Sunshine - Learn #Virtual Assets

Virtual Assets and Virtual Assets Service Providers (VAVASP) Act Update January 13th, 2026

Tue, 13 Jan 2026 13:26:06 -0400

The VAVASP Act was assented to on the 23rd of December, 2025

To find out more information on the detail of the VAVASP Act please use these links below:

1. TTSEC Media Release: https://www.ttsec.org.tt/media-release-ttsec-issues-notice-on-the-virtual-assets-and-virtual-asset-service-providers-act-2025/

2. TTSEC VAVASP Fact Sheet: https://www.ttsec.org.tt/wp-content/uploads/2025/12/Virtual-Assets-and-Virtual-Asset-Service-Providers-Fact-Sheet.pdf

3. Sandbox Participant Rules: https://www.ttsec.org.tt/wp-content/uploads/2025/12/Rules-for-Sandbox-Participants.pdf

A Comprehensive Summary of Bermuda's Digital Asset Business Act (DABA)

Thu, 18 Sep 2025 16:18:05 -0300

A Comprehensive Summary of Bermuda's Digital Asset Business Act (DABA)

Enacted in 2018, the Digital Asset Business Act (DABA) is a pioneering piece of legislation that established Bermuda as a forward-thinking jurisdiction for the digital asset industry. Its primary purpose is to provide a comprehensive regulatory framework for businesses operating in the crypto and blockchain space, ensuring they meet high standards of anti-money laundering (AML)/combating the financing of terrorism (CFT), consumer protection, and financial stability. DABA is a cornerstone of the Bermudian government's strategy to diversify its economy, leverage its existing strength as a global insurance and reinsurance hub, and position itself as a quality leader in the burgeoning digital asset market.

Background and Rationale

Bermuda, a British Overseas Territory with a long history as an international financial center, recognized the transformative potential of blockchain technology and digital assets early on. However, it also acknowledged the significant risks associated with the industry, including volatility, potential for illicit finance, and consumer vulnerability. Rather than taking a reactive or prohibitive stance, the Bermudian government, advised by the Bermuda Monetary Authority (BMA), opted for a proactive approach. The goal was to create a "blueprint for quality" that would attract legitimate, well-capitalized businesses while aggressively mitigating risk, thereby protecting Bermuda's reputation as a well-regulated financial jurisdiction.

Regulatory Authority: The Bermuda Monetary Authority (BMA)

DABA designates the Bermuda Monetary Authority (BMA) as the sole regulator and licensing body for all digital asset business activity. The BMA is a well-respected, independent regulator with extensive experience overseeing banks, insurance companies, and investment funds. This was a strategic decision to ensure that digital asset businesses would be subject to the same level of rigorous oversight as other financial institutions in Bermuda, lending immediate credibility to the new regime.

Scope and Definition: What is Regulated?

DABA regulates the business of providing "digital asset business activity," which it defines as:

Issuing, selling, or redeeming virtual coins, tokens, or any other form of digital asset.
Operating as a digital asset exchange.
Providing digital asset custody wallet services.
Operating as a digital asset services vendor (e.g., providing transfer services, payment processing).
Providing digital asset trust services.

Any company conducting any of these activities from within Bermuda or to persons in Bermuda must obtain a Class F license under the Act or a specific exemption from the BMA.

Core Components and Regulatory Requirements

The strength and detail of DABA lie in its specific requirements for licensed entities. The framework is built on several foundational pillars:

1. The Licensing Process:
The application process is rigorous and requires applicants to submit extensive documentation, including:

A detailed business plan and operational model.
Comprehensive policies and procedures manuals covering AML/CFT, cybersecurity, risk management, and governance.
Information on all beneficial owners, directors, and officers, who must all pass the BMA's "fit and proper" test.
Evidence of the company's financial standing and its ability to meet minimum capital requirements.

2. Minimum Capital Requirements:
A key feature of DABA is its risk-based capital requirements. All licensed entities must maintain a minimum level of prescribed capital and liquid assets. The specific amount is calculated based on the nature, scale, and risk profile of the business activities, ensuring companies have a financial buffer to protect consumers and operate sustainably.

