Izin Usaha Virtual Assets Services Provider (VASP)
Biaya Izin Usaha VASP, Persyaratan & Perizinan per Negara
Lisensi atau izin usaha VASP memberi wewenang kepada bursa kripto, penyedia dompet kustodian, OTC kripto, atau penerbit token untuk beroperasi sebagai Penyedia Layanan Aset Virtual yang teregulasi di yurisdiksi target. Halaman ini mencakup yurisdiksi tempat lisensi VASP tersedia, kisaran biaya indikatif, persyaratan AML dan kepatuhan, proses aplikasi, dan bagaimana LegalBison mengelola siklus lisensi secara menyeluruh.
Penyedia Layanan Aset Virtual (VASP) adalah setiap individu atau entitas yang melakukan pertukaran, transfer, penyimpanan, atau administrasi aset virtual atas nama pihak ketiga, sebagaimana didefinisikan dalam kerangka kerja Gugus Tugas Aksi Keuangan (FATF). Apakah aktivitas tersebut memicu persyaratan pendaftaran atau proses otorisasi penuh bergantung pada yurisdiksi.
Apa itu Surat Izin VASP?
Klasifikasi VASP berasal dari Rekomendasi FATF 15, yang mewajibkan negara-negara untuk mengatur entitas yang terlibat dalam aktivitas aset virtual untuk tujuan AML/CTF (Anti Pencucian Uang/Pendanaan Terorisme). Memperoleh otorisasi ini memberikan perusahaan kedudukan hukum untuk menawarkan layanan tersebut di yurisdiksi tertentu tanpa beroperasi sebagai perantara keuangan tanpa izin.
Terdapat dua model regulasi yang berbeda yang berlaku, tergantung pada yurisdiksinya. Registrasi VASP merupakan rezim pemberitahuan: bisnis tersebut menyerahkan detailnya kepada otoritas terkait, mengkonfirmasi kepatuhan AML/KYC, dan menerima nomor registrasi. Tidak ada tinjauan substantif terhadap model bisnis yang dilakukan sebelum registrasi. Otorisasi VASP melibatkan penilaian pengawasan penuh, termasuk peninjauan rencana bisnis, pemeriksaan kelayakan pemilik manfaat, verifikasi kecukupan modal, dan persetujuan program AML.
Model yang tepat bergantung pada bisnis, pasar sasaran, dan persyaratan perbankan dari pihak lawan yang dituju klien. Sebagian besar yurisdiksi lepas pantai menerapkan rezim pendaftaran. Yurisdiksi pasar teregulasi menerapkan proses otorisasi penuh.
| Framework | Region | Governing Standard | Status |
|---|---|---|---|
| VASP | Non-EU global (SVG, Panama, Georgia, BVI, UAE, etc.) | FATF-aligned national regulators | Active |
| CASP (MiCA) | EU member states | National Competent Authorities under ESMA | In force from January 2026 |
The VASP classification applies in jurisdictions that have implemented FATF recommendations directly: SVG, Panama, Georgia, BVI, Czech Republic, and others. EU member states have replaced this framework with the Markets in Crypto-Assets Regulation (MiCA) CASP (Crypto-Asset Service Provider) authorization regime from January 2026.
For businesses targeting EU markets or EU-based clients, CASP authorization under MiCA applies. For businesses targeting offshore, LATAM, MENA, or Asian markets, a VASP license in the relevant jurisdiction is the applicable route.
See CASP License and MiCA Compliance for the EU licensing pathway.
VASP license costs vary significantly by jurisdiction, driven by government fees, minimum capital requirements, and local substance obligations. The table below shows indicative cost ranges for the jurisdictions most frequently pursued by LegalBison’s clients.
| Jurisdiction | License Type | Government Fee | Min. Capital | Typical Timeline |
|---|---|---|---|---|
| SVG (St. Vincent and the Grenadines) | VASP Registration | Low (registration fee only) | None | 4-8 weeks |
| Panama | VASP License | Moderate | None-Low | 3-6 months |
| Georgia | VASP Authorization | Low-Moderate | None | 4-8 weeks |
| BVI | VASP License | Moderate | Low | 4-8 months |
| Czech Republic | Crypto Trade License | Low | None | 4-8 weeks |
| UK | FCA Registration | Moderate-High | Varies by activity | 12+ months |
| EU (MiCA) | CASP Authorization | Moderate-High | EUR 50K-150K | 12-18 months |
All figures are indicative ranges based on publicly available regulatory data and LegalBison’s implementation experience. Exact costs depend on corporate structure, business model, and local agent fees. A scoped proposal with jurisdiction-specific pricing is available from the LegalBison client engagement team.
