Vanuatu VASP Crypto Licence: VFSC

Why Operators Look at Vanuatu

Vanuatu is a Pacific offshore jurisdiction with a single regulator (the VFSC), a zero corporate tax regime, and a recently rebuilt framework purpose-built for virtual asset businesses. The Virtual Assets Services Providers Act No. 3 of 2025, assented 9 April 2025 and commenced 12 May 2025, layers a five-class VASP licence plus a separate Initial Token Offering (ITO) licence on top of the existing Financial Dealers Licence, and aligns the regime with FATF Recommendation 15. That stacking makes Vanuatu structurally different from Seychelles or BVI, and it demands real substance: a physical office plus a Manager, Director and Chief Technology Officer each resident on-island for at least twelve consecutive months before the licence is issued, which sets it apart from paper jurisdictions in the same fee band.

One Regulator, and a Caution on Marketing

The VFSC is the sole licensing authority under the VASP Act and the Financial Dealers Licensing Act [CAP 70]; the Reserve Bank of Vanuatu is engaged only for the Class D.4 (bank-operated) route. The most common reason a Vanuatu evaluation goes wrong is comparing the 2025 regime against the old pre-2022 Financial Dealers Licence that earned the jurisdiction its “fast and cheap” reputation. Those days are over: government fees alone exceed USD 1 million per class, minimum capital is VT 200,000,000, the FDL must be obtained first, and three named individuals must spend a year on-island before grant. Treat lower numbers from marketing pages with caution.

Regulatory Framework

The VASP Act is drafted as an extension of the FDL framework, not a replacement, so a VASP licensee must hold the underlying FDL authorisation. That stacking is unusual among offshore VASP regimes and is the main driver of the 9 to 15 month timeline. The framework rests on three statutory pillars plus the VFSC’s operational rulebook:

• Virtual Assets Services Providers Act No. 3 of 2025, the principal Act. Assented 9 April 2025; commenced 12 May 2025.
• Financial Dealers Licensing Act [CAP 70], as amended in 2021 and 2024, establishing Classes A (FX, commodities), B (securities, precious metals), C (derivatives/futures) and D (digital assets).
• Anti-Money Laundering and Counter-Terrorism Financing Act No. 13 of 2014, governing AML and CFT obligations and the Vanuatu Financial Intelligence Unit (VFIU), which receives STR, CTR and IFTI filings.
• VFSC operational rulebook (June 2025): VASP Application Guidelines, Fit and Proper Guidelines, Cybersecurity Guidelines, Travel Rule Guidelines, and ITO Guidelines, with a revised “Requirements for Licence Application as a VASP” published 29 January 2026.

Licence Types and Activities Covered

The VASP Act creates five licence classes plus a separate ITO licence for issuers. The classes can be combined within a single application; only Class D.4 requires Reserve Bank of Vanuatu approval in addition to the VFSC licence. Identifying the correct class set is the first decision point, and the ITO licence sits separately from the Class D.3 issuance-intermediary licence.

• Class D: Exchange. Exchange between virtual assets and fiat, or between different virtual assets. Covers centralised and decentralised exchanges, on-ramps and off-ramps, and OTC desks.
• Class D.1: Transfer. Transfer of virtual assets on behalf of another person. Covers wallet providers, transmitter services, and bridge operators.
• Class D.2: Custody. Safekeeping and control over virtual assets or the instruments enabling control. Covers institutional and qualified custodians and hot or cold storage providers. Capital adequacy expectations scale with assets under custody, which the VFSC Guidelines name as a calibration factor.
• Class D.3: Issuance-related financial services. Services connected to an issuer’s offer and sale of a virtual asset: ITO advisory, intermediation, placement, and underwriting-style activity. Distinct from the ITO licence itself: the issuer needs an ITO licence; the intermediary needs Class D.3.
• Class D.4: Bank-operated exchange and custody. A bank licensed by the Reserve Bank of Vanuatu may, with VFSC approval, conduct exchange and custody activity. Class D.4 covers the activities of D.1, D.2, and D.3.
• ITO licence. A separate Part 5 authorisation for token issuers. Only companies may issue tokens, and the white paper must contain the 23 prescribed components in Appendix 2 of the VFSC Application Guidelines.
• Fintech Sandbox. A 12-month testing window (renewable once for six months) for products not yet ready for full licensing, with a VT 200,000 (about USD 1,700) application fee and a one-year relevant-experience requirement.