3. Robust Governance and Risk Management:
Licensees are subject to stringent corporate governance standards:

They must have a physical presence in Bermuda, including a mind and management office, ensuring the BMA has a tangible entity to supervise.
They must appoint specific senior officers resident in Bermuda, including a Chief Executive Officer, a Chief Compliance Officer, and a Money Laundering Reporting Officer (MLRO).
They must establish audit and risk committees.
They must implement comprehensive risk management frameworks to address operational, market, and liquidity risks.

4. Consumer Protection and Custody:
DABA places a strong emphasis on protecting client assets:

Segregation of Funds: Licensees are legally required to hold client assets (both fiat and digital) completely separate from their own operating funds.
Custody Requirements: Entities providing custody services must demonstrate secure storage solutions, often requiring a combination of "cold" (offline) and "hot" (online) wallets with appropriate insurance.
Disclosure and Transparency: Licensees must provide clients with clear, fair, and not misleading information about the risks involved in digital asset transactions.

5. Anti-Money Laundering / Counter-Financing of Terrorism (AML/CFT):
DABA mandates full compliance with Bermuda's Proceeds of Crime Act and international standards set by the Financial Action Task Force (FATF). This requires:

Thorough Customer Due Diligence (CDD) and Know Your Customer (KYC) procedures.
Ongoing monitoring of client transactions.
Suspicious activity monitoring and reporting to the Financial Intelligence Department.
Appointment of a dedicated MLRO.

6. Cybersecurity and Systems Integrity:
Given the digital nature of the assets, DABA includes specific provisions for technology and security. Licensees must:

Maintain and test a comprehensive cybersecurity program.
Ensure the resilience and integrity of their technological systems.
Have detailed incident response and business continuity plans in place.
Undergo independent system audits.

Significance and Impact

Bermuda's DABA has had a significant impact on its economy and international standing:

Quality over Quantity: By designing a rigorous and expensive regulatory regime, Bermuda deliberately positioned itself to attract established, institutional-grade businesses rather than a high volume of start-ups. This aligns with its brand as a premium financial center.
Economic Diversification: The Act has successfully created a new pillar for Bermuda's economy, generating new business formations, job opportunities, and government revenue through fees and taxes.
Synergy with Existing Industries: Bermuda is leveraging its world-class insurance and reinsurance sector to provide novel insurance products for digital asset custody, creating a unique value proposition.
International Recognition: Bermuda's proactive and comprehensive approach has earned it positive reviews from international bodies like the FATF and has served as a model for other jurisdictions seeking to regulate the space responsibly.

Conclusion

The Digital Asset Business Act of Bermuda is a sophisticated and well-considered legislative framework. It represents a strategic bet that the future of the digital asset industry lies with well-regulated, compliant, and institutionally-backed entities. By placing the experienced BMA at the helm and insisting on high standards for capital, governance, consumer protection, and AML/CFT, Bermuda has built a "gold standard" regime. It successfully balances the imperative to foster innovation with the non-negotiable duty to protect consumers and the integrity of the global financial system. DABA has cemented Bermuda's position not as a lax offshore haven, but as a serious, quality-focused hub for the next generation of financial technology.

What is MiCA

Thu, 18 Sep 2025 16:03:25 -0300

What is MiCA & Why It Was Created

MiCA stands for Markets in Crypto-Assets. It is Regulation (EU) 2023/1114, adopted on 31 May 2023. Wikipedia+3ESMA+3EUR-Lex+3
The law establishes a harmonised regulatory framework across the EU for crypto-assets not already covered by existing EU financial services law. That includes many tokens, stablecoins, and crypto-asset service providers. Wikipedia+3EUR-Lex+3Greenberg Traurig+3
Objectives include: legal clarity & certainty; protecting consumers & investors; promoting innovation; ensuring market integrity; protecting financial stability; preventing market abuse; addressing risks such as money laundering, fraud, and illicit finance. ESMA+3EUR-Lex+3Greenberg Traurig+3

Scope & Who/Maker is Covered

MiCA divides crypto‐assets into categories and regulates both issuers and service providers.

