Crypto Exchange License in Estonia: CASP Classes

Estonia spent a decade as the easiest place in Europe to register a crypto business, and that history is now the main obstacle to licensing one. The old virtual currency service provider licence was an anti-money-laundering registration issued by the Financial Intelligence Unit. The instrument that replaced it is a financial-services authorisation issued by Finantsinspektsioon under the Crypto Markets Act — and one does not turn into the other.

There is no automatic conversion. A firm that held the FIU licence applies from scratch, against MiCA Article 62 conditions and Article 67 prudential safeguards, on the same footing as an applicant that has never operated in Estonia. If you are scoping a crypto exchange in Estonia on the assumption that the old paperwork gives you a head start, that assumption is the first thing to discard.

Which class you need — and why it is not an Estonian question

MiCA lists ten crypto-asset services. An exchange normally touches three of them, and two set the capital floor.

If the client transacts with you at your quoted price, that is the exchange service. If users post orders and your engine matches them against each other, you are operating a trading platform, and MiCA treats that as market infrastructure with its own integrity duties — which is why it sits a tier higher. Most exchanges do both and authorise at the higher tier.

These classes are set by the regulation and are identical in every member state, so we keep the mechanics in one place instead of restating them country by country: the tier table, the own-funds override and the fixed-overheads calculation live in CASP capital requirements, and the regime overview in MiCA explained. What follows is what is actually Estonian.

The handover that catches Estonian applicants

Two supervisory eras sit either side of this licence, and conflating them is the standard error.

Under the FIU regime, the licence was granted and policed as an AML registration. Hundreds of providers held one. The compliance centre of gravity was the AML rulebook, and much of the operating substance could sit outside Estonia in practice.

Under the Crypto Markets Act, Finantsinspektsioon assesses a crypto exchange as a financial firm. The FSA is the single authority for granting, refusing, revoking and supervising the authorisation, and it applies MiCA Article 62’s conditions together with the Article 67 prudential safeguards. The consequences for an application are concrete:

• The file is a licensing file, not a registration. Programme of operations, governance, capital, ICT resilience under DORA, custody segregation and the client position register, and a functioning three-lines-of-defence structure.
• People are assessed, not just documented. The FSA has publicly clarified its expectations on the competence of staff at crypto companies — the management body’s experience is examined against the activity actually being licensed.
• No credit for the FIU history. Prior registration neither shortens the review nor lowers the bar; in practice it invites questions about how the old operation was run.

The clock, and where Estonian applications actually lose time

The statutory timetable is MiCA’s, so it is identical across the union: 25 working days to check completeness against the information listed in Article 62(2), then 40 working days from a complete application to assess compliance. Estonia’s own procedure adds the detail that matters — the assessment period may be paused for up to 20 working days while the FSA’s additional questions are answered.

That pause is where Estonian timelines are really decided. Every unanswered question about wallet architecture, key management, the segregation model, the outsourcing chain or the source of the founders’ capital converts directly into calendar time. The exchange files that clear quickly are not the ones with a friendly regulator; they are the ones that anticipated the questions in the programme of operations.

An exchange file is heavier than a plain custody or brokerage file, because the trading-venue layer stacks on top: published operating rules for the platform, orderly-trading systems with the ability to halt, market-abuse detection and reporting, and pre- and post-trade transparency — all in addition to custody segregation and the client position register that any exchange holding balances must run.

Substance, and the reality of the numbers

The applicant is an Estonian company with genuine operations — an office in Estonia, management that is fit, proper and demonstrably experienced in the activity, and the regulated functions actually performed by people located there. The FSA’s published clarification of competence requirements for crypto-company staff is a plain signal of where the review focuses.

It is also worth being honest about volume. Estonia had one of Europe’s largest populations of registered crypto firms under the FIU. Authorisations under MiCA have been issued sparingly, and individual grants have been announced as notable events rather than routine ones. Read that as a statement about the standard rather than about hostility: the FSA is assessing full financial-services files, and most of the legacy population was never built to that specification.

Why Estonia, honestly

The case for Estonia is not a permissive regulator — that Estonia is gone, deliberately, and the current one is demanding. The case is that the country runs one of the most efficient corporate and digital-administration environments in the EU, with e-residency, genuinely digital company administration, and a corporate tax system that defers tax until profits are distributed. For a venue that intends to reinvest for years before paying out, that structure is a real advantage, and the CASP authorisation passports into all 27 member states by notification under MiCA Article 65 exactly as any other does.

What Estonia is not is a shortcut for a legacy VASP. If your plan depends on the old licence carrying weight, rebuild the plan; if it depends on a strong file assessed by a serious supervisor, Estonia is a good place to file one.

If you are scoping an Estonian exchange — particularly if you are coming off the FIU regime — book a free consultation and we will map the perimeter, the capital plan and the realistic timeline to what you are actually building. The wider file structure is in the Estonia CASP licence guide.

Christina S.

Crypto Licensing · Vantegris

Part of the Vantegris desk that runs these licences end to end — writing from live applications across 40+ jurisdictions, not recycled marketing. Reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.