vasp

According to Bybit's announcement on October 22, its Dubai entity Bybit Fintech FZE has obtained a Virtual Asset Service Provider (VASP) license issued by the Dubai Virtual Assets Regulatory Authority (VARA), covering the scope of cryptocurrency spot trading.Bybit established its international headquarters in Dubai in 2022 and received preliminary approval from VARA in 2024. Bybit's Chief Legal and Compliance Officer Peter Loo stated that the company plans to apply for an expansion of the license scope to include derivatives trading in the future, but further approval from the regulatory authority is still required.

According to Philippine crypto media BitPinas, in response to CoinDesk's previous report regarding Coinsph facing the risk of license revocation due to alleged involvement in offshore betting transactions, the Philippine crypto trading platform Coinsph stated that its virtual asset service provider (VASP) license under Betur Inc. and the electronic money issuance (EMI) license of DCPay Philippines are currently both valid, and it denies providing services to non-compliant offshore betting operators.Coinsph stated that the restrictions imposed by the Philippine central bank only involve fiat currency top-ups to DCPay through InstaPay and PESONet, while cryptocurrency trading, withdrawals, and other payment services are still operating normally. The company also acknowledged that the central bank has requested it to improve its internal control measures and is currently cooperating with regulatory requirements. The Philippine central bank declined to comment on specific regulatory matters.

A report from the U.S. Senate Permanent Subcommittee on Investigations (PSI) identifies stablecoins, particularly USDT, as a key liquidity channel supporting Iran's shadow banking system. Licensed virtual asset service providers (VASP) in the Gulf Cooperation Council (GCC) region face heightened sanctions compliance pressure and need to enhance wallet ownership identification and counterparty assessment.Soham Jethani, a partner at the law firm Septten, stated that merchants settling crypto assets into local fiat currency do not necessarily avoid sanctions risks. Liability may involve designated entities, the provision of funds or economic resources, and asset handling within the transaction chain, potentially arising before the final settlement by banks. Jethani pointed out that the name of the stablecoin or the currency in which it is priced does not determine legal ownership; specific rights depend on contractual arrangements and actual payment processes.Globally circulating stablecoins may also pose secondary sanctions risks, as indirect or historical wallet associations do not automatically constitute violations and must be assessed in conjunction with applicable regulations, transaction participants, and specific facts. In regulated markets like the UAE, licensed exchange wallets are continuously monitored, and related funds can be frozen before consumption settlements, with merchants also required to complete KYC. Regulated VASPs handling deposits and withdrawals bear the responsibility for counterparty and sanctions risk assessment and corresponding controls.

The Dubai Virtual Assets Regulatory Authority (VARA) has issued a circular on the audit of reserve assets, clarifying the minimum requirements for independent audits of Virtual Asset Service Providers (VASP). VASP must maintain reserves of no less than 100% of customer liabilities throughout the review period and hold the same virtual assets in a 1:1 ratio, conducting daily reconciliations.The audit scope must cover hot wallets, warm wallets, cold wallets, third-party wallet infrastructure, and third-party custodial assets, and verify customer asset segregation, wallet control, and whether there is any re-staking, lending, or other usage scenarios.

The final rules from the Central Bank of Brazil for Virtual Asset Service Providers (VASP) set the minimum capital requirement based on business and risk at approximately 10.8 million to 37.2 million Brazilian Reais (approximately 2.11 million to 7.2 million US dollars), significantly higher than the 1 million to 3 million Brazilian Reais range (approximately 195,000 to 586,000 US dollars) in the consultation draft, and adds requirements for governance, internal controls, anti-money laundering, auditing, and ongoing reporting.Industry estimates suggest there are currently about 150 to 300 related companies, with around 20 to 25 meeting the conditions or willing to apply, and ultimately only about 10 may obtain licenses. Some small platforms have ended or restructured their retail operations.

The Bangko Sentral ng Pilipinas (BSP) has released a proposed announcement to suspend the acceptance of new applications for registration of payment system operators (OPS) for 12 months and to implement stricter controls on payment arrangements involving virtual asset service providers (VASP). The BSP stated that this move aims to conduct a comprehensive review of its classification and licensing framework.According to the draft, during the suspension period, the BSP will stop accepting and processing OPS applications. Applications submitted prior to the suspension can continue to be evaluated, but will not be approved or rejected until the suspension ends. Relevant entities are prohibited from conducting business activities that require OPS registration unless they obtain special authorization from the regulatory agency. In addition, BSP-regulated entities providing merchant acquiring services must connect licensed VASPs through direct merchant arrangements, and such relationships will be subject to enhanced due diligence, transaction and settlement limits, and other risk control measures.This requirement applies to virtual asset enterprises licensed, registered, or authorized by the BSP, the Securities and Exchange Commission of the Philippines, or other regulatory agencies, with VASPs being categorized alongside betting, gaming, adult industry, and money service businesses. If the draft is ultimately approved, it will take effect 15 days after publication, and the BSP is currently seeking public comments.

