Digital Assets Services Provider (DASP) License

A DASP license authorizes a natural or legal person to conduct digital asset services as their ordinary business activity. Registration is not optional where these activities are present: it is a precondition for legal operation.

The four activities that trigger mandatory DASP registration in most adopting jurisdictions are:

• Digital asset custody: holding or administering digital assets on behalf of clients;

• Buying or selling digital assets against legal tender: fiat-to-crypto exchange operations (on/off-ramping) ;

• Trading digital assets against other digital assets: crypto-to-crypto exchange services;

• Operating a trading platform for digital assets: running a marketplace where third parties transact.

Beyond these four core triggers, certain jurisdictions extend registration or licensing requirements to additional activities: portfolio management of digital assets, placement of digital assets with or without a guarantee, and investment advice relating to digital assets. The specific scope varies by market; operators should confirm the full activity list in each target jurisdiction before commencing operations.

Any crypto business or financial institution engaging in one of the four core triggering activities in a DASP jurisdiction requires registration.

This applies to domestically incorporated entities and, in many cases, to foreign companies actively marketing services to residents of that jurisdiction.

It also applies to cross-industry business models, such as GameFi (crypto and gambling licensing) or crypto securitization (crypto and investment licensing).

Personnel requirements matter as much as corporate structure. Regulators assess the individuals behind the application, not only the entity. Executives, senior managers, and significant beneficial owners must pass background checks demonstrating good repute and professional competence.

Criminal records involving financial fraud, money laundering, or comparable offences are typically disqualifying for any controlling individual, regardless of their formal title or shareholding percentage. The same checks apply to anyone who exercises effective control over the applicant, regardless of their official title or shareholding percentage.

Businesses that have been operating without a license in a jurisdiction that requires DASP registration face the risk of forced cessation of activities and regulatory sanctions.

The better approach is to assess licensing requirements before commencing operations, not after a regulator has identified the activity.

Costs vary substantially by jurisdiction, by activity class, and by whether the application involves registration (a lighter-touch process) or full licensing (a more extensive authorization with stricter requirements).

El Salvador is the most cost-accessible DASP jurisdiction currently operating. The initial registration fee under the Digital Assets Issuance Law (LEAD Law) is 5,475 USD. This one-time payment is due within 10 business days of a favorable resolution from the National Digital Assets Commission (CNAD). There are no annual licensing fees structured at comparable levels to more established financial regulators, and the jurisdiction’s overall compliance cost base is low relative to European equivalents. El Salvador also offers registered DASPs specific tax benefits under Article 36 of the LEAD Law, a meaningful consideration for businesses with a flexible domicile strategy.

France historically offered DASP registration through the AMF (Autorité des Marchés Financiers) under the PSAN framework, with costs varying by activity class and whether the company sought registration or optional licensing. As of December 30, 2024, France’s PSAN regime has been superseded by the EU’s MiCA regulation, which replaces jurisdiction-specific DASP frameworks across all EU member states with a harmonized CASP authorization process. Companies previously registered under the AMF’s DASP framework must transition to MiCA compliance. New applicants targeting EU market access should evaluate MiCA authorization rather than a legacy DASP registration.

Brazil has developed its own digital asset regulatory framework through the Central Bank of Brazil, with the Virtual Asset Service Provider authorization process emerging as the primary licensing pathway for crypto businesses. Costs and timelines in Brazil reflect the scale of the market and its regulatory infrastructure.

The practical cost difference between jurisdictions extends well beyond the headline registration fee. Professional fees for application preparation, local legal representation, corporate administration, and ongoing compliance support often exceed the regulatory filing costs. Founders comparing jurisdictions should evaluate total cost of compliance over a 12-month operational horizon.

Where Should You Incorporate Your DASP Company?

Three jurisdictions currently use DASP as both a regulatory label and an active licensing mechanism:

El Salvador is the priority DASP jurisdiction for founders seeking a straightforward path to a regulated crypto entity at low cost. The LEAD Law, enacted in 2023, established the CNAD as the supervisory authority and created a registration pathway explicitly designed to attract digital asset businesses. The jurisdiction offers tax exemptions for registered DASPs and certifiers on income derived from digital asset activities. El Salvador’s DASP framework covers custody, exchange, trading platform operation (crypto exchange), and several advisory activities. The registration process is documented, the evaluation period is capped at 20 business days for final applications, and the CNAD publishes a list of registered DASPs providing market transparency. For a crypto exchange or custody provider targeting Latin American and global markets, El Salvador represents a compelling first license.

France operated the PSAN (Prestataires de Services sur Actifs Numériques) framework as the EU’s first formal DASP registration regime. The AMF oversaw reputational and competence checks while the ACPR handled AML/CFT assessment, a dual-regulator structure reflecting France’s broader financial supervisory architecture. Two authorization levels existed: mandatory registration for four core activities, and optional licensing carrying enhanced conduct-of-business obligations. After December 2024, MiCA has replaced this framework entirely. Companies with existing French DASP registrations are operating under transition provisions or secured a CASP license already. The French experience is historically significant as the originating DASP model, and many structural concepts embedded in El Salvador’s LEAD Law can be traced to the AMF’s framework. New EU market access, however, now flows through MiCA rather than any national DASP regime.

Brazil requires VASP authorization for companies providing digital asset services to Brazilian residents. The Central Bank of Brazil regulates the market under legislation enacted in 2023. Authorized entities gain the ability to operate legally in one of the largest retail crypto markets in the world. Brazil’s process involves corporate establishment in the country, capital requirements, and an AML/CTF compliance program aligned with FATF standards.

