ZITADELLE AG · 2026 REGULATORY INTELLIGENCE SERIES

VASP Licensing in 2026: Caribbean Jurisdictions Update

An updated guide for Virtual Asset Service Providers seeking to license in St. Lucia, St. Vincent and the Grenadines, and The Bahamas — including 2026 regulatory changes, new requirements, and key deadlines.

Overview: Where Things Stand in 2026

When this article was first published in 2025, two Caribbean jurisdictions — St. Lucia and St. Vincent and the Grenadines — had just introduced VASP licensing frameworks. One year on, the picture has sharpened considerably. Both frameworks are now fully active and enforced, the grace periods for pre-existing operators are long closed, and the Caribbean has been joined by a third jurisdiction of significant importance to the crypto industry: The Bahamas.

This updated guide reflects the current state of all three frameworks as of early 2026, including regulatory changes, confirmed fee structures, and the key differences that should inform your jurisdiction selection. It is structured as a practical decision tool for virtual asset businesses — not a compliance checklist, but a strategic overview of your options in the region.

2026 Enforcement Reality: Across all three jurisdictions covered in this guide, operating a virtual asset business without a licence is now an active regulatory offence — not a grey area. Regulators in all three jurisdictions have signalled increased supervisory activity in 2026, with particular focus on AML/CFT controls, Travel Rule compliance, and governance quality.

🇱🇨 Saint Lucia

Composite VASP Licence · Regulator: FSRA · Law: Virtual Asset Business Act 2022

Framework Status in 2026

Saint Lucia's VASP framework is the most mature of the three covered in this guide, having been active since December 2022. The Financial Services Regulatory Authority (FSRA) is actively issuing licences and supervising licensed VASPs. In 2026, the FSRA's supervisory focus has sharpened around AML/CFT implementation quality, source of funds documentation, and the adequacy of technology and cybersecurity controls — areas where initial applications have historically been weakest.

Saint Lucia remains one of the more accessible Caribbean licensing jurisdictions for firms seeking a broad regulatory umbrella. Its Composite Licence consolidates multiple service lines under a single authorization — a meaningful operational advantage for firms offering exchange, custody, and advisory services simultaneously.

2026 Key Requirements

Activities Covered

• Digital asset exchange and brokerage operations

• Selling, redeeming, or transferring digital assets

• Custodial wallet and digital asset custody services

• Digital asset derivatives: lending, borrowing, structured products

• Virtual asset investment advisory services

• NFT platform operations

• ICO, IEO, and token issuance services

• OTC trading desks for digital assets

What Has Changed in 2026

The FSRA has moved from a permissive onboarding posture to active supervision. Key developments in 2025–2026 include a tightening of source-of-funds documentation requirements, increased interview frequency with AML officers during the application process, and more rigorous assessment of technology infrastructure. Firms that submitted applications in 2023–2024 under a lighter regime may now be subject to supplementary information requests as part of ongoing supervisory review.

The 2026 capital expectation has also been clarified: the FSRA has signalled that the XCD 100,000 floor applies to narrowly scoped operations, and that exchange or custody businesses with significant client asset exposure are expected to demonstrate materially higher capital adequacy.

St. Lucia 2026 Tip: Saint Lucia remains a strong jurisdiction for firms that want a single composite licence covering multiple service lines. The key shift in 2026 is that application quality matters significantly more than it did at launch. Weak AML policies, thin business plans, or underdocumented source of funds are now reliable grounds for rejection, not just requests for more information.

🇻🇨 St. Vincent and the Grenadines

Virtual Asset Business Act 2022 (in force 31 May 2025) · Regulator: FSA

Framework Status in 2026

SVG's Virtual Asset Business Act (VABA) came into force on 31 May 2025, amended on 28 April 2025 to extend the grace period for pre-existing operators and clarify key definitions. The deadline for existing operators to submit applications — 31 July 2025 — has now passed. As of 2026, SVG's FSA is in full enforcement mode.

An important correction from the original framing of SVG as a light-touch alternative to other jurisdictions: SVG no longer offers an unregulated environment for virtual asset or forex activities. The FSA does not issue a standalone forex licence — firms wishing to offer forex brokerage from SVG need to hold that licence from a separate jurisdiction. The VABA applies to all virtual asset activities conducted in or from SVG, with no carve-outs for previously registered unregulated entities.

Existing SVG Operators: If your firm was incorporated in SVG and engaged in virtual asset activities before 31 May 2025 and has not yet applied for registration, you are in breach of the VABA. The FSA has discretion to consider late applications but has also indicated it will pursue striking-off of non-compliant entities. Contact Zitadelle AG immediately to assess your remediation options.