The optimal jurisdiction depends on target markets, capital position, regulatory timeline, and banking accessibility. The following outlines the most common routes LegalBison clients pursue.
SVG (St. Vincent and the Grenadines)
SVG operates one of the most accessible VASP registration regimes globally. No minimum capital applies, and the process typically completes within 4-8 weeks. SVG is widely used by exchanges targeting global retail markets with no EU or US client base. The jurisdiction imposes no substance requirement for the registration itself, though banking relationships for SVG-registered entities require careful structuring.
Panama
Panama’s framework involves a supervisory review but no minimum capital requirement. Panama’s geographic positioning and USD-based banking system make it a practical choice for LATAM-focused and North America-serving crypto businesses. The application process typically runs 3-6 months.
Georgia
Georgia has emerged as a fast, cost-accessible authorization market, particularly for exchanges seeking regulated status without the capital obligations of EU licensing. The National Bank of Georgia oversees the process. Typical timelines run 4-8 weeks, and no minimum capital applies. Compliance leads at growing exchanges increasingly cite Georgia as a practical first-regulated-market license before pursuing EU authorization.
BVI (British Virgin Islands)
The BVI VASP Act requires licensing for entities operating virtual asset services from BVI or targeting BVI residents. The BVI Financial Services Commission (FSC) supervises the process, which runs 4-8 months. BVI is frequently used in holding and operational structuring for multi-jurisdictional crypto groups, often alongside a trading-jurisdiction license elsewhere.
Czech Republic
The Czech crypto trade license process is fast (4-8 weeks), low-cost, and carries no capital requirement. For businesses that need a European entity footprint without full MiCA authorization obligations, the Czech route remains viable for specific activities. The applicable activity scope and transition timeline under the EU framework should be reviewed before selecting this route.
EU (CASP/MiCA)
EU-regulated operations require CASP authorization, not a VASP license. Full detail is on the CASP License page. CASP authorization under MiCA provides EU passporting across all 27 member states, which justifies the higher capital and compliance obligations for businesses with a genuine EU client base.
UK
UK crypto businesses must register with the Financial Conduct Authority (FCA) as a cryptoasset business under the Money Laundering Regulations. The UK process carries a high rejection rate and detailed AML program requirements. FCA registration is primarily relevant for businesses with direct UK retail exposure.
Explore other VASP-adjacent terminologies in one of our comprehensive blog post explaining the types of crypto licenses.
What businesses are legally required to have a VASP license?
Any business that offers virtual assets related services needs a license. The following business types are the most common license applicants.
Centralised Exchanges (CEX)
A centralised exchange matches buy and sell orders for crypto assets and typically holds client funds in custodial wallets during the trading process.
This custody element, even if only for the duration of settlement, brings the business squarely within VASP scope.
Crypto exchange licensing requirements apply in virtually every major jurisdiction.
Brokerages and OTC Desks
Firms that execute large-volume trades directly with counterparties, rather than through an order book, perform the exchange and transfer functions defined by FATF. OTC desks that settle in fiat also trigger fiat-on/off-ramp licensing requirements in some jurisdictions.
Custodial Wallets and Custody Providers
Any service that holds private keys on behalf of clients, whether a standalone custody product or a wallet integrated into an exchange, requires authorization. The safekeeping definition under FATF is explicit. Non-custodial wallets, where the user controls their own keys, sit outside this scope.
Crypto Payment Processors and Gateways
Businesses that enable merchants to accept crypto and settle in fiat, or that route crypto payments between parties, perform asset transfers on behalf of third parties. Most FATF-compliant jurisdictions treat this as a licensed activity.
On/off-ramp services specifically require attention to cross-border payment regulations alongside VASP licensing.
Issuance-Related Services (ICOs, IEOs, Launchpads)
Platforms that facilitate the offer or sale of a virtual asset on behalf of an issuer, including token launchpads, IEO platforms, and certain token issuance services, fall within VASP scope under the FATF framework.
The licensing requirement applies to the intermediary, not only the issuer.
Crypto P2P Platforms
Peer-to-peer platforms that match buyers and sellers and facilitate settlement, even without taking custody themselves, may be classified as VASPs depending on the jurisdiction and the level of control the platform exerts over the transaction flow.
