← Regulations / Cayman Islands / Operating Models / CEX

Centralized exchange in Cayman Islands

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in Cayman Islands with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Full VASP license required (not just registration) since April 1, 2025 — custody + trading platform operations trigger the highest-tier 'virtual assets service licence' with a grant fee of 100,000 KYD (~120,000 USD).
  • Zero-threshold Travel Rule: applies to ALL virtual asset transfers (USD 0 threshold); must exchange originator and beneficiary identification/verification data on every transfer.
  • Mandatory local AML compliance officer; annual AML audits; fit-and-proper checks on all owners/directors/shareholders (passports, CVs, non-criminal records, professional references).
  • Records of transfer data must be maintained for at least 5 years.
  • Sanctions screening required: screen customers, counterparties, and transactions against UK sanctions lists (mirroring UN/EU + standalone UK regimes), Cayman autonomous terrorist lists under Terrorism Law (2018 Revision), and Proliferation Financing (Prohibition) Act (2017 Revision). OFAC lists not legally binding but recommended for secondary-risk screening.
  • Reporting freezing orders and any relationships/transactions involving designated persons to the Cayman Islands Financial Reporting Authority (FRA).
  • Travel Rule compliance plan must be submitted to CIMA (deadline was March 31, 2022); ongoing compliance details must be filed.

Key Restrictions

  • Must incorporate a Cayman entity (e.g., exempted company) with a registered office in the Cayman Islands.
  • No physical office or local staff mandate, but at least one CIMA-approved director required (especially for custody operations).
  • Stablecoins are classified as virtual assets under the VASP Act; if they confer redemption/conversion rights or are pegged to securities, they may be dual-classified as securities under SIBA, requiring both a VASP license and SIBA authorization.
  • Public offerings of virtual assets without prior CIMA authorization are prohibited.
  • Business plans including issuance require CIMA approval under Section 9 of the VASP Act (Revision 2024); changes require prior consent.
  • No specific reserve or redemption rules for stablecoins — general VASP licensing applies, but securities-law triggers exist for redeemable/convertible structures.
  • Algorithmic stablecoins fall under general virtual asset treatment per the VASP Act with no distinct rules.

Key Risks

  • Dual-classification risk — stablecoins or tokenized assets that confer redemption/conversion rights may require both VASP and SIBA authorization, creating a complex dual-licensing path.
  • OFAC extraterritorial enforcement risk — CIMA advises VASPs to note OFAC's reach due to global USD/crypto exposure, even though not locally binding; sanctions screening gaps are a common compliance failure.
  • Court-supervised liquidations of crypto entities have occurred (AXIA Group, April 2025), demonstrating that operational failure leads to costly insolvency proceedings under Cayman law.
  • No standalone Cayman crypto sanctions list — VASPs must track multiple overlapping UK, UN, and local lists; errors in list selection are a known compliance gap.
  • Increasing CIMA administrative fines trend post-2022 amendments; penalties for Travel Rule or AML breaches can be material.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 40% confidence

Exchanges/Trading Platforms: Full VASP license required if operating a virtual asset trading platform under the VASP Act; grant fee of 100,000 KYD (~120,000 USD).

licensing 40% confidence

Custody Providers: Full VASP license mandatory; grant fee of 30,000 KYD (~36,000 USD).

licensing 40% confidence

Payment Processors: Registration suffices for basic services without custody or trading (e.g., transfers); license needed if involving custody or platforms. Fees start at 1,500–15,000 KYD for registration, up to 200,000 KYD for licenses based on scale.

licensing 40% confidence

Capital: No fixed minimum share capital generally required, though CIMA may demand proof of adequate net assets; one source notes 100,000 USD minimum paid-up capital.

licensing 40% confidence

AML/KYC: Mandatory local AML compliance officer; annual AML audits; fit-and-proper checks on owners/directors/shareholders (KYC docs, non-criminal records, references).

licensing 40% confidence

Local Presence: Registered office in Cayman Islands required; no physical office, local staff, or residency mandates; at least one CIMA-approved director (especially for custody).

licensing 40% confidence

Incorporate Cayman entity (e.g., exempted company) with registered office.

licensing 40% confidence

Virtual Asset (Service Providers) Act (VASP Act): https://www.cima.ky/upimages/regulatorymeasures/RegulatoryPolicy-RegistrationorLicensingofVASPs_1716492494.pdf

licensing 40% confidence

Issuers providing virtual asset services (e.g., issuance, sale) in or from the Cayman Islands must register or obtain a VASP license from CIMA; since April 1, 2025, custody services and trading platforms require a full "virtual assets service licence" (previously registration).

licensing 40% confidence

Stablecoins are classified as virtual assets under the VASP Act, as they represent digital value not as fiat currency but pegged to assets like fiat or securities; they are not explicitly e-money or payment tokens.

