A Virtual Asset Service Provider (VASP) is a business that provides services involving virtual assets on behalf of customers, including exchange, transfer, custody, and administration. As digital asset adoption continues to grow, regulators worldwide have introduced dedicated frameworks to strengthen anti-money laundering (AML) controls, enhance consumer protection, and support the responsible development of the virtual asset industry.
Among the most significant regulatory frameworks are the European Union's Markets in Crypto-Assets Regulation (MiCA) and Hong Kong's VASP licensing regime administered by the Securities and Futures Commission (SFC). Although both aim to establish clear regulatory standards for virtual asset service providers, they differ in areas such as licensing scope, prudential requirements, cross-border market access, and ongoing compliance obligations.
This guide compares the EU MiCA framework with Hong Kong's VASP licensing regime, highlighting their key differences and helping businesses better understand the regulatory considerations for operating across multiple jurisdictions.
What Is a VASP? The FATF Definition and Global Baseline
The term VASP was formally introduced by the Financial Action Task Force (FATF) in its updated Recommendation 15 in June 2019. FATF defines a VASP as any entity conducting, as a business, one or more of the following: exchange between virtual assets and fiat currencies; exchange between virtual assets; transfer of virtual assets; safekeeping and/or administration of virtual assets; or participation in financial services related to an issuer's offer or sale of a virtual asset. This FATF baseline underpins both MiCA and Hong Kong's VASP regime, though each jurisdiction has adapted scope, capital thresholds, and enforcement timelines to reflect local market conditions. The rapid growth of
stablecoins for business and
blockchain-based cross-border payments has expanded what regulators consider in-scope VASP activity — making cross-jurisdictional compliance planning essential for any enterprise operating in multiple markets.
EU MiCA: The World's First Comprehensive Crypto Regulatory Framework
MiCA (Regulation (EU) 2023/1114) was published in the EU Official Journal on June 9, 2023 and implemented in phases: stablecoin provisions (EMTs and ARTs) from June 30, 2024; full CASP authorization requirements from December 30, 2024.
Three-Tier Asset Classification
MiCA divides crypto-assets into three regulated categories. E-Money Tokens (EMTs) — pegged 1:1 to a single fiat currency — must be issued by an authorized credit institution or e-money institution holding full fiat reserves. Asset-Referenced Tokens (ARTs) — backed by a basket of assets — require explicit authorization and are subject to a €200 million daily transaction volume cap. All other crypto-assets carry lighter-touch issuer disclosure requirements. For a thorough breakdown of how these categories compare to central bank digital currencies, see our guide on
stablecoins vs CBDCs.
Single-Passport Licensing
Once a Crypto-Asset Service Provider (CASP) — MiCA's equivalent of a VASP — obtains authorization in any EU member state, it can passport that license across all 27 EU countries without separate applications. This mechanism provides access to 450 million consumers through a single authorization, dramatically reducing the marginal compliance cost of EU-wide market entry.
Capital Requirements and AML / Travel Rule
Minimum own funds range from €50,000 for custody and administration services to €125,000 for exchange services and operation of trading platforms. National regulators may impose higher requirements based on individual risk assessment.
All CASPs must implement Customer Due Diligence (CDD) and Anti-Money Laundering (AML) procedures and comply with the Transfer of Funds Regulation (TFR), which extends the Travel Rule to virtual asset transfers above €1,000 — requiring originator and beneficiary identification data to accompany each transaction.
Hong Kong SFC VASP Regime: Asia's Regulatory Benchmark
Hong Kong's Virtual Asset Trading Platform (VATP) licensing regime under the AMLO establishes one of the world's most rigorous VASP frameworks, targeting centralized virtual asset exchanges operating in or from Hong Kong. The SFC's guiding principle — "same activity, same risk, same regulation" — places virtual asset platforms under standards comparable to traditional securities intermediaries.
Key Timeline
June 1, 2023: Licensing regime launched; applications accepted
February 29, 2024: Grandfathering deadline for existing exchanges
June 1, 2024: Enforcement date — operating without a license became a criminal offense carrying up to 7 years imprisonment and HK$5 million in fines
Core Licensing Requirements
-
Cold storage mandate: At least 98% of client virtual assets must be held in cold storage, segregated from platform proprietary assets.
