Why Choose Cayman Islands for Crypto Licensing?
The Cayman Islands offers institutional-grade crypto regulation under the Virtual Asset (Service Providers) Act, paired with zero direct taxation, English common-law courts with final appeal to the Judicial Committee of the Privy Council, and the world’s deepest hedge fund domicile. Per Cayman Finance’s 2025 Fund Statistics published , Cayman-domiciled funds held approximately USD 9.1 trillion in net asset value across USD 16 trillion in total assets at end-2024.[1] At the end of 2025, 18 Virtual Asset Service Providers were registered with CIMA under the VASP Act, on the regulator’s own statistics.[29]
Institutional Regulatory Credibility
CIMA takes part in IOSCO, the International Association of Insurance Supervisors, and the Group of International Finance Centre Supervisors, and has signed the IOSCO and IAIS multilateral memoranda of understanding alongside bilateral agreements with foreign regulators.[40] The supervisory model rests on the same Statements of Guidance, Rules, and on-site inspection regime that governs Cayman’s banking, insurance, and funds industries.
Operators that benchmark Cayman against lighter offshore frameworks find that the substantive bar (capital adequacy, governance composition, cybersecurity, internal audit, AML/CFT, sanctions screening) sits materially higher than at light-touch peers.
Zero Direct Tax, Backed by Statutory Undertaking
The Cayman Islands imposes no corporate income tax, no capital gains tax, no withholding tax, and no personal income tax.[3] Exempted companies can obtain a Tax Concessions Undertaking from the Cabinet guaranteeing no future Cayman tax law will apply to them for a period not exceeding 30 years; in practice the undertaking is typically issued for 20 years with a 10-year extension available.[4]
Exempted Limited Liability Companies commonly receive 50-year undertakings. The currency, the Cayman Islands dollar, has been pegged to the US dollar at KYD 1 = USD 1.20 since .[5] CIMA’s own fee schedule converts fees at CI$0.82 to US$1 (about USD 1.22 per KYD), and the statutory US-dollar figures on this page use that rate.[28]
Post-FATF and Post-EU AML Reset
The Cayman Islands exited the FATF Jurisdictions under Increased Monitoring list on after satisfying all 63 FATF Recommended Actions, and was removed from the EU AML high-risk third-country list on via Commission Delegated Regulation (EU) 2024/163.[6][7] The reset materially improves correspondent banking, prime brokerage, and institutional counterparty access compared with the 2021–2023 period.
The Caribbean light-touch peers are themselves FATF-clear and off the EU lists, so listing status is not what separates them from Cayman. The separation is supervisory depth and de-risking friction: CIMA is an IOSCO member with a published inspection and enforcement record, and correspondent banks and prime brokers price that difference into onboarding.
Deep Fund-Adjacent Ecosystem
Cayman is the world’s leading hedge fund domicile: per SEC Q1 2024 private-fund data cited by named offshore counsel, Cayman funds accounted for 31.6% of net assets of all private funds in SEC data and 53.6% of qualifying hedge fund net assets.[8] For crypto fund managers, token issuers, and exchanges raising institutional capital, the same ecosystem of CIMA-approved auditors, fund administrators, and offshore counsel that services traditional finance also services virtual asset operators with no learning curve. This depth is one of the strongest practical reasons institutional projects choose Cayman over offshore alternatives where every operational provider is starting from a thinner base.
Regulatory Framework
The Cayman Islands regulates Virtual Asset Service Providers under the Virtual Asset (Service Providers) Act (2024 Revision), administered by the Cayman Islands Monetary Authority. The Act commenced on with the Registration phase, with Phase 2 (Licensing for custody and trading platforms) brought into force on .[9]
Definition: Virtual Asset Service Provider
A Virtual Asset Service Provider is, under sections 2 and 3 of the VASP Act, a company or other listed entity providing, as a business, one or more of: exchange between virtual assets and fiat currencies; exchange between virtual assets; transfer of virtual assets; virtual asset custody service; or participation in and provision of financial services related to a virtual asset issuance or sale. The section 2 definition also captures the issuance of virtual assets.
Regulator and Supervisory Authority
CIMA’s VASP & Fintech Innovation Unit administers the VASP regime, supervising VASPs alongside CIMA’s existing banking, securities, insurance, fiduciary, and funds populations.[2] Statutory authority sits in the Monetary Authority Act, with rule-making power under section 34(1)(a) and the Regulatory Handbook under section 48. CIMA acts as the AML supervisor for VASPs under the Anti-Money Laundering Regulations (2025 Revision), with the Financial Reporting Authority operating as the jurisdiction’s FIU and Egmont Group member.
Statements of Guidance and Rules
Operators must comply with a stack of CIMA-issued instruments published on cima.ky and gazetted in the Cayman Islands Government Gazette:
- Statement of Principles for the Conduct of Virtual Asset Services (February 2021).
- Regulatory Policy on Registration or Licensing of VASPs (gazetted ; revised May 2025, effective ).[10]
- Rule on Obligations for Virtual Asset Custodians and Virtual Asset Trading Platforms (December 2024, effective ; amended ).[32]
- Statement of Guidance for Virtual Asset Custodians and Virtual Asset Trading Platforms (December 2024; amended ).
- Rule and SOG on Cybersecurity for Regulated Entities (originally ; extended to VASPs in the April 2023 update).
- Rule and SOG on Internal Controls, Rule on Corporate Governance, SOG on Outsourcing, and SOG on Records (all April 2023 updates).
- Rule and SOG on Market Conduct for VASPs ().
- Rules on an Effective Compliance Programme against money laundering, terrorist financing and proliferation financing, and on Compliance with Financial Sanctions (July 2026, effective ).[41]
In practice, the common mistake is treating the VASP Act in isolation. The VASP Act is the entry point; substantive compliance lives in the SOGs, the AMLRs, and the Guidance Notes on AML/CFT/CPF (amended ).
Recent Developments
The most significant recent development is the Phase 2 commencement on , brought into force by the Virtual Asset (Service Providers) (Amendment) Act, 2024 (Commencement Order), 2025 and supplemented by the Virtual Asset (Service Providers) (Amendment) Regulations 2025 (SL 19 of 2025), gazetted .[11] Phase 2 introduced a dedicated VASP Licence for virtual asset custody services and virtual asset trading platforms, the three-director governance rule, the Schedule 1A documentation regime, and a revised Schedule 2 fee structure.
CIMA published a Supervisory Information Circular on and a Desk-Based Review of Registered VASPs in documenting deficiency patterns from the September 2024 to February 2025 thematic review.[12]
In , CIMA issued the Rule and Statement of Guidance on Market Conduct for VASPs following its private-sector consultation of ; the Market Conduct Rule applies to all registered and licensed VASPs and codifies expectations on marketing, complaints handling, conflicts of interest, client agreements, public disclosures, cross-border activity, and own-account trading. In the same month CIMA amended its Rule and Statement of Guidance for custodians and trading platforms.[32] Phase 3 (direct-to-public issuance and dedicated Sandbox Licence commencement) remains pending: as of , CIMA’s legislation index lists no Cabinet order commencing it.[37]
Regulatory Overlap
Three overlap regimes warrant naming:
- Mutual Funds Act (2025 Revision) and Private Funds Act (2025 Revision). Issue by a tokenised mutual fund of its own digital equity tokens, or by a tokenised private fund of its own digital investment tokens, is excluded from virtual asset issuance; other virtual-asset services the fund provides need a separate VASP perimeter assessment.[31]
- Securities Investment Business Act (SIBA). Where a virtual asset has securities characteristics (profit-share, conversion rights, redemption against an underlying security), the activity may trigger SIBA in addition to or instead of the VASP Act.
