Labuan Crypto Licence Requirements in 2026

A Labuan crypto licence requires a Labuan company holding a Digital Financial Services licence, funded to the minimum paid-up capital for its model — MYR 500,000 for an exchange, MYR 1.5 million for a money-services model. A Labuan crypto licence is not the offshore rubber stamp its reputation sometimes suggests. The Labuan Financial Services Authority (Labuan FSA) runs a genuine midshore regime, and the requirements file behind a Digital Financial Services licence reflects that: a real Labuan company, funded capital, experienced key officers, a physical office with staff on the island, and a working AML/CFT programme — all reviewed by the regulator itself.

This guide is the requirements checklist we work from on our own desk. It covers exactly what the 2026 Labuan FSA regime asks for — how to choose between the exchange and Money Broker (Digital) models, the paid-up capital each demands, the corporate structure and key-officer experience, the substance the FSA actually enforces, and the document pack — so you can scope the licence on what it really takes rather than on the headline that it is “cheap and offshore.” If you have read our flagship Labuan crypto licence overview, this is the detail underneath it.

Choosing your model: exchange vs Money Broker (Digital)

Everything downstream — capital, documentation, the scope of your compliance build — is driven by which model you apply for, so this is the first decision, not an afterthought. The Labuan FSA issues the licence under its Digital Financial Services (DFS) framework, and the two routes that matter for crypto are a Digital Asset Exchange and a Money Broker (Digital).

A Digital Asset Exchange licence is the lighter entry point. It authorises you to run a trading venue for virtual currencies, and its minimum paid-up capital of MYR 500,000 makes it the natural home for a spot-focused exchange. A Money Broker (Digital) licence is the broader, heavier permission: since 2025 a licensed Labuan Money Broker (Digital) may offer virtual-currency spot trading in assets such as BTC, ETH and USDT and crypto derivative contracts. If your business plan includes derivatives or matched OTC broking, you are into Money Broker (Digital) territory and its MYR 1.5 million capital floor.

Getting this wrong early is expensive: under-scoping to an exchange licence and then adding derivatives means re-capitalising and re-documenting mid-application. Our Labuan DFS licence explainer maps the two models side by side; fix the model to your product before the file is built, not after.

Capital and the corporate structure

Capital depends entirely on the model, and it is capital you fund and evidence — not a fee. A Digital Asset Exchange licence requires minimum paid-up capital of MYR 500,000 (about USD 100,000), unimpaired by losses and bank-confirmed. A Money Broker (Digital) licence requires MYR 1.5 million (about USD 330,000). Crucially, the FSA in practice expects RM 1.5–2 million for DFS and virtual-currency offerings so the applicant can satisfy its Technology Risk Management (TRM) guidelines — so treat the higher figure as the realistic working number rather than the statutory minimum. The exact split of what you must have funded at filing versus what supports ongoing operations is something we model against your specific plan.

On structure, the licensee is a Labuan company — the applicant is incorporated in Labuan, not an offshore holding company applying from elsewhere. The FSA requires at least two directors, and the governance layer must include an appointed compliance officer and MLRO. The people requirement runs deeper than headcount, though: the FSA expects key officers with three to five years of relevant blockchain or financial-services experience. Naming a director is not enough — the individuals running compliance, technology and the trading operation must demonstrably know the business, and weak or unevidenced key-officer CVs are one of the most common reasons a file stalls. Build those profiles into the application from the start.

Substance: the office and two local staff

This is the requirement that catches operators who still picture Labuan as a light-touch offshore permit. Labuan demands real economic substance, and it enforces it. You must maintain a physical office in Labuan and at least two full-time professionals based on the island — genuine local staff performing real functions, not a serviced address and a nameplate.

Substance is not box-ticking here; it is the whole point. The office and the local team are what make a Labuan licence bankable and credible to counterparties, and they are precisely what a bare offshore VASP registration — held from anywhere, backed by no one — cannot offer. It is also the line that most often surprises founders pricing Labuan on capital alone, because the office and qualified staff are a recurring cost that runs alongside the licence for its whole life.

