How to Obtain a VAITOS (VASP) Licence in Mauritius Step‑by‑step

Mauritius has emerged as one of the most credible jurisdictions in the Africa and Indian Ocean region for virtual asset businesses seeking a FATF-aligned regulatory home. At the centre of this framework sits the VAITOS licence Mauritius regime a purpose-built licensing system administered by the Financial Services Commission (FSC) under the Virtual Asset and Initial Token Offering Services Act 2021. Whether you are launching a crypto exchange, custody platform, wallet service or advisory practice, this guide walks you through the licence classes, capital and substance requirements, application documents, timelines, fees and common pitfalls consolidating the statutory texts, FSC subsidiary rules and practical experience into one actionable resource.

Snapshot: VAITOS in one minute

• Governing statute: Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS Act).
• Licensing authority: Financial Services Commission (FSC), Mauritius.
• Licence classes for VASPs: Five (Class M, O, R, I, S) each mapped to a distinct virtual-asset activity.
• Capital framework: Own-funds requirements plus a prudential overlay (the greater of the two applies).
• AML/CFT alignment: FIAMLA-integrated, with dedicated FSC Guidance Notes for VASPs.
• Regional positioning: Commonwealth legal system, Mauritius International Financial Centre (IFC) support, Africa/Indian Ocean gateway.

Quick facts & who this guide is for

This guide is designed for founders, fintech compliance officers, exchange operators and corporate-service providers who need a practical, step-by-step roadmap to obtain a virtual asset licence in Mauritius. It consolidates the statutory requirements of the VAITOS Act, the FSC’s Capital and Other Financial Requirements Rules, and the AML/CFT Guidance Notes into an actionable licensing playbook. Throughout, you will find a five-class comparison table, a worked capital-calculation example, a detailed document checklist and an FAQ section addressing the most common questions raised during the application process. A downloadable checklist and project planner including a Personal Questionnaire template and fixed-overheads calculator is available to complement this page.

VAITOS legal framework what the law requires

The VAITOS Act statutory scope and the FSC’s powers

The VAITOS Act 2021 establishes the comprehensive licensing, supervisory and enforcement regime for virtual asset service providers and issuers of initial token offerings in Mauritius. It defines “virtual asset,” “virtual asset service,” and related concepts in line with FATF terminology and grants the FSC broad powers to license, inspect, sanction and revoke authorisations. The Act’s Second Schedule classifies licensable activities into distinct classes, each carrying tailored prudential and conduct requirements. Critically, no person may carry on or hold out as carrying on a virtual asset service in or from Mauritius without holding the corresponding FSC licence.

FSC subsidiary rules and effective dates

The FSC has operationalised the VAITOS Act through a suite of subsidiary instruments that applicants must satisfy:

• Capital and Other Financial Requirements Rules: These rules prescribe own-funds requirements by class, the prudential-requirement formula (one-quarter of fixed overheads), items deducted from own funds (e.g., intangible assets), and capital-aggregation mechanics for multi-class licensees.
• Risk Management Rules: Set minimum standards for operational, market and liquidity risk frameworks that must be embedded before licence grant.
• AML/CFT Guidance Notes: The FSC’s dedicated guidance for VASPs and issuers of ITOs details customer due diligence (CDD), enhanced due diligence (EDD), transaction monitoring, suspicious-transaction reporting (STR) obligations and travel-rule compliance, aligned with FIAMLA and FATF Recommendations.

Together, these instruments form the regulatory architecture that any VAITOS licence application must address. Applicants should ensure they are working with the latest versions, as the FSC issues updates periodically.

Which VASP licence class fits your business? five‑class breakdown

The Second Schedule of the VAITOS Act creates five licence classes for VASPs. Each class maps to a specific set of virtual-asset activities and carries its own capital and fee profile. The comparison table below summarises the key parameters drawn from the FSC’s Capital Rules and codified fee list.

When to combine classes; capital aggregation rules

A single entity may apply for more than one licence class for example, operating both a marketplace (Class S) and a custody service (Class R). Under the Capital Rules, multi-class licensees must satisfy the own-funds requirement for each class separately, and the capital base must cover the aggregate amount. This is a common area where applicants underestimate the quantum required. Careful modelling at the pre-application stage ideally with the assistance of local counsel is essential to avoid delays during the FSC’s review.

