Folio 05 Insights Article

VASP/CASP Crypto Assets

Crypto and gambling under one roof: how the Isle of Man runs both

Yes - both halves of a crypto-gambling business can live in one group on the Isle of Man. An operator licensed by the Gambling Supervision Commission (GSC) can accept cryptocurrency deposits inside its full OGRA 2001 licence - with 0% standard corporate tax and gambling duty of 0.1-1.5% of gross gaming yield - while a crypto business in the same group registers with the Isle of Man Financial Services Authority (IOMFSA) under DBROA 2015. Few jurisdictions run both regimes side by side under regulators this experienced, and as of July 2026 the combination remains the island's most distinctive pitch. The crypto half of the pair is covered in our guide to Isle of Man VASP registration.

Two regimes, one small island

The Isle of Man is a Crown Dependency - part of neither the UK nor the EU - so nothing here passports into the EU or EEA, and we will not pretend otherwise. What the island offers instead is two mature regimes that grew up next to each other. On the gambling side, the GSC supervises operators under the Online Gambling Regulation Act 2001 (OGRA): one full Isle of Man gambling licence covers casino, sportsbook, poker and lotteries - unlike Malta's class system - with mandatory player fund protection as its flagship feature and long-standing acceptance of cryptocurrency deposits under an AML overlay.

On the crypto side, the IOMFSA oversees virtual asset businesses under the Designated Businesses (Registration and Oversight) Act 2015 (DBROA). This is a registration with AML/CFT oversight, not a prudential licence - limited consumer-protection and conduct rules apply, and it should never be marketed as a licence. The IOMFSA is aligning its terminology with FATF's VASP definitions, and the Travel Rule - the Transfer of Virtual Assets Code - has applied since 2024. The primary sources here are iomfsa.im, gov.im and the GSC's guidance, not trade press.

Following the money: which regime catches which leg

Activity in the flow Regime that applies Regulator
Activity in the flow A player deposits crypto at a licensed casino Regime that applies Full OGRA 2001 licence, with an AML overlay on virtual currency Regulator Gambling Supervision Commission (GSC)
Activity in the flow Exchanging or custodying virtual assets as a service Regime that applies DBROA 2015 registration - AML/CFT oversight, not a prudential licence Regulator Isle of Man Financial Services Authority (IOMFSA)
Activity in the flow Transferring virtual assets between parties Regime that applies Travel Rule under the Transfer of Virtual Assets Code, in force since 2024 Regulator IOMFSA (AML/CFT oversight)
Activity in the flow Money transmission on the fiat settlement leg Regime that applies Financial Services Act 2008 Class 8 licence - no EU/EEA passporting Regulator IOMFSA

Where the regimes meet in practice

The interaction point is the deposit flow. When a player funds an account with crypto, that sits inside the operator's gambling licence: the GSC treats virtual currency as a higher-risk payment channel and expects the operator's AML framework to address it explicitly. Accepting deposits does not, by itself, make the operator a VASP. We unpack that side in detail in our article on crypto deposits at Isle of Man casinos.

The moment a group goes further - exchanging virtual assets for fiat as a service, holding customer crypto in custody, or transferring virtual assets on behalf of others - that activity crosses into DBROA territory and needs its own registration with the IOMFSA. In a typical group the two roles sit in different entities: the operator carries the OGRA licence, a service entity carries the VASP registration for the exchange or custody leg. One island, two registers, and regulators that can see the whole structure - which is exactly what banks and payment partners want to find when they open the file.

Connected regulators, one standard of scrutiny

The advantage of running both legs in one jurisdiction is coherence - and the cost is that neither regulator grades on a curve. Fit-and-proper vetting covers all beneficial owners on both sides, any change of control of a licensed operator requires prior GSC approval, and both regimes expect a local company, resident directors and real operational presence rather than a brass plate.

The scrutiny is intensifying, and applicants should price that in. As reported in 2025: Celton Manx (SBOTOP) received a record £3.9m GSC penalty for AML failings; TGP Europe left the UK market after a £3.3m UKGC fine that held head licensees accountable for white-label AML failures; SK IOM surrendered its licence in July 2025. The government has stated a limited appetite for iGaming businesses linked to East and Southeast Asia, and a MONEYVAL inspection is expected in 2026. As of July 2026, a bill consolidating OGRA 2001 and the Casino Act 1986 - introduced to Tynwald in October 2025 - is expected to be enacted during the year, bringing continuous scrutiny of licensees and deeper vetting of controllers and UBOs; verify its status on gov.im before filing.

