VASP Registration and Licensing in the Cayman Islands

For businesses that facilitate exchange between virtual assets and fiat currencies or between different convertible virtual assets.

For companies that move virtual assets on behalf of clients or support transfer flows between users, wallets or counterparties.

For businesses that safeguard or administer virtual assets, private keys or instruments that allow control over virtual assets. These businesses require a virtual asset service license.

For operators of digital platforms that facilitate exchange of virtual assets for third parties and hold custody or control over client assets to complete transactions.

For companies participating in or providing financial services connected with the issuance or sale of virtual assets.

For crypto projects connected with investment funds, institutional investors, group structuring, fundraising or international financial groups.

For businesses that combine several virtual asset services and need to determine whether registration or a full license applies.

For international founders or groups that want to structure a Cayman crypto business, provided the ownership structure, senior officers and beneficial owners can pass CIMA review.

The applicant usually operates through a Cayman company or another structure suitable for carrying on virtual asset services in or from the Cayman Islands.

A VASP must maintain a registered office in the Cayman Islands as part of its regulatory setup.

The company must disclose its group and ownership structure, including shareholders, beneficial owners and persons exercising control.

Senior officers, trustees and beneficial owners must satisfy CIMA’s fit-and-proper expectations.

There is no general requirement for shareholders or beneficial owners to be Cayman residents, but CIMA reviews the ownership structure and key persons.

The applicant must maintain adequate governance arrangements, books, records, accounting systems and internal controls.

CIMA expects the applicant to demonstrate adequate personnel, facilities, capital, cybersecurity measures and systems suitable for the proposed virtual asset services.

Senior officers, trustees and the AML Compliance Officer may require prior CIMA approval before appointment or material change.

Registered or licensed VASPs must notify CIMA about changes to submitted information, and some changes may require prior approval.

Senior officers, trustees and beneficial owners must satisfy CIMA’s fit-and-proper expectations before the applicant can receive approval.

The company must have personnel with appropriate skills, knowledge and experience for the nature, scale and complexity of the virtual asset services.

The appointment of the AML Compliance Officer may require prior CIMA approval.

The applicant must maintain effective AML/CFT/CPF policies, procedures, monitoring systems and controls.

The company must have adequate books, records, accounting systems and internal reporting procedures.

CIMA expects appropriate cybersecurity measures and technology controls suitable for the proposed virtual asset services.

The VASP must protect client personal data and ensure accurate client communications.

Where the business handles client virtual assets, it must demonstrate proper safeguards, custody controls and protection against loss or misuse.

Custody providers must maintain written custody arrangements, disclose custody risks and fees, safeguard client virtual assets and apply appropriate IT standards.

Trading platform operators must maintain controls for client access, asset listing, conflicts of interest, market manipulation, trading suspension, resilience, cybersecurity, clearing and settlement.

Completed CIMA application forms and AML/CFT/CPF forms required for the selected regulatory route.

Completed and signed VASP Licensing and Waiver Application Checklist, where applicable.

Constitutional documents, incorporation documents and other company records confirming the applicant’s legal status.

Information on the group structure, ownership chain, shareholders and beneficial owners.

Documents for directors, senior officers, beneficial owners and other relevant persons required for CIMA’s fit-and-proper assessment.

A detailed business plan describing the proposed services, operating model, target clients, revenue model and regulatory scope.

Information on governance, internal reporting lines, key functions, staffing and allocation of responsibilities.

Financial projections showing the company’s ability to maintain adequate financial resources for its proposed activities.

Details of the technology infrastructure, transaction flows, platform functionality, client arrangements and service delivery model.

AML/CFT/CPF policies, procedures, risk assessment, monitoring controls and compliance documentation.

Governance framework, risk management policies, data protection documentation and internal control materials.

Cybersecurity policies, operational controls and technology risk materials suitable for the proposed virtual asset services.

For custody applicants: custody arrangements, client asset safeguarding controls, asset segregation procedures and protection against theft or loss.

For trading platform applicants: listing rules, market surveillance procedures, conflict-of-interest controls, clearing and settlement arrangements, client disclosures and risk warnings.

Information about outsourcing arrangements, material service providers and third-party dependencies.

There is no single statutory minimum share capital requirement applicable to all Cayman VASPs.

CIMA expects the applicant to demonstrate sufficient capital and financial resources for its business model, client exposure, custody arrangements, technology setup and operational risks.

The application fee for VASP registration is KYD 1,000.

The application fee for a virtual asset service license is KYD 5,000.

The annual renewal fee for VASP registration may range from KYD 1,000 to KYD 15,000.

The annual renewal fee for a virtual asset custody license may range from KYD 30,000 to KYD 120,000.

The annual renewal fee for a virtual asset trading platform license may range from KYD 50,000 to KYD 200,000.

For license applications, the applicable license grant fee is payable after CIMA approves the application.

The applicant should also budget for company incorporation, registered office, compliance documentation, AML/CFT/CPF systems, cybersecurity, audit, accounting, legal support and banking or payment infrastructure.

Bank or EMI onboarding is separate from CIMA approval and may take 4–12 weeks or longer. Account opening depends on the financial institution’s independent due diligence and is not guaranteed by CIMA registration or licensing.

