Cryptoassets Regulatory Intelligence

Isle of Man Crypto & Digital Asset Regulation

IM schema crypto-v2.0.0 trajectory: not yet assessed in transition overlaps: Sentinel (AML/CFT), World Payments, Advennt

Last updated · 9 categories · 37 sourced findings · 31 sources in the cumulative register

Evidence re-verified: ·Position last changed: ·
Record history & provenance ▾

Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

Framework postureIn transition8 of 9 modules populated · AI-synthesised · Tier-1/2 verified
Lead supervisory authorityCoinDeskPrimary statutory & supervisory perimeter
Next milestone (> 2026-10-26)2027-Q1IOMFSA crypto-asset regulatory approach kept under review
Module coverage & confidence8 / 9 modules assessed0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed

Jurisdiction lead brief

Latest update · 25 October 2026

Lead Signal

The Isle of Man Financial Services Authority has revoked, in its entirety and under section 9(1) of the Financial Services Act 2008, the licence of Blackfridge SC Limited, effective 5 October 2026. Blackfridge was the issuer of poundtoken, an e-money instrument issued under a Class 8(4) permission that functioned as a GBP-pegged stablecoin, and its loss of authorisation ends the only identified fiat-referenced token issuance on the Island. The IOMFSA's stated basis is the absence of a Head of Compliance and Money Laundering Reporting Officer function since August 2024, no remaining operational staff, overdue audited accounts, and unpaid fees and penalties, following an earlier agreed temporary suspension that had not been resolved.

Key regulatory facts for Isle of Man
Regulatory DimensionIsle of Man Standing Position
JurisdictionIsle of Man (IM)
Regulatory ScopeCrypto & Digital Asset Regulation (9 modules, 37 sourced findings)
Crypto LicensingThe Isle of Man has no single bespoke crypto-asset licensing statute.
Token ClassificationIOMFSA's 2020 perimeter guidance takes a technology-neutral, substance-over-form approach: tokens that are pure stores of value or provide access to services (e.g., bitcoin, ether) sit outside the regulatory...
On-Chain Activity RegimeNo Isle of Man statute separately licenses staking, DeFi lending, mining, node operation, validator activity, or tokenization.
Stablecoin RegimeThe Isle of Man has not enacted a dedicated stablecoin statute covering issuance authorisation, reserve requirements, redemption rights, disclosure, or systemic designation.
Primary Instruments CitedCoinDesk, FATF/MONEYVAL, CoinDesk, Isle of Man Financial Services Authority, virtual-asset business
Last Confirmed / Updated2026-10-25 (31 sources in cumulative register)

#

The Isle of Man has no single bespoke crypto-asset licensing statute. Virtual currency businesses (VCBs) undertaking a broad range of specified activities must register as 'Designated Businesses' with the Isle of Man Financial Services Authority (IOMFSA) under the Designated Businesses (Registration and Oversight) Act 2015, which is an AML/CFT-only registration and does not itself require a financial services licence. Tokens exhibiting security or e-money characteristics fall outside this light-touch track and instead require a full licence under the Financial Services Act 2008, per FSA 2020 perimeter guidance. A separate gambling regulator (Gambling Supervision Commission, GSC) has approved blockchain-based gaming products, illustrating a distinct crypto-gambling licensing track outside the FSA perimeter.

Open gap — crypto-int-1Pinpoint FSA08 Schedule/Regulated Activities Order provision classifying security tokens as Class 2 investment business and e-money tokens as Class 8(4) not independently verified against primary statute this cycle.no under-indexing note recorded
Horizon · 2027-Q1 (± more than a year)IOMFSA crypto-asset regulatory approach kept under reviewIn force · Tier 1 source
Standing sub-brief · as of 5 September 2026 260 words · last cycle 2026-10-25

Crypto Licensing

The Isle of Man operates a registration-based, rather than full-licensing-based, regime for virtual currency businesses. Under the Designated Businesses (Registration and Oversight) Act 2015, virtual currency businesses are designated businesses that must register with, and be overseen by, the Financial Services Authority; it is a criminal offence to carry on a designated business without registration. This is confirmed at high confidence and constitutes the primary AML/CFT oversight mechanism for pure virtual-currency businesses on the Island.

