What is the South African FSP Crypto-Asset License?

A Financial Services Provider (FSP) license from the FSCA with Subcategory 1.28 crypto-asset permissions — authorizing crypto exchange, brokerage, OTC dealing, advisory, intermediation, and custody services. Since 2022, all entities providing crypto-asset services in South Africa must hold FSP authorization or be exempted.

What is the difference between Category I, Category II, and ODP for crypto?

Category I FSP (Subcategory 1.28) covers spot crypto exchange, brokerage, intermediation, advice, and custody — suitable for most crypto exchanges and OTC desks. Category II covers discretionary crypto portfolio management where the manager makes investment decisions without per-trade client instruction. ODP (Over-the-Counter Derivative Provider) covers crypto CFDs, futures, and options — required for leveraged crypto derivative platforms. Zitadelle AG advises on the correct category for your specific products.

What is the Key Individual (KI) requirement?

At least one FSCA-approved Key Individual must be appointed for Subcategory 1.28 crypto-asset operations. The KI must have demonstrable crypto-asset industry experience, pass RE1 (Regulatory Examination Level 1), and pass FSCA's full Fit and Proper assessment. The KI is personally responsible to the FSCA for compliance oversight. Zitadelle AG sources qualified South African KI candidates via HRFinEase.

Is there a minimum capital requirement?

No fixed statutory minimum — the FSCA applies a solvency-based test (Assets must exceed Liabilities at all times). Zitadelle AG recommends ZAR 2,000,000 (~USD $110,000) as operational capital to demonstrate adequate financial resources to the FSCA and for banking establishment purposes.

How long does a new FSP crypto-asset application take?

Typically 4–8 months from complete application submission. Total project timeline including PTY Ltd incorporation, KI appointment, and compliance framework development: 6–12 months.

Can I acquire an existing licensed South African crypto FSP instead of applying from scratch?

Yes — and in many cases it is faster. Zitadelle AG has completed 7+ South African FSP acquisitions for international clients. The acquisition route provides immediate regulatory standing, existing banking relationships, and an established FSCA supervisory relationship. FSCA change of control approval is required for all acquisitions.

What AML/CFT obligations apply to South African crypto FSPs?

South African FSP crypto licensees are accountable institutions under FICA — requiring FIC registration, a Risk Management and Compliance Programme (RMCP), CDD and EDD for all clients, transaction monitoring, STR reporting to FIC, FATF Travel Rule compliance, and five-year record retention. These obligations are substantive — among the most demanding of any African VASP jurisdiction.

Can foreign nationals own 100% of a South African crypto FSP?

Yes. There are no foreign ownership restrictions for South African FSP entities. 100% foreign ownership of a South African PTY Ltd is permitted.

Africa · FSCA

South Africa — FSP Crypto-Asset License (FSCA / Subcategory 1.28) 2026

South Africa's FSP Crypto-Asset License (FSCA Subcategory 1.28) is Africa's premier regulated VASP authorization — covering crypto exchange, brokerage, OTC dealing, custody, and advisory under the FAIS Act. Two routes to market: new FSP application (4–8 months) or acquisition of an existing licensed entity. Notable licensees include Luno, VALR, Ovex, and AltCoinTrader. Zitadelle AG has completed 7+ South African FSP acquisitions for international clients.

REGULATOR

FSCA (Financial Sector Conduct Authority)

LICENSE TYPE

FSP + Subcategory 1.28 Crypto-Asset

M&A TRACK RECORD

7+ South African FSP acquisitions

LAST UPDATED

February 2026

South Africa as Africa's Premier Crypto Jurisdiction

South Africa has emerged as one of the most advanced and commercially pragmatic jurisdictions for regulating virtual asset service providers (VASPs) on the African continent. Since the Financial Sector Conduct Authority (FSCA) formally classified crypto assets as financial products under the FAIS Act in 2022, firms offering crypto-related services must operate under a Financial Services Provider (FSP) license with explicit crypto-asset authorization under Subcategory 1.28.

