South Africa CASP License 2026 — FSCA FSP Subcategory 1.28 Complete Guide
South Africa's FSP Crypto-Asset License (FSCA Subcategory 1.28) is Africa's premier regulated VASP authorization — covering crypto exchange, brokerage, OTC dealing, custody, and advisory under the FAIS Act. Since the CASP licensing regime opened on 1 June 2023, the FSCA has received 512 licence applications — of which 300 have been approved, 14 declined, and 121 withdrawn following FSCA engagement on appropriateness of business models. The balance remains under active review. This is not a rubber-stamp process: the FSCA has initiated 81 enforcement investigations into potential unlicensed CASP businesses and confirmed that no further exemption extensions will be granted. South Africa exited the FATF grey list in October 2025 — removing a major institutional credibility barrier for South African entities with international banking and counterparty relationships. Two routes to market: new FSP application (4–8 months) or acquisition of an existing licensed entity. Notable licensees include Luno, VALR, Ovex, and AltCoinTrader. Zitadelle AG has completed 7+ South African FSP acquisitions for international clients and manages new FSCA applications through our HRFinEase network for Key Individual placement.
2026 Regulatory Updates — Read Before Proceeding
512 applications received — 300 approved, 14 declined, 121 withdrawn: The FSCA's published statistics as of early 2026 confirm this is an active and selective licensing process. The 121 withdrawals following FSCA engagement on business model appropriateness signal that the regulator actively challenges applications that do not reflect genuine operations.
RE (Regulatory Examinations) exemption expired 30 June 2025: All licensed CASPs and their Key Individuals must now be RE-compliant — having passed the relevant FAIS regulatory examinations (RE1 for Key Individuals and RE5 for Representatives). The FSCA has confirmed that failure to comply may lead to licence suspension or withdrawal. Zitadelle AG sources RE-certified Key Individuals via HRFinEase for all South African FSP engagements.
FSCA supervisory inspections active: The FSCA conducted 21 of a planned 30 supervisory inspections between April 2025 and March 2026, focused on FICA compliance, business risk assessments, and AML/CFT frameworks. The FSCA established the Crypto Asset Supervisory Engagement Forum in August 2025 for ongoing sector dialogue. Licensed CASPs should expect supervisory contact.
Travel Rule (FIC Directive 9) in force — April 2025: FIC Directive 9 requires all CASPs to implement the FATF Travel Rule for crypto asset transfers from 30 April 2025. Compliant Travel Rule solutions (IVMS101 standard) are now a mandatory operational requirement for all licensed South African CASPs — not a future obligation.
COFI Bill — the future of South African financial regulation: The Conduct of Financial Institutions (COFI) Bill is progressing through the South African legislative process. When enacted, COFI will replace the FAIS Act and create a unified conduct framework for all financial institutions including CASPs. Existing FSP licences are expected to transition into COFI with FSCA guidance. Operators building South African crypto structures should build them to COFI-compatible governance standards now.
South Africa FATF grey list exit — October 2025: South Africa was removed from the FATF grey list in October 2025 following completion of its FATF Mutual Evaluation action plan. This materially improves banking access, correspondent banking relationships, and institutional counterparty due diligence outcomes for FSCA-licensed CASPs.
South Africa as Africa's Premier Crypto Jurisdiction
South Africa has emerged as one of the most advanced and commercially pragmatic jurisdictions for regulating virtual asset service providers (VASPs) on the African continent. Since the Financial Sector Conduct Authority (FSCA) formally classified crypto assets as financial products under the FAIS Act in 2022, firms offering crypto-related services must operate under a Financial Services Provider (FSP) license with explicit crypto-asset authorization under Subcategory 1.28.
For crypto exchanges, OTC desks, brokers, custodians, wallet providers, and fintech groups seeking regulatory legitimacy, banking access, and international credibility with African institutional counterparties, a South African FSP with crypto-asset authorization is the definitive strategic licensing option for Africa-focused operations.
