Regulators across the major financial centers are tightening beneficial-ownership reporting, substance requirements and transfer-pricing documentation for digital-asset groups at a pace that has outrun the structuring advice many founders received at incorporation. A holding company assembled in a low-tax jurisdiction two or three years ago, without deliberate attention to substance, residency alignment or exit planning, is now a liability rather than an asset. The question is not whether your structure will attract scrutiny — it will. The question is whether it will survive that scrutiny intact.
Crypto holding structure under heightened scrutiny describes the discipline of designing — or reconstructing — the legal and tax architecture of a digital-asset group (an enterprise whose principal assets are tokens, private keys, exchange equity or protocol revenue) so that it is defensible on substance, consistent with the founder's personal tax residency position, and aligned with the group's anticipated exit or distribution event. In our practice, the trigger is almost always a capital event, an inbound banking inquiry, or a regulatory authorization application that surfaces latent structural risk. The sections below set out the regime, the process, the cross-border interaction and the decision criteria a business should apply before that trigger fires.
This page covers the regulated basis for substance and residency assessment, the structuring process from entity audit to implementation, the cross-border angles that routinely create double exposure, and the decision matrix that separates the right architecture by operator profile.
Why Digital-Asset Structures Face Heightened Scrutiny Now
The shift is structural, not cyclical. Three converging pressures explain why a holding structure that passed unremarked in earlier cycles now attracts active examination from tax authorities and financial regulators simultaneously.
First, the OECD's Base Erosion and Profit Shifting package — and the global minimum tax regime flowing from it — has given revenue authorities a coordinated basis to challenge offshore holding companies that cannot demonstrate genuine economic substance: directors present in the jurisdiction, local decision-making, and income attributable to real local activity. Digital-asset businesses are not exempt from these standards. A Cayman or BVI holding entity that simply holds exchange equity or a token treasury without any local management presence will not, on current authority, satisfy substance tests enforced by EU member states or the UK.
Second, MiCA — the EU's Markets in Crypto-Assets Regulation, enforced by ESMA and national competent authorities — requires that a CASP (Crypto-Asset Service Provider) authorized in the EU operate with genuine local governance. An EU-authorized entity whose board meetings happen by video call from a non-EU jurisdiction, with the parent holding company in a zero-tax territory, is an immediate red flag on a passporting application. We have seen applications stall at the substance examination stage, not the technical compliance stage.
Third, banking access — still the operational chokepoint for most crypto businesses — depends on compliance officers at correspondent banks forming a view about the group's ultimate beneficial ownership, substance and regulatory standing. A structure that cannot produce a clean group chart with identifiable, substance-backed entities at each layer fails that test before a formal application is even assessed.
For a scoped review of your existing structure against current substance and residency standards, contact OBOLUS at info@oboluslaw.com. The process above describes the standard risk profile. Your entity map, your founders' residency positions and your banking relationships change the analysis materially. Map your options
The Regulated Basis: Substance, Residency and Transfer Pricing
Three distinct legal doctrines govern whether a digital-asset holding structure holds up to examination, and they operate at different levels of the group simultaneously.
Substance requirements are the first layer. Every major holding jurisdiction — Malta under the MFSA, the Cayman Islands under CIMA's expectations, Singapore under the MAS licensing posture, and EU jurisdictions under MiCA — now applies a version of the same test: does the entity have sufficient economic presence to justify the legal and tax character claimed for it? Sufficient presence means local directors with genuine authority, a physical registered presence beyond a nominee address, and board decisions taken locally on matters that affect the entity's income. For a digital-asset treasury company holding a token reserve, "local decisions" includes investment policy, key management decisions and treasury operations.
The tax residency question operates at two levels. A company is generally tax resident where it is incorporated or, critically, where its central management and control is exercised. A founder who controls a Cayman holding company from a personal residence in a high-tax jurisdiction may inadvertently make that company tax resident in the founder's home country, regardless of the nominal Cayman domicile. The Travel Rule — the obligation to pass originator and beneficiary data with a transfer — and the AML/CFT requirements under the FATF Recommendations impose parallel obligations that depend on where each entity in the group is legally situated and supervised.
Transfer pricing is the third layer. Where a group operates across multiple jurisdictions — a common structure with an offshore holding entity, an EU-licensed CASP for retail business and an operating entity in a hub like VARA-regulated Dubai — intercompany arrangements for IP licensing, management services and capital deployment must be documented at arm's length. Revenue authorities increasingly challenge intragroup IP arrangements where the offshore holder contributed no genuine development risk.
