Writing a VASP Business Plan the FSC Will Accept

The business plan is where the FSC decides whether your VASP is viable, well-governed and safe to license. Here is what the regulator is really looking for, a structure that works, and the mistakes that trigger delay.

 

In short: a VASP licence application stands or falls on its business plan. The FSC does not read it as a pitch to investors; it reads it as evidence that the business is viable, that its risks are understood and controlled, and that client assets will be safe. That calls for a plan built around three things the regulator actually tests — a credible commercial model, a genuine risk-and-control framework, and realistic financial projections backed by a working model. Get the structure and the evidence right and the plan speeds the application; get them wrong and it generates round after round of information requests.

The business plan is a supervisory document, not a pitch

The single most useful shift in mindset is to stop writing for investors and start writing for a supervisor. An investor wants to be persuaded of the upside; a regulator wants to be satisfied that the business will not fail messily and will not harm its customers. Those are different documents. Language that impresses a venture audience — aggressive growth curves, total-addressable-market bravado, best-case-only numbers — reads to a regulator as over-optimism, and over-optimism reads as a lack of judgement rather than confidence.

A business plan the FSC will accept demonstrates three things in the regulator’s own language: that the business is viable, that its risks are understood and controlled, and that client assets are protected. Everything in the document should serve one of those aims.

What the FSC is really looking for

Read through the regulator’s eyes, the plan is examined through three lenses:

• Is the commercial model coherent, adequately funded and able to sustain itself? This covers the revenue model, the cost base, the runway, and capital adequacy against the required minimum.
• Risk and control. Does the applicant genuinely understand its risks — money-laundering, cyber, custody, market, liquidity and operational — and has it designed proportionate controls and governance to manage them?
• Client-asset safety. How are client assets held, segregated and safeguarded? For the higher-risk trading-platform and custody classes, how will proof of reserves be evidenced?

The through-line is judgement. The FSC is testing whether the people behind the business have thought it through — not whether the idea is exciting. A modest, well-reasoned plan beats an ambitious, hand-waving one every time.

Depth should also be proportionate to the licence class and the risk it carries. A trading platform or custody business — the classes that hold and move client assets — will need far more detail on custody architecture, segregation, key management and reserves than a lower-risk advisory or transfer service. Matching the weight of the plan to the risk of the activity is itself a signal of judgement: a thin plan for a high-risk class invites scrutiny, while pages of detail on a low-risk one suggest the applicant has not prioritised what matters. Write to the risk, not to a template.

A recommended business-plan structure

A plan is far easier to approve when it answers the regulator’s questions in a logical order and points clearly to its supporting evidence. A structure that works:

• Executive summary — what the business does, who is behind it, and the licence class(es) sought.
• The business and its activities — a precise mapping of activities to the licence class(es), leaving no ambiguity about scope.
• Ownership, governance and management — board, organisation chart, key roles and the fit-and-proper position of controllers and officers.
• Market and commercial model — target customers, revenue model, competition and the jurisdictions served.
• Risk-management framework — a risk register with AML/CFT, cyber, custody, market, liquidity and operational risks, and the controls for each.
• Technology and operations — systems, custody architecture, key management, and any outsourcing or third-party dependencies.
• Client-asset safeguarding — segregation, custody and, where relevant, the proof-of-reserves approach.
• Financial projections and capital plan — the model, capital adequacy and reserve management.
• Compliance and regulatory — policies, the nominated officer, and reporting arrangements.
• Appendices — policies, CVs, the financial model and supporting evidence.

The order matters less than the discipline: every claim in the narrative should be traceable to evidence in an appendix, and nothing material should be left for the FSC to infer.

Of these sections, the risk-management framework and the client-asset safeguarding sections do the heaviest lifting. They are where a supervisor spends the most time, because they answer the two questions that matter most: what could go wrong, and what happens to customers’ assets if it does. A plan that treats these as the centre of gravity — rather than an obligation to be discharged after the commercial story — is already most of the way to acceptance.

