Bermuda DABA Stablecoin Licence: Issuer Compliance Guide

The Bermuda Monetary Authority's 2023 amendments to the Digital Asset Business Act 2018 introduced explicit stablecoin-specific obligations, including reserve composition rules and enhanced disclosure requirements that took effect for new applicants immediately and required existing licensees to remediate by Q1 2024. If you're structuring a stablecoin issuance through Bermuda, the BMA's Class F licence category is almost certainly the track you need — and the requirements are more granular than most founders expect.

TL;DR

• Stablecoin issuers in Bermuda require a Class F Digital Asset Business licence under the Digital Asset Business Act 2018 (as amended).
• Reserves must be held in qualifying liquid assets, segregated from operational funds, and subject to independent attestation at minimum quarterly.
• The BMA applies a "fit and proper" test to all controllers, directors, and senior officers — expect deep background scrutiny.
• Minimum capital requirements vary by projected issuance volume; the BMA has discretion to impose higher buffers.
• Non-compliance can trigger licence suspension, mandatory redemption programs, or public censure under the BMA's enforcement powers.

What This Regulation Actually Requires

The Statutory Framework

The Digital Asset Business Act 2018 (DABA) is Bermuda's primary licensing statute for entities conducting digital asset business from or within Bermuda. "Digital asset business" is defined broadly in Section 2 and includes issuing, selling, or redeeming digital assets — which captures stablecoin issuance squarely.

The BMA classifies licence types by activity and risk profile. Class F is the relevant category for stablecoin issuers, covering entities that issue digital assets intended to maintain a stable value relative to a reference asset (fiat currency, commodity, or basket). The 2023 amendments codified what had previously been handled through supervisory guidance, giving the BMA explicit statutory authority to impose reserve and disclosure conditions as licence terms.

Reserve Requirements

This is where most applicants underestimate the complexity. The BMA requires that stablecoin issuers maintain reserves equal to at least 100% of outstanding liabilities to token holders at all times. But the composition rules matter as much as the ratio.

Qualifying reserve assets under BMA guidance include:

• Cash deposits at regulated credit institutions
• Short-duration sovereign debt (typically sub-90-day maturity) issued by G10 governments
• Central bank reserves where accessible
• Money market funds investing exclusively in the above

Crypto assets, corporate bonds, and yield-bearing DeFi positions do not qualify as reserve assets. The BMA has been explicit on this point in supervisory correspondence, and applicants who propose hybrid reserve structures face extended review timelines.

Reserves must be held in segregated accounts, legally ring-fenced from the issuer's operational capital. The segregation must be documented through account control agreements or equivalent legal instruments, and the BMA will review these agreements during the licensing process.

Attestation and Reporting

Quarterly reserve attestations by an independent, BMA-approved auditor are mandatory. The attestation must confirm both the quantity and composition of reserves. Annual audited financial statements are also required, and the BMA has the power under Section 10 of DABA to request ad hoc reporting at any time.

Issuers must publish reserve attestations publicly — typically on their website — within 30 days of the attestation date. This transparency obligation is a hard requirement, not a best-practice recommendation.

Fit and Proper Assessment

Every controller (anyone holding 10% or more of voting rights or economic interest), director, and senior officer must pass the BMA's fit and proper assessment. This involves criminal background checks, financial soundness review, regulatory history across all jurisdictions, and an assessment of relevant competence.

The BMA takes a substance-over-form approach. Nominee structures designed to obscure beneficial ownership will not survive scrutiny. Controllers who have faced regulatory action in other jurisdictions — even if not formally sanctioned — should expect detailed questioning.

Minimum Capital

The BMA sets minimum capital on a case-by-case basis for Class F licensees, but published guidance indicates a floor of approximately $100,000 for smaller issuers, scaling upward based on projected issuance volume and operational complexity. Issuers projecting more than $50 million in outstanding tokens should budget for capital requirements in the $500,000 to $1 million range, though the BMA retains full discretion.

Capital must be maintained on an ongoing basis, not just at the point of licensing. Breaches of minimum capital trigger mandatory notification to the BMA within 10 business days.

AML/CFT Obligations

DABA licensees are subject to the Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008, as amended. For stablecoin issuers, this means full KYC/CDD on all customers at onboarding, transaction monitoring calibrated to stablecoin-specific risk typologies (including chain analytics), and Suspicious Activity Report filing with the Financial Intelligence Agency.

The BMA's 2022 AML/CFT guidance for digital asset businesses specifically addresses stablecoin redemption flows as a higher-risk activity requiring enhanced due diligence triggers.

What This Means for Your Company

If you're issuing a fiat-backed stablecoin and want a credible, internationally recognized regulatory home, Bermuda is genuinely competitive. The BMA has a track record of engaging substantively with applicants, and the jurisdiction's FATF-compliant status matters for correspondent banking relationships.

The tradeoff is real regulatory substance. The BMA is not a rubber-stamp regulator. Application timelines for Class F licences typically run six to twelve months from submission of a complete application. "Complete" is doing a lot of work in that sentence — the BMA will return incomplete applications and the clock restarts.

For algorithmic or partially-collateralized stablecoins, the path is harder. The BMA has not issued a Class F licence for any stablecoin that cannot demonstrate full fiat or sovereign-debt backing. Post-TerraUSD, the BMA's supervisory posture on algorithmic designs hardened considerably, and applicants in that category should expect either rejection or conditions that effectively require full collateralization anyway.

Existing businesses that added stablecoin functionality to an existing digital asset operation need to check whether their current licence class covers issuance. Adding stablecoin issuance to a Class B or Class M licence without a variation application is a compliance breach.