2026 Key Requirements

Activities Requiring SVG Registration

• Exchange between virtual assets and fiat currencies

• Exchange between different forms of virtual assets

• Transfer of virtual assets (with or without consideration)

• Safekeeping and administration of virtual assets (custody)

• Participating in or providing financial services related to virtual asset issuance or sale

• Operating cryptocurrency exchanges, wallet services, OTC desks, and payment processors

What Has Changed in 2026

The most significant change since the original article is that SVG has transitioned from a jurisdiction in which VASP activity was unregulated — and therefore technically permissible without a licence — to one where the VABA is fully enforced and non-compliance carries real consequences including administrative striking-off and potential criminal liability.

The April 2025 amendment clarified that SVG companies claiming exemption from VABA regulation must demonstrate that their activities genuinely fall outside the defined VASP activities — a much higher bar than simply asserting that the company is "unregulated." The FSA has also clarified that companies offering services to clients in other jurisdictions from SVG are not automatically exempt — the VABA applies based on the location of the entity, not the location of its clients.

SVG 2026 Reality Check: SVG was widely used by forex and crypto operators as an unregulated home base. That model no longer exists. In 2026, operating in or from SVG without a VABA licence — or without a home-country financial licence where SVG regulation does not apply — is a regulatory offence. Zitadelle AG advises all existing SVG-registered operators to conduct an immediate compliance review.

🇧🇸 The Bahamas — NEW

Digital Assets and Registered Exchanges (DARE) Act 2024 · Regulator: SCB

Why the Bahamas Is Now a Key Jurisdiction

The Bahamas is the most established and internationally recognized jurisdiction covered in this guide for virtual asset regulation. Its Digital Assets and Registered Exchanges (DARE) Act was first enacted in 2020 — making it one of the world's earliest comprehensive digital asset regulatory frameworks. The most recent version, the DARE Act 2024, came into force on 29 July 2024, replacing and strengthening the prior framework.

The Bahamas has attracted major global crypto players — including Tether, OKX, and Bitfinex — and the Securities Commission of The Bahamas (SCB) is widely regarded as one of the more sophisticated and business-friendly regulators for digital asset firms in the Atlantic region. For firms seeking a jurisdiction that combines regulatory credibility, operational infrastructure, and tax neutrality, The Bahamas is a compelling option in 2026.

2026 Key Requirements

Licence Categories Under the DARE Act 2024

• Digital Asset Exchange (DAE): Platforms for the trading, buying, selling, and conversion of digital assets

• Custodial Wallet Provider: Businesses providing safekeeping and storage of digital assets on behalf of clients

• Staking and Yield Services: Firms offering clients staking or other yield-generating opportunities using digital assets

• Broker-Dealer: Firms acting as intermediaries in digital asset transactions, including OTC desks

• Token Issuance: Companies conducting ICOs, IEOs, or other token sales to the public

Core Documentation Required

• Certificate of incorporation and constitutional documents

• Comprehensive business plan — operational, technical, and commercial aspects

• AML/CFT policies, procedures, and risk assessment framework

• Technology infrastructure and cybersecurity documentation

• Client asset safeguarding and segregation policies

• Fit and proper forms for all directors, officers, and major shareholders

• Proof of capital adequacy and source of funds

• Business continuity plan and operational manual

• Travel Rule implementation documentation

• Evidence of banking or payment infrastructure

What Makes the Bahamas Different

The Bahamas stands apart from St. Lucia and SVG in several important ways. First, it requires genuine physical presence — a real office and a resident senior executive, not just a registered address. This is a higher bar than either Eastern Caribbean jurisdiction, but it also confers significantly higher regulatory credibility with counterparties, banks, and institutional partners.

Second, the SCB is an active and experienced regulator with a dedicated FinTech hub (SCB FITLink) and a sophisticated supervisory methodology. The Bahamas has been subject to a VASP National Risk Assessment concluding a low ML risk rating — an assessment that supports its reputation as a well-regulated, internationally credible jurisdiction.

Third, the Bahamas is tax-neutral for International Business Companies. Licensed VASPs organized as IBCs are not subject to income, capital gains, profit, or dividend taxes — with the annual licence fee as the primary recurring cost.

Bahamas 2026 Advantage: For firms that want the credibility of a well-recognized, institutionally respected regulatory framework — and are prepared to meet genuine substance requirements — The Bahamas is the strongest jurisdiction in this guide. It is the choice of major industry players for a reason. Zitadelle AG provides end-to-end support for Bahamas DARE Act applications including banking onboarding coordination.

