Vanuatu DASP Licence (VFSC), How Crypto Firms Get a Digital Asset Service Provider Licence in 2026

Introduction, Quick summary and who this guide is for

Securing a vanuatu dasp licence has become the central objective for exchanges, custodians and token issuers looking to operate a compliant digital asset business from the South Pacific in 2026. This guide is written for founders, compliance leads and in-house counsel who want a practical, step-by-step route to a vfsc digital asset licence rather than a summary of news headlines. It explains how the Vanuatu Financial Services Commission (VFSC) assesses applications, what capital you need, how to meet anti-money-laundering (AML) and economic substance tests, and how long the process typically takes.

The regulatory backdrop changed materially with the Virtual Assets Service Providers Act 2025, which created a dedicated licensing framework for digital asset service providers (DASPs). The VFSC’s 2026 rollout introduced phased implementation, a fintech sandbox pathway, clearer capital bands and tightened expectations around AML and onshore substance. Taken together, these reforms moved Vanuatu from a lightly regulated jurisdiction to a structured, supervised regime aligned with international standards.

Across this landing page you will find a decision checklist to test whether Vanuatu suits your model, a numbered application walkthrough, a comparison table of licence types and costs, a breakdown of capital and fees, and a plain-English explanation of AML and substance duties. You will also find a sample documentation inventory and an FAQ built to answer the questions applicants ask most. Every material claim is anchored to primary sources, the Act, VFSC guidance, Vanuatu’s AML regime and FATF standards, so that you can verify each requirement before you commit resources to a vanuatu dasp licence application.

Background: Vanuatu’s new DASP regime, what changed in 2025–2026

The Virtual Assets Service Providers Act 2025 is the foundation of the modern regime. It defines the categories of activity that require authorisation and gives the VFSC express powers to license, supervise and sanction providers. In broad terms, the Act captures businesses that exchange virtual assets for fiat or other virtual assets, operate trading platforms, provide custody or administration of virtual assets, transfer virtual assets on behalf of clients, and participate in or provide services related to the issuance or sale of tokens. That scope reaches centralised exchanges, custodians, broker-dealers, NFT marketplaces and token issuers, and it extends, in principle, to certain decentralised finance service providers where an identifiable operator exists.

The VFSC’s 2026 implementation approach is phased. Rather than switching on every obligation at once, the regulator signalled a staged rollout that allows existing operators and new entrants to align their governance, capital and compliance infrastructure with the new standards. A key feature is the fintech sandbox concept, which permits qualifying applicants to test products under supervision with proportionate conditions before holding a full licence. The rollout also clarified capital bands so that minimum financial resources are mapped to the risk profile of the licensed activity.

The regulatory intent behind these reforms is consistent and deliberate. The framework is designed to deter bad actors who previously treated the jurisdiction as a convenient flag of convenience, to raise the bar on operational reality through economic substance expectations, and to align Vanuatu with international AML and counter-terrorist-financing (CTF) standards. In particular, the regime reflects the FATF Guidance on Virtual Assets and VASPs, which sets the global benchmark for how virtual asset providers should identify customers, monitor transactions and report suspicious activity. The practical consequence is that a vfsc digital asset licence is now a substantive authorisation rather than a registration formality, and applicants must demonstrate genuine capability, capital and controls.

For readers who want primary materials, the VFSC publishes guidance, press releases and application notices on its official website, and the Act is available through the Vanuatu government gazette. Because these pages are periodically updated, applicants should check the latest versions before filing and record the date they accessed each source.

Is Vanuatu right for your business? Suitability checklist

Before investing in an application, test the fit. A vanuatu virtual asset licence can be an excellent base for globally-facing digital asset businesses, but it is not right for every model. The key decision points are business-model fit, target markets, tax and residency implications, customer-onboarding complexity, and your ability to stand up genuine onshore operations. Weigh these honestly against the cost and timeline of authorisation.

• Permitted activities: Confirm your activity, exchange, custody, broker-dealer, token issuance, stablecoin services or DeFi provision, falls within the Act’s defined DASP categories.
• Onshore presence: Assess whether you can establish a resident entity with real decision-making, local staff and physical premises to satisfy economic substance.
• Capital and substance tests: Check you can meet and maintain the minimum capital band for your licence class plus ongoing capital adequacy.
• AML programme capability: Ensure you can deploy KYC, enhanced due diligence, transaction monitoring, sanctions screening and suspicious-activity reporting from day one.
• Target markets and tax: Map where your customers sit, whether those markets accept a Vanuatu licence, and the residency and reporting consequences for your group.