Where the platform holds escrow during the transaction, the custody argument becomes stronger.
Crypto Casinos and Gaming Platforms
Online gaming and gambling operators that accept, hold, or pay out in crypto assets are subject to VASP requirements in a growing number of jurisdictions, independently of any gaming license they may hold. The VASP obligation attaches to the crypto-handling function, not the gambling activity.
GameFi and play-to-earn platforms sit in the same regulatory space, with additional complexity where in-game assets have real-world value and are transferable on-chain.
Banking Institutions Offering Crypto Asset Services
Traditional banks and electronic money institutions (EMIs) entering the crypto space are not automatically exempt by virtue of their existing authorization. In most jurisdictions, offering crypto exchange, custody, or transfer services requires either a separate VASP authorization or an extension of the existing license scope.
This applies equally to neobanks and FinTech payment providers expanding into digital asset products.
Who does not need a VASP license
- Pure software developers building non-custodial tools;
- Self-custody wallet providers where users retain control of private keys;
- Blockchain infrastructure providers that do not handle client assets.
Such business models are generally outside VASP scope. The line is custody and control, not proximity to crypto.
Why do you need a VASP License?
Regulatory compliance is not the only reason to obtain a license. It is the most immediate, but it is not the most commercially important.
Banking and on/off-ramping
This is the practical bottleneck for most operators. Tier-1 banks and major payment processors (Stripe, Checkout.com, and their equivalents) will not open accounts for, or process payments, on behalf of unlicensed crypto businesses.
A valid VASP license is a prerequisite, not a differentiator. Without it, off-ramping client funds to fiat is virtually impossible.
Enforcement exposure
Operating without a required license exposes founders and the entity to cease-and-desist orders, asset freezes, substantial fines, and in some jurisdictions, criminal liability.
Regulators in the EU, UAE, Singapore, and the UK have all pursued unlicensed operators aggressively in recent years.
Institutional capital and client trust
Venture funds performing due diligence on crypto businesses require regulatory standing as a baseline.
High-net-worth clients and institutional counterparties operate under their own compliance obligations and cannot engage with unregulated entities.
A license signals that the business has been audited, that AML/CTF frameworks are in place, and that management meets fit-and-proper standards.
Market access and geographic expansion
Certain jurisdictions restrict crypto services to licensed entities only, by law. Others do not prohibit unlicensed activity explicitly but make it commercially non-viable through banking restrictions.
For businesses with cross-border ambitions, the licensing question is also a market access question.
- A CASP license issued under MiCA, for example, opens 27 EU member states from a single authorization;
- A Cayman Islands VASP registration carries international recognition that facilitates relationships with global prime brokers and custodians. Jurisdiction selection is not only about compliance cost. It determines the markets you can serve.
Requirements vary by jurisdiction but follow a common structure derived from FATF standards. The following describes the standard obligations LegalBison prepares clients to meet.
- Company Formation. Most jurisdictions require the applicant to be a locally incorporated entity. LegalBison’s licensed Corporate Service Provider infrastructure handles company formation in the relevant jurisdiction as part of the process.
- Minimum Capital. Capital requirements range from zero (SVG, Georgia, Panama, Czech Republic) to meaningful reserves (BVI, UK, EU). Where capital requirements apply, documentation proving paid-up capital must accompany the application.
- Fit and Proper Assessment. Directors and ultimate beneficial owners (UBOs) are subject to background checks, criminal record requirements, and in many jurisdictions, a formal fit-and-proper declaration. Prior financial sanctions or criminal convictions in relevant categories are typically disqualifying.
- AML/KYC Program. A written AML/KYC policy covering customer due diligence, enhanced due diligence triggers, record-keeping, and suspicious activity reporting is required across all regulated VASP jurisdictions. LegalBison’s compliance team designs and documents AML programs to regulator-specification standards.
- Travel Rule Compliance. FATF Recommendation 16 (the Travel Rule) requires VASPs to collect and transmit originator and beneficiary information for virtual asset transfers above a defined threshold. Technology solutions for Travel Rule compliance (such as Notabene or Sygna) are required as part of the application in regulated jurisdictions.
- Transaction Monitoring. An operational transaction monitoring system capable of flagging suspicious patterns and generating regulatory reports is a standard requirement in full authorization regimes.
