Business Structuring

Registered office vs virtual office vs real presence: what regulators accept

If you’re setting up a fintech, crypto company, or gaming business, the address question shows up early. Usually right after incorporation. Can we use a registered office? Is a virtual office enough? Do we need actual staff in-country? And the honest answer is annoyingly unsatisfying: it depends on what you’re trying to do.

For a normal trading company, a registered office might be fine. For a regulated business asking for a payments licence, MiCA authorisation, or gambling approval, probably not. Regulators don’t really care that you have an address on paper. They care whether the business is actually managed, controlled, and supervised in a way that makes sense.

That’s the bit founders miss. They buy a shelf company, plug in a mail-forwarding address, and assume they’ve solved “presence”. Nope.


Let’s separate the three things people keep mixing together

These terms get used like they mean the same thing. They don’t.

  • Registered office – the official legal address of the company. This is where corporate notices and government mail go.
  • Virtual office – usually a service address with mail handling, maybe call answering, sometimes meeting rooms you book by the hour.
  • Real presence – actual business substance. People, decision-making, operations, records, oversight. A business that exists somewhere beyond a PDF and a mailbox.

You can have the first without the second. You can have the second without the third. And for regulated sectors, it’s the third one that causes headaches.

Honestly, alot of bad structuring starts here. Founders optimise for setup speed, not for what the bank or regulator will ask six months later.


What regulators are really testing

Regulators rarely ask, “Do you have a nice office?” That’s not the test. They’re trying to work out whether your business has genuine operational substance in the jurisdiction where you’re licensed or registered.

Different regulators phrase it differently, and you should always check current requirements in your target country, but they tend to look for the same themes:

Who is actually running the business?
If all strategic decisions are made from Dubai, London, or Tel Aviv, while your licence sits in Lithuania or Malta, expect questions.

Where are the key control functions?
Think MLRO, compliance oversight, risk, finance, sometimes tech governance too. If every control person is outsourced abroad and nobody local can explain the model, that’s a problem.

Can the business be supervised?
A regulator wants access to records, staff, governance, and management. They don’t want a ghost company with a local receptionist and nothing else.

Does the setup match the risk profile?
A tiny pre-revenue B2B software tool gets treated differently from a customer-facing crypto exchange or online casino handling player funds.

That’s why “what’s accepted” isn’t a yes or no question. It’s more like: does your presence make sense for your activity, volume, customer geography, and risk?


A registered office is admin. That’s it.

A registered office is necessary. It just isn’t impressive.

It helps you incorporate and keep the company in good standing. It gives authorities somewhere to send formal correspondence. In some countries, that’s all it’s supposed to do. If you’re just holding IP, owning shares, or warehousing a dormant entity while you sort out group structure, fine.

But if you’re telling a regulator, payment provider, or bank that this proves local presence, don’t be surprised when they push back.

I’ve seen banking applications wobble because the “head office” turned out to be a company formation agent’s address used by 300 other businesses. Not illegal. Just unconvincing.

If you’re still choosing the entity setup, Company Formation in Multiple Jurisdictions matters more than most founders think, because the address question is tied to the legal structure from day one.


Virtual office – sometimes useful, sometimes a red flag

A virtual office can be perfectly legitimate. Let’s be fair about it. Early-stage businesses use them all the time, especially non-resident founders testing a market before hiring locally.

Used properly, a virtual office can help with:

  • mail handling
  • a business correspondence address
  • occasional in-person meetings
  • basic admin presence while the company is getting started

But here’s where people get sloppy. They start describing a virtual office as their operational headquarters. That’s where the trouble begins.

For fintech, crypto, and gambling businesses, a virtual office on its own often looks thin. Especially if:

  • there are no local employees or directors with real authority
  • the compliance function sits in another country entirely
  • customer support, transaction monitoring, and risk decisions happen elsewhere
  • the same address appears on dozens of unrelated regulated entities

Will that always kill the application? No. But it can trigger deeper due diligence, more questions, slower onboarding, and a general feeling from the reviewer that your setup was built backwards.

