On-shore VASP in Holy See
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Holy See with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Conduct Customer Due Diligence (CDD): identify and verify identity of customers and beneficial owners using reliable source documents (e.g. passport, national ID)
- Conduct Enhanced Due Diligence (EDD) for high-risk customers, PEPs, complex/unusual transactions
- Ongoing monitoring of business relationships and transactions to ensure consistency with customer/risk profile
- Inquire about source of funds/wealth in higher-risk situations
- Scrutinize complex or unusually large transactions with no apparent economic or lawful purpose
- Apply specific measures for non-face-to-face relationships to compensate for higher risk
- Travel Rule: collect, store, and transmit originator and beneficiary information for VA transfers (threshold typically equivalent to EUR 1,000)
- Report suspicious transactions to ASIF (acting as FIU) without delay
- Screen transactions and customers against international financial sanctions lists
- Maintain records of transactions and customer data for a specified period
- Establish and maintain AML/CFT policies, procedures, risk assessments, and staff training programs
- Evaluate risks of new technologies/products, particularly those favoring anonymity
Key Restrictions
- VASP must be authorized or registered by ASIF (Autorità di Supervisione e Informazione Finanziaria) before commencing operations
- Operator must be a locally present entity under the Holy See's jurisdiction; notification/registration with ASF also required
- Must comply with Resolution No. 16/2022 which defines virtual assets and subjects VASPs to AML/CFT obligations under Law CCXI (2018)
- No specific capital requirements for crypto activities alone, but regulated institutions are subject to general prudential requirements (adequate capital, liquidity, risk management) as determined by ASF
Key Risks
- Extremely limited market—Vatican City State is not a center for crypto activity; low transaction volume may make operations commercially unviable
- No established enforcement precedent for crypto-specific violations; regulatory posture is preparedness rather than proven enforcement
- No specific tax legislation for crypto exists—tax treatment of crypto income/gains is entirely undefined, creating uncertainty for financial reporting and potential future liability
- Operator would be under dual ASF/ASIF supervisory oversight with limited clarity on how these bodies coordinate on VASP supervision
- MONEYVAL follow-up reports indicate the Holy See is still addressing deficiencies in its AML/CFT framework, meaning regulatory requirements may evolve
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Exchanges: Entities facilitating the exchange between virtual assets and fiat currencies, or between different forms of virtual assets, would be classified as VASPs.
Custody Providers: Entities providing safekeeping or administration of virtual assets or instruments enabling control over virtual assets would be classified as VASPs.
Payment Processors (dealing with VAs): Entities involved in the transfer of virtual assets or providing services related to the issuance/sale of virtual assets would also fall under the VASP definition.
AML/KYC (Anti-Money Laundering/Know Your Customer): This is the paramount requirement. VASPs are obligated to:
Conduct Customer Due Diligence (CDD): Identify and verify the identity of their customers (individuals and legal entities).
Conduct Enhanced Due Diligence (EDD): For high-risk customers, politically exposed persons (PEPs), or complex/unusual transactions.
Monitor Transactions: Identify and report suspicious transactions to the ASF.
Record Keeping: Maintain records of transactions and customer data for a specified period.
Internal Controls: Establish and maintain robust internal AML/CFT policies, procedures, risk assessments, and training programs for staff.
Sanctions Compliance: Adhere to international financial sanctions lists.
Local Presence: While there isn't a specific "local presence" requirement for external crypto businesses to set up shop (as this is not the Holy See's regulatory focus), any entity operating under its jurisdiction (e.g., Vatican banks or financial institutions) is, by definition, locally present. For foreign entities, the question of "local presence" is generally moot, as the Holy See is not seeking to attract such entities.
Capital Requirements: There are no specific capital requirements solely for cryptocurrency activities. However, regulated financial institutions within the Holy See are subject to general prudential requirements, including adequate capital, liquidity, and risk management frameworks as determined by the ASF. If a Vatican financial institution were to engage in VASP activities, it would need to ensure these activities are adequately capitalized and managed within its overall risk framework.
Governance and Risk Management: Regulated entities are expected to have sound governance structures and effective risk management systems in place to manage the specific risks associated with virtual assets (e.g., cyber security, market volatility, technological risks).
