Is Crypto Legal in Mauritius? Licensing, the VAITOS Act and How to Check a Platform

Is crypto legal in Mauritius?

Mauritius has a dedicated law for the business side of crypto, which is a different thing from banning it. The Virtual Asset and Initial Token Offering Services Act 2021 (the VAITOS Act) came into force on 7 February 2022, according to the Financial Services Commission's own communique and FAQ, both dated 9 February 2022. Those documents are a few years old, so check the FSC website for later amendments or guidance. It sets up a licensing framework for businesses that deal in virtual assets for other people, and for companies that offer tokens to the public. In plain terms, the country chose to regulate crypto service businesses rather than prohibit them.

That is not the same as saying every crypto product is safe, approved or guaranteed. The Bank of Mauritius has said, in a public notice dated 9 August 2017, that cryptocurrencies are not issued or guaranteed by the Bank, that users are exposed to risks, and that it would not accept responsibility for losses from dealing in unregulated cryptocurrencies. That notice predates the VAITOS Act, so read it as the central bank's position on risk, not as a description of today's licensing system.

This is education, not legal advice. Laws and notices change, and anyone making a business or large personal decision should check the current text and speak to a qualified Mauritian lawyer.

What does the VAITOS Act actually cover?

The FSC's FAQ defines a virtual asset as a digital representation of value that may be digitally traded or transferred and may be used for payment or investment purposes. It excludes digital representations of fiat currencies, securities and other financial assets that fall under the Securities Act. The Act regulates two main groups. The first is virtual asset service providers (VASPs): businesses that, for or on behalf of another person, exchange virtual assets for fiat currency, exchange one virtual asset for another, transfer virtual assets, keep virtual assets or the means of controlling them safe, administer them, or take part in an issuer's offer and sale of a virtual asset. The second is issuers of initial token offerings (ITOs), meaning companies that offer tokens to the public in exchange for fiat currency or another virtual asset.

The FAQ lists several licence classes: Class M (virtual asset broker-dealer), Class O (wallet services, covering transfers), Class R (custodian), Class I (advisory services) and Class S (virtual asset marketplace, the category for exchanges). It also lists things the Act does not apply to, including closed-loop items that cannot be transferred, exchanged or used for payment or investment, and digital currencies issued by a central bank.

Why this matters to a reader: the class tells you what a business is permitted to do. A company licensed to give advice is not thereby a licensed exchange, and a licence for one class does not cover custody of your coins. When a platform says it is 'FSC regulated', the right follow-up is: which class, and for which activity.

Who regulates what: the FSC and the Bank of Mauritius

According to the FSC FAQ, the Act empowers the Financial Services Commission to regulate and supervise VASPs and ITO issuers within the non-bank financial services sector. The FSC's stated powers include issuing licences, maintaining a register of all VASPs and ITO issuers, monitoring their activity, issuing guidelines, promoting investor education, and carrying out on-site inspections. The FAQ also says the FSC will keep the public informed about possible scams through communiques and investor alerts.

The Bank of Mauritius has a separate role. The FAQ explains that banks and holders of licences under the National Payment Systems Act can also seek a VASP licence, but need the Bank of Mauritius's written approval first, and some classes can only be issued to a subsidiary rather than the bank itself. In public notices, the Bank and the FSC have also jointly cautioned people about unregulated investment opportunities, which we cover below.

For a licensed Mauritian VASP the FAQ describes baseline requirements: a registered company carrying on business in or from Mauritius, directed and managed from Mauritius, with a physical office in Mauritius, and with controllers, beneficial owners and officers meeting the FSC's fit-and-proper criteria. These are real hurdles, which is part of why a claimed licence deserves checking: anyone can write 'regulated' on a website.

How do I check whether a platform is FSC-licensed?

The FSC publishes a register of licensees on its own site (the search page is linked in our sources). The Bank of Mauritius notice of 5 February 2026 tells the public to consult www.bom.mu and www.fscmauritius.org for lists of duly licensed, authorised or registered entities. Do the check yourself by typing the address into your browser, not by clicking a link someone sent you, because lookalike sites are a standard tactic.

A workable routine: write down the exact legal name of the company (not the app brand), search the register for that name, note the licence class and status, and compare it with what the platform says about itself. Then confirm the contact details and the website address match what the register shows. If the company is not on the register, or you cannot match the name, treat that as a stop sign and not as a paperwork gap you can ignore. We could not test how the register behaves for every search term from our environment, so if the register is hard to search, phone the FSC using the contact details on its own website.

Also remember that a licence check tells you a business is authorised, not that your investment will make money. Being licensed does not remove market risk.

What are the warning signs of unlicensed or scam schemes?

The Bank of Mauritius and the FSC published a joint public notice on 5 February 2026 warning about unregulated investment opportunities advertised through social media and other informal channels, including ones involving virtual assets. The red flags it describes line up with scams seen elsewhere: unusually high or unrealistic returns in a short time, aggressive pressure and refusal of standard payment methods, heavy emphasis on referral commissions, schemes that exist mainly on social media with little physical presence, and promoters using influencers to claim unrealistic returns. The notice advises people to deal only with licensed providers and to seek advice to understand the product and its risks.

Add the habits we teach across this site. Be wary of anyone who contacts you first and moves the conversation to a private chat. Be wary of 'guaranteed' returns, of 'recruit friends to earn more' structures, of a platform that shows profit on screen but charges a fee before you can withdraw, and of any request for your seed phrase or remote access to your device. Our guides on the pay-to-withdraw scam, paid signal groups and the crypto scams checklist go through these in detail.

If you suspect a scheme, the notice lists contact details for both institutions; check the notice itself for the current phone numbers and emails rather than copying them from a message.

What protections exist if something goes wrong?

The FSC FAQ is direct on this point. If you have a problem with a VASP or ITO issuer, you should first raise it with the company. If it is not resolved to your satisfaction you may take the complaint to the Office of the Ombudsperson for Financial Services. The FAQ also states that there are no specific or statutory compensation funds in Mauritius that apply to clients of VASPs and ITO issuers for losses caused by their services. In other words, even with a licensed provider you do not have a deposit-insurance-style safety net, and with an unlicensed one you have even less.

The FAQ and communique also describe penalties for operating without a licence: under the Act an unlicensed person carrying on VASP or ITO issuer business in or from Mauritius commits an offence, with a fine of up to 5 million rupees and imprisonment of up to 10 years. That protects you indirectly, because it gives the authorities a basis to act, but it does not return lost funds on its own.

Practical takeaway: keep screenshots and transaction records, report suspected schemes to the authorities, and never size a position on the assumption that someone will make you whole. Our scam-recovery guide covers the first hours after a loss. This guide is educational, not legal or financial advice.

FAQ