Crypto Regulation and Licence Status in Comoros

What Comoros Offers and What It Does Not

Private AOFA agents market Anjouan certificates to forex/CFD brokers, offshore exchanges, OTC desks, token issuers, and iGaming operators. The BCC does not recognise AOFA as a lawful financial licensing authority, so the certificate is not a VASP authorisation and cannot establish regulated status.

Speed, Cost, and Scope

AOFA materials claim broad scope and private agents quote a typical Year-1 build of USD 19,000 to USD 49,500. They also quote 4–8 weeks for certificate processing. These are commercial claims and service estimates, not statutory costs, regulatory requirements, or an authorisation clock.

The Honest Qualifier

The controlling qualifier is stronger than limited recognition. The BCC says AOFA has no legal authorisation and describes approvals issued through these structures as illegal. The source and operative Union-level position are set out under Regulatory Framework below.

Who It Suits

This page remains useful for operators assessing an existing AOFA certificate or comparing offshore marketing claims. It does not recommend AOFA as a licensing route. A new applicant seeking regulated status should compare jurisdictions with an active statutory VASP or CASP authorisation process.

Regulatory Framework

AOFA materials cite island-level Acts of 2005 and hold out certificates for brokerage, crypto, banking, insurance, and gaming activity through a private agent network. Union law and the BCC's published enforcement position point the other way: AOFA has no recognised authority to issue Union financial permissions. Its own materials describe the AOFA as a statutory body established in 2001, operating under the Offshore Finance Authority Act 003 of 2005 with implementing rules in Government Notices 004, 005, and 008 of 2005. The crypto activities certificate cites Government Notice No. 005 of 2005 as its statutory hook, with scope variations under Notice No. 004. The Anjouan IBC sits under the International Business Companies Act 2005.^[4][5][6]

The Union-Level Position

Banking Law No. 13-003/AU of 12 June 2013, Articles 5, 6 and 18, reserves banking operations and connected activities to institutions licensed by the BCC and entered on its register; the BCC cites Articles 18, 22, 74 and 77 for the criminal penalties that apply to unlicensed banking, including offshore activity.^[1][24] In its communiqué of 15 June 2022, re-published by the Comoros Ministry of Finance on 10 December 2025, the BCC names AOFA, Anjouan Corporate Services, MISA, and related bodies as fictitious structures claiming to issue banking and financial licences. It states that approvals and financial products offered through them are illegal.^[2] In a warning signed by its Governor on 8 December 2025, the BCC adds that these bodies are not recognised in the Union and cannot act on behalf of the Union or any of its islands, and that no virtual-asset or VASP licence has been issued in the Union.^[24]

Practically, an AOFA certificate runs only as far as private counterparties accept it. It should not be described as a private regulatory instrument because no recognised regulator stands behind it. Federal banks and tier-1 international institutions may reject AOFA-credentialed structures on legal-status and enhanced-due-diligence grounds.

Private Operational Infrastructure

AOFA's operational infrastructure is privately run. Anjouan Corporate Services Ltd handles IBC and certificate files, while Anjouan Licensing Services Inc. markets a separate gaming certificate. The AOFA-branded register is not a recognised government licensing register. Multiple clone sites exist, adding a separate source-authenticity risk.

Regulatory Transition: AOFA to Federal Comoros Regime (PAIA Finance)

The Ministry of Finance Position

In an information note dated 10 December 2025, which also reports fraudulent issuance of forex and crypto licences, the Comoros Ministry of Finance set out the federal position (translated from French): "the Ministry is working to establish a regulatory framework for the issuance of official licenses, in collaboration with an international company specializing in the field, PAIA FINANCE. In the meantime, any promotion or use of unofficial licenses is strictly prohibited."^[3]

PAIA Finance describes itself on its own website as the exclusive distributor of the Ministry of Finance’s crypto and forex licences; that is the company’s own claim, and it cites no law, decree or register.^[26] Separately, operators have already felt the February 2025 MetaQuotes decision to stop issuing new MT4 and MT5 server licences for Comoros-registered brokers. Per trade-press reporting at the time, MetaQuotes informed local brokers privately that they would need authorisation from a different jurisdiction to access MetaTrader platforms.^[21]

Three Open Questions

In practice, the transition reduces to three open questions:

1. Replacement framework timing. No published target date, and no draft had been published on the Ministry of Finance or BCC websites when checked on 27 September 2026.
2. Grandfathering. No published commitment says existing AOFA-issued certificates will be recognised under a new regime. Operators should not assume continuity.
3. Scope. Whether the new federal framework will cover crypto specifically, or only forex/brokerage, is not disclosed.