Market maker and investment institution DWF Labs announced that its affiliated group entity has obtained regulatory approval as a Virtual Asset Service Provider (VASP) from the British Virgin Islands Financial Services Commission (BVI FSC).

According to a report by the Korean News Agency, global virtual asset infrastructure company BitGo announced that its Korean entity BitGo Korea has received acceptance of its VASP (Virtual Asset Service Provider) registration application from the Financial Intelligence Unit (FIU) of Korea on August 18, becoming the first foreign cryptocurrency corporate entity to complete VASP registration directly in Korea.BitGo Korea was established in 2024, and this time chose to directly meet regulatory requirements to enter the market, rather than adopting the industry norm of acquiring existing VASP companies. Subsequently, it will use this as a foundation to officially launch virtual asset custody and transfer services in Korea, focusing on expanding business towards financial institutions and corporate clients.

According to Chainwire, global crypto platform Blockchain.com has been approved to join the Nigerian Securities and Exchange Commission (SEC) Accelerated Regulatory Incubation Program (ARIP). As a result, the company meets the SEC's preliminary participation requirements and can operate within the established sandbox framework, while continuously fulfilling compliance, testing parameters, and regulatory conditions. Through ARIP, Blockchain.com will work directly with the SEC to assess digital asset business models, test safeguards, and assist in refining the long-term regulatory framework. ARIP is aimed at virtual asset service providers and fintech innovators to evaluate emerging models, operational risks, and investor protection and anti-money laundering standards.Owen Odia, General Manager of Blockchain.com Africa, stated that Nigeria is one of the most important digital asset markets in Africa, and participating in ARIP is a significant step in the company's long-term commitment to the country, helping to introduce global experience in a controlled environment that supports a framework that protects consumers while encouraging responsible innovation. Over the past year, the company has obtained registration with the UK FCA, authorization under the EU MiCA framework, and a VASP license from the Cayman Islands CIMA. Founded in 2011, Blockchain.com serves over 70 jurisdictions, with more than 94 million wallets and 44 million confirmed accounts, processing over $1.1 trillion in crypto transactions.

The Australian Transaction Reports and Analysis Centre (AUSTRAC) announced that it has suspended the virtual asset service provider (VASP) registration of digital asset ATM operator Cryptolink for a period of 3 months, effective from Sunday, during which its Bitcoin ATMs are not allowed to operate. AUSTRAC stated that Cryptolink failed to meet basic reporting requirements, particularly by not submitting transaction reports that meet the threshold and not responding to information requests.The agency noted that it continues to monitor Cryptolink's management of high-risk transactions processed through cryptocurrency ATMs. This action was taken following the executable commitment signed between Cryptolink and AUSTRAC in October 2025. Previously, the Cryptocurrency Taskforce found that it was suspected of late reporting of transactions and deficiencies in risk assessment, and AUSTRAC issued a penalty notice of $56,300 to it, which Cryptolink has paid. The company operates 96 ATMs in Australia, mostly located in major cities such as Sydney, Melbourne, and Brisbane.

According to South Korean media NATE, the Korea Regulatory Reform Committee has proposed amendments to the enforcement decree of the Specific Financial Transaction Information Act, excluding minor violations from the qualification restrictions for major shareholders of Virtual Asset Service Providers (VASP).This move has sparked discussions in the market regarding exchange mergers and acquisitions, the entry of new businesses, and the fairness of regulation. The proposal to relax restrictions also involves issues related to the boundaries of the enforcement decree's authority.

According to Cointelegraph, cryptocurrency service company Blockchain.com has obtained a Virtual Asset Service Provider (VASP) custody license issued by the Cayman Islands Monetary Authority (CIMA), allowing it to provide regulated crypto custody services in the Cayman Islands. The license was approved on July 22, 2026, after CIMA granted conditional approval in December 2025.The license also allows Blockchain.com to offer cryptocurrency to fiat exchange and exchange services between cryptocurrencies. Blockchain.com has held VASP registration in the Cayman Islands since May 2022.Blockchain.com Co-CEO Lane Kasselman stated that the CIMA license continues the company's recent regulatory progress, including obtaining a license under the Markets in Crypto-Assets Regulation (MiCA) in Europe and completing registration with the Financial Conduct Authority (FCA) in the UK.

According to Bitcoin.com, the Spanish National Securities Market Commission (CNMV) issued a statement on Monday warning virtual asset service providers (VASP) to pay attention to the upcoming consequences of the MiCA framework. The agency emphasized that after June 30, the grace period for VASP benefiting from the transitional period will end, and only authorized VASP will be able to operate in the country. CNMV stated, "Investors should not deal with entities that have not completed the authorization process, as they will not be able to enjoy the protections and oversight mechanisms provided by the aforementioned regulations."VASP that are not authorized to operate in Spain under MiCA can design migration plans to manage customer funds, including agreements with other authorized VASP to allow customers to continue receiving crypto services. The regulatory agency emphasized, "The migration plan will set a reasonable timeframe for investors to withdraw, and after completion, any unwithdrawn crypto assets and funds may be transferred to authorized entities, with affected customers being notified." ATH21 CEO Cris Carrascosa revealed that with only 15 days left until the rules take effect, less than half of the VASP have obtained MiCA licenses, indicating that European companies and users may face serious service disruptions.

