--- title: How to Get a Crypto License in the Cayman Islands description: Q&A with RYKI on Cayman credibility, licensing and governance, insured institutional custody, white-glove service, and the institutionalisation ahead image: https://www.ryki.io/hubfs/Cayman%20Bid%20Crypto.png --- [![Ryki\_Colour\_Logo](https://www.ryki.io/hubfs/Ryki_Colour_Logo.png)](https://www.ryki.io) About [Team](https://www.ryki.io/team) [Ecosystem](https://www.ryki.io/ecosystem) [FAQ](https://www.ryki.io/faq) Services [OTC Trading](https://www.ryki.io/services/otc-trading) [Custody Solutions](https://www.ryki.io/services/custody) [Tailored Solutions](https://www.ryki.io/services/tailored-solutions) [iGaming Payment Solutions](https://www.ryki.io/services/igaming-payment-solutions) [Stablecoin Settlement](https://www.ryki.io/services/stablecoin-settlement-gaming) Jurisdictions [Canada](https://www.ryki.io/jurisdictions/canada) [Cayman Islands](https://www.ryki.io/jurisdictions/cayman-islands) [British Virgin Islands](https://www.ryki.io/jurisdictions/bvi) [Our Clients](https://www.ryki.io/clients) Press [Articles](https://www.ryki.io/articles) [In The News](https://www.ryki.io/articles/tag/in-the-news) [Case Studies](https://www.ryki.io/articles/tag/case-study) [Contact Us](https://www.ryki.io/contact) [Client Log-in](https://app.ryki.io) [Open Account →](https://www.ryki.io/contact) [Client Log-in](https://app.ryki.io) [Open Account →](https://www.ryki.io/contact) Article # How to Get a Crypto License in the Cayman Islands By RYKI · Nov 13, 2026, 10:30:28 AM ![\ To run a crypto business in or from the Cayman Islands, you need to be registered with, or licensed by, the Cayman Islands Monetary Authority, CIMA. A Cayman crypto license in the strict sense only exists for two activities, holding clients' crypto (custody) and running a trading platform, while most other services, like exchange and transfers, need a registration, which is cheaper and lighter. A license means a KYD 5,000 application fee, a grant fee of KYD 30,000 for custody or KYD 100,000 for a platform, a board of at least three directors with one of them independent, real capital and insurance. Cayman law firm Travers Thorp Alberga estimates six to eight months for the process once your application is complete. We've been through it ourselves. RYKI was registered under Cayman's first phase of crypto rules and became a [licensed virtual asset custodian](https://www.ryki.io/articles/ryki-receives-phase-two-approval-as-licensed-virtual-asset-custodian-in-the-cayman-islands) under the second, with conditional approval on 25 December 2025 and full approval on 11 February 2026. We don't sell license applications, so we've no reason to make any of this sound easier or harder than it is. ## **Who regulates crypto in the Cayman Islands** CIMA does, under the Virtual Asset (Service Providers) Act, usually called the VASP Act. The current text is the [2024 Revision](https://www.cima.ky/upimages/lawsregulations/VirtualAssetServiceProvidersAct2024Revision_1716397271.pdf), amended by a [2024 Act](https://www.cima.ky/upimages/lawsregulations/VirtualAssetServiceProvidersAmendmentAct,2024_1743360840.pdf) that brought in licensing from 1 April 2025 and a [2026 Act](https://www.cima.ky/upimages/lawsregulations/VirtualAssetServiceProvidersAmendmentAct,2026_1779831559.pdf) that changed how tokenised funds are treated. You'll see guides citing the Act "as amended in 2025". That amendment never came into force and the 2026 Act repealed it, so a guide that still leans on it hasn't been checked in a while. Buying or holding crypto in Cayman is legal, by the way, and needs no license at all, which our guide to [buying crypto in Cayman](https://www.ryki.io/articles/how-to-buy-crypto-in-the-cayman-islands) covers. And there's no "Cayman Islands Financial Services Commission", even though people search for it. The FSC regulates the British Virgin Islands, and our [BVI license guide](https://www.ryki.io/articles/bvi-crypto-license-requirements-in-2026) covers that regime. ## **Where things stand in 2026** Cayman built its crypto rules in phases. Phase One, from 31 October 2020, made every virtual asset service provider register with CIMA, and Phase Two, from 1 April 2025, added licensing for custodians