Notable FSP Crypto-Asset Licensees
Luno (Pty) Ltd
One of Africa's largest and most recognized crypto exchanges — operating under FSCA FSP crypto-asset authorization. Luno's licensed status has enabled it to maintain banking relationships and institutional partnerships that unlicensed operators cannot access.
VALR (Pty) Ltd
South Africa's leading crypto exchange by trading volume — holding both FSCA FSP crypto-asset authorization and an FSCA ODP (Over-the-Counter Derivative Provider) license for crypto derivative products.
Ovex
Licensed crypto OTC dealer providing institutional-grade liquidity and settlement services to South African institutional clients under FSCA FSP crypto-asset authorization.
AltCoinTrader
One of South Africa's longest-operating licensed crypto exchanges — FSCA FSP crypto-asset authorization has supported its banking relationships and operational longevity in a maturing regulatory environment.
FSCA Application Fees and Cost Breakdown
| Item | Cost |
|---|---|
| FSCA FSP application fee | ZAR 16,313 (~USD $895) |
| CIPC company registration | ZAR 175 (~USD $10) |
| FIC accountable institution registration | No fee |
| Professional indemnity insurance (mandatory) | ZAR 30,000–80,000/year |
| Compliance Officer (outsourced, annual) | ZAR 60,000–150,000/year |
| AML/FICA manual preparation | ZAR 30,000–80,000 (one-time) |
| Key Individual sourcing and placement | Via HRFinEase (quoted on scope) |
| Physical office (mandatory, Year 1) | ZAR 60,000–180,000/year |
| Total Year 1 all-in (excl. capital) | ZAR 200,000–550,000 (~USD $11K–$30K) |
Capital (no statutory minimum — solvency-based): No fixed minimum capital is prescribed under FAIS. However Zitadelle AG recommends maintaining ZAR 2,000,000 (~USD $110,000) in operational capital to demonstrate solvency, satisfy FSCA supervisory expectations, and meet South African banking requirements for segregated client accounts.
FSCA application fee context: The ZAR 16,313 application fee is the lowest component of the total cost. The significant costs are professional preparation of the application package, Compliance Officer appointment, mandatory professional indemnity insurance, and physical office setup. Applications declined for inadequate business plans or insufficient competency lose the application fee and the time invested — quality preparation is the most cost-efficient approach.
South Africa PTY Ltd Formation — The Corporate Vehicle for FSCA Licensing
Every FSCA FSP crypto-asset licence is held by a South African private company (Proprietary Limited, "Pty Ltd"). Formation is handled through the Companies and Intellectual Property Commission (CIPC) — fast, online, and completed within 3–5 business days.
Company type: Proprietary Limited (Pty Ltd) — the standard South African private company. Minimum 1 director, 1 shareholder (can be the same person). 100% foreign ownership permitted.
CIPC registration: Filed online via the CIPC portal. Cost: ZAR 175. Timeline: 1–3 business days for electronic registration.
Tax registration: Every company must register with SARS (South African Revenue Service) for income tax within 60 days of incorporation. VAT registration required if annual turnover exceeds ZAR 1,000,000. SARS has a dedicated Crypto Asset Unit monitoring blockchain business transactions and tax compliance.
Tax treatment: South Africa taxes crypto assets as intangible assets. Gains are subject to Capital Gains Tax (individuals: 18% effective; companies: 22.4% effective) or income tax depending on the nature of the activity. Trading profits taxed as income. Long-term investment gains as capital gains. Tax treatment is determined on a case-by-case basis by SARS.
Physical office (mandatory): A real physical office is required for the FSCA license — not a virtual mailbox. The FSCA conducts on-site supervisory inspections at the licensed premises. Office space must be sufficient for document storage and operational staff.
BEE considerations: Broad-Based Black Economic Empowerment (B-BBEE) is not a statutory requirement for FSP licensing, but B-BBEE compliance is commercially significant for tender applications, larger institutional contracts, and banking relationships in South Africa. International applicants should be aware of B-BBEE context even if not immediately required.
Zitadelle AG manages PTY Ltd incorporation as standard in every South African FSP engagement.