For crypto exchanges, OTC desks, brokers, custodians, wallet providers, and fintech groups seeking regulatory legitimacy, banking access, and international credibility with African institutional counterparties, a South African FSP with crypto-asset authorization is the definitive strategic licensing option for Africa-focused operations.

Notable FSP Crypto-Asset Licensees

Luno (Pty) Ltd

One of Africa's largest and most recognized crypto exchanges — operating under FSCA FSP crypto-asset authorization. Luno's licensed status has enabled it to maintain banking relationships and institutional partnerships that unlicensed operators cannot access.

VALR (Pty) Ltd

South Africa's leading crypto exchange by trading volume — holding both FSCA FSP crypto-asset authorization and an FSCA ODP (Over-the-Counter Derivative Provider) license for crypto derivative products.

Ovex

Licensed crypto OTC dealer providing institutional-grade liquidity and settlement services to South African institutional clients under FSCA FSP crypto-asset authorization.

AltCoinTrader

One of South Africa's longest-operating licensed crypto exchanges — FSCA FSP crypto-asset authorization has supported its banking relationships and operational longevity in a maturing regulatory environment.

What the FSP Crypto-Asset License Authorizes

A South African FSP license with Subcategory 1.28 crypto-asset permissions authorizes the following regulated activities:

Crypto-asset exchange and brokerage — buying and selling crypto assets (crypto-to-fiat and crypto-to-crypto) for clients

OTC dealing and liquidity provision — providing over-the-counter crypto-asset dealing to institutional and retail counterparties

Execution of crypto-asset transactions on behalf of clients — executing crypto buy/sell orders per client instruction

Crypto-asset intermediary services — acting as intermediary in crypto-asset transactions between buyers and sellers

Investment advice on crypto assets — providing advice on crypto-asset investments to clients

Custody and safekeeping of crypto assets — holding crypto assets on behalf of clients (combined with appropriate operational infrastructure)

Facilitation of crypto-asset transactions — providing platform infrastructure for client-initiated crypto transactions

What is NOT Covered Under Standard FSP Subcategory 1.28

Discretionary crypto portfolio management — managing client crypto assets on a discretionary basis (without client instruction per trade) requires Category II FSP authorization, not Category I

Crypto CFDs and derivatives — offering contracts for difference or other derivative products referencing crypto assets requires a separate ODP (Over-the-Counter Derivative Provider) license from the FSCA

Offshore clients without South African nexus — FSP crypto-asset authorization covers services to South African residents and operations from South Africa; serving purely offshore clients may require additional consideration of local regulatory nexus

Category I, Category II, and ODP: Which License Do You Need?

This is the most important structural decision in South African crypto licensing — and misclassification results in regulatory enforcement or license withdrawal.

Feature	Category I FSP	Category II FSP	ODP License
Also known as	Standard FSP	Discretionary FSP	Market maker / derivatives
Crypto activities	Exchange, brokerage, intermediation, advice, custody	Discretionary portfolio management of crypto	Crypto CFDs, futures, options
Client instruction	Per transaction — client instructs each trade	Discretionary — manager decides without instruction	Principal counterparty to derivative contracts
Typical operator	Spot crypto exchange, OTC desk, wallet provider	Crypto fund manager, managed crypto strategy	Crypto CFD platform, leveraged crypto products
Capital requirement	Assets > Liabilities (solvency-based)	Higher — enhanced capital adequacy	High — 6 months operational expenses
Timeline	4–8 months	6–12 months	12–24 months
Regulatory complexity	Moderate	High	Very High
Notable holders	Luno, VALR, Ovex, AltCoinTrader	Crypto asset managers	VALR (ODP for derivatives)

Category selection note: The vast majority of crypto exchanges, brokers, OTC desks, and wallet providers require Category I FSP with Subcategory 1.28 crypto-asset permissions. Category II is specifically for discretionary management — where the operator makes investment decisions on behalf of clients without per-transaction instruction. ODP is required only where the product offering includes derivatives (CFDs, futures, options) on crypto assets. Zitadelle AG advises on category selection as the first step of every South African crypto licensing engagement.