Recommended Operational Posture

Operationally, do not treat an AOFA certificate as interim permission or as a route that can later be converted into a recognised licence. Existing holders should map their activities to a jurisdiction with an active statutory regime and plan a separate application there before making further investments that depend on regulated status.

Private Certificate Types and Claimed Activities

Six licence instruments are held out by the AOFA. Two are relevant to crypto operators: the International Brokerage and Clearing House Licence, with an attached crypto activities certificate, and the International Banking Licence Class B with crypto services. A separate International Online Gaming Licence is marketed through ALSI, but that private instrument does not establish recognised gambling permission.

What the Crypto Certificate Says

Neither VASP nor CASP appears in the native statute. According to the AOFA crypto certificate template, the licensee is "authorized to conduct all type of CRYPTO activities in accordance with the Government Notice No. 005 of 2005", with sub-activities varying under Notice No. 004. Stablecoin issuance, DeFi protocols, and unhosted-wallet services are not addressed in any AOFA document.

The Counterparty-Mapping Problem

Unlike the BVI VASP Act 2022 or the Cayman VASP regime, the AOFA certificate is generic and pre-dates the FATF's October 2018 definitional update on virtual assets. Counterparty due-diligence forms have no recognised authorisation to map to, and tier-1 stablecoin issuers do not accept the certificate as evidence of regulated status.

Private Certificate File Requirements

AOFA materials impose private certificate conditions rather than recognised statutory VASP requirements. They call for a registered office and agent, personal due diligence, an annual police-clearance refresh, and professional indemnity insurance. There is no recognised regulator fit-and-proper review, prudential capital test, or supervisory assessment.

Corporate Structure

• Entity type: Anjouan IBC under IBC Act 2005, or in some cases a foreign IBC.
• Minimum capital: none.
• Minimum directors: 1, individual or corporate. No residency requirement.
• Minimum shareholders: 1, individual or corporate.
• Public UBO disclosure: none.
• Foreign ownership: unrestricted.

Fit-and-Proper Review

Each UBO, director, manager, signatory, and shareholder submits a certified passport copy (issued within 90 days), proof of address, CV, bank reference letter, police clearance certificate, source-of-funds declaration, personal information form, and UBO Declaration Form.

One item operators often miss until renewal is the annual police-clearance refresh. Certificate-template wording is explicit: "the persons conducting the business of the company must provide a certificate from the local police authority where the company's principal place of business is located", refreshed annually.

Local Presence

• Registered office in Anjouan: required.
• Registered agent in Anjouan: required (in practice via the registered-agent network).
• Local director: not required.
• Local staff: not required.
• Local audit: not required.

Insurance and Risk Management

• Professional indemnity insurance: required on the International Brokerage and Clearing House Licence, sized to the activity.
• Internal audit function: required, but the report is not filed externally.

There is no recognised prudential review, fit-and-proper decision, or on-site inspection. Private documentary processing cannot substitute for regulator assessment.

Private Certificate Process

No regulator application process exists. Private agents describe six commercial work stages: IBC formation, file assembly, AOFA document processing, follow-up documents, certificate issuance, and banking work. Their 4–8 week estimate is not an authorisation clock.

The sequence runs in the following stages.

Documents Requested by Private Agents

The private certificate file includes a corporate pack, personal due diligence for each UBO and director, a business plan, financial projections, a platform description, and an AML/CFT policy manual. These documents do not enter a recognised regulator application. Banks and payment firms conduct their own review.

