Contributed By BeesMont Law Limited
Through its longstanding and highly respected regulatory regime, Bermuda has established itself as a leading jurisdiction for digital assets and blockchain, with a broad-based ecosystem of licensed businesses and service providers across a range of activities.
Beginning in 2018 with the Digital Asset Business Act (DABA), which introduced a licensing regime for firms carrying out “digital asset business” (defined below), a market supporting framework has evolved alongside DABA to include – a licensing regime for carrying out “digital asset issuance” under the Digital Asset Issuance Act (DAIA), introduced in 2020, various sandbox programmes (discussed below), detailed prudential and regulatory guidance published by the Bermuda Monetary Authority (BMA), along with active engagement across the digital finance industry in Bermuda.
The BMA, which is Bermuda’s sole financial regulator, administers a principles-based regulatory framework comprising legislation, policies, guidance, codes of practice, and regular industry-wide consultations. It oversees all financial institutions in Bermuda and is a member of the Global Financial Innovation Network (GFIN), an innovative network of regulators, and cross-border testing framework.
At the time of writing there are over 50 digital asset firms which are licensed or operating in sandbox operations overseen by the BMA, which has specialist expert teams covering digital asset licensing, Cyber Risk and Anti-Money Laundering (AML) and compliance aspects.
Bermuda’s approach can be characterised as a comprehensive but unified taxonomy of digital assets. The DABA definition of “digital asset” captures payment and exchange tokens, security tokens and utility tokens, with certain carve-outs.
Activities carried out by DABA licensees include stablecoin issuance, operating digital asset exchanges and derivatives exchanges, providing custodial wallet service, liquidity services, operating settlement platforms, providing payment services, and securities and real-world asset tokenisation platforms. This is complemented by blockchain-enabled insurers and reinsurers operating under the Innovative Insurer General Business (IIGB) and Innovative Insurer Long-Term (IILT) classes, alongside a broader cohort of companies engaged in carbon and climate finance, AI and digital asset infrastructure, and tokenised investment fund structures.
At the World Economic Forum in Davos, the Premier of Bermuda announced in tandem with Circle and Coinbase – Bermuda’s strategic positioning as a “fully on-chain national economy”, a milestone reflecting the maturity of the DABA framework and the depth of the stablecoin payments ecosystem now operating in and from the jurisdiction. The vision contemplates the progressive migration of everyday economic activity onto public blockchain rails, with regulated stablecoins serving as the principal medium of exchange across merchant payments, government services, payroll and cross-border settlement, supported by the licensed digital asset infrastructure already established in Bermuda.
On 5–6 November 2025, the BMA announced the first deployment under its Embedded Supervision Initiative. Launched in February 2025, the Initiative tests the direct integration of regulatory oversight, compliance checks and reporting mechanisms into the technological foundation of digital asset platforms – typically within smart contracts, protocols or data layers – so that supervisory requirements are enforced in real time with limited human intervention.
The first pilot, conducted through the BMA’s Innovation Hub in collaboration with Chainlink Labs, Apex Group, Hacken and Bluprynt, has been described by the BMA as a first-of-its-kind regulator-grade real-time oversight architecture for stablecoin issuance. Operating on testnet, the pilot combines an issuer identity layer provided by Bluprynt, oracle and compliance infrastructure provided by Chainlink Labs, institutional asset servicing provided by Apex Group, and on-chain surveillance provided by Hacken, to render compliance conditions and assurance mechanisms in machine-readable form within blockchain infrastructure, enabling continuous supervisory visibility over reserves, mint authority and transaction integrity. The deployment reinforces Bermuda’s positioning as a jurisdiction in which institutional-grade digital asset infrastructure can be developed in direct collaboration with the Authority as regulator.
The BMA maintains an exploratory posture, overseeing industry consultations in respect of payment services, as well as artificial intelligence in the financial services sector, each of which may involve new pathways for digital asset firms (including a payment services sandbox discussed below). Many of the issues which arise in the coming 12 months may arise or be centred around the matters which the BMA is consulting on (discussed below).
DABA licensees can be authorised to carry out a wide range of activities involving digital assets (details of specific licensable activities below) and currently Bermuda’s digital asset firms which are licensed under DABA conduct a number of different business types including:
A number of activities are specified as exempt from the requirement to obtain a DABA licence (see below) and two activities which are not specified as exempt in legislation but which fall outside of DABA and have been conducted by Bermuda companies in Bermuda and outside of Bermuda are mining of cryptocurrency/digital assets and operating blockchain protocols (to the extent of operations which themselves do not involve DABA licensable activities such as providing custodial wallet services).
Many of Bermuda’s DABA licensees offer services to institutional customers but several large and well-known retail digital asset businesses are licensed in Bermuda and the BMA is able to accommodate oversight of such businesses (with applicable safeguards and operating procedures).