Requirements

Applications are presented through a licensed Company and Trust Services Provider (CTSP).

Corporate Form, Key Persons and Capital

The applicant is usually a domestic company under the Companies Act No. 25 of 2012, since the licensee must keep a physical office and on-island staff, with a registered office and a licensed CTSP. Three on-island roles are mandatory: a Manager with five or more years of VASP or ITO experience, a Director with two or more years, and a CTO with an engineering or computer-science degree plus a year of relevant management experience. All key persons face a fit-and-proper assessment, and an AML/CTF Compliance Officer must be separately registered. Minimum unimpaired paid-up capital is VT 200,000,000 (about USD 1.69m), evidenced by a bank statement and certified by an external auditor, calibrated upward by the VFSC for high-volume or material-custody businesses.

Residency Proof and Documentation

The residency requirement is documentary, not aspirational: the VFSC asks for twelve months of telephone bills, twelve months of bank statements showing cash withdrawals in Vanuatu, and a lease or property title for each of the three key persons, so recruitment has to run a year ahead of the application. The application pack itself runs to dozens of items, including an AML and KYC manual, a cybersecurity policy, business continuity and disaster-recovery plans, a technology audit covering DLT and smart-contract assurance, professional indemnity and cybercrime insurance, three-year financial projections, and a white paper for ITO applicants. Generic, minimum-compliance manuals are the single largest driver of regulator queries, so documentation needs to survive inspection rather than a desk review.

Process and Timeline

A Vanuatu VASP application runs in five stages over roughly 9 to 15 months. The two licences cannot run in parallel: the FDL must be in place before the VASP licence can be issued, and submitting both at once triggers clarification requests that lengthen the timeline rather than shortening it.

Stage 1 Month 1–2

Company Formation and CTSP Engagement

A domestic company under the Companies Act No. 25 of 2012, a registered office, and a licensed CTSP to present the application.

Stage 2 Month 2–6

FDL Prerequisite

Application for FDL Classes A, B, C and D under the Financial Dealers Licensing Act [CAP 70]. The VASP licence cannot be issued to an entity that does not hold the FDL classes, so the FDL is sequenced first.

Stage 3 Month 4–9

Substance Build

Physical office, three on-island staff with the 12-month residency clock running, insurance, technology audit, and AML and cybersecurity manuals. This is the operational bottleneck: the VASP application cannot be filed until the Manager, Director and CTO have completed twelve consecutive months on-island.

Stage 4 Month 6–12

VASP Application Package

Submission through the CTSP: white paper (for ITO classes), three-year financials, capital certification, technology audit report, all compliance manuals, key-person fit-and-proper packs, and a bank statement evidencing the VT 200,000,000 paid-up capital.

Stage 5 Month 9–15

VFSC Review

A statutory decision window of 90 working days from a complete application, with real elapsed time typically 4 to 6 months including query cycles. Companies then have three months from licence issue to commence operations.

The binding constraint is the residency clock, not the regulator’s decision speed. On cost, expect government fees alone to exceed USD 1 million per licence class, on top of the capital floor and a year of substance spend, before professional fees. The much lower “USD 50,000 application” figures on some marketing pages cannot be substantiated in any VFSC primary source.

Taxation

Vanuatu imposes no corporate income tax, no capital gains tax, no withholding tax, no personal income tax, no inheritance tax, and no wealth tax, and there is no crypto-specific tax. For an operating VASP, net trading profits, custody fees and exchange spreads earned by the Vanuatu entity are untaxed locally; VAT at 15% bites only where services are supplied to Vanuatu residents. The structural zero-tax position is a defining feature, but it is not the end of the analysis.

