Mauritius VASP Licence (VAITOS Act)

Why Choose Mauritius for Crypto Licensing?

Mauritius runs one of the few prudential virtual-asset regimes in the offshore world. The Virtual Asset and Initial Token Offering Services Act 2021 gives the Financial Services Commission a named statute, five licence classes and a public register, so a Mauritius VASP is a licensed financial institution rather than a registered service provider. For operators serving African, Asian and global non-EU markets, that credibility, paired with a long treaty network, is the draw.

A Prudential Licence, Not a Light-Touch Registration

The honest differentiator is that Mauritius licenses rather than registers. The VAITOS Act imposes class-based capital floors, fit-and-proper review of controllers and beneficial owners, a mind-and-management substance test, audited accounts and a dedicated rulebook covering custody, cybersecurity and conduct.^[1][2] That is a heavier build than a Seychelles or Caribbean registration, and it is the point: the regime is designed to read as a regulated financial-services authorisation to banks, payment networks and institutional counterparties, which is exactly where offshore registrations tend to fall short.

In practice, applicants who treat Mauritius as a fast, cheap offshore formation are the ones who stall. The licence rewards a genuine operating substrate, real directors, a real office and capitalised risk functions, and the FSC tests for it.

Off the FATF Grey List Since October 2021

Mauritius was placed on the FATF grey list in February 2020 and the EU high-risk list from October 2020, then cleared both. The Bank of Mauritius confirmed removal from the FATF list of jurisdictions under increased monitoring on 21 October 2021, and the European Commission delisted Mauritius on 7 January 2022.^[9][10] Mauritius is now rated Compliant or Largely Compliant on 39 of the 40 FATF Recommendations, with Recommendation 15 on virtual assets upgraded to Largely Compliant. That clean standing carries weight that a year of de-risking pressure on offshore peers has only sharpened.

Treaty Network and an Established Financial Centre

Mauritius operates as an international financial centre with more than 40 double-taxation agreements and a mature corporate-services ecosystem.^[12] English is the working language of statute, submissions and the courts, and the legal system is a hybrid of common and civil law with the UK Privy Council as the final court of appeal. For groups structuring African or Asian operations, that combination of treaty access, English-language administration and prudential supervision is the practical reason to choose Mauritius over a thinner offshore alternative.

Where Mauritius Is Honestly Weaker

Two constraints must sit at the front of any plan. First, banking: a Mauritius VASP licence does not by itself secure a Mauritian bank account for client fiat, and most operators run client flows through offshore payment rails (see Banking Reality). Second, tax: the headline corporate rate is 15%, and the widely-quoted 3% effective rate is not cleanly confirmed for VASP fee income as of June 2026 (see Taxation). Both belong at the front of the plan, not glossed over once the licence looks attractive.

Regulatory Framework

Mauritius regulates virtual assets under the Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS Act), in force since 7 February 2022.^[1] The Financial Services Commission is the single licensing and AML/CFT supervisor for VASPs and ITO issuers. The Bank of Mauritius is a second gateway only where a bank or payment-system licensee wants to conduct virtual-asset business. Security tokens fall outside VAITOS, under the Securities Act 2005.

Regulatory History and Track Record

The VAITOS Bill was passed by Parliament on 10 December 2021, gazetted on 16 December 2021 and brought into force on 7 February 2022, making Mauritius one of the first Eastern and Southern African jurisdictions with comprehensive virtual-asset and token-offering legislation.^[1] The Act has since been amended by Act No. 15 of 2022 and Act No. 12 of 2023. The FSC issued its first VASP licences in the financial year ending 30 June 2024, granting seven licences in that first cohort, and deemed entities previously licensed as digital-asset custodians to be Class R custodians from 6 August 2023.^[7] A current cumulative licensee count is best read from the FSC online public register.^[6]

The regime is stable rather than transitioning. The live moving parts are incremental: 2024 FSC guidance bringing staking and DAOs within scope, tightened AML/CFT obligations, Bank of Mauritius guidelines for banks dealing with VASPs, and an unresolved tax-scope question for VASP income.