- Banks and Trust Companies Act and Trust Companies Act. Custody activity that resembles fiduciary banking may interact with these regimes; trust-licensed entities may benefit from the section 16 waiver where the Authority is satisfied existing supervision is sufficient.
License Types and Activities Covered
The Cayman VASP regime operates on two parallel tracks under the same statute. Activities such as exchange between virtual assets and fiat, transfer of virtual assets, and participation in financial services related to virtual asset issuance trigger Registration; virtual asset custody services and operation of a virtual asset trading platform trigger a Licence.
Covered Activities, Registration
A VASP Registration is required for the following Phase 1 activities:
- Exchange between virtual assets and fiat currencies. Operating a fiat on/off-ramp for clients.
- Exchange between virtual assets. Crypto-to-crypto swap services that do not involve trading-platform operation.
- Transfer of virtual assets. Movement of virtual assets between accounts on behalf of customers, including OTC brokerage models.
- Virtual asset issuance. Issuance of new virtual assets, subject to the private-sale carve-outs in the Regulations. Phase 3 direct-to-public issuance is not yet commenced as of .
- Participation in and provision of financial services related to a virtual asset issuance or sale. Advisory and arranging activities tied to issuance.
Covered Activities, Licence (Phase 2)
A VASP Licence has been mandatory since for the two Phase 2 activities:
- Virtual Asset Custody Service. Holding client virtual assets, managing private keys, or providing custodial wallets. Existing Phase 1 registrants providing custody were required to file licence applications within the to transition window.[13]
- Virtual Asset Trading Platform. Operating a centralised matching engine, order book, or marketplace where customer orders for virtual assets are matched.
Where a single VASP performs both Registration-class and Licence-class activities, only a Licence is required and the prior Registration falls away. Operators must map their business model carefully: a hybrid CeFi/DeFi platform with an internal order book is a VATP, while a non-custodial routing service may sit within Registration.
Sandbox Licence
Part 3 of the VASP Act (sections 17 to 21) contains a Sandbox Licence framework for activities that use innovative technology or methods of delivery, that may create systemic risk, or that need temporary additional safeguards.[9] The Authority may direct an applicant into the sandbox in lieu of standard registration or licensing, may exempt sandbox licensees from specified obligations, and may require additional tailored conditions.
Sandbox terms are up to 12 months and reviewable. As of the dedicated Sandbox Licence provisions await Phase 3 commencement (the April 2025 commencement order did not include them); sandbox applicants are currently assessed under the applicable Registration or Licence categories with bespoke conditions.
What Does NOT Require Registration
- Issuers of virtual assets in private sales below the regulatory thresholds (per Regulations carve-outs).
- Issue by a tokenised mutual fund of its own digital equity tokens, or by a tokenised private fund of its own digital investment tokens: the Virtual Asset (Service Providers) (Amendment) Act, 2026, gazetted on , excludes that issue from virtual asset issuance. Other virtual-asset services the fund provides need a separate VASP perimeter assessment, and funds-law and SIBA requirements may also apply.[31]
- Entities holding existing CIMA authorisation under another regulatory law where the Authority grants a section 16 waiver and existing supervision is sufficient.
- Pure software providers that do not custody assets, do not match orders, and do not transfer assets on behalf of customers.
- Foundation companies acting as ownerless stewardship vehicles for decentralised protocols, where VASP-triggering activities are conducted (if at all) by separate licensed entities. Practitioner experience indicates this structure is increasingly preferred for DAO and DeFi protocol architecture from Cayman.[15]
Tokenised securities and RWA
Cayman runs a mixed regime, so tokenisation does not, by itself, move an asset into the VASP Act. Tokenised fund interests fall under the Mutual Funds Act or Private Funds Act, and a token with securities characteristics (a tokenised share, bond or note) may bring in the Securities Investment Business Act (SIBA) in addition to or instead of the VASP Act, all supervised by CIMA. The Virtual Asset (Service Providers) (Amendment) Act, 2026, which repealed a 2025 amendment, takes the issue by a tokenised mutual or private fund of its own digital equity or investment tokens out of virtual asset issuance, so that issue needs no VASP registration or licence; any other virtual-asset service the fund provides needs a separate VASP perimeter assessment.[31]
The practical consequence is that a VASP registration or licence does not settle the funds-law or SIBA position: a tokenised fund stays under the funds legislation, and a VASP may carry on securities investment business only if it is registered or licensed under SIBA or exempted from it.[9] Where a real-world-asset programme issues fund interests, the written scope treats the wrapper under the funds legislation (see fund licensing) and the security-token leg under SIBA, adding VASP custody or trading-platform permissions only where the operating model genuinely needs them.
Requirements
Custodians and virtual asset trading platforms must maintain capital at all times equal to at least the higher of risk-based capital and six months’ fixed overheads, or a higher amount CIMA determines. This is Rule 8.1, although the VASP Act sets no fixed monetary minimum. Registration-only applicants remain subject to CIMA’s case-by-case adequacy assessment.[32]
Insurance is also a regulatory obligation where applicable under the Market Conduct Rule, covering senior-officer liability, custody loss, business interruption and cyber risk to CIMA’s satisfaction. If suitable cover is unavailable, the provider must raise this with CIMA and obtain advance approval for alternative safeguards; self-insurance is not an automatic substitute.[44]
| Requirement | Standard |
|---|---|
| Entity type | Exempted Company, Exempted LLC, Foundation Company, ELP, SPC, or registered foreign company |
| Min. directors | Three, including at least one independent director with no vested interest (in force since ) |
| Foreign ownership | 100% permitted |
| Beneficial ownership disclosure threshold | 10% (VASP application); 25% (central BO register under BOT Act 2023) |
| Local presence | Registered office in Cayman; in practice, Cayman-resident MLRO, Deputy MLRO, and AMLCO |
| Min. capital (Registration) | No fixed statutory minimum; CIMA assesses adequacy |
| Min. capital (Custody Licence) | Higher of risk-based capital and six months’ fixed overheads or a higher CIMA-set amount (Rule 8.1; maintained at all times) |
| Min. capital (VATP Licence) | As for custody; insurance and recovery/wind-down provisions expected |
| Professional indemnity insurance | CIMA may require for Licence applicants; PI and cyber-cover effectively expected for custody and VATP |
| Audited financial statements | CIMA discretion; mandatory expectation for Licence applicants |
| Senior officer pre-approval | All senior officers and ≥10% share/interest holders require prior CIMA approval (VASP Act s.9) |
| Internal audit | Required under the Rule on Internal Controls; in-house or qualified outsourced provider |
| Cybersecurity policy | Required under the Cybersecurity Rule and SOG (originally ; extended to VASPs ) |
| AML/CFT/CPF manual | Cayman-specific procedures referencing the AMLRs, Guidance Notes, and Travel Rule (Part 10A) |
Every VASP, registered or licensed, has needed at least three directors, one of them independent, since , and CIMA’s review of 11 registrants found board-composition gaps at 27% of them (see Inspections and Enforcement below), so budget independent-director costs from day one.[12][13]
Fit-and-Proper Standard
CIMA applies the Regulatory Procedure on Assessing Fitness and Propriety across four dimensions: integrity, competence, financial soundness, and regulatory history. Each senior officer and ≥10% shareholder submits a Personal Questionnaire, CV, police clearance certificate, regulatory references, and qualifications. The common mistake is submitting incomplete background documentation and triggering an RFI cycle that adds 4–8 weeks per round.
