Back to Knowledge
Regulatory Updates

Markets in Crypto-Assets Regulation (MiCA) Guide

MiCA License Guide - EU Crypto-Asset Regulation Framework

The Markets in Crypto-Assets Regulation (MiCA) establishes a harmonized framework for crypto-asset services across the European Union. As of December 30, 2024, MiCA is fully applicable, requiring entities offering crypto-asset services to obtain authorization as Crypto-Asset Service Providers (CASPs).

Transitional Period & Grandfathering Rights (Crucial for Existing VASPs)

Entities already providing crypto-asset services in an EU Member State under applicable national law (often registered as VASPs under AML/CFT rules) may continue to operate until July 1, 2026, or until they are granted or refused a MiCA license. Crucially, services provided under this "grandfathering" clause do not benefit from EU passporting rights until the full MiCA authorization is secured.

1. Establish Legal & Operational Presence in the EU

Obtaining a MiCA license is contingent on a firm's legal and operational substance within the European Union.

  • • Legal Entity: Incorporate a company in an EU member state with a registered office and a physical operational presence.
  • • Management: Appoint a management body where at least one director is an EU resident. The place of effective management must also be within the EU.
  • • Banking: It is essential to open a bank account with an EU credit institution. Accounts with electronic money institutions (EMIs) or payment institutions (PIs) may be deemed insufficient for the prudential requirements.

2. Determine License Class & Capital Requirements

MiCA categorizes CASPs into three tiers based on the scope of services offered. The capital requirement is the higher of a fixed amount or a quarter of the firm's fixed annual overheads.

Source: Annexure IV MiCA Regulation

License ClassServicesMinimum Capital
Class 1Services Include:
  • • Execution of orders on behalf of clients,
  • • Placing of crypto-assets,
  • • Transfer services for crypto-assets,
  • • Reception and transmission of orders for crypto-assets,
  • • Providing advice on crypto-assets; and/or,
  • • Providing portfolio management on crypto-assets.
€50,000
Class 2Crypto-asset service provider authorised for any services under class 1 and;
  • • Providing custody and administration of crypto-assets,
  • • Exchange of crypto- for funds; and/or,
  • • Exchange of crypto-assets for other crypto assets.
€125,000
Class 3Crypto-asset service provider authorised for any services under class 2 and;
  • • operation of a trading platform for crypto assets.
€150,000

3. Prepare Comprehensive Documentation

Meticulous preparation of core application materials is critical for a smooth review process.

  • • Business Plan: A detailed plan outlining the firm's business model, revenue models, target markets, and growth strategies.
  • • AML/CFT Framework: Comprehensive policies aligned with EU Directive 2018/843, including robust transaction monitoring and KYC procedures.
  • • The Travel Rule (TFR): As of December 30, 2024, CASPs must simultaneously comply with the Transfer of Funds Regulation (TFR 2023/1113). This mandates that all crypto-asset transfers must include verifiable originator and beneficiary information. Proof of robust TFR compliance solutions is essential for the NCA application.
  • • Governance Documents: Organizational structure charts, management resumes with "fit and proper" assessments, IT security protocols, and client asset segregation plans.
  • • Operational Readiness: Proof of a functional risk management system and professional indemnity insurance.
  • • Liability & Professional Indemnity Insurance Scope (Expanded Requirement): MiCA holds CASPs (especially custodians) liable to clients for any loss of crypto-assets resulting from a cyber-attack, operational failure, or gross negligence. The Professional Indemnity Insurance (or own funds used as a safeguard) must specifically cover risks including: loss of documents, misrepresentations, errors resulting in a breach of MiCA obligations, losses from business disruption, and gross negligence in safeguarding client assets/funds.
  • • Reliance on Regulatory Technical Standards (RTS/ITS): The comprehensive documentation must adhere strictly to the Regulatory and Implementing Technical Standards (RTS/ITS) developed by ESMA and the EBA. These standards specify the exact format, templates, and mandatory content for all application documents.

4. Submit to a National Competent Authority (NCA)

The application is filed with the NCA in the jurisdiction of incorporation.

Process: The NCA will acknowledge receipt within 5 working days and perform a completeness check within 25 working days. Any deficiencies must be addressed promptly to prevent delays.

Core Documentation Checklist for NCA:

Ensure these elements are explicitly addressed in your submission:

CategoryRequired Components
Business Operations
  • ➢ Detailed business plan with revenue models and target markets
  • ➢ Program of operations outlining service scope
Governance
  • ➢ Management resumes with "fit and proper" assessments
  • ➢ Shareholder structure and beneficial ownership details
AML/CFT Framework
  • ➢ Risk-based AML policies aligned with EU Directive 2018/843
  • ➢ Transaction monitoring and KYC procedures
Technical Infrastructure
  • ➢ IT system architecture diagrams
  • ➢ Cybersecurity audit reports and incident response plans
Financial Compliance
  • ➢ Audited financial statements
  • ➢ Proof of segregated client funds/crypto-assets
Client Protection
  • ➢ Complaints-handling procedures
  • ➢ Insurance coverage for professional liability

5. Regulatory Assessment & Key Criteria

The NCA's evaluation process takes 40-60 working days following the completeness check. Evaluation criteria include:

  • • Management Competency: All key personnel must pass "fit and proper" tests, assessing their integrity, competence, and reputation.
  • • Financial Stability: The firm must demonstrate financial stability and capital adequacy.
  • • Compliance: Compliance with MiCA's consumer protection and market integrity rules is a core requirement.

6. License Issuance & Passporting Rights

Upon a successful application, the firm receives:

  • • A formal authorization letter specifying permitted services.
  • • A listing in the ESMA public CASP register.
  • • Passporting Rights: The license enables cross-border EU operations without the need for additional licensing in each member state. This is a major benefit of the MiCA framework.

7. Post-License Compliance

Authorization is the beginning of a firm's regulatory journey. Ongoing obligations include:

  • • Regular Reporting: Submission of quarterly and annual reports on financials, AML audits, and incident disclosures.
  • • Capital Maintenance: Continuous verification through regular audits.
  • • Operational Updates: Notification to NCAs of any material changes to the business.

MiCA Jurisdiction Coverage

  • • Covered Jurisdictions: MiCA is directly applicable in all 27 EU Member States.
  • • Not Covered: Countries outside the EU are not subject to MiCA. EEA countries (like Norway, Iceland, and Liechtenstein) are not currently covered, as they must adopt similar legislation voluntarily. Firms in these non-MiCA jurisdictions must set up an EU legal entity to operate legally under MiCA and access EU markets via passporting.

Official Portals

Need Help with Your MiCA CASP License Application?

Our team has extensive experience guiding businesses through the MiCA licensing process across EU jurisdictions. From initial consultation to full license approval and passporting rights, we provide comprehensive legal support every step of the way.

Schedule a Consultation