BVI VASP licence: why it matters, who needs one and the UAE view

In short: a BVI VASP licence is the registration the BVI Financial Services Commission (FSC) requires before a business provides virtual asset services in or from within the British Virgin Islands. It also applies to a BVI company operating abroad, and operating without it is an offence. It does not, on its own, allow you to provide these services in or from Dubai.

Crypto founders often look at the British Virgin Islands (BVI) when structuring a group. Since 1 February 2023, when the BVI Virtual Assets Service Providers Act, 2022 came into force, a BVI company that provides virtual asset services for or on behalf of clients generally needs to be registered as a virtual asset service provider (VASP) by the FSC. This guide explains why that matters, who needs it, what the FSC expects, and how it fits with setting up in the UAE, where providing these services in or from Dubai (outside DIFC) generally needs a licence from the Virtual Assets Regulatory Authority (VARA).

Why does a BVI VASP licence matter?

• It is a legal requirement. Providing virtual asset services in or from within the BVI without registration is a criminal offence, with fines of up to US$100,000 (about AED 367,250) for a company or US$75,000 (about AED 275,438) for an individual, and up to five years' imprisonment.
• It follows the company, not the office. A BVI business company that provides, or holds itself out as providing, these services outside the BVI is treated as providing them from within the BVI. A BVI company run from Dubai, London or Singapore can therefore still need BVI registration.
• It underpins banking and partners. Banks, payment providers and other exchanges commonly check a counterparty's regulatory status, and an unregistered BVI VASP may find it difficult to open or keep these relationships.
• It reflects international standards. The FSC explains that the regime protects the BVI against money laundering, terrorist financing and proliferation financing, in line with FATF Recommendation 15 on virtual assets.

Who needs to register in the BVI?

The Act applies to a business that, for or on behalf of other people, carries on activities such as:

• exchanging virtual assets for fiat currency, or one virtual asset for another;
• transferring virtual assets;
• safekeeping or administering virtual assets, including hosting wallets or controlling another person's private keys;
• providing financial services relating to the issue, offer or sale of a virtual asset;
• operating crypto kiosks (for example, bitcoin ATMs) that facilitate exchanges.

The Act itself excludes, among others, providers of ancillary infrastructure, developers or sellers of unhosted-wallet software or hardware, anyone solely creating or selling a software application or virtual asset platform, and merchants accepting virtual assets as payment, unless they provide a service for or on behalf of others. Whether issuing your own token is caught depends on the facts, and a token with securities features may fall under other BVI rules instead. Take advice from a BVI legal adviser on your specific model.

What are the three registration categories?

• General VASP: virtual asset services other than custody or running an exchange.
• Virtual assets custody service: safekeeping virtual assets, or instruments that give control over them, for clients.
• Virtual assets exchange: operating a trading platform where offers to buy or sell virtual assets are made or accepted, and which at any time holds customers' money or virtual assets.

Custody and exchange carry additional requirements under the Act on top of the general ones, and higher fees.

What does the BVI FSC expect from an applicant?

• People: at least two directors, who must be individuals (corporate directors are not permitted for VASPs). The FSC can require one director to be physically resident in the BVI, and directors and senior officers need its prior approval and must be fit and proper.
• Local links: a physical address in the BVI, an approved auditor, and an authorised representative approved by the FSC. The Act exempts a VASP with a significant management presence in the BVI, but the FSC's guidance expects applicants to engage one.
• Capital: the Act sets no fixed minimum. Capital and liquidity should be appropriate to the size and risk of the business, and exchanges and custodians should expect closer scrutiny; some registrations have carried a specific minimum capital condition.
• Compliance: a written risk assessment, an anti-money laundering and counter-terrorist financing (AML/CFT) compliance manual, a compliance officer and a money laundering reporting officer, Travel Rule procedures (sending and receiving sender and recipient details with each virtual asset transfer), systems to trace customers' IP addresses, wallet addresses and transaction hashes, and the ability to detect mixers (services that hide where crypto came from) and other anonymity-enhancing tools.
• Operations: a business plan with initial capital and three-year projections, cybersecurity and data protection arrangements, a business continuity plan, and systems that keep client assets segregated and identifiable.