Many DABA licensees offer services across a number of publicly permissioned blockchains and some of the larger operators operate interoperability protocols to allow clients to switch between different blockchains.
Part of the DABA licensing process involves careful assessments of appropriate levels of activity for operations post licensing and the BMA takes an active approach in setting operating thresholds (such as net asset and liquidity limits) when granting DABA Licences.
In respect of DAIA, which provides for the BMA to authorise public offers (issuances) of digital assets by applicant Bermuda firms (or overseas firms) in or from within Bermuda to raise capital, there has been relatively little activity, including as DABA licensees can issue digital assets (if carried out by way of business).
Regarding intellectual property Bermuda’s intellectual property regime – under the Copyright and Designs Act 2004 and the Trade Marks Act 2023 – has not required amendment to accommodate blockchain activity, and there has not been any Bermuda litigation alleging infringement in respect of on-chain structures or data.
The BMA oversees a number of regulatory sandboxes with new sector-specific sandbox regimes under consideration. Sandboxes include the following.
A number of the current cohort of companies in the Insurance Regulatory Sandbox deploy blockchain/decentralised ledgers into their projects – such as offering insurance policies which are denominated in cryptocurrency and insurance markets which are administered by smart contracts. Thus those firms in the Insurance Regulatory Sandbox contribute to the relatively large number of innovative firms developing new business models incorporating blockchain in Bermuda.
Within the PSA, Class T (Testing) and Class M (Modified) licences will operate as a regulatory sandbox for early-stage businesses piloting a minimum viable product against defined success criteria, a limited customer base and proportionate regulatory requirements.
For digital asset businesses, the PSA sandbox is expected to be relevant in three ways:
As mentioned, the focus of the DABA regulatory regime is on the licensing of digital asset business activities and the regulation of licensed persons (via the minimum criteria for licensing set out below).
The digital asset business activities are as follows.
Persons who are exempt from requiring a DABA licence are as follows.
Each of the above are referred to as “non-specified persons”.
Each exempt undertaking is required to notify the BMA of its intention to be exempt (and file an annual declaration of continuation of exemption each year).
For DAIA, a single digital asset issuance activity is regulated, which is defined as an offer to the public to acquire digital assets or to enter into an agreement to acquire digital assets at a future date. The following types of digital asset issuance are exempt from requiring BMA authorisation:
A DAIA authorised undertaking is required to publish an issuance document prior to offering digital assets to the public. Circumstances which are exempt from the obligation to file an issuance document under DAIA are as follows.
There are substantial penalties under DABA and DAIA for anyone who fails to comply with any requirement or contravenes any prohibition imposed by or under the legislation, including potential fines of up to BMD10 million. In addition the BMA has a wide range of enforcement options available to deal with any failure to comply with prudential and AML/ATF (Anti-Money Laundering and Anti-Terrorist Financing – otherwise called Combating the Financing of Terrorism (CFT)) requirements.
In respect of the Insurance Regulatory Sandbox and Innovation Hub, see commentary about sandboxes below.
Privacy and Data Protection
On 1 January 2025, the Personal Information Protection Act 2016 (PIPA) came fully into force in Bermuda and all Bermuda organisations which use personal information (whether wholly or partly by automated means including as part of a structured filing system) are subject to this Act.
As in other jurisdictions, the introduction has meant that Bermuda-based organisations, including digital asset firms, have to assess their own operations and have established processes to ensure compliance. This can include:
Impacts on Bermuda’s digital asset firms from PIPA compliance programmes will depend on the type of personal information they are using (and manner of use) and how such programs interface with on-chain operations. For example, an on-chain insurance market (using significant personal information of insured) compared to a liquidity services provider who deals only with institutions (with little or no personal information involved).
To the extent they are intended to comprise binding contracts (and include the requisite elements of contracts under common law – including offer, acceptance, intention to create legal relations and consideration), smart contracts can and will be enforceable as contracts under common law in Bermuda.
In addition, the enforceability of smart contracts (including when they comprise a contract under common law) is strengthened by a statutory presumption of effectiveness. Under the Electronic Transactions Act 1999 (ETA), legal recognition is given to electronic records (which includes information inscribed on a tangible medium or any other medium and is retrievable in perceivable form) with a negative presumption that the form of electronic record and records which are referred to in such record “shall not be denied” legal effect, validity admissibility or enforceability solely the ground of the electronic form of such record.
The ETA contains a negative presumption in respect of legal proceedings also – such that the electronic form of record (or its status as the best evidence, being not in the original form) shall not be a sole basis nor shall being the best evidence be a basis either, to deny admissibility in evidence in any legal proceedings.