Corporate Pack

• Certificate of incorporation
• Memorandum and Articles
• Board resolution authorising the application
• Signed and dated organisational chart identifying directors, shareholders, UBOs
• Power of attorney to the registered agent

Personal Pack (each UBO, director, manager, signatory, shareholder)

• Certified passport copy, certified within 90 days
• Proof of address (utility bill or bank statement under 3 months old)
• Curriculum vitae
• Bank reference letter
• Police clearance certificate
• Source-of-funds declaration
• Personal information form
• UBO Declaration Form

Business Pack

• Comprehensive business plan: operations, target markets, revenue model, marketing strategy
• 3-year financial projections
• Technical description of the crypto platform
• Website terms and conditions
• AML/CFT policy manual

Compliance Policy Stack

AOFA materials request an AML/CFT manual. The wider stack below is driven by banking and payments counterparties, not by a recognised VASP supervisor:

Authentication: apostille on foreign personal documents and certified English or French translations on non-English source material.

Costs and Pricing

This page totals no verified statutory cost for an Anjouan crypto certificate. The Banque Centrale des Comores names the Anjouan Offshore Finance Authority among bodies holding no legal authorisation, and no official fee schedule verifies what the AOFA charges for a crypto certificate, so that charge is not presented as a state fee.^[1][2]

Agent quotations for that single charge run from EUR 5,000 to EUR 23,000. Every figure a founder is quoted is therefore commercial, agent-quoted and indicative, and the AOFA and IBC charges are kept out of the build totals below.

What the Anjouan Authority Charges

Elsewhere on this site the figure under a cost table is the statutory cost of the licence: what the regulator, the government and the law require, from a schedule a reader can check. No such figure is given for Anjouan. The amounts above are agent-quoted charges an operator may be asked to pay, but no official fee schedule verifies them, so they are not presented as state charges or added into a statutory total.^[2]

Typical Build Cost, Year 1 (quoted per case)

Typical Build Cost, Year 2 Onwards (quoted per case)

The AOFA and IBC charges are agent-quoted, no official fee schedule verifies them, and they are not added into the build totals above. None of the figures on this page is a verified statutory figure, and every line should be re-quoted before it becomes a budget.

Why a Cheaper Certificate Is Not Licensing Permission

A lower private-certificate quote does not make the proposed activity lawful. Compare the cost of obtaining recognised permission in an operative regime with the product and customer markets the business needs to serve. Agent support, compliance documents, or a shorter private processing estimate cannot replace that permission.

How to Read the Private-Cost Estimates

The private-cost estimates above describe commercial work around a certificate; they are not a budget for recognised crypto authorisation. Publication of an AOFA price list would not cure its lack of legal authority. Any future federal route must be assessed against its operative law, authorised issuer, and application process before it can support a licensing budget.

Timeline

There is no recognised Comoros VASP authorisation timeline. Private agents quote 4 to 8 weeks to process and issue an AOFA certificate. Banking and payments onboarding may take 8 to 16 weeks or end in refusal; it runs in parallel from file assembly, and neither period measures regulator approval.

Banking remains a separate and uncertain workstream. Completing the private certificate stages does not establish regulated status or guarantee that a bank, payment institution, exchange, or other counterparty will onboard the entity.

The federal-transition trajectory is a second variable. Operators should re-check the Union-level position before any decision and should not treat continuing private issuance as evidence that the certificate has become legally recognised.

Taxation

The official Union Code général des impôts 2023 applies a 35% corporate income tax to profits from enterprises and operations carried on in Comoros under Articles 8 and 33. Article 35 sets a minimum tax of 1.5% of turnover; Article 36 instead sets a 3% minimum on turnover realised in Comoros for businesses whose accounts are kept at their head office outside Comoros. We found no distinct 0% Anjouan IBC exemption in that official code.^[23]

Claims of exemptions from capital gains tax, withholding tax, VAT, or stamp duty for an international IBC were not established by that source and should not be relied on without current Comorian tax advice.

Comoros has not signed the CRS Multilateral Competent Authority Agreement and is not on the OECD Global Forum list of jurisdictions committed to the CARF (last update 14 September 2026).^[16] Economic substance legislation is absent.

The marketed 0% tax headline is not supported by the official Union tax code. Non-participation in CRS and the absence of economic-substance legislation remain sources of counterparty friction rather than tax concessions. Many banking counterparties treat non-participation in CRS as a risk factor in their due diligence; OECD Global Forum reporting and home-country CFC regimes capture the IBC structure on a different vector regardless of Comoros's own position.^[16]

Home-Country Tax Considerations

For most operators in this market, the tax planning that matters is not the Anjouan side. It is the home-jurisdiction analysis: whether the IBC has substance somewhere recognisable, whether the home-country CFC rules attribute IBC profits to the parent, and whether the structure survives a tax-authority review under the OECD's BEPS Action 5 substance standards. Jagelski & Partners does not advise on home-jurisdiction tax; the structuring work proceeds with the CFC and substance questions front of mind.

