English
РусскийServices
Jurisdictions
Citizenship & Residency
São Tomé & Príncipe$90,000
Vanuatu$130,000
Grenada$235,000
St Kitts & Nevis$250,000
Turkey$400,000
UAE Golden Visa$545,000CIMA VASP Licence.
Every virtual asset business operating in or from the Cayman Islands must be registered with or licensed by CIMA. Which one you need is not a matter of scale: registration covers issuance, exchange and transfer, while custody and trading platforms have required a full licence since 1 April 2025. The difference in government fees between the two routes is roughly a hundredfold.
- Registration covers issuance, exchange and transfer. A licence is required for custody and trading platforms, mandatory since 1 April 2025.
- Government fees differ enormously: about US$1,200 to apply for registration against US$126,000 for a trading platform licence including the grant fee.
- Registration takes 2 to 4 months; a full licence takes 6 to 10 months. Everything is filed through CIMA's REEFS portal.
- There is no fixed capital minimum. CIMA judges capital against your model, from roughly US$100,000 for token issuers to US$1m or more for exchanges.
- Only 19 VASPs were registered with CIMA as of early 2026. The register is selective, which is exactly why the authorisation carries weight with banks and institutional counterparties.
Cayman VASP authorisation at a glance.
Route, fees, timeline and obligations under the Virtual Asset (Service Providers) Act.
CIMA VASP licence or registration?
Do I need a VASP registration or a VASP licence?
Registration
Required where the business undertakes issuance, exchange or transfer of virtual assets, or provides financial services in respect of an issuance or sale. Token issuers, non-custodial intermediaries and transfer services sit here.
Application fee KYD 1,000, about US$1,200. Annual fees KYD 1,500 to 5,000 depending on activity and projected revenue: issuance-only applicants pay KYD 1,500 below US$1m revenue and KYD 3,500 above it.
Typical timeline 2 to 4 months.
Licence
Required where the business provides virtual asset custody or operates a virtual asset trading platform. Since 1 April 2025 registration is no longer available for these categories, and existing registered persons performing them had 90 days to apply.
Application fee KYD 5,000, about US$6,000, plus a grant fee of KYD 30,000 for custody or KYD 100,000 for a trading platform.
Typical timeline 6 to 10 months, because CIMA reviews IT infrastructure, capital adequacy and client-asset segregation in far greater depth.
If you do both, you apply once
An entity carrying on activities requiring registration and activities requiring a licence need only apply for the licence. The licence encompasses all regulated activities, and a separate registration is not required. Getting this wrong at the outset costs months.
Both routes and their scope are set out in the Virtual Asset (Service Providers) Act (2024 Revision). Two further routes exist. An entity already licensed under another Cayman regulatory law may be granted a waiver by CIMA, and a sandbox licence is available for novel models that do not fit the standard categories. Natural persons cannot conduct VASP business in their own name. CIMA publishes the full position in its VASP FAQ.
Why virtual asset businesses choose Cayman
Four properties that matter to a regulated crypto business, and that most jurisdictions cannot offer together.
A register of nineteen
As of early 2026 only 19 VASPs were registered with CIMA. That is not market disinterest, it is assessment standards. A Cayman authorisation is recognised by Tier 1 banks, prime brokers and institutional allocators precisely because it is difficult to obtain.
A regime built in phases
Phase 1 brought registration in October 2020. Phase 2 brought licensing for custody and trading platforms in April 2025. The framework was tested and refined before it was extended, which is why the rules are unusually specific about what each category requires.
English common law, British territory
A British Overseas Territory with English common law, a mature professional services ecosystem and final appeal to the Privy Council. Counterparties and their counsel do not have to learn a new legal system to transact with you.
No tax on the entity itself
No corporate income tax, capital gains tax, withholding tax or tax on virtual asset transfers, with a Tax Concessions Act undertaking available. Obligations where the business is managed or its owners reside are unaffected, which we say plainly rather than leaving it implied.
What CIMA charges, and what we charge.