Ordinarily however Bermuda DABA licensees need to ensure they adopt best practice in the operation of smart contracts to accord with the technical standards set by the BMA for smart contracts, which include the adoption of secure development practices (in respect of standards, audits and testing environments) as well as benchmarking against specific vulnerability standards, security assessments and reviews of design and implementation risks (as set out in the Operational Cyber Risk Management Code of Practice, Cyber Code).
The BMA is evolving its oversight of smart contracts, including observations in a Consultation Paper about Asset Tokenisation published earlier in the year (and discussed below). This includes recognising smart contract architecture (along with oracles and tokenisation platforms) as raising unique prudential challenges and risks, for which the BMA proposes to update supervisory standards and rules.
Bermuda hosts a number of professional bodies representing interests across the financial services sector. Relevant to digital assets is NEXT, the Bermuda Digital Assets Industry Forum, which is an autonomous industry advocacy group for Bermuda-based digital asset companies licensed by the BMA providing a collective voice and opportunities for collaboration within Bermuda and globally.
Founded in May 2022, at the time of writing it consists of 13 companies licensed under the Digital Asset Business Act (DABA) and/or the Innovative Insurance (IIGB) category. As well as being a voice for the industry and representing Bermuda’s interests internationally, NEXT has been involved in consultations with the BMA on behalf of its membership.
In addition, the Bermuda Stablecoin Association (BSA) was formally launched in late 2025 by leading global digital asset firms operating in Bermuda, as a collaborative, industry-led forum to support the adoption and institutional standard-setting of stablecoins.
The BSA’s early working group tracks focussed on compliance, technical standards, policy engagement and public education. It also participated in a consultation by the US Treasury on the implementation of the GENIUS Act (and its impact for foreign stablecoin issuers).
The proposition that digital assets are property under Bermuda common law was first established by Hargun CJ in In the Matter of BlockFi International Ltd (in provisional liquidation for restructuring purposes) (Bermuda Supreme Court, No 383 of 2022, 9 June 2023, unreported), following the English authority AA v Persons Unknown (2019) EWHC 3556 (Comm), with the holding subsequently referred to and applied by Martin J in In the Matter of BlockFi International Limited (in Liquidation) and In the Matter of the B Trust (2025) SC (Bda) 110 Civ.
DABA licensees are required to maintain segregation of client assets and recent authority and in the case of In the Matter of Bittrex Global (Bermuda) Limited (in Liquidation) (2025) SC (Bda) 78 Civ (Martin J) (affirmed by the Court of Appeal in Bittrex Global Inc v Howie and others (2026) CA (Bda) 1 Civ, it was held that the purported attempt in the Terms and Conditions of now defunct exchange Bittrex to transfer legal title in customer-deposited tokens to the company in exchange for a contractual claim failed, with Martin J and Sir Julian Flaux JA affirming, that Sections 17 and 18 of DABA require segregation of client assets notwithstanding any contractual provision to the contrary, and that a licensed undertaking cannot contract out of the statute – the Court of Appeal drawing on In Re Ipagoo LLP (2022) EWCA Civ 302 and Lehman Brothers International (Europe) (in administration) v CRC Credit Fund Ltd (2012) UKSC 6.
Read together, BlockFi and Bittrex establish that customer digital assets held by a DABA licensee are insulated from the licensee’s insolvent estate either by contract (BlockFi) or by statute (Bittrex), with both routes converging on the same customer-protective outcome and giving Bermuda one of the more developed bodies of digital-asset insolvency case law in the offshore world.
Custody and Control Frameworks
Consistent with the importance of control in asserting title to digital assets, in guidance and rules published by the BMA (exercising powers pursuant to DABA) which DABA licensees are required to adhere to (in respect of custody of digital assets for clients), it is provided that DABA licensees must have “adequate accounting... other records… systems and controls” to accurately track ownership and quantity of client digital assets, and the beneficial ownership rights of clients to digital assets held by DABA licensees are referred to in rules, whilst the recently introduced Custody Rules (see below) refers to holders of digital assets having “respective beneficial ownership rights”.
In general, pursuant to the Digital Asset Business Custody Code of Practice (Custody Code) the BMA (and its Cyber Risk team) typically considers control of private keys (even by way of authorisation procedures for a multi-party computation (MPC) wallet) as essential for determining the status of control of any digital assets and determining ownership interest and finality of any transfer. The Custody Code includes technical standards applicable to those DABA Licensees who provide custodial wallet services to ensure effective management and control of private keys (and thereby, of the digital assets themselves).
The control-based approach has been further entrenched by the Digital Asset Business (Custody of Client Assets) Rules 2025 (Custody Rules), introduced in early 2025, which formalise control-based supervision of custodial wallet service providers and capture in scope DABA licensees that exercise effective control over client assets through their business model (see further in 1.2.5 Insolvency and 3.1 Licensing Requirements).