FIC Accountable Institution Registration — Mandatory Alongside FSCA Licensing
CASP licensing in South Africa involves two separate regulatory bodies: the FSCA (for the FSP licence itself) and the Financial Intelligence Centre (FIC) for AML/CFT oversight. Both registrations are mandatory — and they have separate requirements.
FIC registration: CASPs were formally classified as accountable institutions under the Financial Intelligence Centre Act (FICA) from 19 December 2022. All CASPs must register with the FIC as an accountable institution — separate from and in addition to the FSCA FSP application.
Ongoing FIC obligations:
FSCA/FIC supervisory overlap: The FSCA supervisory inspection programme (21 inspections completed to March 2026, 30 more planned) focuses specifically on FICA compliance — customer due diligence, business risk assessments, and AML/CFT controls. An FSCA licence does not protect against FIC enforcement action for FICA non-compliance.
Zitadelle AG prepares comprehensive FICA/AML/CFT compliance frameworks — including FIC registration, business risk assessment documentation, transaction monitoring policy, and Travel Rule implementation (IVMS101 standard) — as part of every South African CASP licensing engagement.
Banking for South African CASP Licensees
South Africa's FATF grey list exit in October 2025 has materially improved the banking landscape for FSCA-licensed crypto businesses. International correspondent banks previously applying enhanced due diligence to all South African entities have progressively reduced this burden following the grey list exit.
South African banking options for licensed CASPs:
Standard Bank — one of Africa's largest banks. FSCA-licensed CASPs with strong compliance documentation and operational history have accessed Standard Bank corporate accounts for both operational and client segregation purposes.
Absa Bank — part of the Absa Group. Growing acceptance of regulated crypto business clients following the grey list exit.
First National Bank (FNB) — active in the fintech space. Has banking relationships with several established South African crypto exchanges.
Nedbank — more conservative approach historically but improving access for FSCA-licensed entities.
International EMI alternatives: For South African CASP operators with international revenue flows, EU-licensed EMIs (Lithuania, Cyprus, Latvia) provide USD and EUR multi-currency accounts accessible to South African entities. These can operate alongside South African ZAR banking for international settlement.
What unlocks banking approval: An FSCA licence with Subcategory 1.28 is the single most important factor. Banks that were declining applications from South African crypto entities in 2022–2024 have become materially more willing to engage with FSCA-licensed operators. The combination of FSCA licence, FATF clean status, and a professional FICA/AML compliance framework significantly improves South African banking approval rates. Zitadelle AG prepares complete banking KYC dossiers for all South African CASP clients.
South Africa as the Gateway to African Crypto Markets
The FSCA FSP crypto-asset licence is not just a South African credential — it is the strategic entry point for operating across sub-Saharan Africa.
Pan-African strategic value: FSCA credibility carries weight across the African continent in a way that no offshore alternative (Seychelles, Mauritius, Cayman) replicates. For brokers and crypto operators targeting Nigerian, Kenyan, Ghanaian, or broader African clients, a South African FSCA licence provides institutional credibility that facilitates banking, payment processor onboarding, and institutional partnerships across the region.
Complementary African licenses to add: For operators targeting specific African markets after establishing South African FSCA standing, Zitadelle AG advises on the following complementary license strategy:
Kenya CMA (Capital Markets Authority): East Africa's most credible investment licence. Growing crypto framework expected 2026–2027.
Nigeria SEC: Largest African economy. Digital Asset Issuance and Exchange licensing framework enacted. Complex but high-value for West African market access.
Mauritius VAITOS: African gateway structure — 46+ DTAAs covering African markets, strong banking access (MCB, AfrAsia), ~3% effective corporate tax. Frequently used alongside South African FSCA for cross-continent structures.
For operators building Africa-wide crypto structures: South African FSCA (primary regulated credential) + Mauritius VAITOS (offshore vehicle, DTAAs, banking) is the most commonly recommended dual-structure combination.
