Brief
Understanding virtual asset service providers
Virtual asset service providers have been defined as a new financial sector facing significant money laundering and terrorist financing risks.
Michaela Clarke
Operations & Compliance Coordinator

What are virtual asset service providers (VASPs)?
Virtual asset service providers have been defined as a new financial sector facing significant money laundering and terrorist financing risks.
The Financial Action Task Force (FATF) issued its guidance (2019) on how virtual asset service providers could be abused by criminals and terrorists to launder money and finance terrorist acts.
As of March 2021, the FATF has issued a new consultation to amongst others, provide more clarity on which businesses are undertaking VASP activities and are subject to the FATF Standards
Remember as a VASP you will need to:
- Implement the same preventive measures as financial institutions, including customer due diligence, record-keeping, and reporting of suspicious transactions
- Obtain, hold and securely transmit originator and beneficiary information when making transfers
- Must know who your customers are
- Keep adequate and up to date records aligned to record-keeping requirements
- Ensure a framework is in place to report transactions where suspicions of money laundering or terrorist financing remain
- Securely and confidentially transmit customer information when sending a payment to another virtual asset provider
These are also covered in FATF Recommendations 10 and 16
If you are a Virtual Asset Service Provider or plan to set up as one, you must ensure you can comply with the FATF requirements.
At MEMA we support VASPs in understanding and implementing their regulatory requirements.
Need expert regulatory guidance?
Our ex-regulator team helps firms navigate complex requirements and evidence compliance with confidence.
Book a Free Scoping CallRelated insights
View all insights →
FCA advice survey 2025: growth needs a capacity evidence trail
The FCA's April 2026 survey reports around 5,500 advice firms, 31,000 advisers and widespread outsourcing. Sector averages are context, not staffing standards.

Crypto prudential risk assessments need a board-owned evidence trail
GC26/5 closed on 30 July 2026. Firms can now use the proposed CRYPTOPRU 7 guidance to test readiness while monitoring the FCA's final position.

Sanctions screening assurance: connecting risk assessment to alert decisions
The FCA's May 2026 findings connect sanctions exposure, screening design, data quality, alert calibration, escalation and breach reporting.