Why Georgian VASPs Need an Ongoing Risk Management Framework

“We’re launching a crypto platform” isn’t a precise enough description of a regulation application.

Can customers convert cryptocurrency to fiat? Does the platform permit virtual assets to be transferred? Will the company have access to client wallets and private keys? Do they plan to manage a trading platform, or loan against digital assets?

These differences are important when seeking a crypto license in Georgia due to the services that a company intends to provide will impact its preparation for regulatory compliance documents, controls, as well as capital requirements.

Georgia might be an appealing environment for fintech businesses, but entering its regulated virtual-asset market today requires more than registering a company and creating a website.

First, Define the Service

Businesses offering virtual assets to third party clients must be registered as Virtual Asset Service Providers with the National Bank of Georgia under the framework described by PB Services.

The scope includes activities like exchange of virtual assets and transfer, management of platforms for trading and custody of cryptocurrency management. In addition, as per the regulation information the custody concept encompasses administration of a customer’s private key and wallet.

This creates the need for a crypto-product relevant to its legal status.

A business owner who would like to get an crypto license in Georgia must map out the customer journey proposed before formulating the request. What happens when a customer deposits their assets? Who is the person who controls the account? The assets can be exchanged or transferred? Which entity is authorized to authorize the transactions?

The clarity of the answers can help to determine what the company will actually do.

Your Business Plan Has to Describe a Real Business

VASP applications also require more than a beautiful pitch deck.

According to the information provided in the report, according to the information provided, National Bank requires a detailed plan of business that contains financial projections spanning the minimum of three years. This includes revenue, expense, and growth expectations. The plan must also demonstrate that there is a real intention to run in Georgia.

This is a requirement that deserves to be addressed as soon as possible.

Investors can inquire about how quickly the business will expand. The business plan for regulatory compliance should also describe how the operation is to be run responsibly.

Georgian applicants for a vasp licence should not treat the commercial model as though it were unrelated. Instead they should link them.

AML is not able to be added to the End

PB Services describes the preparation as a set of steps that include anti-money laundering and control of financing for terrorism.

The warnings are specific to the importation of an AML Policy from another country won’t suffice since Georgian regulations must be integrated into a company’s framework.

Additionally, the operational systems are crucial. The business plan must demonstrate that the company’s systems can identify related and potentially suspicious transactions from the outset.

Practically, the compliance of a platform must affect its development prior to being released. It is not advisable to build a platform before making a decision on how AML policies will be applied. This can lead to unneeded redesigns and delays.

The Services You Select Can Have an impact on your Capital

The necessity to create an early business model is also due to the capital required by the regulatory authorities.

In accordance with the thresholds specified in the source materials, kiosks and exchange activities are required to be 150 000 GEL. Management of a trading platform for trading requires 350,000 GEL while other covered services require 250,000 GEL. The maximum threshold applies for multiple services.

It’s not the exact same as operating capital that is used for normal purposes. The application has to be accompanied by proof of the requested amount has been funded.

A founder planning to get crypto blockchain license in Georgia should consequently consider regulatory capital during financial planning not after the rest of the application has already been assembled.

Registration isn’t the end of the compliance process.

The calendar of compliance does not expire with the approval. The guidelines provide regular obligations that involve risk management, cybersecurity, technological resilience and risk of fraud, record retention, independent review and complaints from customers.

A risk management framework, for example, requires an opinion by an independent auditor within the 12 month of registration. Businesses must also follow the described rules for handling complaints. They are required to accept all complaints, whether they’re written, oral or electronic, to review the complaints within a maximum of one month period, and provide information on complaints electronically to National Bank every month.

These details can change the way in which a serious applicant is approached when it comes to licensing.

Imagine a Georgian VASP Application to represent the layout of a controlled business.

The structure of the business, the service model and technology AML controls, regulatory capital processes for risk, as well as customer processes have to integrate.

Georgia remains a wonderful location for crypto and fintech companies. The regulatory framework it has provides an easily-defined route to the market. However, asking how fast you can obtain an approval isn’t the most effective way to start.

You should be able to define in detail the goals of your business’s crypto-related activities will be and show that you are prepared to comply with Georgia’s regulations.

Scroll to Top