Cyprus Crypto Licence Cost (CASP, 2026)
The real Cyprus crypto licence cost in 2026 — CySEC fees, class-based CASP capital, the own-funds overhead test, local substance.
Contents
A Cyprus crypto (CASP) licence’s biggest cost is not the CySEC fee but the class-based initial capital — €50,000 (Class 1), €125,000 (Class 2) or €150,000 (Class 3). Every founder who asks “what does a Cyprus crypto license cost” tends to fixate on the wrong figure, the CySEC processing fee. That fee is real, but it is not what shapes your budget. The class-based capital, the own-funds overhead test, the Cypriot substance and the compliance programme MiCA demands are what actually cost money, and they dwarf the application fee.
Cyprus raised corporate tax from 12.5% to 15% in January 2026, and that recurring line weighs more in the budget than CySEC’s processing fee. Build the CASP business plan around the own funds you must hold, the Cyprus company you must staff, and the AML and DORA framework you must run. Here is the all-in cost of a Cyprus CASP licence in 2026, and why the CySEC fee is the smallest part of it.
- The CySEC processing fee is a small, predictable line that barely moves the budget.
- Class-based initial capital is the real weight: €50,000 (Class 1), €125,000 (Class 2) or €150,000 (Class 3), held as own funds that stay on your balance sheet.
- A fixed-overheads test can push capital above the class minimum, because MiCA requires a quarter of prior-year fixed overheads where that is higher.
- A Cypriot company with substance, an MLRO, and an AML/CFT and DORA build recur yearly; corporate tax is 15% (up from 12.5% in January 2026).
What a Cyprus CASP licence actually costs in 2026
Start with the fee everyone asks about, because it is the part operators over-weight. The Cyprus Securities and Exchange Commission (CySEC) charges a processing fee to assess a Crypto-Asset Service Provider file under MiCA. We describe it qualitatively on purpose — the exact schedule is confirmed at scoping, and quoting a precise number you cannot verify does you no favours. What matters is the shape of it: the processing fee is a modest, one-off line, and on its own it explains nothing about why a serious CASP setup runs into six figures. The capital, the overhead test, the substance and the compliance build do.
The single largest number in the plan is regulatory own funds, and it is set by the crypto services you intend to run. MiCA fixes the floor by service class, identically across every EU member state: €50,000 for Class 1, €125,000 for Class 2, and €150,000 for Class 3. That capital is not a fee. It stays in the company as own funds and remains working capital of the business, but it must be genuinely funded before you launch, and it ties up cash from day one.
| Cost line | Figure (2026) | What it covers |
|---|---|---|
| CySEC processing fee | On quote | One-off, paid to CySEC on submission (schedule confirmed at scoping) |
| Initial capital — Class 1 | €50,000 | Reception/transmission, advice, execution, placing (own funds) |
| Initial capital — Class 2 | €125,000 | Adds custody and exchange services (own funds) |
| Initial capital — Class 3 | €150,000 | Operating a trading platform (own funds) |
| Own-funds overhead test | ¼ of fixed overheads | Can raise required capital above the class minimum if higher |
| Cyprus substance & MLRO | Recurring, on quote | Cypriot company, office, management, AML function |
| AML/CFT & DORA ICT build | Six-figure territory | Programme of operations, policies, ICT resilience |
Two lines in that table are routinely misread. The capital is money you fund into the company and keep there; it must be genuinely capitalised, and the overhead test can raise it. And “substance & compliance” is an ongoing operating cost that recurs every year the licence is live. The CySEC processing fee is modest by comparison. For a jurisdiction-by-jurisdiction view, our crypto licence cost comparison sets Cyprus against the wider EU and offshore field.
Class-based capital in Cyprus — the cost that isn’t a fee
The capital requirement is the part most founders underestimate, because it does not behave like a fee. Under MiCA, the minimum you must hold scales with the ambition of your business. A Class 1 provider (order reception and transmission, advice, execution of orders, placing of crypto-assets) needs €50,000. Add custody of client crypto or an exchange service and you move to Class 2 at €125,000. Operate a full trading platform and you are in Class 3 at €150,000. These floors are identical in every EU country; Cyprus does not set them, MiCA does.