Use as Collateral
Certain of Bermuda’s DABA licensees have looked to use digital assets for collateral arrangements in a number of ways in recent years.
Most recently, several DABA licensees have been establishing facilities to issue yield-bearing stablecoins in Bermuda with the intention that those tokens will be used as collateral for derivatives trading – a particularly high growth sector.
Second, the use of digital assets as collateral for staking was permitted with the addition of a DABA activity (operating as a digital asset lending or digital asset repurchase transactions service provider), although volumes of staking activity peaked in 2022.
Finally, transactions have occurred in Bermuda in which digital assets have been granted as collateral security for regular corporate transactions (by Bermuda companies holding digital assets), including for loan transaction security.
Bermuda does not have a specific statutory legal regime for granting collateral security over digital assets although there have been transactions where security was effected and registered by Bermuda companies pursuant to the statutory regime of granting a charge over moveable assets pursuant to the Companies Act 1981 (which involved some issues of technical complexity regarding the control of private keys).
The BMA requires disclosure of all banking relationships DABA Licensees have and reviews these to assess for risk and reputability.
Subject to this DABA and DAIA Licensees are able to work with a large range of banking and payment institutions globally, however they must manage such relationships through vendor due diligence and other applicable policies as part of their licence conditions, now reinforced by the BMA’s Operational Resilience and Outsourcing Code 2025 which applies to critical third-party relationships including banking and payment service providers.
There are no restrictions on DABA and DAIA Licensees obtaining general banking and payment services in Bermuda. Although appetite amongst Bermuda’s operating four authorised banks for digital asset business varies, certain of them have increased their service offering and appetite for DABA and DAIA Licensees recently.
In practice, most DABA and DAIA Licensees maintain banking and payment relationships with institutions outside Bermuda, reflecting the global nature of digital asset business and correspondent banking patterns.
While the Bermuda Monetary Authority has been proactive in giving greater consideration to ESG and Sustainable Finance concerns across its areas of supervision and did expand the risk management framework in the Insurance Code of Conduct in 2022 (to incorporate considerations of material risks from ESG aspects in particular climate risks), which may impact firms which participate in the Insurance Regulatory Sandbox, there are currently no disclosure or reporting requirements applicable to firms which are licensed under DABA or authorised under DAIA.
There is no tax arising on the issuance, acquisition, purchase, subscription or sale of digital assets in Bermuda.
There are no taxes on income, profits, dividends or capital gains or other taxes in Bermuda other than a 15% corporate income tax (CIT) payable if a Bermuda company is part of a multinational group with annual revenue of EUR750 million (from 2025), for which double taxation and set-off rules shall apply.
Digital asset licensees which are structured as exempted companies can apply to the Minister of Finance for an undertaking that the company will be exempt from any future imposition of tax on profits, income or any capital gain or appreciation until 31 March 2035 (although this does not apply to CIT, if payable).
In addition, any conversion of the local currency (Bermuda dollars) via Bermudian banks will incur a 1% Foreign Currency Purchase Tax charge.
In the event that aspects of a transaction involving digital assets are concluded in a written agreement which is to be registered in Bermuda (such as a charge or security agreement), stamp duty will be chargeable at rates specified in legislation.
Pooling of Client Assets
In early 2025, a pooling regime for digital asset business was introduced with the Digital Asset Business (Custody of Client Assets) Rules 2025. The Rules apply to all DABA licensees providing custodial wallet services under Section 10(2)(d) of DABA. On the occurrence of a pooling event – being the default of the licensed undertaking, the coming into force of a BMA direction in respect of client assets, or the default of an intermediary holding client assets – client assets across all client accounts are pooled and made available to meet client claims pari passu, with a separate sub-pool mechanism applying where the pooling event is the default of an intermediary. The pooling and trust regime under the Rules operates in addition to the existing obligations on DABA licensees to segregate client assets under Sections 17 and 18 of DABA.
Wind-Down Plan
Wind-down plans have become a key pillar of Bermuda’s DABA regime. As set out in the BMA’s Guidance for Prospective Applicants, DABA licensees are required to submit wind-down plans for their operations as part of licensing. For Class T and Class M licensees, wind-down plans may be conceptual in nature, outlining the general approach to orderly cessation if testing or development goals are not achieved.
Class F plans are expected to be more detailed and operationally focused, addressing triggering events, the resources required (financial, human and technological), the operational sequence, timelines, costs, client asset protection, data retention, contractual obligations, and stakeholder communications.
Case Law Including Cross-Border Co-Operation
Bermuda now has substantive case law on the winding-up of digital asset businesses, following the liquidations of two Class F DABA licensees in In the Matter of Bittrex Global (Bermuda) Limited (in Liquidation) (2025) SC (Bda) 78 Civ (Martin J), affirmed in Bittrex Global Inc v Howie and others (2026) CA (Bda) 1 Civ, and In the Matter of BlockFi International Limited (in Liquidation) and In the Matter of the B Trust (2025) SC (Bda) 110 Civ (Martin J), as mentioned earlier.
