Seychelles Crypto License 2026 — VASP Act Reality Check, Who's Licensed, and What the FSA Actually Expects

For the better part of a decade, Seychelles was the go-to jurisdiction for crypto businesses that wanted a credible-looking offshore company without the overhead of actual financial regulation. The International Business Company (IBC) structure was fast, cheap, and accepted by enough PSPs and banking partners to be commercially viable. Around 20% of global crypto exchanges at one point or another incorporated there. OKX, KuCoin, HTX (formerly Huobi), BitMEX, and MEXC all built their operational structures through Seychelles entities. The jurisdiction had real operational track record — just very little in the way of formal oversight.

That era ended definitively on 1 September 2024, when the Virtual Asset Service Providers Act 2024 (VASP Act) came into force. Since then, operating virtual asset services in or from Seychelles without an FSA license is a criminal offence carrying fines of up to USD 350,000 or imprisonment of up to 15 years. The transitional period for existing operators ended 31 December 2024. 2025 was the year the FSA started collecting on that promise — and the industry noticed.

The 2025 Reality Check That Caught the Market Off Guard

Appleby, one of the world's most respected offshore law firms, published an analysis in January 2026 that was blunt by the standards of legal commentary. Their title: Seychelles Virtual Asset Regulation: The Reality Check of 2025. The core message was that many firms had treated the transitional period as a planning window. The FSA treated it differently — as a period during which operators remained fully subject to AML/CFT obligations while building out whatever they were missing to meet the new standard. Firms that hadn't built genuine substance were now, in Appleby's words, "facing difficult conversations with the FSA."

Those difficult conversations took several forms. The FSA identified entities operating on minimal substance — a registered address, a nominee director, and a filing address — and required them to demonstrate genuine operational presence. Mailbox setups were being actively flagged. AML programmes that were generic templates with names swapped in were rejected with the application fee forfeited and a six-month freeze-out on resubmission. More significantly, the FSA introduced a requirement that applicants walk the regulator through their live compliance, transaction monitoring, and security systems during the assessment process. Not a description of planned systems. Actual operational systems, live, demonstrable on the day.

The industry phrase that came out of this period — "build now, license later" — captures exactly what the FSA communicated: if you cannot show us working systems, you are not ready for licensing, regardless of how complete your documentation package is. For operators accustomed to filing documents and waiting for approval, this was a significant recalibration.

Who Is Actually Getting Licensed: The Early Approvals

The FSA's public VASP register began showing approved entities from mid-2025 onward. The early approvals were revealing: the firms that moved quickly, built genuine infrastructure, and engaged professional advisory support got through. Those that applied with minimal documentation and hoped for the best hit the rejection wall.

Among the first entities to receive FSA approval in mid-2025 were OKX (through Aux Cayes FinTech Co. Ltd), eToro (Seychelles) Ltd, Bybit (Bybit Technology Ltd), and Bequant. The presence of OKX and eToro among the first approvals matters commercially — these are major institutional-grade operators with sophisticated compliance infrastructure that the FSA was able to assess, process, and approve. Their approval signals that the Seychelles VASP framework is credible enough for top-tier global crypto businesses, not just a lighter-touch registration for smaller operators.

On the other side of the ledger, the FSA published a public notice in April 2025 that WOT Global Solutions Ltd had voluntarily withdrawn its VASP application — submitted on the transitional deadline of 31 December 2024. Voluntary withdrawal mid-process typically indicates the applicant encountered FSA queries they could not adequately address, or discovered that building the operational infrastructure required to pass assessment was more demanding than anticipated. It is not the only withdrawal the industry has seen. The FSA has also issued multiple public notices about entities claiming FSA authorization without holding any license — enforcement activity that signals active supervision rather than passive registration.

The New Code of Corporate Governance — January 2026

On top of the 2025 enforcement escalation, the FSA introduced a new Code of Corporate Governance effective 1 January 2026. Appleby described it as representing "a significant shift in regulatory philosophy." The Code formalized the FSA's expectations for board-level accountability, three-line governance models (operational management, compliance/risk oversight, and independent audit), and the separation of executive and supervisory functions in a way that substantially exceeds what many Seychelles IBC structures were running in 2024.

For existing VASP licensees and applicants, the Code means that the governance structure described in the application must be genuine and demonstrable at the board level — not just a chart in a business plan. Directors must actively exercise governance functions. The Compliance Officer must be genuinely independent from the Board. Internal audit must exist as a distinct function. The FSA's position, consistently communicated through 2025 and into 2026, is that it licenses operating businesses, not legal structures dressed up to look like operating businesses.

FSA Circular No. 3 of 2025 — The CFD Clarity That the Market Needed

One of the genuinely positive regulatory developments from 2025 was FSA Circular No. 3 of 2025, which resolved a question that had been creating practical confusion for many operators: do CFDs on cryptocurrencies require a VASP license, a Securities Dealer license, or both?

The FSA's answer was definitive. CFDs where the underlying asset is a virtual asset are governed by the Securities Act, not the VASP Act. The reasoning: a CFD does not involve actual purchase, transfer, or custody of the virtual asset — the trader speculates on price movements without owning the asset, with no blockchain involvement. The FSA noted that as of December 2024, 105 out of 187 approved CFD brokers (56% of the Securities Dealer population) were already offering crypto CFDs. The Circular confirmed existing practice rather than introducing new authorization requirements, and it means that operators running CFD platforms on crypto do not need a separate VASP license alongside their Seychelles FSA Securities Dealer license.