-
Liquid capital: Minimum HK$50 million (approx. USD 6.4 million) in liquid assets must be maintained at all times, with audited financial statements submitted annually to the SFC.
-
Insurance: Operators must insure hot wallet client assets or maintain equivalent liquid asset reserves.
-
Suitability assessment: Clients must undergo knowledge assessments and risk tolerance evaluations before accessing virtual asset trading.
-
Local presence: VATPs must be incorporated in Hong Kong with Responsible Officers and Compliance Officers resident in Hong Kong.
Hong Kong's regulatory architecture extends beyond VATPs. The
Hong Kong Stablecoin Regulation Guide 2026 outlines the complementary stablecoin licensing framework under development, completing Hong Kong's end-to-end virtual asset regulatory ecosystem.
MiCA vs Hong Kong SFC VASP: Side-by-Side Comparison
|
Dimension
|
EU MiCA
|
Hong Kong SFC VASP
|
|
Geographic scope
|
27 EU member states, single passport
|
Hong Kong SAR only
|
|
Regulator
|
ESMA + national competent authorities
|
Securities and Futures Commission (SFC)
|
|
Entity type
|
Crypto-Asset Service Provider (CASP)
|
Virtual Asset Trading Platform (VATP)
|
|
Minimum capital
|
€50,000–€125,000 own funds
|
HK$50 million liquid assets
|
|
Retail access
|
Permitted with disclosure requirements
|
Phased — additional SFC assessment required
|
|
Stablecoin rules
|
Comprehensive EMT/ART framework (live)
|
Separate stablecoin bill (in progress)
|
|
DeFi coverage
|
Exempt if sufficiently decentralized
|
Out of scope
|
|
Travel Rule
|
Transfers above €1,000
|
Per FATF guidance
|
|
Cross-border pass
|
EU-wide single passport
|
No — HK jurisdiction only
|
MiCA's single-passport mechanism offers unmatched efficiency for businesses primarily targeting European users — one authorization, 27 markets. Hong Kong's regime, while geographically bounded, provides a strategically valuable gateway to Asia-Pacific markets backed by a mature common law legal system and deep financial infrastructure. For enterprises processing
B2B stablecoin payments across multiple regions, maintaining compliance in both frameworks delivers the broadest possible market reach. Understanding how
digital asset infrastructure is structured under each framework is equally critical for ensuring technical compliance alongside regulatory licensing.
PhotonPay: Multi-Jurisdiction Compliance Architecture
PhotonPay is a regulated cross-border payment and digital asset service platform holding 11 regulatory licenses across 7 jurisdictions — providing enterprise clients with a single compliance-ready gateway to global payment infrastructure. Rather than managing separate regulatory relationships in each target market, clients access PhotonPay's consolidated compliance framework through one counterparty.
✅ Hong Kong Regulated Entities
Photon Dance Asset Management (HK) Limited holds Securities and Futures Commission (SFC) license No. BWJ859, authorizing Type 1 (Dealing in Securities), Type 4 (Advising on Securities), and Type 9 (Asset Management) regulated activities. Under Hong Kong's virtual asset policy framework, Type 9 licensees may conduct virtual asset-related asset management activities subject to applicable SFC requirements.
Photon Dance (HK) Limited holds Money Services Operator (MSO) License No. 15-04-01638, issued by Hong Kong Customs and Excise Department, authorizing money changing and remittance services including virtual currency exchange operations.
Photon Dance Consulting Limited holds TCSP License No. TC010478 for trust and company service provision.
Photon Dance Credit Limited holds Moneylenders License No. 0288/2025.
✅ European Compliance
Photon Dance Fintech UK Limited holds a Financial Conduct Authority (FCA) Authorized Payment Institution (API) license, Reference No. 801082, enabling regulated payment services across the United Kingdom.
Photon Dance (Poland) Limited is registered as a Small Payment Institution with Poland's Komisja Nadzoru Finansowego (KNF), Registration No. 0000998751, providing an EU payment compliance foothold.
✅ North American Compliance
Photon Dance CA INC. is registered with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) as a Money Services Business (MSB), Registration No. M21161397, covering foreign exchange and virtual currency dealing across Canada.
In the United States, PhotonPay holds a FinCEN MSB registration and NMLS license No. 2756066, covering money transmission licenses across 11 states including Alabama and Michigan.
