Mauritius VASP License in 2026: Requirements, Timeline and Costs

Mauritius VASP License in 2026: Requirements, Timeline and Costs

Mauritius VASP License in 2026: Requirements, Timeline and Costs

🌊 VASP Licensing · 2026 Update

Mauritius VASP License: What Has Changed and Whether It Still Makes Sense in 2026

Stronger FSC regulation, harder banking access, and a FATF-compliant status that still differentiates — an honest assessment for founders evaluating or reviewing Mauritius.

5 sections · ~6 min read
FSC Framework
2024–2025 Changes
9–14 Month Timeline
📋 In This Guide
5 sections · ~6 min read
1
What changed in Mauritius crypto regulation 2024–2025
VASP Act amendments, banking shifts, FATF status
2
The FSC framework: licence categories and requirements
Corporate structure and operational compliance requirements
3
Process, timeline, and realistic preparation
Four stages — and why 9–14 months is the honest estimate
4
Costs and ongoing compliance burden
Setup, annual fees, and fully-loaded year-one estimates
5
Mauritius vs alternatives: when it makes sense
Where Mauritius works — and when Seychelles, MiCA or VARA is a better fit
📋 Section 1

What changed in Mauritius crypto regulation 2024–2025

The Mauritius jurisdiction has undergone meaningful regulatory change since 2023. The direction is clear — higher compliance standards, more demanding FSC scrutiny — but the FATF compliance position remains an advantage that distinguishes Mauritius from several competing jurisdictions.

Three changes that define Mauritius in 2026
Regulatory update
1
VASP Act amendments

Mauritius enacted strengthened VASP legislation in 2024, aligning with FATF Travel Rule requirements and tightening AML/CFT standards across the board. The FSC (Financial Services Commission) responded by increasing application scrutiny significantly — incomplete or thin applications that might have passed in 2021–2022 are now rejected at intake, not queried.

The Travel Rule implementation requirement moved from a policy commitment to a technical requirement: applicants now need a documented technical solution in place, not a plan to implement one. This has materially increased the preparation workload for new applications.

2
Banking access shift

Several correspondent banks increased due diligence requirements for Mauritius-licensed VASPs during 2024. Access to USD clearing has become harder for new entrants — not impossible, but slower and requiring stronger compliance documentation than was the case two years ago.

The practical impact: EMI banking is now the baseline expectation for most new Mauritius VASPs. Traditional bank relationships are achievable for well-established operations with clean transaction histories, but treating them as a default at launch is no longer realistic. Build your banking strategy around EMI relationships from day one, and treat traditional banking as a secondary objective.

3
Positive: FATF compliance status maintained

Mauritius remained off the FATF grey list through 2024–2025. This is not a small thing — several competing jurisdictions are on the grey list or exiting it, which creates real friction with correspondent banks and institutional counterparties. Mauritius's FATF-compliant status means that counterparty due diligence on Mauritius-licensed entities does not hit the automatic enhanced scrutiny threshold that grey-listed jurisdictions trigger.

For businesses where counterparty acceptance matters — particularly in Africa and parts of Asia — this differentiates Mauritius from cheaper alternatives that are only now recovering from grey-list status.

The honest framing
Mauritius has made a deliberate choice to be a properly regulated jurisdiction rather than a light-touch one. The compliance bar is higher than it was in 2021–2022 — which is positive for legitimate businesses but means the easy-setup narrative is no longer accurate. If you are evaluating Mauritius based on advice from three years ago, reassess.
📋 Section 2

The FSC framework: licence categories and requirements

The FSC applies two categories of requirements to VASP applications: corporate structure requirements and operational compliance requirements. Both must be substantively met before submission. A strong AML/KYC compliance programme is the single most important factor in whether an application is accepted — not just the quality of the paperwork, but evidence of operational readiness.