Process step‑by‑step to obtain a VAITOS licence in Mauritius

1. Step 1 Pre‑application scoping & business model. Identify which VAITOS licence class (or combination of classes) aligns with your business activities. Map your target markets, customer segments and product features against the statutory definitions in the Second Schedule. A common trap is treating a broker-dealer model as mere “wallet services” misclassification can result in the FSC returning the application or imposing conditions. Engage local counsel early to validate the class selection.

2. Step 2 Incorporation & entity structure. Incorporate a Mauritius company (or, where appropriate, register a foreign entity) with the Companies and Business Registration Department (CBRD). Local incorporation is strongly preferred because the FSC expects genuine substance local directors, operational staff and a physical office. File all statutory company documents (certificate of incorporation, constitution, register of directors and shareholders) and obtain a Tax Account Number from the Mauritius Revenue Authority (MRA). Consider whether a Global Business Corporation (GBC) structure is suitable; note that for many VASP activities, a domestic company may be more straightforward for meeting substance tests.

3. Step 3 Capital modelling. Under the Capital and Other Financial Requirements Rules, every VASP must maintain unimpaired capital equal to the greater of (a) the own-funds requirement for its class and (b) the prudential requirement. The prudential requirement equals one-quarter of the previous year’s fixed overheads (or projected fixed overheads for a new applicant). Intangible assets are deducted from own funds.

   Worked example (Class M Broker‑Dealer, new applicant):

   • Own-funds requirement: MUR 2,000,000.
   • Projected annual fixed overheads: MUR 6,000,000 (staff, rent, IT, compliance, audit, legal).
   • Prudential requirement: MUR 6,000,000 ÷ 4 = MUR 1,500,000.
   • Capital required: The greater of MUR 2,000,000 (own-funds) and MUR 1,500,000 (prudential) = MUR 2,000,000.
   • If the same applicant’s projected fixed overheads were MUR 12,000,000, the prudential requirement would be MUR 3,000,000 exceeding the own-funds floor and becoming the binding constraint.

   Prepare bank statements or capital-commitment letters demonstrating the required funds are unimpaired and available.

4. Step 4 Governance, fit‑and‑proper & senior management. Complete Personal Questionnaires (PQs) for every director, senior officer, significant shareholder (typically 10 %+), and compliance officer. Attach certified identification, CVs, proof of address, professional references and criminal-history disclosures. The FSC applies fit-and-proper criteria to assess competence, integrity and financial soundness. Complex ownership chains, nominees without clear beneficial-ownership disclosure, or links to politically exposed persons (PEPs) will trigger enhanced scrutiny.

5. Step 5 AML/CFT programme & policies. Draft and adopt a comprehensive AML/CFT programme consistent with the FSC AML/CFT Guidance Notes for VASPs and Issuers of ITOs, FIAMLA and the UN (Financial Prohibitions) Act. At a minimum, the programme must cover:

   • Customer due diligence (CDD): Identification, verification and ongoing monitoring of customers and beneficial owners.
   • Enhanced due diligence (EDD): For high-risk customers, PEPs, complex structures or jurisdictions with known deficiencies.
   • Transaction monitoring: Automated and manual surveillance capable of detecting unusual or suspicious patterns.
   • STR filing: Procedures for filing suspicious-transaction reports with the Financial Intelligence Unit (FIU) in a timely manner.
   • Sanctions screening: Integration of relevant UN, EU, OFAC and domestic sanctions lists.
   • Travel-rule compliance: Systems and procedures for transmitting originator and beneficiary information with virtual-asset transfers.

6. Step 6 Systems: custody, segregation & cybersecurity. Document your custody model (hot/cold wallet architecture, multi-signature controls, segregation of client assets from proprietary assets). Prepare a cybersecurity baseline covering penetration testing, vulnerability assessments, incident-response plans and disaster-recovery procedures. If third-party custody or technology providers are used, provide details of the outsourcing arrangement and due-diligence evidence.

7. Step 7 Documentation pack. Compile the full application dossier (see the detailed checklist section below). Ensure every document is current, certified where required, and cross-referenced to the FSC’s application form. Missing or outdated documents are the single most common cause of delays.

8. Step 8 Filing with the FSC. Submit the application through the FSC’s designated channel (FSCOne portal or as directed). Pay the applicable processing fee. Upon receipt, the FSC will issue an acknowledgement and may assign a case officer. Immediately diarise follow-up dates and prepare the team for information requests.

9. Step 9 Pre‑licence review & requests for clarification. The FSC will review the application in detail and typically issues one or more rounds of questions. Common queries include requests for additional substance evidence (office lease, payroll records), clarification of the custody model, deeper AML/CFT scenario testing, and further PQ disclosures. Respond promptly and comprehensively delays in providing information extend the overall timeline.