Beneficial Ownership and Privacy
Cayman’s Beneficial Ownership Transparency Act 2023 entered into force on with enforcement from . The Access Restriction Regulations (in force ) and Legitimate Interest Access Regulations (in force ) calibrate public access: competent authorities have full access, while restricted public access is available to journalists, AML-focused civil society organisations, and counterparties in actual or potential business relationships, on payment of a fee that since March 2026 is KYD 75 for an application about one entity and KYD 100 for several (about USD 91 and USD 122), or KYD 250 for repeated applications within a year.[16][33]
Application Process
VASP applications are submitted through CIMA’s Regulatory Enhanced Electronic Forms Submission portal (REEFS), typically via a Cayman-based corporate services provider, law firm, or licensee with portal access. CIMA strongly encourages a pre-application meeting with its VASP & Fintech Innovation Unit before formal submission, particularly for Licence-track applicants.
Entity Formation and Pre-Application
Forming a Cayman Islands exempted company (or LLC, foundation, ELP or SPC as appropriate) is the first step. In parallel, schedule the CIMA pre-application meeting with the VASP & Fintech Innovation Unit.
Documentation Assembly
Business plan, AML/CFT manual, cybersecurity policy, fit-and-proper packs, financial projections, custody/VATP-specific policies. Schedule 1A documentation must be complete on first submission.
REEFS Submission and Completeness Review
Application forms APP-101-84 and AIR-157-84 filed via REEFS with all Schedule 1A annexes. CIMA confirms completeness or returns the application.
Substantive Review and RFI Cycles
CIMA examines business plan, governance, capital, AML, IT, and custody/VATP-specific arrangements. Typical RFI cycles: 1–3 rounds.
Approval and Conditions
CIMA Management Committee considers applications weekly; conditional approval issued in writing. Conditional approvals must be satisfied before unconditional registration or grant of licence.
An independent specialist introduced by Jagelski & Partners coordinates Cayman VASP applications end-to-end, sequencing entity formation, fit-and-proper documentation, banking arrangements, and the CIMA pre-application engagement so the substantive review opens against a fully assembled file rather than a moving target. Getting the first submission right is the single best lever on overall timeline.
Required Documents
Schedule 1A of the Virtual Asset (Service Providers) (Amendment) Regulations 2025 specifies the documentation accompanying every VASP application. The pack divides into corporate documents, governance documents, AML/CFT documents, IT and cybersecurity documents, and activity-specific documents (custody policies, VATP market-abuse monitoring). Each set has its own completeness expectation.
| Category | Required Items |
|---|---|
| Corporate | Memorandum and Articles (or LLC operating agreement); shareholder register; certified directors register; certificate of incorporation; ownership chart to UBO level |
| Legal opinion | Independent Cayman counsel opinion confirming the proposed activity falls within the VASP regime |
| Governance | Three-director appointment package (including independent director); senior officer Personal Questionnaires; CVs; police clearances; regulatory references; qualifications |
| Business plan | Comprehensive business plan with transaction flow charts; pricing model; client onboarding flows; conflict-of-interest register |
| Financial | Three-year financial projections; capital adequacy demonstration; for non-profitable applicants, supplementary going-concern documentation |
| AML/CFT | AML/CFT/CPF manual; Travel Rule compliance plan; sanctions screening procedures; customer and jurisdiction risk assessment; SAR filing procedures; record-retention policy (5 years) |
| Cybersecurity | Cybersecurity policy per CIMA Cybersecurity Rule; incident response plan with 72-hour notification procedure; IT systems documentation; outsourcing register |
| Operational | Business continuity and disaster recovery plan; internal audit plan; complaints handling policy; market conduct procedures (VATPs) |
| Custody-specific (Licence) | Crypto wallet management policy; private key generation, storage, and disposal procedures; hot/cold wallet segregation; client asset segregation policy; custody insurance documentation |
| VATP-specific (Licence) | Market abuse monitoring policy; pricing and listing rules; clearing and settlement procedures; third-party custodian disclosure to clients |
| Attestation | Signed declarations from two senior officers attesting to accuracy and completeness |
Compliance Documentation Drafting
The full Schedule 1A pack is drafted within the licensing engagement by the independent specialist introduced for the case, working with Cayman counsel, and sequenced (AML/CFT manual, cybersecurity policy, custody policies, fit-and-proper documentation) so the application opens with a complete file. CIMA expects Cayman-specific procedures that reference the AMLRs and Guidance Notes by name rather than a generic offshore template.
Costs and Pricing
This page publishes two figures rather than one. The statutory cost is what CIMA charges under Schedule 2 of the VASP Regulations 2025, reset with effect from , and every line of it can be checked against the schedule. The build cost is everything else a Cayman application consumes: registered office and directors, MLRO, auditor, insurance, software, and the legal and drafting work that assembles the Schedule 1A pack. Those are commercial engagements, so the amounts below are indicative estimates that vary by independent specialist, scope and client profile.
Government Fees
All figures from Schedule 2 of the Virtual Asset (Service Providers) (Amendment) Regulations 2025, in force .[11] The US-dollar amounts beside each fee are rounded conversions; the summary table below uses CIMA’s fee-schedule rate of CI$0.82 to US$1.[28]
| Item | Fee (KYD) |
|---|---|
| Registration application fee | 1,000≈ USD 1,200 |
| Licence application fee | 5,000≈ USD 6,100 |
| Grant of Licence, Virtual Asset Custody | 30,000≈ USD 37K |
| Grant of Licence, Virtual Asset Trading Platform | 100,000≈ USD 120K |
| Custody annual renewal (revenue < KYD 2m) | 30,000≈ USD 37K |
| Custody annual renewal (KYD 2m–10m) | 60,000≈ USD 73K |
| Custody annual renewal (≥ KYD 10m) | 120,000≈ USD 150K |
| VATP annual renewal (revenue < KYD 5m) | 50,000≈ USD 61K |
| VATP annual renewal (KYD 5m–20m) | 100,000≈ USD 120K |
| VATP annual renewal (≥ KYD 20m) | 200,000≈ USD 240K |
| Registration fee on approval, Category A (generated or projected revenue from the registered services under KYD 500,000), services offered only within the Islands | 1,500≈ USD 1,800 |
| Registration fee on approval, Category A (generated or projected revenue from the registered services under KYD 500,000), services offered outside the Islands | 5,000≈ USD 6,100 |
| Registration fee on approval, Category B (generated or projected revenue from the registered services of KYD 500,000 or more), services offered only within the Islands | 5,000≈ USD 6,100 |
| Registration fee on approval, Category B (generated or projected revenue from the registered services of KYD 500,000 or more), services offered outside the Islands | 15,000≈ USD 18K |
| Registration annual renewal, Category A (prior-year revenue from the registered services under KYD 500,000, as assessed by CIMA), services offered only within the Islands | 1,500≈ USD 1,800 |
| Registration annual renewal, Category A (prior-year revenue from the registered services under KYD 500,000, as assessed by CIMA), services offered outside the Islands | 5,000≈ USD 6,100 |
| Registration annual renewal, Category B (prior-year revenue from the registered services of KYD 500,000 or more, as assessed by CIMA), services offered only within the Islands | 5,000≈ USD 6,100 |
| Registration annual renewal, Category B (prior-year revenue from the registered services of KYD 500,000 or more, as assessed by CIMA), services offered outside the Islands | 15,000≈ USD 18K |
Annual renewal fees are payable on or before each year, with a one-twelfth monthly surcharge for late payment under section 5(5) of the VASP Act.[11] Local Companies under the Local Companies (Control) Act (2025 Revision) pay one-tenth of the licence grant and renewal fees; registration fees and the licence application fee carry no such reduction, and foreign-controlled VASPs pay the standard rate.
