Cyprus VASP to CASP Transition: 2026 Deadline Guide

Cyprus was early to crypto. Long before MiCA, CySEC stood up one of the EU’s first national crypto-asset registers, and a Cyprus registration became a recognised way to run a crypto business from an English-speaking, low-tax EU base. That national regime is now being switched off. Under the Markets in Crypto-Assets Regulation (MiCA), the national register is replaced by a single EU credential — the Crypto-Asset Service Provider (CASP) authorisation — issued in Cyprus by the Cyprus Securities and Exchange Commission (CySEC). If you hold an old Cyprus crypto registration, the transition is a hard deadline, not a renewal.

In our practice, the providers who come out of this cleanly treat it as a corporate re-authorisation project with a fixed cut-off, not a paperwork refresh. The ones who wait discover the problem the way most compliance problems surface — a banking partner asks for a licence reference that resolves to a regime that no longer exists. This guide is the practical path from a lapsing Cyprus registration to a full MiCA CASP authorisation in 2026.

Why the national register is closing

The old national regime and the new EU one answer to different masters. Cyprus’s crypto register was a national creation, supervised locally under CySEC’s AML framework, and its authority stopped at the border. MiCA replaced that patchwork of national crypto rules across Europe with one directly applicable EU regulation, and one licence type that carries across the whole bloc. There is no mechanism to keep both running in parallel indefinitely — the national register was always destined to sunset into MiCA.

Article 143 of MiCA is the specific provision that matters to you. It grants providers that were already offering crypto-asset services under national law before MiCA applied a transitional period in which they may continue on the old basis. The regulation sets an EU-wide backstop of 1 July 2026, and individual member states could shorten that window — so the operative date is whichever CySEC applies to Cyprus registrations, up to that ceiling. Either way the direction is the same: after the window shuts, a legacy national registration is not a durable legal footing; it is a lapsed permission. You are not being asked to renew a registration. You are being asked to obtain a different, heavier credential in its place. Our MiCA regulation explained guide covers the regime change in full — this article focuses on what a Cyprus registrant specifically has to do about it.

What a Cyprus registrant must actually do now

Converting to a CASP is a substance exercise, not a form. The registration many providers hold today was granted with comparatively modest requirements on capital, governance and local presence. A CASP authorisation is a full financial-services licence, and CySEC assesses it as one. The applicant is a Cypriot company with genuine substance — real management on the island, a real office, and a real compliance function, not a nameplate.

The core build looks like this:

• A Cyprus company as the licence applicant, with a registered office and genuine operating presence on the island.
• Class-based initial capital of €50,000, €125,000 or €150,000 depending on the CASP service class — subject to a fixed-overhead own-funds test that can raise the figure — held in qualifying own funds rather than crypto on the balance sheet.
• Fit-and-proper management assessed by CySEC, plus a dedicated MLRO and board-level compliance oversight.
• AML/CFT policies aligned to the EU’s fifth and sixth anti-money-laundering directives and the Travel Rule (originator/beneficiary data on transfers).
• A DORA-compliant ICT framework — risk management, incident reporting, resilience testing and third-party ICT oversight, applicable to CASPs since 17 January 2025.
• A programme of operations, business plan and financial projections, plus custody, safeguarding and complaints-handling policies, and a MiCA white paper where tokens are issued or admitted.

Compared with the registration era, when little of this was asked of you, it is a real project — and the ICT and AML build are the long poles. The full breakdown is in our Cyprus crypto licence requirements guide, and the cost side is modelled in the Cyprus crypto licence cost explainer. The point here is to start the corporate and compliance work now, because none of it compresses into the weeks before the deadline.

Old national register vs new MiCA CASP

The transition deadline — and what a lapsed registration really costs

Registrants tend to underestimate this because the registration still “works” today. The exposure is twofold. First, regulatory: once the transitional window shuts, providing crypto-asset services on a lapsed registration is unauthorised activity, and CySEC can act on it. Second — and usually faster — commercial: crypto-friendly banks, EMI and payment-institution partners verify authorisation status directly, and a registration that resolves to a sunset regime simply fails that check. When it fails, settlement holds and account closures follow quickly, and unlike a fine there is no negotiating your way out of a bank’s risk decision.

There is also a scope cost to drifting. A national-only permission cannot passport, so any EU expansion you had planned stalls until the CASP is granted. If your registration ever does lapse before the new licence is live, you are looking at a reauthorisation exercise under time pressure — the exact situation our crypto licence renewal in Europe guide exists to help operators avoid. The cheapest version of this transition is the one you start early.

What changes commercially once you hold a CASP

The upside of the work is reach. The old Cyprus register only ever authorised you on the island; every other EU market was closed to you, or required its own local registration. A CASP authorisation passports across all 27 member states under MiCA Article 65 — you apply once to CySEC, notify the host states you want to serve, and operate EU-wide from a single licence. For any provider with ambitions beyond one country, that is a step change in addressable market, not a compliance chore.

The credential also carries more weight. A CySEC CASP authorisation is a recognised EU financial-services licence, and it opens doors a light-touch national registration never did — crypto-friendly banking and EMI/PI partners, institutional counterparties, auditors and listing venues all read a MiCA CASP differently from a national entry. Cyprus adds a specific advantage here: because CySEC built the island into Europe’s forex and CFD hub, the regulator and the local workforce already understand high-volume, cross-border trading businesses, and the banking, audit and legal bench is deep. In our experience that shows up as smoother onboarding and a shorter due-diligence cycle. The substance you build for the licence — the company, the MLRO, the DORA and AML stack — is the same foundation you reuse to add service classes or scale into new markets later. Our Cyprus crypto licence pillar sets out the full picture of what the authorisation unlocks.

Convert in Cyprus, or relocate?

Not every registrant should assume Cyprus is still the answer — but for most already established there, it is. The honest question is where your genuine substance sits. If your management, staff and banking are already in Cyprus, converting the existing company into a CASP applicant is the cleanest route: you are adding capital, governance and policy to a business that already exists, and you keep the (now 15%, from January 2026) corporate tax and English-language base that drew you to the island in the first place. Relocation only earns its cost if your real operating centre is somewhere else, in which case it may be more honest to license where your people and controls actually are.

Either way, the decision is a modelling exercise, not a default. The wrong move is to do nothing and let the transitional deadline decide for you — because standing still converts a manageable, planned re-authorisation into an outage. Whether you convert in Cyprus or license elsewhere, the one option that isn’t safe is running past the window on a registration that has lapsed. Book a free consultation and we’ll size the CASP conversion against your service classes, capital, banking needs and timeline before the clock runs down.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.