10. Step 10 Post‑licence compliance obligations. Once the licence is granted, the VASP enters ongoing supervisory oversight. Key obligations include filing statutory returns with the FSC, submitting the Statement of Virtual Assets Transactions (SVT) with the MRA, maintaining unimpaired capital at all times, conducting annual AML/CFT audits, reporting material changes (directors, shareholders, business activities) to the FSC, and cooperating with on-site inspections. The FSC’s annual reports have consistently emphasised its supervisory focus on substance and ongoing compliance.

Documents & FSC application checklist

A complete VAITOS licence application requires a comprehensive documentation pack. The following checklist summarises the principal categories and items the FSC expects to receive.

• Company documents: Certificate of incorporation, constitution (articles of association), register of directors and shareholders, certificate of good standing (if existing entity), organisational chart and group-structure diagram.
• Corporate governance: Board minutes approving the licence application, corporate governance policies (conflicts of interest, whistleblowing, board charter), internal-controls manual and compliance-monitoring plan.
• People (fit & proper): Personal Questionnaires (PQs) for all directors, senior officers, significant shareholders and the Money Laundering Reporting Officer (MLRO). Certified copies of passports/national IDs, proof of address (within three months), CVs detailing relevant experience, professional references and sworn declarations or police-clearance certificates.
• Financials & capital evidence: Bank statements demonstrating unimpaired capital meets or exceeds the applicable requirement, projected 12-month fixed-overheads schedule with line-item detail, working-capital forecasts (Class O and Class I), and audited financial statements (if the entity has trading history).
• AML/CFT: Complete AML/CFT policy manual, CDD and EDD procedures, sanctions-screening methodology, transaction-monitoring plan, STR and reporting workflows, and travel-rule implementation plan. Reference the FSC’s AML/CFT Guidance Notes for VASPs.
• Technology & operations: Custody-model description (wallet architecture, key management, segregation controls), cybersecurity policy, SOC 2 or penetration-test reports (if available), disaster-recovery and business-continuity plan, KYC/identity-proofing vendor details and data-protection policy.
• Contracts & legal: Draft client terms and conditions, custody agreements, third-party service agreements (technology, outsourcing, banking), professional-indemnity or cyber-insurance certificates (if obtained) and any material litigation disclosures.

A downloadable application checklist together with a PQ template and a fixed-overheads calculation worksheet is available as part of the project planner pack referenced below.

Key requirements capital, unimpaired capital, liquidity & substance

Understanding the interplay between own-funds requirements and the prudential requirement is critical for a successful VAITOS licence application. The Capital and Other Financial Requirements Rules establish a dual-test framework:

• Own-funds requirement: A fixed minimum (denominated in MUR) specific to each licence class for example, MUR 2,000,000 for Class M (Broker-Dealer), MUR 5,000,000 for Class R (Custodian) and MUR 6,500,000 for Class S (Marketplace). For Class O (Wallet Services), the own-funds requirement is 12 months’ working capital based on realistic forecasts; for Class I (Advisory Services), sufficient working capital to meet debts as they fall due.
• Prudential requirement: One-quarter of the VASP’s annual fixed overheads (or projected fixed overheads for new applicants). Fixed overheads include staff costs, rent, IT infrastructure, professional fees, audit and compliance costs, insurance and depreciation but exclude variable commissions, bonuses tied to performance and non-recurring charges.
• Binding constraint: The VASP must maintain unimpaired capital equal to the greater of the own-funds requirement and the prudential requirement at all times. Intangible assets (goodwill, capitalised development costs) are deducted from own funds when calculating the available capital.

For multi-class licensees, each class’s own-funds requirement is aggregated, and the prudential requirement is calculated on the entity’s total fixed overheads. This is where applicants most frequently underestimate the capital commitment.

Substance expectations

The FSC has placed increasing supervisory emphasis on genuine local substance. Industry observers expect this trend to continue as Mauritius positions itself as a credible, FATF-compliant financial centre. Evidence the FSC typically requests includes:

• Office premises: Lease agreement for a physical office in Mauritius (not merely a registered-agent address).
• Resident directors and senior management: At least two directors resident in Mauritius, with demonstrable decision-making authority and relevant expertise.
• Payroll and operational staff: Employment contracts, payroll records and job descriptions for compliance, operations and technology personnel based locally.
• Board oversight: Minutes of board meetings held in Mauritius, evidence of local decision-making and strategic oversight.