How to Operationalize

Pre-Application (Months 1-3)

• Confirm that your stablecoin structure qualifies for Class F (not another class) by reviewing BMA's published licence class descriptions and, if uncertain, requesting a pre-application meeting with the BMA's FinTech team.
• Engage a Bermuda-qualified attorney. The BMA expects applications to be prepared by local counsel familiar with DABA requirements.
• Identify all controllers, directors, and senior officers who will require fit and proper assessment. Begin gathering documentation: CVs, regulatory history declarations, criminal background check consents, financial statements.
• Draft your reserve management policy. Define qualifying assets, custodian selection criteria, and segregation mechanics. Get legal sign-off on account control agreements before submission.
• Select your attestation auditor. The BMA maintains an approved list; confirm your proposed auditor's status before engagement.

Application Preparation (Months 2-4)

• Complete the BMA's prescribed application form for Class F licence.
• Prepare a detailed business plan covering: token mechanics, issuance/redemption workflows, reserve management, AML/CFT program, technology infrastructure, and governance structure.
• Draft your AML/CFT policies and procedures, including a stablecoin-specific risk assessment.
• Prepare financial projections for three years, including capital adequacy analysis under stress scenarios.
• Arrange for a Bermuda-registered office and at least one Bermuda-resident director (the BMA expects genuine local substance, not a mailbox).

Post-Submission (Months 4-12)

• Respond to BMA information requests promptly. Delays in responding extend the review clock.
• Prepare for a supervisory interview — the BMA routinely interviews senior officers and controllers directly.
• Once licensed, implement your quarterly attestation calendar immediately. Don't wait for the first quarter-end to discover your auditor's scheduling constraints.
• Set up your public disclosure infrastructure (website reserve page) before launch.

Common Mistakes and How to Avoid Them

Underestimating the substance requirement. The BMA expects a real operational presence in Bermuda, not a brass-plate structure. Applicants who propose a single non-resident director and a registered agent address face pushback. Plan for at least one senior officer with genuine Bermuda presence and decision-making authority.

Reserve policy drafted too loosely. Vague language like "high-quality liquid assets" without specifying eligible instruments, concentration limits, and custodian requirements will generate BMA comments. Draft your reserve policy to the level of specificity you'd expect in a fund's investment policy statement.

Ignoring the variation requirement for existing licensees. Companies that hold a Class B (digital asset exchange) or Class M (digital asset management) licence and want to add stablecoin issuance must apply for a licence variation. Launching a stablecoin under an existing licence that doesn't cover issuance is a breach of DABA Section 4.

Misclassifying controllers. The 10% threshold for controller status catches people off guard in VC-backed structures. If a seed investor holds 12% of voting shares, they're a controller and must complete fit and proper assessment. Map your cap table carefully before submission.

Treating attestation as a back-office task. Reserve attestation is a public-facing regulatory obligation. Missed attestation deadlines or attestations that reveal reserve shortfalls trigger mandatory BMA notification and can result in licence conditions or suspension. Build attestation into your board calendar, not just your finance team's workflow.

FAQ

Q: Can a non-Bermuda entity obtain a DABA Class F licence?

A: The licence is issued to a Bermuda-incorporated entity. Foreign companies must establish a Bermuda subsidiary or branch. The BMA will assess whether the Bermuda entity has genuine operational substance, so a shell subsidiary with no local staff or decision-making authority is unlikely to satisfy the regulator.

Q: Does the BMA regulate stablecoins pegged to non-USD currencies or commodity baskets?

A: Yes. DABA's definition of digital asset business covers issuance of any digital asset designed to maintain stable value relative to any reference asset. EUR-pegged, gold-backed, and basket stablecoins all fall within scope. The reserve composition rules apply to the reference asset — a gold-backed stablecoin would need to demonstrate qualifying gold custody arrangements.

Q: What happens if reserves fall below 100% of outstanding liabilities?

A: The issuer must notify the BMA within 10 business days of becoming aware of the shortfall. The BMA will typically impose a remediation plan with a defined timeline. Failure to remediate or notify can result in licence suspension and, in serious cases, a mandatory redemption program requiring the issuer to buy back all outstanding tokens.

Q: Is there a sandbox or lighter-touch pathway for early-stage stablecoin projects?

A: The BMA operates an Innovation Hub that allows pre-application engagement and, in some cases, a regulatory sandbox for novel business models. However, the sandbox does not exempt participants from DABA's core requirements — it provides a supervised environment to test operations before full licensing. Stablecoin issuers with live token supply are expected to hold a full Class F licence.

Q: How does Bermuda's regime interact with MiCA for EU distribution?

A: Bermuda's DABA licence does not confer MiCA passporting rights. If you intend to distribute your stablecoin to EU retail customers, you'll need to assess MiCA's e-money token or asset-referenced token requirements separately. Some issuers maintain both a BMA licence (for global operations) and an EU-authorized entity (for EU distribution). The two regimes have overlapping but not identical reserve and disclosure requirements, so dual compliance requires careful policy alignment.

---

Sources

• Bermuda Monetary Authority, Digital Asset Business Act 2018 (as amended 2023), Government of Bermuda
• Bermuda Monetary Authority, Guidance Notes on Digital Asset Business, BMA Publications
• Bermuda Monetary Authority, AML/CFT Guidance for Digital Asset Businesses (2022), BMA Publications
• Government of Bermuda, Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008 (as amended)

---

Disclaimer

This article is produced by BizLegal-AI Intelligence Desk for informational purposes only and does not constitute legal advice. Regulatory requirements change; verify current rules with the Bermuda Monetary Authority and qualified Bermuda legal counsel before making compliance decisions. No attorney-client relationship is created by reading this content. BizLegal-AI is not a law firm.