Mauritius ITO & Stablecoin Issuer License

Mauritius is one of a small number of offshore jurisdictions with a dedicated, fully enacted regulatory framework for Initial Token Offerings (ITOs) and stablecoin issuance. Under the Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS), which came into force on 7 February 2022, the Financial Services Commission (FSC) issues licenses to entities wishing to issue tokens to the public, operate stablecoin projects, and provide related virtual asset services from Mauritius. The VAITOS framework is FATF-aligned, covers the full lifecycle of token issuance from white paper through to secondary market services, and sits within one of the most established offshore financial services jurisdictions in the Indian Ocean region — one with 46 double taxation agreements, a 3% effective corporate tax rate for GBC1 entities, and an FSC with over two decades of supervised non-bank financial services experience.

Zitadelle AG operates from our Port Louis, Mauritius representative office, giving us direct on-the-ground engagement with the FSC and the local service provider ecosystem. For ITO and stablecoin applicants, this proximity to the regulator and to local directors, compliance officers, and auditors materially improves application quality and timeline management.

What the VAITOS ITO License Authorizes

Under VAITOS 2021, an ITO issuer license from the FSC authorizes an entity to issue tokens to the public from or through a Mauritius-incorporated structure. The scope of permitted activities under ITO authorization includes:

• •Utility token issuance — tokens conferring access to a product, platform, or service
• •Security token issuance — tokenized representations of equity, debt, profit-sharing rights, or other investment instruments
• •Stablecoin issuance — digital tokens pegged to fiat currencies (USD, EUR, GBP, and other permitted denominations), commodity baskets, or other reserve assets
• •Real-world asset (RWA) tokenization — blockchain representations of property, private equity, bonds, trade finance instruments, and other asset classes
• •Multi-currency stablecoin baskets — synthetic reference instruments pegged to a basket of permitted currencies
• •NFT and digital collectible platforms where the offering involves a public sale under FSC registration

Each ITO must be individually registered with the FSC. A separate FSC registration is required for each offering — a VAITOS ITO license grants the authority to conduct token offerings, but each specific issuance must go through its own white paper review and registration process. Registrations are valid for a maximum of 12 months with a possible 6-month extension.

Stablecoin Issuance Under VAITOS — What the FSC Requires

Stablecoin issuance is one of the more complex ITO structures the FSC reviews, and the FSC has issued dedicated Guidance Notes on Stablecoins to clarify its expectations. Issuing or providing services in relation to stablecoins in or from Mauritius without an FSC VAITOS license is unlawful. The FSC's stablecoin framework covers:

• •Reserve asset management — how the stablecoin's reserve is held, valued, and reported. The FSC expects documented reserve management policies, independent custodianship of reserve assets, and regular reserve audits by an FSC-approved external auditor
• •Redemption mechanics — clear, documented redemption procedures including redemption timelines, redemption fees (if any), and redemption risk disclosures
• •Consumer protection disclosures — a white paper or prospectus covering the stablecoin's technical design, economics, reserve backing, governance structure, and risk factors — reviewed by the FSC before publication
• •AML/KYC for token holders — customer due diligence, transaction monitoring, and Travel Rule compliance for transfers above threshold
• •Cybersecurity — smart contract security, wallet infrastructure, and incident response documentation
• •Governance — board-level oversight of the stablecoin programme, independent compliance function, and three-line governance model

Token Classification — Utility, Security, or Payment Token

One of the most important pre-application steps for any ITO project in Mauritius is correct token classification, because it determines which regulatory regime applies and what additional authorizations may be needed alongside the ITO license. The FSC applies a three-category classification:

Payment tokens — tokens used as a medium of exchange or means of value transfer, including stablecoins. These fall under VAITOS and require ITO issuer licensing. If the payment token has characteristics of e-money, the Bank of Mauritius may have concurrent supervisory interest.

Utility tokens — tokens conferring access rights to a platform or service without investment return characteristics. These fall under VAITOS ITO licensing. The FSC assesses whether utility token claims are genuine or whether the token is structured as an investment product dressed as a utility token.

Security tokens — tokens representing ownership, debt, profit participation, or investment rights. These may require compliance with both VAITOS and the Mauritius Securities Act 2005, depending on whether the token meets the definition of a security under Mauritius law. Security token issuers typically require both FSC VAITOS authorization and potential Securities Act compliance assessment. Legal classification advice before application is essential for security token projects.

Corporate Structure and Substance Requirements

The VAITOS ITO license can only be held by a Category 1 Global Business Company (GBC1) incorporated in Mauritius. The GBC1 structure is what enables the ~3% effective tax rate through the 80% foreign tax credit mechanism on foreign- sourced income, and it is the standard vehicle for international token issuance projects operating from Mauritius. Key substance and governance requirements include:

• •Minimum two resident directors — at least two directors must be resident and ordinarily based in Mauritius. Directors must have relevant experience in virtual assets, financial services, or technology and must pass the FSC's fit and proper assessment
• •Physical office — a fully manned physical office in Mauritius is required. A registered address alone is insufficient. The FSC assesses Core Income Generating Activity (CIGA) substance during licensing and in ongoing supervision
• •Full-time MLRO and Compliance Officer — a Money Laundering Reporting Officer (MLRO), Deputy MLRO, and Compliance Officer must be appointed. These roles can be partially outsourced but the FSC requires demonstrated oversight and genuine function — not nominal appointment
• •Alternate Compliance Officer — required and must be independent from the primary Compliance Officer
• •FSC-approved external auditor — must be engaged before application submission. Audited accounts prepared under IFRS must be submitted annually within six months of financial year-end
• •Fit and proper assessment — all directors, UBOs, significant shareholders, and key personnel undergo FSC fit and proper review. Criminal records, adverse regulatory history, and unexplained source of funds are disqualifying. All key personnel appointments require prior FSC approval

