Isle of Man · VASP registration

Isle of Man VASP Registration for Crypto Businesses

Registration for exchanges, custodians, brokers and token projects under the Designated Businesses (Registration and Oversight) Act 2015, with AML/CFT oversight by the Isle of Man Financial Services Authority. It is a registration, not a licence - and we will tell you exactly what that means before you commit to the route.

DBROA 2015
The legal basis - registration under the Designated Businesses (Registration and Oversight) Act, not a prudential licence.
IOMFSA
AML/CFT oversight by the Isle of Man Financial Services Authority, which is aligning its terminology with FATF's VASP definitions.
2024
The Travel Rule has applied to virtual-asset transfers since 2024 under the Transfer of Virtual Assets Code.
0%
Standard corporate income tax rate on the island, per gov.im guidance (banking and land income excepted).

The route in short

The Isle of Man brings crypto businesses inside its regulatory perimeter through registration under the Designated Businesses (Registration and Oversight) Act 2015, with the IOMFSA supervising AML/CFT compliance. The regulator is aligning its terminology with FATF's VASP definitions, and the Travel Rule has applied to virtual-asset transfers since 2024. The island is a Crown Dependency - not part of the UK, not part of the EU - so there is no EU/EEA passporting, and the standard corporate income tax rate is 0%. For where this route sits among the island's regimes, see the Isle of Man jurisdiction overview.

Read this first

There is no such thing as an Isle of Man crypto licence

Plenty of providers will sell you an "Isle of Man crypto licence". That product does not exist, and we would rather lose an enquiry than pretend otherwise. What exists is registration as a designated business under DBROA 2015, with AML/CFT oversight by the IOMFSA. It is not a full prudential licence. There are no prudential capital requirements attached to it, and only limited consumer-protection and conduct rules apply.

This matters beyond semantics. Banks, payment providers and institutional counterparties check regulatory status against the IOMFSA's own records, and a business that describes its registration as a licence in marketing or onboarding documents creates exactly the credibility problem the registration was meant to solve. Our guide to what VASP registration actually gets you covers how to represent the status honestly - and why the honest description is still a strong one.

The regime

What registration under DBROA 2015 actually covers

Under the Designated Businesses (Registration and Oversight) Act 2015, a crypto business operating in or from the Isle of Man registers with the IOMFSA and becomes subject to its AML/CFT oversight. Registered firms carry the island's anti-money-laundering and counter-terrorist-financing obligations, and the IOMFSA supervises compliance with them - through the registration process itself and through ongoing oversight of the registered population.

The IOMFSA is aligning its terminology with FATF's VASP definitions, which is the vocabulary international banks and compliance teams already use for exchange, custody, transfer and related virtual-asset services. That alignment makes the status easier to explain to counterparties: a registered Isle of Man business maps onto categories the rest of the world recognises, under a supervisor whose registers and guidance are published on iomfsa.im.

What the regime deliberately is not: a prudential licensing framework. The IOMFSA does not impose the capital, conduct and consumer-protection apparatus of a full financial services licence on designated businesses. For a crypto business whose counterparties care chiefly about AML/CFT discipline, that is a proportionate deal - supervised status without the overhead of a prudential regime the activity may not need.

Travel Rule

The Travel Rule has applied since 2024

The Isle of Man implemented the FATF Travel Rule for virtual-asset transfers through the Transfer of Virtual Assets Code, which has applied since 2024. In practical terms, registered businesses must transmit and receive required information about the parties to a virtual-asset transfer alongside the transfer itself - which means counterparty due diligence, data-handling arrangements and tooling choices are part of the compliance build, not an afterthought.

This is worth taking seriously at the design stage. Travel Rule compliance is one of the areas where banks and larger exchange counterparties test a registered firm's operational maturity, and where gaps surface fastest once volumes are real. We cover the requirements, the common failure modes and the tooling landscape in our guide to Travel Rule compliance on the Isle of Man.

The trade-off

Outside MiCA - what you gain and what you give up

The Isle of Man is not in the EU, so MiCA does not apply. Stated symmetrically: you gain a lighter regime - registration with AML/CFT oversight rather than a full CASP authorisation with its capital, governance and conduct requirements - and you give up the EU passport, because there is none. An Isle of Man registration confers no right to serve the EU/EEA market, and no provider can change that.

That makes the fit question honest and answerable. If the EU market is core to your model, this is not your route, and we will say so in the first call. If your corridors are outside the EU, if your counterparties are UK-adjacent or international, or if your group already has an Isle of Man nexus - a gambling operation, a Class 8 payment licence, or island-based infrastructure - the registration buys supervised status in a mature jurisdiction without MiCA's compliance overhead. The full cost-and-obligation comparison sits in Isle of Man vs MiCA jurisdictions in 2026.

