The BVI VASP Licence Explained (2026)

If you are researching a “BVI VASP license”, you have almost certainly hit two conflicting stories: one that the British Virgin Islands is a light-touch offshore stamp, and another that it is now a proper, supervised regime. The second one is correct. Since the Virtual Assets Service Providers Act 2022 came into force on 1 February 2023, crypto businesses in the BVI register with and are supervised by the Financial Services Commission — and the FSC runs a substantive assessment, not a formality.

This guide is the definitive explainer of that regime. In our practice advising crypto operators on where to base, the BVI comes up constantly because it pairs a globally trusted corporate brand with 0% corporate tax and no fixed capital floor. But the details matter: what the Act actually covers, which of the three registration categories you need, how long it really takes, and — critically — that a BVI registration does not reach the EU. Here is the whole picture.

What the VASP Act 2022 actually is

The Virtual Assets Service Providers Act 2022 is the BVI’s dedicated crypto statute. Before it, virtual-asset businesses operated in a grey zone under general company and AML law. The Act closed that gap: from 1 February 2023, any person carrying on a virtual-asset service “by way of business” from or within the British Virgin Islands must register with the BVI Financial Services Commission (FSC) and remain supervised.

That word “supervised” is the point. The FSC is the same regulator that oversees the BVI’s investment-funds and insurance sectors — a serious financial-services authority, not a registrar rubber-stamping filings. The Act was drafted to align the BVI with FATF standards on virtual assets, including the Travel Rule for transfers, so the regime reads like a real AML/CFT framework rather than a formation exercise. If you have heard that “offshore crypto is unregulated”, the VASP Act 2022 is precisely the change that makes that claim outdated for the BVI.

The trade-off the BVI chose is distinctive. It kept the things operators value about the jurisdiction — a top-tier corporate brand, 0% corporate tax, no local incorporation drama — while adding genuine supervision on top. You get a recognised, bankable, regulated entity without the fixed-capital lock-up that defines EU regimes.

What a “virtual assets service provider” covers

Under the Act, a virtual asset is broadly a digital representation of value that can be traded or transferred and used for payment or investment (native tokens, stablecoins and similar), while excluding digital fiat and, generally, closed-loop items. A virtual assets service provider is anyone who, as a business, provides one or more defined services to third parties.

In practice, the registrable activities capture the whole market: exchanging virtual assets for fiat or for other virtual assets; transferring virtual assets; safekeeping or administering virtual assets or the instruments that control them (custody); and participating in or providing financial services around a token issuance. That sweep is why wallet providers, payment firms, brokers, DeFi front-ends and exchanges all fall inside the perimeter — if you touch client value as a profession, you are almost certainly a VASP.

Two clarifications we make often. First, “by way of business” matters — a genuinely non-commercial, purely proprietary activity may sit outside the perimeter, but the FSC reads this cautiously and most operators are in scope. Second, the perimeter is about the service, not the token: providing services around otherwise unregulated tokens still triggers registration. When founders map their model to the Act, the honest question is not “is my token regulated?” but “am I providing a virtual-asset service to third parties?”

The three registration categories

The regime is not one-size-fits-all. The Act sets three registration categories, and you register for the one (or the combination) that matches what you actually do. Choosing correctly is the first structuring decision, because it drives your fee, your obligations and your safeguarding requirements.

The general VASP category is the broad entry point for teams that provide a service but do not take custody of client assets or run a matching engine — think payment rails, wallet software, DeFi infrastructure and brokerage. Custody is the category the moment you safeguard client assets or hold the private keys, and it brings heightened safeguarding, segregation and key-management expectations. Exchange is for platforms that match trades. Custody and exchange are treated as the higher-risk activities, which is why their application fee sits at USD 15,000 versus USD 5,000 at the general end. Many operators need more than one — a custodial exchange, for example, engages both custody and exchange obligations — and the file has to reflect that reality rather than under-declaring scope.

The registration process and timeline

The route to a BVI VASP registration is a build, not a form. It runs in a predictable sequence: choose the category and design the structure; incorporate the BVI company and appoint its officers; assemble the application file; then file with the FSC and manage the review to registration.

The FSC expects a genuinely complete submission — a detailed business plan and financial projections, AML/KYC policies, a risk-assessment framework, organisational charts, custody and security documentation where relevant, and evidence of operating-expense coverage and infrastructure. Applications also go in through an authorised representative, so the file has to satisfy a professional gatekeeper before it reaches the regulator.

On timing, the Act sets a statutory window of four to six months for the FSC’s review. Be realistic about the whole journey, though: once you add incorporation, the weeks of work to build a credible file, and the FSC’s caseload, eight to fourteen months end-to-end is the honest planning figure. The single biggest lever on speed is completeness — thin or inconsistent files generate rounds of questions that stretch the calendar. Our sibling guide on BVI crypto licence requirements breaks the documentation down item by item, and the BVI crypto licence cost guide models the full first-year budget.

Governance, and the “runway not capital” model

The BVI’s most talked-about feature is what it does not require: a fixed capital floor. There is no minimum capital. Instead, the FSC asks you to evidence six to twelve months of operating expenses — real runway that shows the business can meet its obligations and wind down safely if needed. This is a fundamentally different philosophy from the EU’s fixed €50k / €125k / €150k CASP tiers, and it suits early-stage teams that would rather demonstrate a funded plan than lock up dead capital.

What the BVI does insist on is governance and substance. Every VASP must appoint at least two directors, an Anti-Money Laundering Officer (AMLO) and an auditor. Behind those roles sits a full assessment: the FSC weighs fit-and-proper evidence for directors and beneficial owners, tests the AML/CFT programme against BVI and FATF standards, and expects demonstrable operational infrastructure appropriate to the model. Custody applicants additionally have to show serious asset-safeguarding, segregation and key-management arrangements.

So the capital-light headline should not be mistaken for a light-touch regime. You save on locked capital, but you invest in people, policies and infrastructure — which is exactly why a BVI registration carries credibility that an unregulated shell never could, and why a supervised BVI entity is materially easier to bank. For a full walk-through of the corporate and compliance build, our flagship BVI crypto licence guide is the place to start, and our BVI crypto licences service page sets out how we run the application and the substance.

Tax, credibility and how the BVI fits a global stack

The commercial case rests on three pillars. First, 0% corporate tax — BVI entities are tax-neutral at the corporate level, with no capital-gains or withholding drag on the licensed company. Second, brand: the British Virgin Islands is the world’s most widely used offshore corporate domicile, so counterparties, banking partners and investors recognise and understand a BVI structure instantly. Third, proportionate regulation: the VASP Act 2022 gives you real supervision and Travel-Rule-grade AML without EU-style fixed capital.

Where the BVI does not fit is Europe. Because it sits outside MiCA, a BVI VASP cannot serve EU customers on its own — that requires a separate EU CASP authorisation. The mature approach we see most often is a two-licence stack: a BVI entity for global and non-EU markets, and an EU CASP for the single market, each doing the job it is actually built for. Even with a BVI registration you still follow local rules market by market and geo-block the United States, sanctioned and FATF-listed territories.

For the right operator — a global exchange, broker, custodian or DeFi team that values a recognised, tax-neutral, properly supervised base and does not need EU passporting on day one — the BVI is genuinely hard to beat. The regime is credible, the entity is bankable, and the runway-based model keeps capital working in the business rather than parked. If you want to know which of the three categories fits your model and what the file will really involve, book a free consultation and we will map it to where your users actually are.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.