2026 Comparative Overview

Which Jurisdiction Is Right for Your Firm?

Choose Saint Lucia if...

• You want a single composite licence covering multiple virtual asset service lines without needing separate applications

• You prefer a framework that does not require physical presence or a resident executive

• You are an early-stage or mid-sized operation seeking a cost-effective and operationally flexible path to compliance

• You intend to operate primarily outside the Caribbean and need a credible regulatory home base

Choose St. Vincent and the Grenadines if...

• You already have an SVG corporate structure and want to regularize it under the VABA

• You are seeking a lower-cost annual compliance commitment and are comfortable with the SVG regulatory profile

• Your business model aligns closely with the VABA's defined activity categories

• You understand that SVG no longer offers an unregulated environment and are committed to full compliance

Choose The Bahamas if...

• You want the strongest international regulatory credibility available in the Caribbean region

• You are building a firm that will deal with institutional counterparties, payment infrastructure, or major banking relationships

• You are prepared to establish genuine physical presence and a resident senior executive in the jurisdiction

• You want access to a Regulatory Sandbox to test your model before committing to full licensing

• Tax neutrality combined with institutional credibility is a priority for your investors or structure

Not Sure Which Jurisdiction Fits? Zitadelle AG provides jurisdiction selection advisory as part of our initial engagement. We assess your business model, target markets, client base, and operational constraints — and recommend the optimal jurisdiction and licence structure for your specific situation. Contact us for a free initial consultation.

What If You Cannot or Do Not Want to Apply in These Jurisdictions?

Not every virtual asset business model is best served by a Caribbean licence. For firms that cannot meet the requirements of St. Lucia, SVG, or The Bahamas — or that prefer a different regulatory profile — Zitadelle AG can assist with alternative options including:

• Redomiciliation: Moving your existing Caribbean company to a jurisdiction where VASP services are not yet regulated, or where the licensing requirements better suit your business model.

• New formation in alternative jurisdictions: Seychelles (VASP Act 2024 — active), BVI (VASP Act 2022, in force February 2023), Cayman Islands (VASPA, with Phase 2 licensing underway), or other jurisdictions appropriate to your needs.

• Multi-jurisdictional structuring: For firms operating across multiple markets, we design entity structures that ensure each legal entity holds the correct authorization for its activities in its home jurisdiction.

How Zitadelle AG Supports Your VASP Licensing

1. Jurisdiction Selection & Regulatory Advisory Jurisdiction selection based on your business model, target markets, and capital profile. Corporate structuring for licensing eligibility. Fit and proper pre-assessments for directors and UBOs.

2. Licence Application Management Preparation and submission of complete application packages for FSRA (Saint Lucia), FSA (SVG), and SCB (Bahamas). Direct regulatory liaison throughout the review process. Management of information requests, clarifications, and document revisions.

3. AML/CFT Framework Development Full AML/CFT policy and procedure drafting tailored to the applicable regulatory framework. Travel Rule compliance documentation. Risk assessment frameworks and staff training.

4. Compliance Infrastructure Cybersecurity and data protection framework documentation. Client asset segregation and escrow arrangement guidance. Internal controls and governance framework design.

5. Banking & Operational Setup Banking and payment infrastructure identification and onboarding coordination — particularly important for Bahamas applications where the SCB considers banking readiness as part of its review.

6. Post-Licensing & Ongoing Compliance Quarterly and annual regulatory reporting preparation. Licence renewal management. Compliance programme updates as regulations evolve. Regulatory change monitoring and alerts.

Act Now — The Caribbean Has Moved to Enforcement

The era of the unregulated Caribbean crypto company is over. All three jurisdictions covered in this guide — Saint Lucia, St. Vincent and the Grenadines, and The Bahamas — now operate active, enforced VASP licensing regimes. In 2026, regulators in the region are moving beyond initial authorization and into substantive supervision: reviewing AML quality, checking Travel Rule implementation, and assessing whether licensed firms actually meet the governance standards they committed to at application.

Whether you are building a new virtual asset business, regularizing an existing structure, or seeking a more credible regulatory home for an established operation, the window for proactive action is now.

Contact Zitadelle AG today to schedule a consultation and begin your licensing process in the jurisdiction that best fits your firm.

Legal Notice: This document is provided for informational purposes only and does not constitute legal advice. The regulatory frameworks described are based on publicly available information as of March 2026. Regulations change — always verify current requirements with qualified legal counsel before taking any action. © Zitadelle AG · zitadelleag.com