Bitcoin and Ethereum coins beside legal documents and a glass globe in a financial office at dusk.

Crypto License

Last Update:

Planning an exchange, custody, or transfer service? Gofaizen & Sherle helps identify the permissions you need and prepare your application. “Crypto license” is a market term. The actual permission depends on what your business does and where its customers are.

Service Snapshot

  1. Route

    Chosen by activity and jurisdiction

  2. Authority

    Determined by the route

  3. Activities

    Service-specific permission scope

  4. Entity

    Structure and local presence

  5. Timing

    Preparation plus external review

  6. Capital

    Route-specific financial safeguards

  7. Compliance

    Continuing operating duties

  8. Banking

    Separately scoped preparation

Who This Service Fits

Exchange, custody, and transfer operators can seek application support. Brokerage, advice, portfolio management, and payment processing need individual assessment. Token issuance and derivatives require separate analysis. Сryptocurrency use alone does not require licensing.

Regulatory Routes

RouteAuthorityCovered activitiesMarket reachKey limitation
CanadaFINTRAC, Bank of CanadaCrypto exchange/OTC and payments; fiat exchange, custody and transfersCanadian and overseas customers, where permittedAML registration grants no securities or provincial permissions
Montana (US)FinCENCrypto exchange/OTC, custody and payments; fiat exchange, custody and paymentsUS and overseas customers, where permittedMontana requires no money-transmitter license. Federal duties apply. FinCEN grants no other-state permissions
SwitzerlandSelf-regulatory organization / FINMAMontana’s activities, plus crypto asset management, loans using borrowed funds and utility token issuanceSwiss and overseas customers, where permittedMembership grants no general FINMA authorization
Costa RicaSUGEFCrypto exchange/OTC, custody, asset management, payments, derivatives, loans using borrowed funds, security token issuance/trading and utility token issuance; fiat custodyCosta Rican and overseas customers, where permittedAML registration grants no operating permit
PanamaSMV (securities) / SBP (banking/remittance AML)Same activities as Costa RicaPanamanian and overseas customers, where permittedIncorporation grants no financial license

Types of Crypto Services and Who Needs Them

Required permissions depend on the service, jurisdiction, and whether you handle customer assets. Operating without custody does not automatically remove licensing duties. A business combining several services may need several permissions, rather than one license covering every activity.

Type/serviceWhat it coversWho needs it
BrokerageArranging client trades or routing ordersBrokers and liquidity aggregators
Portfolio managementMaking investment decisions under a client mandateCrypto asset managers
AdviceGiving personalized crypto investment recommendationsInvestment advisers
ExchangeConverting crypto into fiat or other cryptoOnline exchangers and crypto ATMs
CustodySafeguarding customer assets or private keysCustodial wallet providers and exchanges
TransfersMoving crypto for customersCrypto transfer providers
Payment processingAccepting and settling crypto paymentsMerchants, gateways, and payment processors
Spot trading platformMatching multiple buyers’ and sellers’ ordersSpot exchange operators
DerivativesOffering futures, options, or perpetual contractsDerivatives platforms
Token issuanceOffering utility, stablecoin, or security tokensToken issuers

Derivatives and token issuance follow the rules applicable to the instrument and jurisdiction. They may require permissions beyond crypto service authorization.

Our Scope of Work

Gofaizen & Sherle provides

  • jurisdiction assessment
  • activity mapping
  • corporate coordination
  • application documents
  • AML and CFT
  • governance
  • agreed regulator communication
  • ongoing support.

You supply accurate ownership and operating evidence. Authorities decide applications.

Pricing Factors

The quote should separate professional fees, government fees, third-party expenses, and ongoing costs. Required capital or other financial safeguards are separate from the service price. Agree what the selected service includes and excludes.

Meet Your Consultation Contact

Maksim Gasanbekov
Maksim Gasanbekov
Partner, Head of Sales (Crypto and Blockchain)

Application Process

Step 1 Gofaizen & Sherle and you map activities and markets.
Step 2 Agree the route and work scope before setup decisions.
Step 3 You provide evidence. Gofaizen & Sherle coordinates setup and documentation.
Step 4 Submit and answer authority queries.
Step 5 Await necessary permissions and resolve conditions. Unanswered queries remain pending.
Step 6 Agree ongoing responsibilities and operational setup.

Information to Prepare

To assess ownership and structure, provide:

  • founders
  • ultimate owners
  • directors
  • existing entities
  • funding sources.

Products, founder/customer countries, fiat/asset flows, and volumes help identify permissions. Technology, policies, the business plan, and prior filings show remaining work.

Timing Dependencies

Client evidence, company setup, local presence, and documentation affect preparation; some work can overlap. Authority review and corrections have a separate timetable. Banking follows the provider’s review.

Global Regulatory Framework

No license grants worldwide permission. Local law determines market reach. Payments, securities, or issuance can need additional permissions.