South Africa FSP vs Mauritius VAITOS vs Seychelles VASP — Africa/Offshore Comparison
| Feature | South Africa (FSCA) | Mauritius (VAITOS) | Seychelles (FSA) |
|---|---|---|---|
| Regulator | FSCA | FSC Mauritius | FSA Seychelles |
| Framework | FAIS Act (CASP) | VAITOS Act 2021 | VASP Act 2024 |
| License type | FSP + Subcategory 1.28 | Class M/O/R/I/S | VASP License |
| Min. capital | None (solvency-based; ZAR 2M recommended) | USD $45K–$145K | USD $50K–$100K |
| FSCA application fee | ZAR 16,313 (~USD $895) | USD $1,000–$3,000 | USD $3,000 |
| Annual fee | Activity-based levy | USD $1,900–$5,000 | USD $6,000 |
| Corporate tax | 27.5% (company) | ~3% effective (GBC) | 1.5% |
| FATF status | Clean (Oct 2025 grey list exit) | Clean | Clean (2024) |
| Physical office | Mandatory | Required | Required |
| Travel Rule | In force (Directive 9, Apr 2025) | In force (IVMS101) | In force |
| African market credibility | Highest — recognized across Africa | High — DTAAs with Africa | Moderate |
| Banking access | Good (post grey list exit) | Strong (MCB, SBM, AfrAsia) | Moderate |
| M&A route available | Yes — active market | Limited | Limited |
| Timeline | 4–8 months (new) / faster (M&A) | 5–9 months | 8–12 months |
| Best for | South African + African market primary | Offshore structure, DTAAs | Global retail |
| Zitadelle track record | 7+ FSP acquisitions | 5+ VAITOS clients | Active |
What the FSP Crypto-Asset License Authorizes
A South African FSP license with Subcategory 1.28 crypto-asset permissions authorizes the following regulated activities:
What is NOT Covered Under Standard FSP Subcategory 1.28
Category I, Category II, and ODP: Which License Do You Need?
This is the most important structural decision in South African crypto licensing — and misclassification results in regulatory enforcement or license withdrawal.
| Feature | Category I FSP | Category II FSP | ODP License |
|---|---|---|---|
| Also known as | Standard FSP | Discretionary FSP | Market maker / derivatives |
| Crypto activities | Exchange, brokerage, intermediation, advice, custody | Discretionary portfolio management of crypto | Crypto CFDs, futures, options |
| Client instruction | Per transaction — client instructs each trade | Discretionary — manager decides without instruction | Principal counterparty to derivative contracts |
| Typical operator | Spot crypto exchange, OTC desk, wallet provider | Crypto fund manager, managed crypto strategy | Crypto CFD platform, leveraged crypto products |
| Capital requirement | Assets > Liabilities (solvency-based) | Higher — enhanced capital adequacy | High — 6 months operational expenses |
| Timeline | 4–8 months | 6–12 months | 12–24 months |
| Regulatory complexity | Moderate | High | Very High |
| Notable holders | Luno, VALR, Ovex, AltCoinTrader | Crypto asset managers | VALR (ODP for derivatives) |
Category selection note: The vast majority of crypto exchanges, brokers, OTC desks, and wallet providers require Category I FSP with Subcategory 1.28 crypto-asset permissions. Category II is specifically for discretionary management — where the operator makes investment decisions on behalf of clients without per-transaction instruction. ODP is required only where the product offering includes derivatives (CFDs, futures, options) on crypto assets. Zitadelle AG advises on category selection as the first step of every South African crypto licensing engagement.
Two Routes: New FSP Application vs. M&A Acquisition
South Africa offers two distinct pathways to obtaining a crypto-asset FSP license. The right choice depends on your timeline, capital, and operational readiness.
Route 1 — New FSP Application (4–8 Months)
Apply directly to the FSCA for a new FSP license with Subcategory 1.28 crypto-asset permissions. Full application preparation, FSCA submission, regulatory review, and license issuance. Timeline: 4–8 months. Appropriate for operators who want a clean license with no legacy compliance history and can absorb the application timeline.
