as a filing exercise. The FSA Seychelles and every correspondent bank that reviews the exchange's account will expect to see an operational compliance programme – transaction monitoring, SAR filing records, Travel Rule implementation, and a compliance officer with demonstrable experience. A policy document filed at incorporation and never updated will not pass a live review.
What is the right decision point for a Seychelles structure?
The question is not whether Seychelles can host a crypto exchange, but whether it is the right jurisdiction for the specific operator profile at hand. Seychelles is most appropriate where the operator needs a cost-efficient, common-law-based offshore holding or IP structure, conducts genuinely wholesale or institutional activity with limited retail exposure, and plans to hold its primary trading and custody licences in one or more of the recognised regulatory hubs. In that architecture, the Seychelles entity does real legal and tax work.
Seychelles is least appropriate as the sole regulatory anchor for a platform that holds client funds, serves retail users across multiple jurisdictions, or plans to list tokenised securities. The regulatory gap between what Seychelles currently offers and what those activities require is too wide to bridge with contractual terms alone. Operators in that profile should build the primary regulated entity in VARA Dubai, under MAS Singapore, or within the EU MiCA CASP regime, and revisit whether a Seychelles holding layer adds value after that foundation is established.
In our cross-border practice, we regularly advise operators who arrive having already incorporated in Seychelles and who need to determine whether the structure is salvageable or whether a restructure is necessary. The answer is almost always that the IBC can be retained, but that the operating and licensing layer needs to be rebuilt above or beside it with proper jurisdictional authority. That restructure is faster and less expensive than unwinding a structure that has already attracted regulatory scrutiny.
Related at OBOLUS
- Licensing and registration for digital-asset businesses – the full licence-stack methodology across 70+ jurisdictions
- Digital-asset custody authorisation in ADGM – FSRA authorisation for custody and related activities in Abu Dhabi
- Oracle and data-feed liability for institutional clients – legal exposure analysis for DeFi infrastructure providers
FAQ
How long does a crypto licence take to obtain?
Timeline varies significantly by jurisdiction and licence category. Dedicated digital-asset regimes such as VARA Dubai or MAS Singapore publish indicative processing windows, but actual timelines depend on application completeness, beneficial-owner complexity, and the regulator's current caseload. In practice, straightforward applications in offshore centres can resolve in weeks; complex applications in flagship regimes typically take several months. Submitting a complete, well-documented package at filing is the single most effective way to compress the timeline.
Which jurisdiction is best for licensing my crypto business?
There is no universally optimal jurisdiction. The right choice depends on the assets you trade, the users you serve, your banking requirements, and the tax position of your beneficial owners. An exchange serving EU retail users needs a MiCA CASP authorisation. An OTC desk serving institutional counterparties in the Gulf may find VARA or ADGM/FSRA more suitable. We map the licence, banking and tax stack together before recommending a primary jurisdiction, because the answer that looks efficient on paper may not be bankable in practice.
Do I need a separate custody licence?
In most leading regulatory regimes, custody – holding private keys or maintaining wallets on behalf of clients – is treated as a distinct regulated activity from exchange or trading. MiCA, VARA, MAS and the SFC all recognise it as such. Whether your exchange triggers a custody-licence requirement depends on how the asset-holding is structured: omnibus hot-wallet models almost always do; pure non-custodial platforms often do not. The analysis requires a review of the technical architecture alongside the applicable regulatory regime. Assumptions based on the platform label rather than the actual key-management model are a frequent source of compliance gaps.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We map the licence stack across operating, custody and payment layers before you commit – identifying structural weaknesses before they become enforcement triggers. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialist in inbound exchange and VASP licensing structures across offshore and emerging digital-asset regimes.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.