Virtual Asset Service Provider

The task force added the term to Recommendation 15 in June 2019, and its interpretive note lists five covered activities. The label has no legal force of its own: it is a template that more than 200 jurisdictions then copy into national law under their own names. Whether the platform you use falls inside it decides what paperwork it must demand from you before your first purchase.

How it works

The Financial Action Task Force definition turns on doing something for someone else, as a business. Five activities are listed: swapping virtual assets for ordinary currency, swapping one virtual asset for another, transferring virtual assets, safekeeping or administering them or the instruments that control them, and taking part in financial services connected to an issuer's offer or sale of a new asset.

Two words carry most of the weight. "For or on behalf of another natural or legal person" excludes you buying for yourself, a company holding coins on its own balance sheet, and a miner receiving a block subsidy. "As a business" excludes the one-off private sale. What is left is the intermediary layer, and once a country writes the definition into law that layer inherits the whole banking compliance stack: registration or licensing, customer identification, transaction monitoring, suspicious activity reporting, sanctions checks, and the Travel Rule obligation to send originator and beneficiary details alongside transfers above a threshold, commonly set at 1,000 dollars or euros.

Software that nobody operates commercially sits outside all of it. A wallet application that never touches your keys, and a peer-to-peer protocol with no operator, do not fit a definition built around a firm acting for a customer. Countries disagree at the margins, and the task force has spent years pressing them to close what it treats as gaps.

Where you see it

The Virtual Asset Service Provider label almost never appears in the terms of service you are asked to accept, because each jurisdiction renames it.

In the European Union the equivalent is the crypto-asset service provider under the crypto markets regulation, a heavier category with capital and conduct duties attached. In the United States the same firms register with FinCEN as money services businesses and get state money transmitter licenses on top. Japan calls them crypto asset exchange service providers, Singapore licenses digital payment token services, and Nigeria and South Africa each run their own registration lists. The tell that you are dealing with one is behavioral: it asks for a government identity document, it asks where your money came from, and it asks who owns the address you are withdrawing to.

Coverage is now near universal by volume. In its sixth targeted update, published in June 2025, the task force reported that the jurisdictions it assesses account for roughly 98 percent of the global virtual asset market, and it continues to press members over uneven Travel Rule enforcement. For a buyer the practical consequence is dull but useful: on any regulated venue in any of the 231 countries covered here, expect verification before you can withdraw, and expect the venue to keep records of your transfers long after you close the account.

Virtual Asset Service Provider vs exchange

An exchange is one species inside the category, not a synonym for it. Custodial wallet apps, brokerage front-ends, over-the-counter desks, payment processors that settle in crypto, and the operators of many bitcoin ATMs all fall inside the same definition without ever running an order book. That is why a service can insist on identity documents while looking nothing like a trading platform. Reading the other way round also matters: a venue can call itself an exchange, run a matching engine, and still fall outside a national implementation if it holds no customer assets and takes no fees for arranging trades, which is the argument non-custodial marketplaces have made for years.