Route 2 — Acquisition of Existing Licensed Entity
Acquire an already-licensed South African FSP with crypto-asset permissions. Immediate market entry, existing regulatory track record, faster banking onboarding. Zitadelle AG has completed 7+ South African FSP acquisitions for international clients. FSCA change of control notification and approval required.
In most cases where international clients need South African market entry within 3–6 months, acquisition is the faster route. The acquisition premium (the price above NAV for an existing licensed entity) is typically recoverable over 12–18 months of avoided application costs, compliance infrastructure build, and banking relationship establishment time. Zitadelle AG advises on both routes and presents a cost-time analysis for each client's specific situation.
Key Individual (KI) Requirement
The Key Individual (KI) is the most operationally critical requirement of South African FSP crypto-asset licensing — and the primary challenge for foreign operators.
KI sourcing note: Most international operators do not have a South Africa-based Key Individual with FSCA-approvable crypto-asset experience. Zitadelle AG sources qualified Key Individuals through our HRFinEase network — candidates with RE1 certification, demonstrable crypto-asset industry experience, and clean FSCA background. For acquisitions, we assess and if necessary replace the incumbent KI as part of the post-transaction operational setup.
Full Licensing Requirements
| Requirement | Details |
|---|---|
| Corporate structure | South African PTY Ltd (Pty) Ltd — private company |
| Foreign ownership | 100% permitted |
| Key Individual (KI) | Min. 1 — FSCA-approved, RE1 certified, crypto experience |
| Capital adequacy | No fixed minimum — solvency-based (Assets > Liabilities) |
| Recommended capital | ZAR 2,000,000 (~USD $110,000) operational capital |
| Physical office | South African registered office (operational presence recommended) |
| AML/CFT | RMCP registered with FIC; FATF Travel Rule aligned |
| Compliance officer | Designated compliance function (internal or outsourced) |
| FICA registration | Mandatory — crypto FSPs are accountable institutions under FICA |
| Travel Rule | Mandatory — originator/beneficiary data for crypto transfers |
| Annual audit | Independent external audit required |
| FSCA reporting | Annual financial statements + periodic compliance submissions |
AML/CFT Obligations Under FICA
South African FSP crypto-asset licensees are accountable institutions under the Financial Intelligence Centre Act (FICA) — with comprehensive AML/CFT obligations that go beyond many offshore VASP jurisdictions.
Application Process (New License Route)
Corporate Structuring and Category Determination (2–3 weeks)
Zitadelle AG assesses the specific crypto-asset activities, determines the correct FSP category (Category I, II, or ODP), advises on capital adequacy positioning, and incorporates the South African PTY Ltd with appropriate crypto-asset business purpose.
Key Individual Appointment and Compliance Framework (4–8 weeks)
Source, appoint, and prepare the Key Individual for FSCA's Fit and Proper assessment. Develop the complete compliance framework — AML/CFT policies, RMCP, KYC/KYB procedures, Travel Rule implementation, conflicts of interest policy, complaints handling, and cybersecurity framework.
FSCA Application Preparation
Compile the complete FSCA application package — FSP application form, Subcategory 1.28 crypto-asset permissions application, KI individual forms, shareholder controller forms, business plan with financial projections, compliance documentation, and FICA registration confirmation.
FSCA Submission and Review (4–8 months)
Submit the complete application via the FSCA's online portal. The FSCA conducts a regulatory review — assessing KI fitness, capital adequacy, AML/CFT framework quality, and business model viability. FSCA may request clarifications; Zitadelle AG manages all FSCA correspondence.
License Issuance and FIC Registration
Upon FSCA approval, the FSP license is issued with Subcategory 1.28 crypto-asset permissions endorsed. Register with the FIC as an accountable institution. Establish operational banking accounts and commence regulated crypto-asset services.
Timeline: 4–8 months from complete application submission. Total project timeline including incorporation and preparation: 6–12 months.
Acquiring an Existing Licensed South African Crypto FSP
Zitadelle AG has completed more than seven South African FSP acquisitions for international clients — making us the most experienced cross-border advisory firm for South African crypto FSP M&A transactions. The acquisition route provides immediate regulatory standing that a new application cannot match.