Private Certificate Conditions and Post-Registration

AOFA materials set private ongoing conditions: annual police-clearance refreshes, annual payment, notice or approval of specified changes, and insurance maintenance. These conditions govern the private certificate and should not be described as supervision by a recognised VASP authority.

The certificate describes a one-year term and renewal payment. Its own cancellation wording applies if the company engages in prohibited activities, conducts business in Anjouan beyond the registered office, or misses the payment date. Those private terms do not create statutory VASP permission.

Where cancellation occurs, "officers conducting business after cancellation are personally, jointly, and severally liable for all actions, omissions, irregularities, or violations committed after the cancellation."

Ongoing Obligations Checklist

• Annual renewal payment, on or before the due date stated on the certificate.
• Annual police-clearance refresh on every person conducting business in the company.
• Pre-approval of changes to directors, shareholders, share capital, share-transfer ownership of 10% or more, and registered office.
• Maintenance of professional indemnity insurance throughout the private certificate period.
• Internal audit function maintained, with reports retained but not externally filed.
• Compliance with the AML/CFT manual filed at application, including SAR/STR reporting to the federal FIU (Service de Renseignement Financier) under Law No. 25-004/AU of 30 June 2025.^[8][10]
• Notification of material changes to the platform, target markets, or activity scope.

AOFA does not conduct recognised VASP supervision. Counterparty banks and PSPs perform their own monitoring, while the annual police-clearance, payment, and insurance cycle governs only the private certificate.

Anjouan has no jurisdiction-specific cybersecurity or operational-resilience rulebook; counterparty-driven ICT requirements are listed in the compliance policy stack under Documents.

Banking

An AOFA certificate does not establish regulated status for banking. Local Comorian banks and tier-1 international banks may reject AOFA-credentialed companies. Some structures add a payment-agent company in another jurisdiction, but that does not cure the missing VASP permission and creates its own legal, tax, substance, and counterparty risks.

Payment-agent structures add USD 5,000 to USD 15,000 per year in incorporation, agent, compliance, and inter-company contracting costs. They also introduce inter-company VAT, transfer-pricing, and substance considerations that an Anjouan-only structure does not have.

A commonly marketed pattern pairs an Anjouan certificate holder with a separate payment entity and splits contracts from payment rails. That arrangement does not turn the AOFA certificate into a licence. It may instead move regulated activity, customer-funds, tax, and substance questions into the payment entity's jurisdiction.

Reputational drag from the 2008 banking scandal continues to affect Anjouan banking onboarding. If anything, the BCC's June 2022 communiqué, its 8 December 2025 warning and the Ministry of Finance note of 10 December 2025 have sharpened the pattern rather than softened it.^[2][3][24] The pathway table above reflects May 2026; counterparty appetite moves quickly, so each pathway should be re-checked before a structure is built: learn about our Banking service →

For existing Anjouan structures, banking feasibility and regulatory perimeter must be tested before further implementation. For a new regulated business, the safer starting point is a recognised authorisation route with banking architecture assessed alongside it.

FATF Status & International Standing

As of September 2026, neither FATF grey-listing nor blacklisting applies to the Union of the Comoros. Adopted in May 2024, the GIABA Mutual Evaluation Report found medium-high ML risk and pervasive supervisory deficiencies. Comoros is not on the EU's high-risk third countries list in force since 29 January 2026. An AOFA certificate confers no market-access rights in any jurisdiction.