Use-case signals that typically align well include exchanges and custody providers with global customer bases, token issuers seeking a clear regulatory home, and fintech teams wanting a supervised sandbox to launch. If your model cannot support onshore substance or robust AML, a vanuatu dasp licence may be premature until those foundations are in place.

Step-by-step DASP application process, the VFSC licensing process

The following walkthrough sets out the VFSC licensing process from pre-application structuring through to operational launch. Timelines vary with complexity, but a complete, well-prepared application for a standard activity commonly moves through review in roughly eight to sixteen calendar weeks, while sandbox applicants may progress faster. Treat the ranges below as planning estimates, not guarantees, because VFSC enquiries and third-party audits can extend the schedule. A structured DASP application checklist helps keep each workstream on track.

Step 1, Pre-application legal structuring and incorporation

Begin by selecting the corporate vehicle, typically a Vanuatu limited company, and settling shareholder and director arrangements. Decide between appointing a local resident director or using nominee structures, keeping in mind that economic substance expectations favour genuine resident decision-makers. Establish a registered office and confirm beneficial-ownership transparency. Thoughtful structuring at this stage reduces friction later. Consider the trade-offs of holding-company versus branch arrangements before you file, drawing on guidance for corporate structures for crypto businesses in Vanuatu. Estimated time: 2–4 weeks.

Step 2, Determine licence class and capital band

Map your intended activities to the Act’s DASP categories, then identify the capital band the VFSC applies to that class. An exchange holding client assets will typically sit in a higher band than a pure broker arrangement, while a custody provider faces its own thresholds reflecting custody risk. Getting this mapping right governs the minimum paid-up capital you must demonstrate and maintain. Review the detailed fees & capital scenarios for Vanuatu crypto licences before committing figures. Expect VFSC queries if your activity description and capital band appear misaligned. Estimated time: 1–2 weeks.

Step 3, Prepare AML/CTF policies and compliance programme

Draft a comprehensive AML/CTF programme covering customer identification (KYC), enhanced due diligence (EDD) for high-risk customers, ongoing transaction monitoring, suspicious-activity reporting to the Financial Intelligence Unit, and sanctions screening against relevant lists. Your policies must reflect FATF virtual-asset expectations and Vanuatu’s AML statutes. Reusable AML & CTF programme templates for VASPs accelerate this workstream. The VFSC will scrutinise whether policies are operational rather than aspirational. Estimated time: 3–6 weeks, often run in parallel.

Step 4, Economic substance and resident entity arrangements

Assemble the elements that evidence real onshore substance: resident personnel appropriate to your activity, a physical office, local decision-making by the board, and arrangements for local accounting and reporting. The regulator increasingly judges applications on operational reality, so paper-only presence is unlikely to satisfy inspectors. Document how core income-generating activities are directed and performed in Vanuatu, and align this with the economic substance compliance in Vanuatu framework. Estimated time: 2–5 weeks.

Step 5, Draft operations and governance documents

Produce a detailed business plan, an enterprise risk assessment, internal control procedures and technology and security policies. For custody and exchange models, include cold-storage policies, key-management controls, wallet architecture, disaster recovery and client-asset segregation procedures. Governance documents should identify the board, the compliance officer and audit arrangements. These materials demonstrate that your organisation can run the licensed activity safely. Weak governance documentation is a common cause of VFSC follow-up queries. Estimated time: 3–5 weeks.

Step 6, Compile documentation and supporting schedules

Gather the full evidence bundle: certified corporate documents, directors’ and beneficial owners’ biographies and curricula vitae, police and probity certificates, proof of capital, and audited accounts where applicable. Prepare schedules that cross-reference each requirement to its supporting exhibit so reviewers can navigate the file quickly. Distinguish “must-have” documents from “recommended” supporting evidence to prioritise effort. A clean, indexed submission materially shortens review. Estimated time: 2–4 weeks.

Step 7, Application submission

Submit the application through the VFSC’s processes, pay the fees payable at submission, and complete the required declarations confirming the accuracy of information and the fitness of controllers. Ensure each declaration is signed by the correct officer and that the fee payment reconciles to the application reference. Incomplete declarations or mismatched fees are avoidable causes of initial rejection. Estimated time: within days once the bundle is ready.

Step 8, VFSC review, enquiries and sandbox entry

The VFSC reviews the file, raises enquiries and may request clarifications on source of funds, beneficial ownership, AML operations or capital adequacy. Respond promptly and completely; drip-fed answers extend timelines. Qualifying applicants may be offered entry to the fintech sandbox or receive conditional approvals that allow limited operations subject to specified controls. Treat enquiries as a negotiation about operational reality, not a formality. Estimated time: 4–12 weeks depending on complexity.

