Question from BitcoinTalk: “What is a VASP and do I need to register as one?”
Short answer: VASP stands for Virtual Asset Service Provider. It’s the regulatory category for crypto exchanges, wallet providers, custodians, and other crypto businesses. Countries following FATF guidelines require VASPs to register, implement KYC/AML, and report transactions.
Where the Term Comes From
The term comes from the Financial Action Task Force (FATF), the global money-laundering watchdog. In 2019 the FATF extended its recommendations to cover “virtual assets” and named the businesses that handle them “Virtual Asset Service Providers.” Since then, most major jurisdictions have built their licensing regimes around the FATF definition — which is why you see the label from Singapore to the UAE to the EU, even though the underlying national rules differ.
Who Is a VASP
Under FATF guidelines, a VASP includes any business that:
- Exchanges crypto for fiat currency
- Exchanges one crypto for another
- Transfers crypto on behalf of customers
- Safekeeps or administers crypto
- Provides crypto financial services
A few notes on the edges:
- Miners and validators are generally not VASPs — they secure the network but don’t provide services to customers.
- Non-custodial software that never holds customer funds is a grey area; regulators increasingly look at who controls the software and whether they’re in the business of providing services.
- DeFi front-ends can be treated as VASPs if a central team operates them. This is one reason some DeFi projects have added geographic blocks.
Countries Requiring VASP Registration
| Country | Status | Notes |
|---|---|---|
| Singapore | Registered | Strict licensing regime (MAS) |
| UAE (Dubai) | VARA licensed | Clear regulation for VASPs |
| UK | FCA registered | Many applications rejected |
| EU | CASP license (under MiCA) | Passportable across EU |
| US | Money transmitter licenses (state-level) | 50+ state regulators, complex |
| Australia | AUSTRAC registered | Relatively straightforward |
| India | FIU registered | Mandatory for exchanges |
| Japan | FSA licensed | Strict, early adopter |
The important detail is the variety. Australia and India use registration-style systems where a business signs up and self-reports. Singapore, Japan, and Dubai license firms with ongoing supervision. The EU’s MiCA creates a single CASP license recognized across all member states — so a license in one country works across the whole bloc. The US is the outlier: no federal license exists, so a business may need 50 separate state registrations plus a FinCEN MSB registration.
What VASP Registration Involves
- Corporate registration — Legal entity in the country
- AML/KYC program — Written policies and procedures
- Travel Rule compliance — Share transaction info
- Capital requirements — €125K+ in the EU
- Reporting obligations — Suspicious transaction reports
- Audits — Regular audits of compliance
The application process typically runs 6-12 months (sometimes longer) and requires a dedicated compliance officer, documented policies, and often a local director. How to Stay Compliant When Trading P2P is a good starting point for understanding the operational realities.
The Travel Rule in Practice
The Travel Rule is the obligation that often surprises new VASPs. When a customer sends crypto, the sending and receiving service providers must share identifying information about both parties. In practice this means VASPs need to either join a Travel Rule information-sharing network or build their own system for exchanging customer data. Crypto Travel Rule explains the privacy trade-offs.
What This Means for Regular Users
If you’re an individual crypto user:
- You’re not a VASP — Individuals holding or transferring their own crypto don’t need registration
- Exchanges you use must be registered — Using unregistered VASPs may be risky
- You may be blocked — Many VASPs block users from non-cooperative jurisdictions
- KYC requirements are here to stay — Registration and KYC go hand in hand
How to Check Whether an Exchange Is a Registered VASP
- Find the exchange’s “Regulatory” or “Licenses” page — reputable firms list every license
- Cross-check with the regulator’s own register (e.g., AUSTRAC, FCA, MAS, VARA)
- Search for enforcement actions or license revocations
- Be skeptical of exchanges that can’t point to any registration at all
Verdict
VASP registration is for businesses, not individuals. It’s the regulatory framework that allows crypto businesses to operate legally. When choosing an exchange, check if it’s registered as a VASP in your jurisdiction.
Related: What Is KYC? | Crypto Travel Rule | How to Stay Compliant When Trading P2P