Who has to register with the Isle of Man Financial Services Authority under the Designated Businesses Act, who is exempt, how the portal application works, what it costs from 1 April 2026, and what the Authority tests once you are on the register. Checked against the legislation and the Authority's current policy, and kept current.
Thirteen categories under Schedule 1 to the Designated Businesses (Registration and Oversight) Act 2015: accountants, tax advisers, payroll, lawyers doing transactional work, estate agents, lenders, leasing, guarantees, high value cash dealers, safe custody, VASPs, money managers and some non-profits.
Isle of Man Financial Services Authority (IOMFSA), via its online designated business portal. Some accountants and lawyers can have day-to-day AML oversight delegated to their professional body.
From £375 application and £375 a year for a one-person accountancy, tax, payroll or estate agency firm. VASPs pay £3,747. Specified non-profits pay nothing.
The Authority's published service standard is three weeks from a fully completed application. Advertising before registration is a breach.
Accountants, tax advisers, payroll agents, estate agents, lenders, lawyers doing transactional work, safe custody providers, anyone taking €15,000 in cash for goods, and crypto businesses: if you do any of it by way of business in or from the Isle of Man, you register with the Financial Services Authority before you start. This guide covers who is in, who is out, how the application works, what it costs from 1 April 2026, and what the Authority expects once your name is on the register.
The Designated Businesses (Registration and Oversight) Act 2015 (DBROA) is the Isle of Man's regime for the businesses that international AML standards call designated non-financial businesses and professions. Section 7 says you must not carry on, or hold yourself out as carrying on, a designated business in or from the Island unless you are registered or exempt, acting within your registration, and complying with AML/CFT legislation. The list of what counts lives in Schedule 1, which was rewritten by the Designated Businesses (Amendment) Order 2024 with effect from 25 October 2024. In plain terms, the thirteen categories are:
Two phrases do the heavy lifting. "By way of business" is the threshold: a one-off favour is not caught, a service you charge for is. And frequency is irrelevant; the Authority's own FAQ says that any Schedule 1 activity is registrable "regardless of extent and frequency". If you do it once a year for a fee, you register.
Part 2 of Schedule 1 exempts a person while acting in certain already-regulated capacities: a Financial Services Act 2008 licenceholder, a collective investment scheme, an authorised or permitted insurer, a registered insurance manager or intermediary, a registered pension scheme trustee or administrator, an Online Gambling Regulation Act licensee, and bookmakers, racecourse, totalisator and casino licence holders. The point is that these businesses are already supervised for AML/CFT under their own regime. This is also why there is no "exempt TCSP" category: trust and company service provision is licensable under the 2008 Act, and licenceholders are outside DBROA.
The exemption is narrower than people assume. The Registration Policy says it is only available where the designated business and the exempt activity are carried on by the same legal entity. A designated business in the same group as an exempt person, or managed by one, must register in its own right. An accountancy practice owned by a licensed CSP still registers.
The other carve-outs are specific. In-house accountants, lawyers and payroll staff who only serve their own employer are not "external". Intra-group lending, leasing and guarantees between a parent and its subsidiaries are out. An estate agent granting a tenancy without taking money from the tenant is out for that activity. Storing luggage, household goods, vehicles or data, transporting valuables, a hotel safe, and a lawyer storing documents other than documents of title are not safe custody. And a legal professional holding only an advance payment of fees is not managing client assets.
Section 7 treats you as carrying on business in the Island if you do so from a permanent place of business here or engage in the activity here. It treats you as carrying on business from the Island if you are an Isle of Man company, LLC, limited partnership, foundation, registered foreign company or resident individual and you carry on the designated business outside the Island. An Isle of Man company doing bookkeeping for clients in Dubai is in scope.
Holding out is defined widely. Words in a website's name, title, content or address, in an email name, address or subject line, or in a domain name, which indicate expressly or by implication that you carry on a designated business in, from or in connection with the Island, are holding out. The Authority's position is that advertising before registration is itself a breach: apply as soon as possible and take the advertising down until the registration is issued. Launching the website first and sorting the paperwork later is the single most common way small firms on the Island end up with a civil penalty.
Everything runs through the Authority's online portal at iomdnfbp.co.im. The portal has four roles, and for a small firm one person can hold all of them:
Every form is signed twice, once by the person completing it and once by the submitter, even when they are the same human; the Authority wrote to the sector in July 2025 to say so after too many single-signed forms. Each specified person provides a certified copy of their passport or driving licence and is expected to have a basic criminal records check (DBS, Disclosure Scotland or AccessNI) dated within the last twelve months. A police subject access request is not accepted as a substitute. The Risk Assessment Form asks for an outline of your procedures, your business profile and your client base; for a genuine start-up it can be a nil return, though a thought-through one will save questions later. The application fee is paid on submission.
