Guide to VASP Types and Global Differences 2026

• VASP is the global umbrella term, but many jurisdictions use their own legal labels for the same core crypto activities.
• FATF’s definition still anchors most regimes: exchange, transfer, custody, administration, and issuance-related services.
• The EU now uses CASP under MiCA, which is more precise than the older VASP language.
• A crypto exchange, custodian, payment processor, or token issuance service may face very different obligations depending on the country.
• The label itself matters because it determines licensing, reporting, AML controls, customer access, and regulator oversight.

A Virtual Asset Service Provider, or VASP, is any business that handles digital assets such as cryptocurrencies, tokens, or stablecoins on behalf of others. The definition was introduced by the Financial Action Task Force (FATF) in 2019 to bring clarity to a growing industry that regulators viewed as high risk for money laundering and terrorism financing. Since then, the term has been adopted worldwide, though not always in the same way.

In the European Union, the Markets in Crypto-Assets Regulation (MiCA) has unified the treatment of VASPs under a single legal framework. Other jurisdictions, however, continue to use their own labels, from Money Services Business in the United States and Canada to Digital Asset Business in Bermuda and the Cayman Islands, or Major Payment Institution in Singapore. The result is a patchwork of categories that often describe the same underlying activities but carry different compliance obligations.

Try the leading VASP data free for 1 month. No card required.

This guide explains the main VASP types, how they differ across jurisdictions, and why the distinctions matter. Understanding the terminology is key for businesses seeking licenses, regulators setting policy, and investors trying to assess the legitimacy of a platform.

Where the Term Comes From

The idea of a Virtual Asset Service Provider first appeared in 2019, when the Financial Action Task Force (FATF) published guidance on how countries should regulate digital assets. FATF wanted to create a broad umbrella term that captured the kinds of businesses most likely to be involved in financial crime risks. Instead of focusing on specific technologies, it defined VASPs by the services they perform.

According to FATF, a company is a VASP if it engages in any of five activities on behalf of others: exchanging virtual assets for fiat, exchanging one virtual asset for another, transferring virtual assets, providing custody or administration of virtual assets, or offering financial services tied to the issuance or sale of a virtual asset. These categories were meant to ensure that regulators could apply anti-money laundering and counter-terrorism financing rules consistently, regardless of how the industry evolves.

The European Union took this further with the Markets in Crypto-Assets Regulation (MiCA), which entered into force in 2023, while the main CASP authorization and supervision rules started applying from 30 December 2024. MiCA created a uniform regime for crypto-asset service providers across all member states, defining them more precisely and adding specific rules for issuers of stablecoins and tokens.

Outside the EU, countries often rely on FATF’s baseline but adapt the terminology to their own legal systems. This is why a business might be called a VASP in one country, a Money Services Business in another, or a Digital Asset Business somewhere else.

Core VASP Functions

FATF’s definition of a VASP is built around five core functions. These form the baseline for how regulators around the world decide whether a business falls under their oversight.

The first is exchange between fiat and virtual assets. This covers businesses that allow users to buy or sell cryptocurrencies with national currencies, such as exchanges or crypto ATMs. The second is exchange between one virtual asset and another, which includes trading platforms that let users swap Bitcoin for Ethereum or any other token pair.

The future of finance is here. Trade crypto and more

The third function is transfer of virtual assets, meaning the movement of digital assets from one address or account to another on behalf of a customer. Payment processors and remittance providers often fall into this category. The fourth is custody or administration, where a company stores private keys or manages wallets for clients. Custodians, wallet providers, and certain investment platforms usually fit here.

Finally, FATF includes financial services related to the issuance or sale of virtual assets. This broad category captures businesses that help launch new tokens, arrange initial offerings, or provide services tied to fundraising through crypto.

Different Categories Across Jurisdictions

Although FATF provides the baseline, countries use their own terms to classify VASPs. Some fall back on long-standing financial categories, while others have created crypto-specific frameworks. The result is a global patchwork where the same type of business might carry a completely different label depending on where it operates.

General finance categories.