Crucially, this money stays in the business. Own funds here means Common Equity Tier 1 items such as paid-up share capital, share premium and retained earnings, and they back your operations exactly as a prudential capital requirement does in any regulated financial firm. MiCA also accepts an insurance policy, alone or alongside own funds. What you should not do is treat the capital as a cost to be minimised: under-scoping your service class to shave the capital line usually means re-licensing later, which is far more expensive than funding the right tier once. For how each class maps to the capital you must hold, our guide to CASP capital requirements breaks the tiers down in detail.
MiCA requires the higher of the fixed class floor or a quarter of your prior-year fixed overheads. So a larger or higher-cost Cyprus CASP can be required to hold more than the €50,000–€150,000 headline — CySEC assesses this at authorisation and on an ongoing basis. This is exactly why we model the overhead test against your cost base before fixing the capital line, rather than quoting the class minimum and hoping it holds.
Local substance: the recurring cost the fee schedule hides
This is where a MiCA CASP licence separates from a light-touch registration, and where the real recurring money goes. A CySEC CASP authorisation requires a genuine Cypriot company with real local presence: a registered office, an operating footprint, fit-and-proper management CySEC assesses, and a dedicated money-laundering reporting officer. None of that appears on the processing-fee schedule, and all of it recurs every year.
Substance is not box-ticking. CySEC runs detailed fit-and-proper checks on shareholders, directors and UBOs, expects demonstrated source of funds, and wants a credible business plan with financial projections and a programme of operations. Around that sits the compliance core: AML/CFT policies aligned to the EU’s 5th and 6th anti-money-laundering directives, Travel Rule handling under the EU Transfer of Funds Regulation, client-asset safeguarding and complaints procedures. Building that framework to regulator standard is a project in itself that no template covers, and the AML and MLRO function has to be staffed and maintained for the full life of the licence.
The service class you pick drives the substance too. A custody or trading-platform operator (Class 2 or 3) carries heavier safeguarding, key-management and operational obligations than a Class 1 advisory or execution firm, so your product mix shapes both the capital line and the staffing line. This is why we scope the class first and cost the substance against it, rather than quoting a generic setup number. For the full picture of what CySEC expects, our Cyprus crypto licence requirements guide breaks the file down section by section, and the Cyprus crypto licence pillar guide sets the whole engagement in one place.
DORA and crypto-friendly banking in Cyprus
Two further cost drivers sit outside the licence fee and catch operators who budget only for capital. The first is DORA. Since 17 January 2025, the Digital Operational Resilience Act has applied to CASPs, which means CySEC expects a working ICT risk-management framework: incident reporting, resilience testing, and oversight of your third-party technology providers. For a crypto business this is not paperwork — it covers wallet architecture, key custody, disaster recovery, cybersecurity controls and the monitoring that keeps client assets safe. Building and running a DORA-compliant ICT programme is a real, recurring line in the budget, and regulators increasingly treat weak ICT resilience as a reason to slow or refuse a file.
The second is banking, a separate workstream from the licence, and in crypto the payment and settlement rails take real effort to secure. A CASP does not use mainstream consumer processors; you build the money flow around crypto-friendly banking and specialist EMI or payment-institution partners that will actually service a licensed crypto firm. A CySEC authorisation carries real weight here, because Cyprus is a dense fintech, forex and fund ecosystem and the banks, auditors and advisers a licensed operator needs are already on the island. Onboarding still takes work, so open the bank and EMI conversations while the application is under review and the rails are ready when authorisation arrives. Our guide to crypto-friendly banking explains why the banking stack should be scoped before you file.
Why the fee is the wrong anchor — and what the real budget buys
Add the pieces and the picture is clear. The CySEC processing fee is the small, predictable line. The weight is the class-based capital you fund (€50,000 to €150,000, held as own funds and possibly higher under the overhead test), the Cypriot company and its substance, the AML/CFT and MLRO build, the DORA ICT programme, and the crypto-friendly banking that makes the whole thing operable. Count the capital and the real year-one commitment lands in the low-to-mid six figures — a very different number from the fee alone.
