Skip to content
Talk to us

Crypto license: MiCA authorization, VASP licenses and costs

A crypto license is the authorization or registration a regulator gives a company to exchange, hold, broker or transfer crypto-assets for clients.

  • MiCA capital: €50,000 to €150,000 by class
  • A MiCA decision within 40 working days of a complete file
  • Eleven regimes, each with its sources

What a crypto license is and who needs one

Under MiCA it is a CASP authorization; outside the EU, usually a VASP license. It takes a company, capital (€50,000 to €150,000 under MiCA), fit-and-proper managers, custody controls and, in the EU, a decision within 40 working days of a complete file.

You need one to exchange crypto-assets for money or for other crypto-assets, hold them for clients, run a trading platform, place or transmit orders, advise, manage portfolios or transfer crypto-assets. MiCA lists these services and sets one rulebook for every member state. Its transitional period ended on 1 July 2026 at the latest, so a firm serving EU clients now needs the authorization itself; a national registration no longer covers it. Outside the EU, Dubai's VARA licenses each activity separately, and Seychelles brought wallets, exchanges, broking and investment services under license in 2024. The UK registers crypto businesses for anti-money-laundering supervision until FCA authorization under FSMA starts on 25 October 2027.

What it takes: 1. A company with its registered office and effective management in the licensing state; in Dubai, VARA's Approval to Incorporate comes before the company. 2. Capital by service: €50,000, €125,000 or €150,000 under MiCA, or a quarter of the previous year's fixed overheads if that is higher. 3. Fit-and-proper owners and managers, with at least one director resident in the EU for a MiCA authorization. 4. Segregated client crypto-assets and funds, a custody policy and key management. 5. An anti-money-laundering program with the travel rule, ICT risk management (DORA in the EU), complaints handling and a wind-down plan.

What it costs: capital runs from US$25,000 (Seychelles, by activity) to HK$5,000,000 paid up for a trading platform in Hong Kong. Under MiCA it is €50,000 for orders, advice and transfers, €125,000 with custody and exchange, and €150,000 with a trading platform. Dubai asks AED 100,000 for advisory up to AED 1,500,000 for an exchange without a VARA-licensed custodian; Singapore asks S$100,000 or S$250,000 of base capital. Fees come on top. VARA charges AED 40,000 or AED 100,000 to apply, plus annual supervision. Seychelles charges SCR 75,000 to apply, then an annual base fee of SCR 75,000 plus SCR 75,000 to SCR 375,000 by activity. The EU regulators set their own fees.

Time frame: from 40 working days after a complete MiCA file in Cyprus, Malta or Lithuania to no published deadline in Dubai. MiCA gives the regulator 25 working days to check that a file is complete and 40 from a complete file to decide, with up to 20 more while a request for information is open. VARA works in two stages: an Approval to Incorporate, then the full license after the review and interviews. The other regulators in our table publish no statutory deadline either. (Hint: for EU clients, one MiCA authorization reaches every member state after a notification; an offshore license does not.)

Crypto license by country: MiCA, VASP and VARA

Eleven regimes: MiCA in Cyprus, Malta and Lithuania; the UK's FCA; Dubai's VARA; the VASP laws of Seychelles, Mauritius, the BVI and Cayman; Hong Kong's SFC and Singapore's MAS. Open one for the capital, the fees, what the license allows and the sources.

Filter by region
Crypto license by country: MiCA, VASP and VARA
CountryRegulatorMinimum capitalGovernment feesTime frameLast reviewed
Open details forCyprusCySEC (MiCA)€50,000 to €150,000CySEC feesDecision within 40 working days of a complete application (statutory)2026-11-11
Open details forMaltaMFSA (MiCA)€50,000 to €150,000MFSA feesDecision within 40 working days of a complete application (statutory)2026-11-11
Open details forLithuaniaBank of Lithuania (MiCA)€50,000 to €150,000Bank of Lithuania feesDecision within 40 working days of a complete application (statutory)2026-11-11
Open details forUnited KingdomFCASet by the incoming regimeFCA application feeAsk us2026-11-14
Open details forDubai (UAE)VARAAED 100,000 to AED 1,500,000 by activityAED 40,000 to AED 100,000 application, plus annual supervisionAsk us2026-11-11
Open details forSeychellesFSA SeychellesUS$25,000 to US$100,000 by activitySCR 75,000 application; annual base SCR 75,000 plus an activity feeAsk us2026-11-11
Open details forMauritiusFSC MauritiusSet by FSC rules per classFSC processing and annual feesAsk us2026-11-11
Open details forBritish Virgin IslandsBVI FSCAdequate to the riskFSC registration feesAsk us2026-11-11
Open details forCayman IslandsCIMASet by CIMAPer CIMA's fee scheduleAsk us2026-11-11
Open details forHong KongSFCHK$5,000,000 paid-up capitalSFC application and annual feesAsk us2026-11-11
Open details forSingaporeMASS$100,000 or S$250,000 base capitalMAS application and annual feesAsk us2026-11-11

MiCA license or VASP license: the tiers

Where your clients are decides the tier; the capital and the custody rules follow from it.

EU (MiCA)

Regulators
CySEC (Cyprus), MFSA (Malta), Bank of Lithuania
Capital
€50,000 to €150,000 by class
Time frame
25 working days to check completeness; a decision within 40 working days of a complete file (statutory)
Clients
The whole EU and EEA after a notification
Verdict
The route for EU clients; the rules match across member states, so the choice is the regulator.