Statutory Cost Summary
| Statutory item | Registration (Year 1, USD) | Custody Licence (Year 1, USD) | VATP Licence (Year 1, USD) |
|---|---|---|---|
| CIMA registration application fee (single payment on filing) | USD 1,220 | Not applicable | Not applicable |
| CIMA licence application fee (single payment on filing) | Not applicable | USD 6,098 | USD 6,098 |
| CIMA grant-of-licence fee (single payment on grant) | Not applicable | USD 36,585 | USD 121,951 |
| CIMA registration fee (single payment on approval, by revenue category and where services are offered) | USD 1,829–18,293 | Not applicable | Not applicable |
| CIMA renewal fee, first year (annual; registration by revenue category and where services are offered, licences by revenue band) | USD 1,829–18,293 | USD 36,585–146,341 | USD 60,976–243,902 |
| Statutory cost, Year 1 | USD 4,878–37,806 | USD 79,268–189,024 | USD 189,025–371,951 |
Every line above comes from Schedule 2 of the Virtual Asset (Service Providers) (Amendment) Regulations 2025 and can be checked against it.[11] Nothing else in a Cayman budget is fixed by law.
Typical Build Cost (quoted per case)
| Build item | Registration (Year 1, USD) | Custody Licence (Year 1, USD) | VATP Licence (Year 1, USD) |
|---|---|---|---|
| Incorporation and registered office | USD 5,000–10,000 | USD 5,000–10,000 | USD 5,000–10,000 |
| Independent legal opinion | USD 25,000–60,000 | USD 25,000–60,000 | USD 25,000–60,000 |
| Application drafting and Schedule 1A pack | USD 60,000–150,000 | USD 80,000–250,000 | USD 120,000–400,000 |
| Cayman MLRO/Deputy MLRO/AMLCO and independent director (annual) | USD 25,000–80,000 | USD 35,000–120,000 | USD 50,000–150,000 |
| CIMA-approved auditor (annual) | USD 25,000–60,000 | USD 50,000–100,000 | USD 60,000–150,000 |
| Insurance, PI, cyber and custody bond (annual) | USD 10,000–50,000 | USD 50,000–250,000 | USD 75,000–400,000 |
| AML / transaction monitoring software (annual) | USD 25,000–100,000 | USD 50,000–250,000 | USD 75,000–350,000 |
| Typical build, Year 1 (quoted per case) | USD 175,000–510,000 | USD 295,000–1,040,000 | USD 410,000–1,520,000 |
The real cost gap is not the CIMA fee schedule (which is transparent and modest by international standards) but the auditor, insurance, and compliance-software stack: these are the line items most institutional applicants underestimate by an order of magnitude in the initial budget.
Timeline
CIMA does not publish formal service-level agreements for VASP applications. Summed from the stages below, a Registration takes about 4–8 months end to end and a Licence about 7–14 months, of which roughly 3–5 and 5–10 months fall after a complete submission; both extend where RFI cycles are repeated.
| Milestone | Registration | Licence |
|---|---|---|
| Pre-application engagement | 2–4 weeks | 2–4 weeks |
| Documentation drafting | 4–8 weeks | 8–16 weeks |
| REEFS completeness review | 2–4 weeks | 2–4 weeks |
| Substantive review and RFI | 8–16 weeks | 16–32 weeks |
| Approval and conditional satisfaction | 2–3 weeks | 4–6 weeks |
| Total | About 4–8 months | About 7–14 months |
Operators benchmarking Cayman against Bermuda or BVI find that the headline timelines are roughly comparable, but the underlying review intensity at CIMA, particularly on custody and VATP applications, sits closer to MAS or VARA than to a typical Caribbean offshore regulator. Treat the timeline as a function of preparation quality, not jurisdiction marketing.
Crypto.com’s publicly announced VASP licence conditional approval on followed an initial VASP registration in , indicating that complex institutional licence applications can run materially longer than the stage-table estimate.[17] This is an exceptional data point reflecting pre-Phase-2 transition complexities and should not be read as a typical benchmark.
Taxation
The Cayman Islands has no direct taxation: no corporate income tax, no capital gains tax, no withholding tax, no personal income tax, no inheritance or estate duty, and no payroll tax.[3] Indirect taxes are limited to customs duties, stamp duty on Cayman-situs documents and real estate, and tourism accommodation tax.
Tax Concessions Undertaking
Exempted companies, exempted LLCs, and exempted limited partnerships can apply to the Cabinet under the Tax Concessions Act (Revised) for a written undertaking confirming that no Cayman tax law enacted during the undertaking period will apply to the entity. The statutory ceiling is 30 years for companies and 50 years for LLCs and ELPs; in practice exempted companies receive 20-year undertakings with a 10-year extension available.[4] The undertaking does not create new tax exemptions; it locks in the existing zero-tax position against future legislation.
CRS, CARF, and International Tax Cooperation
Cayman is a participating jurisdiction in the OECD Common Reporting Standard and operates a Model 1B intergovernmental agreement with the United States for FATCA reporting. CRS 2.0 amendments, transposed into Cayman law via the CRS (Amendment) Regulations 2025, took effect on with first exchanges in 2027; the amendments bring crypto-assets held indirectly through financial products, investment vehicles and derivatives, and accounts linked to Relevant Crypto-Assets, within CRS reporting, while direct crypto-asset transactions are reported under CARF.[25]
Cayman has separately implemented the Crypto-Asset Reporting Framework (CARF) under the CARF Regulations 2025, in force from ; the Tax Information Authority extended the registration deadline for in-scope Cayman crypto-asset service providers from to , with first reporting from 2027.[18][24][27]
Home-Country Tax Considerations
A Cayman VASP’s tax neutrality at the entity level does not eliminate home-country tax exposure for its owners and clients. US persons may be subject to CFC, Subpart F, and GILTI rules; UK persons may face CFC charges; EU shareholders may be exposed to anti-hybrid and ATAD rules, and Pillar Two GloBE minimum-tax rules subject to the group-scope rules. The common mistake is treating Cayman zero-tax as a free option without modelling the home-country tax stack at the shareholder level.
The GloBE revenue test for multinational groups is at least EUR 750 million in at least two of the four preceding fiscal years. Whether a group owes top-up tax depends on the applicable implementing laws, exclusions, and safe harbours; incorporation here alone does not decide that result.[45]
Ongoing Compliance & Post-Registration
Registered and licensed VASPs operate under a continuous compliance regime spanning annual return filings, quarterly Travel Rule and VASP Financial Returns submissions, ongoing CIMA inspections, beneficial ownership filings, and material-change pre-approvals. The compliance load on a Cayman VASP sits materially closer to a licensed bank than to a light-touch offshore registrant.
Annual Reporting
CIMA’s revised auditor-approval policy takes effect on , for the first accounting period beginning after that date. It applies where the relevant law requires a CIMA-approved auditor, subject to existing exemptions. The audit firm must have a physical Cayman presence and CIIPA registration; an overseas affiliate can assist, but the approved auditor signs the opinion. Existing approved firms retain approval if they continue to comply.[43]
- VASP annual fee payable by each year (Schedule 2).
- Annual return to the Cayman Islands General Registry, including Economic Substance Notification (where applicable).
- AML/CFT annual return to CIMA, due by 30 April each year.
- Audited financial statements where CIMA requires them (mandatory expectation for Licence holders).
- Beneficial ownership filings, monthly reporting via the registered corporate services provider since .
Quarterly Returns
- VASP Financial Returns Form (REEFS form VFR-051-84), released by CIMA on , filed quarterly via REEFS. The first reporting period closed with the inaugural submission deadline ; CIMA’s 2026 reporting schedule allows no extension.[35]
- Travel Rule return to CIMA’s AML/CFT Division each quarter;[35] the Travel Rule itself sits in Part 10A of the AMLRs (2025 Revision), which applies to transfers of virtual assets and sets no monetary threshold.[36]
Pre-Approval and Notifications
Under VASP Act section 9, prior CIMA approval is required to appoint any senior officer or trustee; prior approval is also required for a change of business plan introducing new VASP services and for a change of registered office. Notification obligations include material cybersecurity incidents within 72 hours, litigation in any jurisdiction within 30 days, and changes of directors or officers.
