Key definitions and requirements
The VASP Bill adopts many of the key definitions established by the FATF. This will help ensure a clarity of approach and interpretation.
A “virtual asset” is defined as a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes, but does not include digital representations of fiat currencies. The term “digital representation of fiat currencies” is not defined but under the FATF model this is intended to apply only to central bank issued virtual currencies as opposed to private, fiat or asset backed tokens, such as USDT.
“Virtual asset services providers” (VASPs) are businesses providing one or more of the following services:
- exchange between virtual assets and fiat currencies;
- exchange between one or more other forms of convertible virtual assets;
- transfer of virtual assets;
- safekeeping or administration of virtual assets or instruments enabling control over virtual assets; or
- the participation in, and provision of, financial services related to an issuer’s offer or sale of a virtual asset.
“Virtual assets custody service” means the acceptance for safekeeping, virtual assets that enable the VASP to exercise control over those assets.
“Virtual assets exchange” means a trading platform that is operated for the purpose of allowing an offer or invitation to be made to buy or sell any virtual asset in exchange for money or another virtual asset.
Clarification is awaited as to whether this definition of an exchange will include peer-to-peer platforms. The FATF guidance recognises that platforms which offer only a forum for buyers and sellers to identify and communicate with each other would generally fall out of scope.
The sole act of issuing a virtual asset is not a covered service under limb (e) of the VASP definition. However, any persons conducting a sale, exchange and transfer of the issued virtual assets, as a business, for or on behalf of another person would potentially be a covered service caught under limbs (a), (b) or (c).
In addition to the VASP activities described above, certain other virtual asset services which could fall under the one of the VASP limbs above are separately defined in the VASP Bill and include:
- providing kiosks (such as bitcoin teller machines); and
- hosting wallets or maintaining control over a wallet or private key;
Under the VASP Bill, VASPs would need to register with the Financial Services Commission (FSC). In order to register, all VASPs would be subject to a number of general obligations including:
- anti-money laundering obligations;
- strict data protection and cyber security obligations in connection with the personal data they process;
- the filing of annual accounts with the FSC and ongoing financial reporting;
- the requirement for senior officers and beneficial owners to be fit and proper persons;
- the prior approval of senior officer appointments by the FSC; and
- having a dedicated compliance officer.
All VASPs must have a minimum of two directors. Further clarification is awaited as the VASP Bill provides that the FSC may require one of those directors to be physically resident in the BVI “having regard to the nature and risk associated with the VASP”.
VASPs who wish to provide custody or exchange services are subject to additional requirements as part of the registration process but these largely focus on demonstrating the security measures in place to ensure the safekeeping and segregation of client assets.
Importantly, the VASP Bill follows the FATF approach and provides specific exemptions for certain activities which will not require registration. These include:
- the provision of ancillary infrastructure to enable others to offer a service – such as cloud storage;
- the development, sale or offering of software or hardware;
- the provision of an unhosted wallet service where the customer retains control of their own private keys; and
- the acceptance by a merchant of virtual assets as payment for goods and services.
Existing VASP Operators
For those operators who are already undertaking activities within the BVI which would fall in scope, the VASP Bill includes helpful transitional arrangements. Provided those operators make an application to register as a VASP within six months of the new framework coming into force, they can continue to operate and provide a virtual asset service until their application is processed by the FSC.
For entities that have already been approved to sit in the regulatory sandbox, the VASP Bill also provides a route for those entities to register as VASPs.
Details of the registration fees are also awaited but are expected be in line with existing FSC fees in the BVI.
A Pragmatic Approach
The VASP Bill seeks to create a registration regime that is comprehensive and robust, but fair and in line with existing international standards. Those seeking to show the highest level of regulatory compliance and good governance will find this appealing. The Bill is crafted to deter bad actors and carries serious penalties, including imprisonment, for those who fail to comply. Taking high quality, specialised legal advice will be absolutely paramount for clients in this space. In particular, virtual asset service providers will want to be very clear on their registration requirements, which may not always be straightforward in this fast‐moving sector. For bad actors, there is also a body of criminal law which deals with fraudulent and similar activities, particularly those connected with AML/CTF.
Please contact a member of Appleby’s Technology and Innovation Group if you would like to discuss how the VASP Bill might impact you and how we can assist.
