Frequently asked questions about financing and money services

The Act primarily applies to services such as credit, financial leasing, funds transmission, cheque cashing, currency exchange, and the provision of money orders or travellers’ cheques; electronic and mobile payments must also be assessed based on the actual model. Financing licences and money-services licences are distinct. A licence under this Act cannot be treated as covering insurance, investment or virtual-asset business.

Risk warning:Presenting payment or foreign exchange services as ordinary corporate receipts and payments may cause licensing requirements to be overlooked.

FinTech activity alone does not establish that a regulatory sandbox is available or that an exemption applies. The verified financing and money services amendments concern FinTech financing and lending, but the existence of categories and fee schedules does not mean applications are currently open. Whether a regulatory sandbox is covered by a specific instrument, its entry conditions and its legal effect must be confirmed with the FSC on a case-by-case basis under the latest materials.

Risk warning:Treating sandbox consultation or category names as authorization to conduct business may constitute unlicensed business activity.

The Act provides separate licensing routes for financing licences and money services licences. Under the business classifications verified, A covers money transmission and electronic or mobile payments; B covers money orders, travellers’ cheques, cheque cashing and exchange; C is financing; D is financial leasing; and E is ATM operation. The existence of fee entries for F and G alone does not establish that they are open; the currently applicable materials must be checked.

Risk warning:Treating historical classifications or fee items as currently available qualifications may result in choosing the wrong licensing route.

A money-services licence may cover money transmission, cheque cashing, currency exchange, and the issuance, sale or redemption of money orders or travellers’ cheques; electronic, mobile and other payment-transmission methods also require assessment. The actual permitted scope depends on the authorised activities and licence conditions and does not automatically include financing, insurance or virtual-asset services.

Risk warning:Authorization to provide remittance services does not mean that other financial activities are also authorized.

Conducting money exchange in or from the BVI as a business should be assessed for a money services licence; ordinary company registration is not a substitute for that licence. A licensed institution must maintain adequate capital resources, customer due diligence and anti-money laundering controls. If it holds customer funds, it should also implement segregation and reconciliation. Virtual-asset exchange requires a separate assessment of the VASP boundary.

Risk warning:Treating virtual asset exchange as ordinary currency exchange alone may result in additional registration requirements being overlooked.

Cross-border remittances should be supported by a risk-based KYC process covering customer and beneficial-owner verification, source of funds, enhanced due diligence for high-risk customers, sanctions screening and escalation of suspicious activity. Travel Rule information fields, transmission methods and scope must be confirmed separately for fiat or virtual-asset transfers under current applicable materials; the rules for one must not be applied directly to the other.

Risk warning:Missing transfer information may result in a transaction being rejected or create an AML compliance gap.

The distinction is not the label “finance company” or “lending company,” but whether the actual activities involve regulated credit or financial leasing. Activities that fall within the definition of financing business must be conducted under an FMS licence and its conditions, with ongoing management of capital, lending practices and risk. That licence is not authorization to accept deposits as a bank.

Risk warning:Operating regulated financing under the name of an ordinary lending company may constitute unlicensed business.

A single paid-up capital or net capital amount should not be applied to every Money Services model. Licensees must remain financially sound and maintain capital resources and any prescribed deposits or investments under the applicable requirements and licence conditions. Budgets should cover business volumes, liabilities, liquidity and stress scenarios. If capital falls below the requirement, the FSC must be notified immediately in writing.

Risk warning:Directly equating shareholder contributions with regulatory capital may conceal a capital shortfall.

A BVI licensee must have at least two natural-person directors, and the appointment of directors and senior officers requires prior written approval. CO, MLRO and functions interfacing with operations, reconciliation, risk and audit should also be assigned in accordance with applicable requirements. The latter are recommended responsibility arrangements, not uniform statutory headcount requirements; authorized-representative arrangements should be checked against the licence conditions.

Risk warning:Having nominal role-holders in place without anyone actually performing the duties may result in control failures.

A BVI Money Services licence may be assessed for cross-border funds transfer or payment business conducted from the BVI, but it is not a passport into Asian markets. Applicability depends on the customer’s location, marketing, receipt and settlement of funds, agents, and control of client funds. Market access and banking-partner conditions must be confirmed independently.

