
Bosnia and Herzegovina crypto license
Last Update: 11.05.2026
If you’re looking for a Balkan crypto base outside the EU’s MiCA regime, a Bosnia and Herzegovina crypto license is one of the most pragmatic options on the table. You can register a local company in 2-4 weeks, notify the Securities Commission, and start operating as a VASP – without the capital, structure, and timeline pressure of an EU CASP license under MiCA. Gofaizen & Sherle handles the full path: company setup, AML/CFT framework, MLRO appointment, and Securities Commission notification.
A Bosnia and Herzegovina crypto license is a notification-based authorization that allows a locally registered company to provide virtual asset services as a Virtual Asset Service Provider (VASP). The framework rests on two pillars: the Anti-Money Laundering and Terrorist Financing Act of 16 February 2024 at the state level, and the Law on the Securities Market (Republika Srpska, 2022) at the entity level. Bosnia and Herzegovina consists of two administrative entities – the Federation of Bosnia and Herzegovina (FBiH) and Republika Srpska (RS) – and the Brčko District (BD); registration depends on the entity where the company is incorporated, typically as a društvo sa ograničenom odgovornošću (d.o.o.) – a local limited liability company.
Licensed VASPs in BiH may legally provide:
- crypto-to-fiat and crypto-to-crypto exchange;
- custody and management of virtual currencies (wallet depository services);
- organization of trading platforms;
- transfer of virtual currencies on behalf of third parties;
- financial services connected to issuer offerings (token sales, ICOs).
Summary of key information
| Regulator | Securities Commission of FBiH (Komisija za vrijednosne papire FBiH); RS Securities Commission for Republika Srpska |
| Local company form | d.o.o. (limited liability company); IBC not eligible |
| Minimum share capital (VASP) | No specific VASP minimum; nominal share capital for company setup |
| Setup timeline | 2-4 weeks company registration; 30 days notification window after incorporation |
| Government fees | EUR 150-300 company registration; EUR 500 VASP registration in RS |
| Corporate income tax | 10% |
| VAT | 17% standard rate; crypto exchange exempt |
| MLRO requirement | Mandatory – local Money Laundering Reporting Officer |
| Director residency | Local director OR non-resident with “white card” work permit |
| MiCA recognition | Not applicable; BiH is outside the EU MiCA framework |
Why choose Bosnia and Herzegovina for your crypto business?
Bosnia and Herzegovina offers six concrete advantages for crypto operators looking outside the EU’s MiCA regime: low setup cost, fast timeline, no minimum VASP capital, a 10% corporate tax rate, wide service scope, and direct access to Balkan and EU-adjacent markets.
Outside MiCA, outside EU costs.
BiH is not an EU member state, so the EU’s MiCA Regulation does not apply. You skip the EUR 50,000-150,000 CASP capital floor and the 12+ month authorization timeline of EU jurisdictions.
No minimum VASP capital.
The Law on the Securities Market (RS) and the AML Law of February 2024 do not set a minimum share capital for a VASP. Company setup uses the standard d.o.o. nominal capital, not a regulatory floor.
Fast registration, 2-4 weeks.
Company incorporation as d.o.o. typically takes 2-4 weeks. The Securities Commission notification is filed within 30 days of incorporation. Total timeline to operating: 4-6 weeks.
Favorable tax regime – 10% CIT.
Corporate income tax is 10%. Crypto exchange transactions are VAT-exempt. There is no tax on dividends paid out to shareholders.
Strategic Balkan position.
A BiH license gives your business direct exposure to the Balkan market and working ties with neighbouring EU countries – a useful bridge if you eventually plan to expand westward.
Wide range of permitted services.
A licensed BiH VASP can offer crypto-to-fiat and crypto-to-crypto exchange, custody, trading platform operation, transfer services, and ICO support – covering most operating models.
Crypto license in Bosnia and Herzegovina
Ready to map your BiH crypto license path?
Get a personalized quote with timeline, fees, and the full Gofaizen & Sherle setup roadmap – typically within 24 hours.