How much does a Cayman VASP licence cost?
| Item | Registration | Custody licence | Trading platform licence |
|---|---|---|---|
| CIMA application fee | KYD 1,000 (~$1,200) | KYD 5,000 (~$6,000) | KYD 5,000 (~$6,000) |
| CIMA grant fee | Not applicable | KYD 30,000 (~$36,000) | KYD 100,000 (~$120,000) |
| CIMA annual fee | KYD 1,500 to 5,000 by activity and revenue | By revenue category | By revenue category |
| Cayman entity formation | Exempted company $4,500 · SPC $5,500 | ||
| Registered office and agent, annual | Included in formation for year one, then quoted | ||
| Third-party audit, AML tooling, cyber assessment | At cost, disclosed before engagement | ||
| Sovera professional fee | Quoted per engagement | ||
| Government fees under Schedule 2 of the Virtual Asset (Service Providers) (Amendment) Regulations 2025, with payment guidance published in CIMA's fee schedule. KYD converted at approximately 1.2 USD. | |||
Why we quote per engagement
The government fee alone runs from about US$1,200 for a registration to about US$126,000 for a trading platform licence. That is roughly a hundredfold spread, and the professional work scales with it: a token issuer needs a registration dossier, while a trading platform needs an IT and cybersecurity assessment, client-asset segregation policies and a capital adequacy case. Publishing one number across that range would mislead one of you.
What we do publish is everything the government charges, the entity cost, and the fact that third-party fees are passed through at cost and disclosed before you engage. You will know the full shape of the project before you commit to any of it.
Reduced fees
Fees are calculated at 10% of the standard rates where the applicant is a local company as defined under the Local Companies (Control) Act offering services within the Cayman Islands. Most international applicants do not qualify, and we will tell you at the first call whether you do.
Fees are set by CIMA and published in its VASP fee guidance. Figures are indicative, converted from KYD, and confirmed in the written proposal before any filing.
How much capital CIMA actually expects.
What capital does a Cayman VASP need?
Cayman does not prescribe a fixed statutory capital threshold, and any page telling you the minimum is US$100,000 is describing a convention rather than a rule. The prudential expectations sit in the VASP Act and CIMA's supervisory rules rather than in a single number. CIMA applies a proportionality judgment: capital must be commensurate with the size, complexity and risk profile of what you are doing.
Token issuers
Expectations typically run from around US$100,000 to US$250,000. The activity is registrable rather than licensable, and the risk CIMA is assessing is largely conduct and AML rather than client-asset loss.
Non-custodial platforms
Higher than issuance, because operational failure affects users even where assets are never held. CIMA looks at the cost of running the platform for a sustained period without revenue.
Custodians
Materially higher again. Holding client assets introduces responsibility that capital must reflect, and the licensing regime adds explicit prudential requirements, client-asset segregation and insurance disclosure.
Exchanges and trading platforms
Treated as financial market infrastructure rather than as startups. Expectations commonly run from US$1 million to US$5 million or more, and CIMA will test whether the capital is held rather than promised.
Capital is what you hold, not what you spend
Setup costs are separate from regulatory capital. CIMA expects applicants to have sufficient capital in place before applying, and future fundraising plans are generally not enough. Applicants who conflate the two arrive at the wrong number and lose months.
What CIMA assesses.
Fit and proper
Assessed against CIMA's published criteria. Shareholders, proposed directors and senior officers are assessed individually. CIMA looks at competence, integrity and financial soundness, and prior regulatory history anywhere in the world.
Corporate structure
The applicant is a Cayman entity. Most use an exempted company; a segregated portfolio company suits multi-product platforms where each line must be ring-fenced, and a holding company commonly sits above the licensed entity.
Three directors
A minimum of three since the April 2025 amendments. No Cayman residency requirement, but custody and platform applicants are expected to field directors with demonstrable relevant experience.
AML and CFT framework
Full compliance with the Cayman AML, CFT and CPF regime and targeted financial sanctions obligations, including appointment of an anti-money laundering officer, a compliance officer and a reporting officer.
Business plan
Services offered, target markets, customer segments, transaction-flow architecture, technology and outsourcing arrangements, monetisation model and three-year financial projections.
Risk and governance
A corporate governance framework for sound and prudent management, and a risk framework identifying, assessing, mitigating and monitoring internal and external risk sources.
Cybersecurity and asset safety
All applicants submit cybersecurity plans and explain how they will prevent asset loss or theft. Custodians must disclose the types and values of assets held and the custodial purpose.
The Cayman entity
The applicant must be a Cayman legal entity, most commonly an exempted company, though LLCs and exempted limited partnerships are used. A registered office and agent in the Cayman Islands are required and company books are held at the registered address. A physical office is not mandatory, but operational substance must satisfy CIMA. For token projects, a foundation company at the governance layer with an operating entity holding the authorisation is a common and well-understood structure.
From classification to determination
Six stages. Registration typically completes in 2 to 4 months, a full licence in 6 to 10. The variable is almost always the quality of the initial dossier, not CIMA.
How long does CIMA VASP authorisation take?
Classify the activity
Registration or licence, and whether a waiver or sandbox route applies. This determines the fee, the timeline and the evidence burden, and it is settled before anything is drafted.