and trading platforms, with capital, governance and conduct rules to match. Phase Three hasn't happened yet. Cayman lawyers expect it to switch on two parts of the Act that are written but not in force, the sandbox license and CIMA's approval of public token sales, and CIMA's chief executive Cindy Scotland described it in [November 2025](https://www.cima.ky/upimages/commonfiles/2025VASPRegulatoryForumSummaryHighlights-November2025_1764177435.pdf) as "ongoing work toward Phase Three, which includes exploring a regulatory sandbox to foster innovation". Nothing has been enacted since, so any guide offering you a 12-month sandbox license today is wrong. ## **License, registration or neither?** It depends on what you do, not what you call yourself. The Act covers token issuance and five services provided "for or on behalf of" someone else, and only two of them, custody and running a trading platform, need a full license. | **What you do** | **What you need** | | --- | --- | | Hold or control clients' crypto | A virtual asset service license (custody) | | Run a platform that matches clients' trades and holds their assets | A virtual asset service license (trading platform) | | Exchange or transfer crypto for clients | Registration | | Provide services around a token sale | Registration | | Both licensable and registrable activities | A license only, and CIMA cancels the registration | | Use crypto only for your own account | Usually nothing under the VASP Act |   The trading platform definition is narrower than people expect. Under the [amended Act](https://www.cima.ky/amendments-to-the-virtual-asset-service-providers-act-effective-1-april-2025), it's a platform that facilitates exchanges for clients for a fee or spread and either holds their assets or buys and resells when trades match, while bulletin boards and peer-to-peer trading are out. That matters for OTC desks. A desk dealing bilaterally with its clients isn't automatically a platform, but the answer turns on how it holds client assets and matches trades, so put it to a Cayman lawyer with your actual setup in front of them, and see our explainer on [what an OTC desk is](https://www.ryki.io/articles/what-is-an-otc-desk) for the different models. Whether the Act touches you at all also depends on your vehicle and the kind of token you deal in. - **It has to be a Cayman vehicle**, and since 2025 CIMA "shall not grant registration, a licence or a waiver to a natural person". - **Foundation companies get no pass.** They're popular with token projects and DAOs, but CIMA says one that provides virtual asset services "may fall within the VASP regime". - **Utility tokens are out**, meaning tokens that only give access to an app or service and can't be transferred or exchanged. - **Funds investing for their own account usually aren't VASPs**, and since 24 March 2026, tokens issued by regulated tokenised funds no longer count as a token issuance. - **Firms CIMA already supervises**, like banks and trust companies, can apply for a waiver if the crypto service "does not materially change the nature" of their licensed business. Every one of these turns on facts, which is why CIMA's own [Regulatory Policy](https://www.cima.ky/upimages/regulatorymeasures/RPy-RegistrationorLicensingofVASPs-27-May-25_1748960021.pdf) invites applicants to get "a formal written independent legal opinion" before applying. ## **What CIMA expects from a licensee** This is where most of the work goes, and it's where the guides selling license packages tend to be thinnest. - **A real board.** At least three directors at all times, one of them independent, with "no previous business affiliations" with the firm, its owners or its officers. CIMA checks, and its [desk review of eleven registrants](https://www.cima.ky/upimages/publicationdoc/Desk-BasedReviewfo_1763481383.pdf) found that 27% "did not have the minimum number of Directors required or did not have independent Directors". - **AML officers approved in advance.** A compliance officer, a reporting officer and a deputy, all of whom CIMA must approve before you appoint them. - **Fit and proper owners and managers.** Anyone owning 10% or more, plus the directors and officers, goes through background checks, and CIMA "rejects the entire application" if a controller doesn't pass. - **Capital that matches your business.