Crypto License — Hub
Crypto licences, jurisdiction by jurisdiction
17 active markets across Europe, MENA, APAC, the Americas and offshore. Compare regulator, capital, timeline and tax — then book a 30-minute call to scope your shortlist.
A crypto licence is regulatory authorisation to provide virtual asset services. Across 2024–2026 the global picture has crystallised. The EU has gone live with MiCA. The UAE has consolidated VARA. The US has fragmented further between FinCEN, NYDFS and 50 state regulators. Hong Kong has built a five-licence stack under the SFC and HKMA. The right jurisdiction for your business is the one that fits your customer geography, your banking partners and your operating model. Not the one with the cheapest application fee.
This page is the master index. Every jurisdiction we cover, grouped by region. Each country page details regulator, license types, capital requirements, timelines, taxes, documents and the lead expert in that market. If you already know the country, jump straight in. If you're scoping, the comparison table is the fastest way to filter on what matters.
Jurisdictions by region
Europe
Montenegro Europe
Local regulator (evolving)
United Kingdom Europe
Financial Conduct Authority (FCA)
Jersey Europe
Jersey Financial Services Commission (JFSC)
Gibraltar Europe
Gibraltar Financial Services Commission (GFSC)
Switzerland Europe
FINMA + SROs (e.g. VQF)
Bosnia & Herzegovina Europe
Local regulator (evolving)
Georgia Europe
NBG / FIZ administrators
APAC
Americas
Side-by-side comparison
Sorted alphabetically. Capital and timeline figures are typical ranges. Actual envelope depends on licence category and applicant profile.
| Jurisdiction | Regulator | Licence(s) | Min. capital | Timeline | Tax |
|---|---|---|---|---|---|
| Australia | AUSTRAC + ASIC | DCE Registration; AFSL; Remittance | AFSL: AUD 50,000–200,000; DCE: none | DCE: 6–12 weeks · AFSL: 6–9 months | 30% |
| Bosnia & Herzegovina | Local regulator (evolving) | VASP Registration | None significant | 8–10 weeks | 10% |
| British Virgin Islands | BVI Financial Services Commission | VASP Registration | None statutory; substance-based | 8–12 weeks | 0% |
| Canada | FINTRAC + AMF (Quebec) | MSB; Quebec restricted dealer | None statutory | 8–12 weeks | 26.5–31% (federal + provincial) |
| Cayman Islands | Cayman Islands Monetary Authority (CIMA) | VASP Act registration / licence | Substance-based | 10–16 weeks | 0% |
| El Salvador | CNAD | DASP; Bitcoin Service Provider (BSP) | None / model-dependent | 4–8 weeks | 30% |
| Georgia | NBG / FIZ administrators | VASP; FIZ company | None for FIZ | 4–6 weeks | 0% reinvested / 15% distributed (FIZ) |
| Gibraltar | Gibraltar Financial Services Commission (GFSC) | DLT Provider Licence (9 principles) | Substance-based | 16–24 weeks | 12.5% |
| Hong Kong | SFC + HKMA + Companies Registry (TCSP) | VATP; TCSP; SFC Type 1; SFC Type 7; HKMA Stablecoin | VATP: HKD 5–10 mn paid-up + HKD 3 mn liquid | 12+ months (VATP) | 8.25–16.5% |
| Jersey | Jersey Financial Services Commission (JFSC) | VCC class registration | Substance-based | 12–20 weeks | 0–10% |
| Montenegro | Local regulator (evolving) | VASP Registration | None significant | 8–12 weeks | 9–15% |
| Panama | No crypto-specific regulator (general law) | No specific license required for many models | None | 1–3 weeks (incorporation) | 0% on foreign-source income (territorial) |
| Singapore | Monetary Authority of Singapore (MAS) | MPI; SPI; Digital Payment Token services | MPI: SGD 250,000 · SPI: SGD 100,000 | 9–12 months | 17% |
| Switzerland | FINMA + SROs (e.g. VQF) | FINMA Fintech; FINMA Banking; SRO membership | Fintech: CHF 300,000 · Banking: CHF 10,000,000 | SRO: 2–3 months · Fintech: 6–9 months | 12–21% (cantonal) |
| United Arab Emirates | VARA · FSRA (ADGM) · DMCC · DFSA (DIFC) | VARA Cat 1–4; ADGM FSP; DMCC Crypto; DIFC ITL | USD 135,000 – 272,000 (category-dependent) | 9–14 months (VARA) · 6–10 months (ADGM) | 9% (free zone exemptions) |
| United Kingdom | Financial Conduct Authority (FCA) | Cryptoasset Registration (MLR 2017); EMI | EMI: GBP 350,000 | 12–18 months (FCA) | 25% |
| United States | FinCEN + 50 state regulators + NYDFS + SEC | FinCEN MSB; State MTL; NY BitLicense; Wyoming SPDI; SEC Broker-Dealer | BitLicense: USD 5K app fee · SPDI: USD 5 mn+ | FinCEN: weeks · MTL: 6–18 mo · BitLicense: 18–24 mo | 21% federal + state |
How to choose the right jurisdiction
Choose by working backwards from your customers, your banking and your team. Not the other way round. The framework we use on every initial call is built on five questions, in this order.
- Where are your customers? US-resident customers force you onto the FinCEN / MTL / BitLicense path. EU customers point to MiCA CASP. UAE residents map to VARA. Pick the regime your largest cohort is regulated under, then layer additional licences for secondary markets.
- What do you actually do? Custody, exchange, broker-dealer, OTC, stablecoin and token issuance map to different licence categories. A single business model can need two or three licences in the same jurisdiction.