- MLRO Appointment. A qualified Money Laundering Reporting Officer (MLRO) must be appointed for most authorization regimes. LegalBison’s talent sourcing function assists clients in identifying qualified MLROs where the client does not have one in-house.
- Local Substance. Physical presence requirements vary. SVG and Georgia impose minimal or no substance requirements. BVI requires local agent representation. EU CASP authorization under MiCA requires genuine substance in the licensing member state, including local staff and decision-making capacity.
Mereka mempercayai LegalBison untuk mendapatkan dukungan terkait surat izin VASP
As a result of the fruitful cooperation with LegalBison, Yellow Card obtained a VASP registration, fast and without any legal complications.
LegalBison excels at adapting to challenges and demonstrates a perfect understanding of our business needs.
Quick set-up and straightforward process. It was a smooth process, we are happy to have chosen LegalBison as our Partner for incorporations, globally.
Di mana Anda harus mendirikan bisnis VASP Anda?
Pemilihan yurisdiksi adalah keputusan awal yang paling penting dalam proses perizinan kripto.
Jawaban yang tepat bergantung pada model bisnis, basis klien, kebutuhan perbankan, dan kesediaan Anda untuk menanggung biaya kepatuhan yang berkelanjutan. Hal ini juga bergantung pada lintasan pertumbuhan Anda: yurisdiksi yang sesuai untuk perusahaan rintisan yang belum menghasilkan pendapatan mungkin bukan tempat yang tepat setelah bisnis tersebut memproses volume yang signifikan atau mencari hubungan kelembagaan.
Berikut adalah contoh-contoh berdasarkan klasifikasi yang mudah dipahami. Namun, ini tidak boleh menjadi dasar tindakan Anda. Kami sangat menyarankan untuk mendiskusikan proyek Anda dengan spesialis regulasi kami.
Tingkat 1: Prestise tinggi, biaya dan jangka waktu lebih lama:
- Dubai (VARA): Regulasi VARA telah berkembang menjadi salah satu rezim regulasi kripto terlengkap di dunia. Dubai menawarkan akses perbankan yang kuat, lingkungan komersial yang canggih, dan kredibilitas institusional yang terus meningkat. Paling cocok untuk bisnis yang menargetkan MENA dan klien institusional, atau mereka yang sedang mempersiapkan penggalangan dana besar;
- EU (MiCA/CASP): Regulasi MiCA menciptakan otorisasi yang berlaku di seluruh negara anggota Uni Eropa dari satu yurisdiksi perizinan. Lithuania dan Polandia keduanya merupakan pasar otorisasi MiCA yang aktif. Jangka waktunya lebih lama, karena aplikasi MiCA sangat teliti, tetapi hasilnya adalah lisensi yang diakui di 27 negara;
- Singapura (MAS): Otoritas Moneter Singapura menjalankan proses perizinan yang ketat dengan persyaratan substansi yang tinggi. Singapura adalah yurisdiksi patokan untuk akses pasar Asia dan merupakan domisili pilihan bagi bisnis dengan ambisi di kawasan Asia Pasifik (APAC).
Tingkat 2: Lebih cepat, lebih mudah diakses, biaya tingkat menengah:
- Kanada (MSB): Diatur oleh FINTRAC, tanpa biaya, tanpa modal minimum, Opsi MSB Asing untuk entitas non-Kanada, kredibilitas Amerika Utara;
- Georgia: Kerangka kerja NBG VASP (2023), cakupan aktivitas terluas di kelasnya (termasuk ICO), dengan biaya lisensi rendah dan jangka waktu 3–4 bulan. Yurisdiksi yang ramah kripto dengan posisi Eurasia;
- Kepulauan Cayman: Pilihan utama bagi penyedia dana dan kustodian dengan basis klien global. Infrastruktur hukum yang kuat, tidak ada pajak keuntungan modal, dan pengakuan internasional yang luas.
Lepas Pantai:
- BVI: Jalur tercepat menuju registrasi VASP untuk bisnis yang membutuhkan kecepatan dan fleksibilitas. BVI cocok sebagai yurisdiksi awal untuk proyek pra-pendapatan, seringkali dikombinasikan dengan peta jalan perizinan ke yurisdiksi Tingkat 1 seiring dengan perkembangan bisnis dan pengetatan persyaratan perbankan;
- Seychelles: Sebanding dengan BVI dalam hal kecepatan dan biaya. Otoritas Jasa Keuangan Seychelles telah memproses volume pendaftaran kripto yang signifikan. Sesuai untuk model bisnis tertentu, terutama yang memiliki basis klien non-UE dan non-AS, tetapi yurisdiksi ini memiliki pengakuan perbankan yang lebih rendah daripada Cayman atau entitas berlisensi UE.