Shell structures entities with no meaningful local presence draw extended review and, in many cases, refusal. The FSC’s annual reports have underscored this stance.

Fit & proper tests

The FSC applies fit-and-proper criteria to directors, senior officers, significant shareholders (typically those holding 10 % or more) and controllers. Complex ownership structures, undisclosed beneficial ownership, links to PEPs and any history of regulatory sanctions or criminal convictions will trigger enhanced scrutiny. Transparent and well-documented ownership with clear source-of-funds and source-of-wealth evidence materially accelerates the review process.

Typical timelines, fees and common pitfalls

Understanding realistic timelines and fee structures is essential for project planning. The following ranges reflect industry experience, though applicants should note that FSC review times can vary depending on application completeness, the novelty of the business model and the FSC’s queue at the time of filing.

• Pre-application scoping & incorporation: 2–6 weeks, depending on entity structure, KYC complexity and the speed of CBRD filings.
• Documentation preparation: 4–8 weeks, depending on the readiness of AML/CFT policies, systems documentation and capital-commitment evidence.
• FSC review (filing to in-principle decision): Commonly 12–20 weeks for clean, complete applications. Applications involving novel activities, multi-class licences or complex ownership structures may take longer.
• Post-decision to licence issuance: 2–4 weeks to satisfy any conditions precedent imposed by the FSC.

Fees: Processing fees and fixed annual fees vary by class, as set out in the FSC’s codified fee list (see the comparison table above). Applicants should also budget for incorporation costs, legal and advisory fees, technology and cybersecurity assessments, and ongoing compliance infrastructure.

Common pitfalls

• Underestimating combined capital: Multi-class applicants frequently miscalculate the aggregate own-funds and prudential requirements, leading to delays when the FSC requests evidence of additional capital.
• Thin substance: Applicants relying on shell structures, nominee arrangements without genuine local management, or shared virtual offices face extended review and potential refusal.
• Weak AML/CFT controls: Generic, off-the-shelf AML policies that do not address the specific risks of virtual-asset activities (e.g., chain analytics, travel-rule compliance, unhosted-wallet risks) are a recurring deficiency.
• Incomplete Personal Questionnaires: Missing PQs, unsigned declarations, unexplained gaps in employment history or undisclosed ownership links are among the most common causes of FSC information requests.
• Inadequate systems documentation: Failing to document the custody model, key-management procedures and cybersecurity baseline in sufficient detail.

Regional positioning Mauritius as an Africa / Indian‑Ocean gateway

Mauritius offers a compelling combination of features for virtual-asset businesses seeking credible market access across Africa and the Indian Ocean region. The jurisdiction operates a Commonwealth-style common-law legal system, providing familiar legal infrastructure for international operators. Its VAITOS framework is explicitly aligned with FATF Recommendations, giving licensed VASPs a regulatory credential recognised by correspondent banks and institutional counterparties. The Mauritius International Financial Centre actively promotes the fintech and virtual-asset sector, and the jurisdiction benefits from an extensive network of double-taxation agreements and investment-promotion treaties. For exchanges and custody providers targeting African, Middle Eastern and South Asian markets, a Mauritius crypto licence provides a credible, FATF-aligned operational base with practical access to correspondent-banking relationships a critical advantage in a sector where banking access remains a persistent challenge.

Downloadable checklist & project planner

To support your VAITOS licence application, a downloadable project pack is available. The pack includes a full FSC application document checklist, a Personal Questionnaire summary template, a fixed-overheads calculation worksheet (Excel) and an application-timeline planner. These resources are designed to complement this guide and streamline the preparation process.

Sources

• The Virtual Asset and Initial Token Offering Services Act 2021 National Assembly of Mauritius (Government Gazette).
• Virtual Asset and Initial Token Offerings Services (Capital and Other Financial Requirements) Rules Financial Services Commission, Mauritius.
• AML/CFT Guidance Notes for VASPs and Issuers of ITOs Financial Services Commission, Mauritius.
• Codified List Licensing and Fees (Virtual Asset Service Providers) Financial Services Commission, Mauritius.
• Second Schedule VAITOS Act (Licence Classes) Financial Services Commission, Mauritius.
• Statement of Virtual Assets Transactions (SVT) Mauritius Revenue Authority.
• Virtual Asset and Initial Token Offering Mauritius Mauritius International Financial Centre.
• FSC Annual Report Financial Services Commission, Mauritius.