Cyprus VASP to CASP Transition: 2026 Deadline Guide

Cyprus was early to crypto. Long before MiCA, CySEC stood up one of the EU’s first national crypto-asset registers, and a Cyprus registration became a recognised way to run a crypto business from an English-speaking, low-tax EU base. That national regime has now been switched off. Under the Markets in Crypto-Assets Regulation (MiCA), the national register has been replaced by a single EU credential, the Crypto-Asset Service Provider (CASP) authorisation, issued in Cyprus by the Cyprus Securities and Exchange Commission (CySEC). If you still hold an old Cyprus crypto registration, it cannot be renewed, and the transitional deadline has passed.

The providers who came through this cleanly treated it as a corporate re-authorisation project with a fixed cut-off rather than a paperwork refresh. The ones who waited tend to discover the problem the way most compliance problems surface: a banking partner asks for a licence reference that resolves to a regime that no longer exists. This guide is the practical path from a legacy Cyprus registration to a full MiCA CASP authorisation in 2026.

Why the national register closed

The old national regime and the new EU one answer to different masters. Cyprus’s crypto register was a national creation, supervised locally under CySEC’s AML framework, and its authority stopped at the border. MiCA replaced that patchwork of national crypto rules across Europe with one directly applicable EU regulation, and one licence type that carries across the whole bloc. There was no mechanism to keep both running in parallel indefinitely, so the national register was always going to give way to MiCA.

Article 143 of MiCA is the specific provision that matters to you. It granted providers that were already offering crypto-asset services under national law before MiCA applied a transitional period in which they could continue on the old basis. The regulation set an EU-wide backstop of 1 July 2026, and individual member states could shorten that window, so the operative date was whichever CySEC applied to Cyprus registrations, up to that ceiling. Now that the window has shut, a legacy national registration is a lapsed permission with no durable legal footing. What replaces it is a different, heavier credential that has to be obtained through a full application. Our MiCA regulation explained guide covers the regime change in full; this article focuses on what a Cyprus registrant specifically has to do about it.

What a Cyprus registrant must actually do now

Converting to a CASP is a substance exercise. The registrations many providers held were granted with comparatively modest requirements on capital, governance and local presence. A CASP authorisation is a full financial-services licence, and CySEC assesses it as one. The applicant is a Cypriot company with genuine substance — real management on the island, a real office, and a real compliance function rather than a nameplate.

The core build looks like this:

• A Cyprus company as the licence applicant, with a registered office and genuine operating presence on the island.
• Class-based initial capital of €50,000, €125,000 or €150,000 depending on the CASP service class, subject to MiCA’s fixed-overheads test that can raise the figure, and met through own funds, an insurance policy or both.
• Fit-and-proper management assessed by CySEC, plus a dedicated MLRO and board-level compliance oversight.
• AML/CFT policies aligned to the EU’s fifth and sixth anti-money-laundering directives and the Travel Rule (originator/beneficiary data on transfers).
• A DORA-compliant ICT framework — risk management, incident reporting, resilience testing and third-party ICT oversight, applicable to CASPs since 17 January 2025.
• A programme of operations, business plan and financial projections, plus custody, safeguarding and complaints-handling policies, and a MiCA white paper where tokens are issued or admitted.

Compared with the registration era, when little of this was asked of you, it is a real project, and the ICT and AML build take the longest. The full breakdown is in our Cyprus crypto licence requirements guide, and the cost side is modelled in the Cyprus crypto licence cost explainer. The point here is to start the corporate and compliance work now, because none of it can be compressed into a few weeks.

Old national register vs new MiCA CASP

The transition deadline — and what a lapsed registration really costs

Registrants tended to underestimate this because the registration still “worked” until the window closed. The exposure is twofold. First, regulatory: now that the transitional window has shut, providing crypto-asset services on a lapsed registration is unauthorised activity, and CySEC can act on it. Second, and usually faster, commercial: crypto-friendly banks, EMI and payment-institution partners verify authorisation status directly, and a registration that resolves to a sunset regime simply fails that check. When it fails, settlement holds and account closures follow quickly, and unlike a fine there is no negotiating your way out of a bank’s risk decision.

There is also a scope cost to drifting. A national-only permission cannot passport, so any EU expansion you had planned stalls until the CASP is granted. If your registration lapsed before the new licence was live, you are looking at a reauthorisation exercise under time pressure, which is the situation our crypto licence renewal in Europe guide exists to help operators avoid.

What changes commercially once you hold a Cyprus CASP

The upside of the work is reach. The old Cyprus register only ever authorised you on the island; every other EU market was closed to you, or required its own local registration. A CASP authorisation passports across all 27 member states under MiCA Article 65; you apply once to CySEC, notify the host states you want to serve, and operate EU-wide from a single licence. For any provider with ambitions beyond one country, that is a step change in addressable market.

The credential also carries more weight. A CySEC CASP authorisation is a recognised EU financial-services licence, and it opens doors a light-touch national registration never did: crypto-friendly banking and EMI/PI partners, institutional counterparties, auditors and listing venues all read a MiCA CASP differently from a national entry. Cyprus adds a specific advantage here: because CySEC built the island into Europe’s forex and CFD hub, the regulator and the local workforce already understand high-volume, cross-border trading businesses, and the banking, audit and legal bench is deep. In our experience that shows up as smoother onboarding and a shorter due-diligence cycle. The substance you build for the licence (the company, the MLRO, the DORA and AML stack) is the same foundation you reuse to add service classes or scale into new markets later. Our Cyprus crypto licence pillar sets out the full picture of what the authorisation unlocks.

Convert in Cyprus, or relocate?

Not every registrant should assume Cyprus is still the answer, but for most already established there, it is. The real question is where your genuine substance sits. If your management, staff and banking are already in Cyprus, converting the existing company into a CASP applicant is the cleanest route: you are adding capital, governance and policy to a business that already exists, and you keep the (now 15%, from January 2026) corporate tax and English-language base that drew you to the island in the first place. Relocation only earns its cost if your real operating centre is somewhere else, in which case it may make more sense to license where your people and controls actually are.

Either way, the decision should be modelled rather than defaulted. The transitional deadline has passed, so doing nothing now means operating without authorisation. Whether you convert in Cyprus or license elsewhere, continuing to trade on a lapsed registration is not a safe option. Book a free consultation and we’ll size the CASP conversion against your service classes, capital, banking needs and timeline.

Christina S.

Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.