Mauritius Crypto Regulation: The VAITOS Act & Security Tokens

A Comprehensive Regulatory Framework

While early guidance from 2019 set the stage, the regulatory landscape in Mauritius underwent a transformative shift with the enactment of the Virtual Asset and Initial Token Offering Services (VAITOS) Act 2021.

This landmark legislation moved the jurisdiction beyond simple “guidance notes” to a fully codified legal framework. It appointed the Financial Services Commission (FSC) as the primary regulator for the sector, tasked with overseeing all virtual asset service providers (VASPs) and issuers of initial token offerings (ITOs).

The VAITOS Act: Five Classes of Licenses

The VAITOS Act introduced a structured licensing regime that categorizes crypto businesses into five distinct classes. This clarity has been a major draw for international firms looking to set up compliant offshore operations, as it removes the ambiguity often found in other jurisdictions.

• Class M (Broker-Dealer): This license is designed for entities executing orders for clients, engaging in market making, or trading virtual assets for their own account. It covers both high-frequency trading firms and OTC desks.
• Class O (Wallet Services): This category regulates providers of custody solutions that hold private keys or transfer virtual assets on behalf of clients. It enforces strict cybersecurity and segregation of funds standards.
• Class R (Custodian): A specialized license for entities responsible for the safekeeping and administration of virtual assets, often serving institutional clients or funds.
• Class I (Advisory): For firms providing investment advice regarding virtual assets, ensuring that advisors meet specific competency and conduct requirements.
• Class S (Marketplace): This license authorizes the operation of virtual asset exchanges (centralized or decentralized) that facilitate the trading of digital assets.

Crucial Distinction: Virtual Assets vs. Security Tokens

One of the most important aspects of the Mauritius framework is the clear legal separation between “Virtual Assets” and “Security Tokens.” This distinction determines which act applies to a business model.

• Virtual Assets: These are governed by the VAITOS Act. This category includes cryptocurrencies (like Bitcoin), utility tokens, and other digital representations of value used for payment or investment purposes.
• Security Tokens: These remain governed by the Securities Act 2005. The FSC has clarified that if a digital asset represents a share, debenture, or derivative, it is treated exactly like a traditional security.

This means that while the VAITOS Act streamlined the process for crypto exchanges and utility tokens, Security Token Offerings (STOs) remain subject to the stricter prospectus and reporting requirements of traditional capital markets. Issuers must still seek FSC approval unless they fall under specific exemptions, such as offers limited to Sophisticated Investors, Expert Funds, or Specialized Collective Investment Schemes.

Global Reputation & Compliance

The implementation of these strict laws was instrumental in Mauritius’s removal from the Financial Action Task Force (FATF) “Grey List” in October 2021. The FATF is the global money laundering and terrorist financing watchdog.

By aligning its anti-money laundering (AML) and counter-terrorism financing (CFT) standards with global best practices, Mauritius has positioned itself as a “whitelisted” jurisdiction. This status is vital for institutional investors, as it ensures that funds domiciled in Mauritius can interact seamlessly with global banking systems without triggering automatic compliance flags or blocked transactions.

About Mauritius

Mauritius is an island nation in the Indian Ocean known for its political stability and robust financial services sector. Current President Prithvirajsing Roopun (elected in 2019) presides over a population of approximately 1.26 million. The country serves as a strategic gateway for investment into Africa and Asia, leveraging an extensive network of Double Taxation Avoidance Agreements (DTAAs).

Conclusion

What began as cautious guidance in 2019 has evolved into one of the world’s most sophisticated offshore frameworks for digital assets. By clearly defining the rules of the road for both utility tokens (via VAITOS) and security tokens (via the Securities Act), Mauritius offers a level of legal certainty that few other jurisdictions can match.