Step 9, Licence grant, registration and post-licensing obligations

On approval, the VFSC grants the licence and the entity is entered on the public register. From grant, you assume reporting schedules, ongoing supervision, renewal obligations and the duty to notify the regulator of material changes. Confirm your details on the public register and establish a calendar for renewals and periodic filings. You can verify entries using the VFSC register search, how to check licences guidance. Estimated time: immediate on grant, with obligations continuing thereafter.

Step 10, Operational launch and compliance monitoring

Before go-live, validate client-onboarding flows end to end, confirm transaction monitoring alerts fire correctly, and run a go-live checklist covering security, segregation and reporting. After launch, maintain ongoing AML reporting, conduct periodic internal and independent audits, and review policies as products evolve. Continuous monitoring is not optional; it is the evidence base the VFSC expects when it inspects a holder of a vanuatu dasp licence. Estimated time: ongoing.

Comparison table: requirements, costs and timelines for a vanuatu dasp licence

The table below illustrates how requirements, indicative fees and review timelines differ across common DASP activity types, including the sandbox route. Figures shown are illustrative placeholders to demonstrate the modelling approach; applicants must confirm current capital bands and fee schedules directly from VFSC guidance before relying on numbers. Use the table to scope the relative burden of each licence class and to plan budget and runway.

To model your own cost scenario, build three cases, low, medium and high complexity, and vary capital, staffing, audit and technology-certification assumptions across each. A low-complexity broker will sit near the bottom of every category, while a mid-size exchange and a custody provider will attract higher capital, deeper audits and longer review. Layer incorporation and local fees onto the VFSC figures, and stress-test your operating runway so that capital adequacy survives a slow market. The fees & capital scenarios resource expands these worked examples in detail.

Key requirements and eligibility

Eligibility for a vfsc digital asset licence turns on several interlocking tests. The VFSC assesses the people, the governance, the capital and the technology behind the applicant, and it expects each element to be demonstrably robust rather than nominal. Understanding these requirements early allows you to design the entity correctly from the outset.

• Fit and propriety: Directors and beneficial owners must satisfy probity checks, typically evidenced by police certificates, references and AML background checks. Adverse findings on honesty, competence or financial soundness can block authorisation.
• Corporate governance: The VFSC expects board oversight, a designated compliance officer with authority and independence, and arrangements for independent audit. Clear lines of responsibility must be documented.
• Capital and liquidity: Applicants must hold minimum paid-up capital mapped to their licence band and maintain ongoing capital adequacy, using permissible capital instruments. Liquidity must support client obligations under stress.
• Local presence and resident-entity tests: Genuine decision-making, a physical office and appropriately skilled staff in Vanuatu are central to satisfying substance expectations and demonstrating operational reality.
• Technology and security standards: Custody arrangements, segregation of client assets, third-party security audits and penetration testing are expected, particularly for exchanges and custodians holding assets on behalf of clients.

Treat the “must-have” items, probity evidence, proof of capital, AML programme, and security controls, as non-negotiable, and the “recommended” items, additional references, voluntary certifications and enhanced disaster-recovery documentation, as ways to strengthen an application and reduce VFSC enquiries. A well-evidenced file across all five dimensions is the single biggest predictor of a smooth path to a vanuatu dasp licence.

Capital, fees and cost modelling, dasp capital requirements explained

Understanding dasp capital requirements is essential to budgeting an application. The VFSC applies capital bands that scale with the risk of the licensed activity, so an exchange or custody provider holding client assets will face higher minimum capital than a broker that does not take custody. Because the precise figures are set out in VFSC guidance and may be adjusted during the phased rollout, confirm the current band for your activity directly from the regulator before finalising your capital plan.

Work through three illustrative scenarios. A small retail broker that does not hold client assets sits at the lower end of capital, staffing and audit cost, with a leaner AML programme sufficient for its risk profile. A mid-size exchange faces a higher capital band, deeper security audits, a larger compliance team and more intensive transaction monitoring. A custody provider must demonstrate the strongest key-management and segregation controls, attracting higher capital and specialist security certification. Each scenario produces a materially different total cost of authorisation and ongoing supervision.

Build your budget from itemised cost categories so nothing is missed:

• Incorporation and local fees: Company formation, registered office and local filing costs.
• VFSC application fee: Payable at submission and dependent on licence class.
• Annual supervision fee: Recurring cost of ongoing supervision and renewal.
• Compliance staffing: Compliance officer and supporting AML personnel, onshore where substance requires it.
• Audits: Financial audits and independent security or penetration testing.
• Technology and security certification: Custody infrastructure, monitoring tools and certifications.

