How to obtain a CASP license in South Africa: requirements, deadlines and company structure

South Africa is increasingly establishing itself as one of the key regulated jurisdictions for crypto businesses in Africa. After the Financial Sector Conduct Authority (FSCA) officially recognized crypto assets as financial products under the FAIS Act, crypto companies were required to move into the licensed field. It was in this context that the CASP license (Crypto Asset Service Provider) appeared, which is today the basic regulatory tool for all crypto providers in South Africa.

As of 2026, the market has already formed as fully regulated: the FSCA has received over 500 applications for CASP licenses, and more than half of them have already been approved or are in active processing. This shows that South Africa is not just introducing regulation, but is actually building a full-fledged infrastructure for legal crypto businesses.

CASP (Crypto Asset Service Provider) is a license for companies that provide crypto-asset services within the regulated financial environment of South Africa. CASP activities include: crypto exchanges, OTC platforms, custody services, brokerage models, asset management, investment platforms and crypto consulting. Regulation is carried out by the FSCA within the framework of the FAIS Act, which actually integrates the crypto sector into the classical financial system. Important: CASP is not a “simplified type” crypto license, but a full-fledged financial authorization, similar to traditional financial services.

Despite the lack of a strict minimum capital, CASP is a structured financial license, and the regulator assesses the company comprehensively.

The requirements for obtaining a CASP license are as follows:

1. Local substance (real presence in South Africa)
The company must have a real operational presence in the country, and not a nominal registration. This includes: office or physical presence / local management / real directors / operating activities from the territory of South Africa. FSCA checks whether the business actually operates in the jurisdiction.

2. Corporate structure and management
The company must have a clearly defined management model. Mandatory elements: company directors / Key Individuals / responsible for operational management / compliance with fit & proper requirements. FSCA assesses the experience, reputation and competence of all key individuals.

3. AML / KYC system
One of the key blocks of regulation is financial compliance. The company must implement: KYC procedures for customers / transaction monitoring / detection of suspicious transactions / AML/CTF policy. Without a full-fledged AML structure, a license is practically unattainable.

4. Compliance function
The structure must have a compliance officer or a separate compliance unit. Its functions: regulatory compliance monitoring / interaction with FSCA / internal process audit / risk control

5. Business model
FSCA analyzes the operational logic of the business in detail. It checks: how the company earns / how transactions are processed / how client assets are protected / what is the risk model / what is the technical infrastructure. According to FSCA practice, one of the most common reasons for refusal is a weak or unclear description of the business model and operational processes.

6. Internal policies and documentation
A CASP requires a full package of internal policies. Typically, these are: governance policy / risk management framework / AML/CTF policies / client onboarding / data protection / internal control procedures. This is actually the company's "financial operating instructions".

7. Financial capacity
In South Africa, there is no fixed minimum authorized capital for CASP. But the company must prove: financial stability / ability to cover operating costs / availability of resources for risk management / viability of the business model. The regulator does not assess the figure, but the sustainability of the business.

A typical structure of a crypto company in South Africa looks like this:

• operating company (Pty Ltd) in South Africa
• directors with real management
• Key Individuals
• compliance officer / MLRO
• accounting and tax support
• auditor (if necessary)
• if necessary - a holding company in another jurisdiction

Average term for obtaining a license: 4–9 months in standard cases, longer - if there are requests for revisions.

FSCA actively interacts with applicants, so the quality of preparation directly affects the speed of the process.

The most common reasons for refusals or delays are as follows:

• weak business plan
• lack of real substance
• insufficient AML/CTF framework
• non-compliance of directors with fit & proper requirements
• errors in documentation
• unclear operating model

A CASP license in South Africa is a full-fledged entry into the regulated financial market, which requires not formal registration, but real operational readiness of the company. The main factor for success is not the application itself, but a correctly built business structure BEFORE the start of licensing.

If you plan to obtain a CASP license in South Africa, it is important to understand: the key difficulty is not the regulator, but the correct business structure. We help crypto companies: analyze the model for FSCA requirements / build a corporate structure / develop an AML and compliance system / prepare a full package of documents / go through the licensing process without critical errors. Sign up for a consultation with the Antwort Law team and we will analyze your project and provide a clear strategy for obtaining a CASP license specifically for your business model.

Lidia Ivanova

International lawyer
Antwort Law