BVI VASP Act 2022: Registration and Compliance Roadmap

The British Virgin Islands' Virtual Assets Service Providers Act, 2022 (VASP Act) came into force on 1 February 2023, giving existing operators a transitional window to register with the BVI Financial Services Commission (FSC) before enforcement teeth kicked in. That window has closed. Firms operating without registration now face criminal liability under Section 4 of the Act, and the FSC has signaled active supervisory engagement across the sector.

TL;DR

• Any entity carrying on virtual asset business from or within the BVI must register with the FSC under the VASP Act 2022.
• Registration is not a light-touch notification — it requires AML/CFT policies, fit-and-proper assessments, and ongoing reporting obligations.
• The FATF Travel Rule applies to BVI-registered VASPs for transactions above USD 1,000.
• Failure to register is a criminal offence carrying fines up to USD 100,000 and/or imprisonment under Section 4(2).
• The FSC has published detailed Guidance Notes that operationalize the Act's requirements — these are not optional reading.

What the VASP Act Actually Requires

Who Must Register

Section 3 of the VASP Act defines "virtual asset service" broadly. If your entity does any of the following from or within the BVI, registration is mandatory:

• Exchange between virtual assets and fiat currencies
• Exchange between one or more forms of virtual assets
• Transfer of virtual assets (including as an intermediary)
• Safekeeping or administration of virtual assets or instruments enabling control over virtual assets
• Participation in and provision of financial services related to an issuer's offer or sale of virtual assets

"From or within the BVI" catches BVI-incorporated entities operating globally, not just those with physical BVI offices. This is the clause that surprises founders who assumed a BVI holding company structure was purely administrative.

Registration vs. Licensing: The Two-Track System

The Act creates two distinct categories. Standard registration applies to lower-risk VASP activities. A full licence is required for entities that also conduct regulated financial services under the Securities and Investment Business Act (SIBA) or the Banks and Trust Companies Act. Most pure-play crypto exchanges and custodians fall into the registration track, but the FSC has discretion to require a licence where it deems the risk profile warrants it.

Registration fees are tiered by activity type. The FSC's published fee schedule sets the application fee at USD 2,000 for most categories, with annual renewal fees ranging from USD 1,000 to USD 3,000 depending on the scope of activities.

AML/CFT Obligations

This is where the compliance burden concentrates. Registered VASPs must comply with the Anti-Money Laundering and Terrorist Financing Code of Practice (AML Code), which was amended in 2023 to incorporate VASP-specific provisions. Concrete requirements include:

• Appointment of a Money Laundering Reporting Officer (MLRO) who is a fit-and-proper individual resident or accessible in the BVI
• Written AML/CFT policies and procedures reviewed at least annually
• Customer due diligence (CDD) for all customers, with enhanced due diligence (EDD) for high-risk relationships
• Transaction monitoring systems capable of flagging suspicious activity
• Suspicious Activity Reports (SARs) filed with the BVI Financial Investigation Agency (FIA)

The Travel Rule

BVI adopted FATF Recommendation 16 through the VASP Act and subsequent FSC guidance. For virtual asset transfers of USD 1,000 or more, the originating VASP must collect and transmit: originator name, account number/wallet address, physical address or national identity number, and beneficiary name and account number. The receiving VASP must obtain and hold this information. There's no BVI-specific Travel Rule technology mandate, but the FSC expects VASPs to demonstrate a credible technical solution — whether that's a TRISA-compatible system, Notabene, or a proprietary implementation.

Fit-and-Proper Requirements

Directors, senior managers, and beneficial owners (holding 10% or more) must each pass an FSC fit-and-proper assessment. The FSC's Fit and Proper Criteria Guidance sets out the factors: financial soundness, competence, integrity, and reputation. Criminal convictions, regulatory sanctions in other jurisdictions, and undischarged bankruptcies are automatic disqualifiers. The FSC conducts its own background checks and may request additional documentation at any stage.

Ongoing Reporting

Registration isn't a one-time event. Registered VASPs must:

• Submit audited financial statements annually within six months of the financial year end
• Notify the FSC within 14 days of any material change to the business (new activities, change of directors, change of beneficial ownership)
• File an annual compliance return confirming AML/CFT program status
• Cooperate with FSC on-site inspections and information requests

What This Means for Your Company

BVI-incorporated holding companies that passively hold tokens or equity in operating entities generally fall outside the VASP definition — but only if they're genuinely passive. The moment a holding company starts managing a treasury of virtual assets on behalf of others, or facilitating transfers, the analysis changes.

Offshore exchanges using BVI entities as the contracting entity with customers are squarely in scope. The FSC has been explicit that substance-over-form applies: if the BVI entity is the legal counterparty to virtual asset transactions, it's carrying on virtual asset business regardless of where the servers sit.

DeFi protocols present the hardest questions. The Act's definition focuses on "persons" providing services, and the FSC has not yet issued definitive guidance on decentralized protocols. Practically, if there's a BVI-incorporated entity that controls admin keys, governs the protocol, or earns fees, that entity is likely in scope.

Token issuers conducting initial offerings of virtual assets that constitute securities remain subject to SIBA in addition to the VASP Act. The two regimes overlap, and the FSC expects dual compliance where both apply.

How to Operationalize

The following checklist reflects the FSC's published application requirements and Guidance Notes as of early 2026.