FATF Position (after the 19 June 2026 plenary)

• FATF blacklist: Iran, DPRK, Myanmar. Comoros not listed.
• FATF grey list: Bosnia and Herzegovina and Iraq added at the June 2026 plenary. Comoros not listed.
• FATF-style regional body: GIABA (the Inter-Governmental Action Group against Money Laundering in West Africa), which Comoros joined from ESAAMLG in 2017; Comoros is under GIABA enhanced follow-up, with the next report due in May 2027.^[7][25]

GIABA Mutual Evaluation Report Findings

The MER (on-site July 2023; adopted May 2024) assesses Comoros at medium-high ML risk and at a moderately low TF threat with a high level of TF vulnerability. The report records one ML conviction and no TF convictions in the period under review. Substantive findings include limited FIU resources, insurance-sector AML supervision not designated, DNFBP supervisors largely not designated, and "no mechanism for identifying the beneficial owners of legal persons other than those that are customers of banks and certain DNFBPs." These are the deficiencies that drive enhanced due diligence at tier-1 banking counterparties regardless of Comoros's current FATF status.^[7]

EU Position

Comoros is not on the EU's high-risk third countries list as of the 29 January 2026 update under Delegated Regulations (EU) 2026/46 and 2026/83.^[13] Comoros is not on the EU Tax Haven List Annex I or Annex II as of the 17 February 2026 ECOFIN update.^[15]

UK and US Positions

UK high-risk third countries listing follows FATF. The US has no comprehensive Comoros sanctions programme. OFAC, EU, and UK sanctions regimes apply on a destination-market basis regardless of Anjouan's own position.

EU Market Access

An AOFA certificate confers zero market-access rights in the EU or EEA. Under MiCA Article 61, a third-country firm may provide services to an EU client only at the client's own exclusive initiative. ESMA's Guidelines on reverse solicitation under MiCA (Ref. ESMA35-1872330276-2030, published 26 February 2025, applicable from 27 April 2025) list signs that a firm is likely to be regarded as soliciting EU clients, judged on all the facts: EU-targeted advertising, influencer engagement, and a website in an EU language that is not customary in international finance are among them, and a firm that solicits EU clients cannot rely on the exemption.^[11][12]

Operators with material EU customer acquisition should not plan around reverse solicitation. The realistic options are MiCA CASP authorisation in an EU member state, partnering with a MiCA-authorised CASP, or accepting that the EU market is closed. See the reverse solicitation briefing for the detail.

Commercial Characteristics and Limitations

The first entries describe private commercial characteristics only. They are not regulatory advantages and do not offset the absence of a recognised authorisation.

• ✓ Cost. A Year-1 build of USD 19,000 to USD 49,500, quoted per case, with the agent-quoted AOFA charges left out. It overlaps the lower end of statutory routes such as Mauritius, the BVI, and the Bahamas and sits far below Cayman and Vanuatu, but it buys no recognised permission.
• ✓ Private processing speed. Agents quote 4–8 weeks for the certificate, but there is no regulator approval.
• ✓ No recognised VASP capital framework. The absence of a statutory floor reflects the absence of a recognised regime, not a regulatory concession.
• ✓ Broad claimed scope. AOFA materials claim crypto, forex/CFD, securities-brokerage, and related gaming coverage; no recognised regulator grants that scope.
• × Tax headline is not verified. The official Union code applies 35% corporate income tax on Comoros-source business profits and does not establish the marketed 0% Anjouan IBC exemption. Mitigation: model the Union rule and obtain current Comorian tax advice before relying on any island-level exemption claim.
• ✓ Minimal substance burden. No local-director, local-staff, local-premises, or audit-filing obligation, and no public UBO register.
• ✓ Federal AML framework exists. A Union-level AML/CFT regime exists (Law No. 25-004/AU of 30 June 2025, adopted after Law No. 12-008/AU), but an AOFA file referring to it does not create regulatory supervision.
• × No recognised legal validity. The BCC says AOFA has no legal authorisation. Mitigation: use a jurisdiction with an active statutory route and treat any AOFA document only as a private certificate.
• × No major-market access. No market access in the EU, UK, US, Singapore, Hong Kong, UAE, or Australia. Mitigation: Operators targeting those markets should authorise in a recognised jurisdiction; the FAQ covers the separate-application routes.
• × Banking cannot supply missing permission. A separate payment company does not make an unlicensed activity lawful. Mitigation: establish the required authorisation first, then assess payment-provider acceptance for the proposed structure.
• × Counterparty-withdrawal risk is live. The MetaQuotes February 2025 halt is the leading case; PSP and liquidity-provider withdrawals trend in the same direction. Mitigation: Avoid vendor dependencies that assume AOFA paper retains its current standing beyond a 12 to 24 month horizon.
• × List status can change. Comoros was on neither FATF list after the June 2026 plenary, but the GIABA MER 2024 rated all 11 Immediate Outcomes Low Effectiveness, and Comoros remains under GIABA enhanced follow-up after its May 2026 report.^[7][25] Mitigation: Maintain a recognised-jurisdiction plan in parallel.
• × Signal-level negatives. Non-participation in CRS and CARF is a negative at sophisticated counterparties; no economic-substance legislation leaves the structure vulnerable to OECD BEPS Action 5 attribution and home-country CFC rules. Mitigation: Build recognisable substance somewhere in the group and model the home-country tax stack.
• × No recognised VASP/CASP permission. Counterparty due-diligence forms cannot map the AOFA certificate to a recognised authorisation. Mitigation: obtain a separate authorisation in an operative regime.
• × Federal-transition risk. The Ministry of Finance framework announced with PAIA Finance is not in force, and AOFA paper may not be grandfathered. Mitigation: adopt the operational posture in the regulatory transition section.