Corporate requirements
Entity, capital, and directorship
GBL entity
Capital
🏢
Mauritius GBL company as licensed entity
A Global Business Licence (GBL) company is the preferred structure for the licensed entity. GBL companies provide access to Mauritius's double tax treaty network, which is a meaningful advantage for businesses with taxable activity in the jurisdiction. A locally incorporated domestic company is possible but less common for international operators.
💵
Minimum capital: USD 50,000
Paid-up capital of USD 50,000 is required for a standard VASP licence. Capital must be demonstrably available in the company — this is verified during the application process. Undercapitalised entities are rejected at intake.
👤
Physical presence: resident director or local management
At least one resident director or a licensed management company providing local management services is required. The FSC applies a substance test — a nominal director with no involvement in actual management decisions does not satisfy this requirement.
🔍
Fit and proper: all directors and UBOs above 25%
All directors and ultimate beneficial owners with 25% or greater ownership are subject to FSC fit and proper assessment. Criminal records, regulatory sanctions, adverse court judgments, and unexplained source of funds are disqualifying. The source of funds documentation requirement has become more rigorous since 2023.
📊
Audited financial statements from year two
Annual audited accounts by an FSC-approved auditor are required from the second year of licence. Budget for this as a recurring cost — it is not optional and cannot be deferred.
Operational requirements
Compliance programme and infrastructure
AML/CFT
Annual audit
🛡️
Full AML/CFT programme
Written policies, a designated compliance officer with documented appointment, and an operational transaction monitoring system. The FSC reviews the substance of the programme — a template document is insufficient. Your AML/KYC compliance documentation must reflect your actual business model, transaction types, and client risk profile.
🔄
Travel Rule implementation with documented solution
VASP-to-VASP transfers must comply with the Travel Rule. A documented technical solution is required — not a roadmap or policy statement. You must demonstrate how originator and beneficiary information will be transmitted in practice, with the platform or tool identified.
💻
Cybersecurity framework documentation
A cybersecurity framework covering platform architecture, access controls, key management, and incident response is required. This is reviewed for substance — generic ISO 27001 references without implementation detail are not sufficient.
🪪
Client onboarding with risk-based KYC tiers
Documented KYC onboarding procedures with a risk-based tier structure — standard, enhanced, and simplified due diligence — linked to your actual client categories and transaction risk profile. PEP and sanctions screening must be described with the tools identified.
📋
Annual compliance audit by FSC-approved auditor
An annual compliance audit by an FSC-approved auditor is mandatory from the first full year of operation. This is a genuine operational audit — not an accounting exercise — and the cost and preparation burden should be factored into your annual compliance budget.
⚠️
Operational substance required
The FSC now requires evidence of operational substance — not just paperwork. Applications without a credible compliance officer appointment, a working transaction monitoring setup, and a documented Travel Rule solution are rejected at intake. The 2021–2022 era of thin applications passing on the strength of a business plan is over.
⏱️ Section 3

Process, timeline, and realistic preparation

The FSC licensing process has four stages. The FSC review period has extended significantly in 2025 due to increased application scrutiny — the 6-month estimate that was realistic two years ago now needs to be replaced with a 9–14 month planning horizon. See our crypto licensing services for guidance on each stage.

From decision to operational: four stages
Process overview
1
Company setup

Incorporate the GBL company through a licensed management company. The management company will serve as the local registered agent and — unless you have a genuine resident director — will provide the local management presence required by the FSC. Choose a management company with VASP licensing experience: the administrative requirements for the FSC application are distinct from standard GBL incorporation, and the wrong choice adds weeks to the process.

⏱ Timeline: 3–4 weeks
2
Application preparation

This is the most time-intensive phase and the one most often underestimated. The application package includes: the full AML/CFT programme with written policies, a compliance officer appointment letter, and transaction monitoring documentation; a detailed business plan with projected volumes and client risk analysis; cybersecurity framework documentation; director and UBO CVs with source of funds evidence; and Travel Rule implementation documentation.

With experienced compliance counsel, 6–8 weeks is realistic. Without it, or if the AML programme is starting from scratch, 10–12 weeks is more accurate. Do not cut corners here — the FSC reviews substance, and a weak application triggers extensive queries or rejection.

⏱ Timeline: 6–8 weeks with experienced counsel
3
FSC review

The FSC review period has extended to 4–6 months in 2025. One to two rounds of information requests is now standard — the FSC uses these to test the quality and depth of the compliance documentation rather than simply requesting missing items. Responses to FSC queries should be treated as substantive compliance work, not administrative box-ticking.

There is no mechanism to expedite the review process. The FSC will not confirm intermediate timelines. Build the maximum timeline into your planning and treat anything faster as a positive outcome.

⏱ Timeline: 16–24 weeks from submission
4
Approval and banking

Following FSC approval, the operational focus shifts to banking. EMI banking relationships typically take 4–8 weeks to establish once the licence is in hand — this is the baseline expectation. Traditional bank relationships with Mauritius commercial banks are achievable for well-prepared entities but take 3–6 months and are not guaranteed.

Start the banking outreach process in parallel with the FSC review, not after the licence is received. Use the licence approval as confirmation for the bank rather than as the starting point for the conversation. This compresses the total timeline materially.

⏱ Timeline: add 1–3 months post-approval
Realistic total timeline
From decision to operational entity with banking: 9–14 months. Companies that planned for 6 months have consistently run over. Build the longer timeline into your fundraising, commercial agreements, and launch planning — not as a worst case, but as the base case.
💰 Section 4

Costs and ongoing compliance burden

Mauritius sits in the mid-range for regulated VASP jurisdictions — meaningfully more expensive than Seychelles, but well below the cost of VARA or a MiCA CASP licence. The compliance audit and management company costs make the annual run rate heavier than it first appears. See our Mauritius VASP licence services for current pricing.

