Why Licensing Matters
Operating as an unlicensed VASP is not just a regulatory risk — it can constitute a criminal offence in many jurisdictions. Beyond legal exposure, unlicensed VASPs struggle to open bank accounts, partner with payment processors, and attract institutional clients who conduct their own due diligence on counterparties.
The global licensing landscape is fragmented, but the direction of travel is clear: virtually every major financial market is moving toward mandatory VASP registration or full licensing. Here is a comparative overview of the most significant regimes.
European Union: MiCA
The Markets in Crypto-Assets Regulation (MiCA) is the EU's comprehensive framework for crypto regulation, fully applicable to CASPs (Crypto-Asset Service Providers, the EU equivalent of VASPs) from December 2024.
Key Requirements
- Authorisation from the competent authority in one EU member state (with EU-wide passport)
- Legal entity established in the EU
- Fit and proper management and shareholders
- Minimum capital requirements (varying by service type: €50,000–€150,000)
- Organisational and governance requirements, including a robust AML framework
- White paper disclosure obligations for token issuers
Benefit: A single MiCA licence allows passporting across all 27 EU member states.
United States: FinCEN MSB Registration
In the US, VASPs engaging in money transmission (including crypto exchange and transfer) must register as a Money Services Business (MSB) with the Financial Crimes Enforcement Network (FinCEN). This is a federal requirement.
Key Requirements
- Registration with FinCEN (no fee, but mandatory)
- Implementation of a written AML programme
- Designation of a compliance officer
- Employee training programme
- SAR and CTR filing obligations
- Travel Rule compliance for transfers at or above USD 3,000
Important: FinCEN registration does not exempt VASPs from state-level money transmitter licences (MTLs). Many states require separate licensing — New York's BitLicense is the most well-known, with its own rigorous requirements.
United Kingdom: FCA Registration
The UK's Financial Conduct Authority (FCA) requires all UK-based cryptoasset businesses to register under the Money Laundering Regulations (MLRs) before conducting business.
Key Requirements
- Registration with the FCA (not a full authorisation, but increasingly rigorous)
- Demonstration of an effective AML/CFT control framework
- Fit and proper assessment of key individuals
- Business-wide risk assessment
- Travel Rule compliance (via the UK's implementation of the FATF standard)
The FCA has maintained a notably high rejection and withdrawal rate for VASP applications, signalling a demanding standard. VASPs must demonstrate genuine substance and robust controls — a superficial application will fail.
Singapore: MAS Licensing
The Monetary Authority of Singapore (MAS) regulates digital payment token (DPT) service providers under the Payment Services Act (PSA).
- Standard Payment Institution (SPI) or Major Payment Institution (MPI) licence depending on transaction volumes
- Fit and proper criteria for directors and management
- MAS may impose technology risk management requirements
- AML/CFT obligations aligned with FATF standards
Jurisdiction Comparison Table
| Jurisdiction | Regulator | Regime Type | Passporting | Approx. Timeline |
|---|---|---|---|---|
| EU | National NCAs | Full authorisation (MiCA) | Yes (EU-wide) | 3–12 months |
| USA (federal) | FinCEN | MSB Registration | No | Weeks |
| USA (NY) | NYDFS | BitLicense | No | 12–24 months |
| UK | FCA | MLR Registration | No | 6–18 months |
| Singapore | MAS | PSA Licence | No | 6–12 months |
Choosing a Licensing Jurisdiction
When selecting where to establish or register your VASP, consider:
- Where your customers are: You may need licences in multiple jurisdictions if you serve customers globally
- Regulatory quality: A reputable jurisdiction's licence signals credibility to banking partners and institutional clients
- Capital requirements: Assess the financial burden of minimum capital thresholds
- Timeline: If speed-to-market matters, some regimes are faster than others
- Ongoing obligations: Factor in the cost of sustained compliance, not just the initial application