** There's no fixed minimum, whatever some guides say. CIMA's [custody and platform Rule](https://www.cima.ky/upimages/regulatorymeasures/RuleVirtualAssetCustodiansandVirtualAssetTradingPlatformsRepealed_1770050011.pdf) asks for the higher of risk-based capital, "six months fixed overheads" or an amount CIMA sets, so your burn rate effectively sets the floor. - **Insurance.** CIMA's [Market Conduct rules](https://www.cima.ky/upimages/regulatorymeasures/RuleandStatementofGuidanceMarketConductforVASP_1770050113.pdf) expect cover for officers' liability, "theft or loss of Client assets held in custody", business interruption and cyber security. - **Client assets kept apart and checked daily.** Client crypto has to be segregated and protected from the firm's creditors, with reconciliation "at a minimum, daily". - **Security that gets tested.** Custodians need independent security audits, and this is the desk review finding we'd pay most attention to, because "over eighty percent (80%)" of registrants offering custody "had not conducted periodic independent audits of their custody platforms, processes, and controls." - **A registered office and an approved auditor.** You need a registered office in Cayman but not a physical one, and from 2027 CIMA will only approve auditors "with a physical presence in the Cayman Islands". These rules describe our own day-to-day. At RYKI, client assets sit in [segregated cold storage](https://www.ryki.io/services/custody) with multi-party approval for every movement, which is the kind of setup the custody rules are written around. ## **What a Cayman crypto license costs** Government fees are set in Cayman dollars (KYD) by the [2025 Amendment Regulations](https://www.cima.ky/upimages/lawsregulations/VirtualAssetServiceProvidersAmendmentRegulations2025_1743360905.pdf) and paid at [CIMA's rate](https://www.cima.ky/fees) of 0.82 KYD to the US dollar, so one KYD is about 1.22 US dollars, and none of them are refundable. | **Fee** | **Custody** | **Trading platform** | | --- | --- | --- | | Application fee | KYD 5,000 (about $6,100) | KYD 5,000 (about $6,100) | | Grant fee, within 30 days of approval | KYD 30,000 (about $36,600) | KYD 100,000 (about $122,000) | | Annual fee by 15 January, by revenue | KYD 30,000 to 120,000 | KYD 50,000 to 200,000 |   Registrations cost far less, a KYD 1,000 application fee plus KYD 1,500 to 15,000 on approval and every year after, depending on your revenue and whether your clients are outside Cayman. For a license, the government fees alone come to KYD 35,000 (about $42,700) for custody and KYD 105,000 (about $128,000) for a trading platform before your first annual fee. That gap is a good reason to ask your lawyer whether your model has to be a platform at all or can work as custody plus a registration. Pay late and there's a monthly surcharge, and a license "shall lapse immediately" once the fee is three full months overdue. On top of all that come lawyers, directors, AML officers, an approved auditor, insurance, security audits and the capital itself. ## **How the application works** The process is more structured than most people expect, and CIMA won't start reviewing until everything is in. 1. **Get your legal opinion and talk to CIMA.** Applicants "are urged to contact the Authority to schedule a meeting" before they file. 2. **Set up the vehicle and the people.** Register the entity and line up a registered office, the directors, the AML officers and a CIMA-approved auditor. 3. **File through REEFS.** Applications go through CIMA's online portal on one [application form](https://www.cima.ky/update-to-vasp-application-form), and because REEFS accounts are held by local service providers, your Cayman advisers will usually file for you. 4. **Attach the Schedule 1A pack.** Expect forecasts, an ownership chart, evidence of "fully paid-up capital" and, for custodians, your safeguarding and cybersecurity strategy, client agreements and insurance. CIMA's [licensing checklist](https://www.cima.ky/upimages/commonfiles/VASPLicensingandWaiverChecklist-NewApplicants_1743362048.pdf) runs to more than 80 items. 5. **Wait for the review.