Notification/Registration with ASF: Informing the ASF of the intent to engage in virtual asset activities.
Demonstrating Compliance: Providing documentation to the ASF detailing how the institution will comply with all relevant AML/CFT obligations, including risk assessments, policies, procedures, and internal controls specific to virtual assets.
Ongoing Supervision: Remaining subject to ongoing supervision by the ASF, including regular reporting and audits.
Law No. CCXI (2018): On the prevention and countering of money laundering and terrorist financing.
Resolution No. 16/2022 on Virtual Assets:
Autorità di Supervisione e Informazione Finanziaria (ASF) / Supervisory and Financial Information Authority
Decree No. CCCLVI (356) of 19 May 2021, issued by the Secretariat of State (amending Law No. CCXCVII and introducing specific provisions for Virtual Assets and Virtual Asset Service Providers): This crucial decree specifically brought virtual assets and VASPs under the Holy See's AML/CFT regulatory scope, implementing FATF Recommendation 15 and its Interpretive Note. It defines virtual assets and VASPs and subjects them to the same AML/CFT obligations as traditional financial institutions.
Ongoing Monitoring: Conduct ongoing monitoring of the business relationship and transactions undertaken throughout the course of the relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes scrutiny of transactions and the source of funds where necessary.
Source of Funds/Wealth: For higher-risk situations, VASPs must inquire about the source of funds and wealth of the customer.
Politically Exposed Persons (PEPs): Implement additional measures for customers who are PEPs, their family members, or close associates.
High-Risk Jurisdictions: Apply EDD to business relationships and transactions involving countries identified by FATF or ASIF as high-risk.
Complex or Unusual Transactions: Scrutinize transactions that are unusually large, complex, or have no apparent economic or lawful purpose.
New Technologies/Products: Evaluate the risks associated with new technologies or products, particularly those that might favor anonymity.
Non-Face-to-Face Relationships: Apply specific and adequate measures to compensate for the higher risk of non-face-to-face relationships.
"Travel Rule" for VA Transfers: Decree No. CCCLVI implements the FATF "Travel Rule," requiring VASPs to obtain, hold, and transmit originator and beneficiary information for VA transfers above a certain threshold (typically equivalent to EUR 1,000, but may be subject to specific ASIF instructions).
Instruction No. 1 of the Financial Intelligence and Supervisory Authority (ASIF) of 19 March 2021 (Regulating VASPs): This instruction further details the obligations of VASPs operating in or from the Holy See, covering licensing, registration, customer due diligence, reporting, and information transfer requirements consistent with the Travel Rule.
When a VASP conducts a VA transfer for an originator (or to a beneficiary), it must collect and transmit the required information, regardless of the value of the transaction.
Collect the required originator and beneficiary information accurately.
Store this information securely.
Transmit this information securely and reliably to the beneficiary VASP (or make it available upon request).
Screen for sanctions and suspicious activity.
Regulator Name: Autorità di Supervisione e Informazione Finanziaria (ASIF)
Robust AML/CTF Framework: The Holy See has significantly strengthened its anti-money laundering (AML) and counter-terrorist financing (CTF) framework in recent years, under the supervision of its financial intelligence and supervisory authority, the Autorità di Supervisione e Informazione Finanziaria (ASIF). This includes complying with international standards set by the Financial Action Task Force (FATF) and undergoing evaluations by MONEYVAL (the Council of Europe's AML body).
Regulatory Preparedness (Not Enforcement): While there haven't been enforcement actions, ASIF has issued guidance and regulations acknowledging the risks associated with virtual assets (cryptocurrencies). This indicates preparedness rather than a history of specific enforcement cases.
No Known Specific Legislation: There is no known legislation or published tax rate in the Holy See that addresses capital gains specifically derived from cryptocurrency or virtual assets.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a locally-incorporated VASP is permitted in the Holy See but must register/be authorized by ASIF, comply with the full AML/CFT regime under Law CCXI/Resolution 16/2022 (including CDD, EDD, Travel Rule, and suspicious transaction reporting), and meet general prudential requirements of the ASF, though the jurisdiction's tiny market and lack of tax or enforcement precedent create significant operational uncertainty.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?