Structuring the group: what goes where

  • The operator entity holds the gambling licence

    A local company under the full OGRA licence, with resident directors, real presence and player fund protection arrangements in place. Crypto deposits sit here, under a documented AML overlay for virtual currency.

  • The crypto-services entity holds the VASP registration

    Exchange, custody or transfer activity registers under DBROA 2015 with the IOMFSA - and is described in every pitch deck and bank form as a registration, not a licence. Travel Rule tooling has been mandatory for transfers since 2024.

  • A payments leg is optional, not automatic

    If the group itself transmits money on the fiat side, the Financial Services Act 2008 Class 8 licence applies. It is not an EU EMI or PI licence, and a new Fees Order took effect on 1 April 2026 - take the figures from the official schedules on iomfsa.im.

  • People and control are vetted across the whole structure

    Beneficial owners are assessed fit-and-proper on both sides of the group, and any change of control of the licensed operator needs prior GSC approval - sequencing that matters if an acquisition is part of the plan.

The trade-offs, stated plainly

The combination is not for everyone. Staying outside MiCA means a lighter regime than an EU CASP authorisation - and no EU passport, full stop. The DBROA registration carries limited consumer-protection and conduct rules, which some counterparties read as a feature and others as a gap. And the regime is not frozen: two public consultations on a full crypto licensing regime have run, and as of July 2026 the direction remains undecided, so any structure should be built to survive a move from registration to licensing.

What the island offers in exchange is hard to replicate: a gambling regulator that solved the crypto-deposit question years ago, an AML supervisor that already speaks FATF's language, a B2B heritage running from Microgaming - now Games Global - to the years PokerStars grew up here, and 0% standard corporate income tax (banking and land income excepted, per gov.im guidance). For a founder running both legs, that coherence is the product. Scoping which entities you need, in which order, is the work we do first - see how we run an engagement.

0%
standard corporate income tax on the Isle of Man
0.1-1.5%
gambling duty on gross gaming yield
2024
Travel Rule in force for virtual asset transfers
1
full OGRA licence covers casino, sportsbook, poker and lotteries

FAQ

Frequently asked questions

01 Can a gambling operator and a crypto business share one group on the Isle of Man?

Yes. A GSC-licensed operator and an IOMFSA-registered virtual asset business can coexist in the same group - that pairing is the island's distinctive offer. In practice the two roles usually sit in separate entities; the right split is scoped case by case.

02 Does accepting crypto deposits make the operator a VASP?

No. Player deposits in cryptocurrency sit inside the OGRA gambling licence under an AML overlay. A VASP registration under DBROA 2015 is triggered when a business exchanges, custodies or transfers virtual assets as a service - a different activity, usually housed in a different entity.

03 Is the Isle of Man VASP registration a crypto licence?

No - and the distinction matters to banks. It is a registration with AML/CFT oversight by the IOMFSA under DBROA 2015, not a prudential licence, and it carries limited consumer-protection and conduct rules. Describing it as a licence in marketing or bank forms invites problems.

04 Can this structure passport into the EU or EEA?

No. The Isle of Man is a Crown Dependency, not an EU or EEA member, and none of the island's permissions passport anywhere. Groups that need EU market access need an EU authorisation alongside - or instead of - the island structure.

05 Will a full crypto licensing regime replace the registration?

Undecided. Two public consultations on a full licensing regime have run, and as of July 2026 the IOMFSA has not committed to a direction. Structures should be built to survive a transition; check consult.gov.im and iomfsa.im for the current state before relying on the registration-only model.

Tell us what you need

Running crypto and gambling in one group?

We map which entity needs the OGRA licence, which needs the VASP registration, and whether a Class 8 payments leg belongs in the structure - before anything is filed. Bring the group chart; we will draw the regulatory perimeter around it.

Editorial note

Editorial disclaimer

Reviewed by Elena Korniets. Last reviewed: 10 July 2026. This article is general information only, not legal, regulatory, tax, investment or financial advice. Regulatory positions are stated as of July 2026; check current GSC and IOMFSA guidance on gov.im and iomfsa.im before relying on any dated claim.