** "The application review process only commences when the Authority is in receipt of a complete application", and decisions come from a committee that "generally meets on a weekly basis". 6. **Meet any conditions and pay the grant fee.** Conditions lapse after six months unless CIMA sets another deadline, and once approved you have 30 days to pay. CIMA's [VASP FAQ](https://www.cima.ky/vasp-faq) lists the mistakes it sees most, like missing documents, unclear business plans and inconsistencies between documents. We'd read that list twice before filing, because it's probably the cheapest time saver in the whole process. ## **How long it takes** There's no statutory deadline for CIMA to decide. The most useful estimate comes from Travers Thorp Alberga, which said in a [February 2026 memo](https://traversthorpalberga.com/wp-content/uploads/2026/02/2026-02-17-TTA-Client-Memo-VASP-Licensing-and-Registration-Feb-2026.pdf) that "It typically takes CIMA approximately 3-4 months to process a properly completed VASP registration application and 6-8 months to process a properly completed VASP licence application." The words that matter there are "properly completed", and the conditional stage adds time on top. Blockchain.com went from conditional approval in December 2025 to [announcing its custody license](https://caymanfinance.ky/?p=39822) on 6 August 2026, while RYKI's conditional approval on 25 December 2025 became full approval on 11 February 2026, so we'd budget for the long end and assume the license sets your launch date. ## **Life after the license** Once you're licensed, the obligations run on a calendar for as long as you hold the license. - The annual fee by 15 January, with the monthly surcharge if you're late. - Quarterly [financial returns](https://www.cima.ky/vasp-financial-returns-form-now-in-effect), which CIMA calls "a condition of ongoing registration or licensing", plus Travel Rule and AML returns. - Audited accounts within six months of your year end. - CIMA's approval before you change your business plan, appoint a senior officer, or issue or transfer 10% or more of your shares. - Notice to CIMA and affected clients within 72 hours of a material custody breach. - Freezing designated persons' assets "Without Delay" under CIMA's sanctions rule, in force since 18 September 2026. - Registering for crypto-asset tax reporting (CARF) [by 31 January 2027](https://kpmg.com/us/en/taxnewsflash/news/2026/04/tnf-cayman-islands-cryptoasset-reporting-framework-registration-deadline-extended.html). - Publishing your licensing status and "authorised number". None of this is exotic if you've worked in a regulated firm before. It is a lot for a five-person startup, though, which is why we'd sort out the AML officers, the independent director and the compliance calendar before applying. ## **What happens if you operate without one** Running custody or a trading platform without a license carries a fine of KYD 100,000 (about $122,000) and a year in prison, plus KYD 10,000 for every day it continues, and running a registrable service unregistered carries KYD 25,000 and a year. CIMA can also fine a company up to KYD 1,000,000 for very serious breaches, and since 2025 nobody may "state, imply or convey" that they're regulated before they are. CIMA does use these powers. It [cancelled the registration](https://www.cima.ky/upimages/noticedoc/2025-06-13-DecisionNoticeExtractforWebsite-ACHoldingLimited_1749847581.pdf) of AC Holding Limited in June 2025 over AML failures and a majority shareholder who was "not a fit and proper person", and in August 2026 it [publicly warned](https://www.cima.ky/bitmart-et-al-not-regulated-by-cima) that BitMart and related entities "are not, and have never been, registered, licensed, regulated, or otherwise authorised" by it. ## **Who holds a Cayman crypto license today** Not many firms. CIMA's [statistics](https://www.cima.ky/vasp-statistics) counted 19 registered and licensed providers combined at the end of the third quarter of 2026, and when Blockchain.com's custody license was announced in August 2026, the law firm Appleby, which advised on it, called it ["only the fifth VASP licence"](https://www.applebyglobal.com/news/appleby-advises-blockchain-com-on-its-successful-cayman-vasp-licence/) CIMA had issued. The confirmed licensees in the public