Two regimes, one small island
The Isle of Man is a Crown Dependency - part of neither the UK nor the EU - so nothing here passports into the EU or EEA, and we will not pretend otherwise. What the island offers instead is two mature regimes that grew up next to each other. On the gambling side, the GSC supervises operators under the Online Gambling Regulation Act 2001 (OGRA): one full Isle of Man gambling licence covers casino, sportsbook, poker and lotteries - unlike Malta's class system - with mandatory player fund protection as its flagship feature and long-standing acceptance of cryptocurrency deposits under an AML overlay.
On the crypto side, the IOMFSA oversees virtual asset businesses under the Designated Businesses (Registration and Oversight) Act 2015 (DBROA). This is a registration with AML/CFT oversight, not a prudential licence - limited consumer-protection and conduct rules apply, and it should never be marketed as a licence. The IOMFSA is aligning its terminology with FATF's VASP definitions, and the Travel Rule - the Transfer of Virtual Assets Code - has applied since 2024. The primary sources here are iomfsa.im, gov.im and the GSC's guidance, not trade press.
Following the money: which regime catches which leg
| Activity in the flow | Regime that applies | Regulator |
|---|---|---|
| Activity in the flow A player deposits crypto at a licensed casino | Regime that applies Full OGRA 2001 licence, with an AML overlay on virtual currency | Regulator Gambling Supervision Commission (GSC) |
| Activity in the flow Exchanging or custodying virtual assets as a service | Regime that applies DBROA 2015 registration - AML/CFT oversight, not a prudential licence | Regulator Isle of Man Financial Services Authority (IOMFSA) |
| Activity in the flow Transferring virtual assets between parties | Regime that applies Travel Rule under the Transfer of Virtual Assets Code, in force since 2024 | Regulator IOMFSA (AML/CFT oversight) |
| Activity in the flow Money transmission on the fiat settlement leg | Regime that applies Financial Services Act 2008 Class 8 licence - no EU/EEA passporting | Regulator IOMFSA |
Where the regimes meet in practice
The interaction point is the deposit flow. When a player funds an account with crypto, that sits inside the operator's gambling licence: the GSC treats virtual currency as a higher-risk payment channel and expects the operator's AML framework to address it explicitly. Accepting deposits does not, by itself, make the operator a VASP. We unpack that side in detail in our article on crypto deposits at Isle of Man casinos.
The moment a group goes further - exchanging virtual assets for fiat as a service, holding customer crypto in custody, or transferring virtual assets on behalf of others - that activity crosses into DBROA territory and needs its own registration with the IOMFSA. In a typical group the two roles sit in different entities: the operator carries the OGRA licence, a service entity carries the VASP registration for the exchange or custody leg. One island, two registers, and regulators that can see the whole structure - which is exactly what banks and payment partners want to find when they open the file.
Connected regulators, one standard of scrutiny
The advantage of running both legs in one jurisdiction is coherence - and the cost is that neither regulator grades on a curve. Fit-and-proper vetting covers all beneficial owners on both sides, any change of control of a licensed operator requires prior GSC approval, and both regimes expect a local company, resident directors and real operational presence rather than a brass plate.
The scrutiny is intensifying, and applicants should price that in. As reported in 2025: Celton Manx (SBOTOP) received a record £3.9m GSC penalty for AML failings; TGP Europe left the UK market after a £3.3m UKGC fine that held head licensees accountable for white-label AML failures; SK IOM surrendered its licence in July 2025. The government has stated a limited appetite for iGaming businesses linked to East and Southeast Asia, and a MONEYVAL inspection is expected in 2026. As of July 2026, a bill consolidating OGRA 2001 and the Casino Act 1986 - introduced to Tynwald in October 2025 - is expected to be enacted during the year, bringing continuous scrutiny of licensees and deeper vetting of controllers and UBOs; verify its status on gov.im before filing.
