Crypto-funded debit card in Bermuda
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Bermuda with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- KYC/AML obligations under the Proceeds of Crime (AML/ATF Financing) Regulations 2008
- Customer due diligence (CDD) on all cardholders, including beneficial ownership checks
- Ongoing transaction monitoring and reporting of suspicious transactions to the Financial Intelligence Authority (FIA) of Bermuda
- Record-keeping requirements for at least 5 years under POCA Regulations
- Compliance with Digital Asset Business (Client Disclosure) Rules 2018 for disclosure and transparency to customers
- Segregation of client digital assets and fiat funds as required under DABA and supporting prudential standards
- Appointment of a BMA-approved AML Compliance Officer and submission of annual AML/ATF returns
Key Restrictions
- Must hold a DABA license (Class T, M, or F) from the BMA for digital asset business activities including the crypto-to-fiat conversion/off-ramp
- May also require a Payment Services Act (PSA) license or equivalent e-money/payment-institution authorization once PSA is enacted; current regime does not have a standalone e-money license — payment services using digital assets are captured under DABA
- Must comply with the Digital Asset Business Single Currency Pegged Stablecoin (SCPS) Guidance (Nov 2024) if using a stablecoin as the conversion intermediary
- Crypto-to-fiat conversion at point-of-sale is a regulated digital asset business activity (payment service using digital assets) under DABA
- Must partner with a BIN-sponsor (e.g., Mastercard/Visa issuer) and a bank to issue fiat-denominated cards; BMA expects segregation of client fiat funds, potentially through a trust or licensed bank arrangement
- Economic substance rules apply — must have a physical office, directors, and operational management in Bermuda
- Public offering/issuance of the underlying digital asset token (if any) would require BMA authorization under DAIA if sold to >35 persons
Key Risks
- Bittrex Global enforcement demonstrates BMA's willingness to wind up DABA licensees for non-compliance with asset segregation and AML obligations — similar risks apply to card programs holding client funds
- Unlicensed operation carries fines up to US$250,000 and/or 5 years imprisonment; DABA breaches up to US$10,000,000
- Regulatory ambiguity around whether a crypto debit card requires multiple licenses (DABA + PSA when enacted) — no established precedent for this model in Bermuda
- Partner-bank/BIN-sponsor arrangements may be difficult given Bermuda's small domestic banking market; likely need to source from international issuers
- No standalone e-money license yet — PSA is proposed but not in force; reliance on DABA may leave gaps in the fiat-side regulatory treatment
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Digital Asset Business Act 2018 (DABA): Core licensing framework.
Digital Asset Business Act (DABA, 2018): Establishes licensing for "digital asset businesses" (broadly defined to include exchanges, trading, custody, issuance, stablecoins, and more) conducted in or from Bermuda; applies to entities incorporated inside or outside Bermuda.
Digital asset businesses in Bermuda (e.g., issuing, selling, redeeming tokens, exchanges, wallets, payment services) require licensing under the Digital Asset Business Act (DABA), with Class T (sandbox), Class M (modified), or Class F (full) licenses available. However, the stated minimum net assets of $100,000 and fees ($1,000 for Class T, $2,266 for Class M/F) are likely outdated; current evidence shows a Class F license has been actively issued and stablecoin/stellar blockchain initiatives are underway, indicating regulatory evolution that may have altered these specific requirements.
Digital Asset Business Single Currency Pegged Stablecoin (SCPS) Guidance (Nov 2024): Prudential standards for reserves, attestations, resilience
Proposed Payment Services Act (PSA): Regulates payments/digital wallets, with DABA exemptions and stablecoin options
Supporting rules (2018): Digital Asset Business (Cybersecurity) Rules, (Client Disclosure) Rules, (Prudential Standards) (Annual Return) Rules.
Additional: Proceeds of Crime (AML/ATF Financing) Regulations 2008 for anti-money laundering.
Digital Asset Issuance Act (DAIA): Issuer-specific regime.
Public offerings/issuances: ICOs or public sales (e.g., to >35 persons) need BMA authorization under DAIA; exemptions available via section 16(2) filing. Bermuda-incorporated entities only; no physical presence required, but economic substance rules apply.
ICOs are restricted activities needing BMA approval; no physical presence required, but economic substance rules apply.
Digital Asset Business Act (DAB Act, 2018): Requires licensing from the Bermuda Monetary Authority (BMA) for activities like issuing/selling digital assets, operating exchanges, custodial wallets, or payment services using digital assets. Licensed entities must segregate client assets, maintain bonds/insurance, and comply with cybersecurity/prudential rules.
Regulator: Bermuda Monetary Authority (BMA).
Entity targeted: Bittrex Global (Bermuda) Ltd (Class F Full DABA licensee, ceased operations in 2024). Violation type: Non-compliance with DABA requirements, including segregation of digital assets in the "Andromeda Omnibus Wallet," Digital Asset Custody Code of Practice (2019), AML/ATF, KYC, and UN Sanctions protocols (identified via 2022 onsite inspections). Penalty amount: Not specified in sources.
Fines up to US$250,000 and/or 5 years imprisonment for unlicensed digital asset business.
Fines up to US$10,000,000 for DABA breaches or non-compliance with BMA directions.
AML/ATF violations (e.g., POCA Regulations): Up to 2 years imprisonment and/or US$750,000 fine; BMA civil penalty up to US$10 million per failure.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card program can operate in Bermuda but requires a DABA license (Class T/M/F) for the digital asset payment service/off-ramp, with entity incorporation in Bermuda, economic substance, full AML/ATF compliance under POCA Regulations, and a partner-bank/BIN-sponsor arrangement for fiat card issuance; the proposed Payment Services Act may eventually add a dedicated e-money/payment license requirement.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?