Bagaimana LegalBison Membantu Anda Mendapatkan Surat Izin VASP
LegalBison adalah firma layanan hukum dan bisnis butik global serta Penyedia Layanan Korporasi berlisensi yang mengkhususkan diri dalam perizinan kripto, regulasi FinTech, dan restrukturisasi korporasi lintas batas. Firma ini memberikan nasihat kepada bursa, kustodian, meja OTC, pemroses pembayaran, dan penerbit token di seluruh dunia.
Pendekatan kami terhadap perizinan VASP mencakup seluruh siklus:
- Analisis model bisnis dan pemilihan yurisdiksi. Sebelum permohonan diajukan, LegalBison memetakan aktivitas klien terhadap kerangka peraturan yurisdiksi kandidat, termasuk Lithuania, Panama, SVG, Georgia, dan BVI, mengidentifikasi jalur optimal berdasarkan jangka waktu, biaya, kelayakan perbankan, dan tujuan akses pasar.
- Pendirian badan hukum dan struktur korporasi. Badan hukum dan struktur kepemilikan harus dirancang agar lolos tinjauan kelayakan dan kepatutan. LegalBison menangani pendirian badan hukum, pengaturan direksi, dan dokumentasi kepemilikan manfaat.
- Substansi dan infrastruktur operasional. Persyaratan kantor lokal, direktur residen, dan MLRO (Money Laundering Reporting Officer) yang memenuhi syarat dikoordinasikan melalui jaringan yang telah mapan di setiap yurisdiksi.
- Pengembangan kerangka kerja AML/CTF dan kepatuhan. Paket aplikasi memerlukan dokumentasi kepatuhan yang substansial. LegalBison membangun atau mengaudit program AML/CTF, termasuk pemilihan penyedia Travel Rule dan integrasi software KYC/AML.
- Persiapan permohonan dan komunikasi dengan regulator. Firma hukum ini menyiapkan paket permohonan lengkap dan mengelola korespondensi dengan regulator selama periode peninjauan. Periode peninjauan rata-rata berkisar antara 3 hingga 9 bulan, tergantung pada yurisdiksi; LegalBison menetapkan ekspektasi yang realistis dan mengelola jangka waktu tersebut.
- Kepatuhan pasca-lisensi. Lisensi VASP bukanlah proses sekali jalan. Kewajiban berkelanjutan meliputi audit tahunan, pelaporan regulasi, pemantauan kecukupan modal, dan pembaruan kerangka kerja seiring perkembangan regulasi. Di beberapa yurisdiksi, regulator melakukan tinjauan pengawasan berkala dan dapat mencabut otorisasi karena kegagalan kepatuhan. LegalBison mendukung klien melalui seluruh siklus operasional, termasuk tinjauan kepatuhan tahunan, pemantauan perubahan regulasi, dan koordinasi dengan MLRO dan auditor lokal seiring pertumbuhan bisnis.
Bagi operator yang berfokus pada Uni Eropa, peraturan MiCA memperkenalkan jalur otorisasi paralel di bawah kerangka CASP, dengan jangka waktu pengakuan hak lama (grandfathering) dan implikasi pasporisasi (passporting) tersendiri. LegalBison memberikan nasihat tentang jalur perizinan VASP dan CASP, termasuk bagaimana registrasi VASP yang ada berinteraksi dengan ketentuan transisi MiCA di seluruh negara anggota.
Jaringan LegalBison mencakup lebih dari 50 yurisdiksi di seluruh Eropa, Timur Tengah, Asia, Amerika Latin, dan Karibia. Kemampuan penataan korporasi lintas batas firma ini berarti bahwa perizinan dirancang dalam koordinasi dengan struktur grup yang lebih luas, bukan secara terpisah. Penentuan posisi pajak, perencanaan substansi, dan strategi perbankan ditangani sebagai bagian dari keterlibatan yang sama, bukan sebagai pertimbangan tambahan setelah lisensi diperoleh.
Bagaimana cara mendapatkan izin usaha VASP
LegalBison akan mengelola seluruh siklus perizinan VASP mulai dari penilaian awal hingga pemberian lisensi.
