Mauritius -- Licensing Requirements Regulatory Overview

Mauritius has established a comprehensive regulatory framework for virtual assets, positioning itself as a forward-thinking jurisdiction in this space. The primary regulator is the Financial Services Commission (FSC) Mauritius.

Regulatory Framework: The Virtual Asset and Initial Token Offerings Services Act 2021 (VAITOS Act)

The cornerstone of the virtual asset regulatory landscape in Mauritius is the Virtual Asset and Initial Token Offerings Services Act 2021 (VAITOS Act). This Act provides the legal framework for the licensing, regulation, and supervision of Virtual Asset Service Providers (VASPs) and Initial Token Offerings (ITOs).

Regulatory Reference:

• Virtual Asset and Initial Token Offerings Services Act 2021: https://www.fscmauritius.org/media/98048/virtual-asset-and-initial-token-offerings-services-act-2021.pdf
• FSC Website (Virtual Assets section): https://www.fscmauritius.org/en/legal-framework/virtual-assets

Registration vs. Licensing Regime

Mauritius operates a licensing regime for Virtual Asset Service Providers (VASPs), not merely a registration regime. This means that entities wishing to offer virtual asset services must apply for and obtain a specific license from the FSC, demonstrating compliance with stringent requirements covering capital, AML/CFT, governance, and operational integrity.

Required Licenses for Exchanges, Custody Providers, and Payment Processors

The VAITOS Act defines a "Virtual Asset Service Provider" (VASP) as a person or entity that, as a business, carries out one or more of the following activities or operations for or on behalf of another person:

1. Exchange between virtual assets and fiat currencies.
2. Exchange between one or more forms of virtual assets.
3. Transfer of virtual assets.
4. Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets.
5. Participation in and provision of financial services related to an issuer’s offer and/or sale of a virtual asset.

Based on these definitions, the required licenses are:

1. Virtual Asset Exchange License

• Definition: An entity facilitating the trading of virtual assets for fiat currencies or other virtual assets. This explicitly falls under points 1 and 2 of the VASP definition.
• Required License: A VASP license issued by the FSC to conduct "Exchange services."

2. Virtual Asset Custodian License

• Definition: An entity providing services for the safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets (e.g., private keys). This falls directly under point 4 of the VASP definition.
• Required License: A VASP license issued by the FSC to conduct "Custody services."

3. Payment Processors (for Virtual Assets)

• Definition: If a payment processor facilitates payments in virtual assets or facilitates the transfer of virtual assets on behalf of users, it will fall under the VAITOS Act.
  • Processing payments in virtual assets: This would likely be covered under the "Transfer of virtual assets" (point 3) or potentially "Exchange" if it involves conversion between virtual assets and fiat for payment purposes.
  • Facilitating fiat-to-crypto payments specifically for an exchange or other VASP: While the core payment processing might be fiat, if it's an integral part of a virtual asset service, the payment processor may need to be licensed as a VASP or operate under the license of the primary VASP.
• Required License: A VASP license issued by the FSC, specifically for "Transfer services" or potentially "Exchange services" depending on the exact nature of the payment processing activity involving virtual assets.
  • Note: A pure fiat payment processor that does not touch virtual assets would typically fall under the Payment Systems Act and require a different license from the Bank of Mauritius or the FSC (e.g., Payment Service Provider license), not a VAITOS VASP license. However, if any part of their service involves virtual assets, the VAITOS Act applies.

Other VASP Licenses

The VAITOS Act also covers:

• Transfer of Virtual Assets: Sending or receiving virtual assets on behalf of another person.
• Participation in and provision of financial services related to an issuer’s offer and/or sale of a virtual asset (ICO services): Advising or facilitating Initial Token Offerings.

Key Requirements for Licensing

Applicants for VASP licenses must satisfy several stringent requirements set out by the VAITOS Act, the FSC Rules for VAITOS, and relevant guidelines.