- Where can you bank? A licence without a bank account is a paperweight. Switzerland, Singapore, UAE and the UK all have crypto-friendly banking rails. Many offshore jurisdictions don't. Banking capacity often constrains the shortlist before regulation does.
- How fast do you need to launch? Georgia, Panama and Bosnia can be live in 4–10 weeks. UK FCA, NY BitLicense and UAE VARA Cat 1 take 12–24 months. Speed of regime determines whether you launch first and licence second, or licence first and launch second.
- What's your year-two budget? Application fees are dwarfed by year-two operating costs. AML / MLRO, audit, director services, capital lock-up, regulator levies. A jurisdiction with a low application fee and a heavy MLRO requirement may be more expensive than the headline implies.
Common requirements across jurisdictions
Specific rules vary, but the structural requirements look similar across institutional regimes. Building these from day one — even before you commit to a jurisdiction — keeps the application timeline honest.
- Local entity: domestic incorporation, sometimes within a specific free zone or financial services area.
- Resident director or executive officer: often required to be physically present and pass fit-and-proper review.
- MLRO function: Money Laundering Reporting Officer, internal hire or licensed outsourced provider.
- Capital deposit or insurance: ranging from substance-based to USD 5 mn+ depending on category.
- AML / KYC programme: written manual, transaction monitoring rules, FATF Travel Rule readiness.
- IT security and operational resilience: ISO 27001 or equivalent, penetration testing, business continuity plan.
- Business plan and financial projections: three-year forecast, capital adequacy modelling, key risk register.
How CLS helps
We run end-to-end licensing across all 17 jurisdictions on this page. Every engagement is partner-led from the first call to ongoing licence maintenance. Typical scope on a single jurisdiction:
- Jurisdiction shortlist with year-one and year-two budgets, usually within five business days of intake.
- Local entity formation and substance setup. Director, office, MLRO function as needed.
- Application drafting. Business plan, AML manual, IT security policy, financial projections, capital-adequacy model.
- Regulator Q&A. Supplementary submissions, on-site interview preparation, change requests.
- Banking introductions. Direct relationships with crypto-friendly banks across our jurisdictions of practice.
- Post-licence support. Annual filings, change-of-control, AML refreshes, MLRO outsourcing.
Frequently asked
Crypto licensing — top questions
Which crypto license is best in 2026?
There's no single best licence. For institutional credibility: UAE VARA, Singapore MPI, Hong Kong VATP, EU MiCA CASP. For speed and cost: Georgia, Panama, Bosnia, El Salvador. For US market access: FinCEN MSB plus state Money Transmitter Licences. The right choice depends on customer geography, banking partners, and timeline tolerance.
How long does a crypto license application take?
Timelines range from 1–4 weeks (Panama, Georgia FIZ, El Salvador BSP) to 18–24 months (UK FCA, NY BitLicense). The median for an institutional-grade licence is 6–12 months. The bottleneck is usually regulator review queues and fit-and-proper checks on directors. Plan for at least one round of supplementary questions.
How much capital do I need for a crypto license?
Capital requirements range from zero (BVI, Panama, Cayman — substance-based) to USD 5 mn+ (Wyoming SPDI). Mid-tier institutional licences such as Singapore MPI (SGD 250,000) and Switzerland FINMA Fintech (CHF 300,000) sit in the USD 200,000–400,000 range. Banking minimums often exceed the regulatory minimum.
Can I operate without a license under DeFi or self-custody exemptions?
Sometimes. True non-custodial protocols, immutable smart contracts and self-custody wallets often fall outside licensing perimeters. The moment you take custody, run a matched order book, or hold private keys on behalf of users, you trigger licensing. Token issuance and front-end interfaces are an active grey area in 2026.
Which jurisdictions have no specific crypto license?
Panama operates under general corporate law for many crypto models. Some BVI and Cayman models can run as substance-based VASP registrations rather than licences. The trade-off is banking access and counterparty trust — major institutional players increasingly require a regulated counterparty regardless of legal necessity.
Can I passport a crypto license between jurisdictions?
Only within the EU under MiCA. A CASP authorised in one EU member state can passport into the other 26 from 30 December 2024. Outside the EU, no general passporting exists. UAE VARA does not passport to ADGM. UK FCA does not passport to the EU post-Brexit. Multi-jurisdictional operations require multi-jurisdictional licences.
What happens if I operate without a license?
Penalties scale with jurisdiction and turnover. The UK FCA can issue unlimited fines and refer for criminal prosecution. The SEC has secured nine-figure penalties. Hong Kong SFC has used arrests and asset freezes. Beyond fines, an unlicensed operating history typically triggers refusal on later licence applications. Damage compounds, it doesn't reset.
What's the difference between VASP, CASP and VATP?
VASP is the FATF-aligned global term used in BVI, Cayman, Georgia, and emerging regimes. CASP is the EU MiCA term, replacing national crypto regimes from 30 December 2024. VATP is Hong Kong's SFC-specific designation for trading platforms only. They cover overlapping activity but with different capital, custody, and conduct rules.
Sources
- FATF — Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs. fatf-gafi.org . Accessed April 2026.
- European Securities and Markets Authority — MiCA. esma.europa.eu . Accessed April 2026.
- Financial Conduct Authority — Cryptoasset Registration. fca.org.uk . Accessed April 2026.
- FinCEN — MSB Registration. fincen.gov . Accessed April 2026.
- VARA Dubai — Rulebooks. vara.ae . Accessed April 2026.