DeFi protocol frontend in British Virgin Islands
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in British Virgin Islands with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- VASP Registration under the VASP Act (effective Feb 1, 2023) is mandatory if the frontend constitutes a VASP activity — i.e., facilitating virtual asset exchange, transfer, or payment processing for users.
- AML/CFT obligations under the Anti-Money Laundering Regulations, 2020 (AMLR) and AMLTF Code of Practice (AMLTFCoP), including customer due diligence, transaction monitoring, and sanctions screening.
- Travel Rule compliance applies immediately to registered VASPs: USD 0 threshold — no de minimis — requiring originator/beneficiary info transmission on all virtual asset transactions (Sections 19(4), Part VA, 41B–41F of AMLTFCoP).
- Appoint an FSC-approved AML Compliance Officer and a Money Laundering Reporting Officer (MLRO); notify FSC within 14 days if MLRO ceases office and apply for replacement approval within 21 days.
- Screen all customers and counterparties against UN, UK-extended, and EU sanctions orders listed on BVI FIA/FSC websites, plus OFAC SDN list if US exposure exists.
- File Suspicious Activity Reports (SARs) with the BVI Financial Intelligence Agency (FIA) and freeze assets upon identifying designated persons.
- Retain records (IP addresses, wallet details, transaction hashes) per the BVI Data Protection Act for AML/CFT purposes.
- Submit governance documents including AML/CFT manuals, cybersecurity policies, business continuity plans during registration.
Key Restrictions
- Must incorporate a BVI Business Company (BVIBC) with a registered agent and registered office in the BVI; at least 2 individual directors post-registration; FSC may require a local director.
- The frontend operator must assess whether its activity constitutes a VASP service (exchange, transfer, payment processing) — if yes, VASP registration is mandatory; if the frontend merely displays/proxies data without facilitating trades, it may fall outside VASP scope, but the BVI analogizes to regulated financial services based on function, not form.
- Fee-taking (e.g., frontend swap fees, routing fees) almost certainly triggers classification as a VASP activity (payment processing or exchange facilitation), requiring full registration.
- Prior FSC approval required for appointment of senior officers; fit-and-proper-person requirements apply to directors, senior officers, and beneficial owners.
- No minimum capital specified in VASP Act, but applicants must provide audited financial projections and proof of sufficient capital to sustain operations.
- SIBA licensing may be required if virtual asset activities involve defined investments (e.g., exchange of securities tokens), unless excluded under SIBA Schedules 2.
Key Risks
- Regulatory ambiguity: the BVI's functional-analogy approach means a DeFi frontend that does not itself hold or settle trades could still be classified as a VASP if it facilitates user access to trading — outcome depends on FSC interpretation of 'facilitating' vs 'mere display'.
- Fee-taking risk: taking any form of transaction fees (routing, slippage, interface fees) increases likelihood of FSC classification as payment processing or exchange facilitation.
- Travel Rule compliance on a DeFi frontend is technically difficult — no de minimis threshold means every transaction must carry originator/beneficiary info, which permissionless protocols cannot implement natively.
- OFAC extraterritoriality risk: even though OFAC lacks direct legal force in BVI, frontends accessible to US persons face practical sanctions enforcement exposure (SDN screening, reporting within 10 business days).
- Enforcement precedent thin: no published FSC rulings specifically on DeFi frontends; confidence is reduced by lack of direct guidance on this operating model.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Assets Service Providers Act 2022: Enacted 2022, came into effect February 1, 2023
Virtual Asset Service Providers Act, 2022 (VASP Act): Core law requiring registration/licensing for VASPs; effective February 1, 2023. Covers exchange, transfer, custody, and related services but excludes mere issuance of virtual assets.
Assessment Approach: Evaluates virtual assets based on their characteristics and business models, analogizing to regulated financial services to determine licensing requirements and avoid violations.
Scope: Applies to persons or entities engaging in virtual asset-related activities within the FSC's regulatory remit, urging review for compliance.