Dubai (VARA)

Regulators
VARA, for Dubai outside the DIFC
Capital
AED 100,000 to AED 1,500,000 by activity
Time frame
Two stages: Approval to Incorporate, then the full license
Clients
Dubai, outside the DIFC
Verdict
A regulator for virtual assets alone, with each activity licensed and capitalized separately.

Asian hubs

Regulators
SFC (Hong Kong), MAS (Singapore)
Capital
HK$5,000,000 paid up (Hong Kong); S$100,000 or S$250,000 (Singapore)
Time frame
Ask us
Clients
The home market; retail with suitability (Hong Kong) or risk-awareness (Singapore) checks
Verdict
For exchanges that want Asian investors and can meet strict custody standards.

Offshore VASP laws

Regulators
Seychelles, Mauritius, BVI, Cayman
Capital
US$25,000 to US$100,000 by activity (Seychelles); adequate to the risk (BVI)
Time frame
Ask us
Clients
International, except markets that require a local license
Verdict
Lower capital and lighter recognition; not a route to EU clients.

United Kingdom

Regulators
FCA
Capital
Set by the incoming regime
Time frame
Ask us
Clients
United Kingdom
Verdict
Registration until 25 October 2027; apply for FCA authorization by 28 February 2027.

What a crypto regulator checks

MiCA, VARA and the VASP laws ask the same questions in different forms.

  • Who owns and runs the company: fit-and-proper owners and managers, and for MiCA at least one director resident in the EU
  • Where client assets sit: segregation, the custody policy and who controls the keys
  • How the platform is secured: ICT risk management, cyber-security and business continuity
  • How money laundering is stopped: the AML program, the travel rule and the risk assessment
  • How the firm would close: a wind-down plan, and own funds or an insurance policy
  • How it markets: financial promotions with risk warnings; in the UK an authorized person approves them
  • Which tokens it lists: in Hong Kong, a token admission committee and due diligence

Who does what in a crypto license application

What we do

  • Map each service you plan to its MiCA class, VARA activity or VASP license type
  • Draft the program of operations and the custody, ICT and AML policies with you
  • Prepare the notification your home regulator forwards to each EU host state
  • Answer the regulator's questions until it decides
  • Prepare the bank and custody account applications that follow the license

What you provide

  • Capital for the class or activity, with evidence of its source
  • Directors and managers with the experience the regulator expects
  • The technology: wallets, key management and the platform's security documentation
  • A decision on custody: in house or through a licensed custodian

How to get a crypto license: the order of the setup

The services come first, because they decide everything the regulator reads.

  1. 1List the servicesWhat you will do with clients' crypto-assets decides the class, the capital and the regulator.
  2. 2Form the companyMiCA wants the registered office and effective management in the licensing state, so the company is formed there. In Dubai, VARA's Approval to Incorporate comes first.
  3. 3Apply for the licenseThe regulator reviews the people, the capital, the custody setup and the policies together, against the program of operations.
  4. 4Open bank and custody accountsBanks and custodians review the license before they take on a crypto business, so the accounts follow it.
  5. 5Connect payments and launchPayment providers look at the license and the accounts before they process client funds, so payments come last.

Your choice, our commitment

  • Your business model

    The structure follows how your business works and where it operates.

  • Your resources

    We start from the documents and people you already have, and say clearly what is still needed.

  • Support

    Questions about the company, the accounts and the license are handled in one conversation.

  • Clear next steps

    You see what each step involves before you decide to go ahead.

Crypto license questions

Still have a question?

Talk to us
What is the difference between a MiCA license and a VASP license?

A MiCA authorization is the EU's single license for crypto-asset service providers (CASPs): the same capital classes and rules in every member state, and a passport across the EU and EEA after a notification. VASP is the FATF's term, used by regimes outside the EU: Seychelles, the BVI, Cayman and others license or register virtual-asset service providers under their own laws, without that passport.

What is a CASP license?

CASP stands for crypto-asset service provider, the term MiCA uses. The authorization names the services you may offer, from transfers and advice to custody, exchange and a trading platform, and those services set your capital class.

How much does a crypto license cost?

Capital is the main cost and follows the services: the MiCA class, the VARA activity or the Seychelles license type. Fees come on top; VARA and the FSA in Seychelles publish theirs, and the EU regulators set their own. Every figure, with its source, is under What it costs above and in each row. Our own fees are set out after the consultation.

How long does a MiCA license take?

MiCA sets the clock in working days: a completeness check, then the assessment, with a pause while a request for information is open (Article 63). The clock starts only with a complete file, so the program of operations and the policies are written first.

Can I serve EU clients with an offshore crypto license?

Not as a market you target. MiCA requires an authorization to provide crypto-asset services in the EU; a firm outside it may serve an EU client only at that client's own exclusive initiative.

Does a crypto business need a license in the UK?

Today it registers with the FCA for anti-money-laundering supervision and follows the financial promotions rules. From 25 October 2027 exchanges, custodians, dealers and stablecoin issuers need FCA authorization; the FCA opened applications on 30 September 2026 and asks firms to apply by 28 February 2027.

Can one group offer crypto and CFDs?

Yes, though some places use two regimes for it: in the BVI, a group that offers both needs a securities investment license and a VASP registration. Ask us which licenses your mix of services requires in the country you choose.

Is a crypto license guaranteed?

No. The regulator decides, and refusals happen; the FCA's registration refusal rate has been high. We prepare the file so it answers what that regulator asks for.

Used in these setups

What comes next

Each service leads to the next: the structure, then the accounts, then the payments and the license.