Recent Regulatory Developments

• 12 December 2025 – Mauritius signs the CARF Multilateral Competent Authority Agreement. Committing to the OECD Crypto-Asset Reporting Framework, with first exchanges in the 2028 wave.^[11]
• 1 July 2025 – Qualified Domestic Minimum Top-up Tax takes effect. A 15% minimum effective rate for in-scope constituent entities of large multinational groups, via the Finance Act 2025 (Pillar Two).^[13]
• May 2026 – A virtual-asset payment company is reported on the FSC register. Holding Class M, O and R licences under the VAITOS Act, illustrating that multi-class authorisations are being granted in practice.^[18]
• March 2025 – Enhanced AML/CFT obligations. Tighter transaction monitoring, cross-border reporting and beneficial-ownership disclosure for VASPs.^[15]
• 2024 – FSC guidance brings staking and DAOs within VAITOS; Bank of Mauritius issues virtual-asset guidelines for banks. Raising the onboarding bar for banks dealing with VASPs.^[8]
• 7 January 2022 – EU removes Mauritius from its AML high-risk list, following the FATF grey-list exit on 21 October 2021.^[9][16]

Regulatory Overlap and Boundaries

The Bank of Mauritius Gateway in Practice

For the great majority of applicants, a standalone Global Business Company applying for a VASP licence, there is one regulator: the FSC. The Bank of Mauritius gateway is narrow and applies only to banks and National Payment Systems Act licensees. Such an institution needs the BoM’s written approval before applying, and Classes M, O and S can only be issued to a subsidiary of the institution rather than the institution itself. A bank may apply directly only for Class R custody or Class I advisory.^[2] Most crypto operators never engage this gateway.

The Five VASP Licence Classes (M-O-R-I-S) and ITO

The VAITOS Act creates five VASP licence classes, deliberately named so that the class letters spell M-O-R-I-S, plus a separate ITO issuer registration. Each class maps to one statutory activity, and an applicant may hold several classes under a single licence with a combined capital requirement. The mapping below is taken from the FSC VAITOS FAQ and the Act’s Second Schedule, which is the only authoritative source, and is consistent with the FSC’s own VAITOS guide.^[2][3]

Choosing the Right Class (or Classes)

The class follows the activity, and most operating businesses need more than one. A spot exchange that holds client assets and matches orders is a Class S Market Place; if it also deals on its own book it adds Class M, and if it self-custodies it adds Class R. A custodial wallet provider is Class O for transfer and Class R for safekeeping. A pure advisory or token-sale arranger is Class I. The combined-capital rule means each added class raises the floor, so the scoping decision is also a capital decision.

• Exchange or marketplace operator – Class S, usually with Class M (dealing) and Class R (custody).
• Broker-dealer or OTC desk – Class M.
• Custodial wallet or transfer service – Class O, with Class R where assets are held.
• Dedicated custodian – Class R.
• Advisory or token-offer arranger – Class I.
• Token issuer offering to the public – ITO issuer registration (VT-1.1), separate from the VASP classes.

The ITO Issuer Route

An ITO issuer is a company registered with the FSC to offer virtual tokens to the public. The process is prescriptive: register at least 45 days before the offer, with the FSC processing within 30 days; a White Paper signed by every governing-body member and published throughout the offer plus 15 days after; an offer period of no more than six months; a 72-hour purchaser withdrawal right; and rescission or damages for material misrepresentation.^[2] The ITO route sits alongside, not inside, the five VASP classes.

DeFi, DAOs, Staking, NFTs and Stablecoins

FSC guidance in 2024 brought DeFi, staking and DAOs within VAITOS licensing, with DeFi lending typically treated under Class M.^[8] The FSC has issued separate guidance on NFTs, and non-transferable closed-loop items sit outside scope. Fiat-referenced stablecoins are excluded from the core virtual-asset definition because the Act excludes digital representations of fiat currency, so a fiat-backed stablecoin is not, in itself, a VAITOS virtual asset. Security tokens revert to the Securities Act 2005.

Requirements

Six layers of requirement apply to a Mauritius VASP applicant: the corporate vehicle (a Global Business Company) and its beneficial ownership; the resident directors and senior executive; the resident risk functions (MLRO, deputy MLRO and Compliance Officer); the physical office and mind-and-management substance; the class-based capital; and the policy and audit framework. The FSC assesses fit-and-proper across controllers, beneficial owners, associates and officers.^[2]

Mind-and-Management Substance

Substance is the requirement applicants most often underestimate. The FSC examines where strategy, risk and operational decisions are actually taken, where the executives and board meet, and the residence of officers.^[2] A physical Mauritius office is a condition of in-principle approval, and the company must be genuinely directed and managed from the island. A holding-company shell with a thin local layer does not pass, and the same substance test underpins any later claim to tax benefits.

