MiCA Regulation (EU) 2023/1114 — In force since December 2024
VASP→CASP Transition Deadline: 1 July 2026
Offices in Düsseldorf · Vilnius · Tallinn
Free Initial Consultation

Crypto Exchange License EU — MiCA CASP Authorization Guide 2026

EU crypto exchange platform — MiCA CASP authorization for spot trading, swap and order matching under MiCA Regulation 2023/1114

Operating a crypto exchange in the European Union requires a MiCA CASP authorization under Regulation (EU) 2023/1114. Whether you run a centralized spot trading platform, a crypto-to-fiat swap service, or an order-matching engine, your operations fall under MiCA Articles 5, 6, and/or 7 — the three service definitions covering exchange activity. The minimum own funds requirement is €150,000 (Class 3 CASP), authorization takes 3–7 months depending on jurisdiction, and a single EU license grants passporting rights across all 27 member states. The most cost-efficient exchange license jurisdictions in 2026 are Estonia, Lithuania, Bulgaria, Ireland, and Malta — each offering different advantages for speed, ecosystem depth, and operating cost. This guide covers everything you need to know to obtain your EU crypto exchange license under MiCA.

What is a MiCA Crypto Exchange License?

A MiCA crypto exchange license is a CASP (Crypto-Asset Service Provider) authorization granted by a National Competent Authority (NCA) in an EU member state under MiCA Regulation (EU) 2023/1114. It authorizes a legal entity to operate one or more crypto exchange service types across the EU under a single regulatory passport.

Unlike pre-MiCA national VASP registrations — which were typically AML-focused and didn't confer passporting rights — a MiCA CASP authorization is a full prudential and conduct-of-business license. It subjects the exchange to ongoing capital requirements, client protection rules, market integrity obligations, AML/KYC standards, DORA ICT resilience requirements, and NCA supervision on an ongoing basis.

Before MiCA, crypto exchanges in the EU operated under a patchwork of national regimes. Germany required BaFin crypto custody or trading authorization. France required PSAN registration. Other member states had lighter-touch AML registration only. MiCA replaces all of these with a single harmonized framework that became fully applicable in December 2024, with a transitional period for legacy VASPs running until 1 July 2026.

Who Needs an EU Crypto Exchange License?

  • Centralized exchanges (CEXs) operating spot trading order books for EU clients
  • Crypto-to-fiat swap platforms exchanging crypto-assets for EUR, GBP, or other currencies
  • Crypto-to-crypto swap services allowing users to exchange one token for another
  • OTC trading desks providing bilateral fiat-crypto or crypto-crypto exchange
  • Hybrid platforms combining exchange and brokerage functions
  • Any business providing exchange services to EU residents, regardless of where the operator is incorporated

MiCA Services Covered by an Exchange License

MiCA defines crypto exchange operations across three service categories. Most exchange businesses will require authorization under multiple articles:

📊
MiCA Article 5 — Trading Platform
Operation of a trading platform for crypto-assets — running an order book, matching engine, or other multilateral system that brings together buyers and sellers of crypto-assets. This is the core authorization for CEX operators. Requires €150,000 minimum capital (Class 3).
🔄
MiCA Article 6 — Exchange Service
Exchange of crypto-assets for funds (fiat currency) or exchange of crypto-assets for other crypto-assets. Covers spot swap, fiat on/off-ramp, and bilateral OTC exchange. Requires €125,000 minimum capital (Class 2), but combined with Art. 5 elevates to Class 3 (€150,000).
📨
MiCA Article 7 — RTO
Reception and transmission of orders for crypto-assets on behalf of clients. Covers order routing, brokerage functions, and directing client orders to third-party trading venues. Requires €50,000 minimum capital (Class 1), but combined with exchange services elevates the overall requirement.
⚖️
Capital Class Hierarchy
A CASP authorized for multiple services takes the highest capital class applicable. An exchange offering both Art. 5 (trading platform) and Art. 6 (exchange) services is a Class 3 CASP with €150,000 minimum own funds. The highest-class service determines the overall capital floor.
Important: Combined Service Authorization

Most exchange businesses require authorization under multiple MiCA articles simultaneously. When applying, you must specify all intended service types. NCAs assess the application holistically, and the capital requirement is set at the highest applicable class. Adding custody services (Art. 70) to an exchange also triggers Class 3 requirements but with specific custody safeguards.

