← Regulations / Mauritius / Operating Models / Crypto debit card

Crypto-funded debit card in Mauritius

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Mauritius with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Customer identification and verification: obtain full name, date of birth, place of birth, nationality, residential address, unique ID (passport/national ID) from natural persons; legal name, legal form, proof of incorporation, address, director info for legal entities (mu.aml.identification-and-verification-of-customers, mu.aml.natural-persons-full-name-date, mu.aml.legal-entities-legal-name-legal)
  • Beneficial ownership identification: identify and verify natural persons owning/controlling 25%+ of the customer entity (mu.aml.beneficial-ownership-identification, mu.aml.identify-and-take-reasonable-measures, mu.aml.for-legal-entities-this-means)
  • Ongoing transaction monitoring: continuously monitor business relationships and update customer information (mu.aml.continuously-monitor-the-business-relationship, mu.aml.regularly-update-customer-information-and)
  • Enhanced Due Diligence (EDD) for PEPs, high-risk geographies, anonymity-favouring technologies, and complex/unusually large transactions (mu.aml.enhanced-due-diligence-edd, mu.aml.customers-who-are-politically-exposed, mu.aml.customers-from-high-risk-geographic-areas, mu.aml.transactions-involving-new-or-developing, mu.aml.complex-unusually-large-transactions-or)
  • Mandatory suspicious transaction reporting to the Financial Intelligence Unit under FIAMLA 2002 (mu.aml.the-financial-intelligence-and-anti-money)
  • Maintain comprehensive AML/CFT policies and procedures as required under VAITOS Act and FSC Rules (mu.aml.fsc-rules-for-virtual-asset)
  • Record-keeping for client identification, transactions, and beneficial ownership data (mu.aml.identification-and-verification-of-customers)

Key Restrictions

  • Must obtain a VASP license under the VAITOS Act 2021 from the FSC, covering Custodian Wallet Services (for holding crypto) and Transferring Virtual Assets (for the off-ramp/conversion) (mu.licensing.virtual-asset-and-initial-token, mu.stablecoin.operating-a-virtual-asset-exchange, mu.stablecoin.transferring-virtual-assets, mu.stablecoin.providing-custodian-wallet-services-if)
  • Minimum stated capital of MUR 1,500,000 (~USD 37,500) if providing Custodian Wallet Service (mu.licensing.minimum-stated-capital-schedule-1, mu.licensing.a-licensee-providing-custodian-wallet)
  • Client virtual assets and fiat money must be segregated from the licensee's own assets, held in separate accounts (mu.licensing.vaitos-act-2021-section-131g, mu.licensing.fsc-rules-vaitos-2022-rule)
  • The crypto-to-fiat conversion leg (off-ramp) likely requires assessment under the National Payment Systems Act 2018 if the issuance of e-money or operation of a payment system is involved (mu.stablecoin.e-money-if-a-stablecoin-primarily, mu.stablecoin.reference-national-payments-system-act)
  • A partner bank or BIN sponsor arrangement would need to be structured through a licensed entity; the VASP itself cannot issue card products without a payment/e-money license from the Bank of Mauritius if that product involves e-money issuance
  • Incorporation in Mauritius as a company required for FSC licensing (mu.licensing.licensing-process-applicants-must-submit)

Key Risks

  • Dual or uncertain regulatory jurisdiction: the crypto off-ramp is regulated by the FSC (VAITOS Act) while the fiat card/payment issuance may fall under the Bank of Mauritius (National Payment Systems Act), creating potential gaps or overlapping requirements
  • No explicit crypto-funded debit card framework exists yet; the operating model must be assembled from VASP licensing + payment system rules, creating regulatory ambiguity
  • FSC has a history of issuing public warnings against unlicensed virtual asset activities and may view crypto-card products as high-risk due to the payment/crypto nexus (mu.enforcement.issuing-warnings-against-unregulated-activities, mu.enforcement.entity-targeted-the-general-public)
  • Mauritius exited FATF grey list in 2021 but remains under scrutiny — enforcement expectations for VASPs are high and license revocation is a real risk for non-compliance (mu.enforcement.entity-targeted-all-financial-institutions)
  • Tax risk: if the off-ramp/conversion activity is deemed 'trading as a business', profits are taxable at up to 15% corporate rate; crypto used for purchases triggers VAT on the underlying goods (mu.tax.trading-as-a-business-if, mu.tax.using-crypto-for-purchases-if)

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Definition of Custodian Wallet Service (Section 2, VAITOS Act 2021): "a service to safeguard virtual assets or instruments enabling control over virtual assets, on behalf of natural or legal persons."

licensing 60% confidence

VAITOS Act 2021 (Section 13(1)(g)): A VASP shall "manage client virtual assets and money received from clients in a manner that protects the interests of clients, and, in particular, ensures that they are segregated from the assets of the VASP."