How much does it cost and how long does it take?

At the time of writing, the FSC's published application fees are:

An applicant offering more than one category pays the fee for each, and registered VASPs also pay registration and annual fees under the BVI fee regulations, which vary by category; check the FSC's current fee schedule. The FSC's published service standard is to give initial comments within six weeks of a complete application and to conclude within six months of the first submission. On top of these come the BVI company, the authorised representative, directors, auditors, compliance staff and professional advice, which depend on your plan.

What continues after registration?

• The auditor's report on the financial statements filed with the FSC within six months of the financial year-end (the FSC can extend this).
• Prior FSC approval for new directors or senior officers and for changes in significant or controlling interests.
• Client assets kept segregated and protected, and records kept for at least five years.
• Ongoing AML/CFT compliance, including the Travel Rule, and any conditions the FSC attaches to the registration.

A VASP can also apply to the BVI Regulatory Sandbox, where the FSC may, for a limited period, exempt it from some requirements of the Act, but never from anti-money laundering, terrorist financing or proliferation financing requirements.

Can a BVI company run its crypto business from Dubai?

• Licensing in Dubai: a BVI registration covers the BVI only. Providing virtual asset services in or from Dubai (mainland or free zone, except DIFC) generally needs a licence from VARA, subject to limited exemptions. In practice the VARA licence is usually held by a company or branch set up in Dubai. See our VARA licence guide.
• Both can apply: a group with a BVI company and Dubai operations may need both BVI registration and a VARA licence for the Dubai activity.
• Other UAE regulators: DIFC and Abu Dhabi Global Market (ADGM) have their own financial regulators. Elsewhere in the UAE, virtual asset activity is regulated at federal level by the Capital Market Authority (CMA), which replaced the Securities and Commodities Authority on 1 January 2026, with the Central Bank covering payment tokens. A Dubai business serving clients in other emirates should check the federal rules as well as VARA's.
• Corporate Tax: a foreign company, including a BVI company, is treated as UAE tax resident if it is effectively managed and controlled in the UAE; whether it is depends on where key management and commercial decisions are actually made. Even without residence, a Dubai office or staff can create a UAE permanent establishment. See Corporate Tax.
• Banking: UAE banks generally treat virtual asset businesses as higher risk, so expect enhanced due diligence on the whole group; account opening is at each bank's discretion. See bank account opening assistance.

For a UAE operating company that does not itself provide regulated virtual asset services, see IFZA crypto licence and crypto business setup in the UAE.

How does BVI VASP registration work, step by step?

1. Define the activity. Write down exactly what the business will do for clients: exchange, transfers, custody, a trading platform, or services linked to a token issue. This largely determines whether registration is needed and in which category.
2. Pick the category. General VASP, virtual assets custody service or virtual assets exchange; custody and exchange carry extra requirements and higher fees.
3. Appoint the key people. At least two individual directors, senior officers, an auditor and an authorised representative, all of whom the FSC must approve or accept.
4. Prepare the file. Ownership chart, business plan with three-year projections, risk assessment, anti-money laundering compliance manual, Travel Rule procedures, cybersecurity and business continuity plans, and client-asset arrangements.
5. Apply and respond. The application is typically submitted to the FSC through the authorised representative or a BVI legal adviser, with the application fee; answer the FSC's questions within the time it sets.

ProBiz Setup does not file BVI VASP applications; the BVI application is typically made through a BVI authorised representative or legal adviser. We help with the UAE side. ProBiz Setup is not affiliated with, endorsed by or regulated by the BVI Financial Services Commission, VARA or any other authority named in this article, does not carry on any virtual asset activity, does not recommend or endorse any virtual asset, token or service provider, and cannot guarantee any registration, licence, timeline or bank account. US dollar amounts are converted at AED 3.6725 per US dollar.

Frequently asked questions