Who’s Liable When a CBI File Goes Wrong: The Agent Accountability Chain

A Bitcoiner who has held their own keys for a decade knows that “not your keys, not your coins” was never a claim about storage. It is a claim about liability. Hardware fails, seed phrases get copied, platforms freeze withdrawals, and the sentence answers the only question that matters afterward: who is on the hook.

Ask the same question of a citizenship file with six or seven figures moving through it and the answer is not nobody. It is worse than that. Nobody is on the hook for all of it. The licensed agent answers to the authority that authorized it, and can lose that authorization. Several of the bodies that screen and decide have written their own immunity into statute. And you stay personally liable for every word on a form somebody else may have typed.

Three layers, and not one of them answers for the whole file. The seams are invisible while a citizenship-by-investment (CBI) file moves, and they become the only thing that matters the moment it is denied, delayed, or flagged. Yesterday’s post mapped the commercial roles: agent, promoter, or concierge. This one maps the legal ones. Citizenship by investment agent liability is one layer of three, and knowing where it stops matters more than knowing where it starts.

The Three Layers Of A CBI File

Grenada writes the first two of those layers into statute. Section 4(8) of its Citizenship by Investment Act, No. 15 of 2013, provides that a Local Agent shall act solely on behalf of an applicant and not on behalf of the Government of Grenada. Read it both ways. The state does not stand behind what your agent does with your file, and your agent cannot stand behind what the state decides. The third layer is your own signature.

What A Regulator Can Actually Do

Citizenship by investment agent liability runs to the licensing authority first and to you second. What makes it real is not a code of conduct. It is a license that can be taken away. Grenada’s section 4(6) lets the Minister revoke a Local Agent’s license where its ability, resources, experience, or integrity falls below the standard reasonably expected.

Those powers get used. Grenada’s Investment Migration Agency suspended a Local Agent on 6 June 2025 citing alleged misappropriation of investor funds, then permanently revoked its status on 3 November 2025. Saint Kitts and Nevis runs a parallel ladder by regulation: an agent who helps circumvent the minimum sum payable to an Approved Development’s developer faces a fine of up to EC$10,000, removal with future ineligibility, and blacklisting on the Unit’s website. That list is live, carrying four blacklisted entities and one suspended agent as at July 2026. None of this exists for an unlicensed promoter, which is the argument behind why you cannot simply apply directly.

Now the part nobody sells: enforcement is not compensation. When Grenada suspended that agent, the circular placed all active and pending files under review and named the designated Marketing Agent, not the applicant, as the contact for transition. And under the regional agreement the five Eastern Caribbean states signed in September 2025, not yet in force, administrative fines would fund investigations and enforcement, never restitution.

A regulator that can revoke a license hands you a complaint, not a remedy; the fine funds the next investigation, never your refund.

Who Licenses Whom

Vanuatu first, the layer most often described wrongly, including once by us. The Vanuatu Financial Services Commission does not license citizenship designated agents; it publishes no register of them at all. The Citizenship Commission approves agents, decides applications, and revokes citizenships granted contrary to the Citizenship Act or the Constitution.

Under the amendment bill Parliament passed on 23 October 2025, a company that wants to become a Designated Agent applies to the Commission, and registration with the Financial Services Commission is one precondition the Commission must be satisfied of, not a citizenship license in itself. Assent and gazettal are unconfirmed, so that is bill text, not settled law. Licensor and decider are the same institution there; the screeners are separate again, and the Financial Services Commission is none of the three. The Citizenship Office publishes a designated-agent register and a cancelled-agents list; check any name against both before anyone touches your file. Our Vanuatu vertical, cbi.vu, tracks that supervision chain as the amendment settles into force.

El Salvador second, where candor matters more than polish. Bitcitizen LLC, operating as 21 CBI, holds a licensed-agent authorization from Director Stacy Herbert of The Bitcoin Office, valid 27 February 2026 to 26 February 2027. That is agent-side self-publication on passport.sv, not an entry in a public government register; we found no such register of program agents to check it against. Ask any firm which kind their credential is. One that will not answer plainly has answered.

What The State Owes You

The state’s duty runs to its own statute and, mostly, to nobody else. It owes you a process. It does not owe you an outcome, a reason, a refund, or in many cases an appeal.

The Salvadoran investment naturalization ground sits in Article 156 of the Ley Especial de Migración y de Extranjería, added by Legislative Decree No. 918 and in force from 17 January 2024. Not Article 92 of the Constitution. Under the migration law, naturalization falls to the Minister of Justice and Public Security, filed before the Dirección General de Migración y Extranjería; the program’s own terms name different bodies, the Ministry of Foreign Affairs and the Legislative Assembly, and no government document reconciles the two routes. Those terms reserve absolute discretion to refuse, with no refund.

Then the immunities. Section 17 of the Saint Christopher and Nevis Citizenship by Investment Unit Act, 2024 bars any action against a Board of Governors member or Unit employee for anything done or omitted in good faith in the exercise or purported exercise of its functions, though that Act commences by Ministerial Order and no such Order is on the public record. Saint Lucia protects Board members the same way, though there the Board may be liable in a protected member’s place. The immunity moves liability up rather than extinguishing it.