International Tax Caveats

Tax residence of beneficial owners, controlled foreign company (CFC) rules in home jurisdictions, the OECD Common Reporting Standard, and FATCA all need to be managed. Vanuatu implements automatic exchange of information, and its April 2026 upgrade to Largely Compliant on the OECD Global Forum’s peer review strengthens its tax-information-exchange standing.

EU Non-Cooperative Jurisdiction Status

Vanuatu sits on the EU’s Annex I list of non-cooperative tax jurisdictions, last confirmed 17 February 2026. That listing triggers EU Member State counter-measures including withholding taxes, non-deductibility of payments to Vanuatu entities, and CFC inclusion. The EU posture has hardened on the visa side too: the Council ended the Schengen visa exemption for Vanuatu passport holders in December 2024, citing concerns linked to the now-suspended Citizenship by Investment programme. Operators with material EU shareholders or EU customer-facing structures should model these counter-measures into post-tax projections rather than treating the 0% headline rate as conclusive.

Ongoing Compliance

A licensed Vanuatu VASP carries a substantial ongoing burden, and the penalties for missing it are real: late filing carries VT 100,000 per day per report, and the Commissioner retains discretionary suspension and revocation powers.

Reporting and Audit

• Quarterly reports to the Commissioner under section 54 of the VASP Act.
• Annual audited financial statements under section 63.
• An annual technology and DLT audit by an external auditor, covering wallet management, key management, custody architecture, transaction monitoring and disaster-recovery testing.
• Annual filing of the Group-Wide Procedure Manual to the VFIU by 31 March.

AML, CFT and Governance

• Risk-based customer due diligence, with enhanced due diligence for higher-risk customers and transactions.
• Suspicious Transaction Reports, Cash Transaction Reports, and International Funds Transfer Instructions to the VFIU.
• The FATF Recommendation 16 Travel Rule: transmission of originator and beneficiary information for transfers above USD/EUR 1,000.
• Beneficial-ownership registration with the VFSC, client-asset segregation, books and records kept in Vanuatu, and continuous maintenance of the capital floor.
• Notice to the Commissioner for any change in control, beneficial ownership, key personnel, business model, or registered address.

The framework is lighter than the EU operational-resilience regime but functionally aligned, so an EU-licensed operator’s ICT risk register, business continuity plan and third-party register translate directly into VFSC expectations. The cybersecurity policy, the application-stage technology audit and the annual DLT audit all carry real weight, and are not controls to retrofit in Year 2.

Banking Reality

Banking is the hardest operational hurdle for a Vanuatu-licensed crypto entity, and a licence without banking access is a certificate on the wall. The combined effect of the EU AML high-risk listing (continuous since 2016), the EU Annex I tax listing, and the broader de-risking of Pacific correspondent banking means Tier-1 European and US correspondent banks do not, as a rule, onboard Vanuatu VASPs directly. The VFSC grants permission to operate, but banks decide independently whether to accept the licensee as a customer.

A realistic Vanuatu banking architecture, in descending order of accessibility, combines local Vanuatu operating accounts for payroll, tax and supplier settlement; a licensed EMI or specialist payment institution in a jurisdiction outside the EU enhanced-due-diligence perimeter; and offshore specialist banks that service VASP licensees, accepting some concentration and counterparty risk. For an EU-customer-focused operator, the honest conclusion is usually that this architecture cannot sustain the model, and that capital is better directed to a CASP authorisation in an EU Member State.

International Standing & EU Market Access

Vanuatu is FATF-clear: it was removed from the FATF grey list on 29 June 2018 and remains off both the grey and black lists as of the February 2026 Plenary. The constraints that matter commercially are EU instruments, not FATF ones: the EU AML high-risk third-country list (continuous since 2016) and the EU Annex I non-cooperative tax jurisdictions list (retained February 2026). The offshore comparators most often cited are not on the EU AML high-risk list, so this is a genuine point of difference for Vanuatu.