Capital Requirements — €150,000 Class 3

Under MiCA Article 67, CASPs must maintain minimum own funds based on the class of services authorized. Exchange operations fall under Class 3 — the highest capital tier — due to the systemic and client-fund risks associated with running a trading platform:

CASP Class Service Types Min. Own Funds MiCA Reference
Class 1 Advice; Reception & transmission; Execution; Placing €50,000 Art. 67(1)(a)
Class 2 Exchange for fiat/crypto; Portfolio management; Transfer services €125,000 Art. 67(1)(b)
Class 3 Operation of trading platform; Custody & administration €150,000 Art. 67(1)(c)

The €150,000 own funds must be held at all times as freely available, unencumbered capital — not tied up in fixed assets, intangibles, or illiquid instruments. Under MiCA Art. 67(2), own funds must also equal at least one-quarter of the fixed overheads of the preceding year, so as the exchange grows, the capital requirement scales with operational costs.

Capital must consist of Tier 1 instruments: paid-up ordinary shares, retained earnings, or other instruments that absorb losses on a going-concern basis. Some NCAs — particularly BaFin in Germany — may impose higher capital requirements beyond the MiCA minimums for larger or higher-risk exchanges. The MiCA minimum is a floor, not a ceiling.

Best EU Jurisdictions for Crypto Exchanges

All EU member states offer the same MiCA exchange license with identical passporting rights. The choice of jurisdiction affects speed, cost, ecosystem access, and regulator familiarity. Here is how the leading exchange jurisdictions compare in 2026:

Jurisdiction Regulator Timeline Gov. Fee Corp. Tax Best For
🇪🇪 Estonia FASTEST FSA (Finantsinspektsioon) 3–5 months €1,000–€3,300 20%* Speed, tech-first culture, e-residency
🇱🇹 Lithuania Bank of Lithuania 4–6 months €1,000–€2,000 15% Fintech ecosystem, Revolut-grade credibility
🇧🇬 Bulgaria FSC (KFN) 3–4 months €500–€2,000 10% Lowest cost, fastest for price-sensitive firms
🇮🇪 Ireland Central Bank of Ireland 5–8 months €5,000–€15,000 12.5% UK-adjacent client base, institutional credibility
🇲🇹 Malta MFSA 5–7 months €3,000–€5,000 35%* Established crypto hub, MFSA crypto expertise

* Estonia: 0% on retained profits, 20% on distributions. Malta: effective rate significantly reduced by imputation system. Timelines are estimates for well-prepared applications. Gov. fee ranges cover basic CASP authorization; complex applications involving custody or novel tokens may incur higher fees.

For most new market entrants prioritizing speed and cost, Estonia or Bulgaria offer the fastest path to an EU exchange license. For firms serving institutional clients or seeking maximum EU credibility, Lithuania or Ireland are stronger choices. For firms serving UK clients post-Brexit, Ireland offers the geographic and legal proximity advantage.

Application Process — 6 Steps to Your EU Exchange License

1
Business Model Analysis & Jurisdiction Selection
We analyze your exchange model — spot trading, swap, OTC, or hybrid — to identify the applicable MiCA articles (Art. 5, 6, 7) and the required capital class. We assess your target client markets, existing corporate structure, and timeline requirements to select the optimal NCA jurisdiction. Timeline: 1 week.
2
EU Entity Formation
We establish a legal entity in the chosen jurisdiction — Estonian OÜ, Lithuanian UAB, Bulgarian OOD, Irish Limited, or other EU form — with registered office, genuine business substance, local bank account, and appropriate corporate structure for CASP authorization. Timeline: 1–3 weeks depending on jurisdiction.
3
Compliance Documentation Package
We prepare the full CASP application package: business plan with 3-year financial projections, AML/KYC program aligned with ESMA guidelines and national AML law, DORA ICT risk management framework, market integrity controls (MiCA Title VI), client asset segregation procedures, conflict-of-interest policy, and fit & proper materials for all directors and key function holders. Timeline: 4–8 weeks.
4
Technology & Platform Review
We review your exchange platform for MiCA compliance: order book or matching engine documentation, cybersecurity architecture, client fund segregation in the platform, Travel Rule implementation for crypto transfers, and DORA-compliant incident response procedures. We prepare the IT systems description required by most NCAs as part of the CASP application. Timeline: 2–3 weeks concurrent with Step 3.
5
NCA Application Submission & Review
We submit the complete CASP authorization application to the chosen NCA. The NCA confirms completeness within 25 working days (MiCA Art. 63), then reviews within 65 working days of a complete application. We manage all NCA correspondence, respond to information requests, and liaise with the authorization department. Timeline: up to 65 working days (approximately 3 months).
6
Authorization & EU Passporting Activation
Upon CASP authorization, your exchange entity is listed in ESMA's public register. We immediately initiate passporting notifications for all target EU member states, enabling you to serve clients across the full EU single market. We provide ongoing compliance support and regulatory monitoring for your authorized exchange. Timeline: 1–2 weeks post-authorization.

