Custodial wallet / SaaS in Saint Lucia

Financial Services Regulatory Authority (FSRA): The FSRA is the supervisory authority for the non-banking financial sector in Saint Lucia. Any entity undertaking financial services activities, including those involving virtual assets, would likely come under their purview, especially concerning Anti-Money Laundering/Combating the Financing of Terrorism (AML/CFT) obligations.

Money Services Business Act (MSBA): This Act regulates entities providing money transmission services, currency exchange, and cheque cashing.

Relevance: Companies facilitating fiat-to-crypto or crypto-to-fiat conversions, or those offering cryptocurrency-based remittance services, are highly likely to be considered a "money services business" and thus require a license under the MSBA.

Key Requirement: License from the FSRA.

Money Laundering (Prevention) Act: This is the overarching legislation that applies to ALL financial institutions and designated non-financial businesses and professions (DNFBPs) in Saint Lucia, including those handling virtual assets, whether specifically licensed or not. It mandates AML/CFT compliance.

Relevance: Any entity involved in virtual assets, regardless of whether it requires a specific "license" for its core activity, must comply with AML/CFT requirements (customer due diligence, suspicious transaction reporting, record-keeping, etc.).

Companies Act / International Business Companies Act: These acts govern the general registration and operation of companies in Saint Lucia. A VASP would first need to be incorporated under one of these acts.

Current Status: No specific license for pure "digital asset custody" exists.

Potential Interpretations: If the custody involves managing client funds in a fiduciary capacity, it could potentially fall under trust company regulations, though this is a stretch for typical crypto custody. More likely, it would be an unregulated activity per se but still subject to strict AML/CFT obligations. The FSRA would be the point of contact for clarification.

Capital Requirements: The MSBA typically specifies minimum share capital requirements. For instance, many Caribbean MSB acts require paid-up capital in the range of US$100,000 to US$250,000, depending on the scope of activities. Specific figures would need to be confirmed with the FSRA.

Development and implementation of robust AML/CFT policies, procedures, and controls.

Appointment of a qualified Anti-Money Laundering Compliance Officer (AMLCO) and a reporting officer.

Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures.

Ongoing monitoring of transactions.

Virtual Asset Business Act (VABA), 2020: This Act establishes a regulatory and licensing framework for entities engaging in virtual asset businesses in Saint Lucia. It mandates that licensed VASPs comply with AML/CFT requirements, including customer due diligence and record-keeping, which are foundational to the Travel Rule.

Money Laundering (Prevention) Act (Chapter 12.20 of the Revised Laws of Saint Lucia, as amended): This is the overarching AML/CFT legislation. The VABA brings VASPs under the purview of this Act and its associated regulations, meaning VASPs must apply the same AML/CFT obligations as traditional financial institutions.

Money Laundering (Prevention) Regulations: These regulations, issued under the Money Laundering (Prevention) Act, provide more detailed requirements for all reporting entities, including VASPs, regarding CDD, record-keeping, suspicious transaction reporting, and funds transfer information.

All cross-border virtual asset transfers: The Travel Rule applies to all cross-border virtual asset transfers, regardless of amount. This means originator and beneficiary information must be collected and transmitted for every transaction.

Domestic virtual asset transfers: For domestic transfers, the Travel Rule typically applies to transfers equal to or exceeding USD 1,000 (or its equivalent in other currencies/virtual assets).

Custody and/or administration of virtual assets or instruments enabling control over virtual assets.

Required Information (for Originator): Name, account number (or unique transaction identifier/wallet address), physical address or national identification number or customer identification number, and where appropriate, date and place of birth.

Required Information (for Beneficiary): Name, account number (or unique transaction identifier/wallet address).

Secure Transmission: VASPs are expected to establish policies and procedures to ensure the secure collection, storage, and transmission of this information to counterparty VASPs or designated authorities upon request.

Record Keeping: All transaction and customer information, including Travel Rule data, must be retained for at least five (5) years.

Interoperability: VASPs are expected to engage in solutions that allow for interoperability to send and receive the required Travel Rule data, acknowledging that various industry solutions are emerging (e.g., TRISA, OpenVASP, Sygna).

Administrative Penalties: Fines, directives, warnings, public reprimands, or conditions placed on licenses. The FSRA, as the supervisory authority, has the power to impose these.

Criminal Penalties: For serious offenses such as operating without a license, failure to implement proper AML/CFT controls, falsifying information, or complicity in money laundering. These can include:

Fines: Substantial monetary penalties for individuals and corporations. For instance, the VABA specifies fines of up to XCD 250,000 for individuals and XCD 500,000 for bodies corporate for certain offenses.

Imprisonment: For individuals, up to several years in prison for serious breaches.

License Revocation: The FSRA can revoke or suspend a VASP's license, effectively preventing it from operating in Saint Lucia.

Early Stages of Regulation: The VABA is relatively new, and the FSRA may still be in the initial phases of implementing and enforcing its provisions, focusing on awareness and licensing rather than punitive actions.

Focus on Public Warnings: Many smaller jurisdictions prioritize issuing public warnings about unregulated entities rather than formal enforcement actions with fines, especially if the entities are not locally incorporated or easily subject to local jurisdiction.

Market Size: The cryptocurrency market in Saint Lucia might be smaller compared to major global financial centers, potentially leading to fewer high-profile violations that warrant significant public enforcement.