Two pending events shape the picture. Vanuatu’s next APG Mutual Evaluation onsite is scheduled for November 2026, and its outcome is the single most consequential event for the jurisdiction, determining whether it enters the next FATF cycle with grey-list risk or a strengthened position. On the tax side, the OECD Global Forum upgraded Vanuatu to Largely Compliant on exchange of information in April 2026, which improves its standing without yet unlocking Annex I delisting.

No EU Passporting

A Vanuatu VASP licence confers no EU passporting rights. MiCA contains no third-country equivalence regime, so there is no mechanism for the European Commission to recognise a non-EU licence as equivalent to a MiCA authorisation. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative, and ESMA’s February 2025 Guidelines interpret this restrictively: EU-targeted marketing, EU-language website content, geo-targeted advertising, app-store availability or EU-based influencers all void the exemption. It is designed for isolated contacts, not systematic EU market access, which needs a separate CASP authorisation in an EU Member State. For the detail, see Reverse Solicitation Under MiCA →.

Advantages and Limitations

• Zero corporate tax. No corporate income tax, capital gains tax or withholding tax. The structural tax position is a defining feature.
• Modern framework. Five licence classes plus ITO, with FATF Recommendation 15 alignment built in.
• Single regulator. The VFSC is the sole licensing authority, with no fragmented oversight between corporate, securities and AML regulators.
• FATF-clear status. Off the grey list since 2018 and never black-listed, which helps relative to grey-listed Pacific peers.
• × No EU passporting. A Vanuatu licence confers no EU market access. Operators targeting EU clients need a separate CASP authorisation in an EU Member State, or must fall within the narrow MiCA Article 61 reverse solicitation exemption.
• × EU AML high-risk and Annex I listings. These trigger EU enhanced due diligence and Member State tax counter-measures such as withholding taxes, non-deductibility and CFC inclusion. EU-facing functions and shareholder distributions need to be structured and modelled around them.
• × High cost of entry. Government fees alone exceed USD 1m per class, plus the VT 200,000,000 capital floor and a year of substance investment before grant. The Fintech Sandbox is a lower-cost route for early-stage product validation.
• × Banking complexity. EU correspondent access is effectively closed; viable architecture relies on local accounts plus EMIs and specialist banks outside the EU perimeter, planned from day one rather than as an afterthought.
• × APG Mutual Evaluation pending. The November 2026 onsite outcome could shift the FATF risk picture either way; an AML programme built above the current floor is the sensible hedge.

How Vanuatu Compares

Vanuatu sits in the emerging-offshore peer cluster alongside Marshall Islands, Comoros (Anjouan) and Saint Lucia. Of the four, it has the most substantive regulatory framework and the highest cost base. None of the three matches its depth, but all three undercut it on cost and timeline.

Cross-tier reference: Labuan (Malaysia). For operators with the capital and timeline tolerance for a more institutionally-credible Asia-Pacific licence, Labuan offers a higher-substance, more banking-friendly alternative under the Labuan Financial Services and Securities Act framework: see the full Labuan licensing guide →.

When Vanuatu Fits, and When It Does Not

Vanuatu makes sense for an Asia-Pacific or Pacific institutional customer base, capital readiness above roughly USD 2m across capital, fees and Year-1 substance, and an operator able to commit to 12 months of on-island substance before grant. It is the wrong choice for materially EU-exposed customer bases, where a MiCA CASP route through Estonia or Cyprus fits better; for low-cost, low-substance offshore needs, where Comoros or Saint Lucia undercut it; for easier Asia-Pacific banking, where Labuan or Hong Kong are stronger; and for anyone needing a path to market in under six months.

Frequently Asked Questions

Banking & Payments

A company and a licence still need a bank account

Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.

Explore banking & payments →

Related

• Crypto Licensing: VASP, CASP, MiCA: the jurisdictions we deliver in across the EU and beyond
• Company Formation: entity formation aligned with your licensing target
• Crypto Exchange Solutions: end-to-end structuring for exchange operators
• Reverse Solicitation Under MiCA: what Article 61 does and does not permit