Fit-and-proper vetting and AML/CFT

Alongside capital and substance, the Labuan FSA runs fit-and-proper due diligence on the people and the money behind the application — not just the named applicant company. Every director, key officer and beneficial owner is assessed: identity verification, criminal-record and sanctions screening, and a source-of-funds and source-of-wealth check on the capital being introduced. A disqualifying conviction, a sanctions hit or unexplained wealth in the ownership chain will hold the whole file, so assemble this evidence early and in parallel rather than treating it as a closing step.

The AML/CFT programme is reviewed just as closely, and it must be built to Malaysian and FATF standards. The core of it is:

• Customer due diligence and KYC — risk-based onboarding, verification and ongoing review of every client.
• Transaction monitoring and reporting — continuous monitoring, with suspicious-transaction reporting to the relevant authority.
• A compliance officer and MLRO — named, accountable individuals who run the programme, not figureheads.
• Travel Rule handling — originator and beneficiary information on virtual-asset transfers, in line with the Labuan FSA’s TRM guidance and FATF’s Recommendation 16.

These must be operable documents your compliance function actually runs, not templates assembled to pass the application. The FSA — and any bank you approach afterwards — will test whether the programme is real. Our primer on AML and KYC for high-risk operators covers what an operable programme looks like in practice, and the same discipline applies whether you are onboarding players or crypto users.

The document and technology pack

The FSA reviews a defined set of documents, and the technical elements have to be documented to its TRM standard before the licence is granted. Filing with any of these missing, or written for a different model than the one you applied for, is what turns a four-month approval into a six-month one. The core pack is:

• Corporate and ownership documents — the Labuan company’s constitutional documents and a clear ownership chart, feeding the fit-and-proper review.
• A business plan and programme of operations — a viable, credible operation with financial projections that match your chosen model and funded capital.
• AML/CFT and KYC policies — to Malaysian and FATF standards, with the compliance-officer and MLRO framework named.
• Technical, platform and custody documentation — systems and controls documented to the FSA’s TRM guidelines, covering platform architecture, secure key management, wallet design, asset safeguarding and segregation, cybersecurity and data protection.
• Evidence of capital — bank confirmation that the model-based paid-up capital is funded and unimpaired.

The technology file deserves emphasis, because for a virtual-asset business it is where the FSA’s TRM expectation bites hardest. Custody arrangements, key custody and recovery, and the segregation of client assets have to be demonstrable, not asserted — which is also why the RM 1.5–2 million working-capital figure exists: the FSA signalling that a DFS applicant should be resourced to build and run technology to standard.

Sequencing and timeline

Requirements are one thing; the order you assemble them in is what keeps the timeline honest. The sequence that avoids rework is: fix the model and capital first; then incorporate the Labuan company, secure the office and local staff, and fund and bank-confirm the capital; build the file — AML/CFT, TRM-compliant systems and risk documentation, and the key-officer profiles — in parallel with the fit-and-proper evidence, because that takes the longest; and only then file with the Labuan FSA. Budget about four to six months from a complete file to licence, plus roughly a month for banking on top — and remember that mainstream processors will not touch crypto, so banking is an EMI or crypto-friendly account conversation, not a high-street bank one. For how these requirements translate into a year-one budget, our Labuan crypto licence cost breakdown puts numbers on each line.

None of this is the light offshore permit Labuan is sometimes mistaken for — and that is the point. A real Labuan company, funded capital, experienced officers, enforced substance and a working compliance programme are what give the licence its credibility, its banking access and its standing as a genuine Asian midshore base. Get the file complete and internally consistent the first time and the four-to-six-month window is achievable; file with gaps and it drifts.

Ready to scope your Labuan requirements pack, or want a second opinion on a file you have already started? Our team runs the Labuan FSA application, the substance and the compliance build end to end, and will tell you honestly whether Labuan or a different route fits your market before you commit a ringgit of capital. Book a free consultation and we will model the full setup against your real plan.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.