Plain terms

What registration gives you - and what it does not

Aspect What you get What you do not get
Aspect Regulatory status What you get Registration as a designated business under DBROA 2015, verifiable with the IOMFSA What you do not get A prudential licence - no "Isle of Man crypto licence" exists
Aspect Supervision What you get AML/CFT oversight by the IOMFSA What you do not get Full conduct-of-business and consumer-protection supervision
Aspect Terminology What you get A regime aligning with FATF's VASP definitions that counterparties recognise What you do not get Licence wording for your marketing - banks check the register
Aspect EU market What you get A base outside MiCA with a lighter compliance load What you do not get EU/EEA passporting - none exists for the Isle of Man
Aspect Ecosystem What you get Coexistence with a GSC gambling licence under connected regulators What you do not get Automatic bank onboarding - counterparties run their own diligence

Crypto and gambling

The only place both sit under one roof

Here is the angle no other jurisdiction offers: the Isle of Man is the only place where a crypto business and a gambling licence coexist under mature, connected regulators. The Gambling Supervision Commission has long accepted cryptocurrency deposits from licensed operators under an AML overlay, and the IOMFSA supervises the island's registered virtual-asset businesses - two regimes, one small jurisdiction, and regulators that actually talk to each other.

For a group running both activities, that means a GSC-licensed operator and a VASP-registered service provider can sit side by side in the same structure, in the same time zone, under supervisors familiar with each other's expectations - instead of stitching together a gambling licence in one jurisdiction and a crypto registration in another and hoping the compliance narratives survive contact. If gambling is part of your model, start with the Isle of Man gambling licence route; the interaction between the two regimes is mapped in crypto and gambling under one roof.

Moving target

The full-licence question, as of July 2026

The regime is not standing still. The Isle of Man has run two public consultations on a full licensing regime for virtual-asset businesses, and as of July 2026 the direction remains undecided - the island may move to a full regime, and it may not. Anyone who tells you the outcome is certain is selling, not advising. The consultation record is public on consult.gov.im, and the IOMFSA publishes its current position on iomfsa.im; both should be checked before you rely on the status quo.

Our reading of the practical position: registration under the current regime is the route that exists today, and firms registered and operating cleanly are better placed under any future framework than firms waiting on the sidelines for regulatory certainty that may be years away. What was proposed, what the feedback showed and what a full regime would mean for currently registered businesses is analysed in will the Isle of Man introduce a full crypto licence.

The process

How SKY7 runs a VASP registration mandate

  1. Scoping and fit

    We map your activity against the designated-business perimeter and FATF's VASP categories, and tell you plainly whether the Isle of Man fits your markets - including whether the absence of an EU passport rules it out.

  2. Structure and substance

    Isle of Man company formation and the operational substance the registration will be assessed against, built to withstand counterparty due diligence, not just filing.

  3. AML/CFT framework build

    The risk assessment, policies, controls and Travel Rule arrangements under the Transfer of Virtual Assets Code - drafted for the IOMFSA's oversight standards and for the banks that will read them later.

  4. Registration application

    Preparation and submission of the registration application to the IOMFSA. The regulator assesses; we prepare the file so its questions are answered before they are asked. No outcome is guaranteed, by us or anyone.

  5. Post-registration operation

    Ongoing AML/CFT obligations, oversight interactions and keeping your status wording honest across marketing, onboarding packs and bank files - the discipline that keeps the registration valuable.

FAQ

Isle of Man VASP registration FAQ

Straight answers to what operators ask. If yours isn't here, ask us directly

01 Is Isle of Man VASP registration a crypto licence?

No. It is a registration under the Designated Businesses (Registration and Oversight) Act 2015 with AML/CFT oversight by the IOMFSA - not a full prudential licence, and only limited consumer-protection and conduct rules apply. Describing it as a licence in marketing or bank onboarding documents is inaccurate and counterproductive, because counterparties verify status against the IOMFSA's records.

02 Can I passport into the EU from the Isle of Man?

No. The Isle of Man is a Crown Dependency - not part of the UK and not part of the EU - and there is no EU/EEA passporting from the island under any regime. If serving the EU market is core to your model, you need a MiCA authorisation in an EU member state; the Isle of Man route is for businesses whose markets sit outside that requirement.

03 Does the Travel Rule apply to Isle of Man crypto businesses?

Yes. The Transfer of Virtual Assets Code has applied since 2024, implementing the FATF Travel Rule for virtual-asset transfers. Registered businesses need working arrangements for transmitting and receiving the required transfer information - it is one of the first things sophisticated counterparties test.

04 Will the Isle of Man introduce a full crypto licensing regime?

Undecided. Two public consultations on a full licensing regime have run, and as of July 2026 the direction has not been settled. Treat any claim of certainty with suspicion, and verify the current position on iomfsa.im and consult.gov.im before relying on it - this is a genuine moving target.

05 Can a crypto business and a gambling licence sit in the same group?

Yes - and the Isle of Man is the only jurisdiction where the two coexist under mature, connected regulators. The Gambling Supervision Commission has long accepted cryptocurrency deposits under an AML overlay, and a GSC-licensed operator and a VASP-registered provider can operate side by side in one structure on one island.

06 What does Isle of Man VASP registration cost?

SKY7 fees are quoted on request, after scoping - we do not publish one-size-fits-all prices for work that is not one-size-fits-all. Government charges are set by the published fee schedules on iomfsa.im and gov.im, which we will walk through with you against your specific activity; we do not quote official fees from memory.

07 How long does registration take?

We do not promise timelines, because the assessment is the IOMFSA's, not ours. What we control is the quality and completeness of the file, which is the main variable an applicant can influence. At scoping we give you a realistic working expectation based on the state of your structure and AML/CFT framework - not a marketing number.

Tell us what you need

Get a straight answer on the Isle of Man route

Tell us your activity, your markets and your structure. We will tell you whether DBROA 2015 registration fits, what it will and will not give you, and how a registration mandate would run - honestly, before you spend anything.