For example, BCR registration comes before the relevant SSF procedures. A registration receipt alone does not authorize operation.

Current Regulatory Status

Canada requires AML registration for money services businesses (MSBs), including foreign MSBs targeting and serving Canada.
In Montana, federal MSB registration applies, while the state does not require a money-transmitter license.
Costa Rica also has a statutory AML registration requirement.
Panama’s financial permissions depend on the services provided.
El Salvador has separate regimes for digital asset and Bitcoin service providers. Digital asset service providers (DASPs) require registration and authorization to operate. Bitcoin service providers (BSPs) are subject to Bitcoin registration and supervision under a distinct regime.
In the EU, crypto-asset service providers need authorization under the Markets in Crypto-Assets Regulation (MiCA). The transition period has ended.
Switzerland uses affiliation with a self-regulatory organization for AML supervision.

Ongoing Responsibilities

Canada
The MSB/FMSB must perform risk-based ongoing monitoring of established customer relationships under Canada’s anti-money laundering law (PCMLTFA) and regulations.

Switzerland
The intermediary must identify customers and beneficial owners when establishing relationships under the Anti-Money Laundering Act (AMLA).

Costa Rica
Covered providers must report suspicious and attempted transactions confidentially, without delay, to UIF/ICD under Law 7786 Article 15 quater, added by Law 10961.

Montana (US)
The MSB’s designated compliance person oversees its continuing written AML program under the BSA and 31 CFR 1022.210.

Panama
Where regulated remittances are included, the company must maintain AML controls and submit required operational reports under Law 23/2015 and remittance-sector rules.

Banking Readiness

Providers assess status, ultimate owners, funding sources, flows, countries, counterparties, and volumes. Gofaizen & Sherle prepares agreed evidence. The bank or payment provider decides whether to accept the business.

Tax Considerations

Compare residence and income-source rules, corporate tax, value-added/goods-and-services taxes, local operations, payroll, and token/transaction treatment. Check each exemption’s conditions against your business before relying on it.

Compare Regulatory Routes

RouteMarket FitRegulatorLocal PresenceTimingCost DriversLimitation
Canada MSB/FMSBExchange/transfersFINTRACDomestic/foreign routesRegister before operationControlsSecurities/provincial permissions separate
El Salvador DASPDigital assetsCNADAssess structureReview/queriesDocumentsNot BSP
El Salvador BSPBitcoinBCR/SSFAssess setupBCR before SSFProceduresReceipt insufficient
Switzerland SROFinancial intermediationSRO/FINMAModel-specificAffiliation assessmentDiligenceFurther licenses possible
Costa Rica registrationCovered VASPsSUGEFConfirm requirementsConfirm procedureAML controlsRegistration only
Montana (US) MSBTransmissionFinCENModel-specificFederal filingComplianceOther states separate
Panama activity-specificFinancial servicesSMV/SBPSector-specificSector procedureApplicable controlsNo incorporation-based permission
EU CASPEU servicesNational authorityEU office/management; at least one EU-resident directorReviewSafeguardsInstrument limits

Frequently Asked Questions

Do software-only providers need permission?

Functions decide. BCR excludes certain noncustodial technology providers; customer custody or transmission changes the assessment. This is not a worldwide software exemption.

Can an existing registration cover a new service?

Not automatically. Assess added custody or issuance against your existing scope and the applicable activity rules before offering it.

What if our target market changes?

Supply revised customer countries and marketing plans before expansion.

What if we already have a company?

Check whether it meets the chosen route’s incorporation, management, and local-presence conditions before committing to restructuring.

What if our operating costs increase?

For EU CASPs, higher fixed overheads can change required financial safeguards. Update projections and recalculate.

What happens after a regulator query?

Allocate evidence between your team and Gofaizen & Sherle, respond, and await resolution or further questions.

Does offshore mean no local team?

No. Seychelles requires a resident director and staffed office. Check your proposed arrangements against that regime.

What if a bank declines the application?

Review its stated reason and address actual evidence gaps within the agreed scope. Another provider’s acceptance remains its decision.

What tax information should we collect?

Gather residence facts, transaction types, and fee flows for individual assessment, including where business decisions and activities occur.

What changes need attention after approval?

Assign someone to check applicable update and notification duties when ownership, services, or operations change. Deadlines depend on the route.

Mark Gofaizen
Mark Gofaizen
Senior Partner, Head of Consulting
Maksim Gasanbekov
Maksim Gasanbekov
Partner, Head of Sales (Crypto and Blockchain)
Get in touch
Phone *
Estonia +372 Estonia

    Connect with our experts

    Our experts will tell you how to do it as quickly and easily as possible.

    Estonia

      By clicking the button, I confirm that I have read the privacy policy and consent to the collection and processing of my personal data in accordance with the GDPR rules.

      Thank you

      Thank you for reaching us. Our team is working on your request, and we will contact you soon.

      Message not sent