The BlockFi liquidation also stands as the first reported Bermuda example of a successful cross-border resolution of a digital asset business, conducted as an ancillary proceeding to Chapter 11 proceedings in the US Bankruptcy Court for the District of New Jersey.
Together, the cases establish key principles in the insolvency of DABA licensees, including “custody” in Section 18 of DABA is to be construed broadly and purposively (in a control-based test), while any attempts to circumvent the statutory regime through contractual drafting will not succeed.
Insolvency Mechanisms
Bermuda is a long-established financial centre with a sophisticated body of insolvency law, and the mechanisms available on the insolvency of a DABA or DAIA licensee depend on the corporate form of the licensee.
DABA licensees are typically incorporated as Bermuda exempted companies limited by shares, in respect of which the winding-up provisions of the Companies Act 1981 apply, with proceedings supervised by the Supreme Court of Bermuda under the Companies (Winding-Up) Rules 1982; alternative forms (including Incorporated Segregated Accounts Companies under the ISAC Act 2019, Segregated Accounts Companies under the SAC Act 2000, and limited liability companies under the Limited Liability Company Act 2016) carry their own statutory insolvency overlays.
Bankruptcy Remoteness
To protect client assets against bankruptcy, the BMA recommends applicants implement, where appropriate, limited recourse structures such as Incorporated Segregated Accounts Companies (ISACs), Segregated Accounts Companies (SACs), Special Purpose Vehicles (SPVs), trust arrangements, or other structures that demonstrably insulate tokenholders’ interests from claims against the issuer or originator of the underlying assets.
See 1.1.5 Industry and Trade Bodies.
The Bermuda Monetary Authority is the sole financial regulator in Bermuda and is entirely responsible for the regulation of digital asset firms in Bermuda.
The BMA as a regulator engages regularly with peer regulators and fellow international standard-setting bodies. It is a signatory to the IOSCO Multilateral Memorandum of Understanding (for securities matters), the IAIS Multilateral Memorandum of Understanding (for insurance), and a network of bilateral memoranda of understanding with overseas regulators.
Bermuda’s anti-money-laundering and counter-terrorist-financing co-operation framework is led by the National Anti-Money Laundering Committee (NAMLC), which co-ordinates national AML/ATF policy, oversees the National Risk Assessment, and represents Bermuda in dealings with the Financial Action Task Force (FATF) and the Caribbean Financial Action Task Force (CFATF).
The Financial Intelligence Agency (FIA) is Bermuda’s financial intelligence unit, through which it exchanges suspicious activity information with overseas counterparts. The BMA, as supervisor of the financial sector, works alongside NAMLC and the FIA on cross-border AML/ATF matters affecting regulated entities. Bermuda is currently a Compliant or Largely Compliant jurisdiction across the FATF 40 Recommendations following its most recent CFATF mutual evaluation.
The Office of the Privacy Commissioner for Bermuda is an independent supervisory authority responsible for overseeing implementation of the Personal Information Protection Act 2016 (Privacy Commissioner).
See 1.1.3 Regulation of Blockchain Technology.
Ongoing regulatory obligations (in addition to those discussed) for DABA licensees include the following.
Regarding customer types, DABA does not draw a sharp retail-versus-professional line at the activity level – the same licensable activities require the same licence regardless of client type – but the BMA accommodates retail-facing business models through licence conditions, operating thresholds, conduct expectations and disclosure requirements calibrated at the licensing stage, and several large retail digital asset businesses are licensed and supervised in Bermuda.
Overlap Between Digital Asset Business, Investment Business and Investment Fund Activities Involving Digital Assets
Given there is some overlap between digital asset business and investment business there have been some examples of Bermuda-based investment business licensees carrying on some activity which also falls within DABA (such as holding investments in tokenised assets and in one example issuing RWA-backed tokens) and vice versa (particularly with DABA licensees beginning to hold investment fund instruments to back stablecoins, such as shares in funds holding US Treasuries).
To cover the overlap there are statutory carve outs and guidance which permit a certain amount of “ancillary business” by a DABA licensee to carry out investment business – where carried out in an ancillary manner – including up to certain limits as a proportion of total gross revenue (ancillary business generated should not exceed 25% of total gross revenue, with a buffer zone between 25–35% requiring the DABA licensee to notify the BMA and agree a remediation plan or roadmap to reduce the revenue towards compliance with the 25% threshold).
At the time of writing the BMA has conducted a consultation in respect of Asset Tokenisation and in a recently published consultation paper it considered new guidance to allow investment fund and investment business licensees to issue digital assets, discussed further on in this chapter.