In our cross-border practice, the entities that sustain examination are those whose structure was designed with all three layers in view from the outset — not patched after a banking refusal or a regulator's information request.
How Does the Structuring Process Work in Practice?
The engagement begins with a full entity and residency audit before any new structure is proposed. That audit maps every legal entity in the group, the beneficial ownership chain, the flow of income (fees, protocol revenue, staking yield, realized token gains) through the chain, and each founder's personal residency position. The gap between where income legally arises and where it is actually managed and controlled is typically where latent tax risk sits.
Step one is classification of assets by type and regime. Token holdings, exchange equity, DeFi protocol positions and fiat treasury each attract different treatment under the applicable regimes — including under MiCA's ART and EMT categories, under the MFSA's transitional framework in Malta, and under the FSRA's recognized virtual assets concept in Abu Dhabi's ADGM. Classification determines which entities in the proposed structure can hold which assets without triggering a regulated-activity obligation that was not anticipated.
Step two is jurisdiction selection for the intermediate holding layer. The right jurisdiction is not the lowest-tax jurisdiction. It is the jurisdiction that simultaneously satisfies: (a) sufficient treaty network access for the group's income flows; (b) a credible substance environment so that the entity will survive a challenge to its residency; (c) compatibility with the licensing regime where the operating entity will be authorized; and (d) a banking environment that will support the group's operational accounts. Malta under the MFSA and, increasingly, jurisdictions operating under MiCA-compliant regimes provide a combination of EU authorization access and a substance environment that works for medium-scale digital-asset groups.
Step three is founder residency alignment. This is the step most frequently skipped when founders restructure a group without legal advice that covers both the corporate and personal dimensions. A founder who moves to Dubai while retaining substantive control over a Malta holding company may have satisfied UAE residency requirements personally while simultaneously creating a central-management-and-control exposure for the Maltese entity. OBOLUS structures the corporate layer and the founder's personal residency position together, as a single exercise.
Step four is documentation: shareholder agreements, intragroup service agreements, IP ownership and licensing arrangements, and board governance records for each entity. Documentation is not a formality — it is the evidentiary record that a tax authority or a licensing regulator examines first.
Step five is an exit-readiness review. For groups with a token generation event, a secondary market liquidity event or an M&A exit in view, the structure must be designed so that the exit itself does not crystallize a tax liability in an unintended jurisdiction. This requires modelling the tax treatment of each exit route across the jurisdictions in which group entities are resident at the time of the event.
What Are the Most Common Structural Mistakes in Digital-Asset Groups?
The errors that create the most material exposure are not exotic. They are predictable, and they appear with consistent frequency in the groups that come to us for reconstruction work.
The first is the shell holding company without substance. A holding entity in a low-tax jurisdiction that has no local directors, no local bank account, no local board meetings and no genuine management activity is a nominee structure in substance, regardless of what the incorporation documents say. Under current OECD-aligned enforcement, that entity's income is likely to be attributed to the jurisdiction where the actual management is located — which is typically the founder's home country.
The second mistake is treating the EU authorization as the whole answer to the structure problem. A CASP authorized under MiCA in a single EU member state can passport across the EU and EEA. That passporting right is valuable. But the licensed entity is only one layer of a group structure. An offshore parent holding all IP and most of the group's liquid assets, with no substance and a central-management-and-control problem, is still exposed — and may draw the licensed entity into a beneficial-ownership inquiry.
The third mistake is inconsistent residency. Founders who relocate to zero-tax or territorial-tax jurisdictions — the UAE, Singapore, Portugal under applicable regimes — without also restructuring the group's ownership and management flows frequently find that their personal residency claim is technically valid but that their behavioral pattern (continuing to make decisions that affect the group's EU-licensed entity from their new residence) creates a separate substance problem for the licensed entity itself.
The fourth mistake is neglecting the banking layer. A structure that is legally sound will still fail operationally if the group cannot open and maintain institutional accounts in the jurisdictions where it is licensed. Banking access requires a clean beneficial-ownership structure, a clear regulatory standing and, increasingly, evidence of substance at the entity level that the holding structure is supposed to provide.