Structuring the group: what goes where
-
The operator entity holds the gambling licence
A local company under the full OGRA licence, with resident directors, real presence and player fund protection arrangements in place. Crypto deposits sit here, under a documented AML overlay for virtual currency.
-
The crypto-services entity holds the VASP registration
Exchange, custody or transfer activity registers under DBROA 2015 with the IOMFSA - and is described in every pitch deck and bank form as a registration, not a licence. Travel Rule tooling has been mandatory for transfers since 2024.
-
A payments leg is optional, not automatic
If the group itself transmits money on the fiat side, the Financial Services Act 2008 Class 8 licence applies. It is not an EU EMI or PI licence, and a new Fees Order took effect on 1 April 2026 - take the figures from the official schedules on iomfsa.im.
-
People and control are vetted across the whole structure
Beneficial owners are assessed fit-and-proper on both sides of the group, and any change of control of the licensed operator needs prior GSC approval - sequencing that matters if an acquisition is part of the plan.
The trade-offs, stated plainly
The combination is not for everyone. Staying outside MiCA means a lighter regime than an EU CASP authorisation - and no EU passport, full stop. The DBROA registration carries limited consumer-protection and conduct rules, which some counterparties read as a feature and others as a gap. And the regime is not frozen: two public consultations on a full crypto licensing regime have run, and as of July 2026 the direction remains undecided, so any structure should be built to survive a move from registration to licensing.
What the island offers in exchange is hard to replicate: a gambling regulator that solved the crypto-deposit question years ago, an AML supervisor that already speaks FATF's language, a B2B heritage running from Microgaming - now Games Global - to the years PokerStars grew up here, and 0% standard corporate income tax (banking and land income excepted, per gov.im guidance). For a founder running both legs, that coherence is the product. Scoping which entities you need, in which order, is the work we do first - see how we run an engagement.
- 0%
- standard corporate income tax on the Isle of Man
- 0.1-1.5%
- gambling duty on gross gaming yield
- 2024
- Travel Rule in force for virtual asset transfers
- 1
- full OGRA licence covers casino, sportsbook, poker and lotteries
FAQ
Frequently asked questions
01 Can a gambling operator and a crypto business share one group on the Isle of Man?
Yes. A GSC-licensed operator and an IOMFSA-registered virtual asset business can coexist in the same group - that pairing is the island's distinctive offer. In practice the two roles usually sit in separate entities; the right split is scoped case by case.
02 Does accepting crypto deposits make the operator a VASP?
No. Player deposits in cryptocurrency sit inside the OGRA gambling licence under an AML overlay. A VASP registration under DBROA 2015 is triggered when a business exchanges, custodies or transfers virtual assets as a service - a different activity, usually housed in a different entity.
03 Is the Isle of Man VASP registration a crypto licence?
No - and the distinction matters to banks. It is a registration with AML/CFT oversight by the IOMFSA under DBROA 2015, not a prudential licence, and it carries limited consumer-protection and conduct rules. Describing it as a licence in marketing or bank forms invites problems.
04 Can this structure passport into the EU or EEA?
No. The Isle of Man is a Crown Dependency, not an EU or EEA member, and none of the island's permissions passport anywhere. Groups that need EU market access need an EU authorisation alongside - or instead of - the island structure.
05 Will a full crypto licensing regime replace the registration?
Undecided. Two public consultations on a full licensing regime have run, and as of July 2026 the IOMFSA has not committed to a direction. Structures should be built to survive a transition; check consult.gov.im and iomfsa.im for the current state before relying on the registration-only model.
Keep reading
Related reading
Isle of Man VASP registration
The cluster guide to DBROA registration - what it covers, what it does not, and how to represent your status honestly.
Isle of Man: jurisdiction overview
Regulators, tax posture and the structures available on the island, in one place.
Crypto deposits at IoM casinos
The deposit side of the pairing - the GSC's practice on virtual currency and the AML overlay that makes it work.