In the United States and Canada, crypto businesses are often treated as Money Services Businesses (MSBs). This places them in the same regulatory bucket as money transmitters or remittance companies, even though their core activity is virtual asset trading. Similar approaches exist in parts of Asia and the Middle East, where crypto companies may be licensed under the broader category of Finance Companies or Financial Services Firms. In the Gulf, some regulators go further by grouping them under Authorised Institutions, which traditionally covered banks or insurers. These classifications reflect a philosophy of folding crypto into existing rules rather than designing new ones.

Crypto-specific categories.

Other jurisdictions have opted for bespoke language. The European Union now uses the term Crypto-Asset Service Providers (CASPs) under MiCA, aligning with FATF but adapting it to cover services unique to the EU market. In Bermuda and the Cayman Islands, regulators prefer Digital Asset Business, while in parts of Asia the label Virtual Asset Business Operator is common. Some countries, including South Korea, stick with the direct VASP designation. These terms all point to the same functions, but each comes with its own licensing and reporting requirements.

Trading and exchange categories.

Where authorities want to draw a clear line between trading venues and other services, new categories appear. Japan refers to licensed platforms as Crypto-Asset Exchange Service Providers, while Singapore requires Virtual Asset Trading Platforms to hold approval from the Monetary Authority of Singapore. Some regulators in emerging markets simply use Digital Asset Exchange as the category name. In certain cases, like Kazakhstan, exchanges that deal in derivatives may fall under Futures Exchange Crypto Asset Trading Organizer, showing how virtual assets intersect with traditional financial market rules.

Custody and storage categories.

Because custody involves direct control of client funds, many regulators separate it out. The EU under MiCA recognizes custody as a standalone service, while some jurisdictions list firms as Custody Providers – VASP or Crypto Asset Storage Managers. This often brings stricter requirements for security, insurance, and audit oversight compared to exchanges.

Skip the wait. Buy a licensed company.

Issuance and token categories.

Token issuers are also treated separately. MiCA distinguishes issuers of e-money tokens (EMTs) and asset-referenced tokens (ARTs). Some regulators require White Papers for new crypto-assets before they can be offered to the public. Others, like in Hong Kong, may classify certain firms as Prospective Physical Crypto Asset Traders when they plan to offer commodity-like products tied to crypto.

Sandboxes and labs.

To encourage innovation, several countries maintain special regimes such as RegLab Firms, FinTech Lab Participants, or Securities Exchange and Regulatory Sandbox entities. These allow start-ups to test services under lighter rules before transitioning into full VASP or financial licenses. The UAE’s ADGM and Singapore’s MAS are known for operating such frameworks.

Compliance and oversight labels.

Finally, some categories are designed not for licensing but for oversight. Regulators may maintain lists of Non-Compliant Entities to warn the public, or recognize Authorised Representatives – VASP who act under the umbrella of a licensed firm. These labels highlight the grey space between fully regulated institutions and those operating outside the system.

Country-by-Country Examples

In the United States, crypto businesses are generally treated as Money Services Businesses (MSBs). Registration with FinCEN is required at the federal level, while states such as New York impose additional licensing through the Department of Financial Services, better known as the BitLicense regime. The MSB label places exchanges, custodians, and payment processors under the same rules as money transmitters.

In the European Union, MiCA has introduced a single category: Crypto-Asset Service Providers (CASPs). All 27 member states now apply the same MiCA definitions and licensing framework, but national competent authorities still handle CASP authorization and supervision in practice. ESMA maintains the central MiCA register, while the EBA has a specific role for asset-referenced tokens and e-money tokens. The framework reduces fragmentation, but transitional periods and national implementation details still matter.

The United Kingdom regulates under the term Cryptoasset Firms Registered, with the Financial Conduct Authority in charge. Firms must comply with AML rules and obtain FCA approval, but the framework stops short of a full licensing regime like MiCA.

In Singapore, the Monetary Authority of Singapore supervises crypto companies as Major Payment Institutions (MPIs) if they exceed certain thresholds. This category captures both fiat and digital asset payments, showing Singapore’s approach of combining crypto with broader financial regulation.