Periodic update · new data 2026-10-25

Crypto Licensing

The Isle of Man Financial Services Authority revoked the entire Financial Services Act 2008 licence of Blackfridge SC Limited under section 9(1) of the Act, effective 5 October 2026. The revocation followed a documented and extended compliance failure: no Head of Compliance or Money Laundering Reporting Officer function since August 2024, no remaining operational staff, overdue audited accounts, and unpaid fees and penalties. This escalation path had a precursor: an agreed temporary suspension of the licence that the firm did not resolve before the IOMFSA moved to full revocation.

Separately, under the Island's general crypto-licensing perimeter, a virtual-asset business must register with the IOMFSA under the Designated Businesses (Registration and Oversight) Act 2015, or qualify for an exemption, in order to carry on a designated virtual-asset-service business. This registration requirement was identified via secondary source and was not independently verified against the primary DBROA text, so the current eligibility and substance conditions, such as resident-director count or MLRO residency requirements, remain unconfirmed at primary-source level.

The Blackfridge enforcement action demonstrates that the IOMFSA's licensing framework, whichever instrument a given crypto-adjacent business operates under (here, the Financial Services Act 2008 Class 8 regime rather than DBROA registration), carries a credible enforcement endpoint when ongoing compliance obligations go unmet for an extended period.

Outlook

The DBROA 2015 registration perimeter and its current substance conditions remain unverified against primary text and are a standing gap to close in a future cycle. Separately, watch for any read-across from the Blackfridge enforcement action into supervisory expectations for other FSA08 Class 8 licence-holders or DBROA-registered virtual-asset businesses.

2 earlier distinct update(s)
Periodic update · new data 2026-10-18

Crypto Licensing

The Isle of Man Financial Services Authority revoked the entire Financial Services Act 2008 licence of Blackfridge SC Limited under section 9(1) of the Act, effective 5 October 2026. The revocation followed a documented and extended compliance failure: no Head of Compliance or Money Laundering Reporting Officer function since August 2024, no remaining operational staff, overdue audited accounts, and unpaid fees and penalties. This escalation path had a precursor: an agreed temporary suspension of the licence that the firm did not resolve before the IOMFSA moved to full revocation.

Separately, under the Island's general crypto-licensing perimeter, a virtual-asset business must register with the IOMFSA under the Designated Businesses (Registration and Oversight) Act 2015, or qualify for an exemption, in order to carry on a designated virtual-asset-service business. This registration requirement was identified via secondary source this cycle and was not independently verified against the primary DBROA text, so the current eligibility and substance conditions, such as resident-director count or MLRO residency requirements, remain unconfirmed at primary-source level.

The Blackfridge enforcement action demonstrates that the IOMFSA's licensing framework, whichever instrument a given crypto-adjacent business operates under (here, the Financial Services Act 2008 Class 8 regime rather than DBROA registration), carries a credible enforcement endpoint when ongoing compliance obligations go unmet for an extended period.

Outlook

The DBROA 2015 registration perimeter and its current substance conditions remain unverified against primary text and are a standing gap to close in a future cycle. Separately, watch for any read-across from the Blackfridge enforcement action into supervisory expectations for other FSA08 Class 8 licence-holders or DBROA-registered virtual-asset businesses.

Periodic update · new data 2026-09-28

Crypto Licensing

The Isle of Man Financial Services Authority requires virtual-currency and crypto-asset businesses to register as Designated Businesses under the Designated Businesses (Registration and Oversight) Act 2015; operating without registration is an offence. This is a registration-only, AML/CFT-driven oversight model rather than a bespoke prudential licensing regime specific to crypto-asset activity. Following a 2025-26 consultation on whether to introduce such a bespoke regime, the Authority decided to maintain the existing DBR&O Act 2015 approach, an outcome reported directly by the Authority itself rather than inferred from silence. The consultation was, on the evidence available, inconclusive in the sense that it did not surface a decisive case for bespoke regulation, and the Authority has committed to monitor international developments rather than commit to a fixed future review date.

This retention decision is significant as a structural finding: it fixes, for the foreseeable term, the compliance perimeter applicable to every crypto-asset business operating from or through the Island. Registered Designated Businesses in this category are additionally subject to general DBR&O Act obligations, including maintaining accurate registration information, filing annual returns, and providing information or documentation to the Authority upon request, obligations that apply across the Designated Business population generally rather than being crypto-specific.