Shares follow a separate rule in section 28: prior CIMA approval is required to issue shares totalling 10% or more of the VASP’s shares, and to voluntarily transfer or dispose of any issued share or interest, however small. CIMA may exempt a provider with 95% or more of its shares publicly traded on a stock exchange it recognises, subject to notification conditions; that exemption has to be granted and is not automatic.[9]
Inspections and Enforcement
CIMA commenced VASP on-site inspections in 2023 and ran a thematic Desk-Based Review of registered VASPs from to , with findings published in .[12] The review covered 11 registered VASPs; among them, 82% lacked cybersecurity insurance, 36% had no formal succession planning for the board and key senior management, 27% had no qualified CISO or equivalent appointed, and 27% had board-composition gaps (fewer directors than required or no independent director), measured before the three-director rule took effect on .[12]
AC Holding Limited’s VASP registration was cancelled with effect from for breaches of the VASP Act and the AML Regulations and on fitness-and-propriety grounds; it is the only VASP cancellation among CIMA’s published enforcement notices as of .[34]
Between and , CIMA published eight decision notices across VASP, Mutual Funds Act and DRLA registrations. Administrative fines run from KYD 5,000 to KYD 100,000 for individuals and up to KYD 1,000,000 for bodies corporate (USD 6,098 to 121,951 and USD 1,219,512 at CIMA’s fee-schedule rate).[20] Providing custody or operating a trading platform without a licence is an offence carrying a KYD 100,000 fine and one year’s imprisonment, plus KYD 10,000 for each day a continuing offence lasts; providing registrable services without registration carries a KYD 25,000 fine, one year’s imprisonment and the same daily fine (section 35 of the VASP Act).[9]
Economic Substance
The International Tax Co-operation (Economic Substance) Act (2026 Revision) applies to Cayman entities carrying on one of nine relevant activities (banking, distribution and service centre, finance and leasing, fund management, headquarters, holding company, insurance, intellectual property, shipping).[21] Pure VASP activity is not one of the nine; however, particular crypto business models can trigger ES through related activities: crypto fund management (fund management business if SIBA-licensed), crypto lending and staking-as-a-service (potentially finance and leasing), and IP licensing of crypto IP (intellectual property business, with a high-risk IP test).
An entity claiming tax residence outside Cayman can disapply the ES Test by providing evidence to the Department for International Tax Cooperation (a foreign tax identification number and tax returns); the notification obligation continues regardless. A first ES Test failure draws a notice and KYD 10,000 (USD 12,195); a further failure in the financial year after that notice draws KYD 100,000 (USD 121,951), and the Authority then reports to the Registrar, who must apply to the Grand Court, which may order strike-off.[21]
The economic substance question is the single most jurisdictionally specific compliance line item most operators overlook when pricing Cayman against BVI or Bermuda. Crypto fund managers, lending platforms, and IP-heavy protocols should run an ES analysis at structuring time, not at first ES filing.
Banking
Banking access for Cayman-licensed VASPs has improved materially since Cayman’s October 2023 FATF delisting and February 2024 EU AML delisting, but remains selective. Most operators run a multi-provider stack rather than relying on a single banking relationship, and CIMA expects custody licensees to evidence fiat custody arrangements meeting specific regulatory standards.
The practical banking stack for Cayman VASPs typically combines: a primary European Electronic Money Institution providing SEPA and SWIFT rails (multiple EMI archetypes accept Cayman VASPs post-delisting); a specialist Swiss or Liechtenstein institution for higher-touch institutional flow and custody-bond arrangements; selective Caribbean private banks for local operational accounts; and Asian crypto-banking partners for APAC client flows.
CIMA’s Rule on Virtual Asset Custodians and Virtual Asset Trading Platforms (December 2024, amended February 2026) requires fiat held on behalf of clients to be kept with a licensed bank or other similar institution acceptable to CIMA, clearly segregated from the VASP’s own funds.[32]
Cayman’s banking sector, 11 Category A and 65 Category B bank licences at the end of June 2026 on CIMA’s banking statistics, provides operational and trust-bank capacity but rarely services VASP transactional flow at scale.[30] Correspondent banking for Cayman institutions remains constrained by global de-risking trends that pre-date the crypto regime.
Cayman has no statutory client-asset compensation scheme analogous to the UK’s Financial Services Compensation Scheme or the EU’s investor compensation directives. Client-asset protection on a Cayman VASP rests on the Custody Rule and Statement of Guidance segregation requirements, the obligation to hold client fiat, segregated, with a licensed bank or similar institution acceptable to CIMA, and the disclosure regime around custody insurance arrangements. Operators marketing to institutional counterparties should expect counterparty due diligence to probe these arrangements in detail.
Jagelski & Partners’ banking partner network includes specialist EMIs, traditional banks, and payment institutions across the European, Caribbean, Swiss, and APAC corridors. A licence without banking access is a certificate on the wall: learn about our Banking service →
Cayman’s post-delisting banking window rewards operators who approach the right institutions in the right order, with the CIMA fiat-custody rule designed into the account structure from the start. Jagelski & Partners scopes banking options in writing and introduces an independent specialist before a licence application is filed. You contract directly with the specialist; account approval remains the financial institution's decision.
Account options scoped before the licence application is filed, with client-fiat accounts planned around CIMA’s segregation rule.
Explore Banking SolutionsFATF Status & International Standing
International Standing
Cayman is a member of the Caribbean Financial Action Task Force, an Egmont Group participant via the Financial Reporting Authority, and is rated Largely Compliant by the OECD Global Forum on Transparency and Exchange of Information for Tax Purposes in its 2017 Second-Round peer review. Cayman is in the Global Forum’s enhanced monitoring process from .[22] CIMA takes part in IOSCO, IAIS, and GIFCS and has signed the IOSCO and IAIS multilateral MoUs.[40]
EU Market Access
A Cayman VASP authorisation does not confer EU passporting rights. The Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) contains no third-country equivalence regime; there is no mechanism for the European Commission to recognise a Cayman licence as equivalent to a MiCA CASP authorisation. MiCA Article 61 permits a third-country firm to serve EU clients only where the client initiates the service at its own exclusive initiative.
ESMA’s Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), published and applicable from , list signs that a firm is likely to be regarded as soliciting EU clients, judged on all the facts: advertising, promotions and influencer or affiliate campaigns aimed at EU clients, and a website or app in an EU language that is not customary in international finance. A firm that solicits EU clients, directly or through third parties, cannot rely on the exemption, which offers no route to systematic EU market access. For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.[23]
Advantages and Limitations
Cayman Islands VASP authorisation buys credibility, tax neutrality, and ecosystem depth, at the cost of higher compliance investment, no EU passport, and a banking environment that remains selective despite Cayman’s post-delisting institutional reset.
- Institutional regulatory credibility. CIMA’s supervisory standards and IOSCO membership signal credibility to Tier 1 banks, prime brokers, and institutional investors.
- Zero direct taxation backed by statutory undertaking. No corporate, capital gains, withholding or personal income tax; Tax Concessions Undertaking locks in the position for up to 20–50 years.
- English common-law judiciary. Familiar legal framework with final appeal to the Judicial Committee of the Privy Council in London.
- Post-FATF and post-EU AML reset. Removed from grey list (October 2023) and EU AML high-risk list (February 2024); FATF-clear standing improves correspondent banking and counterparty access.