1. Capital Requirements:

• Applicants must maintain a minimum unimpaired stated capital or reserves as prescribed by the FSC.
• As per the Virtual Asset and Initial Token Offerings Services (Licence for Virtual Asset Service Providers) Rules 2022, the minimum unimpaired stated capital for a VASP (holding a full licence) is MUR 1,200,000 (approximately USD 26,000 - USD 30,000, depending on exchange rates).
• This capital must be maintained at all times.

Regulatory Reference:

• Virtual Asset and Initial Token Offerings Services (Licence for Virtual Asset Service Providers) Rules 2022: https://www.fscmauritius.org/media/105423/virtual-asset-and-initial-token-offerings-services-licence-for-virtual-asset-service-providers-rules-2022.pdf (Refer to Rule 5)

2. AML/KYC (Anti-Money Laundering / Know Your Customer):

• Robust AML/CFT policies, procedures, and controls are paramount. VASPs are considered "reporting entities" under the Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA).
• Requirements include:
  • Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) for higher-risk clients.
  • Record-keeping policies.
  • Reporting suspicious transactions to the Financial Intelligence Unit (FIU).
  • Appointing an AML/CFT Compliance Officer.
  • Risk-based approach to AML/CFT.
• Compliance with the FSC's AML/CFT Handbook and national AML/CFT legislative framework is mandatory.

Regulatory Reference:

• Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA): https://www.fscmauritius.org/media/98059/financial-intelligence-and-anti-money-laundering-act-2002.pdf
• FSC AML/CFT Handbook: https://www.fscmauritius.org/en/legal-framework/aml-cft-handbooks

3. Local Presence / Substance:

• Applicants must demonstrate adequate local presence and economic substance in Mauritius. This typically includes:
  • A physical office in Mauritius.
  • Local directors and skilled employees, proportionate to the nature and scale of the business. At least one director must be ordinarily resident in Mauritius.
  • Adequate operational and management infrastructure.
  • Books and records to be kept in Mauritius.

4. Fit and Proper Requirements:

• All directors, shareholders, senior management, and beneficial owners must satisfy the "fit and proper" criteria established by the FSC. This involves checks on honesty, integrity, reputation, competence, and financial soundness.

5. Business Plan:

• A comprehensive business plan outlining the proposed activities, target market, operational procedures, risk management framework, financial projections, and technological infrastructure.

6. Technology and Security:

• Robust IT systems, cybersecurity measures, data protection protocols, and disaster recovery plans are essential to safeguard virtual assets and customer data. Independent security audits may be required.

7. Risk Management:

• A sound risk management framework covering operational, financial, legal, and reputational risks associated with virtual asset services.

Application Process

The application process for a VASP license generally involves the following steps:

1. Pre-Application Consultation (Optional but Recommended): Engage with the FSC to discuss the proposed business model and seek preliminary guidance.
2. Preparation of Application Documents: Compile all necessary documents, including:
   • Completed application forms.
   • Detailed business plan.
   • AML/CFT policies and procedures.
   • Risk management framework.
   • IT security policies.
   • Biographical affidavits and "fit and proper" declarations for all key personnel.
   • Constitutional documents of the company (e.g., Certificate of Incorporation, M&A).
   • Proof of capital.
   • Legal opinions (if required).
3. Submission of Application: Submit the complete application package, along with the prescribed application fees, to the FSC.
4. Due Diligence and Review: The FSC will conduct a thorough review of the application, including background checks on directors, shareholders, and key personnel. They may request additional information or clarifications.
5. Interviews: Key personnel may be invited for interviews with the FSC.
6. In-Principle Approval (if applicable): The FSC may grant an in-principle approval, subject to the fulfillment of certain conditions.
7. Final Approval and License Issuance: Upon satisfying all requirements, the FSC will issue the VASP license.

Regulatory Reference:

• FSC Application Form for Virtual Asset Service Provider Licence: https://www.fscmauritius.org/media/105422/application-form-for-virtual-asset-service-provider-licence.pdf

Conclusion

Mauritius offers a well-defined and regulated environment for virtual asset services under the supervision of the FSC. While the requirements are robust, they provide a clear pathway for legitimate VASPs to operate with regulatory certainty, enhancing trust and fostering innovation in the virtual asset space. Prospective applicants should engage with legal and regulatory experts to navigate the licensing process effectively.