Separately, secondary legal commentary reports that Authority policy is to refuse registration to persons issuing virtual assets or tokens where the asset provides the purchaser no benefit beyond the asset itself, treating such issuances as carrying unacceptably high money-laundering and consumer risk. This is directionally consistent across the secondary sources reviewed but has not been corroborated against a retrieved IOMFSA primary classification document this cycle, and is held at Probable confidence accordingly.

No IOMFSA-specific guidance addressing staking, DeFi lending, decentralised exchanges, mining, node operation, validator activity, or tokenisation was located this cycle; this remains an open gap in the Island's on-chain activity framework rather than a confirmed absence of any rule.

Outlook

The registration-only approach is confirmed as in force and under periodic review, with no fixed re-consultation date. The most relevant marker ahead is whether the Isle of Man's MONEYVAL sixth-round mutual evaluation, with an on-site visit expected around October 2026, generates specific findings on the effectiveness of a registration-only model for a sector international standard-setters typically treat as higher-risk. A second marker is whether the Verification of Entity Registration Bill 2026, if granted Royal Assent, has any bearing on beneficial-ownership disclosure duties for registered crypto Designated Businesses; this remains unresolved.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (6)
  1. T3CoinDesk — Virtual currency businesses conducting activities such as exchanging, transmitting, or providing custody of convertible virtual currencies must register as Designated Businesses with the Isle of Man FSA and comply with AML/CFT requirements, without needing a full financial services licence. retrieved M4 binding in force
  2. T3CoinDesk — Tokens exhibiting the characteristics of securities or electronic money require a full financial services licence from the FSA under the Financial Services Act 2008 perimeter guidance. retrieved M4 binding in force
  3. T2FATF/MONEYVAL — The Designated Businesses (Registration and Oversight) Act 2015 transferred AML/CFT oversight of virtual currency businesses to the Isle of Man Financial Services Authority from October 2015, formalising the registration-only track for non-security tokens. retrieved M3 binding in force
  4. T3CoinDesk — The Isle of Man Gambling Supervision Commission, operating a licensing track separate from the FSA, has granted a gaming licence to an Ethereum-based blockchain lottery, evidencing a distinct crypto-gambling nexus. retrieved M2 non-binding
  5. T3Isle of Man Financial Services Authority — DBROA 2015: a virtual-currency business not otherwise licensed by IOMFSA or GSC must register as a Designated Business with the IOMFSA. retrieved M5 binding in force new
  6. T3virtual-asset business — Must register with IOMFSA under DBROA 2015 or be exempt to carry on a designated (VASP) business M3 binding in force

#

IOMFSA's 2020 perimeter guidance takes a technology-neutral, substance-over-form approach: tokens that are pure stores of value or provide access to services (e.g., bitcoin, ether) sit outside the regulatory perimeter (though their businesses still need Designated Business AML registration); tokens offering profit, income or capital growth are treated as security-like investments; tokens with e-money characteristics are regulated as e-money. No dedicated stablecoin classification has been published.

C2 · Token Classification — Full Module Record0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

No Isle of Man statute separately licenses staking, DeFi lending, mining, node operation, validator activity, or tokenization. The broad statutory scope of the Designated Businesses regime (covering issuing, transmitting, custody, administering, managing, lending, buying, selling, and exchanging convertible virtual currencies) may capture some on-chain business models such as centralized lending, but bespoke treatment of decentralized/on-chain activities has not been identified.

C3 · On-Chain Activity — Full Module Record0 sub-modules · 180 words · 3 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

The Isle of Man has not enacted a dedicated stablecoin statute covering issuance authorisation, reserve requirements, redemption rights, disclosure, or systemic designation. A fiat-referenced stablecoin issuer would need to be assessed case-by-case against existing e-money or securities-style perimeter tests under FSA guidance and the Financial Services Act 2008.

C4 · Stablecoins & EMTs — Full Module Record0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

Isle of Man authorities have repeatedly flagged that unlicensed digital-currency activity outside the FSA perimeter carries no consumer-protection backstop, while security-like tokens attract standard investment-business consumer protections equivalent to traditional share-certificate investments.

Open gap — crypto-int-2No codified custody/segregation rule for IOMFSA-licensed or DBROA-registered virtual-asset businesses distinct from general FSA08 licence conditions was located.no under-indexing note recorded
No sub-brief written this cycleThe module carries open gaps but no narrative analysis was authored this cycle. Flagged for the next research pass.