Timeline
4-6 weeks
Total Budget
from 6 500 €
How is crypto regulated in Bosnia and Herzegovina?
Crypto regulation in Bosnia and Herzegovina is split between the state level and the entity level – a structural feature that defines what kind of authorization a VASP needs and where it is filed. BiH consists of two administrative entities – the Federation of Bosnia and Herzegovina (FBiH) and Republika Srpska (RS) – and the Brčko District (BD). There is no single state-level crypto law; instead, the framework operates on three layers:
- State level (BiH). The Anti-Money Laundering and Terrorist Financing Act of 16 February 2024 defines VASPs and their AML/CFT obligations across the entire country. The Central Bank of BiH does not recognize virtual currencies as legal tender, but their trade and exchange are not prohibited.
- Republika Srpska (RS). The Law on the Securities Market (amended in 2022) defines virtual currencies as digital records of value and gives the RS Securities Commission authority over VASP registration. The Digital Assets Act (2020) set earlier standards for crypto operations.
- Federation of BiH and Brčko District. No entity-level crypto law has been adopted. VASPs operate under the state AML framework, and notification practice follows the Securities Commission of FBiH (Komisija za vrijednosne papire FBiH).
In practice, VASPs choose the entity of incorporation depending on banking access, registration speed, and project profile. Local crypto adoption is growing – 4.3% of the population reportedly own crypto assets, and the Adriatic Crypto Exchange (ACX) operates with 15 listed assets. The total market is estimated at $3.2 million.
What are the requirements for a Bosnia crypto license?
To obtain a Bosnia crypto license, an applicant must register a local d.o.o. (limited liability company), appoint an MLRO, implement an AML/CFT framework aligned with FATF standards, register with three state authorities, and ensure the director is either a local resident or holds a “white card” work permit. There is no minimum VASP capital requirement; offshore (IBC) structures are not eligible.
The detailed requirements are:
- Local company structure. Registration as a d.o.o. (društvo sa ograničenom odgovornošću – limited liability company) is mandatory. International Business Companies (IBCs) cannot hold a BiH crypto license – only locally incorporated entities qualify.
- Three-authority registration. The company must be registered with the Tax Service, the Statistical Office, and the Securities Commission (FBiH or RS depending on incorporation entity).
- Local bank account for share capital. The authorized capital must be deposited into a Bosnia-based bank account (approximately 29 local banks available). After deposit, the company may operate accounts in any country.
- MLRO appointment. A local Money Laundering Reporting Officer (MLRO) is mandatory. The MLRO must have professional AML/CFT qualifications and is responsible for transaction monitoring, regulator communication, and suspicious activity reports.
- AML/CFT framework. Internal policies covering customer identification (KYC), transaction monitoring, risk assessment, employee training, and FIU reporting – aligned with the AML Law of February 2024 and FATF recommendations.
- Director residency – two options. Either (a) a local resident director, or (b) a non-resident director with a “white card” work permit. The white card requires a one-time personal visit to BiH; once issued, no further physical presence is needed.
- KYC threshold (KM 1,000). Mandatory customer identification applies to occasional transactions exceeding KM 1,000 (approximately EUR 510), whether single or interconnected.

Expert view
Bosnia is one of the few European jurisdictions where you can still get a regulated VASP setup in 4-6 weeks without a six-figure capital lock-up. The trade-off is the entity-level fragmentation – we map your project to the right entity (FBiH or RS) before incorporation, so you skip the costly rework most teams hit on their first attempt.
Senior Partner, Head of Consulting
How to set up a crypto business in Bosnia and Herzegovina?
Setting up a crypto business in Bosnia and Herzegovina follows a four-step path: (1) preparation and structuring, (2) company incorporation as d.o.o. and bank account opening, (3) MLRO appointment and AML/CFT documentation, (4) Securities Commission notification within 30 days of incorporation. End-to-end timeline: typically 4-6 weeks to a fully operating VASP.