White Paper and Prospectus Requirements

Every ITO registration in Mauritius requires a white paper or prospectus submitted to the FSC for review before it may be published or distributed to prospective investors. The FSC's review focuses on whether the white paper provides complete and accurate disclosure across all material dimensions of the offering. For stablecoin projects, this includes reserve mechanics. For security token projects, this includes investment terms and risk factors. For utility token projects, this includes platform functionality and token utility. At minimum, a VAITOS-compliant white paper must cover:

• •Full description of the virtual asset business and token purpose
• •Token economics — supply, allocation, vesting, and distribution
• •Reserve structure (stablecoins) — assets held, custodianship, valuation methodology, redemption procedures, and audit arrangements
• •Technical architecture — smart contract design, security controls, audit status
• •Risk factors — technology risk, regulatory risk, market risk, reserve risk (for stablecoins), liquidity risk
• •Governance — board oversight, decision-making structure, token holder rights
• •AML/KYC procedures for token purchasers
• •Redemption and exit procedures — how investors can exit and under what conditions
• •Legal classification of the token under Mauritius law
• •Issuer information — corporate structure, directors, beneficial owners

The FSC may request revisions to the white paper before approving its publication. No marketing, promotion, or sale of tokens may commence until the FSC has confirmed its review is complete and the registration is issued. The ITO registration once issued is valid for 12 months with a possible 6-month extension.

AML/CFT, Travel Rule, and FIU Reporting

VAITOS ITO licensees are regulated under the Anti-Money Laundering and Countering the Financing of Terrorism Act 2020 (AML/CFT Act), aligned with FATF Recommendation 15. The AML/CFT programme must be tailored to the specific token type, distribution geography, investor base, and risk profile of the project. Generic AML templates are not acceptable — the FSC conducts a substantive review of the programme as part of the licensing assessment.

The Travel Rule applies to all VASP-to-VASP transfers above threshold. Stablecoin issuers must implement a technical Travel Rule solution before the license is activated — not merely a policy document. Suspicious Transaction Reports (STRs) are filed with the Mauritius Financial Intelligence Unit (FIU), and the Compliance Officer must be registered with the FIU as the primary AML reporting contact.

Tax Position for Mauritius ITO and Stablecoin Issuers

The GBC1 structure used for VAITOS ITO licensing qualifies for Mauritius's most favourable tax treatment. The standard corporate tax rate of 15% is reduced to an effective rate of approximately 3% through an 80% partial exemption on foreign-source income including dividends, interest, and royalties — the principal income streams for most token issuers and stablecoin operators. There is zero capital gains taxon any asset class including virtual assets and tokens. No withholding tax applies to distributions to non-resident shareholders. Mauritius's network of 46 double taxation agreements — including with India, South Africa, France, the UK, Singapore, and the UAE — provides meaningful treaty protection for cross-border token distribution and reserve asset management.

CIGA substance requirements must be met to maintain GBC1 tax status. This means the core token management, governance, and compliance functions must genuinely operate from Mauritius — not just be registered there. The FSC's licensing substance requirements and the Mauritius Revenue Authority's CIGA requirements are aligned, meaning meeting FSC licensing standards simultaneously satisfies the tax substance test.

Mauritius ITO vs Other Jurisdictions for Token Issuance

For token issuers choosing a regulated jurisdiction, Mauritius competes primarily with Seychelles (VASP Act 2024), El Salvador (CNAD DASP), and — for EU-facing projects — Cyprus (MiCA CASP). The key advantages Mauritius offers over these alternatives for ITO and stablecoin projects specifically are its dedicated ITO registration framework (not all jurisdictions have a distinct token offering regime), the 46-DTAA network (valuable for cross-border reserve asset management and distribution), and its established track record as an African and Asian financial hub with deep banking infrastructure and institutional credibility.

Seychelles permits token issuance under the VASP Act 2024 but has a narrower ITO-specific framework. El Salvador offers zero corporate tax and fast processing under the DASP regime but carries lower international recognition for institutional counterparties. Cyprus MiCA CASP is required for operators targeting EU retail investors under MiCA — the MiCA authorization provides EU passporting that no offshore jurisdiction can replicate. For issuers targeting African, Asian, and Middle Eastern markets without an EU passporting requirement, Mauritius provides the strongest combination of regulatory credibility, tax efficiency, and banking infrastructure.

The Mauritius FSC VASP license and the ITO issuer license can be held simultaneously by the same GBC1 entity if the business operates both exchange/custody services and token issuance. Many issuers that launch their own token also wish to operate secondary market services — the VASP Class M (exchange) license covers this alongside the ITO registration. Zitadelle AG structures combined VASP and ITO applications to optimize the licensing footprint and minimize duplicated documentation.

How Zitadelle AG Assists with Mauritius ITO and Stablecoin Licensing

Zitadelle AG advises on Mauritius ITO and stablecoin licensing from our Port Louis, Mauritius representative office — giving us direct proximity to the FSC, local directors, compliance officers, and approved auditors. Our service covers:

• Token classification and regulatory scoping — utility, security, payment token assessment
• GBC1 incorporation and registered agent coordination
• Resident director and Compliance Officer sourcing through our local network and HRFinEase platform
• White paper and prospectus preparation tailored to FSC review standards
• AML/CFT manual and stablecoin-specific reserve management framework preparation
• Travel Rule technical solution advisory
• FSC application preparation and submission management
• FSC assessment liaison and query responses
• Post-licensing ongoing compliance management including annual audit coordination and FIU reporting