See 2.3 Regulated Firms and Legal Wrappers. As noted, both DABA and DAIA allow for licensed issuance of digital assets. DAIA licensing is for issuances for the purpose of firms raising investment capital for the purposes of the respective business whilst DABA licensing for the issuance activity relates to use cases where issuance of digital assets by way of business.
White Paper and disclosure requirements (in respect of a Bermuda-based issuer) are specified in DABA/DAIA, while for overseas institutions marketing into Bermuda, the advertising and promotion rules would be applicable (see 4.1 Marketing).
Bermuda does not have a dedicated insider-dealing offence or comprehensive market-abuse regulation equivalent to those found in the United Kingdom, the European Union or the United States.
The Bermuda Stock Exchange’s Listing Regulations contain market-conduct expectations and disclosure obligations on listed issuers, including a requirement under Regulation 6.8 of the Debt Listing Regulations 2026 for issuers to notify the Exchange of formal legal or regulatory proceedings for market abuse and financial crime, and disciplinary powers exercisable by the Exchange against issuers and directors under Regulations 7.30 and 7.31.
The Proceeds of Crime Act 1997 captures the proceeds of foreign insider dealing as a predicate offence under its dual-criminality test (Section 3) only where the same conduct would have constituted an indictable offence had it occurred in Bermuda – usually requiring the conduct to involve fraud, deception, breach of fiduciary duty or another element capable of grounding a Bermuda indictable offence.
As part of its guidance and forward positioning the BMA requires that DABA licensees articulate a market surveillance framework. BMA Guidance states that they should outline the tools and systems used to monitor trading activities, along with processes for identifying and investigating suspicious patterns.
They should provide dedicated resources for market surveillance, with protocols in place for addressing market abuse once identified, ensuring a robust and responsive system.
In its recent consultation on Asset Tokenisation (detailed further on in this chapter), the BMA made some granular observations as to the expectations of Primary Tokenisers and Secondary Offerors Regarding market abuse systems and controls.
The BMA has wide-ranging enforcement powers under DABA and DAIA, which include issuing directions, restrictions and conditions, appointing investigators, imposing civil penalties of up to USD10 million, publishing public censures, making prohibition orders against individual directors and officers found not to be fit and proper and applying for injunctions.
The BMA exercises its powers in accordance with its Statement of Principles and Guidance on the Exercise of Enforcement Powers. The Statement sets out the BMA’s general approach to deciding when to use its enforcement powers and the factors weighed in any particular case – including the seriousness of the breach, customer impact, the licensee’s co-operation with the regulator, prior compliance history and the deterrent effect of the proposed measure.
See 1.2.5 Insolvency in respect of cross-border co-operation.
Any company wishing to carry out digital asset business will require the consent of the BMA and the grant of a licence pursuant to DABA. A detailed comprehensive digital asset business application must be submitted to the BMA in the appropriate form and must state the class of digital asset business licence required.
There are three classes of digital asset business licences which may be applied for as follows.
For DAIA issuance, applicants can apply for an authorisation to conduct a digital asset issuance.
Minimum Criteria for Licensing (Authorisation)
The BMA will not grant a DABA licence unless it is satisfied that the minimum criteria set out in DABA are fulfilled with respect to the applicant. The minimum criteria for licensing include standards which require:
Any licence issued by the BMA may be subject to such limitations on the scope of the digital asset business activity or the manner of operating the digital asset business as the BMA may determine to be appropriate having regard to the nature and scale of the proposed business. Further, a licence may be revoked by the BMA if any of the minimum criteria is not (or has not been) fulfilled in respect of a licensed undertaking.
Similar minimum criteria in respect of digital asset issuances pursuant to DAIA.
Protection (and Separation) of Client or Acquirer Assets
DABA licensees are required to keep client assets separately from other business assets, whilst authorised DAIA firms are required to keep accounts containing assets of a digital asset acquirer separate (from any accounts kept in respect of any other business until the completion of the issuance (or as required by the BMA).
DABA includes additional requirements for custody of client assets – DABA licensees must maintain a trust account, surety bond or indemnity insurance to protect clients and maintain a sufficient amount of each type of digital asset in order to meet client obligations.
In addition to the existing technical standards in the Custody Code applicable to those carrying out custody of digital assets (as custodial wallet service providers) the recently introduced Digital Asset Business (Custody of Client Assets) Rules 2025 (Custody Rules), which apply to custodial wallet service providers shall require those providers to:
Appointment of Bermuda-Based Representatives
Both DABA and DAIA include requirements for a representative with an office in Bermuda with various duties. DABA licensees are required to appoint a Senior Representative and DAIA authorised parties are required to appoint a local representative, who shall be required to make disclosures to the Authority, such as non-compliance with its obligations under legislation and BMA guidance, including the likelihood of the entity becoming insolvency, failures to comply with conditions imposed by the BMA.
