Taking Online Payments With an Offshore Company

Taking card and wallet payments is usually the step where an offshore structure meets real-world scrutiny. Payment processing for an offshore company is not forbidden, and Mauritius is not a barred location in itself. But a processor does not approve a jurisdiction: it approves a business, its owners and its paperwork. This guide explains how an Authorised Company is typically assessed and what to put in order before you apply.

It covers the processor's point of view only. For the business model of an online shop, see the e-commerce use case.

How a processor looks at an Authorised Company

Whether the provider is a global platform, a local acquirer or a specialist high-risk gateway, the review follows the same logic. The processor wants to know three things: who really owns and controls the company, what it sells and to whom, and where the money will go.

Under the Financial Services Act, an Authorised Company is a company with a non-citizen majority shareholding, doing business mainly outside Mauritius and with its central management and control outside Mauritius. It must also keep a registered agent in Mauritius, which has to be an FSC-licensed corporate service provider (Management Licence). Those legal features are a good starting point for your application, because they are exactly what the reviewer will ask you to explain. For the legal definition, see Authorised Company in Mauritius.

Ownership and control

Processors apply know-your-customer rules to every merchant. Expect to be asked for the full ownership chain down to the individuals behind the company. Mauritian law already expects the same discipline: a company must permanently identify its beneficial owner and any nominee and record them in a separate register, with full name, residential address, identity or passport number, nationality and the holding structure that leads to the ultimate beneficial owner.

That register is held by the company, and the Registrar of Companies keeps a Beneficial Ownership Register accessible to competent authorities. The Companies Act does not describe it as public. A processor is not a public authority, so it will ask you for the information directly. See ownership privacy for what stays confidential and what does not.

Substance and credibility

A reviewer will look for signs that the company is a real operating business and not a shell. The questions are practical:

• Who runs the company day to day, and from which country?
• Does the website show a legal entity, a business purpose, terms of sale and a refund policy?
• Is there a track record: invoices, a contract with a supplier, a domain in the company's name?
• Does the declared activity match the licence and the constitution?

How clients and suppliers read an offshore name is covered in offshore company credibility.

What a processor will usually ask for

Requirements differ between providers, so treat the list below as a working base rather than a promise of approval.

Keep the documents consistent. A different company name on the website, the contract and the bank statement is one of the quickest ways to a refusal.

Preparing the file step by step

The order matters. Many applicants try to open the processing account before the bank account, then discover that the processor wants to see the settlement account. The bank question has its own page: banking options for an offshore company and why banks refuse offshore company accounts.

Stripe and an offshore company

Searches for "stripe offshore company" usually reflect one worry: will a global platform accept a Mauritius entity? There is no rule you can quote that says yes or no in advance. Availability depends on the countries the platform currently supports for merchant onboarding, on its restricted-business list and on its risk model, and all of these change. Check the platform's current list of supported countries and prohibited businesses directly before you build a plan around it.

What you can control is the quality of the file. A company with an identified ownership chain, a clear product, a real website and a bank account in its own name is easier to review than one that cannot explain what it sells. If the platform declines, ask whether the refusal concerns the country, the activity or the documents, because each has a different remedy.

PayPal and an offshore company in Mauritius

For "paypal offshore company mauritius", the same logic applies, with two practical points. First, a business wallet is tied to the legal entity: the name on the account must match the company's registered name, and the owner who completes verification must be able to prove identity and address. Second, wallets tend to hold or limit funds when activity does not match the profile declared at sign-up, so describe the business accurately from the start and keep the declared activity aligned with what you actually sell.

Do not open a wallet in your personal name and route company sales through it. That mixes personal and company funds, can breach the platform's terms, and creates avoidable difficulties for your accounts and for your tax position at home. See invoicing clients from an offshore company.

Why applications are refused or frozen

The most common reasons are not exotic. They are:

• The activity sits on the processor's restricted list, whatever the company's legal form.
• The ownership information is incomplete or contradictory.
• The website does not identify the legal entity or lacks refund terms.
• The company's central management and control cannot be explained, or the person managing it lives in a country the processor does not serve.
• The business model carries high chargeback risk and the company has no history.

A rejection is not a legal finding against your company. It is a commercial risk decision, and the processor often does not give detailed reasons.

What an Authorised Company cannot do itself

Do not confuse accepting payments for your own sales with providing payment services to others. Subject to exceptions in the FSC Rules, an Authorised Company cannot carry on the Fourth Schedule activities of the Financial Services Act, which include banking and financial services. Collecting funds on behalf of third parties, running a marketplace that holds customers' money or offering wallet services may fall into regulated territory. If your model looks like that, take professional advice on licensing before launching. Digital asset businesses raise a separate set of limits, covered in crypto and digital asset businesses.

A company that operates as an Authorised Company without authorisation commits an offence punishable by a fine of up to MUR 1 000 000, so the authorisation should be in place before any processor sees your documents.

Managing the company from abroad and the processor

The Authorised Company must have its central management and control outside Mauritius. That is normal for this structure, but the processor will ask where the directors actually live and work. Be precise and consistent, because an answer that contradicts your corporate records raises more concern than an honest one. Your home country may also treat the company as resident or as a controlled foreign company, which affects tax and not the processor's decision directly. Read managing an Authorised Company from abroad and permanent establishment risk together with this page.

Taxes on the sales themselves remain your responsibility. If you sell to consumers in the European Union, the VAT position is separate and should be checked before launch: VAT when selling to EU customers.

Data protection and customer information

A payment flow processes customers' personal data, and your data may be transferred across borders. The Data Protection Act 2017 lets a controller or processor transfer personal data out of Mauritius in specified cases, including where appropriate safeguards have been shown to the Commissioner or where the informed individual has explicitly consented. If you serve customers in other regions, their local rules may apply too. Publish a clear privacy notice and ask your adviser which regimes cover your customers.

A short self-test before you apply

Checklist

• Authorisation and incorporation documents are current
• Beneficial ownership information is complete and consistent
• Registered agent details are at hand
• Bank account is open in the company's name
• Website shows the legal entity, terms, privacy and refund policy
• Declared activity matches the constitution and the real business
• You know where the directors live and work, and you can say so
• Multi-currency needs are planned, see multi-currency accounts

For the wider picture of selling online, the complete online business guide links the related topics. If you need a regulated provider to support the application, write to us through the form.