Crypto Exchange License: What You Need & Where to Get It (2026)
What a crypto exchange license actually is in 2026 — the authorisation you need to run an exchange (MiCA CASP, VARA, offshore VASP), the capital.
Contents
There is no single worldwide “crypto exchange licence” — you license where your users are: an EU CASP covers all 27 EU states, a VARA licence covers Dubai, and offshore VASP regimes cover their own jurisdictions. “Crypto exchange license” is a search term, not a single legal thing. Running an exchange — a platform where users trade one asset for another, or crypto for fiat — is the most heavily regulated activity in crypto, precisely because you hold client assets and match trades. Which authorisation you actually need depends entirely on where your users are. In our experience the operators who get this wrong don’t fail on the licence; they fail on picking a jurisdiction that doesn’t reach their market or can’t bank their fiat. Here’s how to get it right.
An exchange is the top licence tier — everywhere
Because an exchange holds client assets and operates a trading venue, every regulator treats it as the highest-risk crypto activity and licenses it at the top of its scale. In the EU, that means MiCA’s top class:
| Market | Exchange authorisation | Note |
|---|---|---|
| EU / EEA | MiCA CASP, Class 3 | €150,000 capital; passports across all 27 states |
| Dubai | VARA VA exchange licence | Dedicated regulator; licence-per-activity model |
| Hong Kong | SFC VATP licence | Very selective; in-house custody via a subsidiary |
| Singapore | MAS (SPI / MPI) | Under the Payment Services Act |
| Global / lean | Offshore VASP | Georgia, Seychelles, BVI — faster, cheaper, non-EU |
Which one do you actually need?
The decision is the same as for any crypto licence, and it starts with one question: where are your users? If they’re in the EU, you need a CASP licence, and Lithuania or Estonia are the fastest routes. If you’re building a Gulf or Asian exchange, UAE/VARA, Hong Kong or Singapore fit — each demanding, each credible. If your market is global and you want to move lean, an offshore VASP such as Georgia or BVI works at lower cost and speed. Many serious exchanges hold two — an EU CASP plus a VARA or offshore licence — and route each user to the entity licensed for their jurisdiction.
What an exchange licence actually demands
Beyond the licence conditions, there is the operational reality that decides whether an exchange actually launches: fiat banking and payment rails. An exchange that can’t move fiat is dead on arrival, and crypto-friendly fiat banking is the scarcest resource in this industry. This is why we line up banking and PSP relationships alongside the licence application rather than after it — the two problems have to be solved together. Our high-risk banking guide covers the payment side in depth, and our analysis of the move to stablecoin settlement explains why a fast on-chain rail eases the liquidity problem without solving the fiat one.
EU CASP vs offshore VASP for an exchange
The core trade-off for an exchange is reach versus cost and speed. An EU CASP opens the entire single market from one licence but demands €150,000 capital, real substance, DORA compliance and a three-to-twelve-month process. An offshore VASP is faster and far cheaper and supports global business, but it does not passport into the EU. There’s no universally right answer — there’s the one that matches where your users are. If you’re weighing the field, the crypto licences hub compares every jurisdiction, and we’ll map the right structure — often a licensed entity per major market — for your model. Book a free consultation.
Frequently asked questions
Is there a single global crypto exchange licence?
No. There is no worldwide crypto licence — you authorise where your users are. An EU CASP covers all 27 EU member states; a VARA licence covers Dubai; offshore VASP registrations support global business but not the EU. Large exchanges typically hold several licences and route users by jurisdiction.
How much capital does a crypto exchange need in the EU?
Operating a trading platform is the top MiCA tier — Class 3 — which sets €150,000 minimum initial capital, held in qualifying own funds (not crypto on the balance sheet). That is on top of local substance, an MLRO and a DORA-compliant technology programme. Adding custody or fiat exchange keeps you in the higher classes too.
Which is the fastest jurisdiction for a crypto exchange licence?
In the EU, Lithuania and Estonia have the shortest CASP review queues — roughly three to six months on a complete file — and both passport EU-wide. Outside the EU, an offshore VASP such as Georgia can be quicker still (about two months) but doesn't reach the EU market. Speed and market reach are a trade-off, not a free choice.
What's the hardest part of getting an exchange licensed?
Fiat banking and payment rails, followed by client-asset custody. The licence itself is achievable with a complete file; the operational stack around it — banks that will hold fiat, segregated custody, the Travel Rule and DORA controls — is where exchanges actually stall. We build the banking alongside the licence for exactly this reason.
Can I run an exchange under an offshore VASP instead of an EU CASP?
Yes, if your users are outside the EU. An offshore VASP (Georgia, Seychelles, BVI, St. Vincent) authorises exchange activity for global markets at lower cost and faster, but it does not passport into the EU. If any material share of your users is in the EU, you need a CASP — many exchanges run both.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
Recommended reading.
Licence, done right.
300+ licences obtained across 40+ jurisdictions. Book a free consultation.
Book a free consultation