Turks and Caicos -- Licensing Requirements Regulatory Overview

Turks and Caicos Islands (TCI) has a dedicated and comprehensive regulatory framework for virtual asset businesses, primarily governed by the Virtual Asset Business Act 2023 (VABA 2023). This legislation came into effect on February 1, 2024, signifying TCI's move to align with international standards, particularly those set by the Financial Action Task Force (FATF).

The regulatory authority is the Turks and Caicos Islands Financial Services Commission (FSC).

Registration vs. Licensing Regime

Turks and Caicos operates a licensing regime for Virtual Asset Service Providers (VASPs). Any entity conducting "Virtual Asset Business" in or from the TCI must obtain a license from the FSC. It is not a mere registration process; it involves a detailed application, ongoing compliance obligations, and significant regulatory oversight.

Required Licenses for Exchanges, Custody Providers, and Payment Processors

Under VABA 2023, a "Virtual Asset Business" is defined broadly and includes several activities that would cover exchanges, custody providers, and payment processors. A Virtual Asset Business License is required to engage in any of the following activities when carried out for or on behalf of another person, in or from the Islands:

1. Exchange between virtual assets and fiat currencies.
2. Exchange between one or more forms of virtual assets.
3. Transfer of virtual assets.
4. Safekeeping or administration of virtual assets or instruments enabling control over virtual assets. (This specifically covers custody providers).
5. Participation in, and provision of financial services related to, an issuer’s offer and/or sale of a virtual asset.
6. Operation of a trading platform for virtual assets. (This covers exchanges).

Therefore:

• Exchanges: Clearly require a license for activities like exchanging virtual assets with fiat, exchanging between different virtual assets, and operating a trading platform.
• Custody Providers: Explicitly require a license for safekeeping or administration of virtual assets.
• Payment Processors: If their processing involves the "transfer of virtual assets" or facilitating payments through virtual assets (e.g., converting fiat to VA for payment, or VA to fiat upon receipt), they will require a license.

Key Requirements

The VABA 2023 and associated AML/CFT regulations impose stringent requirements, including:

1. Capital Requirements

The VABA 2023 specifies minimum paid-up capital requirements, which vary depending on the type and scope of the license. These are generally substantial to ensure financial stability and consumer protection.

• General Virtual Asset Business License: A minimum paid-up capital of TCI$500,000.
• Restricted Virtual Asset Business License: A minimum paid-up capital of TCI$250,000. (This license may be granted for a more limited scope of activities or under specific conditions).

In addition to paid-up capital, the FSC will assess the applicant's overall financial resources, business plan, and risk profile to ensure it has sufficient capital to operate responsibly.

2. AML/KYC (Anti-Money Laundering / Know Your Customer)

VASPs are designated as "financial institutions" under TCI's AML/CFT framework and are subject to robust obligations:

• Customer Due Diligence (CDD): Implementing comprehensive policies and procedures for identifying and verifying customers' identities, including beneficial owners.
• Enhanced Due Diligence (EDD): For higher-risk customers, politically exposed persons (PEPs), and complex transactions.
• Record Keeping: Maintaining records of customer identification data and transaction details for at least five years.
• Transaction Monitoring: Implementing systems to monitor transactions for suspicious activity.
• Suspicious Transaction Reports (STRs): Reporting suspicious activities to the Financial Intelligence Agency (FIA) without tipping off the customer.
• Risk Assessments: Conducting regular, comprehensive risk assessments of their business, customers, products, and geographies.
• Compliance Officer: Appointing a qualified Money Laundering Reporting Officer (MLRO) and Deputy MLRO, responsible for AML/CFT compliance and reporting.
• Training: Providing ongoing AML/CFT training to all relevant staff.
• Internal Controls: Establishing robust internal controls to mitigate AML/CFT risks.

3. Local Presence

• Registered Office: A VASP must maintain a registered office in the Turks and Caicos Islands.
• Resident Agent: A VASP must appoint a resident agent in the Turks and Caicos Islands.
• Physical Presence (for certain activities): While not always requiring a full physical office with numerous staff, the FSC typically expects sufficient local substance and management to oversee the licensed activities effectively.
• Directors and Senior Management: The FSC requires directors and senior management to be "fit and proper" individuals, demonstrating competence, integrity, and sound financial standing. At least one director must typically be a resident of TCI, or there must be significant local operational oversight.
• Key Personnel: The MLRO, Deputy MLRO, and compliance officer positions are critical and subject to FSC approval.