What that budget buys is genuinely valuable. One CASP authorisation passports across all 27 EU member states on a notification basis under MiCA Article 65 — the whole single market, entered once rather than country by country. CySEC brings its forex and CFD heritage: it is the regulator that made Cyprus Europe’s cross-border trading hub, so it understands high-volume trading businesses in a way newer crypto regulators do not. Corporate tax is 15% (raised from 12.5% in January 2026, the EU/OECD Pillar Two minimum), with an extensive treaty network and English as a working language. And the credential itself carries weight with banks, PSPs, auditors and institutional partners in a way an offshore registration does not.
| Service class | Minimum capital | What it authorises |
|---|---|---|
| Class 1 | €50,000 | Reception/transmission, advice, execution, placing |
| Class 2 | €125,000 | Class 1 plus custody and exchange of crypto-assets |
| Class 3 | €150,000 | Class 2 plus operating a crypto trading platform |
One timing point matters for anyone still holding an old registration: under MiCA the national VASP regime has been replaced by the CASP licence, and the transitional window for previously registered providers closed on 1 July 2026, after an earlier internal filing deadline CySEC had set for existing providers. New entrants apply directly for CASP authorisation now. If you are weighing whether the migration path or a fresh application fits your business, our Cyprus VASP-to-CASP transition guide walks through both routes and their timing.
If a full EU crypto licence is where your business is heading, we run the whole file (the Cypriot company, the capital and own-funds test, the AML/CFT and DORA build, the CySEC application and the banking around it), with our fees and the state costs shown separately. See the full scope on our Cyprus crypto licences page, then book a free consultation and we’ll model the real year-one economics, including capital and the overhead test, against your service classes before you commit a euro.
Frequently asked questions
How much does a Cyprus crypto (CASP) licence cost?
The largest number is the class-based initial capital (€50,000 Class 1 / €125,000 Class 2 / €150,000 Class 3), which stays in the business as own funds. CySEC also charges processing fees for a CASP file (we describe them qualitatively and confirm the amount at scoping). Add the own-funds overhead test, a Cypriot company with substance, an MLRO, and the AML/CFT and DORA ICT build. Once capital is counted, the full year-one commitment runs to the low-to-mid six figures, far above the state fee.
What is the own-funds overhead test?
MiCA sets a floor by service class, and Article 67 also requires every CASP, in Cyprus as elsewhere, to hold at least a quarter of the prior year's fixed overheads where that figure is higher than the class minimum. So a larger or higher-cost operation can be required to hold more capital than the €50,000–€150,000 headline. CySEC assesses this at authorisation and on an ongoing basis — it is why we model the overhead test before you fix the capital line.
Is the CASP capital a fee I lose?
No. The €50,000–€150,000 stays with your business, usually as own funds on the balance sheet, backing your operations. MiCA sets the floor by service class; you hold at least that (or a quarter of prior-year fixed overheads if higher), and an insurance policy can cover some or all of it.
How long does the Cyprus CASP licence take?
Plan six to twelve months from a complete filing, and realistically ten to fourteen months from incorporation. CySEC understands high-volume trading businesses from its forex/CFD heritage, but the timeline depends on your service classes, the quality of the programme of operations, and how quickly you answer review questions. A thin file stalls in due diligence.
Does a Cyprus CASP passport across the EU?
Yes. A CySEC CASP authorisation passports across all 27 EU member states on a notification basis under MiCA Article 65 — you notify host states rather than re-applying in each. One authorisation opens the entire EU/EEA regulated crypto market, which is the core reason the capital and substance are worth funding.
What is Cyprus's corporate tax on a crypto company?
Cyprus levies a 15% corporate tax (raised from 12.5% in January 2026 to meet the EU/OECD Pillar Two minimum) alongside an extensive treaty network and an English-speaking business and legal environment. That is a real advantage over higher-tax MiCA hubs, but tax is a downstream figure. The upfront number that shapes your setup is capital plus the overhead test plus substance plus the compliance build.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
We'll map the fastest route to a licensed, banked, live operation.
Book a free consultation →Recommended reading.
Stay ahead of the rules.
Licence fees, rules and deadlines change through the year. Subscribe and we'll email you Vantegris licensing updates.
Licence, done right.
300+ operators licensed across 40+ jurisdictions. Book a free consultation.
Book a free consultation