aml 60% confidence

The Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS Act 2021): This is the cornerstone legislation specifically regulating virtual assets and VASPs. It designates VASPs as "reporting entities" and brings them under the scope of AML/CFT obligations. It provides for the licensing, regulation, and supervision of VASPs by the Financial Services Commission (FSC).

aml 60% confidence

The Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA 2002) (as amended): This is the overarching AML/CFT legislation in Mauritius. It establishes the general AML/CFT framework, defines "money laundering," sets out the obligations of reporting entities (including VASPs by virtue of the VAITOS Act), and empowers the Financial Intelligence Unit (FIU).

aml 60% confidence

Identification and Verification of Customers:

aml 60% confidence

Natural Persons: Full name, date of birth, place of birth, nationality, residential address, unique identification number (e.g., passport, national ID card). Verification requires independent, reliable source documents (e.g., certified copies of ID, utility bills).

aml 60% confidence

Legal Entities: Legal name, legal form, proof of incorporation/registration, address of registered office and principal place of business, names of directors/partners/trustees, and identification of individuals authorized to act on behalf of the entity. Verification typically involves corporate documents.

aml 60% confidence

Beneficial Ownership Identification:

aml 60% confidence

Identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer.

aml 60% confidence

For legal entities, this means identifying the natural person(s) who ultimately own or control 25% or more of the entity, or who otherwise exercise control through other means.

aml 60% confidence

Continuously monitor the business relationship to ensure that transactions being conducted are consistent with the VASP's knowledge of the customer, their business and risk profile, including, where necessary, the source of funds.

aml 60% confidence

Regularly update customer information and beneficial ownership data.

aml 60% confidence

Enhanced Due Diligence (EDD):

aml 60% confidence

Customers who are Politically Exposed Persons (PEPs), their family members, or close associates.

aml 60% confidence

Customers from high-risk geographic areas (as identified by FATF or local regulators).

aml 60% confidence

Transactions involving new or developing technologies or products that favour anonymity.

aml 60% confidence

Complex, unusually large transactions, or unusual patterns of transactions that have no apparent economic or lawful purpose.

stablecoin 60% confidence

Virtual Asset: The VAITOS Act defines a "Virtual Asset" as "a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes and includes a digital representation of value which is used as a medium of exchange, a unit of account or a store of value." Most stablecoins, by nature, fit this broad definition, particularly asset-backed ones.

stablecoin 60% confidence

Reference: Virtual Asset and Initial Token Offering Services Act 2021, Section 2.

stablecoin 60% confidence

E-money: If a stablecoin primarily functions as electronic money, representing a claim on fiat currency and used for payment services (e.g., a fiat-backed stablecoin directly redeemable 1:1 for a national currency and widely accepted for payments), it could fall under the purview of the Bank of Mauritius (BOM) and the National Payment Systems Act 2018. The BOM regulates e-money issuers and payment service providers. This could lead to a dual licensing requirement (FSC for Virtual Asset Service Provider and BOM for e-money issuer) or require clarification from authorities.

Evidence fact mu.stablecoin.reference-national-payments-system-act not found (may have been renamed).

stablecoin 60% confidence

Client Asset Segregation: VASPs are required to segregate client assets from their own, which is crucial for the security of stablecoin backing.

enforcement 60% confidence

Entity Targeted: The General Public and Unlicensed Entities. Violation Type: Engaging in or promoting unregulated virtual asset services, pyramid schemes, or other illicit activities involving virtual assets. Penalty Amount: N/A (warnings do not carry a direct penalty amount for the warning itself, but non-compliance with regulations could lead to severe penalties or legal action if a regulated entity were involved).

enforcement 60% confidence

Entity Targeted: All financial institutions and VASPs subject to AML/CFT regulations. Violation Type: Previous strategic deficiencies in the AML/CFT regime identified by FATF. Penalty Amount: N/A (the "penalty" was the grey-listing itself, which impacted the country's financial reputation).

tax 60% confidence

Trading as a Business: If an individual or company engages in frequent, systematic, and organised trading of cryptocurrencies with the intention of generating profits (e.g., day trading, arbitrage, professional speculation), the profits will be taxed as business income.

tax 60% confidence

Using Crypto for Purchases: If cryptocurrency is used as a medium of exchange to purchase goods or services, the VAT applicable to the underlying goods or services remains payable in MUR. The crypto merely acts as payment; it does not change the VAT status of the underlying transaction.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card is permitted in Mauritius but requires a VASP license under the VAITOS Act 2021 (covering custodian wallet and virtual asset transfer services) with MUR 1.5M minimum capital, full AML/CFT compliance as a reporting entity, and likely additional payment/e-money licensing from the Bank of Mauritius for the fiat card issuance leg, with no dedicated crypto-card framework yet established.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?