No periodic updates recorded in this cycle

Sources and findings (3)
  1. T3CoinDesk — The commission warns that there is no such consumer protection for entrants into the digital currency market. retrieved M3 non-binding
  2. T3CoinDesk — Security-like tokens requiring an FSA licence come under the same investment-business rules that would apply if the investment were made via other means such as share certificates. retrieved M3 binding in force

#

The Isle of Man applies its general favourable tax regime to crypto activity rather than a crypto-specific tax code: no capital gains tax, no corporate tax for most businesses, and individual income tax capped at 20%. These reflect general Manx tax policy rather than bespoke crypto legislation.

Horizon · 2027-06-30 (± a quarter)First RCASP CARF reporting deadlineAdopted, not yet in force · Tier 3 source
Periodic update · new data 2026-09-28

Tax Treatment

The Income Tax (Crypto-Asset Reporting) Regulations 2025 were approved by the Isle of Man Parliament on 11 December 2025 and became effective on 1 January 2026. These Regulations implement the OECD Crypto-Asset Reporting Framework, CARF, in Isle of Man domestic law, bringing crypto-asset service providers on the Island within scope of tax-information reporting obligations aligned to the international CARF standard. This is a clear, dated, in-force instrument, corroborated by dedicated tax-advisory commentary describing the Parliamentary approval date and effective date precisely.

The CARF implementation is administered by the Isle of Man Government's Income Tax Division, distinct from the Financial Services Authority, which administers the registration-based AML/CFT oversight discussed under crypto licensing above. The two regimes run in parallel: registration under the Designated Businesses Act 2015 addresses money-laundering and terrorist-financing risk, while the CARF Regulations address tax-transparency and cross-border information exchange on crypto-asset holdings and transactions. A crypto-asset business operating on the Island is potentially subject to both regimes simultaneously, each administered by a different authority.

No further detail on the practical reporting mechanics, reporting-entity thresholds, or the first reporting cycle's scope under the 2025 Regulations was retrieved this cycle beyond the approval and effective dates themselves.

Outlook

The CARF Regulations having taken effect from 1 January 2026, the next material development to watch is the completion of the first full reporting cycle under the framework, which would surface practical implementation detail, reporting volumes, or any compliance gaps identified by the Income Tax Division. No further legislative change to this instrument has been signalled this cycle.

Periodic update · new data 2026-09-06

Tax Treatment

The Isle of Man's Income Tax (Crypto-Asset Reporting) Regulations 2025, implementing the OECD Crypto-Asset Reporting Framework, came into effect on 1 January 2026, confirmed at high confidence. These Regulations were approved by Tynwald on 11 December 2025 and require Reporting Crypto-Asset Service Providers to submit an annual return to the Assessor reporting Reportable Users, or confirming their absence, with the first reporting deadline set for 30 June 2027 covering the 2026 reportable period.

This is a materially new compliance burden for the Island's RCASP population: it introduces a dedicated tax-information-reporting obligation that sits alongside, and is distinct from, the AML/CFT registration obligations that already apply to virtual-currency businesses under the DBR&O Act 2015. The regime is structured on OECD CARF lines, meaning it is designed for eventual cross-border tax-information exchange with other CARF-adopting jurisdictions, though the first such exchange is not scheduled until 30 September 2027.

Outlook

The key dated milestone to watch is the 30 June 2027 first annual reporting deadline for the 2026 reportable period, followed by the first cross-border information exchange on 30 September 2027. No further tax-treatment development was identified this cycle beyond the CARF implementation itself.

C6 · Tax Treatment — Full Module Record0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

VASPs must comply with the Travel Rule (Transfer of Virtual Assets) Code 2024 (TRC24), implementing FATF Recommendation 16, alongside the Terrorism and Other Crime (Financial Restrictions) (Compliance with International Standards) Order 2024. Isle of Man RCASPs must also comply with OECD CARF, effective 1 January 2026, with first annual returns due 30 June 2027 and first exchange of information 30 September 2027.

