Under the new regime, entities that provide virtual asset custody services or operate trading platforms must now obtain a license from the Cayman Islands Monetary Authority (CIMA). Existing registered entities offering such services are required to submit a license application within a 90-day window, ending on June 29, 2025. This transitional period ensures continuity for service providers while enabling the regulator to enforce higher standards of compliance.
The application process itself has been significantly enhanced. VASPs are now expected to provide detailed documentation covering their business operations, risk management strategies, and cybersecurity measures. Custodians must disclose the types and amounts of assets under custody, while trading platform operators must furnish financial projections and infrastructure details, including the location of servers and operational centers. These requirements aim to raise transparency and allow CIMA to conduct thorough due diligence on market participants.
In terms of governance, the new amendments stipulate that licensed VASPs must appoint at least three directors, with at least one being independent and free from vested interests. CIMA also has the discretion to require the submission of audited financial statements when there are concerns about a firm’s financial integrity or the accuracy of its reporting. Furthermore, all communications, advertisements, and disclosures made to clients or the general public must be accurate and not misleading, with violations considered offenses under the Act.
The amendments also grant CIMA broader supervisory powers. These include the ability to conduct on-site examinations, assess operational soundness, inspect cybersecurity safeguards, and, when necessary, revoke licenses. Notably, the revised law introduces clearer provisions for regulatory waivers. CIMA may exempt entities that are already regulated under other Cayman Islands laws—so long as their virtual asset activity does not materially change their existing operations and the current oversight remains adequate.
This enhanced regime brings the Cayman Islands into closer alignment with other leading jurisdictions such as Bahrain and Abu Dhabi. For instance, Central Bank of Bahrain (CBB) enforces a comprehensive licensing framework through its Crypto-Asset Module, requiring specific capital and governance standards for each license category. Similarly, Abu Dhabi Global Market’s Financial Services Regulatory Authority (FSRA) mandates Financial Services Permissions for crypto-related activities and evaluates “Accepted Virtual Assets” before authorizing their use. These frameworks, like the new Cayman model, emphasize technology risk management, consumer protection, and AML/CFT compliance.
The Cayman Islands’ reforms are directly inspired by FATF’s global standards. The emphasis on a risk-based approach, effective monitoring systems, and stringent consumer protection mechanisms mirrors the FATF’s guidance on virtual assets. By aligning with these principles, CIMA demonstrates its readiness to supervise a modern, secure, and compliant digital asset environment—one that fosters innovation while minimizing systemic risks.
For VASPs operating in or entering the Cayman Islands market, the message is clear: regulatory excellence and compliance are no longer optional. The new VASP framework represents a turning point for the jurisdiction, promoting transparency, accountability, and long-term sustainability in the virtual asset space.
References
1. Cayman Islands Monetary Authority. Virtual Asset Service Providers – FAQs. Accessed March 31, 2025. https://www.cima.ky/amendments-to-the-virtual-asset-service-providers-act-effective-1-april-2025
Annex: Summary of Key Changes in 2025 Amendments to Cayman Islands VASP Act
Leave a Reply