In practice, the binding hires are the resident risk functions. A full-time MLRO, deputy MLRO and Compliance Officer who meet the FSC competency standards, plus at least two resident directors, are what make an application credible, and sourcing them is the part of the build that takes the longest.

Fit-and-Proper

Fit-and-proper review reaches every controller, beneficial owner, associate and officer. The FSC tests honesty, integrity, competence and financial soundness, and material adverse regulatory history offshore can be grounds for refusal, so it is better disclosed at the outset than discovered in review. The standard mirrors the continuing-obligation regime of the Financial Services Act 2007, whose disciplinary machinery applies to VASP enforcement.^[1]

The GBC Vehicle

The entity that holds the licence must be a company, and in practice a Global Business Company holding a Global Business Licence, which is the structure that carries treaty access and the substance expectations the FSC looks for. An Authorised Company is unsuitable here because it is tax-non-resident. Forming the GBC is the foundation step and is coordinated through the Mauritius company formation service; the licensing capital and substance are layered on top.

Application Process

The application runs in four stages over roughly six to nine months. The defining feature is that the FSC issues an in-principle approval before company registration is finalised, and a physical Mauritius office is a condition of that in-principle approval. The statutory clock then requires the FSC to decide within 30 days of a complete application, though the real timeline is set by how long it takes to assemble a complete application.

Sequencing matters. The predictable stumbles are substance that is too thin, risk-function hires left too late, and a class scope that under-provides capital. Jagelski & Partners coordinates the Mauritius pathway end-to-end, including GBC formation, resident-functionary sourcing where required, the compliance documentation build and the FSC submission, so the application reaches the regulator as an already-aligned position rather than a starting point.

Required Documents

The FSC application package combines incorporation evidence, fit-and-proper documentation for controllers, beneficial owners and officers, a detailed business plan with three-to-five-year financials, the capital evidence and a complete set of operational, custody and AML policies. Below are the policies and frameworks the regulator expects to see, tailored to the VAITOS Rules rather than imported as generic templates.

Compliance Documentation

The FSC expects bespoke policies aligned to the VAITOS Rules 2022, the FIAMLA framework and the FSC AML/CFT Handbook, not offshore boilerplate. Each policy below is drafted to address Mauritian statutory and supervisory expectations and reviewed against the current FSC guidance.

• Business Plan and Financial Projections. Three-to-five-year financials underpinning the capital and working-capital case. Sets out the operating model, the licence classes sought, revenue and cost assumptions and break-even analysis, with negative and positive scenarios for the Class O twelve-month working-capital test.
• AML/CFT Policy Manual. FIAMLA-aligned control environment for a reporting person. Establishes anti-money-laundering and counter-financing-of-terrorism controls, identifies the MLRO, deputy MLRO and Compliance Officer and their reporting lines into the FIU, and addresses crypto-specific typologies including mixers, anonymity-enhanced coins and self-hosted wallet transfers.
• Enterprise-Wide Risk Assessment. Customer, geographic, product and channel risk. Documents inherent and residual money-laundering and terrorist-financing risk across customer types, jurisdictions, products and delivery channels, with controls calibrated to each tier and residual-risk scoring after controls.
• Travel Rule Implementation. Originator and beneficiary data capture under the VAITOS Travel Rule provisions. Operationalises obtaining, holding and transmitting accurate originator and beneficiary information, with the reduced data set for occasional transactions below USD 1,000 and full information at and above the threshold.
• Sanctions Screening Procedures. UN sanctions lists under the United Nations Sanctions Act 2019, with refresh frequency, hit-rate testing, an escalation matrix and freezing procedures for both natural-person and wallet-address designations.
• Transaction Monitoring Framework. Risk-tiered scenarios mapped to FIAMLA red-flag indicators. Includes crypto-specific typologies such as chain-hopping, peel-chain laundering and mixer ingress and egress, with an alert-handling and disposition workflow.
• STR Procedures. Reporting to the Financial Intelligence Unit via the goAML platform. Sets the internal escalation, decision and filing procedures, with tipping-off prohibitions and record-keeping obligations.
• KYC & Client Onboarding (incl. KYB). Customer and business due diligence with enhanced measures for higher-risk clients and politically exposed persons, and beneficial-ownership verification at onboarding and periodic review.
• Custody of Client Assets Framework. Segregation, client-specific records and third-party custodian due diligence at least annually, with proof-of-reserves arrangements for custody classes (R and S). Operationalises the Custody of Client Assets Rules.
• IT and Cybersecurity Manual. Platform architecture disclosure, access controls, independent testing and the cyber-reporting-event obligations under the VAITOS Cybersecurity Rules, with ISO 27001 alignment favoured in practice.
• Business Continuity and Disaster Recovery Plan. Documented continuity, recovery and resilience procedures proportionate to the licence classes and the custody model.
• Outsourcing and Professional Indemnity. An outsourcing framework with oversight of delegated functions, and the professional indemnity insurance quote required under the Risk Management Rules 2022.