Step 1: Preparation and structuring
Define service scope, capital structure, and management:
- Decide which VASP services you will offer (exchange, custody, trading platform, transfer, ICO support);
- Set the share capital level for company setup;
- Identify the director – local resident or non-resident with planned “white card”;
- Reserve and verify the company name with the Commercial Register.
Step 2: Company incorporation as d.o.o.
Register the local entity and open a special-purpose bank account:
- Prepare Articles of Association and Memorandum of Association;
- Notarial process for company registration;
- Submit forms and documents to the Commercial Register;
- Pay government fees (approximately EUR 150-300 for incorporation);
- Open a special-purpose account in a local Bosnia-based bank for share capital deposit.
Step 3: MLRO appointment and AML/CFT framework
Build the compliance backbone before the regulator notification:
- Appoint a local MLRO (Money Laundering Reporting Officer) with AML/CFT qualifications;
- Draft AML/KYC policies aligned with the AML Law of February 2024 and FATF recommendations;
- Implement transaction monitoring systems and the customer identification process from KM 1,000;
- Prepare a written acceptance from the appointed manager and copies of required documents.
Step 4: Securities Commission notification
File the VASP notification with the relevant Securities Commission:
- Submit the notification to the Securities Commission of FBiH or the RS Securities Commission, depending on the incorporation entity;
- Include the company registration documents, AML/CFT framework, MLRO details, and proof of state-authority registration;
- Pay the VASP registration fee (approximately EUR 500 in RS);
- Begin operating once the notification is accepted and entered into the register.
Cost of obtaining a crypto license in Bosnia and Herzegovina
- Full turnkey company formation assistance (inc. gov. fees, and notary fees);
- Address of registration for 1 year;
- Registration as VASP within the Security Commission;
- Opening a Special Purpose account in a local bank;
- Set of corporate documents in Serbian language;
- Standard AML/KYC Policy.
- All services from the Basic Package;
- Set of corporate documents with an apostille and translation to English language;
- Corporate account opening in a European EMI (segregated B2B/B2C accounts, multicurrency accounts);
- Search, integration, and employment agreement with local AML officer;
- Personalized AML/KYC Policy.
- All services from the Advanced Package;
- Assistance with “white card” obtainment for a Director;
- Providing legal assistance in setting up KYC/KYT providers;
- Open office space for 1 year;
- Legal opinion confirming the company’s status.


What are the responsibilities of VASP providers in Bosnia and Herzegovina?
VASP providers in Bosnia and Herzegovina must hold a valid registration with the relevant Securities Commission, maintain an active AML/CFT framework supervised by a local MLRO, complete registration with the Tax Service and Statistical Office, pay 10% corporate income tax, and file annual financial and transaction reports. The breakdown:
| Obligation | What it requires |
|---|---|
| VASP registration | Mandatory for all entities offering virtual asset services in BiH; filed with the Securities Commission of FBiH or RS Securities Commission depending on incorporation entity. |
| AML/CFT compliance | Mandatory across the financial sector. Local MLRO appointment; transaction monitoring; suspicious activity reporting to the FIU; customer identification from KM 1,000. |
| State authority registration | All companies must register with the Tax Service; the Statistical Bureau; and the Securities Commission – all three required. |
| Corporate income tax | 10% CIT on profits. |
| Annual reporting | Financial statements; tax records; reporting on virtual asset transactions; AML reports per the AML Law of February 2024. |
What is the legal framework for crypto in Bosnia and Herzegovina?
The legal framework for crypto in Bosnia and Herzegovina rests on six acts spanning state-level AML, entity-level securities and digital assets regulation, and financial-sector oversight. There is no dedicated state-wide VASP law; the rules below operate in combination depending on the entity of incorporation (FBiH, RS, or BD).