Pre-Application (4-8 weeks)

• Map all BVI entities against the Section 3 activity definitions; document the analysis in a legal memorandum
• Identify all directors, senior managers, and 10%+ beneficial owners who will require fit-and-proper vetting
• Engage a BVI-licensed registered agent (mandatory for the application)
• Draft or update AML/CFT policies and procedures to meet the 2023 AML Code requirements
• Appoint an MLRO and document their qualifications
• Select and implement a Travel Rule compliance solution; document the technical approach
• Prepare a business plan covering projected transaction volumes, customer base, and risk appetite

Application Submission

• Complete the FSC's prescribed VASP registration form (available on the FSC website)
• Attach certified copies of constitutional documents for the BVI entity
• Submit personal questionnaires and supporting documentation for each fit-and-proper individual
• Include the AML/CFT policies and procedures manual
• Pay the application fee (USD 2,000 for most categories) via the FSC's payment portal
• Submit the business plan and financial projections

Post-Registration (Ongoing)

• Calendar the annual compliance return deadline (typically 31 March for the prior year)
• Schedule annual AML/CFT policy review with the MLRO
• Implement a change-notification protocol so the 14-day FSC notification window is met
• Establish a SAR filing workflow with the FIA
• Conduct annual fit-and-proper refreshes for new directors or significant shareholders
• Maintain transaction records for a minimum of five years (AML Code requirement)

Common Mistakes and How to Avoid Them

Assuming BVI incorporation equals BVI regulation. Many founders believe that because their BVI company doesn't have a physical office in the BVI, it's not subject to BVI financial services law. Wrong. The Act applies to entities incorporated in the BVI carrying on virtual asset business anywhere. Jurisdiction of incorporation, not location of operations, is the trigger.

Underestimating the MLRO requirement. Appointing a nominal MLRO who lacks genuine AML expertise and authority is a red flag in any FSC inspection. The MLRO must have direct access to senior management, authority to file SARs without prior approval, and documented training. A compliance officer who also serves as CFO and has no AML background won't pass scrutiny.

Treating the Travel Rule as a future problem. Some VASPs register and then defer Travel Rule implementation, assuming the FSC won't check immediately. The FSC's Guidance Notes make clear that Travel Rule compliance is a condition of registration, not a post-registration aspiration. Inspectors ask for evidence of the technical solution on day one.

Missing the material change notification window. The 14-day window for notifying the FSC of material changes is strict. Adding a new director, onboarding a new significant shareholder, or expanding into a new virtual asset activity all trigger notification. Build this into your corporate governance calendar, not just your compliance calendar.

Filing incomplete fit-and-proper documentation. The FSC will not process an application with missing personal questionnaires or unsupported claims of good standing. Every director and 10%+ owner needs a complete package: certified ID, proof of address, professional references, and a declaration of any prior regulatory actions. Gaps cause delays measured in months, not days.

Conflating registration with authorization to solicit US or EU customers. BVI VASP registration does not provide a passport into the US, EU, or UK. A BVI-registered VASP soliciting US retail customers still needs to address FinCEN MSB registration and potentially SEC/CFTC requirements. Registration in the BVI is one piece of a multi-jurisdictional compliance architecture.

FAQ

Q: Can a BVI VASP registration be used as a base for global operations?

A: Operationally, yes — many firms use BVI registration as part of a multi-entity structure. Legally, BVI registration only authorizes virtual asset business under BVI law. Each jurisdiction where you actively solicit customers or operate infrastructure may impose its own licensing requirements. BVI registration is a credible starting point, not a global passport.

Q: How long does the FSC registration process take?

A: The FSC's published service standard is 90 business days from receipt of a complete application. In practice, applications with missing documentation or fit-and-proper issues can take six months or longer. Submitting a complete, well-organized application with all supporting materials is the single most effective way to compress the timeline.

Q: Does the VASP Act apply to NFT platforms?

A: It depends on the NFT's characteristics. The Act defines "virtual asset" to exclude digital representations of fiat currency and securities (which fall under SIBA), but the FSC has indicated that NFTs used primarily as investment instruments or that are fungible in practice may fall within scope. NFT platforms should obtain a legal opinion specific to their token structure before concluding they're exempt.

Q: What happens if we're already operating without registration?

A: Section 4(2) of the Act makes operating without registration a criminal offence. The FSC has the power to issue cease-and-desist orders, impose civil penalties, and refer matters for criminal prosecution. The practical advice is to engage BVI counsel immediately, self-report to the FSC, and submit a registration application as quickly as possible. Voluntary disclosure is treated more favorably than enforcement-triggered discovery.

Q: Are there capital requirements for BVI VASPs?

A: The VASP Act itself does not prescribe minimum capital requirements for registered VASPs (as distinct from licensed entities). However, the FSC's fit-and-proper assessment includes financial soundness, and the business plan must demonstrate adequate financial resources to meet obligations. Custodial VASPs holding client assets should expect the FSC to scrutinize capital adequacy more closely than non-custodial operators.

---

Sources

• Virtual Assets Service Providers Act, 2022 (BVI), No. 24 of 2022 — BVI Financial Services Commission
• BVI Financial Services Commission, VASP Guidance Notes (2023 edition)
• Anti-Money Laundering and Terrorist Financing Code of Practice (BVI), as amended 2023
• FATF Recommendation 16 and Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers (FATF, updated 2021)

---

Disclaimer

This article is produced by BizLegal-AI Intelligence Desk for general informational purposes only. It does not constitute legal advice and does not create an attorney-client or adviser-client relationship. Laws and regulatory guidance change frequently; verify current requirements with qualified BVI legal counsel before making compliance decisions. BizLegal-AI makes no representations as to the completeness or accuracy of this content as applied to any specific facts or circumstances.