Crypto-assets covered are:

Asset-referenced tokens (ARTs) – tokens referencing values, e.g. stablecoins pegged to a basket of currencies or assets. European Parliament+2EUR-Lex+2
E-money tokens (EMTs) – tokens pegged to a single fiat currency, functioning like digital equivalents of money. EUR-Lex+2European Parliament+2
Other crypto-assets not otherwise regulated (utility tokens, etc.) European Parliament+2EUR-Lex+2

Crypto-Asset Service Providers (CASPs) are also covered. These include exchanges, wallet providers, issuer services, custody services, trading platforms, etc. ESMA+2European Parliament+2
There are special requirements for “significant” ARTs and EMTs, because of their potential for systemic risk. For example, larger stablecoin issuers will have stricter governance, capital, reserve, oversight rules. European Parliament+1

Key Provisions & Requirements

Here are the major features of MiCA:

Authorization & Supervision

Issuers of ARTs and EMTs must obtain authorization. Service providers must also be authorized to operate. EUR-Lex+2European Parliament+2
National Competent Authorities (NCAs) in each Member State will supervise and enforce. For cross-border, stablecoin matters, and “significant” issuers/providers, the European Securities and Markets Authority (ESMA) plays a coordinating role, technical standards, oversight involvement. Finance+3ESMA+3EUR-Lex+3

Transparency, Disclosure & White papers

Issuers must publish detailed disclosures ("white papers") before offering tokens to the public, containing required information so that potential holders/investors understand risks. European Parliament+1
Trading platforms and providers must ensure clear disclosure of fees, risks, etc. European Parliament+1

Stablecoin/Token Reserve & Governance Rules

ARTs and especially EMTs (stablecoins) must have high quality reserves, liquidity, safeguarding, risk management, governance, audit, etc. European Parliament+1
For “significant” tokens, additional capital and governance requirements. European Parliament+1

Consumer & Investor Protection

Protection of holders of crypto‐assets (those holding the tokens) and clients of service providers: rules about how assets are kept, complaint handling, rights, redress, etc. European Parliament+1
Prevent misleading marketing; ensure clarity about whether a token or service is regulated. EUR-Lex+1

Market Integrity & Anti-Abuse Measures

Rules against insider dealing, market manipulation, disclosure of inside information. EUR-Lex+1
Cooperation among authorities; oversight of cross-border services. ESMA+1

Anti-Money Laundering & Illicit Finance

CASPs must comply with EU AML/CFT rules, include customer due diligence, monitoring, suspicious transaction reporting, etc. European Parliament+2ESMA+2

Operational, Governance, Organizational Requirements

Service providers and issuers need to set up proper governance, risk management, internal controls, cybersecurity, operational resilience. European Parliament+1

Applicability & Phased Implementation

Some parts of MiCA (notably the stablecoin / ART / EMT provisions) came into force earlier (30 June 2024) EUR-Lex+2Datawallet+2
The rest (other crypto-asset service provider obligations, etc.) fully applicable from 30 December 2024. EUR-Lex+2ESMA+2

Implementation Timeline & Transitional Rules

MiCA was adopted in Spring 2023 (approved by Parliament in April, Council in May). Greenberg Traurig+1
Entered into force in June 2023. ESMA+2Greenberg Traurig+2
Key implementation dates:
• 30 June 2024: Rules on asset-referenced tokens (ARTs) and e-money tokens (EMTs) began to apply. EUR-Lex+2European Parliament+2
• 30 December 2024: most other provisions, especially concerning crypto-asset service providers, transparency, disclosure, governance, etc., came into full effect. ESMA+3EUR-Lex+3European Parliament+3
There is also a transitional period for existing service providers / issuers to comply, registration deadlines, etc. Member States are responsible for supervising, licensing, etc. Greenberg Traurig+2eestifirma.ee+2