record are JMSC Trading Limited (BCXPro), granted what Cayman Compass reported as the [first full VASP license](https://www.caymancompass.com/2026/02/10/two-more-firms-get-vasp-licences-for-digital-asset-businesses/) on 5 February 2026, RYKI Ltd on 11 February 2026, and Blockchain (Cayman) Limited in August 2026. Crypto.com and VALR have announced [conditional](https://crypto.com/en/company-news/cryptocom-receives-conditional-approval-for-virtual-asset-service-provider-license-from-cayman-islands-monetary-authority) and [provisional](https://blog.valr.com/blog/valr-secures-provisional-vasp-license-in-the-cayman-islands-accelerating-global-expansion) approvals, which aren't full licenses yet. To check any firm yourself, search its exact legal name on CIMA's [entity search](https://www.cima.ky/search-entities-cima), which lists licenses and registrations separately, and make sure it matches the entity on your contract. ## **Tax, the grey list and Cayman's reputation** Tax is the simple part. The [government's own page](https://gov.ky/finance-economy) says "There is no income tax, company or corporation tax, inheritance tax, capital gains or gift tax," so crypto gains aren't taxed in Cayman, although your own country can still tax you depending on where you live and, for a few countries like the US, your citizenship. That doesn't make Cayman a black box. Since 1 January 2026, crypto service providers there collect customers' tax residence and report under the OECD's crypto-asset reporting framework, and the information is shared with other countries. On money laundering, FATF took Cayman off its grey list on [27 October 2023](https://cfatf-gafic.org/the-cayman-islands-de-listed-by-the-fatf/), and the EU removed it from its high-risk list with effect from 7 February 2024. ## **Where RYKI fits** RYKI doesn't sell license applications, and we'd point you to a Cayman law firm for that. Where we come in is once your fund, foundation or company is set up and needs a licensed counterparty in the same jurisdiction, for [institutional custody](https://www.ryki.io/services/custody) of its digital assets or for converting between crypto and fiat through our [OTC desk](https://www.ryki.io/services/otc-trading). One caveat that matters for your own application. Using a licensed custodian like us doesn't automatically put your business outside the Act, because that depends on what your business does for its clients, so put that question to your lawyer too. If you'd like to talk about custody or OTC for a Cayman structure, our [Cayman Islands team](https://www.ryki.io/jurisdictions/cayman-islands) is based in George Town and will come back to you within two business hours. This article is general information about Cayman Islands law as of October 2026, not legal advice. Apply in less than 5 minutes. Join the thousands of institutions already using RYKI. [Get Started →](https://www.ryki.io/contact) RYKI Newsletter ## Your insider's guide to everything RYKI. Fresh updates, and bite-sized wisdom straight to your inbox. Welcome to the RYKI Newsletter. RYKI Newsletter ## Your insider's guide to everything RYKI. Fresh updates, press releases, and bite-sized wisdom straight to your inbox. [![Ryki\_Colour\_Logo](https://www.ryki.io/hs-fs/hubfs/Ryki_Colour_Logo.png?width=300&height=150&name=Ryki_Colour_Logo.png)](https://www.ryki.io/) [What We Offer](https://www.ryki.io/what-we-offer) [Contact Us](https://www.ryki.io/contact) [Privacy Policy](https://www.ryki.io/privacy-policy) [Terms & Conditions](https://www.ryki.io/terms-conditions) RYKI Inc. | Canada FINTRAC MSB Registration #M19525430 | The Cayman Islands CIMA VASP no. 2208986 | The British Virgin Islands FSA VASP/26/024 © 2026 RYKI Inc. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "RYKI", "url" : "https://www.ryki.io/articles/author/ryki" }, "dateModified" : "2026-11-13T15:48:27.622Z", "datePublished" : "2026-11-13T15:30:28.000Z", "headline" : "How to Get a Crypto License in the Cayman Islands", "image" : [ "https://www.ryki.io/hubfs/Cayman%20Bid%20Crypto.png" ], "mainEntityOfPage" : { "@id" : "https://www.ryki.io/articles/how-to-get-a-crypto-license-in-the-cayman-islands", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.ryki.io/hubfs/Ryki_Colour_Logo.png" } } } ```