When modelling finances, size an operating runway that survives a prolonged downturn, stress-test capital adequacy against adverse scenarios, and treat client-asset escrow and segregation as hard constraints rather than optional refinements. The objective is to show the VFSC that capital is not merely present at licensing but sustainable through the life of the vanuatu dasp licence.

AML and economic substance: practical compliance for vanuatu aml crypto obligations

Two pillars dominate ongoing supervision: AML/CTF and economic substance. On the AML side, a holder of a vanuatu dasp licence must operate tiered KYC, apply enhanced due diligence to high-risk customers, file suspicious activity reports (SARs) with the Financial Intelligence Unit, and screen customers and transactions against relevant sanctions lists. These duties flow from Vanuatu’s AML/CTF legislation and FIU guidance and mirror the risk-based approach set out in FATF’s virtual-asset standards. Effective vanuatu aml crypto compliance means policies that are implemented, tested and auditable, not merely documented.

On the substance side, vanuatu economic substance requires that the licensed entity genuinely conducts its core activity onshore. In practice this means resident director(s), local staff proportionate to the business, physical premises, local oversight of decision-making, and an annual substance filing evidencing these arrangements. Maintain a short compliance checklist and keep the supporting documentation ready for inspection.

• Resident decision-making: Board meetings and key decisions directed from Vanuatu, with minutes retained.
• Local staffing: Appropriately qualified personnel physically present onshore.
• Premises: A genuine office, not a mail-forwarding address.
• Accounting and reporting: Local books, records and the annual substance filing.
• Evidence pack: Payroll, leases, utility bills and meeting records to satisfy inspectors.

AML and substance reviews interact closely. The VFSC uses substance evidence to judge whether a firm can actually perform the AML functions it claims, so a thin onshore presence undermines an otherwise strong AML programme. Conversely, strong, resident compliance functions reinforce substance. Design both pillars together, using proven AML & CTF programme templates for VASPs and documented substance arrangements, to present a coherent picture of operational reality.

Typical timelines and what extends review times

For a standard, complete application, plan for roughly eight to sixteen calendar weeks from submission to decision, with sandbox routes often shorter. The most common causes of delay are incomplete KYC, unclear source-of-funds explanations, complex or opaque corporate structures, missing third-party audits and unresolved sanctions exposure. Each triggers VFSC enquiries that pause the clock. To accelerate review, hold pre-submission discussions where available, submit a fully indexed bundle, respond to enquiries in a single comprehensive reply, and consider the fintech sandbox to begin supervised operations sooner while a full vanuatu dasp licence is finalised.

Post-licence obligations and enforcement risk

A licence is the beginning of a supervisory relationship, not the end of the compliance effort. Holders must meet ongoing reporting schedules, submit to periodic audits and inspections, and notify the VFSC promptly of breaches or material changes. The enforcement spectrum ranges from fines and remediation directions to licence suspension or revocation and, in serious cases, criminal referral. The VFSC’s enforcement framework under the Virtual Assets Service Providers Act 2025 gives it the powers to act against providers that fail AML, substance or capital obligations. Treating supervision as an ongoing discipline, with live monitoring, timely filings and a culture of self-reporting, is the most reliable way to protect a vanuatu dasp licence and the business built on it.

Closing summary, next steps for your vanuatu dasp licence

A successful vanuatu dasp licence application rests on three foundations: a clear suitability assessment, a well-evidenced compliance and capital base, and realistic timeline planning. Start by confirming your activity falls within the Virtual Assets Service Providers Act 2025 and selecting the correct licence class and capital band. Build an AML/CTF programme and economic-substance arrangements that are operational rather than cosmetic, since the VFSC increasingly judges applicants on real onshore capability. Compile a clean, indexed documentation bundle, submit with the correct fees, and respond to enquiries comprehensively to keep review within the typical eight-to-sixteen-week window.

Remember that authorisation is the start of an ongoing supervisory relationship: reporting, audits, inspections and prompt breach notification protect your licence over time. With disciplined preparation and credible substance, Vanuatu offers a structured, internationally aligned route for digital asset businesses seeking a supervised home in 2026.

Sources

• Vanuatu Financial Services Commission (VFSC), official guidance, licensing process notes, fintech sandbox announcements and the Virtual Assets Service Providers Act 2025 (last accessed October 2026).
• FATF, Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs (last accessed October 2026).