Business Model Assessment. The first step is determining which jurisdictions and license types the client’s specific business model requires. Exchange activity, custody, OTC, and token issuance each trigger different licensing thresholds depending on the target jurisdiction. See Crypto Exchange Licensing, On/Off Ramp Services, and Token Issuance for vertical-specific guidance.
Jurisdiction Selection and Comparison. LegalBison prepares a jurisdiction comparison covering regulatory burden, capital requirements, timeline, and banking accessibility for the shortlisted jurisdictions. This comparison forms the basis of the client’s licensing strategy across LegalBison’s 50+ jurisdiction service scope.
Company Formation. Where the jurisdiction requires local incorporation, LegalBison’s licensed CSP infrastructure handles entity setup, registered agent appointment, and corporate administration.
Documentation Preparation. The compliance and legal teams prepare the full application package: AML/KYC policy, business plan, corporate structure diagrams, UBO declarations, fit-and-proper forms, and any jurisdiction-specific supplementary documents.
Application Submission and Regulator Liaison. LegalBison submits the application and manages all communication with the regulatory authority throughout the review period. The distinction between a VASP registration (notification regime, no substantive review) and a VASP authorization (full regulatory assessment) affects the timeline significantly. LegalBison advises on which pathway applies before submission.
Post-Grant Compliance Support. Following license grant, LegalBison provides ongoing AML compliance support, annual renewal filing, regulatory monitoring, and corporate administration as the client scales.
Dapatkan surat izin VASP Anda hari ini juga dengan LegalBison.
Untuk melanjutkan eksplorasi mengenai topik lisensi VASP (dan otorisasi terkait), berikut adalah beberapa kerangka kerja yang telah terbukti.
Kami mendorong para pendiri untuk menghubungi para ahli kami untuk konsultasi khusus dan individual.
Crypto License in the Cayman Islands
on request-
0% Taxes
-
Crypto-Friendly
-
Minimal requirements
Crypto License in British Virgin Islands
on request-
0% Taxes
-
Fast set-up
-
Easy to start
Crypto License in the Seychelles
on request-
Wide coverage of virtual asset services
-
Reputed offshore jurisdiction
-
Synergy with other licenses
Crypto License in Czech Republic
from 4.200 €-
EU jurisdiction
-
Light requirements
-
No residency required
Crypto License in El Salvador
on request-
Bitcoin is legal tender
-
Pro-crypto regulations
-
High reputation
Crypto License in Dubai VARA
on request-
One of the best reputed license
-
High range of crypto activities
-
Dedicated regulator
Crypto License in Singapore
on request-
Elite finance country
-
Prestigious
-
Provide electronic money
VASP License vs Other Crypto License Types
The term “VASP license” is a FATF-derived classification that most jurisdictions have implemented, but the label used by each regulator differs.
Understanding the mapping matters when comparing jurisdictions or evaluating a competitor’s regulatory claim.
| License Type | Applicable Jurisdiction(s) | Notes |
|---|---|---|
| VASP License | BVI, Seychelles, Panama, Bahrain, and others adopting FATF language directly | The generic FATF-framework label |
| CASP License (MiCA) | EU member states | CASP replaces prior national VASP regimes for in-scope businesses under MiCA |
| VARA License | Dubai | Administered by the Virtual Assets Regulatory Authority |
| MAS License | Singapore | Major Payment Institution or other category under the Payment Services Act |
| VDA License | South Africa | Virtual Digital Asset Service Provider, aligned with FATF standards |
| VASP Registration | (formerly) Estonia, Czech Republic, Slovakia (all overturned by MiCA) | Registration-based rather than authorization-based; lighter requirements |
For businesses targeting EU markets specifically, the MiCA regulation introduced the CASP (Crypto-Asset Service Provider) designation as the successor to national VASP frameworks. A CASP license issued in one EU member state passports across the entire European Economic Area.
GameFi and play-to-earn platforms operate in a distinct regulatory environment where VASP licensing may intersect with gaming licensing requirements, depending on jurisdiction and mechanics.
VASP License vs Other Crypto License Types
The term “VASP license” is a FATF-derived classification that most jurisdictions have implemented, but the label used by each regulator differs.