| Act | Year | Scope |
|---|---|---|
| Anti-Money Laundering and Terrorist Financing Act of BiH | 2024 | State-level AML/CFT framework. Defines VASPs and their services. Introduces customer verification; PEP identification; cash transactions limited to EUR 15,000. Cryptocurrency may be transferred; exchanged; stored – not legal tender. |
| Law on the Central Bank of Bosnia and Herzegovina | in force | Powers of the Central Bank over monetary transactions including foreign currency and cryptocurrency. |
| Law on the Securities Market (Republika Srpska) | 2022 | Defines virtual currencies and VASP services; sets the competences of the RS Securities Commission, including the VASP register. Includes the RS Rules on the Registration of Service Providers Related to Virtual Currencies. |
| National Payment Transactions Act | in force | Methods for controlling and processing payment systems including cryptocurrency transactions. |
| Digital Assets Act (Republika Srpska) | 2020 | Detailed types of transactions involving cryptocurrencies. Pre-2024 regulatory baseline at the entity level. |
| Banking Act | in force | Regulates financial institutions and their cooperation with fintech companies. |
How are crypto businesses taxed in Bosnia and Herzegovina?
Crypto businesses in Bosnia and Herzegovina pay 10% corporate income tax (CIT), 10% personal income tax (PIT) on individual crypto income, and 13% on capital gains. The standard VAT rate is 17%, but crypto exchange transactions are VAT-exempt. There are no specific crypto taxes – general tax law applies – and no tax on dividends paid to shareholders.
- Corporate income tax – 10%. Applies to legal entities on profits from crypto operations under the Law on Income Tax (Article 4 – transactions with intangible assets).
- Personal income tax – 10%. Applies to individuals deriving income from crypto activities, including mining, under the Income Tax Act.
- Capital gains – 13%. Tax rate applied to gains on disposal of digital assets.
- VAT – 17% standard rate; crypto exchange exempt. Standard VAT applies across BiH; there is no reduced rate. Crypto-to-fiat and crypto-to-crypto exchange transactions are exempt; other crypto-adjacent commercial activities follow general VAT rules.
- Dividends – no tax. Dividends paid to shareholders are not taxed.
Mandatory reporting for crypto businesses
Under the Accounting Act, all commercial organizations maintain financial, tax, and statistical records. Crypto operators additionally submit:
- transaction log (all crypto and fiat operations);
- customer verification reports (KYC files);
- suspicious transaction reports filed with the Financial Intelligence Unit (FIU).
What are the risks of operating a crypto business in Bosnia and Herzegovina?
Operating a crypto business in Bosnia and Herzegovina carries six structural risks: no dedicated state-level VASP law, fragmented regulation between FBiH and RS, undefined legal status of virtual currencies, NFTs and proof-of-stake staking outside the regulatory perimeter, restricted banking access, and limited regulatory precedent because of the framework’s recent adoption.
- No dedicated state-level VASP law. The framework relies on the AML Law (2024) and the RS Law on the Securities Market (2022). Operators rely on cross-references rather than a single comprehensive crypto act, leaving operational details open to interpretation.
- FBiH / RS / BD regulatory fragmentation. The Federation of BiH and Brčko District lack entity-level crypto regulation; only Republika Srpska has explicit VASP rules. Choice of incorporation entity directly affects what compliance path applies.
- Undefined legal status of cryptocurrencies. Virtual currencies are not legal tender; their status as property, instrument, or other legal category is not codified, which affects contract enforceability and dispute resolution.
- NFTs and PoS staking outside regulation. Direct sales of tokens by issuers, NFTs, and staking on proof-of-stake consensus mechanisms are not expressly regulated under either the state-level AML framework or the RS Law on the Securities Market. Operators in these segments lack a clear compliance perimeter.
- Restricted banking access. Many local banks decline crypto-related accounts. The legally required share-capital deposit must go through a Bosnian bank, but operating banking is typically arranged with European EMIs.
- Limited regulatory precedent. The current framework was introduced in 2024; few enforcement decisions or interpretive guidelines exist. Application practice is still forming.

Conclusion
Bosnia and Herzegovina is a pragmatic option if you want to operate a regulated crypto business in Europe without the cost and timeline of an EU MiCA license. The framework is functional but still developing – the AML Law of 2024 fills the state-level gap, and Republika Srpska’s Law on the Securities Market provides the most explicit VASP track. The trade-offs are real: limited precedent, restricted banking, and entity-level fragmentation between FBiH and RS. With the right entity choice and a well-prepared file, the path to operating is typically 4-6 weeks.