- Deep fund-adjacent ecosystem. World’s leading hedge fund domicile, with approximately 30,600 CIMA-regulated funds at the end of 2025 (12,876 mutual funds and 17,722 private funds);[1] CIMA-approved auditors, fund administrators, and offshore counsel service crypto operators without learning curve.
- Flexible corporate toolkit. Exempted Company, Exempted LLC, Foundation Company, ELP, and SPC each suit distinct VASP business models.
- No EU passporting. A Cayman licence does not confer rights to provide crypto-asset services in the EU. Mitigation: Operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for services provided at the client’s own exclusive initiative only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
- High build cost. The CIMA fees are modest, but the Year 1 build is estimated at USD 175,000–510,000 (Registration) and USD 295,000–1,520,000 (Licence), quoted per case. Mitigation: For sub-institutional projects, Cayman is rarely the optimal entry jurisdiction; consider BVI or a comparable peer for early-stage activity and migrate to Cayman at institutional scale.
- Selective banking environment. Banking access has improved post-delisting but remains case-by-case; expect 2–6 month onboarding cycles. Mitigation: Apply to multiple institutions in parallel with the CIMA application; budget for a multi-provider stack rather than a single primary bank.
- Documented supervisory deficiency patterns. CIMA’s Desk-Based Review of 11 registered VASPs found 82% without cybersecurity insurance, 36% without formal succession planning, 27% without a qualified CISO, and 27% with board-composition gaps. Mitigation: Build the governance, cybersecurity and succession infrastructure to the standard at application time rather than retrofitting after a supervisory review.
- Almost no double-tax treaty network. Cayman’s only double-taxation arrangement is with the United Kingdom, in force since ;[42] entity-level tax neutrality does not eliminate home-country tax exposure for owners or clients. Mitigation: Model the home-country tax position (CFC, Subpart F, GILTI, Pillar Two) at structuring time, not at first filing.
- Phase 3 commencement timing unclear. Direct-to-public issuance and the dedicated Sandbox Licence framework remain pending. Mitigation: For direct-to-public retail issuance, use the private-sale carve-outs in the interim and monitor the Ministry of Financial Services and Commerce for Phase 3 timing.
How Cayman Islands Compares
The most useful comparison set for Cayman Islands is Bermuda (premium offshore peer with the Digital Asset Business Act), the British Virgin Islands (Caribbean peer with the VASP Act 2022), and Panama (LatAm operating base with territorial tax and no crypto licence). Malta sits as the natural cross-tier EU reference for operators weighing offshore credibility against MiCA passporting access.
| Factor | Cayman Islands | Bermuda | British Virgin Islands | Panama |
|---|---|---|---|---|
| Licence Type | VASP Registration / Licence (CIMA) | DABA Class F/M/T (BMA) | VASP Registration (FSC) | No crypto licence |
| Regulator | Cayman Islands Monetary Authority | Bermuda Monetary Authority | BVI Financial Services Commission | No designated VASP supervisor |
| Timeline | About 4–8 months (Registration); about 7–14 months (Licence) | 6–12 months | 4–6 months | No licence; 6–16 weeks to operate |
| Min. Capital | No fixed minimum | USD 100,000 net assets (Class M, F); USD 10,000 (Class T) | No fixed minimum | No fixed minimum |
| Year 1 all-in | Statutory USD 4,878–371,951; typical build USD 175,000–1,520,000 | USD 377,000–1,610,000 | USD 44,800–161,000 | USD 10,560–39,110 |
| Corporate Tax | 0% | 0% (15% CIT for in-scope MNE groups from 2025) | 0% | 0% foreign-source; 25% Panama-source |
| Local Presence | 3 directors including independent; registered office; Cayman MLRO in practice | Physical presence required for Class F | Registered agent + FSC-approved authorised representative; compliance officer | Local reg. agent; no resident director |
| EU Passporting | No | No | No | No |
| FATF Status | Clear (October 2023) | Clear | Grey-listed () | Clear (October 2023) |
| Best For | Institutional exchanges, custodians, fund managers | Premium offshore with formal Class structure | Cost-conscious wallet and transfer services | LatAm and US-Latin client base |
Compare every crypto jurisdiction side by side →
Cayman and Bermuda occupy the premium offshore band, with Bermuda’s DABA delivering a slightly more bespoke per-applicant calibration and Cayman delivering deeper ecosystem leverage from its fund-administration base. BVI is the cost-efficient offshore peer, its Year-1 band running at roughly a tenth to a quarter of Cayman’s; Panama anchors the lower-cost LatAm cluster with a more limited regulatory toolkit.
Against Malta as the cross-tier EU reference, Cayman trades MiCA passporting access for institutional offshore credibility, zero direct taxation, and the foundation-company toolkit. Operators planning material EU client revenue should pair a Cayman entity with a Malta or other EU CASP entity rather than rely on reverse solicitation as a market-access strategy.
When Cayman Islands Is the Right Choice
Choose Cayman if:
- You operate or plan institutional-scale activity (custody, exchange, prime brokerage, regulated fund management)
- You target US, UK, Asian, or institutional global counterparties where Cayman’s reputation accelerates onboarding
- You need a foundation company or SPC structure that other offshore peers do not provide
- You can absorb a Year 1 build of USD 175,000–1,520,000 on top of the CIMA fees
Consider alternatives if:
- Your primary client base is in the EU at retail scale (consider Malta or another EU CASP jurisdiction)
- You are early-stage and revenue-pre-traction (consider BVI for lower cost-to-licence)
- You are LatAm-focused (consider Panama for client-base alignment)
- You need rapid time-to-licence (BVI reaches a decision in 4–6 months, against about 7–14 months end to end on the Cayman Licence track)
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Cayman Islands Applications
CIMA’s published findings from the September 2024 to February 2025 Desk-Based Review and the September 2025 AML/CFT Supervisory Information Circular identify a consistent set of deficiency patterns across the registered VASP population. The same patterns recur in rejected and delayed applications.
What CIMA’s published guidance does not cover is how to handle the parallel-track problem: banking onboarding, ES analysis, ongoing audit, and Phase 2 licence transition often run on overlapping timelines, and applicants who treat them sequentially see the launch date slip 6–9 months from the original plan.
- Misclassifying the regulatory track. Submitting a Registration application where a Licence is required (custody, VATP) is one of the most common failure modes. The Phase 2 commencement on tightened this distinction and CIMA examines activity classification at the completeness stage.
- Submitting a generic offshore AML manual. CIMA expects Cayman-specific AML/CFT procedures referencing the AMLRs and Guidance Notes by name. A manual adapted from a BVI or Bermuda template typically draws a substantive RFI on first review.
- Under-budgeting the three-director rule. Since 1 April 2025 every VASP needs three directors including one independent; CIMA’s review, run before the rule took effect, had already found board-composition gaps at 27% of the registrants it sampled. Applicants who fail to identify and onboard a qualified independent director at structuring time face a delay between conditional approval and unconditional registration.
- Inadequate custody documentation for Phase 2 applicants. Wallet management policy, private key generation and storage procedures, hot/cold segregation, and client-asset segregation policies must be specific, technical, and aligned to CIMA’s Statement of Guidance for custodians and trading platforms (amended February 2026). Generic descriptions are flagged on review.
- Treating economic substance as a fund-only issue. Crypto lending, IP-heavy protocol operations, and crypto fund management can trigger ES through related activities even where pure VASP activity does not. Running the ES analysis at structuring time prevents retrospective remediation.
- Sequencing banking after CIMA approval. A 7–14 month Licence timeline stacked on a 2–6 month banking onboarding produces an operational launch date that rarely matches the founder’s plan.
