Mauritius is an IOSCO member with a mature Financial Services Commission (FSC) that has regulated funds, securities, and financial services since 2001. The VASP licensing framework, introduced under the VAITOS Act 2021, sits inside a credible regulatory infrastructure — not a newly-created offshore registry designed to issue licences at volume.

This matters for two practical reasons. First, banks — particularly European and Asian correspondent banks — will accept a Mauritius FSC licence as evidence of regulated status. Second, counterparties and institutional clients increasingly require that you hold a named regulatory licence, not just a company registration. Mauritius provides that licence from a jurisdiction that is FATF-compliant and internationally recognised, without the grey-list risk associated with some lower-cost alternatives.

Banking is where most crypto licensing jurisdictions fail in practice. Mauritius has a functioning commercial banking sector — MCB, SBM, and AfrAsia are active in the market — and FSC-licensed crypto entities have established a track record of obtaining multi-currency accounts. This is not guaranteed, and you will need to manage the banking relationship properly, but the access exists in a way it simply does not in many lower-tier licensing jurisdictions.

Mauritius also aligns its AML/CFT framework with FATF recommendations — the same international standard that underlies EU AML directives. If your compliance documentation is built to FATF standards, it will largely satisfy both FSC requirements and the due diligence requirements of European correspondent banking partners. This alignment reduces the compliance overhead of maintaining a Mauritius entity alongside any EU-facing operations you run.

MiCA CASP licensing in Lithuania or Ireland costs USD 100,000–250,000+ in first-year setup, professional fees, and regulatory capital. Singapore MAS licensing for a digital payment token service is comparable. Mauritius FSC VASP licensing runs USD 40,000–70,000 all-in for the first year — and the capital requirement for a standard VASP licence is USD 50,000, not USD 150,000+.

If your primary market is the EU and you need an EU passport, Mauritius is not the right answer — MiCA is. But if you are building a global operation from outside the EU, or you need a regulated base for a holding structure, or you are relocating from a Gulf jurisdiction and want a regulated alternative without the VARA price tag, Mauritius is a seriously under-utilised option. See our full Mauritius jurisdiction overview for the full regulatory picture.

Your licensed entity must be a Global Business Company (GBC) incorporated in Mauritius under the Companies Act. The GBC is the correct vehicle for international business — it provides access to Mauritius’s tax treaty network and is the only entity type that can hold an FSC VASP licence.

You will need a local management company to handle incorporation, registered office, and company secretarial services. Name reservation, memorandum and articles of association, and initial director/shareholder documentation need to be prepared in advance. Incorporation typically completes in 1–2 weeks if documents are in order.

This is the most labour-intensive step and the one that most often determines whether your application is delayed. The FSC requires a comprehensive package including: detailed business plan with 3-year financial projections; AML/KYC policy tailored to your specific business model; compliance manual covering your procedures for customer onboarding, transaction monitoring, and suspicious activity reporting; and source of funds documentation for the applicant and all shareholders above 10%.

The quality of your AML/KYC policy is the single most frequent cause of FSC queries. Have your AML/KYC compliance documentation reviewed by local counsel before submission — a policy that is generic or not tailored to your activity will draw an FSC query round and add 6–8 weeks to your timeline. See our compliance manual preparation service for what the FSC expects.

Once your GBC is incorporated and your application package is ready, you submit to the FSC through your management company or directly. The FSC will conduct an initial completeness review — confirming that all required documents are present and in the correct form — before moving to substantive assessment.

The FSC’s initial review takes approximately 4–6 weeks. During this period, you may receive an acknowledgement of receipt, but the substantive review will not begin until the completeness check is passed. Submit a complete, well-organised package; incomplete submissions reset the clock.

Expect the FSC to come back with one to two rounds of queries. These typically focus on: clarification of the business model and target market; additional fit-and-proper documentation for directors or UBOs; details of the technology infrastructure and custody arrangements; and further detail on the AML/KYC policy or compliance procedures.

Response time matters — the FSC sets deadlines for query responses, and delays on your side extend the overall timeline. Have your legal and compliance team ready to turn around responses within 2 weeks of receiving queries. Each query round that is handled promptly and completely moves you closer to in-principle approval without an additional loop.

Once the FSC is satisfied with your application, you will receive in-principle approval. At this stage, you are required to demonstrate that the minimum paid-up capital is in place — USD 50,000 for a VASP licence, USD 200,000 for a DAC licence. This must be deposited in the GBC’s bank account and evidenced to the FSC.

Following capital confirmation and any remaining conditions, the FSC issues the formal VASP licence. The licence is valid for 12 months and must be renewed annually. The renewal process is administrative, provided your compliance obligations remain current.