In a recent matter, a token-issuing group had restructured its holding layer without coordinating the IP ownership and management-fee arrangements. When a major correspondent bank requested a group structure chart as part of onboarding due diligence, the intragroup flows were inconsistent with the stated tax-residency positions. We rebuilt the intragroup documentation, aligned the substance positions, and the group completed onboarding within a commercial timeframe. No litigation, no regulatory referral — the risk was identified before it became a crisis.
Cross-Border Angle: Where the Entity Sits Versus Where Users and Banking Live
For most digital-asset businesses, the entity, the users and the banking sit in different jurisdictions. That is not a problem — it is the normal architecture of the industry. The structuring challenge is ensuring that the legal and tax consequences of that distribution are deliberate, not accidental.
A VARA-licensed entity in Dubai serving users across Asia and Europe, with a holding company in the BVI and operational banking in a European jurisdiction, has at minimum four live regulatory relationships: VARA in Dubai; the BVI Financial Services Commission under the VASP Act 2022; the banking regulator in the jurisdiction where accounts are held; and potentially MiCA / ESMA if EU users are served at scale. Each relationship imposes its own AML/CFT expectations under the FATF Recommendations, including the Travel Rule. Each also has a view about substance and governance that affects the others.
The AIFC / AFSA regime in Kazakhstan has emerged as a structuring option for groups seeking a common-law governed entity with regional reach into Central Asian and CIS markets, while maintaining a Dubai or Malta entity for European and MENA user bases. The AIFC's digital-asset trading facility and custody concepts operate under a distinct regulatory framework with its own substance expectations. Groups considering that route need to assess whether the additional jurisdictional layer creates value — treaty access, user base access, regulatory standing — that justifies the compliance overhead.
Singapore under the MAS Payment Services Act and its Digital Payment Token (DPT) service licensing regime offers a well-developed combination of regulatory standing, banking access and an established institutional infrastructure. For groups with significant Asia-Pacific user exposure or institutional counterparty relationships in the region, a Singapore entity in the holding chain is often operationally justified — and that operational justification is itself a substance argument. Allied counsel in the relevant jurisdiction advise on the local substance and licensing requirements in each hub.
If a prior application stalled or a banking relationship closed unexpectedly, a structural review will typically surface the reason and the remediation path. Write to OBOLUS at info@oboluslaw.com. We have worked through the structural dimension of both scenarios and can scope the review rapidly. Map your options
Decision Matrix: Which Structure Fits Which Operator Profile?
There is no universal holding structure for a digital-asset business. The right architecture is a function of the group's activity, its user geography, its founders' residency positions and its anticipated liquidity or exit path. The matrix below organizes the principal profiles we advise.
Profile A — EU-focused CASP with institutional clients. The operating entity requires a MiCA CASP authorization in a member state with a credible NCA and a functioning institutional banking market. Malta under the MFSA or a Nordic EU jurisdiction are common choices. The holding layer sits in a jurisdiction with EU treaty access and genuine governance substance. The founder's residency is in the same or an adjacent EU-adjacent jurisdiction to avoid a central-management-and-control attribution to a higher-tax state. Timeline from structure design to authorization readiness: several months, depending on the NCA's current processing load and the completeness of the application package. Key risk: substance failure at the holding layer surfacing during the MiCA authorization examination.
Profile B — Gulf-region VASP with global token distribution. The primary operating entity is VARA-licensed in Dubai or FSRA-authorized in ADGM. The holding layer is typically in a common-law offshore jurisdiction — BVI or Cayman — with the beneficial ownership clearly documented for VARA's compliance requirements. Where a token generation event is planned, the token-issuing entity is often a separate vehicle in a jurisdiction with clear token classification guidance. The founder's UAE residency position must be genuine and behavioral — not just a tax certificate. Timeline varies by activity type and VARA rulebook category. Key risk: inconsistency between the founder's UAE residency claim and their actual decision-making pattern for the operating entity.
Profile C — Multi-jurisdiction group with a pending exit. For groups within a two-to-three-year window of a token liquidity event or M&A exit, the priority is exit-tax modelling across all jurisdictions where entities are resident and all jurisdictions where founders are personally resident at the anticipated exit date. Restructuring after an exit event has been announced is rarely possible; the window for deliberate repositioning closes when the transaction is publicly known. The structure must be finalized, documented and operationally embedded before that window closes. Key risk: a founder residency change that is too recent to be respected by the home jurisdiction's exit-tax provisions, or an IP holding arrangement challenged as a disguised distribution on exit.