✅ Middle East and Offshore
Photon Dance (DIFC) Limited holds a Dubai Financial Services Authority (DFSA) Category 3D license, No. F010944, authorizing financial services within the Dubai International Financial Centre (DIFC).
Planck Age Asset Management Limited holds BVI Financial Services Commission (BVI FSC) Approved Investment Manager status, No. IBR/AIM/25/2337.
Planck Age Swiss AG is a member of VQF, a Swiss Self-Regulatory Organization (SRO) recognized by FINMA, Membership No. 101257.
✅ Technology Compliance Stack
Beyond regulatory licensing, PhotonPay has achieved SOC 2 Type I certification, natively supports Travel Rule compliance across all regulated jurisdictions, and deploys AI-driven fraud prevention systems for real-time transaction monitoring.
Why Compliance Breadth Matters for Enterprise Clients
A business processing cross-border payments touching the EU, Hong Kong, UK, and North America simultaneously requires a payment partner whose compliance framework covers each market. PhotonPay's 11 licenses across 7 jurisdictions — spanning FCA, SFC, DFSA, FINTRAC, FinCEN, KNF, and BVI FSC authorizations — eliminates the need for clients to build separate compliance relationships in each jurisdiction. For enterprises exploring
institutional crypto adoption as part of their treasury or payment strategy, PhotonPay provides the regulatory foundation to accept, settle, and disburse digital assets compliantly across the markets covered by both MiCA and the Hong Kong VASP regime.
Frequently Asked Questions
What is the difference between a VASP and a CASP?
VASP (Virtual Asset Service Provider) is the term used by FATF in its global standards framework. CASP (Crypto-Asset Service Provider) is the EU-specific term defined under MiCA. Both refer to entities that provide virtual asset exchange, transfer, custody, or related services commercially. The difference is terminological — the underlying compliance obligations are substantively comparable across both frameworks.
Does MiCA apply to companies based outside the EU?
Yes. MiCA applies to any entity offering crypto-asset services to clients located in the EU, regardless of where the service provider is established. Non-EU companies serving EU clients must obtain CASP authorization in an EU member state or qualify for the narrow reverse solicitation exemption — which cannot be used as a structural workaround.
Can a Hong Kong VASP or MSO license substitute for MiCA authorization?
No. Each license is jurisdiction-specific. A Hong Kong SFC VASP or MSO license does not confer EU market access, and EU CASP authorization does not extend to Hong Kong. Businesses serving both markets need separate authorizations in each jurisdiction — or a compliance partner that holds both.
What licenses does PhotonPay hold relevant to virtual assets?
Photon Dance Asset Management (HK) Limited holds SFC license No. BWJ859 (Types 1, 4, 9) in Hong Kong. Photon Dance (HK) Limited holds MSO License No. 15-04-01638. Globally, PhotonPay also holds FCA Ref. 801082, FINTRAC No. M21161397, NMLS No. 2756066, DFSA No. F010944, and KNF No. 0000998751 — 11 licenses across 7 jurisdictions in total.
How does the Travel Rule apply under MiCA and Hong Kong rules?
Under MiCA's Transfer of Funds Regulation, the Travel Rule applies to all virtual asset transfers above €1,000, requiring originator and beneficiary information to be transmitted between service providers. Hong Kong's SFC Travel Rule requirements follow FATF guidance. PhotonPay natively supports Travel Rule compliance in all regulated jurisdictions.
What is the minimum capital to become a CASP under MiCA?
MiCA sets minimum own funds by service type: €50,000 for custody and administration, and €125,000 for exchange against fiat or other crypto-assets and operation of a trading platform. National regulators may impose higher requirements based on individual risk assessment and business volume.
Building a Strong Foundation for Global Compliance
As digital asset regulations continue to evolve, understanding the differences between regulatory frameworks such as the EU's MiCA and Hong Kong's VASP licensing regime is becoming increasingly important for businesses operating across multiple markets. A well-structured compliance strategy can help reduce regulatory risk while supporting long-term international growth.
PhotonPay continues to expand its global compliance framework, with regulatory authorizations across seven jurisdictions to support cross-border payments and digital asset services. Learn more about
PhotonPay's global regulatory licenses and compliance capabilities.