🏗️
One-time
Setup costs
GBL incorporation through to application submission
  • GBL company incorporation: USD 2,000–3,500
  • Management company / registered agent (year one): USD 4,000–7,000
  • FSC application fee: USD 3,000–5,000 (varies by licence category)
  • Legal and compliance preparation: USD 12,000–20,000 — the largest variable, driven by AML programme complexity and director vetting requirements
  • Source of funds documentation for complex UBO structures can add USD 3,000–8,000 to the legal preparation cost
📅
Annual recurring
Annual ongoing costs
FSC licence, audit, and operational compliance
  • FSC annual licence fee: USD 5,000–10,000 (varies by licence type and activity scope)
  • Management company / registered agent: USD 4,000–7,000 per year
  • Annual compliance audit (FSC-mandatory): USD 5,000–12,000 per year — a genuine audit, not just an accounting review
  • Compliance officer (outsourced): USD 6,000–15,000 per year depending on transaction volume and complexity
  • Audited financial statements from year two add further to annual costs — budget separately
📊
All-in estimate
Total cost estimate
Year one and run rate
  • Year one all-in: USD 30,000–50,000 (excluding banking setup)
  • Annual run rate from year two: USD 20,000–35,000
  • Mid-range estimate, fully operational: USD 35,000–40,000 per year
  • Banking setup costs are separate: EMI USD 2,000–5,000 to establish; traditional bank relationships are significantly more in time and cost
  • Compliance audit alone (USD 5,000–12,000/year) is often underestimated at the planning stage

Mauritius is more expensive than a Seychelles VASP licence and cheaper than VARA or a MiCA CASP licence — both in setup and annual costs. The decision turns on whether the FATF-compliant status, the geographic credibility for African and Indian Ocean markets, and the banking access differential justifies the cost premium over Seychelles for your specific business model.

🎯 Section 5

Mauritius vs alternatives: when it makes sense

Mauritius occupies a specific position in the jurisdictional landscape: better counterparty acceptance than grey-listed jurisdictions, lower cost than VARA or MiCA, and genuine geographic credibility for African and Indian Ocean markets. The question is whether that position matches your business model. Our crypto licensing services team can help you map the right jurisdiction to your specific situation.

Mauritius works well when
The jurisdiction fits your business model
Good fit
🌍
Africa, Indian Ocean, or parts of Asia are your primary markets
Mauritius has natural geographic and institutional credibility in these markets. Counterparties, regulators, and banking relationships in Africa and the Indian Ocean region recognise Mauritius as a credible regulated jurisdiction in a way that more remote or recently-regulated alternatives do not.
🏛️
Properly regulated, but no EU passport required
Businesses that need a credible regulated entity for counterparty acceptance and banking access — without requiring EU market access or MiCA equivalence — find Mauritius a viable middle ground. The FATF-compliant status matters here: it removes the automatic enhanced due diligence trigger that grey-listed jurisdictions face.
🏗️
Existing Mauritius holding or operating structure
Companies with a Mauritius GBL holding company or existing operating structure can add a VASP licence with substantially less incremental effort. The management company relationship and corporate infrastructure are already in place — the incremental cost and timeline are meaningfully lower than building from scratch.
⚙️
Compliance capacity to meet the operational requirements
The FSC's operational requirements are substantive. Companies with an in-house compliance function or the budget for experienced outsourced compliance support will find Mauritius workable. Companies trying to run the compliance programme at minimum cost will find it more difficult — the FSC's annual audit is a genuine test of operational compliance.
📅
Timeline allows 9–14 months before operational launch
The Mauritius timeline is not negotiable. If your business plan requires a licensed entity within 6 months, Mauritius is the wrong choice. If you have the runway to absorb a 9–14 month licensing process and are building the compliance infrastructure in parallel, the timing is workable.
Consider alternatives when
When another jurisdiction is the better answer
Look elsewhere
🇪🇺
EU retail clients are the target market
Mauritius does not provide EU market access. If EU retail clients are a material part of your revenue plan, MiCA is the only credible option — there is no workaround. Starting with Mauritius and planning to pivot to MiCA later adds cost and time without adding value.
Fast time-to-licence is critical
If speed to licence is the primary requirement — whether for fundraising, commercial agreements, or competitive reasons — the Seychelles VASP licence is faster and cheaper. The Seychelles 4–6 month timeline versus Mauritius's 9–14 months is a material difference when speed matters.
🇦🇪
UAE institutional or MENA focus
For businesses targeting UAE institutional clients or the broader MENA market, VARA or ADGM gives materially better counterparty acceptance. Mauritius has limited recognition as a credible jurisdiction in the UAE institutional market — a VARA licence removes friction that a Mauritius licence does not.
🏦
USD/EUR banking access is critical from day one
Mauritius banking is improving but not straightforward for new VASP entrants. If your business model requires reliable USD or EUR clearing from launch — for client fund management, treasury operations, or counterparty settlements — Mauritius's banking limitations could be a material operational constraint. Build your banking strategy honestly before committing to the jurisdiction.
Evaluating a Mauritius VASP licence in 2026
We advise crypto founders on FSC applications, AML programme preparation, and jurisdiction selection — including an honest assessment of whether Mauritius or an alternative jurisdiction is the right fit for your business model.

Oleg Prosin is the Managing Partner at WCR Legal, focusing on international business structuring, regulatory frameworks for FinTech companies, digital assets, and licensing regimes across various jurisdictions. Works with founders and investment firms on compliance, operating models, and cross-border expansion strategies.