Shield, application documents and connected digital assets beside EU stars, illustrating CASP authorisation under MiCA.

CASP License

Last Update:

Gofaizen & Sherle provides CASP authorisation support for exchanges, custody providers and trading platforms entering the EU market. Start by establishing which permissions your business needs. The route depends on your services, the EU country where your company is established and applies for authorisation (home Member State) and existing financial authorisations.

Quick Facts

ItemPosition
RegimeMiCA, with approval by the home national competent authority (NCA)
EstablishmentEU registered office and effective management requirements
Service scopePermissions cover specified activities
Prudential safeguardsArticle 59 route: higher of €50,000/125,000/150,000 floor and one-quarter of fixed overheads
ReviewSeparate completeness and substantive assessment stages
PassportingArticle 65 notification for cross-border services
Service priceStarting from €35,000

Is This the Right Fit?

This route suits client-facing crypto businesses prepared to establish genuine EU operations. Under Article 59, the registered office must be in a Member State where some services are conducted, effective management must be in the EU, and at least one director must reside there.

Pure technology suppliers may fall outside the service perimeter. Decentralized finance (DeFi), tokenization, stablecoin issuance, securities and payment models need individual classification.

Which Regulatory Route Applies?

ApplicantRoute and limitation
New crypto businessArticle 59 authorisation through the home NCA
Credit institutionArticle 60 notification to its home competent authority
Investment firm, UCITS manager or AIFMArticle 60 only for permitted equivalent services
Market operatorArticle 60 for trading-platform operation
Central securities depositoryArticle 60 for custody and administration
Electronic money institutionArticle 60 for custody and transfers of its own e-money tokens

Article 60 requires notification at least 40 working days before starting. It is not a blanket exemption for regulated firms.

Which Activities Are Covered?

The ten statutory crypto-asset services are:

  1. Custody and administration on behalf of clients.
  2. Operating a trading platform.
  3. Exchange for funds.
  4. Exchange for other crypto-assets.
  5. Executing client orders.
  6. Placing crypto-assets.
  7. Receiving and transmitting client orders.
  8. Providing advice.
  9. Portfolio management.
  10. Transfers on behalf of clients.

Token issuance alone is not one of these services. ART/EMT issuance, financial instruments and fund structures require separate analysis under the MiCA framework.

What Will Gofaizen & Sherle Handle?

G&S licensing and regulatory consultants support service-perimeter assessment, home-state selection, EU company setup and application preparation. Deliverables can cover governance, ownership and management files, the programme of operations, prudential calculations, AML policies, safeguarding and ICT/DORA documentation, NCA responses and passporting.

The client supplies accurate evidence, funding, management and functioning controls. Specialist AML counsel, auditors and technology vendors perform their agreed work. Banks decide account applications. The NCA decides authorisation.

What Determines the Total Cost?

The cost of Gofaizen & Sherle application support depends on the services you plan to offer, your chosen EU country and how much preparation your business needs. Key factors include:

  • Service scope: custody, exchange and trading-platform models require different policies, controls and supporting evidence.
  • Existing setup: an established company with suitable management and documented procedures needs different support from a business starting from scratch.
  • Operational complexity: outsourcing, technology providers, transaction flows and target markets affect the documentation required.
  • Application readiness: missing evidence, policy revisions and responses to regulator questions influence the work involved.

The proposal should distinguish Gofaizen & Sherle professional fees from incorporation costs, regulatory fees, staffing, insurance, audit and technology expenses, identifying what is included and what is paid separately. Ongoing operating and compliance costs also need a separate budget.

Resources required to meet prudential safeguards are additional to the service budget. They are not fees paid to Gofaizen & Sherle or the regulator.

Why Work With Gofaizen & Sherle?

G&S combines corporate structuring, regulatory documentation and post-authorisation compliance support within the agreed engagement.

Maksim Gasanbekov
Maksim Gasanbekov
Partner, Head of Sales (Crypto and Blockchain)

How Does the Process Work?

Step 1 Assess. Gofaizen & Sherle maps the business model and regulatory route using client inputs.
Step 2 Prepare. Gofaizen & Sherle’s HR team supports local recruitment, while its legal team prepares the application documentation within the agreed scope. The client implements the required governance and operational controls.
Step 3 Submit. Gofaizen & Sherle supports filing and responses, subject to complete client evidence.
Step 4 Review. the NCA assesses the application and issues its decision.
Step 5 Notify. if you plan to serve clients in other EU countries, Gofaizen & Sherle helps prepare and submit the required notification to your home regulator.
Step 6 Launch. the client completes operational preparations before starting permitted services.

What Information Is Needed?

Initially, provide:

  • the ownership/UBO structure
  • qualifying holdings
  • management profiles
  • intended services
  • clients
  • markets
  • transaction flows
  • custody model
  • ICT vendors
  • outsourcing
  • forecasts
  • existing policies.

Identify your current entity, preferred home state, capital budget and target launch date.

These inputs define the engagement. The complete Article 62 dossier requires supporting evidence and service-specific policies.

How Long Does Review Take?

Article 63 provides 25 working days to check completeness and 40 working days to assess a complete application. An initial information request can suspend the assessment for up to 20 working days. Decision notification follows within five working days.

Preparation, missing documents, national pre-filing discussions and launch readiness add time. These statutory periods are not an end-to-end delivery promise.

What Are the Capital and Financial Safeguard Requirements?

Under Annex IV to MiCA (Regulation (EU) 2023/1114), the minimum capital threshold is €50,000 for execution, placing, transfers, order transmission, advice or portfolio management. Custody or exchange raises it to €125,000. Trading-platform operation requires €150,000.

