Crypto-funded debit card in Mauritius
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Mauritius with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification: obtain full name, date of birth, place of birth, nationality, residential address, unique ID (passport/national ID) from natural persons; legal name, legal form, proof of incorporation, address, director info for legal entities (mu.aml.identification-and-verification-of-customers, mu.aml.natural-persons-full-name-date, mu.aml.legal-entities-legal-name-legal)
- Beneficial ownership identification: identify and verify natural persons owning/controlling 25%+ of the customer entity (mu.aml.beneficial-ownership-identification, mu.aml.identify-and-take-reasonable-measures, mu.aml.for-legal-entities-this-means)
- Ongoing transaction monitoring: continuously monitor business relationships and update customer information (mu.aml.continuously-monitor-the-business-relationship, mu.aml.regularly-update-customer-information-and)
- Enhanced Due Diligence (EDD) for PEPs, high-risk geographies, anonymity-favouring technologies, and complex/unusually large transactions (mu.aml.enhanced-due-diligence-edd, mu.aml.customers-who-are-politically-exposed, mu.aml.customers-from-high-risk-geographic-areas, mu.aml.transactions-involving-new-or-developing, mu.aml.complex-unusually-large-transactions-or)
- Mandatory suspicious transaction reporting to the Financial Intelligence Unit under FIAMLA 2002 (mu.aml.the-financial-intelligence-and-anti-money)
- Maintain comprehensive AML/CFT policies and procedures as required under VAITOS Act and FSC Rules (mu.aml.fsc-rules-for-virtual-asset)
- Record-keeping for client identification, transactions, and beneficial ownership data (mu.aml.identification-and-verification-of-customers)
Key Restrictions
- Must obtain a VASP license under the VAITOS Act 2021 from the FSC, covering Custodian Wallet Services (for holding crypto) and Transferring Virtual Assets (for the off-ramp/conversion) (mu.licensing.virtual-asset-and-initial-token, mu.stablecoin.operating-a-virtual-asset-exchange, mu.stablecoin.transferring-virtual-assets, mu.stablecoin.providing-custodian-wallet-services-if)
- Minimum stated capital of MUR 1,500,000 (~USD 37,500) if providing Custodian Wallet Service (mu.licensing.minimum-stated-capital-schedule-1, mu.licensing.a-licensee-providing-custodian-wallet)
- Client virtual assets and fiat money must be segregated from the licensee's own assets, held in separate accounts (mu.licensing.vaitos-act-2021-section-131g, mu.licensing.fsc-rules-vaitos-2022-rule)
- The crypto-to-fiat conversion leg (off-ramp) likely requires assessment under the National Payment Systems Act 2018 if the issuance of e-money or operation of a payment system is involved (mu.stablecoin.e-money-if-a-stablecoin-primarily, mu.stablecoin.reference-national-payments-system-act)
- A partner bank or BIN sponsor arrangement would need to be structured through a licensed entity; the VASP itself cannot issue card products without a payment/e-money license from the Bank of Mauritius if that product involves e-money issuance
- Incorporation in Mauritius as a company required for FSC licensing (mu.licensing.licensing-process-applicants-must-submit)
Key Risks
- Dual or uncertain regulatory jurisdiction: the crypto off-ramp is regulated by the FSC (VAITOS Act) while the fiat card/payment issuance may fall under the Bank of Mauritius (National Payment Systems Act), creating potential gaps or overlapping requirements
- No explicit crypto-funded debit card framework exists yet; the operating model must be assembled from VASP licensing + payment system rules, creating regulatory ambiguity
- FSC has a history of issuing public warnings against unlicensed virtual asset activities and may view crypto-card products as high-risk due to the payment/crypto nexus (mu.enforcement.issuing-warnings-against-unregulated-activities, mu.enforcement.entity-targeted-the-general-public)
- Mauritius exited FATF grey list in 2021 but remains under scrutiny — enforcement expectations for VASPs are high and license revocation is a real risk for non-compliance (mu.enforcement.entity-targeted-all-financial-institutions)
- Tax risk: if the off-ramp/conversion activity is deemed 'trading as a business', profits are taxable at up to 15% corporate rate; crypto used for purchases triggers VAT on the underlying goods (mu.tax.trading-as-a-business-if, mu.tax.using-crypto-for-purchases-if)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS Act 2021): This Act defines various virtual asset services and mandates licensing for providers.
FSC Rules (Virtual Asset and Initial Token Offering Services) 2022: These rules provide specific details and requirements for implementing the VAITOS Act.
Definition of Custodian Wallet Service (Section 2, VAITOS Act 2021): "a service to safeguard virtual assets or instruments enabling control over virtual assets, on behalf of natural or legal persons."
Minimum Stated Capital (Schedule 1, FSC Rules (VAITOS) 2022):
A licensee providing "Custodian Wallet Service" must maintain a minimum stated capital of MUR 1,500,000 (approximately USD 37,500, subject to exchange rate fluctuations).