The Authority's published service standard is three weeks from receipt of a fully completed application. In practice the clock only starts when the application is complete, so an application with a missing certified copy or an unsigned form is not "received" for this purpose. Applications still incomplete after six months may need to be resubmitted with a fresh fee, and once registered you are expected to start the business within six months unless the Authority agrees otherwise in writing. The Authority will only register people who are actually going to undertake the activity, so it will ask for a start date.
A successful applicant goes on the public register, which shows the name, a description of the business and the principal Island address. A refusal comes with written reasons and a right of appeal to the Financial Services Tribunal.
Section 9 obliges the Authority to refuse registration if, on reasonable grounds, it is not satisfied that the applicant and every specified person is fit and proper. The statutory grounds are convictions for AML/CFT offences or their foreign equivalents, dishonesty, offences under the financial services Acts, perjury or perverting the course of justice; being subject to action for breaching those laws; knowingly or recklessly giving false or misleading information; and anything else that makes the person unsuitable for money laundering or terrorist financing reasons.
The Registration Policy fleshes that out. The Authority looks at the integrity of the applicant, its controllers and directors, the integrity and competence of the MLRO, deputy MLRO and compliance officer, and the nature and scale of the business. Its list of integrity indicators includes disqualification as a director, expulsion from a professional body, criticism by a court or regulator, and non-disclosure of any of those. Nominee shareholder arrangements must be disclosed. The Authority can interview, can attach conditions to a registration, and must give reasons when it does. The test is continuing: it applies on the day you register and every day afterwards.
Fees are set by the Isle of Man Financial Services Authority (Fees) Order 2026, in force from 1 April 2026, which put all the Authority's fees into one instrument. Designated businesses are grouped into four types. Type A is virtual asset service providers. Type B is legal professionals, external accountants, tax advisers, estate agents and payroll agents. Type C is everything else: lending, leasing, guarantees, high value dealing, safe custody and managing money. Type D is specified non-profit organisations, which pay nothing. The annual fee is a base fee plus a volume fee by headcount, and "employee" includes partners, directors and officers, so a two-director company with no staff is a two-employee firm.
| Type | Application fee | Annual, 1 employee | Annual, 2 | Annual, 3 to 5 | Annual, 6 to 10 | Annual, more than 25 |
|---|---|---|---|---|---|---|
| A: VASP | £3,747 | £3,747 | £4,283 | £4,283 | £5,354 | £8,565 |
| B: legal, accountancy, tax, estate agency, payroll | £375 / £1,178 / £1,821 (1 / 2 / 3+ employees) | £375 | £750 | £2,357 | £3,428 | £6,639 |
| C: lending, leasing, guarantees, high value, safe custody, managing money | £375 / £1,178 / £1,285 (1 / 2 / 3+ employees) | £375 | £750 | £1,821 | £2,892 | £6,103 |
| D: specified non-profit | £0 | £0 | £0 | £0 | £0 | £0 |
Intermediate bands exist for 11 to 15 and 16 to 25 employees. If your AML oversight is delegated to your professional body (ACCA, ICAEW, the Institute of Certified Bookkeepers, the Institute of Financial Accountants or the Isle of Man Law Society) the annual fee is £375 for up to five employees, rising to £869 for more than 25; registration and enforcement stay with the Authority. The annual review date is 1 November, headcount comes from your most recent AML/CFT statistical return, only the highest fee is payable if you hold more than one registration, first-year fees are apportioned monthly, nothing is refundable, and fees rise with CPI every April from 2027. The two-employee annual fee for Types B and C fell from £1,144 to £750 this year, which is the one piece of good news in the Order.
Registration brings you inside the AML/CFT Code 2019 in full. The Authority's 2025 enforcement statements are a useful checklist of the paragraphs it tests on inspection, because they are the ones firms kept failing:
The Authority publishes sector-specific guidance notes for accountants and tax advisers, estate agents, high value goods dealers, moneylenders, advocates, payroll and TCSPs, and in April 2026 issued clickable sector guides for every designated business sector. Read yours before the inspector does.
Operating or advertising without registration attracts a civil penalty of up to £5,000 under section 7, and the Authority uses it: five firms were penalised £25,000 between them in 2020 and 2021, including a company advertising property sales on Facebook and an accountancy firm trading before and during its application. It is also a criminal offence, with a level 5 fine or 12 months' custody on summary conviction and an unlimited fine or two years on information. Providing false or misleading information to the Authority carries the same scale.