Financial-model essentials

The projections are where many plans quietly fall apart. Decorative numbers — a spreadsheet built to look impressive rather than to be interrogated — do not survive supervisory scrutiny. A credible model has a few non-negotiable features:

• A three-to-five-year projected profit-and-loss, balance sheet and cash flow that are driver-based and internally consistent.
• A capital-adequacy view showing the J$16-million minimum is met and maintained throughout the plan — not just at day one.
• Reserve management for custody and trading classes — how client assets are held on a one-to-one basis and how proof of reserves is produced.
• Scenario and stress analysis — a base case, a downside, and a genuine stress case (a sharp volume drop, a market shock, a security incident) that shows the business survives.
• Documented, defensible assumptions and unit economics that make sense when unpicked line by line.

The model must survive a bad year Regulators do not license businesses that only work in good times. The most persuasive financial section is not the one with the steepest growth — it is the one that shows, with evidence, that the firm stays solvent, adequately capitalised and able to return client assets even when the year goes badly.

Pitfalls that trigger information requests

Most delays are self-inflicted and predictable. Each of the following reliably generates a round of FSC follow-up, adding weeks to the timeline:

• Hockey-stick projections with no basis — aggressive growth presented without supporting assumptions.
• A generic, boilerplate risk section that clearly does not reflect the actual business.
• Vagueness on custody and client-asset segregation — the area the regulator cares about most.
• A mismatch between the activities described and the licence class applied for.
• No stress testing and no plan for a downturn.
• Inconsistencies between the narrative and the numbers, or between the plan and other application documents.
• Outsourcing and third-party dependencies left unexamined.

Every one of these is avoidable with a careful internal review before submission — ideally by someone who reads the plan the way the FSC will, looking for gaps rather than admiring the vision.

Write it once, and write it well

There is a final reason to invest in the plan: it is not a document you file and forget. Once licensed, you will be held to it and expected to report against it, and material departures may need to be notified. A plan written honestly and precisely is therefore also a plan you can actually run the business by — which is exactly the alignment the FSC is looking for between what you say and what you will do. Build it with people who understand both the regulatory lens and the financial model, and it becomes an asset rather than a hurdle.

Frequently asked questions

How long should a VASP business plan be?

As long as it needs to answer the FSC’s questions with evidence — no longer, no shorter. Completeness and clarity matter far more than page count; a focused plan with well-organised appendices beats a padded one. In practice, a credible plan is substantial once the supporting policies and model are included.

How many years should the projections cover?

Typically three to five years, presented as a base case with at least a downside and a genuine stress scenario. The regulator is as interested in what happens in a bad year as in the base case.

Do the projections need to be audited?

No — projections are forward-looking and are not audited. They must, however, be realistic, documented and internally consistent. Proof of reserves is a separate matter: that is an independent assurance engagement over client assets, covered elsewhere in this series.

What most often causes delay?

Over-optimistic numbers with no basis, vagueness on custody and client-asset handling, and inconsistencies between the narrative and the figures. Each predictably triggers information requests that add weeks.

Can I reuse my investor pitch deck?

Not directly. An investor deck sells upside; a regulator reads for safety, control and viability. Reuse the underlying substance, but rewrite it for the supervisory lens — measured, evidenced and risk-aware rather than promotional.

 

How Dawgen Global can help Dawgen Global’s advisory and Virtual CFO teams build VASP business plans and financial models to the standard the FSC expects — the commercial model, the risk-and-control framework, the capital-adequacy and reserve plan, and the stress analysis behind them. We are not a licence applicant and do not operate any virtual asset business — our role is advisory and assurance. We draft the plan, build and stress-test the model, align the narrative with the numbers, and review the whole package the way a supervisor would before it reaches the FSC. Separately, and subject to independence, we provide assurance engagements — including proof of reserves — for licensed VASPs. To build a plan and model the FSC will accept, contact us at [email protected] or visit dawgen.global.

This article is part of The Caribbean Virtual Asset Regulation Imperative™ series by Dawgen Global, powered by DAGAF™ — the Dawgen Digital Asset Governance & Assurance Framework. It is general information based on the FSC’s consultation documents of 10 June 2026 and established supervisory practice, and is not legal, regulatory or investment advice. Requirements remain subject to change following consultation; confirm details against the FSC’s published papers.

About Dawgen Global