Costs and Capital

Government fees are modest, from USD 1,000 to USD 3,000 in processing and USD 1,900 to USD 5,000 a year by class. The real Year 1 budget is set by the professional build and the paid-in capital. A realistic all-in figure is around USD 55,000 to USD 150,000 for a full Class S exchange and USD 30,000 to USD 60,000 for a simpler Class O or Class I build, excluding the class-based capital deployed into the company.

Government Fees by Class

Fees are set by the Financial Services (Consolidated Licensing and Fees) (Amendment No. 2) Rules 2022.^[4] USD figures control for Global Business Licence holders, which VASPs typically are; non-GBL applicants pay the MUR equivalent at the indicative rate on the payment date. The current schedule is maintained in the FSC codified list of licences and fees.^[5]

Minimum Capital by Class

Capital is class-dependent minimum unimpaired stated capital, set by the VAITOS Capital and Other Financial Requirements Rules 2022.^[15] The FSC may set a higher amount based on the nature, scale, complexity and risk of the business, and multi-class licences carry a combined requirement.

Total Year 1 Cost (Indicative, Advised Route)

The professional-cost ranges above are indicative practitioner estimates, not regulator-set figures, and vary with the class scope and the complexity of the operating model. A self-managed application is technically possible, but the substance, capital and documentation expectations are where unsupported applicants tend to stall.

Timeline

The realistic timeline is six to nine months from incorporation to grant. The VAITOS Act requires the FSC to approve or deny within 30 days of a complete application, so the calendar is governed by how long it takes to assemble a complete file, including the substance and the in-principle approval, rather than by regulator review speed once the file is in.^[2]

• Months 1–2 – Structuring. Scope the licence classes, structure the GBC and prepare incorporation. Secure any Bank of Mauritius approval where the applicant is a bank or payment-system licensee.
• Months 2–5 – Substance and risk functions. Secure the physical office, appoint resident directors and the resident senior executive for Class M, and onboard the MLRO, deputy MLRO and Compliance Officer.
• Months 3–6 – Documentation build. Business plan and financials, AML/CFT manual, IT and cybersecurity manual, custody architecture, BCP and the professional indemnity quote.
• Months 4–6 – Application and in-principle approval. File with the FSC; the physical office must be in place at the in-principle stage.
• Months 6–9 – Queries, capitalisation and grant. Respond to FSC information requests, finalise registration, deploy capital and complete the grant.

Two things dominate the slippage. The first is substance: securing the office, the resident directors and the resident risk functions is the long pole, and the in-principle approval cannot be issued without the office in place. The second is class-and-capital scoping done too late: discovering a custody class is needed adds capital and documentation after the plan is set. Both are front-loaded in a well-run application.

Taxation

The headline corporate tax is 15% on chargeable income, with no capital gains tax.^[12] Mauritius is widely marketed on an effective rate of about 3%, reached through an 80% partial exemption, but that figure is not cleanly available to VASP fee income as of June 2026. The honest planning rate for a VASP is 15%, with any partial-exemption benefit on fee income treated as unconfirmed until clarified.

