Obtain a Bermuda digital asset business license under DABA. RUE supports exchanges, custodians, stablecoin and fintech projects through BMA-facing structuring, documentation, and compliance setup.
Prepared by RUE editorial team · Reviewed by Milana · Updated 23 October 2026
Request Bermuda Licensing AssessmentBermuda remains one of the few jurisdictions with a mature statutory framework for digital asset businesses. In practice, a “crypto license in Bermuda” usually means a license under the Digital Asset Business Act 2018 (DABA), supervised by the Bermuda Monetary Authority (BMA), while token issuance may instead fall under the Digital Asset Issuance Act 2020 (DAIA).
"As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays."
RUE advises on Bermuda digital asset licensing from first scoping to post-licensing readiness. We help you determine whether your model falls under DABA or DAIA, select the right license class, prepare the application pack, structure governance and local presence, and manage BMA-facing responses.
Our team also supports related workstreams, including Bermuda company setup, AML/ATF framework drafting, internal controls, banking strategy, and ongoing compliance coordination with local service providers.
Bermuda regulates digital asset business through DABA and digital asset issuance through DAIA, with BMA supervision backed by codes, rules and guidance rather than informal policy only.
A Bermuda license is not a light-touch registration. The BMA reviews governance, AML/ATF, cyber controls, custody architecture, source of funds and operational resilience in depth.
Bermuda is particularly relevant for exchanges, custodians, broker-dealers, stablecoin structures and hybrid digital asset businesses that need a credible regulator and clear legal perimeter.
The framework now includes client disclosure rules, Cyber Risk Rules effective **1 January 2024**, Custody of Client Assets Rules effective **2025**, and stablecoin-specific guidance issued in **November 2024**.
A Bermuda crypto license is a DABA license unless your project is primarily a digital asset issuance that falls under DAIA. The BMA does not assess applications on a form-only basis. It tests whether your business can operate prudently, protect client assets, manage AML/ATF and cyber risk, and maintain real governance in or from within Bermuda.
The most common founder mistake is to treat Bermuda like a low-friction offshore filing. It is not. Entry is possible, but only if your ownership, control framework, financial resources, technology stack and compliance model are already coherent. Below are the core elements the BMA expects to see in a credible 2026 application.
You must first determine whether you are carrying on digital asset business in or from within Bermuda under DABA, or whether your model is instead an issuance to the public under DAIA. Activities commonly requiring a DABA license include:
Carrying on licensable activity without a license is a criminal offence punishable by a fine of up to US$250,000 and/or up to 5 years imprisonment. This is why scoping is the first legal task, not a later paperwork step.
You typically need a Bermuda vehicle and a governance structure that supports the head office requirement. For most non-Class T licensees, the BMA expects the head office of the licensed undertaking to be in Bermuda, taking into account where strategic decision-making occurs, where senior executives are based, where books and records are available, and where core risk and compliance oversight is directed.
This is more than renting an address. In practice, the BMA looks at:
Many applicants also need a senior representative in Bermuda. Founders who try to run the entire operation remotely with a letterbox structure usually create avoidable friction during review.
The BMA applies a fit-and-proper standard to directors, officers, shareholder controllers and other key persons. The review covers integrity, competence, financial soundness, time commitment and regulatory history. Opaque ownership chains, nominee-heavy structures, unexplained source of wealth, or key persons with weak financial services experience materially reduce approval prospects.
A strong governance package usually includes:
As a practical point, the BMA tends to scrutinize whether the board can challenge founders on custody, market abuse, liquidity and outsourcing risk, not merely approve strategy passively.
Your AML/ATF framework must align with Bermuda’s anti-money laundering regime, including the Proceeds of Crime (Anti-Money Laundering and Anti-Terrorist Financing) Regulations 2008, sectoral guidance and BMA expectations for digital asset businesses. A generic template is not sufficient.