Technology & Compliance Requirements

Beyond capital and documentation, MiCA imposes specific technology and operational compliance requirements on authorized crypto exchanges. NCAs assess these as part of the CASP authorization review and ongoing supervision:

🔐
Client Asset Segregation
Client crypto-assets and fiat funds must be held separately from the exchange's own assets. Segregation must be maintained at the wallet level (separate on-chain addresses or custodian accounts) and at the banking level. Client fiat funds must be held in an EU-regulated bank.
📡
Travel Rule Compliance
EU Funds Transfer Regulation (FTR) and FATF Travel Rule require exchanges to collect, verify, and transmit originator and beneficiary information for crypto-asset transfers above €1,000. Compliance requires technical integration with a Travel Rule solution (e.g., Notabene, TRM Labs, Sygna).
🛡️
DORA ICT Resilience
Digital Operational Resilience Act (DORA) requires documented ICT risk management framework, business continuity plan, incident classification and reporting procedures, and regular operational resilience testing. Third-party cloud providers and technology vendors must be subject to contractual DORA obligations.
📋
Market Integrity Controls
MiCA Title VI prohibits market manipulation, insider dealing, and unlawful disclosure of inside information in crypto-asset markets. Exchanges must implement surveillance systems to detect and prevent manipulation, maintain order book records for at least 5 years, and report suspicious transactions to the NCA.
👤
AML/KYC & Transaction Monitoring
Full KYC onboarding for all clients, ongoing transaction monitoring for suspicious activity, PEP and sanctions screening, MLRO appointment, AML policy aligned with EU AMLA and national AML law, and regular independent AML audits. Blockchain analytics integration (e.g., Chainalysis, Elliptic) is expected by most NCAs.
📊
Reporting & Record-Keeping
Exchanges must maintain transaction records for at least 5 years, report to ESMA via the NCA on a regular basis, disclose inside information in accordance with MiCA Art. 88, and file suspicious transaction reports (STRs) with the national financial intelligence unit (FIU). Quarterly capital adequacy reporting to the NCA is standard.

Crypto Exchange License EU — FAQ

What MiCA services cover a crypto exchange?
Under MiCA Regulation (EU) 2023/1114, crypto exchange operations are covered by three service definitions: Article 5 (operation of a trading platform — order book or matching engine), Article 6 (exchange of crypto-assets for fiat currency or other crypto-assets — spot swap, OTC), and Article 7 (reception and transmission of orders — order routing, brokerage). Most exchanges require authorization under Art. 5 and Art. 6 simultaneously, making them Class 3 CASPs with a minimum own funds requirement of €150,000.
What is the capital requirement for a crypto exchange license?
A crypto exchange license under MiCA requires €150,000 minimum own funds under MiCA Article 67(1)(c) — the Class 3 CASP tier. This is MiCA's highest capital requirement and applies to CASPs operating trading platforms (Art. 5) or providing custody (Art. 70). The capital must be freely available, unencumbered, and maintained at all times. Additionally, own funds must equal at least one-quarter of fixed overheads for the preceding year, so the requirement scales with business size.
Which EU country is best for a crypto exchange license?
The best jurisdiction depends on your priorities. Estonia is fastest (3–5 months, FSA). Lithuania offers the deepest fintech ecosystem (Bank of Lithuania, 4–6 months). Bulgaria has the lowest total cost (10% corporate tax, €500–€2,000 gov fee, 3–4 months, FSC). Ireland suits firms serving UK clients (CBI, 5–8 months). Malta is suitable for firms seeking an experienced crypto-specialist regulator (MFSA, 5–7 months). For most new entrants prioritizing speed, Estonia or Lithuania are the strongest choices in 2026.
How long does it take to get an EU crypto exchange license?
The full timeline is typically 3–7 months: 1–3 weeks for entity formation, 4–8 weeks for documentation preparation, and up to 65 working days (approximately 3 months) for the NCA statutory review under MiCA Art. 63. Fast jurisdictions like Estonia and Bulgaria complete the full process in 3–5 months for well-prepared applications. Complex applications — particularly those involving custody services or novel token types — can take up to 7 months. NCA backlog, application completeness, and responsiveness to information requests all affect the actual timeline.
Can I operate a DEX under MiCA?
Truly decentralized exchanges where no identifiable legal person controls the protocol fall outside MiCA's scope. However, most DEXs in practice have a development team, governance token holders, or a front-end operator — these may attract NCA scrutiny. ESMA guidance indicates DEXs with identifiable EU operators may be subject to MiCA. Centralized exchanges (CEXs) with order books or swap functions clearly require CASP authorization under Art. 5 and/or Art. 6. If you operate a DeFi protocol serving EU users, we strongly recommend obtaining a legal opinion on MiCA applicability before launch.
What compliance requirements does a MiCA exchange license require?
Key compliance requirements for a MiCA-authorized exchange include: AML/KYC program with transaction monitoring, Travel Rule compliance, MLRO, and blockchain analytics; DORA ICT resilience framework with business continuity plan and incident reporting; market integrity controls under MiCA Title VI (anti-manipulation, insider dealing prevention); client asset segregation at wallet and banking level; capital monitoring and quarterly NCA reporting; and complaints handling procedure. Most NCAs also require an independent AML audit within 12 months of authorization. Contact us for a full compliance checklist.
Crypto exchange compliance and MiCA CASP authorization — trading platform documentation and regulatory review