Impacts & Significance

Legal Certainty & Harmonisation: Before MiCA, EU member states had a patchwork of rules, or lacked regulation in many cases. MiCA aims to unify standards across the 27 EU member states, reducing regulatory arbitrage. European Parliament+2ESMA+2
Stablecoin Regulation: MiCA is particularly detailed in how stablecoins (both ARTs and EMTs) are regulated, because of their potential to affect financial stability. Clear reserve requirements, governance demands, oversight. This gives more confidence to participants, and anchors stablecoin issuance to more robust requirements.
Consumer & Investor Protection: Because many crypto projects had issues with failures, fraud, or lack of transparency, MiCA aims to raise the bar on disclosures, rights, redress, etc. Should help reduce some of the risks that have hurt users.
Market Integrity & Safety: Rules for preventing manipulation, insider trading, etc., plus operational resilience and cybersecurity requirements, aim to make the market safer.
Innovation Encouraged but Regulated: MiCA tries to strike a balance: provide room for crypto innovation while imposing necessary guardrails. Clear regulation often helps innovation because it reduces legal uncertainty.
Cross-Border Passporting & Competition: Once authorized in one EU state, a CASP or crypto issuer can operate (or passport) in other EU states under MiCA. That simplifies operations for companies operating in multiple EU countries. European Parliament+1

Challenges, Criticisms & Open Issues

Implementation Complexity & Costs: Complying with the detailed requirements (governance, audits, reserve backing, disclosures, etc.) will be resource-intensive, especially for smaller or startup crypto companies.
Regulatory Capacity: National authorities must develop capacity to supervise, enforce, license. ESMA, EBA, etc., must also develop technical standards and coordinate across countries. Possible variability in how strictly different Member States enforce.
Scope, Exclusions, and Definitions: Certain crypto-assets are excluded (those already covered by other financial services legislation), but there may still be ambiguity or disputes about whether a given token falls under MiCA or is excluded. Also, non-fungible tokens (NFTs) generally are out of scope, unless they are used in ways that bring them logically into MiCA’s categories. European Parliament+1
International / Cross-Border Issues: How MiCA will interact with other jurisdictions' laws, and how to deal with foreign issuers or service providers. Also, stablecoin issuers outside the EU but serving EU users may face complications.
Transitional matters: Existing players need time to adapt. The deadlines are set, but some have raised concerns about how smoothly transition will happen.
Balancing Innovation vs Regulation: Some stakeholders worry that over-regulation could stifle innovative crypto projects, reduce flexibility, or impose burdens that favor large incumbents over smaller innovators.
Enforcement & Consumer Awareness: Even with rules, consumers must be informed, and regulators must enforce well, especially to prevent misleading marketing, fraud, etc. There are reports (e.g. ESMA warnings) about firms potentially mis-representing how regulated they are. Reuters

Where Things Stand Now (as of ~2025)

MiCA is in force across the EU. Most of its rules are fully applicable since 30 December 2024, with the stablecoin/token issuer rules (for ARTs / EMTs) having come into effect earlier (June 2024). EUR-Lex+2ESMA+2
Technical standards (Level 2 / Level 3 measures) are being developed and/or have been developed. The European Commission, ESMA, and other EU bodies are working on the detailed implementing and delegated acts. Finance+1
Member States are setting up their licensing/authorization regimes for crypto-asset service providers, stablecoin issuers, etc. Some are already accepting applications. Forbes India+1
Some stress tests: ensuring supervision is consistent, that cross-border passporting works, that enforcement is rigorous. Also watching how stablecoin issuers adjust their operations to meet the reserve, reporting, governance requirements.

Key Takeaways

MiCA is one of the first comprehensive, EU-wide regulatory frameworks aimed specifically at crypto assets. It is a landmark in global regulation of digital assets.
If you issue tokens, offer crypto services, or hold stablecoins in EU, you now have clear legal obligations in many respects: authorisation, disclosure, consumer protection, reserve backing, governance, market integrity.
For stablecoins especially, the regulation demands robustness: good reserves, oversight, risk management.
For businesses, complying will be costly, but the upside is greater market stability, trust, and ability to operate across EU borders.
For consumers, there should be greater protection, more transparency, and legal recourse.
However, success depends on implementation: how well member states, regulators, and authorities enforce the rules; how clearly definitions are applied; how well the legal/regulatory infrastructure adapts.