Corporate Tax and the VASP Caveat

A Mauritius VASP is subject to 15% corporate tax on its chargeable income, and there is no capital gains tax.^[12] For VASP fee income to benefit from the 80% partial exemption, the licensing provisions would need to classify VASP activities alongside the other financial-services licences that qualify, and as of June 2026 that classification has not been made explicit. A 2025 reading of the Finance Act points to a restrictive rather than generous treatment for VASP licence holders.^[17] This is the single biggest place where a conservative, credible plan matters: the 80% partial exemption is not cleanly available to VASP fee income as of June 2026.

VAT

Standard VAT is 15%. From January 2026 the VAT registration threshold applies to businesses with turnover above MUR 3m, and VAT scope was extended to foreign-supplied digital and electronic services. The precise VAT treatment of specific virtual-asset services is not cleanly settled and should be confirmed with a Mauritian tax adviser for the particular revenue lines in question.

Pillar Two and CARF

Mauritius implemented a Qualified Domestic Minimum Top-up Tax (QDMTT) via the Finance Act 2025, effective for the year of assessment commencing 1 July 2025, ensuring a 15% minimum effective rate for constituent entities of multinational groups with consolidated revenue of at least EUR 750m.^[13] Only large MNE-group VASPs are in scope; standalone operators are unaffected. On crypto tax transparency, Mauritius signed the OECD CARF Multilateral Competent Authority Agreement on 12 December 2025 and sits in the 2028 first-exchange wave, with domestic CARF regulations still to be published as of mid-2026.^[11][14]

AML/CFT & Ongoing Compliance

The FSC is the AML/CFT supervisor for VASPs under the VAITOS Act, on top of the Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA) and the FIAML Regulations, which make a VASP a reporting person. The FSC issued dedicated AML/CFT Guidance Notes for VASPs and ITO issuers on 28 February 2022, and the FSC AML/CFT Handbook applies.^[1]

Travel Rule and Reporting

VASPs must capture and transmit originator and beneficiary data on transfers, screen against UN sanctions designations under the United Nations Sanctions Act 2019, and apply customer due diligence and enhanced due diligence on a risk basis. Suspicious transaction reports go to the Financial Intelligence Unit through the goAML platform.^[1] Customer due diligence is triggered at the prescribed transaction thresholds, and full beneficial-ownership disclosure was tightened under the March 2025 enhancements.^[15]

Ongoing Filings and Obligations

• Annual audited financial statements and statutory returns within four months of the financial year-end.
• Continuing fit-and-proper compliance for controllers, beneficial owners and officers.
• Maintenance of the minimum unimpaired capital for the licensed class, or combined floor for multi-class licences.
• Custody segregation and at-least-annual third-party custodian due diligence for custody classes.
• Change notifications to the FSC for directors, officers and significant shareholders.
• Ongoing professional indemnity insurance under the Risk Management Rules 2022.

Advertising and Conduct Rules

The VAITOS Publication of Advertisement Rules reach any VASP or ITO issuer advertising in or from Mauritius, and a Mauritius business advertising virtual-asset products outside Mauritius, subject to the target jurisdiction’s law.^[15] Advertisements must be accurate, clearly identifiable and not misleading, consistent with the White Paper for ITOs, and free of unreasonable inducements. The extraterritorial reach matters for a Mauritius VASP marketing to offshore clients, and feeds directly into the market-access analysis below.

ICT and Cyber Resilience

The VAITOS framework carries dedicated Cybersecurity Rules and an IT-manual requirement, so operational resilience is a substantive part of the application rather than an afterthought. This is the Mauritian analogue of the EU’s DORA, not DORA itself: there is no EU equivalence here, and the obligations flow from the FSC’s own rules.

• Systems and controls. Documented systems and controls to manage cybersecurity and operational risk, with platform architecture disclosed to the FSC at application.^[15]
• Independent testing. Independent testing and assurance of the platform, with ISO 27001 alignment strongly favoured in practice.
• Incident reporting. Cyber-reporting-event obligations: material custody-system breaches reported to the FSC with a mitigation plan, the VAITOS Act defining the cyber-reporting-event trigger.^[1]
• Custody technology. Custody standards under the Custody of Client Assets Rules: segregation, client-specific records and third-party custodian due diligence at least annually.
• Business continuity. Documented business continuity and disaster recovery proportionate to the licence classes and the custody model.