Risk warning:Providing services to overseas clients solely on the basis of a BVI licence may breach local market-entry requirements.

Anti-fraud controls should be proportionate to customer, channel and transaction risks; it should not be claimed that a uniform designated system or fixed technical parameters exist. In practice, it is advisable to implement alerts for unusual transactions, verification of payment details, manual escalation, access controls and incident records, linked to AML monitoring and customer-fund protection. Confirm specific requirements against the licence conditions.

Risk warning:If the system raises an alert but there is no closed-loop handling process, customer funds may still be lost.

The provision of ancillary services such as fiat currency receipt and payment within the permitted scope may be assessed, but a Money Services licence does not automatically authorize virtual-asset exchange, transfer, custody or exchange operations. Whether VASP registration is required depends on whether services are provided on behalf of clients and on the actual degree of access to assets, private keys or control tools. Hybrid models should be assessed separately.

Risk warning:Actually controlling clients’ virtual assets under the guise of providing ancillary payment services may trigger VASP requirements for which no authorisation has been obtained.

An outsourcing risk assessment should cover the service provider’s capability, financial soundness, data security, subcontracting, continuity of service and exit arrangements, with evidence of oversight retained. It is advisable to specify service standards, reporting and audit rights in the contract. These are practical control recommendations; specific approval or notification obligations must be confirmed separately under insurance or money services rules and licence conditions.

Risk warning:Lack of oversight after outsourcing a key service may cause business interruption or control failures.

A licensed entity must segregate client assets through separate accounts; simply recording them in internal ledgers while mixing them with operating funds is insufficient. An institution that actually holds or transmits funds should clearly define account purposes, operating permissions, reconciliation and error-handling processes, and retain evidence of fund traceability. The specific account arrangements must comply with applicable requirements and licence conditions.

Risk warning:Commingling client funds with company funds may jeopardize the security of client funds.

Changes in key personnel cannot uniformly be handled by notification after the event. Directors and officers of an FMS must obtain the FSC’s written approval in advance; departures must be notified within seven days. Applicable approval forms should be checked for a CO and others, while an MLRO should be handled separately under the AML framework. Changes in insurance personnel should be assessed by role, insurance regulations and licence conditions to confirm the approval and notification procedures.

Risk warning:Taking up an appointment before obtaining the required approval may breach licensing requirements.

Different licensed entities within a group may divide and coordinate their functions, but this does not establish mutual recognition of licences or automatic cross-border authorization. Clarify the contracting entity, marketing entity, underwriting or payment-execution entity, custody of funds and responsibility for complaints. Market access and outsourcing requirements in Hong Kong and Singapore must be confirmed separately based on the activities conducted there.

Risk warning:A mismatch between the division of responsibilities among entities and actual operations may result in cross-border unlicensed services.

Its value should be assessed based on business necessity, permitted scope, customers and geography, capital, personnel, banking and reinsurance partnerships, and ongoing costs, rather than by reference to “zero tax” or “confidentiality.” Insurance and money services should be assessed separately. A sustainable division of functions within a group may be possible only where the regulatory structure matches the genuine business.

Risk warning:Focusing only on ease of incorporation and overlooking ongoing compliance costs may make the project difficult to sustain.

A process should be established under which employees identify anomalies, escalate them internally to the MLRO, and the MLRO assesses and reports them under the applicable rules, while retaining the basis for decisions and controlling access to information. An internal alert does not mean that a statutory SAR has been filed, and a general notification to the FSC should not be treated as a SAR. The receiving authority, triggers and deadlines must be checked against the latest applicable documents.

Risk warning:Inadvertently disclosing the fact of a report to a client may undermine controls over the confidentiality of reporting.

The BVI FSC supervises the AML/CFT compliance of financial institutions under its oversight, but regulatory inspections, receipt of suspicious activity reports and criminal law enforcement should not all be described as FSC functions. The competent authority must be identified separately for each matter. The specific name of the SAR receiving authority and the reporting channel must be confirmed against the latest applicable AML documents.