The BMA expects a risk-based control stack covering:
For exchanges and custody providers, the regulator increasingly expects applicants to explain how wallet screening, counterparty risk scoring and off-chain/on-chain monitoring work together in practice.
Cyber and custody controls are now central to Bermuda licensing. The Digital Asset Business (Cyber Risk) Rules 2023 took effect on 1 January 2024, and the Digital Asset Business (Custody of Client Assets) Rules 2025 materially raised the bar for custody models.
You should be ready to evidence:
One nuance many applicants miss: if you rely on a third-party custodian, the BMA still expects you to demonstrate oversight of that arrangement, not merely point to the vendor’s reputation or SOC 2 report.
There is no universal statutory minimum capital figure that works for every Bermuda crypto applicant. Capitalisation is assessed on a risk-based basis by reference to your business model, scale, custody exposure, liquidity needs, outsourcing profile and operational resilience.
Your application should therefore include:
The BMA usually reacts negatively to projections that assume immediate high-volume growth without corresponding staffing, compliance tooling, cyber budget and banking arrangements.
Stablecoin, custody and lending models face the highest scrutiny in Bermuda. For single currency pegged stablecoins, the BMA’s SCPS Guidance issued in November 2024 points to expectations such as:
For lending and repo-style models, the BMA will usually test collateral management, rehypothecation logic, liquidity stress assumptions, counterparty exposure and disclosure of loss allocation. These models are licensable, but they are not reviewed as plain-vanilla wallet products.
Compare Bermuda with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Bermuda is still commonly described as a tax-neutral jurisdiction, but in 2026 that statement needs qualification. Bermuda historically imposed no general corporate income tax, capital gains tax or withholding tax in the way many onshore jurisdictions do. However, a corporate income tax regime effective from 1 January 2025 applies to certain multinational enterprise groups with annual revenue above €750,000,000, at a rate of 15%.
For many founder-led crypto businesses below that threshold, the traditional tax-neutral narrative may still be broadly relevant. For large groups, treasury-backed stablecoin structures, or multinational platforms with consolidated revenue above the threshold, tax analysis must now be done case by case with Bermuda tax counsel and group-level advisers.
The biggest budgeting error is to focus only on the BMA application fee. Your real budget includes legal structuring, local service providers, governance, compliance drafting, audit, cyber controls, custody architecture, Bermuda presence and regulator-response work.
RUE usually advises clients to budget for the full licensing lifecycle rather than only the submission stage. That approach produces more realistic board approval and avoids undercapitalised applications.
A Bermuda crypto license creates a continuing supervisory relationship with the BMA. The real compliance burden starts after approval, especially for custody, exchange and stablecoin models.
In practice, when founders search for a crypto license in Bermuda, they usually mean a license under the Digital Asset Business Act 2018 (DABA). That is the core operating regime for exchanges, custodians, broker-type models, digital asset service vendors, lending structures and similar businesses.
If your project is primarily about issuing digital assets to the public in or from within Bermuda, the relevant regime may instead be the Digital Asset Issuance Act 2020 (DAIA). This distinction matters because many commercial pages incorrectly merge operating licenses and token issuance into one concept. The BMA does not.
RUE starts every Bermuda mandate with scope mapping before drafting documents. That avoids the most expensive licensing mistake: preparing the wrong application for the wrong legal perimeter.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
We first determine whether your model falls under DABA, DAIA or a mixed analysis. This includes activity mapping, issuance analysis, exemption screening and early identification of head office, custody and payments overlap issues. Typical duration: 1-3 weeks.
We structure the Bermuda entity, ownership chain, governance model and local presence plan. This stage also covers controller disclosures, source-of-funds preparation and alignment with Bermuda legal and corporate requirements. Typical duration: 2-5 weeks.
We test your current operating model against BMA expectations for AML/ATF, cyber, custody, client disclosures, outsourcing and financial readiness. The output is a remediation roadmap before formal filing. Typical duration: 2-4 weeks.