For an exchange or custodian (Classes S and R), the ICT and custody build is where much of the professional cost concentrates, because the FSC expects demonstrable, tested controls rather than policy documents alone.

Banking Reality

This is the single biggest practical constraint on a Mauritius operation. A Mauritius VASP licence does not by itself secure a Mauritian bank account for client fiat. Local banks remain reluctant to hold pooled end-client funds for trading, and most operators run client-facing fiat through offshore payment rails while keeping a Mauritian operational account.^[17]

Why Local Fiat Banking Is Constrained

Mauritian banks have been cautious with VASPs, particularly on accounts that accept end-client funds for digital-asset trading.^[17] The Bank of Mauritius 2024 guidelines for banks dealing with virtual-asset activities set a framework of enhanced due diligence, capital buffers, cybersecurity and mandatory risk assessments, but they raised the onboarding bar rather than opening the floodgates.^[8] The emerging pattern is that some banks will provide operational or transactional banking to a fully licensed, well-governed VASP while still declining accounts for pooled end-client fiat.

The Realistic Banking Stack (Archetypes Only)

• Domestic Mauritian commercial banks. Cautious; may offer a corporate or operational account to a fully licensed VASP with strong governance, but typically will not hold pooled end-client fiat. Expect heavy enhanced due diligence, source-of-funds scrutiny and slow onboarding.
• International banks with a Mauritius presence. Selective; appetite is usually reserved for institutionally-backed, well-capitalised applicants with a clean group structure and demonstrable substance.
• Offshore EMIs and payment institutions. The practical workhorse for operational fiat rails and client-money flows. In practice a Mauritius VASP often runs client-facing fiat through one or more EU, UK or other crypto-tolerant EMI or payment-institution archetypes abroad.
• Crypto-native settlement and treasury providers. Used for digital-asset settlement and treasury alongside the fiat rails.

Expect friction: account opening measured in months, a likely split between a Mauritian operational account and offshore rails for client flows, recurring re-papering and transaction-monitoring queries, and some banks declining crypto outright regardless of the licence. The FSC licence improves credibility with counterparties, and is increasingly a precondition for payment-network and Travel Rule access, but it does not guarantee local fiat banking.

A licence without banking access is a certificate on the wall. Jagelski & Partners coordinates banking and EMI introductions for Mauritius-licensed VASPs across multiple institution archetypes, sequencing the banking application so that the operational account and the offshore client-fiat rails come online in step with operational launch rather than as a post-licence afterthought.

FATF Standing and Market Access

Mauritius carries a clean international standing and a globally recognised, FATF-aligned VASP authorisation, but that authorisation grants no EU market access. The two facts sit together: the licence travels well as a credibility signal worldwide, and it gives zero MiCA passporting rights for serving clients in the European Union.

FATF and AML Standing

Mauritius was removed from the FATF list of jurisdictions under increased monitoring on 21 October 2021, following an on-site assessment in September 2021, and the European Commission delisted it on 7 January 2022.^[9][16] It is rated Compliant or Largely Compliant on 39 of the 40 FATF Recommendations, with Recommendation 15 on virtual assets upgraded to Largely Compliant, and now sits in enhanced follow-up with the regional body ESAAMLG. Enhanced follow-up is a routine monitoring track that should not be conflated with grey-listing; Mauritius is FATF-clear. The next mutual evaluation is anticipated by industry around 2027.

EU Market Access (Reverse Solicitation)

A Mauritius VASP licence is a non-EU authorisation and confers no right to market virtual-asset services into the European Union; MiCA contains no third-country equivalence regime for crypto-asset services. The only legitimate channel for serving EU clients without an EU CASP authorisation is reverse solicitation, where the EU client initiates the engagement entirely on its own initiative, and this is narrow: any EU-targeted marketing, EU-language landing pages or geo-targeted advertising voids it under MiCA. See the reverse solicitation guide for the framework, the ESMA position and the operational tests. For systematic EU market access, the structural solution is a separate CASP authorisation in an EU member state. The licence is strongest for African, Asian and global non-EU client bases.

Common Mistakes Operators Make

Mauritius rewards a serious build and punishes the assumptions imported from lighter offshore regimes. Six mistakes recur, each preventable with the right framing at the scoping stage.