Two Routes: New FSP Application vs. M&A Acquisition

South Africa offers two distinct pathways to obtaining a crypto-asset FSP license. The right choice depends on your timeline, capital, and operational readiness.

Route 1 — New FSP Application (4–8 Months)

Apply directly to the FSCA for a new FSP license with Subcategory 1.28 crypto-asset permissions. Full application preparation, FSCA submission, regulatory review, and license issuance. Timeline: 4–8 months. Appropriate for operators who want a clean license with no legacy compliance history and can absorb the application timeline.

Advantages: Clean regulatory history, tailored license conditions, full control of compliance framework from inception

Suitable for: Well-prepared operators with 4–8 month runway, international groups entering South Africa for the first time

Route 2 — Acquisition of Existing Licensed Entity

Acquire an already-licensed South African FSP with crypto-asset permissions. Immediate market entry, existing regulatory track record, faster banking onboarding. Zitadelle AG has completed 7+ South African FSP acquisitions for international clients. FSCA change of control notification and approval required.

Advantages: Immediate operational status, existing banking relationships, established regulatory track record

Suitable for: Operators needing faster market entry, groups with capital for acquisition premium, operators where 4–8 month new application wait is commercially unacceptable

In most cases where international clients need South African market entry within 3–6 months, acquisition is the faster route. The acquisition premium (the price above NAV for an existing licensed entity) is typically recoverable over 12–18 months of avoided application costs, compliance infrastructure build, and banking relationship establishment time. Zitadelle AG advises on both routes and presents a cost-time analysis for each client's specific situation.

Key Individual (KI) Requirement

The Key Individual (KI) is the most operationally critical requirement of South African FSP crypto-asset licensing — and the primary challenge for foreign operators.

At least one FSCA-approved Key Individual must be appointed for the crypto-asset Subcategory 1.28

The KI must have demonstrable experience in financial services and specifically crypto-asset services — not merely general financial services experience

The KI must pass FSCA's full Fit and Proper assessment — professional background check, regulatory history, financial soundness

The KI must pass the RE1 (Regulatory Examination Level 1) for FSPs

The KI is personally responsible to the FSCA for the licensee's compliance and oversight of crypto-asset activities

The KI must be actively involved in managing the crypto operations — nominee arrangements without genuine involvement are rejected

KI sourcing note: Most international operators do not have a South Africa-based Key Individual with FSCA-approvable crypto-asset experience. Zitadelle AG sources qualified Key Individuals through our HRFinEase network — candidates with RE1 certification, demonstrable crypto-asset industry experience, and clean FSCA background. For acquisitions, we assess and if necessary replace the incumbent KI as part of the post-transaction operational setup.

Full Licensing Requirements

Requirement	Details
Corporate structure	South African PTY Ltd (Pty) Ltd — private company
Foreign ownership	100% permitted
Key Individual (KI)	Min. 1 — FSCA-approved, RE1 certified, crypto experience
Capital adequacy	No fixed minimum — solvency-based (Assets > Liabilities)
Recommended capital	ZAR 2,000,000 (~USD $110,000) operational capital
Physical office	South African registered office (operational presence recommended)
AML/CFT	RMCP registered with FIC; FATF Travel Rule aligned
Compliance officer	Designated compliance function (internal or outsourced)
FICA registration	Mandatory — crypto FSPs are accountable institutions under FICA
Travel Rule	Mandatory — originator/beneficiary data for crypto transfers
Annual audit	Independent external audit required
FSCA reporting	Annual financial statements + periodic compliance submissions

AML/CFT Obligations Under FICA

South African FSP crypto-asset licensees are accountable institutions under the Financial Intelligence Centre Act (FICA) — with comprehensive AML/CFT obligations that go beyond many offshore VASP jurisdictions.