We prepare the application pack: business plan, governance documents, AML framework, cyber and custody policies, financial projections, controller files and supporting legal materials. This is usually the most document-intensive stage. Typical duration: 4-10 weeks.
The completed application is submitted to the BMA with the applicable official fee. We check consistency across all annexes before filing to reduce avoidable regulator questions. Typical duration: 1 week.
The BMA review is iterative. Expect detailed questions on ownership, source of funds, custody flow, outsourcing, sanctions controls, reserve logic, redemption mechanics and head office substance. Timing depends heavily on complexity and response quality. Typical duration: 6-20+ weeks.
If the BMA is satisfied, it grants the relevant license class, often with conditions, restrictions or staged expectations depending on the model. We help close conditions precedent and prepare for supervised launch. Typical duration: 1-4 weeks.
We support implementation of ongoing reporting, client disclosures, board governance, audit coordination, AML controls and incident escalation so the business is operationally ready for day-one supervision. Typical duration: ongoing.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
A Bermuda crypto license usually means a Digital Asset Business license under DABA. That is the legal regime for exchanges, custody, broker-type services, lending and similar digital asset activities supervised by the Bermuda Monetary Authority (BMA). If your project is mainly a token issuance to the public, DAIA may apply instead.
You need DABA if you are carrying on digital asset business as an operating activity in or from within Bermuda. You need DAIA if you are issuing digital assets to the public in or from Bermuda. Some models require both analyses at structuring stage, especially where issuance and ongoing platform activity are combined.
There is no universal statutory SLA. In practice, realistic timing is often around 3 to 9 months, but complex exchange, custody or stablecoin applications can take longer. Timing depends on application quality, governance readiness, source-of-funds transparency, BMA questions and whether your model needs significant remediation before filing.
Class F is the full license, Class M is a modified license usually subject to tailored restrictions or transitional conditions, and Class T is a testing license for pilot or beta-stage activity. The correct class is determined by the BMA based on your maturity, controls and risk profile, not by applicant preference alone.
There is no one-size-fits-all fixed capital number that safely applies to every DABA applicant. Capital adequacy is assessed on a risk-based basis, taking into account your business model, client asset exposure, custody design, liquidity needs, outsourcing and projected scale. Be cautious with websites quoting a universal minimum such as US$100,000 without current official support.
Yes. Foreign ownership is possible, but the structure must still satisfy Bermuda regulatory expectations. The BMA will examine whether the business is carried on in or from within Bermuda, whether ownership and controllers are transparent, and whether local presence, head office and governance arrangements are sufficient for effective supervision.
For many non-Class T businesses, you should assume that meaningful Bermuda presence will be required. The legal question is broader than leasing office space: the BMA looks at the head office requirement, including where direction and management occur, where records are kept, where senior oversight sits and whether the business can be supervised effectively from Bermuda.
Under DABA, unlicensed digital asset business can be punished by a fine of up to US$250,000 and/or up to 5 years imprisonment. The BMA may also impose supervisory and civil penalties, with certain breaches attracting fines up to US$10,000,000. Under DAIA, relevant offences can attract fines up to US$100,000 and/or imprisonment up to 5 years.
Yes. Stablecoin projects are among the most scrutinized models. The BMA’s Single Currency Pegged Stablecoin Guidance from November 2024 points to expectations on full reserve backing, high-quality liquid assets, independent monthly reserve attestation, redemption rights, governance and operational resilience. If custody is involved, the 2025 custody rules also become central.
That statement is now incomplete. Bermuda remains tax-efficient in many cases, but from 1 January 2025 a 15% corporate income tax regime applies to certain multinational enterprise groups with annual revenue above €750,000,000. Smaller businesses may still be outside that regime, but group-level tax analysis is essential before relying on a zero-tax assumption.
Yes. RUE supports the full Bermuda licensing lifecycle: scope analysis, company setup, legal drafting, AML/ATF framework, governance design, BMA-facing application work, banking strategy and post-licensing compliance coordination. We also assist with related banking and local regulatory coordination.