VAITOS Act 2021 (Section 13(1)(g)): A VASP shall "manage client virtual assets and money received from clients in a manner that protects the interests of clients, and, in particular, ensures that they are segregated from the assets of the VASP."
FSC Rules (VAITOS) 2022 (Rule 12 - Client Virtual Assets and Money):
Licensing Process: Applicants must submit a detailed application to the FSC, including:
The Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS Act 2021): This is the cornerstone legislation specifically regulating virtual assets and VASPs. It designates VASPs as "reporting entities" and brings them under the scope of AML/CFT obligations. It provides for the licensing, regulation, and supervision of VASPs by the Financial Services Commission (FSC).
The Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA 2002) (as amended): This is the overarching AML/CFT legislation in Mauritius. It establishes the general AML/CFT framework, defines "money laundering," sets out the obligations of reporting entities (including VASPs by virtue of the VAITOS Act), and empowers the Financial Intelligence Unit (FIU).
Identification and Verification of Customers:
Natural Persons: Full name, date of birth, place of birth, nationality, residential address, unique identification number (e.g., passport, national ID card). Verification requires independent, reliable source documents (e.g., certified copies of ID, utility bills).
Legal Entities: Legal name, legal form, proof of incorporation/registration, address of registered office and principal place of business, names of directors/partners/trustees, and identification of individuals authorized to act on behalf of the entity. Verification typically involves corporate documents.
Beneficial Ownership Identification:
Identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer.
For legal entities, this means identifying the natural person(s) who ultimately own or control 25% or more of the entity, or who otherwise exercise control through other means.
Continuously monitor the business relationship to ensure that transactions being conducted are consistent with the VASP's knowledge of the customer, their business and risk profile, including, where necessary, the source of funds.
Regularly update customer information and beneficial ownership data.
Enhanced Due Diligence (EDD):
Customers who are Politically Exposed Persons (PEPs), their family members, or close associates.
Customers from high-risk geographic areas (as identified by FATF or local regulators).
Transactions involving new or developing technologies or products that favour anonymity.
Complex, unusually large transactions, or unusual patterns of transactions that have no apparent economic or lawful purpose.
Virtual Asset: The VAITOS Act defines a "Virtual Asset" as "a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes and includes a digital representation of value which is used as a medium of exchange, a unit of account or a store of value." Most stablecoins, by nature, fit this broad definition, particularly asset-backed ones.
Reference: Virtual Asset and Initial Token Offering Services Act 2021, Section 2.
E-money: If a stablecoin primarily functions as electronic money, representing a claim on fiat currency and used for payment services (e.g., a fiat-backed stablecoin directly redeemable 1:1 for a national currency and widely accepted for payments), it could fall under the purview of the Bank of Mauritius (BOM) and the National Payment Systems Act 2018. The BOM regulates e-money issuers and payment service providers. This could lead to a dual licensing requirement (FSC for Virtual Asset Service Provider and BOM for e-money issuer) or require clarification from authorities.
Evidence fact mu.stablecoin.reference-national-payments-system-act not found (may have been renamed).
"Operating a Virtual Asset Exchange" (if they also facilitate trading).
"Transferring Virtual Assets."
"Providing Custodian Wallet Services" (if they hold users' stablecoins).
Client Asset Segregation: VASPs are required to segregate client assets from their own, which is crucial for the security of stablecoin backing.
Issuing warnings against unregulated activities.
Entity Targeted: The General Public and Unlicensed Entities. Violation Type: Engaging in or promoting unregulated virtual asset services, pyramid schemes, or other illicit activities involving virtual assets. Penalty Amount: N/A (warnings do not carry a direct penalty amount for the warning itself, but non-compliance with regulations could lead to severe penalties or legal action if a regulated entity were involved).
Entity Targeted: All financial institutions and VASPs subject to AML/CFT regulations. Violation Type: Previous strategic deficiencies in the AML/CFT regime identified by FATF. Penalty Amount: N/A (the "penalty" was the grey-listing itself, which impacted the country's financial reputation).
Trading as a Business: If an individual or company engages in frequent, systematic, and organised trading of cryptocurrencies with the intention of generating profits (e.g., day trading, arbitrage, professional speculation), the profits will be taxed as business income.
Using Crypto for Purchases: If cryptocurrency is used as a medium of exchange to purchase goods or services, the VAT applicable to the underlying goods or services remains payable in MUR. The crypto merely acts as payment; it does not change the VAT status of the underlying transaction.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card is permitted in Mauritius but requires a VASP license under the VAITOS Act 2021 (covering custodian wallet and virtual asset transfer services) with MUR 1.5M minimum capital, full AML/CFT compliance as a reporting entity, and likely additional payment/e-money licensing from the Bank of Mauritius for the fiat card issuance leg, with no dedicated crypto-card framework yet established.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?