See 3.1 Licensing Requirements.
In respect of personnel and prudential requirements (in addition to previous comments).
Head Office
Section 21 of DABA requires that every licensed undertaking (other than a Class T licence) shall maintain a head office in Bermuda. In addition the BMA has published guidance on the manner in which Class M and Class F DABA licensees may be directed and managed from a Bermuda head office.
The Guidance applies a factor-based, proportionality-driven approach considering where strategy, risk management and decision-making occur; the location of senior executives and board meetings; and the residence of officers, employees and at least one director.
Conflicts of Interests Policies
DABA licensees must maintain conflicts of interest policies covering the identification, management and disclosure of actual and potential conflicts. Dual-hatting arrangements (where individuals hold roles in multiple regulated entities or in both a regulated entity and an affiliated service provider) require particular attention.
Requirements include record-keeping and demonstrating to the BMA that individuals affected can discharge their responsibilities to each entity without conflict. The BMA expects a phase-out plan where dual-hatting cannot be adequately mitigated.
Both DABA and DAIA incorporate a regime requiring the BMA to be notified of proposed changes of shareholder controllers (those holding 10% shareholding) or a majority shareholder of a DABA or DAIA licensee, with the BMA given three months to respond to either notify that it has no objection or that it does have an objection (which could include reasons such as the prospective controller not being a fit and proper person or threat to potential clients of the licensee). The BMA can also object to any existing controller if it appears to the Authority that the person is not or is no longer a fit and proper person.
Contravention by a controller (in failing to give notice or becoming a controller before the end of the notice period) is an offence and the BMA can direct that restrictions shall apply to shares of the licensee (including on transfer, further issuance, payment on the shares or exercise of voting rights).
There is no passporting regime for DABA licensees into the European Union, the United Kingdom, the United States or any other major financial market. Each cross-border activity by a DABA licensee must be assessed against the host jurisdiction’s local licensing requirements.
The BMA does participate in the Global Financial Innovation Network (GFIN), co-ordinated by the UK Financial Conduct Authority, which provides a structured route for innovative financial services firms to engage simultaneously with multiple supervisory regimes – though GFIN is a co-operation framework rather than a passporting regime.
For DABA licensees, the DABA Code of Practice (2024) incorporates several standards in respect of advertising and promotions, including that the manner of promotion must, amongst others, be clear, fair and not misleading and advertisements do not contain untrue or misleading statements, not distort, use clear language and include a statement of related risks. The Code specifies sales practices must prohibit misselling, misrepresentation, with requirements on how information is presented to clients.
In a Consultation Paper last year, the BMA indicated it will look to introduce amendments to expressly prohibit DABA licensees from publishing misleading advertising.
Advertising and marketing rules also are in addition to disclosure obligations under DABA and DAIA further on in this chapter.
White-labelling or using an existing licensee is not current practice or practicable in Bermuda due to the minimum criteria for licensing and DABA and DAIA licensing being anchored to the business model approved by the BMA, with strict oversight requirements for counterparties.
In the case of parties seeking to acquire an existing licensed business the acquirer would need to complete the change of control procedure and, in the case of change of business plan, submit a material change notification under Section 22 of DABA and complete product due diligence for new products (see 2.2 Crypto-Asset Regulatory Frameworks and 3.3 Change of Control).
As a legal person is required to apply for a DABA or DAIA licence, such activity is confined to DABA licensee firms (CeFi firms) utilising DeFi structures to provide products and services.
All such DeFI structures are required to still operate in accordance with the scope of the applicable DABA licence and certain of the activities. However, DeFi activities which have been undertaken include the following.
Decentralised Governance (DAOs)
There have been instances of several DABA licensees including a governance mechanism or complete DAO structure within their operations to offer Tokenholders participation in project governance.
Decentralised Process Structures (Including Smart Contracts)
In recent months there have been a number of DABA licence applications for business models which involve the deployment of operative code within smart contract environments (for greater scale and operational efficiency).
DABA and DAIA Licensees are typically structured as limited companies although for reasons of bankruptcy remoteness the BMA has recommended in guidance that licensees use appropriate legal structures which enable segregation of client assets (to protect upon the occurrence of insolvency of the licensee) and thereby comply with protection of client assets and segregation required pursuant to DABA and the Custody Rules.
Recommended structures include:
As mentioned in 5.1 Ability to Use DeFi, DABA licensees are able to receive approval for and operate DeFi business models including DAOs.
See 1.2.5 Insolvency in respect of enforcement action.
There is no restriction in Bermuda on the form in which payments may be made, save for the exchange control regime administered by the BMA under the Exchange Control Act 1972 and Exchange Control Regulations 1973, which restricts the conversion of Bermuda dollars into other currencies (and triggers the 1% Foreign Currency Purchase Tax noted in 1.2.4 Tax).