Understanding the mapping matters when comparing jurisdictions or evaluating a competitor’s regulatory claim.
| License Type | Applicable Jurisdiction(s) | Notes |
|---|---|---|
| VASP License | BVI, Seychelles, Panama, Bahrain, and others adopting FATF language directly | The generic FATF-framework label |
| CASP License (MiCA) | EU member states | CASP replaces prior national VASP regimes for in-scope businesses under MiCA |
| VARA License | Dubai | Administered by the Virtual Assets Regulatory Authority |
| MAS License | Singapore | Major Payment Institution or other category under the Payment Services Act |
| VDA License | South Africa | Virtual Digital Asset Service Provider, aligned with FATF standards |
| VASP Registration | (formerly) Estonia, Czech Republic, Slovakia (all overturned by MiCA) | Registration-based rather than authorization-based; lighter requirements |
For businesses targeting EU markets specifically, the MiCA regulation introduced the CASP (Crypto-Asset Service Provider) designation as the successor to national VASP frameworks. A CASP license issued in one EU member state passports across the entire European Economic Area.
GameFi and play-to-earn platforms operate in a distinct regulatory environment where VASP licensing may intersect with gaming licensing requirements, depending on jurisdiction and mechanics.
FAQ
VASP stands for Virtual Asset Service Provider. The term was introduced by the Financial Action Task Force (FATF) in its 2019 guidance on virtual assets, and has since been adopted by national regulators across most FATF member jurisdictions.
A VASP license (or registration, depending on the jurisdiction) is the regulatory authorization that permits a company to offer virtual asset exchange, transfer, custody, or administration services to third parties. Operating in this space without the required authorization, in jurisdictions where it is mandated, exposes the business to regulatory enforcement.
Costs range from minimal government registration fees (SVG, Georgia, Czech Republic) to meaningful capital and compliance investments (BVI, UK, EU). Total costs for a straightforward offshore VASP registration typically run from a few thousand USD to approximately USD 15,000-25,000, including company formation, agent fees, and compliance documentation. EU CASP authorization under MiCA involves a materially higher investment. Exact figures depend on the jurisdiction, business model, and scope of work. A scoped proposal is available from the LegalBison client engagement team.
Standard AML requirements include: a written AML/KYC policy covering customer due diligence and enhanced due diligence triggers, a risk-based transaction monitoring system, Travel Rule compliance infrastructure aligned with FATF Recommendation 16, MLRO appointment, suspicious activity reporting procedures, and documented staff AML training. Full authorization regimes demand more granular documentation than notification-based registration regimes.
The VASP framework derives from FATF and applies in non-EU jurisdictions: SVG, Panama, Georgia, BVI, UAE, and others. The CASP authorization framework is the EU’s MiCA regime, which replaced the VASP designation in EU member states from January 2026. CASP authorization under MiCA provides passporting rights across all 27 EU member states; a VASP license does not. For businesses targeting EU-based clients or EU-regulated counterparts, CASP authorization is the applicable route.
Yes. Most VASP jurisdictions do not restrict applicants based on the nationality of founders, directors, or beneficial owners, provided they pass fit-and-proper requirements. Some jurisdictions require a locally qualified director or local substance; others do not. LegalBison’s cross-border corporate structuring expertise covers the full range of jurisdictional requirements for non-resident applicants.
Timelines vary by jurisdiction. SVG and Czech Republic registrations typically complete in 4-8 weeks. Georgia runs a similar 4-8 weeks; Panama takes 3-6 months. BVI takes 4-8 months. UK FCA registration typically runs 12 months or more. EU CASP authorization under MiCA operates on an 18-month maximum review window from submission.
Physical presence requirements vary. SVG, Czech Republic, and Georgia impose minimal or no substance requirements. BVI requires local agent representation but not a staffed office. EU CASP authorization requires genuine substance in the licensing member state, including local staff and operational decision-making. LegalBison advises clients on substance requirements as part of jurisdiction selection and comparison.
Professional guidance for VASP licensing
It’s not easy to know where to begin the VASP licensing process when you’re overwhelmed by developing an innovative solution and coordinating multiple aspects of your business.
That’s why LegalBison offers comprehensive support to its clients. Based on your project and its specific requirements, our team implements solutions tailored to your budget and time constraints.
Stop viewing the legal authorization stage as a constraint, but as a milestone that can propel your project forward, with our professional support.
Experts in fintech and crypto licensing worldwide.
Consulting Manager, delivering corporate advisory and regulatory strategy across crypto, FinTech, trading, and international corporate structuring verticals for clients worldwide.
