Skip to content
VASPCheck
Report a scam

Methodology & about

A sourced starting point for a review. It does not replace your own due diligence.

VASPCheck collects public regulatory and reputational records on virtual asset service providers and puts them on one page per provider. It is built for bank staff who need the facts on file before opening a deeper review.

What is on file

  • Official registers. The ESMA register of MiCA-authorized CASPs and national regulator registers (CSSF, BaFin, AFM, AMF, FMA, MFSA, Bank of Lithuania, FCA, FinCEN, NYDFS, VARA, MAS, FINMA, AUSTRAC and others).
  • User reputation. Scores and review counts are withheld when the record has no verified review-page URL and observation date.
  • Press monitoring. Dated items from financial and sector press (Reuters, Bloomberg, Financial Times, CoinDesk), each tagged positive, negative or neutral.
  • Market data. Spot exchange rank from CoinMarketCap.
  • Incidents and enforcement. Hacks, outages, fines and regulatory actions with dates and amounts.

Official registers

Each licence row links to the competent authority's public register, so every reference number can be checked at source.

  • ESMAEU MiCA CASP register
  • CBICentral Bank of Ireland
  • AFMAutoriteit Financiële Markten (Netherlands)
  • FMAFinanzmarktaufsicht (Austria)
  • CSSFCommission de Surveillance du Secteur Financier (Luxembourg)
  • BaFinBundesanstalt für Finanzdienstleistungsaufsicht (Germany)
  • AMFAutorité des marchés financiers (France)
  • FCAFinancial Conduct Authority (UK)
  • FinCENFinancial Crimes Enforcement Network (US)
  • NYDFSNY State Department of Financial Services (US)
  • MASMonetary Authority of Singapore
  • VARAVirtual Assets Regulatory Authority (Dubai)
  • FINMASwiss Financial Market Supervisory Authority
  • LBBank of Lithuania
  • MFSAMalta Financial Services Authority
  • KoFIUKorea Financial Intelligence Unit
  • JFSAFinancial Services Agency (Japan)
  • SFCSecurities and Futures Commission (Hong Kong)
  • BappebtiBappebti / OJK (Indonesia)
  • CNMVComisión Nacional del Mercado de Valores (Spain)
  • SPKSermaye Piyasası Kurulu (Türkiye)
  • BCBBanco Central do Brasil
  • CNBVComisión Nacional Bancaria y de Valores (Mexico)
  • GFSCGibraltar Financial Services Commission
  • FINTRACFINTRAC (Canada)
  • AUSTRACAustralian Transaction Reports and Analysis Centre
  • BdEBanco de España
  • CVMComissão de Valores Mobiliários (Brazil)

How the concern indicator is set

The indicator is a judgement on counterparty concern for a bank. It weighs licence coverage in the relevant jurisdiction, the seriousness and recency of enforcement, the security incident record, and reputational signals.

Low concern

Authorised in a major jurisdiction, clean enforcement record.

Medium concern

Licensed, with gaps: pending files, historic fines, remediated incident.

High concern

No local authorisation, active warnings, or a severe recent event.

Full criteria
Low
Authorised in a major jurisdiction (typically a MiCA CASP authorisation or an equivalent licence), no unresolved enforcement, no material incident in recent years.
Medium
Licensed but with meaningful gaps: pending authorisations, historic fines, offshore group structures, or a recent incident that was remediated.
High
No authorisation in the relevant jurisdiction, active regulator warnings, revoked registrations, or a severe recent security or enforcement event.

What the indicator is not

  • Not a credit rating and not a solvency or safeguarding opinion.
  • Not an endorsement, a ranking or a recommendation to onboard.
  • Not a like-for-like comparison — two providers at the same level can carry very different risks.
  • Not real-time: it reflects the record as of the profile's “Last reviewed” date.

Update cadence

Licence data is refreshed monthly against official registers. Press and rating data weekly. Incidents are added as they are reported. Each profile carries its own “Last reviewed” date. Latest dataset update: 2 Sept 2026 (2026-09-02).

Limitations

  • Official registers can lag reality: a revocation or a new authorisation may take days or weeks to appear in the public record.
  • Group structures matter. A licence can sit in an entity other than the one a client contracts with — always check the legal entity on the agreement against the entity named in the register.
  • Review-platform scores and app ratings are indicative only; they can be campaigned and are not weighted heavily in the concern indicator.
  • Press coverage skews to large providers. A thin press record on a small provider is not evidence of a clean history.
  • Reference numbers are reproduced from public registers; where an authority publishes no number, the row links to the register entry instead. No reference is ever invented.

Report an error

Spotted an outdated licence, a wrong status or a missing enforcement action? Corrections are checked against the official register before a profile changes — sourced reports are handled first.

Report a data issueContact & scam reports

Disclaimer

This service is in beta and its data is still being verified. VASPCheck is an informational tool, not legal or regulatory advice, and never replaces the bank's own due diligence. Always confirm a provider's status directly with the competent authority's register before making a decision.

Company names and logos are used for identification only. Spotted something wrong? Report a data issue.