FAQ about Crypto license in Bosnia and Herzegovina
Who is required to obtain a crypto license in Bosnia and Herzegovina?
Any legal entity in Bosnia and Herzegovina providing virtual asset services – crypto-to-fiat or crypto-to-crypto exchange, custody, transfer, trading platform operation, or ICO support – must register as a VASP with the relevant Securities Commission (FBiH or RS). Individuals and IBCs are not eligible; only locally registered companies (typically d.o.o.) can hold a BiH crypto license.
How long does it take to obtain a Bosnia crypto license?
Typically 4-6 weeks end-to-end: 2-4 weeks for company incorporation as d.o.o. and bank account opening, then notification to the Securities Commission within 30 days. Total time depends on document quality, MLRO availability, and current regulator workload.
Do AML/KYC procedures need to be followed?
Yes. The Anti-Money Laundering and Terrorist Financing Act of February 2024 requires all VASPs to appoint a local MLRO, implement customer identification (mandatory from KM 1,000), monitor transactions, report suspicious activity to the FIU, and align internal policies with FATF recommendations.
Can a Bosnia crypto license be revoked or suspended?
Yes. The Securities Commission can remove a VASP from the register for non-compliance – AML/CFT violations, missing or inadequate MLRO, false information in the notification, or operating outside the registered service scope. Once removed, the entity cannot legally provide virtual asset services until re-registered.
Does the Bosnia crypto license cover NFTs and staking?
No. The current framework – both the state-level AML Law and the RS Law on the Securities Market – regulates exchange, custody, transfer, trading, and ICO services. Direct sales of tokens by issuers, NFTs, and staking on proof-of-stake consensus mechanisms are not expressly covered. Operators in these segments operate outside a defined regulatory perimeter.
What is the cost of obtaining a Bosnia crypto license?
Government fees are approximately EUR 150-300 for company registration plus EUR 500 for VASP registration in Republika Srpska. Total cost depends on the package scope (Basic, Advanced, Full) and adds notary fees, translation, banking setup, and ongoing MLRO/compliance services.
What is the difference between FBiH and Republika Srpska for crypto licensing?
Republika Srpska has explicit VASP rules under the Law on the Securities Market (2022), with the RS Securities Commission maintaining a dedicated register of virtual currency service providers. The Federation of Bosnia and Herzegovina (FBiH) has no entity-level crypto law; VASPs there operate under the state AML framework with notification to the Securities Commission of FBiH. Choice of incorporation entity affects the registration process, supervisory practice, and banking access.
Do I need a local director for a Bosnia crypto license?
Not necessarily. Two paths are available: (a) appoint a local resident director, or (b) appoint a non-resident director who obtains a “white card” – a Bosnia work permit issued after a one-time personal visit. Once the white card is in place, no further physical presence is required from the director. The MLRO, however, must always be a local resident.
Can a foreign company apply for a Bosnia crypto license directly?
No. Direct licensing of foreign or offshore (IBC) companies is not permitted. To obtain a BiH crypto license, a non-resident company must establish a local Bosnian entity – typically a d.o.o. (limited liability company) – and then file the VASP notification through the local entity. Foreign shareholders and directors are allowed; the entity itself must be Bosnian-registered.
Is a Bosnia crypto license recognized in the EU under MiCA?
No. Bosnia and Herzegovina is not an EU member state, and MiCA does not apply. A BiH crypto license does not provide EU passporting rights. Operators serving EU clients on a passportable basis need a CASP license in an EU member state. BiH is a viable choice for non-EU operations, regional Balkan markets, and operators who do not need EU passporting.
Connect with our experts
Our experts will tell you how to do it as quickly and easily as possible.


By clicking the button, I confirm that I have read the privacy policy and consent to the collection and processing of my personal data in accordance with the GDPR rules.