Horizon · 2027-06-30 (± a quarter)Isle of Man CARF first reporting deadlineIn force · Tier 3 source
Horizon · 2027-09-30 (± a quarter)Isle of Man first CARF information exchangeIn force · Tier 3 source
Periodic update · new data 2026-09-21

Cross-Border Transfer

The Isle of Man's cross-border virtual-asset transfer regime tightened materially this cycle through two concrete, dated instruments. First, virtual asset service providers are subject to the Travel Rule (Transfer of Virtual Assets) Code 2024 together with accompanying IOMFSA Travel Rule Guidance, implementing FATF Recommendation 16's requirement that originator and beneficiary information accompany virtual-asset transfers. This is confirmed, in-force, and dated to 2024, giving it a firmer evidentiary footing than several of the Island's other crypto-specific modules, which rely more heavily on lower-tier aggregator sourcing. Second, and separately, Isle of Man Reporting Crypto-Asset Service Providers are now brought within the OECD's Crypto-Asset Reporting Framework. RCASPs must submit an annual CARF return via the Information Providers' Service, with the first reporting deadline set at 30 June 2027 for the 2026 reportable period, and the first information exchange with partner jurisdictions following on 30 September 2027.

These two obligations are distinct in character but complementary in effect. The Travel Rule Code governs the transactional layer, ensuring identifying information travels with the asset at the point of transfer, while CARF governs the tax-transparency layer, ensuring reporting crypto-asset service providers disclose customer holdings and transactions to tax authorities on an annual cycle with a cross-border exchange mechanism modelled on the FATCA/CRS architecture already familiar to Isle of Man financial institutions. Both obligations apply regardless of whether the underlying business is registered as a designated business for AML/CFT purposes only, or holds some other regulatory status; the cross-border transfer regime is, in effect, layered on top of the existing DBR&O registration architecture rather than replacing it.

Outlook

The near-term calendar is unusually concrete for a jurisdiction whose other crypto modules remain comparatively lightly evidenced: the first CARF return is due 30 June 2027, and the first information exchange follows on 30 September 2027. Reporting Crypto-Asset Service Providers should treat 2026 as the first live reportable period. No further tightening or loosening of the Travel Rule Code itself was evidenced this cycle, and the current gap in the record is confirmation of how enforcement of either instrument will be resourced or prioritised relative to the Island's other AML/CFT reform work ahead of the MONEYVAL onsite.

C7 · Cross-Border & Travel Rule — Full Module Record0 sub-modules · 180 words · 7 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

Crypto AML/CFT obligations for the Isle of Man are owned by the Financial Integrity Module (FIM) aml_ctf baseline, to which this crypto consumer subscribes. No aml_cft claims are produced in this crypto baseline to avoid duplication; disambiguation context only is retained (IOMFSA is the designated AML/CFT supervisor for virtual currency Designated Businesses since October 2015, per the Designated Businesses (Registration and Oversight) Act 2015).

C8 · AML/CFT Regime — Full Module Record0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-10-25

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

## Commercial Activity Blackfridge SC Limited has effectively exited the Isle of Man crypto-adjacent market, ceasing to hold any Financial Services Act 2008 authorisation as of 5 October 2026 following the IOMFSA's revocation of its licence. This is the one material commercial-activity event identified for the Isle of Man's crypto sector this cycle; no broader commercial activity, investment, or new-entrant development was confirmed in the jurisdiction this period. The exit is regulatory-driven rather than a disclosed commercial transaction: no amount was disclosed in connection with it, and the firm's wind-down status, whether through liquidation, administration, or sale of the poundtoken book to a successor, was not confirmed this cycle. — Outlook: Watch for confirmation of Blackfridge's wind-down route and for any successor issuer announcement for GBP-referenced token issuance on the Island, which would be the next commercial-activity marker following this exit.

Periodic update · new data 2026-10-25

Commercial Activity

Blackfridge SC Limited has effectively exited the Isle of Man crypto-adjacent market, ceasing to hold any Financial Services Act 2008 authorisation as of 5 October 2026 following the IOMFSA's revocation of its licence. This is the one material commercial-activity event identified for the Isle of Man's crypto sector; no broader commercial activity, investment, or new-entrant development was confirmed in the jurisdiction this period.

The exit is regulatory-driven rather than a disclosed commercial transaction: no amount was disclosed in connection with it, and the firm's wind-down status, whether through liquidation, administration, or sale of the poundtoken book to a successor, was not confirmed.

Outlook

Watch for confirmation of Blackfridge's wind-down route and for any successor issuer announcement for GBP-referenced token issuance on the Island, which would be the next commercial-activity marker following this exit.

Sources and findings (1)
  1. T1Blackfridge SC Limited — Ceased to hold any FSA08 authorisation as of 5 October 2026 following licence revocation; wind-down status not confirmed retrieved M3 binding in force new
No categories match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 9 module(s), 37 finding(s), 31 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 24 Oct 2026: upheld (7 confirmed against the cited source; 3 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.