Article 67 requires the higher of that floor and one-quarter of preceding-year fixed overheads, reviewed annually. New firms use first-year projections. Qualifying own funds, insurance or comparable guarantees, or a combination, may provide the safeguards. Article 60 entities follow their applicable sectoral prudential rules.

Has the Transition From National Rules to MiCA Ended?

Yes. The maximum EU transitional period ended on 1 July 2026. It allowed eligible existing crypto businesses to continue temporarily under national rules while moving to MiCA authorisation. Some Member States ended this arrangement earlier. A pending application does not extend permission to operate.

Position checked: 18 September 2026

What Has Changed?What Does It Mean for Your Business?
National transitional arrangements have expiredA former national registration alone no longer permits continued provision of services requiring MiCA authorisation. ESMA requires unauthorised providers to stop onboarding new EU clients and wind down affected activities while protecting client assets.
Authorisation must cover the operating entity and its servicesCheck the exact company and permitted activities in the ESMA Interim MiCA Register, which also lists non-compliant entities.
Applications must meet current implementation requirementsUse applicable technical standards and supervisory guidance. Confirm filing procedures, fees and local requirements with the competent authority in the chosen EU country.

What Should You Check Before Choosing an EU Country?

MiCA provides a common authorisation framework, but national procedures and local operating conditions affect where your business can establish and operate effectively.

What to CheckWhy It Matters for Your Project
Application language, regulatory fees and pre-filing proceduresDetermine translation costs, the filing budget and whether preliminary discussions with the regulator are needed.
Company law, management, staffing and local presence requirements Confirm the permitted legal structure, corporate obligations, staffing and decision-making arrangements needed for your operating model. 
National AML/CFT rules and the responsible supervisorIdentify the local requirements your policies, reporting procedures and compliance responsibilities must address.
Tax, employment and ongoing reporting obligationsEstimate recurring costs and the resources needed to maintain the company after authorisation.

Assess these factors against your planned services, team and target markets before choosing where to apply.

What Continues After Approval?

Maintain governance, conduct standards, safeguarding, complaints handling, conflict controls, outsourcing oversight and regulatory reporting. Assess ownership and management changes before implementation.

Article 68 requires records for five years, extended up to seven at the authority’s timely request. Apply national AML/CFT rules, Travel Rule requirements and DORA according to their scope and proportionality provisions.

What Are the Regulatory Risks?

Unauthorised operations can trigger cessation orders and sanctions. Serious breaches can lead to withdrawal of authorisation. Do not market a pending application as approved status.

How Do Banking and Payments Fit?

Business NeedWhat Is RequiredSupporting EvidenceG&S Support
Company bank accountBank approvalOwners, funding sources, transaction flowsPrepare application documents
Holding clients’ fiat moneySafeguarding arrangementsSeparate client accountsAssess safeguarding requirements
Holding clients’ crypto-assetsCustody authorisationAsset segregation controlsPrepare custody policies
Providing payment servicesPayment authorisation or authorised providerPayment flows, countries servedAssess required permissions

CASP authorisation neither guarantees a bank account nor replaces payment permissions. Article 70 addresses these distinctions. Payments involving e-money tokens need separate assessment.

How Is the Business Taxed?

MiCA sets no common corporate tax rate. Review residence, permanent establishments, VAT, transfer pricing, payroll and withholding locally. DAC8 covers reportable transactions from 2026, with first reporting in 2027 under domestic deadlines. Assess CARF implementation separately where relevant.

Which Other Permissions Might Apply?

Business modelAdditional or alternative framework
Securities or investment servicesMiFID and relevant investment permissions
Payments or e-moneyPI/EMI rules
Non-EU crypto operationsRelevant national VASP regime

Frequently Asked Questions

Who needs a CASP license?

Businesses professionally providing regulated crypto-asset services in the EU need authorisation or must qualify for the Article 60 notification route.

How do articles 59 and 60 differ?

Article 59 provides the authorisation route. Article 60 allows specified financial institutions to provide eligible services following notification, within their permitted scope.

Which services can be authorised?

Custody, trading-platform operation, exchange for funds or crypto-assets, order execution, placing, order reception and transmission, advice, portfolio management and transfers.

Which EU country should a business choose?

Choose based on actual operations, management, staffing and national procedures. The applicant’s registered office must be where it conducts at least part of its services.

How much financial backing is required?

Under Article 67, safeguards must cover the higher of the applicable €50,000, €125,000 or €150,000 threshold and one-quarter of fixed overheads. New firms use first-year projections.

Which application documents are needed?

Corporate, ownership and management records, a programme of operations, financial projections and evidence of prudential safeguards, compliance, safeguarding and ICT controls, tailored to the proposed services.

What determines the cost?

Service scope, jurisdiction, operational complexity and preparation gaps determine advisory fees. Budget separately for regulatory charges, personnel, technology and other operating expenses.

How long does the application take?

Article 63 allows 25 working days for completeness checks and 40 for assessing a complete application. Preparation and requests for additional information can extend the overall timeline.

When can services expand across the EU?

Under Article 65, cross-border services may start after transmission confirmation or from the fifteenth calendar day after notification. Only permitted activities are covered.

Can reverse solicitation replace authorisation?

No. It is a narrow exception for services initiated exclusively by the client. It does not provide a route for actively marketing to EU clients.

Mark Gofaizen
Mark Gofaizen
Senior Partner, Head of Consulting
Maksim Gasanbekov
Maksim Gasanbekov
Partner, Head of Sales (Crypto and Blockchain)
Get in touch
Phone *
Estonia +372 Estonia

    Connect with our experts

    Our experts will tell you how to do it as quickly and easily as possible.

    Estonia

      By clicking the button, I confirm that I have read the privacy policy and consent to the collection and processing of my personal data in accordance with the GDPR rules.

      Thank you

      Thank you for reaching us. Our team is working on your request, and we will contact you soon.

      Message not sent