Breaches of the Code after registration fall under the AML/CFT (Civil Penalties) Regulations 2019, which set penalties as a percentage of income with discounts for early settlement, and come with a public statement. The 2025 examples are instructive. A payroll agent was fined £48,356, discounted to £33,850, for failures in its business and customer risk assessments, due diligence, screening and monitoring. A sole practitioner accountant was fined £2,640, discounted to £2,376, for having no business risk assessment, no customer risk assessments and no technology risk assessment since registering in 2019; the Authority called the failures "systemic and longstanding". The amounts are small. The public statement with your name on it is not.
The Authority can also revoke a registration, for example for non-payment of the annual fee or failure to comply with AML/CFT legislation, and has done so.
At 31 March 2025 there were 310 registered designated businesses: 169 external accountants, 103 tax advisers, 77 payroll agents, 37 legal professionals, 34 lenders, 21 VASPs, 17 estate agents, a handful of safe custody providers, leasing businesses and non-profits, and no high value dealers. Many firms hold more than one registration.
Three things changed this year. The National Risk Assessment published on 11 March 2026 rated accountants, tax advisers, payroll and legal services as medium risk, estate agents and moneylending as medium low, and safe custody, high value dealing and non-profits as low, and every firm has to fold those findings into its risk assessments. The Fees Order 2026 reset the fee structure and cut the two-employee fee. And the Financial Services (Miscellaneous Provisions) Bill, which completed its passage through the branches of Tynwald in July 2026, gives the Authority a power to suspend a registration, a power to regulate how registered firms describe their registration in advertising, inspection powers over suspected unregistered businesses and a rebuilt civil penalty regime that can reach directors and other role-holders where a breach happened with their consent or neglect. A proposal to require every designated business to be managed and controlled in the Island was dropped from the Bill in December 2025 for further consideration, so for now that condition applies to VASPs only.
Behind all of it sits the MONEYVAL on-site evaluation, which took place from 28 September to 9 October 2026 and examined how effectively the Island supervises these sectors. The report lands in 2027. Expect the Authority's appetite for incomplete risk assessments to be lower than ever in the meantime.
Yes. Bookkeeping for third parties by way of business is expressly within "external accountant". The application fee is £375 and the annual fee is £375 for a one-person firm.
The IOMFSA's published service standard is three weeks from receipt of a fully completed application. Missing certified documents, criminal records checks or signatures stop the clock.
No. Advertising or describing yourself as carrying on a designated business in or from the Island is "holding out", which is a breach of section 7 until you are registered.
Only the licensed entity, while acting under its licence. A separate company in the same group doing accountancy, payroll or lending must register in its own right.
A civil penalty of up to £5,000, and it is also a criminal offence: up to a level 5 fine or 12 months' custody on summary conviction, or an unlimited fine or two years on information.
Yes. The Code requires an appointed MLRO. For a sole practitioner that is you, and you complete the Specified Person Questionnaire for the role. You can outsource the function to a suitably qualified person, which is one of the things Kybri does.
The AML/CFT Statistical Return, submitted through the STRIX portal each year for the previous calendar year. The 2025 return was due on 3 April 2026. It doubles as the section 13 annual return and sets your headcount for fees.
Only if you are a VASP. The proposal to extend a management and control requirement to all designated businesses was removed from the 2026 Bill for further consideration.
We scope whether you are in or out, prepare the application and the specified person questionnaires, build the business, customer and technology risk assessments and the policies the Code requires, act as outsourced MLRO or compliance officer, and get you ready for inspections and the STRIX return. We are not a law firm or a corporate service provider; we work alongside yours. If you want a straight answer on whether your activity needs registering, the first conversation is free.
Sources: Designated Businesses (Registration and Oversight) Act 2015 (IOMFSA consolidation, April 2026); Designated Businesses (Amendment) Order 2024 (SD 2024/0135); IOMFSA Designated Businesses Registration Policy, version 4 (13 October 2025); IOMFSA Designated Businesses portal user guide v3.0 (January 2026); IOMFSA registration requirements, FAQs and oversight obligations pages; Dear CEO letter to designated businesses (31 July 2025); Isle of Man Financial Services Authority (Fees) Order 2026 (SD 2026/0060) and feedback statement FS26-03; AML/CFT Code 2019 and AML/CFT Handbook (April 2026); IOMFSA statistical return guidance and news (December 2025); IOMFSA thematic reports on accountants (July 2024), estate agents (July 2025) and moneylenders (August 2025); IOMFSA public statements (May and June 2025) and press releases (December 2021, April 2025); IOMFSA summary of registrations and licences; National Risk Assessment key findings (March 2026); Financial Services (Miscellaneous Provisions) Bill feedback statement (April 2026); Council of Europe MONEYVAL statement (9 October 2026). This guide is general information, not legal advice.
A thirty-minute call, no obligation. If the answer is that you do not need us yet, you will hear that too.