Why MiCA Matters for Crypto Exchanges

MiCA Regulation (EU) 2023/1114 is the most comprehensive crypto-asset regulation in the world. For exchange operators, it represents both a compliance obligation and a major commercial opportunity: a single CASP authorization grants access to 450 million EU consumers and institutional counterparties across 27 member states without additional local licenses.

The Business Case for MiCA Authorization

  • EU market access: A single CASP license from Estonia, Lithuania, or Bulgaria lets you serve clients in Germany, France, Italy, Spain, and all 27 EU states through passporting under MiCA Art. 65.
  • Institutional acceptance: Banks, payment processors, and institutional counterparties increasingly require MiCA CASP status as a condition of onboarding crypto exchange clients. Authorization is the gateway to EUR banking relationships.
  • Competitive differentiation: MiCA-authorized exchanges can display their ESMA register listing to clients — a trust signal that unregulated competitors cannot match. Client trust, retention, and AUM are all improved by regulatory status.
  • Transition timeline pressure: The VASP-to-CASP transition deadline is 1 July 2026. Exchanges operating under pre-MiCA national AML registrations must obtain CASP authorization or cease EU operations. Early movers secure their market position before the deadline rush.

Our team has guided exchanges through authorization in Estonia, Lithuania, Bulgaria, Malta, and Poland. We handle the entire process — from jurisdiction selection and entity formation through documentation, NCA liaison, and post-authorization passporting. Schedule a free consultation to discuss your exchange authorization timeline.

For country-specific exchange licensing guidance, see: Estonia exchange license, Lithuania exchange license, Bulgaria exchange license. For the brokerage alternative, see Crypto Broker License EU.

Elena Fischer — MiCA CASP Exchange Licensing Specialist
Lead Expert — CASP Services
Elena Fischer
MiCA CASP Authorization Specialist · Düsseldorf / Tallinn

Elena Fischer leads Crypto License Europe's CASP services practice, specializing in MiCA exchange and trading platform authorizations across Estonia, Lithuania, Bulgaria, Ireland, and Malta. She has advised over 40 crypto exchange and trading platform operators on MiCA structuring, NCA application strategy, AML/KYC program design, and DORA compliance implementation. Elena has deep expertise in MiCA Articles 5–7 service definitions and the regulatory expectations of European NCAs reviewing exchange CASP applications. Prior to Crypto License Europe, Elena worked in financial regulation at a Frankfurt-based law firm advising investment firms and crypto exchanges on German BaFin authorization requirements. Speak to Elena →

€150K
Min Capital (Class 3)
3–7
Months Authorization Timeline
27
Countries EU Passporting
Art. 5–7
MiCA Legal Basis

Get Your Exchange License — Free Consultation

Our MiCA exchange specialists will assess your platform, select the optimal EU jurisdiction, and guide you from entity formation to CASP authorization and EU passporting. Free 30-minute consultation, response within 1 business day.

Start Free Consultation