Regulated activity

Virtual asset safekeeping (FATF)

Safekeeping or administering virtual assets, or the cryptographic keys controlling them, for another person outside the EU needs a virtual asset service provider (VASP) licence under the FATF Glossary (iv). Regulators look at storage architecture, cold-storage segregation, operational redundancy, disaster recovery and fidelity insurance before granting it.

Last verified 2026-09-24Markdown · Data (CC BY 4.0)
Virtual asset safekeeping (FATF): regulated activityFATF

Definition

Safekeeping or administering virtual assets, or instruments enabling control over them, for another person.

  • FATF, Glossary: virtual asset service provider (iv): official text

Which licence you need

Licence families that typically permit this activity:

Where it can be licensed

Jurisdictions where virtual asset safekeeping (fatf) can be licensedAustraliaEl SalvadorGermanyIrelandSouth AfricaSwitzerlandUnited KingdomAbu Dhabi Global Market (ADGM)BermudaBritish Virgin IslandsCayman IslandsDubai (VARA)Dubai International Financial Centre (DIFC)MauritiusSeychelles

Frequently asked questions

What security standards are typically required for VASP custody licensing?

Supervisors typically require multi-signature or multi-party computation (MPC) protocols, physical hardware security modules (HSMs), geographically distributed key shards, and strict operational separation between the firm's own assets and client safekeeping reserves.

Can a non-EU custodial wallet provider service international clients?

Often, under reverse solicitation, yes. But active marketing, local advertising or running local banking rails in an onshore jurisdiction usually crosses the line and triggers mandatory local registration or a full custodial licence there.

Last verified 2026-09-24Author Danil Marmysh, Founder & CEO, ProtegraReviewed by Anastasia Sidorenkova, Head of Licensing, ProtegraReport an errorReference information, not legal advice.

Sources

  1. FATF Glossary: virtual asset service provider (iv) · retrieved 2026-09-24

Planning virtual asset safekeeping (fatf)? Get the licence right first

Tell us your model and target markets. We check which licence it needs, and whether a narrower one will do, before you spend on an application.

A free preliminary assessment: we check your business model against the licence before you spend on an application. We handle this licence and any other fintech licence, including jurisdictions the Atlas does not cover yet.