licensing 40% confidence

If conferring specific rights (e.g., redemption or conversion), or pegged to securities, they may be classified as securities under the Securities Investment Business Act (SIBA), requiring dual VASP and SIBA authorization from CIMA.

licensing 40% confidence

Business plans, including issuance, need CIMA approval under Section 9 of the VASP Act (Revision 2024); changes require prior consent, and public offerings without authorization are prohibited.

licensing 40% confidence

No specific reserve requirements for stablecoins are mentioned; regulation focuses on general VASP compliance rather than stablecoin-specific backing mandates.

licensing 40% confidence

No explicit rules on redemption rights; however, if a stablecoin structure includes redemption or conversion rights, it may trigger securities classification under SIBA.

licensing 40% confidence

No distinct rules identified; algorithmic stablecoins fall under general virtual asset treatment per the VASP Act, subject to the same licensing and oversight.

aml 60% confidence

Adopted and Effective Date: Adopted via the Anti-Money Laundering (Amendment) (No. 2) Regulations, 2020, with Part XA commencing on July 1, 2022. CIMA issued guidance requiring VASPs to submit compliance plans by March 31, 2022.

aml 60% confidence

Threshold Amounts: USD 0; applies to all virtual asset transfers, defined as any transaction on behalf of an originator to make virtual assets available to a beneficiary.

aml 60% confidence

VASPs Covered: All VASPs registered or applying for registration/licensing with the Cayman Islands Monetary Authority (CIMA), including obliged entities under the 2020 VASP Act (e.g., cryptocurrency exchanges, trading platforms, custodians). Covers transfers involving VASPs, other obliged entities, or non-obliged entities.

aml 60% confidence

Technical Implementation Requirements: VASPs must exchange specific originator and beneficiary data (e.g., identification, verification info) during transfers, maintain records for at least 5 years, and implement policies, procedures, and technological tools. Registrants submit compliance details to CIMA via email (vaspinfo@cima.ky) or REEFS portal (APP 101-84 Schedule E). Aligns with FATF Recommendation 16 and 2021 FATF guidance on private wallets, NFTs, and DeFi.

aml 60% confidence

Primary Legislation: Anti-Money Laundering Regulations (as revised), Part XA; Anti-Money Laundering (Amendment No. 2) Regulations, 2020.

aml 60% confidence

CIMA Guidance: Travel Rule Requirements notice (Feb 22, 2022); Sector Specific Guidance on VASPs (Sept 2023 revision); Guidance Notes on Prevention of Money Laundering/ Terrorist Financing (amendments).

enforcement 60% confidence

Court-supervised liquidations (April 3, 2025): Cayman Grand Court ordered supervised liquidations of AXIA Network Foundation (ANF) and ANF MergeCo Ltd (crypto entities in the failed Axia Group) for efficacy in stakeholder interests; no regulatory penalty specified.

enforcement 60% confidence

Freezing assets and reporting relationships or transactions involving designated persons/entities to the Cayman Islands Financial Reporting Authority (FRA), per the Terrorism Act (2018 Revision) and Proliferation Financing (Prohibition) Act (2017 Revision).

enforcement 60% confidence

Implementing sanctions screening policies under the Anti-Money Laundering Regulations (2020 Revision) for entities conducting "relevant financial business," including checks against UK/Cayman lists (not just EU/UN/OFAC).

enforcement 60% confidence

CIMA advises FSPs (including VASPs) to note OFAC's extraterritorial reach due to global USD/crypto transaction risks, though not legally binding locally; no crypto-specific exemptions apply under international regimes.

enforcement 60% confidence

All Cayman persons/entities (including VASPs) must screen customers, counterparties, and transactions against applicable lists: UK sanctions (mirroring pre-Brexit EU/standalone UK regimes + UN), plus Cayman autonomous terrorist lists under Terrorism Law (2018 Revision), Proliferation Financing (Prohibition) Law (2017 Revision), and Proceeds of Crime Law (2020 Revision).

enforcement 60% confidence

Guidance on Targeted Financial Sanctions (FRA): Details reporting/freezing duties; available via CIMA/FRA resources linked at https://www.cima.ky/sanctions-overview.

enforcement 60% confidence

No standalone Cayman crypto list; relies on CIMA's published consolidated list of UK-extended Orders: https://www.cima.ky/sanctions-overview.

enforcement 60% confidence

OFAC crypto designations (e.g., SUEX exchange, Blender mixer) are not binding but recommended for screening due to secondary risks: https://ofac.treasury.gov/sanctions-programs-and-country-information and https://sanctionssearch.ofac.treas.gov.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange can operate in/from the Cayman Islands only after obtaining a full VASP license (custody + trading platform) from CIMA, incorporating a Cayman entity, appointing a local AML compliance officer and CIMA-approved director, and implementing zero-threshold Travel Rule compliance and multi-list sanctions screening.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?