Who Gets The Notice

Then the routing, which is where files quietly die. Dominica requires its Unit to notify the Authorised Agent, on behalf of the main applicant, within three months: approved in principle, delayed for cause, or denied. No reasons are required. Antigua and Barbuda, on the regulations as substituted in 2016, gives a denied applicant thirty days from notification to appeal to the Minister, and that notification goes to the agent. Your appeal clock runs through a party that is not you. In El Salvador the migration law gives one administrative recourse against a naturalization resolution: a recurso de revocatoria before the authority that issued it, within five business days of notification. No published decision shows how that runs in a program file.

Where review exists, it is narrow. Saint Lucia’s sixty-day ministerial review must show a defined failing of law or process, and a denied applicant there has no statutory right of appeal to any court. Process failings get you in the door; disagreement does not.

One more seam. The firm screening you is the government’s contractor, not yours. Saint Lucia’s Board appoints due diligence providers and charges you their fees separately. You fund the check. You are not a party to the contract. In Vanuatu the 2025 amendment bill splits screening three ways: the Police Force on Interpol listings, the Financial Intelligence Unit on adverse information, and the Department of Immigration on Red Alert and wanted-person status. On any such report the Commission must set the application aside. Again, bill text, not law; the only remedy it gives is re-application once cleared. Not an appeal. A second attempt.

The Signature That Stays Yours

This is the layer buyers underestimate; they assume they outsourced it. Dominica states it flatly: the main applicant is responsible for the completion and accuracy of each form submitted, and must personally read it and sign the certificate of truth. Grenada lets the Agent complete the form, then requires the main applicant and every dependant over eighteen to sign. The agent may hold the pen. The agent never signs.

The consequence ladder runs against you personally and survives the grant. Saint Kitts and Nevis provides that a false statement or omission may get an application declined, that later discovery may lead to deprivation of citizenship, and that the applicant may be prosecuted under the Perjury Act. In Vanuatu, a person a court finds to have obtained citizenship by false representation, fraud, or concealment of a material fact ceases to be a citizen thirty days later, unless the Prime Minister publishes a declaration in the Gazette confirming that citizenship inside those thirty days. Salvadoran migration law terminates a procedure where documents are false, refers it to the Fiscalía General de la República, and annuls a passport for falsity even after issuance. None of those provisions asks who prepared the paperwork.

The record lands the same way. Saint Kitts and Nevis made a deprivation order in March 2025, announced that April, stripping citizenship from thirteen individuals and their dependants who had not paid the statutory minimum investment, after a review of 158 redacted applications and contracts tied to two International Marketing Agents whose clients confirmed receiving false assurances of special discounts. The agents were blacklisted. The applicants lost the citizenship.

Denials travel, too. Dominica requires its Financial Intelligence Unit to report all denied applicants monthly to the CARICOM Implementing Agency for Crime and Security (IMPACS) Joint Regional Communications Centre, and makes an applicant denied elsewhere ineligible. Nor does the money come back: Grenada refunds no due diligence fees where an application is not granted, and a person deprived of citizenship has no claim to repayment of investment or contribution. Which is why a documented source of funds file, built before submission rather than after a query, is the cheapest work you can do on the liability you cannot transfer.

The Tell That Gives It Away

Two failure modes, both diagnosable before you wire. The first is the unlicensed outer edge. The joint Financial Action Task Force (FATF) and Organisation for Economic Co-operation and Development (OECD) review found that because many investment-migration firms operate outside the host jurisdiction, many marketing agents work with little oversight or accountability, and that commission-based pay sets evidentiary standards against application volume. The outer edge of a referral chain is precisely where no regulator can reach anyone on your behalf.

The second is a single sentence. Anyone who guarantees approval is telling you something false about the chain, and at least one regulator has made the claim an offense: the Saint Kitts and Nevis regulations prohibit suggesting that an Authorised Agent may affect the Government’s decision-making, including processing time and outcome, punishable by a fine, removal, and blacklisting. Layers can also vanish. Malta’s former licensed-agent regime was repealed in March 2026 after the Court of Justice ruling in Case C-181/23 ended the investor-citizenship route it supervised; a supervisory layer lasts only as long as the route beneath it. Why CBI programs get suspended covers the same failure one level up.

What To Check Before You Wire

Five checks. Get the authorization in writing and check it against the government register; where no register exists, make the firm say so in writing. Ask who receives a denial, delay, or set-aside notice, and require that it reach you the day it lands. Agree the basis of charging, any cap on the adviser’s liability, and the dispute forum up front. Assume nothing is refundable, then ask line by line what is. Read the form yourself before you sign the certificate of truth.

Our own El Salvador and Vanuatu sources sit in the Official Source Library; every other instrument above is a published government text you can pull yourself. None of this is exotic diligence. It is the instinct that makes a Bitcoiner ask who holds the keys before the coins move.

A paid Sovereignty Strategy Session, $475 through BitSettle or $500 through Stripe and credited toward professional fees if you retain, buys an hour of this mapping against your own file before a single sat moves. Book one through advisory; there is no obligation to proceed. Name the layer. Read the form. Then wire. Because when a file breaks, the only asset that still has value is Recourse.

This article is general information and not legal, tax, or immigration advice. Statutes, fees, and program rules change, and a bill a parliament has passed is not always in force; everything above is accurate to the best of our knowledge at publication and should be checked against primary government sources. Confirm the specifics with a qualified advisor before you act.