Manimama analyses the proposed services, transaction flows, custody arrangements and platform functionality to determine whether the business needs VASP registration, a VASP license or another Cayman regulatory approval.

The incorporation stage may include company name reservation, preparation and filing of incorporation documents, appointment of directors and shareholders, registered office setup and receipt of corporate documents.

We prepare the CIMA application package, including VASP application forms, AML/CFT/CPF forms, business plan, financial projections, ownership documents, governance materials and fit-and-proper files.

The applicant prepares AML/CFT/CPF, risk management, compliance, cybersecurity, operational-control and data protection documentation.

Custody applicants prepare custody arrangements and safeguarding controls, while trading platform applicants prepare platform, trading, listing, market surveillance, clearing and settlement documents.

The application is submitted through CIMA’s REEFS portal together with the prescribed documents and assessment fee.

CIMA may request additional information, require amendments to the business model or policies, direct the applicant to another regulatory route, approve the application or refuse it.

Following approval and payment of the applicable fee, CIMA grants the registration or license specifying the authorized virtual asset service.

The company may start regulated activities only after the registration or license has been granted and all operational requirements are in place.

Bank or EMI onboarding may proceed in parallel with the application and usually requires a banking package, source of funds and wealth documents, transaction flow descriptions and information on clients, counterparties and service providers.

Estimated duration: 5–10 business days. At this stage, the proposed services, transaction flows, custody arrangements and platform functionality are reviewed to determine whether the business needs VASP registration, a VASP license or another Cayman regulatory approval.

Estimated duration: 5–10 business days. This stage may include company name reservation, incorporation documents, appointment of directors and shareholders, registered office setup and receipt of corporate documents.

Estimated duration: 6–10 weeks, depending on the complexity of the business and the client’s responsiveness. This includes CIMA forms, AML/CFT/CPF documents, business plan, financial projections, ownership documents, governance materials, fit-and-proper files and activity-specific documents.

The application is submitted to CIMA through the REEFS portal together with the prescribed documents and assessment fee.

CIMA may request additional information, require amendments to the business model or policies, direct the applicant to another regulatory route, approve the application or refuse it.

Following approval and payment of the applicable fee, CIMA grants the registration or license specifying the authorized virtual asset service.

The company may commence regulated activities only after the registration or license has been issued, and all operational requirements are in place.

Estimated duration: 4–12 weeks or longer. Bank or EMI onboarding may run in parallel with the regulatory process, but approval depends on the financial institution’s own due diligence and is not guaranteed by CIMA approval.

The Cayman Islands does not impose corporate income tax on Cayman VASP entities.

There is no capital gains tax in the Cayman Islands.

The Cayman Islands does not impose personal income tax.

There is no withholding tax on dividends or interest.

The Cayman Islands does not impose VAT.

There is no separate cryptocurrency tax regime in Cayman, but the company may still have tax obligations in other jurisdictions where it operates, serves clients or maintains tax residence.

A VASP must prepare annual accounts and make them available to CIMA upon request.

The company must maintain effective AML/CFT/CPF systems, procedures and controls on an ongoing basis.

The VASP must maintain accurate records, regulatory reporting procedures and required books and accounting systems.

The company must collect and retain originator and beneficiary information for virtual asset transfers.

The VASP must protect client personal data and virtual assets, including custody and safeguarding measures where applicable.

The company must notify CIMA of material changes, foreign regulatory approvals, enforcement actions and new overseas offices.

Annual renewal fees must be paid by 15 January to maintain the registration or license.

The VASP must cooperate with CIMA inspections, information requests and independent audits.

Custody providers must maintain asset safeguarding, custody agreements, cybersecurity controls and protection against theft or loss.

Trading platform operators must maintain listing due diligence, market surveillance, conflict-of-interest controls, client risk disclosures, resilient technology, clearing and settlement procedures.

The wrong regulatory route can delay the project. If the business provides custody services or operates a virtual asset trading platform, registration alone is not enough.

CIMA approval authorizes only the approved virtual asset services in or from the Cayman Islands. Any expansion into custody, trading platform services or other regulated activities may require additional approval or licensing.

A Cayman VASP registration or license does not allow the company to serve clients worldwide freely. The business must separately assess licensing and marketing requirements in every jurisdiction where it targets or serves clients.

Bank or EMI onboarding is separate from CIMA approval and depends on the financial institution’s independent due diligence. Account opening may proceed in parallel, but is not guaranteed by Cayman VASP registration or licensing.

CIMA may direct the applicant to apply for a virtual asset service license, sandbox license or approval under another regulatory law if the proposed model does not fit the selected route.

Registered persons must notify CIMA within 15 days of changes to submitted information, and certain appointments or changes may require prior CIMA approval.

Custody providers must maintain written custody arrangements, client asset safeguards, segregation controls, IT standards and protection against theft or loss.

Trading platform operators must maintain controls around client access, asset listing, conflicts of interest, market manipulation, trading suspension, platform resilience, cybersecurity, clearing and settlement.

After approval, the VASP must maintain AML/CFT/CPF systems, records, reporting, annual accounts and readiness for CIMA inspections, information requests and independent audits.

Cayman is tax-neutral, but Cayman entities may still face government fees, regulatory fees, stamp duties, customs duties and tax obligations in other jurisdictions where they operate or maintain tax residence.