• Assuming the ~3% effective tax rate applies to crypto fee income. It is not confirmed for VASP fees as of June 2026, and the Finance Act 2025 direction is restrictive. Budget on the 15% headline rate and treat any partial-exemption relief as upside, not baseline.^[17]
• Assuming the FSC licence secures a Mauritian bank account for client fiat. It does not. Local banks largely decline pooled end-client fiat, so a credible plan provisions offshore EMI or payment-institution rails from the outset.^[17]
• Choosing the wrong class. Confusing Class M (broker-dealer) with Class S (marketplace), or missing that custody triggers Class R, leads to under-scoped capital and re-papering. Multi-activity needs multiple classes and a combined capital floor.
• Treating it as a fast, cheap offshore registration. VAITOS is a prudential licence with real substance, fit-and-proper, capital and audit. A mailbox-and-shelf-company approach fails the mind-and-management test.
• Mis-citing the class mapping. Some sources swap Class R, I and S. Use only the FSC FAQ and VAITOS Second Schedule mapping: R is Custody, I is Advisory, S is the Market Place.^[2]
• Expecting EU market access. A Mauritius licence grants no MiCA passport. EU clients require a separate EU CASP authorisation; reverse solicitation is a narrow exemption, not a market-entry strategy.

How Mauritius Compares

Mauritius is most relevantly compared against the offshore and African centres it is benchmarked against: Seychelles and the British Virgin Islands as offshore VASP peers, the Cayman Islands as the premium institutional offshore option, and South Africa as the African prudential reference. Mauritius sits as a prudential, credibility-led licence rather than a light-touch registration.

Compare every crypto jurisdiction side by side →

Mauritius’s distinctive combination is prudential credibility, a long treaty network and English-language administration, at the cost of constrained local banking and a 15% headline tax that the partial-exemption story does not cleanly reduce for VASP fees. The British Virgin Islands is faster and zero-tax but grey-listed as of February 2026, which raises counterparty diligence; Mauritius is the cleaner standing for groups touching institutional or EU-adjacent counterparties.

Against Seychelles, Mauritius is the heavier, more credible build, where Seychelles is the cost-led route. Against the Cayman Islands, Mauritius offers treaty access and a lower cost base but weaker local banking; Cayman is the institutional and funds choice. The honest summary: choose Mauritius for prudential standing and African or Asian reach, not for the cheapest, fastest, or lowest-tax offshore licence.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Advantages and Limitations

A Mauritius VASP licence buys prudential credibility, clean FATF standing and treaty access, at the cost of constrained local banking, a 15% headline tax that the partial exemption does not cleanly reduce for VASP fees, and no EU passporting. The honest framing is credibility-led, not cost-led.

• ✓ A prudential licence, not a registration. Capital, fit-and-proper, substance and audit make it read as a regulated authorisation.^[1]
• ✓ Clean FATF standing. Off the grey list since 21 October 2021; off the EU AML list since January 2022.^[9]
• ✓ Long treaty network and an established financial centre. More than 40 double-taxation agreements; English-language statute and courts.^[12]
• ✓ Five clear licence classes plus an ITO route. A defined activity map with multi-class flexibility under one application.^[2]
• ✓ No capital gains tax and a 15% headline rate that is competitive among prudential regimes.^[12]
• ✓ Strong fit for African and Asian client bases. Recognised, FATF-aligned standing where offshore registrations are scrutinised.
• × Constrained local banking for client fiat. Mitigation: provision a Mauritian operational account plus offshore EMI or payment-institution rails for client flows from the outset.
• × The 3% effective rate is not confirmed for VASP fees. Mitigation: budget on the 15% headline rate; treat partial-exemption relief as upside pending clarification.
• × No EU passporting. Mitigation: pair with an EU CASP where EU customer-facing operations are material; treat Mauritius as the offshore pillar of a multi-jurisdiction stack.
• × Real substance is enforced. Mitigation: provision the office, resident directors and resident risk functions early; the in-principle approval depends on it.
• × Heavier and slower than light-touch offshore peers. Mitigation: where speed or lowest cost is the only driver, weigh Seychelles or BVI; Mauritius wins on credibility, not on being the cheapest.

Frequently Asked Questions

References