Target Identification and Due Diligence
Zitadelle AG identifies suitable FSP entities with Subcategory 1.28 crypto-asset permissions. We conduct regulatory, legal, and compliance due diligence — assessing the license conditions, regulatory history, compliance framework quality, banking relationships, and FSCA relationship status. FSCA risk assessment is performed before any offer is made.
Transaction Structuring and Valuation
Structure the acquisition — share purchase or business acquisition — with appropriate representations, warranties, and conditions precedent aligned with FSCA change of control requirements. Independent escrow arrangements are established to protect both buyer and seller during the FSCA approval process.
FSCA Change of Control Notification
Prepare and submit FSCA change of control notification — covering new shareholder disclosure, director changes, KI changes (if required), and business plan updates. Zitadelle AG manages all FSCA correspondence throughout the change of control approval process.
Post-Transaction Operational Setup
Upon FSCA approval of ownership changes: appoint new directors, replace or confirm the Key Individual, update the RMCP and compliance framework to current FSCA standards, update FIC registration, and establish or transfer banking relationships. Zitadelle AG provides full post-acquisition operational continuity.
Acquisition Advantages
South Africa FSP Crypto vs. Other African VASP Options
| Feature | South Africa FSCA | Mauritius FSC | Seychelles FSA | Kenya CMA |
|---|---|---|---|---|
| Regulatory prestige | Very High (FSCA) | High (FSC) | Moderate | Moderate |
| African market credibility | Continent leader | Strong | Moderate | East Africa |
| Institutional acceptance | Very High | High | Moderate | Moderate |
| Crypto authorization | FAIS Subcat 1.28 | VAITOS 2021 | VASP Act 2024 | Limited |
| Banking access | High | High | Moderate | Moderate |
| Capital requirement | Solvency-based | USD $44K–$143K | USD $25K–$100K | KES 50M+ |
| Corporate tax | 27% | ~3% | 1.5% | 30% |
| M&A route available | Yes — active market | Limited | Limited | No |
| Notable licensees | Luno, VALR, Ovex | Global exchanges | OKX, KuCoin, HTX | Limited |
| Best for | Pan-African crypto, South African market | Global offshore + Africa/Asia | Cost-efficient offshore | East Africa focus |
Tax note:South Africa's 27% corporate tax is significantly higher than Mauritius (~3%) or Seychelles (1.5%). For global crypto operations where tax efficiency is a primary objective alongside African credibility, many operators hold a South African FSP for African market operations alongside a Mauritius FSC VASP for global offshore operations — combining South African regulatory credibility with Mauritius tax efficiency.
How Zitadelle AG Assists
Frequently Asked Questions
Ready to obtain your South Africa FSP Crypto-Asset License?
Zitadelle AG provides end-to-end South African FSP crypto-asset licensing support — new FSP applications and M&A acquisitions. With 7+ completed South African FSP acquisitions, we are the most experienced cross-border advisory firm for FSCA crypto licensing and acquisition transactions.
Related Licenses
South Africa FSP License (STP Broker)
FSCA Category I FSP for STP forex brokerage. Solvency-based capital, 4–9 months. Often held alongside crypto FSP for full financial services coverage.
South Africa ODP License
FSCA Over-the-Counter Derivative Provider — mandatory for crypto CFDs and derivatives. Notable holders: VALR, Exness, Admirals.
Mauritius VASP License
FSC Mauritius VASP — ~3% effective tax, 46+ DTAAs, strong banking access. Often combined with South Africa FSP for tax-efficient dual-entity structure.
Seychelles VASP License
FSA Seychelles VASP — 1.5% tax, OKX/KuCoin/HTX track record. Offshore complement for South Africa FSP operators seeking global crypto market access.
This page is provided for informational purposes only and does not constitute legal or regulatory advice. FSCA requirements and South African financial services regulation may change. Always consult a qualified advisor before initiating a licensing or acquisition process. Last updated: June 2026.