Risk warning:Confusing the functions of authorities may result in a report being sent through the wrong channel.

It should not be asserted categorically that all IT systems or data must be located in the BVI. Distinguish record-keeping requirements for a licence, local office requirements, outsourced access and economic substance requirements. For example, a principal office of an FMS licensee in the BVI must maintain records sufficient to explain transactions and prepare reports. Data flows, audit rights and continuity for cloud services should also be clearly addressed.

Risk warning:Records that cannot be obtained promptly may hinder regulatory inspections.

Do not impose a uniform internal or external audit frequency on all institutions, and distinguish independent AML testing from financial-statement audits. Develop a testing plan based on business risk, control changes, and prior findings, and track remediation. Confirm specific cycles and independence requirements against the licence and AML materials; the FSC’s risk-based inspections also do not follow a fixed on-site schedule.

Risk warning:Treating a financial audit as an AML test may leave control blind spots.

Do not assume that reporting to one jurisdiction can replace obligations in another. We recommend listing each entity, business location, reporting trigger, recipient channel and confidentiality restriction individually, with the MLRO coordinating the process. In the event of a genuine conflict of laws, have professional advisers in the relevant jurisdictions confirm the position against the latest documents, while retaining records of the analysis and communications.

Risk warning:Self-offsetting obligations against one another may result in underreporting.

AML violations may give rise to regulatory enforcement. Whether they constitute criminal liability, what penalties apply and who bears responsibility must be assessed in light of the specific conduct, responsible parties and the latest AML documents. General control deficiencies should not be equated with criminal offences, and unverified fines or prison terms should not be listed. If an issue is identified, preserve the evidence and escalate it promptly.

Risk warning:Delaying action on known deficiencies may broaden the impact of non-compliance.

When application information changes, key personnel or control are to be changed, a material control deficiency arises, or a new product falls outside the existing business scope, promptly assess whether communication with the FSC or approval is required. Notification deadlines and prior-approval requirements vary by licence; they should not all be described as “immediate notification.” Proactive communication does not replace statutory approval or SAR filing.

Risk warning:Oral communication alone may omit a required written approval.

A business plan should clearly present services, clients and territories, fees and fund flows, governance personnel, financial projections, and stress scenarios, with key statements supported by contracts, system permissions, and policies. A complete and executable plan can assist review, but no template or adviser can guarantee successful FSC approval.

Risk warning:Copying a template without being able to implement the controls may reveal inadequate operational capability.

Meetings or calls should be arranged according to the communication needs of each case; no fixed frequency or guaranteed meeting can be promised. In practice, a concise business description, issues requiring clarification, and a list of participants can be submitted in advance, with action items recorded afterwards. Preliminary discussions are not pre-approval and do not guarantee a shorter review time.

Risk warning:Treating oral discussions as authorization to operate may result in opening without a licence.

There is no uniform notification deadline for changes in key personnel applicable to all licensees. First determine whether prior approval is required, then check notification requirements for appointments, departures and changes in information. For example, directors and senior officers of a financing and money services business require prior written approval, and departures must be notified within 7 days; this deadline must not be applied to all licences.

Risk warning:Having personnel perform their duties before obtaining regulatory approval may breach appointment requirements.

Changes in capital must take account of ongoing capital adequacy, financial soundness and approval requirements for changes in ownership or control; it is not enough to consider whether capital remains above a particular amount. Each licence must be assessed under its own rules. For example, a financing and money services licensee must notify the FSC in writing immediately if its capital resources fall below the requirement. A share issue, capital reduction or restructuring should be checked before implementation.

Risk warning:Capital adjustments may cause the entity to fall below ongoing regulatory requirements.

A written loan agreement should specify the purpose, interest, term and repayment arrangements, with records retained for the source of funds, decision-making and management of conflicts of interest. These are prudent control recommendations; specific approvals depend on the law, articles and transaction documents. Whether the arrangement constitutes a financing business or a relevant economic-substance activity must be assessed according to the actual model and cannot be determined uniformly.

Risk warning:Continuing financing activities without assessing licensing requirements may result in unlicensed business.