Exchanges – platforms facilitating virtual asset trading
Payment processors – facilitating virtual asset transfers
Other VASP services – storage and management of virtual assets
Anti-money laundering and counter-terrorist financing (AML/CFT) obligations
British Virgin Islands Financial Services Commission (FSC): Oversees all virtual asset service provider (VASP) registration, licensing, supervision, enforcement, and compliance monitoring, including AML/CFT obligations and transaction reporting.
VASP Registration: Mandatory for VASP activities; submit in the FSC's approved form, specifying the category, with a business plan, details of directors/senior officers/compliance officer (meeting fit and proper criteria), AML/CTF/PF policies, and application fee.
Fit and proper person requirements for senior officers and beneficial owners
Prior FSC approval of senior officer appointments
Incorporate a BVI Business Company (BVIBC): Unique name, registered agent, registered office; minimum 1 director initially (at least 2 individual directors post-registration; FSC may require local director).
No minimum capital specified in VASP Act; share capital based on operational expenses.
Applicants must provide audited financial projections and proof of sufficient capital to sustain operations.
SIBA Licensing: Required if virtual asset activities involve defined investments (e.g., exchanges), unless excluded under SIBA Schedules 2 (Parts A/B/C).
Anti-Money Laundering Regulations, 2020 (AML Regulations/AMLR) (amended 2022/2024): Core rules on customer due diligence, reporting, and controls.
Anti-Money Laundering and Terrorist Financing Code of Practice (AMLTFCoP/AMLTFCOP): Detailed AML/CFT/PF obligations for relevant businesses.
OFAC sanctions lack legal force in BVI but are practically required for VASPs with US exposure, including blocking virtual currencies linked to OFAC's Specially Designated Nationals (SDN) list, prohibiting unauthorized transactions, and reporting within 10 business days.
VASPs and relevant persons screen applicants, customers, and relationships against active Sanctions Orders listed on BVI FIA and FSC websites.
Upon identifying designated persons/assets: file reports with the Sanctions Unit (via Governor's Office), submit Suspicious Activity Reports (SARs) to FIA under the Counter-Terrorism Act, 2021, and freeze assets.
Breaches (e.g., contravening or circumventing sanctions) are criminal offenses: up to 6 months imprisonment or ~US$5,000 fine (summary conviction); up to 7 years imprisonment or unlimited fine (indictment).
Adoption and Legislation: The Travel Rule integrates FATF Recommendations 15 and 16 into BVI law via Sections 19(4), Part VA, and Sections 41B through 41F of the AMLTFCoP, alongside the AMLR and Virtual Assets Service Providers Act, 2022 (VASP Act). Official guidance is in the BVI FSC's VASP Travel Rule Guidance (PDF: https://www.bvifsc.vg/sites/default/files/vasp_travel_guidance_f.pdf).
Threshold Amounts: USD 0—all virtual asset transactions, with no de minimis threshold.
Covered VASPs: Applies to all individuals and entities operating as VASPs in or from the BVI, including those registered under the VASP Act with the BVI Financial Services Commission (FSC). Entities offering virtual asset services must register.
Technical Implementation Requirements: VASPs must implement controls for Travel Rule compliance, including documented AML/CFT policies, procedures, continuous customer due diligence (CDD), transaction monitoring, and sanctions screening within 24 hours (e.g., freezing assets, reporting). They must demonstrate reasonable steps for compliance and align with FATF's risk-based approach, reporting to the FSC and Financial Investigation Agency (FIA).
Appointing an AML compliance officer (approved by the FSC) to oversee adherence and liaise with authorities, plus a Money Laundering Reporting Officer (MLRO) to handle internal reporting; notify FSC within 14 days if MLRO ceases office and apply for replacement approval within 21 days.
Submitting governance documents like AML/CFT manuals, cybersecurity policies, and business continuity plans during registration.
Retaining records (e.g., IP addresses, wallet details, transaction hashes) per the BVI Data Protection Act for AML/CFT/PF purposes.
VASP Registration/AML Guidance (2023): FSC publications
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi frontend operated in or from the BVI likely requires VASP registration under the VASP Act if it facilitates trading (especially if fee-taking), but the FSC's functional-analogy approach creates ambiguity for non-custodial, permissionless interfaces; registration would trigger full AML/CFT, Travel Rule, and sanctions obligations.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?