According to Fireblocks' "2025 Stablecoin Status Report," the trading volume of euro stablecoins processed by retail virtual asset service providers (VASP) has grown 12 times in 15 months, reaching $777 million.European banks and fintech companies are accelerating the production and deployment of compliant stablecoins following the implementation of the EU's Markets in Crypto-Assets Regulation (MiCA). Banking Circle and SG-Forge have become pioneers of MiCA-compliant stablecoins, launching euro-backed digital assets EURI and EURCV, respectively, both of which are currently expanding their production operations.This growth reflects a broader transformation of the European digital asset infrastructure, as banks have moved from pilot projects to building production systems for tokenized assets and stablecoin payment rails. Fireblocks' research indicates that European banks view stablecoins and tokenized asset infrastructure as key components of their 2026 roadmap, with MiCA compliance reducing regulatory uncertainty and accelerating the deployment process.

The digital asset financial services platform BIT announced that its subsidiary Matrixport Technologies Ltd has been approved by the British Virgin Islands Financial Services Commission (BVI FSC) to obtain a Class 2 investment business license (arranging investment transactions) under the Securities and Investment Business Act (SIBA), and has completed VASP registration under the Virtual Asset Service Providers Act (VASP Act).According to the scope of approval, Matrixport Technologies Ltd can conduct regulated investment business activities involving arranging investment transactions in accordance with BVI SIBA, supporting institutional and professional market operations and other financial services activities within the scope of the license; at the same time, it can conduct regulated virtual asset business under the BVI VASP framework.BIT stated that this approval comes after nearly three years of regulatory communication and preparation, marking an important milestone in the company's process of building a globally compliant digital asset platform.

The Web3 asset data platform RootData has outlined Upbit's business partners, which are relatively limited and mainly focused on areas such as blockchain infrastructure and compliance services. This is closely related to South Korea's unique and strict regulatory framework: under a system environment centered on real-name systems, VASP regulation, and anti-money laundering, exchanges are required to take greater responsibility for the flow of funds and user identities, making Upbit more inclined to develop its own systems and build localized capabilities rather than extensively introducing external partners. From the disclosed structure, on the technical side, infrastructure capabilities are strengthened through Lambda256, Aptos, and others; on the compliance level, service providers such as VerifyVASP, Chainalysis, and Crystal Intelligence are introduced; and supplementary funding and liquidity are provided through Circle and Naver Pay. Additionally, Upbit quickly built trading capabilities relying on its cooperation with Bittrex since its launch in 2017. On the branding side, Upbit has explored NFT entertainment collaborations with Hybe and has laid out plans in esports (LCK) and signed top players like Faker, while also becoming a primary partner of the Korean Sports Council. However, as the popularity of NFTs and the metaverse has declined, the influence of related entertainment collaborations has weakened. Related compilation: [Upbit Web3 Partner Network Compilation (continuously updated)]

The National Bank of Pakistan has officially lifted its ban on virtual assets that has been in place since 2018, allowing banks to open independent interest-free rupee accounts for virtual asset service providers (VASP) licensed by the Pakistan Virtual Assets Regulatory Authority (PVARA), and banks must conduct due diligence on the relevant institutions.

The Bank of Lithuania has stipulated that the transition period for crypto asset service providers to obtain a license will end on December 31, 2025. After the transition period, VASPs that have not obtained a CASP license under MiCA must cease related services, including no longer accepting new customers, no longer holding customer assets, and must properly return customer funds and crypto assets.As of July 18, 2025, approximately 30 companies have applied to the Bank of Lithuania for a crypto asset service provider license, with 10 applications currently under evaluation. More than 370 companies have reported providing crypto asset services to the National Enterprise Register, but only 120 companies are actually operating, generating revenue, and submitting financial statements.

The Italian Securities Market Regulator (Consob) issued a notice reminding that, according to the EU Regulation on Markets in Crypto-Assets (MiCAR), virtual asset service providers (VASP) currently registered with the OAM in Italy must submit an application to transition to a regulated crypto asset service provider (CASP) by December 30, 2025, in order to continue operating. Otherwise, they will not be allowed to provide related services from that date, and must cease operations by June 30, 2026, at the latest.Consob specifically reminds investors: it is essential to confirm whether the VASP currently partnered with plans to apply for a CASP license; check if the service provider is listed in the ESMA (European Securities and Markets Authority) or OAM registry; if the service provider is not authorized, investors have the right to request the return of their assets. Consob also reiterates its urging to VASP: those who have not applied for CASP authorization must cease operations by December 30, close all contracts, and return user funds; clearly disclose future operational plans or exit arrangements to users. This notice is part of the comprehensive implementation of MiCAR in the EU, ensuring a smooth and orderly transition in the market.