Frequently Asked Questions
Any company or entity providing virtual asset services in or from the Cayman Islands needs either Registration or a Licence under the Virtual Asset (Service Providers) Act. Registration covers exchange, transfer, issuance, and participation in financial services related to virtual asset issuance. A Licence is required for virtual asset custody services and virtual asset trading platforms since .
Issue by a tokenised mutual fund of its own digital equity tokens, or by a tokenised private fund of its own digital investment tokens, is excluded from virtual asset issuance; other virtual-asset services the fund provides need a separate VASP perimeter assessment, and funds-law and SIBA requirements may also apply. Pure software providers that do not custody, match, or transfer on behalf of customers fall outside the regime.
Yes. There is no foreign ownership restriction on Cayman VASPs. Foreign-controlled entities pay the standard CIMA fee schedule; the reduced licence grant and renewal fees (one-tenth of the standard rate) apply only to entities classified as Local Companies under the Local Companies (Control) Act, with majority Caymanian ownership. The 10% beneficial ownership disclosure threshold applies to the VASP application; the 25% threshold applies to the central beneficial ownership register under the Beneficial Ownership Transparency Act 2023.
Only in part. Cayman runs a mixed regime supervised by CIMA: tokenised fund interests sit under the Mutual Funds Act or Private Funds Act, and a token with securities characteristics (a tokenised share, bond or note) may bring in the Securities Investment Business Act (SIBA) in addition to or instead of the VASP Act. The Virtual Asset (Service Providers) (Amendment) Act, 2026, which repealed a 2025 amendment, excludes from virtual asset issuance only the issue by a tokenised mutual fund of its own digital equity tokens and by a tokenised private fund of its own digital investment tokens; any other virtual-asset service the fund provides needs a separate VASP perimeter assessment.
A VASP registration or licence therefore does not settle the funds-law or SIBA position; the written scope treats the fund leg under the funds legislation (see fund licensing) and the security-token leg under SIBA.
On this page’s stage table, Registration takes about 4–8 months end to end, about 3–5 months of it after a complete first submission, and it extends where RFI cycles are repeated. CIMA does not publish formal service-level agreements. The Management Committee considers applications weekly; approval communications typically follow within 2–3 business days of decision. Applicants who submit incomplete Schedule 1A documentation or generic AML procedures face additional 4–8 week RFI cycles per round, and 1–3 RFI rounds is normal even for well-prepared submissions.
Licence applications (virtual asset custody, virtual asset trading platforms) take about 7–14 months end to end on this page’s stage table, about 5–10 months of it after a complete submission. The substantive review at CIMA examines business plan, governance composition, capital adequacy, AML/CFT procedures, IT and cybersecurity, custody-specific policies (wallet management, key generation, segregation), and VATP-specific policies (market abuse monitoring, listing rules). Complex applications can run substantially longer; a publicly disclosed Phase 2 licence conditional approval in January 2026 followed an initial Phase 1 registration filed in August 2022.
The Virtual Asset (Service Providers) Act does not impose a fixed statutory minimum capital. CIMA assesses adequacy case-by-case based on the applicant’s business model, risk profile, scale, and complexity. For Licence applicants (custody, virtual asset trading platforms), CIMA Rule 8.1 requires regulatory capital of at least the higher of risk-based capital and six months of fixed overheads, or a higher amount CIMA sets, maintained at all times. Insurance is required where applicable under the Market Conduct Rule, with alternatives subject to prior CIMA approval.
Figures quoted by consultancy hubs (such as USD 100,000 paid-up share capital) are not statutory and should not be treated as binding.
Two figures, not one. The statutory cost is what CIMA charges under Schedule 2: USD 4,878–37,806 in Year 1 at Registration tier, USD 79,268–189,024 for a Custody Licence and USD 189,025–371,951 for a VATP Licence: application fees, the registration or grant fee, and the first annual renewal. Everything else is the build, and it is quoted per case rather than fixed: incorporation, independent legal opinion, application drafting, Cayman-resident officers, auditor, insurance and AML software are estimated at USD 175,000–510,000 at Registration tier and USD 295,000–1,520,000 at Licence tier. The auditor, insurance and compliance-software stack accounts for the majority of that build.
No. The Cayman Islands was removed from the FATF Jurisdictions under Increased Monitoring list on after satisfying all 63 FATF Recommended Actions. The EU AML high-risk third-country list followed, removing Cayman on via Commission Delegated Regulation (EU) 2024/163. The UK AML list removed Cayman on . The next mutual evaluation (5th round) will be conducted by the CFATF, with the on-site assessment expected in late 2027 and technical-compliance information due earlier that year.
Banking access has improved materially post-delisting but remains selective. Most operators run a multi-provider stack: a primary European EMI for SEPA and SWIFT rails, a specialist Swiss or Liechtenstein institution for institutional flow and custody bonds, selective Caribbean private banks for local operational accounts, and Asian crypto-banking partners for APAC flows.
Budget 2–6 months for banking onboarding and apply to multiple institutions in parallel with the CIMA application. CIMA’s Custodian Rule (amended February 2026) requires client fiat to be held, segregated, with a licensed bank or similar institution acceptable to CIMA.
Annual obligations: annual fee (), annual return to the General Registry, Economic Substance Notification where applicable, AML/CFT annual return to CIMA, audited financial statements where required, beneficial ownership filings (monthly via corporate services provider since ). Quarterly obligations: VASP Financial Returns Form (since ), Travel Rule return. Material change pre-approvals: senior officer appointments, share issuances totalling 10% or more, any voluntary transfer or disposal of issued shares (unless CIMA has granted an exemption), business plan changes, registered office changes.
Pure virtual asset activity is not one of the nine relevant activities under the International Tax Co-operation (Economic Substance) Act (2026 Revision). However, particular crypto business models trigger ES through related activities: crypto fund management (fund management business if SIBA-licensed), crypto lending and staking-as-a-service (potentially finance and leasing business), and IP licensing of crypto IP (intellectual property business).
Run the ES analysis at structuring time rather than at first filing. Entities tax-resident outside Cayman can disapply the ES Test by providing evidence to the DITC.
Only on a reverse-solicitation basis under MiCA Article 61. A Cayman licence does not confer EU passporting rights. ESMA’s Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), applicable from , list signs that a firm is likely to be regarded as soliciting, judged on all the facts, such as advertising, promotions, influencer or affiliate campaigns aimed at EU clients, and a website in an EU language not customary in international finance; a firm that solicits EU clients cannot rely on the exemption. The exemption applies only where the client initiates the service at its own exclusive initiative, assessed on all the facts, and any further marketing of the same type stays confined to the context of the original transaction.
Operators with material EU client revenue should pair the Cayman entity with a separate EU CASP authorisation in an EU member state. See the full reverse solicitation guide for detail on what constitutes solicitation and the documentation burden.
Phase 3 is expected to bring into force the residual provisions relating to direct-to-public virtual asset issuance and the dedicated Sandbox Licence framework. As of , CIMA’s legislation index lists no Cabinet commencement order for Phase 3. Existing Phase 1 and Phase 2 authorisations will continue under their current terms; Phase 3 will introduce additional disclosure, listing, and consumer-protection obligations for direct-to-public issuance. Operators planning retail token issuance from Cayman should monitor the Ministry for Phase 3 timing.
Start your Cayman Islands VASP application
Jagelski & Partners scopes your written brief and introduces an independent specialist who runs the licensing application and banking work. Book a free assessment and we'll map your route to approval.
Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.
References
Show all references
- Cayman Islands Monetary Authority, Investments Statistical Digest, cima.ky; Cayman Finance, 2025 Fund Statistics (January 2026), via IFC Review, ifcreview.com; accessed .
- Cayman Islands Monetary Authority, Virtual Asset Service Providers, Key Resources, cima.ky, accessed .