Incorporate & appoint
Cayman entity formed with registered office and agent. Three directors appointed, along with the AML, compliance and reporting officers who will be assessed.
Build the compliance framework
AML and CFT framework, business plan with three-year projections, risk assessment, corporate governance framework, cybersecurity plan and, for custody, client-asset segregation policies.
Fit-and-proper dossier
Personal questionnaires, references and supporting evidence for every shareholder, director and senior officer. This is where applications most often stall, so it runs in parallel rather than last.
REEFS submission
Application filed through CIMA's REEFS portal with the Schedule 1A documents and the application fee. Nothing is accepted outside the portal.
Queries to determination
CIMA raises queries; we answer them through to determination and, for licences, payment of the grant fee. Registration 2 to 4 months, licence 6 to 10.
What happens after approval.
What are the ongoing obligations of a Cayman VASP?
Quarterly REEFS returns
Filed through the same REEFS portal used for the application. Late or incomplete returns are a supervisory matter, not an administrative one.
72-hour cyber-incident notification
Material cyber incidents must be notified to CIMA within 72 hours. The obligation assumes you have detection capable of identifying an incident inside that window, which is itself part of what CIMA assesses.
Audited financial statements
Annual audit under IFRS, including the Virtual Asset Reporting Annex introduced with the expanded supervisory framework.
Annual fee by 15 January
Payable on or before 15 January each year. Failure incurs a surcharge of one-twelfth of the fee for every month, or part month, it remains unpaid.
Advance notification of changes
Changes of directors, senior officers or beneficial owners must be notified to CIMA in advance. Prior CIMA approval is required to issue or transfer 10% or more of the ownership interests in a VASP.
Client-asset segregation
Licensees must segregate client assets from proprietary assets, disclose internal safeguards and insurance arrangements, and operate grievance procedures.
The cost of getting it wrong
The VASP Act provides for penalties up to US$120,000 and imprisonment of one year, with further daily fines of up to US$12,000 for each day a breach persists. The commercial consequence is usually worse: unauthorised activity costs banking and counterparty access, and creates a record that follows the principals into every future application in every other jurisdiction.
What is changing, and what it means.
The Cayman Islands government published the Virtual Asset (Service Providers) (Amendment) Bill 2026 alongside the Mutual Funds (Amendment) Bill 2026 and the Private Funds (Amendment) Bill 2026, all published on legislation.gov.ky. Three bills, one legislative package, and the interaction between them is the part most commentary misses.
Tokenised funds are funds
The same package confirmed that tokenised funds are regulated under the Mutual Funds Act and the Private Funds Act rather than under VASPA. If your vehicle is a fund whose interests happen to be tokenised, you are in the funds regime, and the classification test is redemption rights rather than tokenisation. See Cayman fund formation.
Where VASPA still applies
If the fund or an affiliate also provides custody, exchange or transfer services to third parties, that activity is separate and remains within the VASP regime. Running a venue is a VASP activity; issuing tokenised interests in your own fund is not. The two positions have to be assessed together, not sequentially.
CIMA also published a thematic review of the VASP sector in November 2025, which is the clearest available signal of what the regulator is actually looking at during supervision. We factor its findings into applications rather than treating the rulebook as the whole picture.
What we do, and what we do not.
Does Sovera prepare the application or refer it out?
Ours
Classification advice on which route applies. The Cayman entity, registered office and agent. The AML and CFT framework and appointment of the AML, compliance and reporting officers. The fit-and-proper dossier for every shareholder, director and senior officer. The business plan, three-year projections and risk assessment. The corporate governance framework, cybersecurity plan and client-asset segregation policies. The REEFS submission and every round of CIMA queries through to determination.
Theirs
The annual audit is the auditor's. Penetration testing and independent cyber assessment are the assessor's. Where a formal legal opinion on token classification is needed for a counterparty or an exchange listing, that opinion is counsel's. We hold the relationships and manage the process, but we do not put our name on someone else's work product.
For founders weighing Cayman against other jurisdictions before committing, our guide for crypto founders covers the wider structuring question. We prepare and file the application ourselves rather than acting as an introducer. That matters on a 6 to 10 month licence process, because the party answering CIMA's queries should be the party that wrote the answers in the first place.
CIMA VASP questions.
VASP applications, scoped in writing.
Tell us what the business does with virtual assets and where. We respond within twenty-four hours with a dated, priced and signed proposal covering the route, the government fees and the application timeline. No marketing call. No sequence.
Grand Cayman, Cayman Islands
United Arab Emirates
Weighing Cayman against a lower-tax regime with a treaty network behind it? Compare the Mauritius VASP licence under the VAITOS Act, where licensed virtual asset income qualifies for the 80% partial exemption.