Subject to that constraint, payments denominated in digital assets are valid in Bermuda.
To date, digital-asset-denominated payment activity in Bermuda has been confined to discrete, organised initiatives – including pilot activations involving airdropped tokens used as a means of payment for goods and services, the government’s consideration of digital asset (stablecoin) acceptance for government departments, and some acceptance by businesses of payments in stablecoin.
This pattern is expected to evolve materially as Bermuda implements the strategic positioning referred to in 1.1.1 Evolution of Uses of Blockchain – the trajectory towards a fully on-chain national economy, supported by the licensed digital asset infrastructure is already established in the jurisdiction.
Further Details on Payment Service Regulation
The BMA has broadly implemented Recommendation 9 of the FSB 2023 Recommendations*, which provides that a stablecoin’s stabilisation method must rest on a reserve of assets at least equal to outstanding tokens in circulation and that a stablecoin should not derive its value from algorithms.
The BMA’s Digital Asset Business Single Currency Pegged Stablecoins (SCPS) Guidance (November 2024) gives effect to this position through its definition of an SCPS as a digital asset pegged to a specified asset, or pool or basket of assets, in a single fiat currency (paragraph 2), and through the backing asset, segregation and liquidity requirements.
The cumulative effect is that the SCPS regime is built exclusively around a reserve-based stabilisation logic, and algorithmic designs – which rely on mint-and-burn mechanics or arbitrage incentives rather than high-quality liquid reserves – cannot satisfy these requirements.
Non-conforming models fall outside the SCPS perimeter and are relegated to case-by-case assessment under paragraph 10 of the Guidance.
See 6.2.3 Backing Assets for further details as to eligible backing assets.
Similar to tokenised securities, activities involving stablecoins are licensable under DABA in Bermuda and Bermuda hosts a number of stablecoin issuers as DABA licensees. In 2024 the BMA published detailed guidance (SCPS Guidance) applicable to stablecoin issuances which maintain a stable value relative to a specified asset or a pool or basket of assets in a single fiat currency (Single Currency Pegged Stablecoins or SCPS). The SCPS Guidance introduced a comprehensive prudential regime for stablecoin issuers with requirements in respect of:
In the guidance, the BMA does not identify algorithmic stablecoins (as being applicable), however, note that the requirement for the issuer to have backing assets with market value equal to or higher than the value of issued stablecoin tokens in circulation would likely preclude algorithmic stablecoins from being in compliance with the SCPS Guidance.
The majority or all of Bermuda’s stablecoin issuances licensed under DABA have had fiat currency or US Treasuries as backing assets.
The Bermuda framework imposes detailed requirements on the backing of tokenised assets, particularly for stablecoin and tokenised investment structures. As noted, these requirements are consistent with the FSB High-Level Recommendations and the FSB’s broader work on the regulation of crypto-asset activities – and the IOSCO Recommendations on Decentralised Finance and Cryptoasset Markets. The BMA’s articulated “same risk, same regulatory outcome” principle aligns with the FSB’s “same activity, same risk, same regulation” approach.
The SCPS Guidance imposes the following requirements on SCPS issuers.
The April Asset Tokenisation Consultation Paper extends similar logic to tokenised investments more broadly: Primary Tokenisers (an entity that issues tokenised assets and is responsible for the initial tokenisation process), who must maintain reserve assets on a 1:1 basis with issued tokens, with reserve assets being the exact referenced underlying assets that the tokens purport to represent, and pooled structures must maintain aggregate reserves reflecting the aggregate value of the pool. A tiered verification framework applies – daily internal reconciliations, periodic independent external attestations, and comprehensive Proof of Reserve audits.
The SCPS Guidance applies a uniform standard to all issuers, and wind-down and recovery considerations are adequately addressed under the existing DABA licensing framework and exists for stablecoins which may be considered a systemic risk.
From the outset, DABA legislation (and the definition of “digital asset”) was drafted widely enough to permit asset-backed tokenisation and the issuance of RWA Tokens.
However, to address the rapid global growth of real-world asset tokenisation, the rise of yield products such as tokenised money market funds and the convergence between digital asset and investment products, in 2025 the BMA’s began a consultation process to examine targeted regulatory proposals for asset tokenisation in Bermuda.
The latest draft proposals published in April include two notable features: (i) an integrated cross-statutory architecture with a new “tokenised investment” definition introduced into Bermuda’s Investment Business legislation (supported by mirrored cross-regime exemptions) and (ii) partly rules-based requirements on cyber and smart contract architecture.
Key proposals include the following.
3rd Floor
73 Front Street
Hamilton HM12
Bermuda
+1 441 400 4747
+1 441 236 1999
info@beesmont.bm www.beesmont.bm