And yes, banks notice this too. If you’re dealing with a high-risk sector, read Why banks decline crypto and gambling companies – and how to get approved anyway. It explains why weak substance keeps blowing up account opening.


What “real presence” usually looks like in practice

This is the part people overcomplicate. Real presence doesn’t always mean a fancy office with neon signs and twenty staff. Sometimes it means a lean, believable setup with actual control in the jurisdiction.

For a regulated business, that usually means some mix of the following:

  1. A local director or senior manager who isn’t just a name on paper
  2. Documented board decisions made through the licensed entity
  3. Local access to books, records, policies, and compliance data
  4. At least some staff or dedicated function tied to operations, compliance, or oversight
  5. Service agreements that clearly show what is outsourced and what stays under the entity’s control

Notice what’s missing? A rule saying you need 15 employees and a corner office. Regulators care more about control than optics.

For example, a small crypto broker applying for EU authorisation may start with a compact team, outsourced tech, and external compliance support. That’s fine if governance is clear, senior management is engaged, and the regulated entity isn’t just a pass-through shell. If you’re heading into that world, VASP Registration & MiCA Compliance is where the substance conversation gets very real, very quickly.

On the other hand, if you’re running an online casino with multiple payment channels, affiliates, player balances, and cross-border marketing, the expected level of operational presence is usually higher. More reporting. More controls. More scrutiny. As it should be, frankly.


Founders usually ask the wrong question

They ask, “What’s the minimum we can get away with?”

Better question: “What setup will still make sense when the regulator, bank, EMI, card acquirer, and auditor all review us separately?” That’s the real game. Because even if a company registry accepts your address, your other counterparties might not.

A structure can pass incorporation and still fail everywhere that matters commercially.

Sound familiar?


How this plays out in fintech, crypto, and gambling

Fintech
If you’re applying for a payments or EMI-type licence, expect close attention on management and control. Regulators usually want to see that risk, compliance, and core oversight aren’t purely decorative. A mailbox won’t cut it. Neither will a founder saying, “we’ll hire after approval.” Big mistake.

Crypto
This sector gets tested hard because everyone has seen the old playbook – light-touch setup, outsourced everything, vague group structure, and no clear accountability. If you’re targeting MiCA, VASP registration, or FCA crypto registration, the question isn’t whether you have an address. It’s whether the entity can actually be supervised and held responsible.

Gambling
Gaming regulators and banking partners tend to look closely at ownership, fund flows, player fund handling, support operations, and responsible gambling controls. If the licensed company has no real grip on those functions, expect delays or refusals. Sometimes the issue isn’t the licence itself. It’s the banking and payments stack around it.


What to do before you file anything

Do this in the right order. Please.

Before you submit a licence application or start a bank onboarding pack, map out:

  • which entity signs customers
  • which entity employs staff
  • where directors are based and where they make decisions
  • who holds the AML function and who oversees it
  • where key records and systems are accessible
  • what is outsourced, to whom, and under what controls

If any of those answers sound vague, fix them first.

Also, don’t treat your AML setup like a side note. Weak substance and weak compliance usually show up together. This piece on What an MLRO actually does – and when outsourcing beats hiring is useful if you’re trying to work out what can sensibly be outsourced without making the whole structure look hollow.


So what do regulators accept?

They accept setups that make sense.

A registered office is accepted as a legal address. A virtual office may be accepted as an admin tool. Real presence is what gets a regulated business taken seriously.

If your company has genuine management, clear accountability, documented oversight, and enough local substance to match the risk, you’re in a much better place. If it’s just paper presence dressed up as operations, people can tell. Regulators can. Banks can. Sometimes suppliers can too.

And fixing it later is always messier than doing it properly at the start. More expensive too, usually.

So yes, use a registered office where appropriate. Use a virtual office if it fits the stage you’re at. But don’t confuse either of those with substance. They’re not the same thing. Never were.

More insights