How Comoros Compares

Anjouan is not a like-for-like licensing peer. Its private certificate can be processed more quickly and cheaply than a statutory application, but it does not provide the permission, supervision, or recognition that the other active regimes provide.

Compare every crypto jurisdiction side by side →

Unlike Vanuatu, where the VFSC sets an unimpaired paid-up capital floor of VT 200,000,000 (about USD 1.7M) across the Class D to D.4 Virtual Asset Service Provider licences, Anjouan has no recognised statutory licensing-capital framework. Unlike Marshall Islands, where the DAO structure under the RMI Non-Profit Entities Act 2021 supports specific token-issuance use cases, the Anjouan instrument is general-purpose and pre-dates modern token taxonomy.

Unlike Saint Lucia, where a national regulator administers a statutory licensing regime (the FSRA had issued no licence under it by 16 June 2026), Anjouan operates at the island-autonomy level with the federal repudiation noted above.

For operators with the budget and timeline to consider the UAE, the comparison is not close on credibility or banking access. Regulated crypto licensing in the UAE sits in a different tier entirely. See the Dubai/UAE crypto licensing page for the full treatment.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Common Mistakes with AOFA Certificates

The primary mistake is treating a private certificate process as a regulator application. The remaining risks concern market access, banking, private certificate conditions, source authenticity, and the need for a separate application in a recognised jurisdiction.

1. Treating the licence as "regulated" for tier-1 onboarding. Major exchanges, payment processors, and business-banking neobanks will reject KYB submissions citing an AOFA crypto certificate as the sole regulated-status evidence. Plan around this from day one.
2. Marketing to EU retail without a MiCA Article 61 mapping. ESMA's February 2025 Guidelines list signs of solicitation, such as EU-targeted advertising, influencer engagement, or a website in an EU language not customary in international finance, judged on all the facts; a firm that solicits EU clients cannot rely on the exemption.
3. Treating private certificate conditions as permission to serve clients. The certificate explicitly prohibits in-jurisdiction business. Conducting business in Anjouan beyond the registered office triggers automatic cancellation under the certificate’s own terms (see Private Certificate Conditions).
4. Assuming no ongoing compliance. Annual police-clearance refresh, renewal payment by due date, the change-notification regime, the internal audit, and PI insurance maintenance are all mandatory. Non-renewal triggers automatic cancellation with personal officer liability for post-cancellation activity.
5. Buying a shelf Anjouan-licensed company without re-running KYB. Shelf-company resale spiked post-MetaQuotes February 2025. The buyer inherits the seller's compliance history with banks and counterparties, including any de-risking actions taken against the entity name.
6. Believing the AOFA register at one URL is the only authoritative register. Multiple AOFA-branded clone sites operate. Verify which register lists the certificate before paying renewal.
7. Confusing Anjouan with Mwali (MISA). Different islands, same federal-validity repudiation, both named in the BCC 15 June 2022 communiqué. Counterparty due-diligence will not distinguish between them.
8. Treating later authorisation as a tier-up. A recognised licence requires a separate application. The AOFA certificate does not migrate or shorten the statutory review.

Frequently Asked Questions

References