Profile D — Early-stage token project with limited revenue. The compliance overhead of a multi-layer holding structure may exceed the benefit for a project with limited revenue. The right approach at this stage is a clean, minimal structure — typically a single operating entity in a jurisdiction with clear token classification guidance, strong banking access and an AML/CFT framework aligned with the FATF standard — with a documented upgrade path as the project scales. The mistake here is building a complex structure for a stage that does not need it, creating compliance costs that impair the project's runway.
A Common Assumption: Personal Relocation Is Enough
A common assumption among digital-asset founders is that relocating personally to a zero-tax or territorial-tax jurisdiction changes the group's overall tax position. It does not, on its own. Personal tax residency and corporate tax residency are separate questions governed by separate rules in each jurisdiction involved.
A founder who establishes UAE tax residency while continuing to serve as the sole decision-maker for a company incorporated and licensed in the EU has changed their personal tax position — subject to their home country's exit-tax provisions — but has not changed the company's tax residency. If the company's central management and control is exercised from Dubai, a well-developed EU jurisdiction may argue that the company is, in substance, tax resident where the management is — which is now Dubai. That might reduce the company's EU tax exposure. But it may also imperil the EU license, which requires genuine local governance.
The alignment that actually works is: the founder's personal residency, the holding company's jurisdiction and governance model, the operating entity's licensing and substance position, and the group's banking all configured together as a coherent system. OBOLUS delivers that alignment as a single engagement — not as a sequence of siloed advice from practitioners who do not see the full picture.
Personal tax residency and corporate structure must be decided together or not at all. That is the core discipline of the service.
Related at OBOLUS
- Tax and cross-border structuring for digital-asset businesses – our practice overview covering the full range of structuring and residency services
- Corporate tax residency planning: the structuring angle – detailed analysis of management-and-control tests across leading digital-asset hubs
- AML and Travel Rule regime in Malta – the compliance obligations for MFSA-supervised entities and CASP applicants under the MiCA transition
FAQ
Where should a token-issuing entity be domiciled?
The right domicile depends on the token's classification, the issuer's intended user geography and the regulatory regime that will govern the offering. Under MiCA, an ART or EMT issuer requires CASP authorization in an EU member state. For utility tokens or tokens directed at non-EU markets, jurisdictions with explicit token-classification guidance — including VARA-regulated Dubai, the FSRA in ADGM and the BVI FSC under the VASP Act 2022 — offer a clearer path. The issuing entity and the treasury-holding entity are frequently separate vehicles for risk isolation and tax efficiency.
How are staking rewards taxed?
Staking reward taxation varies significantly by jurisdiction and turns on whether the reward is characterized as income on receipt, as a capital gain on disposal, or as neither under a specific digital-asset provision. Most major jurisdictions treat staking rewards as ordinary income at the time of receipt, valued at the market price of the token at that moment. However, the applicable regime — and the rate — differs materially between a corporate entity and an individual, and between jurisdictions. OBOLUS advises on the treatment applicable to the specific entity type and jurisdiction in the group's structure.
Does remote working create tax residency risk?
Yes. A founder or senior employee who performs substantive decision-making functions from a jurisdiction in which they are not formally tax resident may create a permanent establishment for the company in that jurisdiction, or may trigger a central-management-and-control attribution that shifts the company's tax residency. The risk is highest where the individual controls a company incorporated elsewhere and where the decisions made remotely are strategic rather than operational. A behavioral audit — examining where decisions are actually made, documented and executed — is the starting point for assessing this exposure.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on licensing across more than 70 jurisdictions, on disputes and on-chain asset recovery across more than 25 forums, and on the tax, banking and compliance architecture that sits around them. Digital assets are the whole of our practice. We align founder residency with the holding structure and the exit plan — as a single coordinated engagement, not as sequential advice from specialists who do not speak to each other. Our clients include crypto exchanges, custodians, token issuers and funds operating across the leading digital-asset hubs. To discuss your structure, contact info@oboluslaw.com or reach us at t.me/oboluslaw.
By Lydia Brennan, Tax & Structuring Analyst — specialist in cross-border holding structure design, corporate tax residency alignment and exit-planning for digital-asset groups across the EU, Gulf and offshore hub jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.