4. Technology and Security

• Cybersecurity: Robust cybersecurity frameworks and measures to protect virtual assets, customer data, and operational integrity.
• Data Protection: Compliance with TCI's data protection laws.
• Business Continuity & Disaster Recovery: Plans to ensure continued operation and data recovery in case of disruption.
• Systems and Controls: Secure and reliable systems for processing, storing, and managing virtual assets.

5. Governance and Internal Controls

• Robust Policies and Procedures: Comprehensive operational, risk management, compliance, and governance policies.
• Risk Management Framework: A sound framework for identifying, assessing, monitoring, and mitigating all risks, including operational, financial, and reputational risks.
• Audits: Annual external audits of financial statements and potentially compliance audits.

Application Process

The application process for a Virtual Asset Business License typically involves several stages:

1. Pre-Application Consultation (Optional but Recommended): Engagement with the FSC to discuss the proposed business model and clarify regulatory expectations.
2. Preparation of Application Package:
   • Application Form: Duly completed official application form.
   • Detailed Business Plan: Outlining the proposed activities, target market, operational structure, technology stack, marketing strategy, and financial projections (typically 3-5 years).
   • Financial Information: Proof of capital, audited financial statements (if applicable), and financial projections.
   • Organizational Structure: Details of the legal entity, shareholding structure, and group entities.
   • Fit and Proper Documentation: Comprehensive personal questionnaires, police clearances, professional references, and CVs for all directors, senior management, shareholders (above a certain threshold), and beneficial owners.
   • AML/CFT Manuals: Detailed policies and procedures for AML/KYC, transaction monitoring, and reporting.
   • Risk Management Framework: Documentation outlining risk assessment and mitigation strategies.
   • Technology & Cybersecurity Documentation: Details of IT systems, security protocols, and third-party vendor agreements.
   • Legal Opinions: Potentially, legal opinions on specific aspects of the virtual assets or business model.
   • Proof of Local Presence: Documentation for registered office and resident agent.
   • Fees: Payment of non-refundable application fees.
3. FSC Review and Due Diligence: The FSC will conduct thorough due diligence on the applicant, its principals, and its proposed operations. This may involve interviews, requests for additional information, and background checks.
4. On-Site Inspection (Possible): For more complex operations, the FSC may conduct an on-site inspection.
5. Approval and Licensing: Upon satisfaction that all requirements are met, the FSC will grant the Virtual Asset Business License.
6. Ongoing Compliance: Licensees are subject to continuous supervision, periodic reporting to the FSC, and compliance with all relevant laws and regulations.

Specific Regulatory References with URLs

1. Turks and Caicos Islands Financial Services Commission (FSC):

   • Official Website: https://www.tcifsc.tc/
   • The FSC website is the primary resource for announcements, legislation, application forms, and guidance notes related to virtual asset businesses.

2. Virtual Asset Business Act 2023 (VABA 2023):

   • This is the cornerstone legislation. You can typically find the official text on the TCI legislative portal or linked from the FSC website.
   • TCI Legislative Portal: http://www.gov.tc/legislative-council/legislative-portal
     • (Search for "Virtual Asset Business Act 2023" within this portal or check the "Acts" section for recent legislation.)
     • Note: As legislation updates, direct PDF links can change. The portal is the most reliable place for the current official version.

3. Proceeds of Crime Act, 2017 (as amended):

   • This is the primary AML/CFT legislation for TCI.
   • TCI Legislative Portal: http://www.gov.tc/legislative-council/legislative-portal
     • (Search for "Proceeds of Crime Act 2017".)

4. Anti-Money Laundering Regulations, 2010 (as amended):

   • These regulations provide detailed requirements for AML/CFT compliance.
   • TCI Legislative Portal: http://www.gov.tc/legislative-council/legislative-portal
     • (Search for "Anti-Money Laundering Regulations 2010".)

It is highly recommended to consult the official texts of these legislations and any accompanying guidance notes issued by the TCI FSC for the most accurate and up-to-date information. Due to the dynamic nature of regulations, it is always advisable to seek professional legal advice when planning to establish a virtual asset business in the Turks and Caicos Islands.