- Cayman Islands Government, Tax Concessions Act (Revised), gov.ky, accessed .
- Mourant, Cayman Islands Exempted Companies (Guide), mourant.com, accessed .
- Cayman Islands Monetary Authority, Currency Statistics, cima.ky, accessed .
- FATF / Harneys, Cayman Islands Successfully Removed from FATF’s Grey List (27 October 2023), harneys.com, accessed .
- European Commission / Mourant, Cayman Islands Removed from the European Union’s AML List (7 February 2024), mourant.com, accessed .
- SEC private-fund data via Walkers, Cayman Islands Investment Funds 2025 Update, walkersglobal.com, accessed .
- Cayman Islands Monetary Authority, Virtual Asset (Service Providers) Act (2024 Revision), cima.ky, accessed .
- Cayman Islands Monetary Authority, Regulatory Policy on Registration or Licensing of VASPs (revised May 2025, effective 30 May 2025) and Rule on Obligations for Virtual Asset Custodians and Virtual Asset Trading Platforms (December 2024), cima.ky, accessed .
- Cayman Islands Monetary Authority, Virtual Asset (Service Providers) (Amendment) Regulations 2025 (SL 19 of 2025), cima.ky, accessed .
- Cayman Islands Monetary Authority, Desk-Based Review of Registered VASPs (November 2025), cima.ky, accessed .
- Cayman Islands Monetary Authority, Amendments to the Virtual Asset (Service Providers) Act effective 1 April 2025, cima.ky, accessed .
- Cayman Islands Monetary Authority, VASP FAQ, cima.ky, accessed .
- Ogier, DeFi, DAOs, and VASPs in the Cayman Islands, ogier.com, accessed .
- Ogier, A Guide to Cayman’s Beneficial Ownership Transparency Regime, ogier.com, accessed .
- Crypto.com Corporate Press, VASP Conditional Approval from CIMA (5 January 2026), crypto.com, accessed .
- OECD, Crypto-Asset Reporting Framework and Amendments to the Common Reporting Standard, oecd.org, accessed .
- Cayman Islands Monetary Authority via Walkers, CIMA Supervisory Information Circular (18 September 2025), walkersglobal.com, accessed .
- Mourant, The Cayman Islands Virtual Asset Service Providers Regime (Guide), mourant.com, accessed .
- Cayman Islands Government, International Tax Co-operation (Economic Substance) Act (2026 Revision), gov.ky, accessed .
- OECD Global Forum, Cayman Islands Second-Round Peer Review Report (2017) and Enhanced Monitoring Report 2025, oecd.org, accessed .
- European Securities and Markets Authority, Guidelines on Reverse Solicitation under MiCA (ESMA35-1872330276-2030), , esma.europa.eu, accessed .
- Cayman Islands Department for International Tax Cooperation, Deadline Extended for Registration Under Crypto-Asset Reporting Framework (industry advisory), ditc.ky, accessed .
- Cayman Islands Tax Information Authority, The Amended Common Reporting Standard: Quick Guide (Tax Information Authority (International Tax Compliance) (Common Reporting Standard) (Amendment) Regulations, 2025, in force 1 January 2026), ditc.ky, accessed .
- Cayman Islands Monetary Authority, Preparation for FATF 5th Round Mutual Evaluation, , cima.ky, accessed .
- Department for International Tax Cooperation (Cayman Islands), Industry Advisory: CARF and Amended CRS Take Effect in the Cayman Islands from 1 January 2026 (first reporting in 2027 for the 2026 calendar year), , ditc.ky, accessed .
- Cayman Islands Monetary Authority, Fee Schedule (updated 1 January 2026; US-dollar column “US$ @.82”, that is CI$0.82 = US$1), cima.ky, accessed .
- Cayman Islands Monetary Authority, Virtual Asset Service Providers Registration Statistics (registered entities, Q4 2025: 18), cima.ky, accessed .
- Cayman Islands Monetary Authority, Banking Registration & Licensing Statistics (Q2 2026: 11 Category A and 65 Category B bank licences), cima.ky, accessed .
- Cayman Islands Government, Virtual Asset (Service Providers) (Amendment) Act, 2026 (Act 4 of 2026; Legislation Gazette No. 16 of 24 March 2026; repeals the Virtual Asset (Service Providers) (Amendment) Act, 2025), cima.ky, accessed .
- Cayman Islands Monetary Authority, Rule and Statement of Guidance: Virtual Asset Custodians and Virtual Asset Trading Platforms (February 2026 versions, listed as current on CIMA’s VASP regulatory-measures page; the file names and side stamps mark individual paragraphs, mainly conduct-of-business provisions, as “Repealed”, and Rule sections 8.1 and 11.5 are not so marked; Rule section 11.5 on client fiat, Rule section 8.1 on regulatory capital), cima.ky; Rule and Statement of Guidance: Market Conduct for Virtual Asset Service Providers (February 2026), cima.ky, accessed .
- Cayman Islands Government, Beneficial Ownership Transparency (Legitimate Interest Access) (Amendment) Regulations, 2026 (SL 8 of 2026; Legislation Gazette No. 15 of 18 March 2026), cima.ky, accessed .
- Cayman Islands Monetary Authority, Decision Notice: AC Holding Limited (In Official Liquidation), registration cancelled effective (published 13 June 2025), cima.ky; and Enforcement Notices (index of warning and decision notices), cima.ky/enforcement-notices, both accessed .
- Cayman Islands Monetary Authority, Reporting Schedule 2026 (VASP licensees and registrants: annual AML return by 30 April, quarterly Travel Rule return and VASP Financial Return, no extension available), cima.ky, accessed .
- Cayman Islands Government, Anti-Money Laundering Regulations (2025 Revision), Part 10A (regulations 49A to 49P, transfers of virtual assets), cima.ky, accessed .
- Cayman Islands Monetary Authority, Laws and Regulations (Virtual Asset (Service Providers) legislation index; latest commencement orders SL 18 of 2025 and the Amendment Act 2024 Commencement Order 2025, both effective 1 April 2025), cima.ky, accessed .
- Financial Action Task Force, Jurisdictions under Increased Monitoring – 19 June 2026, fatf-gafi.org, read 25 September 2026.
- European Commission, Commission Delegated Regulation (EU) 2026/83 (replacing the Annex table of high-risk third countries), eur-lex.europa.eu, read 25 September 2026.
- Cayman Islands Monetary Authority, International Cooperation and International Agreements (participation in IOSCO, IAIS, GIFCS and CFATF; IOSCO and IAIS multilateral MoUs), cima.ky/international-cooperation and cima.ky/international-agreements, accessed .
- Cayman Islands Monetary Authority, Rule: Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing and Rule: Compliance with Financial Sanctions and Targeted Financial Sanctions (July 2026, effective 18 September 2026), cima.ky (compliance programme Rule) and cima.ky (sanctions Rule), accessed .
- HM Revenue & Customs, Double Taxation Relief Manual DT4700: Cayman Islands, agreements in force (Arrangement signed 15 June 2009, in force 20 December 2010), gov.uk, accessed .
- CIMA, Regulatory Policy – Approval of an Auditor for a Regulated Entity, sections 4, 6, 11–12 (effective 1 January 2027; transitional provisions), cima.ky, accessed .
- CIMA, Rule and Statement of Guidance – Market Conduct for Virtual Asset Service Providers, sections 4, 8 and 18 (published in Gazette No. 03/2026 on 2 February 2026), cima.ky, accessed .
- OECD, Consolidated Commentary to the Global Anti-Base Erosion Model Rules (2026), Chapter 1, Article 1.1, paragraphs 3–6, oecd.org, accessed .