For founders not specifically targeting El Salvador, Brazil, or historical French registration, alternative frameworks merit consideration. MiCA authorizes CASP operations across all 27 EU member states from a single license. VASP licensing frameworks in jurisdictions such as the Cayman Islands, the UAE, and Georgia offer established alternatives with distinct cost and market access profiles. The right jurisdiction depends on the operator’s target market, corporate structure, ownership profile, and timeline.

Request advice from a specialist for free

Step-by-Step Registration Process

The registration pathway is broadly consistent across DASP jurisdictions, with jurisdiction-specific documentation requirements layered on top of a shared structural logic.

1. Scope Assessment Determine whether your business activities fall within the regulated activity list for the relevant jurisdiction. An exchange that trades only crypto-to-crypto occupies different regulatory territory than a custody provider accepting fiat deposits. The scope assessment should cover both current activities and any planned services within the first 12 months of operation, since expanding into a new regulated activity category post-registration typically requires a separate notification or amendment.

2. Pre-Registration Consultation Several DASP regulators, including the CNAD in El Salvador, offer or require a pre-registration phase. This preliminary engagement allows regulators to review the business model before a formal application is lodged and may identify compliance gaps that can be addressed before the clock starts on the formal evaluation period. Submitting an application with known deficiencies is not a strategy; it resets deadlines and consumes regulatory goodwill.

3. Application Submission The formal application includes a Programme of Operations covering the business model in detail: operational workflows, fund flows, custody arrangements, and how the company proposes to meet each regulatory requirement. Supporting materials typically include constitutional documents, shareholder and UBO information, a Cybersecurity Self-Assessment Questionnaire, background documentation for directors and beneficial owners, an AML/CTF policy, and evidence of financial resources. In El Salvador, the CNAD requires both the pre-registration form and the definitive registration documentation, structured according to the authority’s published requirements guide.

4. AML/CTF Compliance Demonstration Regulators assess whether the applicant has a credible AML/CTF program in place before registration is granted. This means documented customer due diligence procedures, transaction monitoring processes, sanctions screening, suspicious activity reporting protocols, and a compliance officer with appropriate authority and resources. A policy document submitted without an operational infrastructure behind it will not satisfy a competent regulator.

5. Fit and Proper Checks Background checks on executives and beneficial owners are standard. The AMF’s framework required demonstration of good repute and professional competence. The CNAD applies equivalent criteria. These checks take time to complete and are not amenable to shortcuts. Where an applicant has individuals in controlling positions whose background may be scrutinized, legal advice on how to structure and present the application is warranted before submission.

6. Financial and Organizational Requirements Depending on the jurisdiction and activity class, requirements may include professional indemnity insurance, minimum own funds, or specific capital adequacy conditions. All DASP applicants must demonstrate that they have sufficient human and technical resources to carry out the registered activities. An understaffed compliance function or an IT infrastructure that cannot support transaction monitoring requirements will not satisfy regulatory expectations.

7. Evaluation Period The regulator reviews the application and issues either a favorable or unfavorable resolution. In El Salvador, the CNAD’s maximum evaluation period for a final application is 20 business days. A material change to the application during the evaluation period can reset this timeline. The CNAD also notifies the Financial Intelligence Unit (UIF) upon granting a registration seat, completing the regulatory chain of custody.

8. Fee Payment and Registration Granting Upon a favorable resolution in El Salvador, the USD 5,475 registration fee is due within 10 business days. Failure to pay within this window risks forfeiture of the favorable resolution. Once paid, the applicant receives a certificate authorizing operation as a registered DASP.

Registration is not the end of the compliance obligation. It is the beginning of an ongoing relationship with the regulator.

Registered DASPs must maintain their AML/CTF program as an operational reality, not a document on file. This includes ongoing transaction screening against sanctions lists, periodic VASP risk assessments on counterparty relationships, and suspicious activity reporting to the relevant financial intelligence unit. In El Salvador, the CNAD monitors registered entities and publishes a list of delisted DASPs, providing clear visibility of the consequences of non-compliance.

Grounds for delisting include: non-compliance with registration requirements, obtaining the registration through irregular means, and a lack of genuine business activity for a period of six to twelve months. The last ground is often overlooked. A DASP that is registered but not actively operating risks losing its registration under inactivity provisions, which has obvious implications for any business that acquires a DASP license before full product launch.

Beyond AML/CTF, operational obligations include cybersecurity maintenance, consumer protection compliance, and notification requirements when material changes occur to the business model, corporate structure, or personnel. Any change that touches the information disclosed during registration typically requires prior notification to or approval from the regulator. Treating the registration as a static document is a compliance risk.

Token issuance isn’t necessarily comprised as a fully permitted activity under a DASP license, regulatory authorities may require the notification of a white paper first.

Operating without a required license triggers regulatory exposure that can include forced cessation of activities, withdrawal of any registration, and potential sanctions against the company and its officers.

Beyond enforcement risk, unlicensed operations face significant friction with banking partners. Financial institutions conducting AML/CTF due diligence on crypto businesses routinely decline to provide accounts to entities that cannot demonstrate licensed status in at least one credible jurisdiction.

El Salvador’s LEAD Law creates specific tax advantages for registered DASPs and certifiers under Article 36, covering income derived from licensed digital asset activities.

For businesses with flexibility in their corporate structure, this represents a material cost difference relative to jurisdictions with standard corporate tax rates applied to crypto income.

Being listed on a regulator’s published registry of licensed DASPs changes how institutional counterparties and sophisticated investors perceive the business.

Retail clients increasingly seek confirmation that the service provider they are using is subject to regulatory oversight. A DASP registration is a verifiable, publicly accessible credential. An unlicensed competitor cannot claim the same.