For operators running hybrid models — actual crypto spot exchange or custody alongside CFD products — both licenses may still be required. But the Circular eliminated the regulatory ambiguity that was causing some hybrid platforms to over-engineer their structure unnecessarily.

FATF Grey List Exit — What It Actually Changed for Banking

Seychelles exited the FATF grey list in 2024 after implementing a comprehensive package of AML/CFT legislative and supervisory reforms. For crypto businesses, this matters in one very specific way: banking. While the grey list designation was in place, correspondent banking relationships involving Seychelles were subject to enhanced due diligence requirements that made banking for Seychelles entities harder to establish and maintain. Grey list status was not a dealbreaker for every banking relationship, but it added friction — particularly for Tier 2 and Tier 3 banks that run automated risk-scoring systems that flag grey list jurisdictions.

Post-exit, that friction has reduced. Banking access for properly structured Seychelles VASPs with genuine operational substance has improved materially. This is not the same as saying banking is easy — it is not, anywhere, for crypto businesses. But the structural banking obstacle represented by grey list status has been removed, which is a commercially meaningful improvement for operators whose primary constraint was banking rather than regulatory authorization itself.

The Four License Types and the Year 3 Capital Trap

The Seychelles VASP license comes in four types: Type A (wallet/custody, USD 25,000 minimum capital), Type B (exchange, USD 50,000), Type C (broking, USD 50,000), and Type D (investment advisory, USD 100,000). Multiple types can be applied for simultaneously, and many exchange operators apply for Types A and B together to cover custody alongside trading.

The detail that most applicants miss — and that creates problems later — is the Year 3 capital rule. From the third year of operations onward, all VASP license holders must maintain minimum capital equal to at least 2.5% of annual turnover, regardless of the initial minimum capital for their license type. For a high-volume exchange processing USD 100 million annually, that means USD 2.5 million in minimum capital — well above the USD 50,000 initial requirement. Capital planning must account for this dynamic from day one. Operators who launch, scale their volume, and then discover they are under-capitalised in Year 3 face an uncomfortable conversation with the FSA about remediation timelines.

Prohibited Activities — What You Cannot Do from Seychelles

The VASP Act is explicit on prohibited activities. Mining operations in or from Seychelles are expressly prohibited. Mixer and tumbler services — transaction mixing, coin tumbling, and privacy-obfuscation tools — are prohibited. Payment services under Seychelles payment legislation require separate authorization. Certain NFT conversion activities are restricted. These prohibitions are not ambiguous guidance — they are statutory exclusions. Applicants who describe business models that include any of these activities in their application materials will not be approved.

The Tax Picture — 1.5% for Those Who Build Real Substance

The Seychelles beneficial tax rate of 1.5% on assessable income is real, but it requires substance to access. Substance-compliant VASP licensees — those with physical offices, resident directors, and qualified local staff — automatically qualify for the 1.5% rate because the FSA's licensing substance requirements match the Seychelles Revenue Commission's economic substance requirements for the beneficial rate. Zero capital gains tax and zero VAT on crypto exchange and trading apply across the board. IBC VASPs are exempt from stamp duty on transactions, share transfers, and asset dealings.

The effective tax position for a substance-compliant Seychelles VASP is genuinely among the most efficient of any properly regulated offshore crypto jurisdiction. It is better than Mauritius's approximately 3% effective rate under the foreign tax credit regime, and considerably better than EU jurisdictions — though without EU passporting rights.

Who Seychelles Works For in 2026 — and Who It Does Not

Seychelles is not the right answer for every crypto business in 2026, and it is worth being direct about that. The jurisdiction works well for operators targeting African, Middle Eastern, and Asian markets who want a FATF-aligned regulatory credential, genuine banking access, and a cost-efficient tax structure — and who are prepared to build real operational substance in Seychelles. The UTC+4 time zone is commercially convenient for these target markets in a way that Caribbean alternatives are not.

Seychelles does not work for operators seeking a light-touch registration with minimal operational overhead. The FSA has made this categorically clear. It also does not work for operators that need EU passporting — servicing EU retail clients requires a separate Cyprus MiCA CASP authorization. And for operators whose primary market is Africa with a need for deep local banking relationships, the Mauritius FSC VASP license — which carries 46 double taxation agreements and stronger established banking relationships across the continent — may be the better primary structure, with Seychelles used as a complementary vehicle.

For operators considering Caribbean alternatives, the BVI VASP and Cayman VASP frameworks offer different cost-to-recognition profiles suited to different institutional fund and hedge fund structures. The right jurisdiction depends on the business model, target markets, banking requirements, and capital available — not on which option sounds cheapest at the outset.

Zitadelle AG advises on Seychelles VASP licensing from initial scoping through to FSA license grant — including IBC formation, resident director and Compliance Officer sourcing, AML/CTF manual preparation, cybersecurity framework documentation, bank account opening, and FSA application management. For clients building multi-jurisdictional crypto structures, we coordinate Seychelles licensing alongside complementary authorizations across Mauritius, Cyprus, Labuan, and El Salvador from our offices in Cyprus, Labuan, and Mauritius.