Implement a Risk Management and Compliance Programme (RMCP) — documented, approved by the board, reviewed annually

Customer Due Diligence (CDD) — identity verification, PEP screening, beneficial ownership identification for all clients

Enhanced Due Diligence (EDD) — additional scrutiny for high-risk clients, non-resident clients, and complex ownership structures

Transaction monitoring — ongoing monitoring of all crypto-asset transactions for suspicious activity patterns

Suspicious Transaction Reporting (STR) — reporting to the FIC within prescribed timeframes

FATF Travel Rule compliance — mandatory collection and transmission of originator and beneficiary data for crypto transfers

Record-keeping — five-year retention of client identity and transaction records

AML/CFT training — documented staff training programme updated annually

Application Process (New License Route)

Corporate Structuring and Category Determination (2–3 weeks)

Zitadelle AG assesses the specific crypto-asset activities, determines the correct FSP category (Category I, II, or ODP), advises on capital adequacy positioning, and incorporates the South African PTY Ltd with appropriate crypto-asset business purpose.

Key Individual Appointment and Compliance Framework (4–8 weeks)

Source, appoint, and prepare the Key Individual for FSCA's Fit and Proper assessment. Develop the complete compliance framework — AML/CFT policies, RMCP, KYC/KYB procedures, Travel Rule implementation, conflicts of interest policy, complaints handling, and cybersecurity framework.

FSCA Application Preparation

Compile the complete FSCA application package — FSP application form, Subcategory 1.28 crypto-asset permissions application, KI individual forms, shareholder controller forms, business plan with financial projections, compliance documentation, and FICA registration confirmation.

FSCA Submission and Review (4–8 months)

Submit the complete application via the FSCA's online portal. The FSCA conducts a regulatory review — assessing KI fitness, capital adequacy, AML/CFT framework quality, and business model viability. FSCA may request clarifications; Zitadelle AG manages all FSCA correspondence.

License Issuance and FIC Registration

Upon FSCA approval, the FSP license is issued with Subcategory 1.28 crypto-asset permissions endorsed. Register with the FIC as an accountable institution. Establish operational banking accounts and commence regulated crypto-asset services.

Timeline: 4–8 months from complete application submission. Total project timeline including incorporation and preparation: 6–12 months.

Acquiring an Existing Licensed South African Crypto FSP

Zitadelle AG has completed more than seven South African FSP acquisitions for international clients — making us the most experienced cross-border advisory firm for South African crypto FSP M&A transactions. The acquisition route provides immediate regulatory standing that a new application cannot match.

Target Identification and Due Diligence

Zitadelle AG identifies suitable FSP entities with Subcategory 1.28 crypto-asset permissions. We conduct regulatory, legal, and compliance due diligence — assessing the license conditions, regulatory history, compliance framework quality, banking relationships, and FSCA relationship status. FSCA risk assessment is performed before any offer is made.

Transaction Structuring and Valuation

Structure the acquisition — share purchase or business acquisition — with appropriate representations, warranties, and conditions precedent aligned with FSCA change of control requirements. Independent escrow arrangements are established to protect both buyer and seller during the FSCA approval process.

FSCA Change of Control Notification

Prepare and submit FSCA change of control notification — covering new shareholder disclosure, director changes, KI changes (if required), and business plan updates. Zitadelle AG manages all FSCA correspondence throughout the change of control approval process.

Post-Transaction Operational Setup

Upon FSCA approval of ownership changes: appoint new directors, replace or confirm the Key Individual, update the RMCP and compliance framework to current FSCA standards, update FIC registration, and establish or transfer banking relationships. Zitadelle AG provides full post-acquisition operational continuity.