Buy bitcoin and stocks. Signup to Coinbase today

Hong Kong recognizes Virtual Asset Trading Platforms, licensed and overseen by the Securities and Futures Commission. The rules focus on investor protection, and licensed platforms can serve retail investors only under SFC conditions, including token eligibility, suitability, custody, and risk-disclosure requirements.

Bermuda uses the term Digital Asset Business, supervised by the Bermuda Monetary Authority. This category covers exchanges, custodians, and token issuers, and has become a popular licensing path for institutions seeking a well-regarded offshore base.

In the United Arab Emirates, crypto activity falls under the Virtual Assets Regulatory Authority (VARA) in Dubai, or the Abu Dhabi Global Market for companies based in Abu Dhabi. Both use the term Virtual Asset Service Providers, but their rules differ in scope.

Finally, El Salvador created the National Commission of Digital Assets (CNAD) to regulate under the Digital Asset Service Provider framework. This reflects the country’s decision to integrate Bitcoin into its financial system while licensing exchanges and custodians that operate locally.

Conclusion

VASPs were introduced as a global umbrella to capture the core functions of digital asset businesses. Yet even with a common baseline, the way jurisdictions classify these firms still varies widely. Some fold crypto into existing financial categories such as Money Services Businesses, while others create new terms like Digital Asset Business or Crypto-Asset Service Provider. The result is a landscape where the same activities can carry very different obligations depending on the regulator.

There is movement toward greater consistency. FATF guidance remains the foundation for defining what makes a business a VASP, and the European Union’s MiCA regulation is the clearest example of harmonization. Over time, more regions may align with these standards to reduce fragmentation and simplify cross-border compliance.

Until then, businesses, regulators, and investors need tools to navigate the patchwork of terminology and licensing requirements. That is where structured resources like the Coincub database provide value. 

Try the leading VASP data free for 1 month. No card required.

Frequently Asked Questions (FAQ)

Is every crypto exchange a VASP?

Yes, in almost every jurisdiction an exchange falls within the VASP definition. Exchanges handle both fiat-to-crypto and crypto-to-crypto transactions, which are explicitly covered in FATF’s five core functions. The exact label varies (MSB in the United States, CASP under MiCA in the EU, or Digital Asset Business in Bermuda) but exchanges are universally recognized as needing some form of registration or license.

What’s the difference between an MSB and a VASP?

Functionally, there is little difference. The terms are simply regional. In the United States and Canada, crypto businesses are registered as Money Services Businesses, while many other countries use VASP or a similar variant. Both categories capture the same underlying activities: exchange, transfer, custody, or issuance of virtual assets. The practical difference lies in the regulator, reporting obligations, and scope of oversight.

Do miners or software developers count as VASPs?

Generally no. FATF makes clear that individuals mining on their own behalf, or developers writing software, are not VASPs as long as they are not providing services to others. The distinction is important, because it draws a line between activity that supports the network itself and businesses that act as financial intermediaries. However, if a mining pool or developer begins offering exchange, custody, or transfer services for clients, they may fall within the VASP definition.

Who needs a license under MiCA?

Any business in the EU that provides crypto-asset services will require authorization as a CASP. This includes exchanges, custodians, and platforms involved in token issuance. MiCA also introduces specific requirements for issuers of stablecoins, such as capital buffers and disclosure obligations. The regulation applies uniformly across all 27 EU member states, removing the need to seek licenses country by country.

Why do the different terms matter for businesses?

Different labels signal different compliance regimes. A firm that qualifies as an MSB in the US faces both federal registration with FinCEN and state-level licensing, which can be expensive and time-consuming. By contrast, a CASP under MiCA operates with a single EU-wide license, giving broader market access. In other jurisdictions, like Singapore or Hong Kong, the category determines whether a firm can handle retail clients, institutional clients, or both. For businesses planning to expand across borders, understanding these distinctions is critical to avoid gaps in licensing or unexpected restrictions.