Acquisition Advantages

Immediate operational status — no 4–8 month new application wait

Existing banking relationships — inherited from the acquired entity

Established regulatory track record — existing FSCA supervisory relationship

Faster client onboarding — existing KYC/AML infrastructure

Reduced compliance build cost — existing framework updated rather than built from scratch

South Africa FSP Crypto vs. Other African VASP Options

Feature	South Africa FSCA	Mauritius FSC	Seychelles FSA	Kenya CMA
Regulatory prestige	Very High (FSCA)	High (FSC)	Moderate	Moderate
African market credibility	Continent leader	Strong	Moderate	East Africa
Institutional acceptance	Very High	High	Moderate	Moderate
Crypto authorization	FAIS Subcat 1.28	VAITOS 2021	VASP Act 2024	Limited
Banking access	High	High	Moderate	Moderate
Capital requirement	Solvency-based	USD $44K–$143K	USD $25K–$100K	KES 50M+
Corporate tax	27%	~3%	1.5%	30%
M&A route available	Yes — active market	Limited	Limited	No
Notable licensees	Luno, VALR, Ovex	Global exchanges	OKX, KuCoin, HTX	Limited
Best for	Pan-African crypto, South African market	Global offshore + Africa/Asia	Cost-efficient offshore	East Africa focus

Tax note:South Africa's 27% corporate tax is significantly higher than Mauritius (~3%) or Seychelles (1.5%). For global crypto operations where tax efficiency is a primary objective alongside African credibility, many operators hold a South African FSP for African market operations alongside a Mauritius FSC VASP for global offshore operations — combining South African regulatory credibility with Mauritius tax efficiency.

How Zitadelle AG Assists

Category determination — Category I, Category II, or ODP assessment for your specific crypto-asset activities

South African PTY Ltd incorporation with appropriate crypto-asset business purpose

Key Individual sourcing — FSCA-approvable KI candidates with RE1 and crypto experience via HRFinEase

Complete FSP Subcategory 1.28 application preparation — all FSCA forms, compliance policies, business plan, individual forms

FSCA submission and regulatory liaison — all FSCA correspondence managed by Zitadelle AG

FICA registration and RMCP development — full AML/CFT framework to FICA/FATF standards

Travel Rule implementation — technical infrastructure advisory for FATF Travel Rule compliance

M&A route — identification, due diligence, transaction structuring, FSCA change of control management, and post-acquisition operational setup (7+ completed transactions)

Post-licensing compliance — annual FSCA reporting, FIC compliance, audit coordination, KI management

Multi-jurisdiction strategy — South Africa FSP combined with Mauritius FSC VASP or Seychelles FSA VASP for tax-efficient dual-entity structures

Frequently Asked Questions

Ready to obtain your South Africa FSP Crypto-Asset License?

Zitadelle AG provides end-to-end South African FSP crypto-asset licensing support — new FSP applications and M&A acquisitions. With 7+ completed South African FSP acquisitions, we are the most experienced cross-border advisory firm for FSCA crypto licensing and acquisition transactions.

WhatsApp Us

Related Licenses

South Africa FSP License (STP Broker)

FSCA Category I FSP for STP forex brokerage. Solvency-based capital, 4–9 months. Often held alongside crypto FSP for full financial services coverage.

South Africa ODP License

FSCA Over-the-Counter Derivative Provider — mandatory for crypto CFDs and derivatives. Notable holders: VALR, Exness, Admirals.

Mauritius VASP License

FSC Mauritius VASP — ~3% effective tax, 46+ DTAAs, strong banking access. Often combined with South Africa FSP for tax-efficient dual-entity structure.

Seychelles VASP License

FSA Seychelles VASP — 1.5% tax, OKX/KuCoin/HTX track record. Offshore complement for South Africa FSP operators seeking global crypto market access.

This page is provided for informational purposes only and does not constitute legal or regulatory advice. FSCA requirements and South African financial services regulation may change. Always consult a qualified advisor before initiating a licensing or acquisition process. Last updated: February 2026.