Estonia Crypto Licence 2026: The Definitive CASP Guide

Estonia built its reputation as Europe’s most accessible crypto jurisdiction, and under MiCA it has carried that forward — but the rules have changed materially, and one date now dominates the planning. If you hold an old Estonian VASP registration, it is valid only until 1 July 2026, it does not convert automatically, and you must reapply to the Financial Supervision Authority for a full CASP licence to keep operating. This is the definitive guide to what an Estonia crypto licence actually is in 2026.

In our practice, the operators who get caught out are the ones still treating Estonia like the old Financial Intelligence Unit registration — a cheap, fast permit you could stand up in a few weeks with minimal substance. That regime is being retired. What replaced it is a real financial-services licence: an Estonian OÜ with local substance, qualified management, an AML function and a DORA-compliant technology programme, with initial capital of €50,000 to €150,000 depending on what you do. The upside is that this licence now passports across all 27 EU states — one file, the entire single market.

What an Estonia CASP licence is — and what it replaced

An Estonia crypto licence is a Crypto-Asset Service Provider (CASP) authorisation, issued by the Estonian Financial Supervision Authority (Finantsinspektsioon, the FSA) under the Markets in Crypto-Assets Regulation — MiCA, Regulation (EU) 2023/1114. It is the single EU credential for firms that provide crypto services: running an exchange, safeguarding client assets, executing orders, operating a trading platform, or advising on crypto-assets.

The change in supervisor is the part that matters most. For years, Estonian crypto activity was licensed by the Financial Intelligence Unit (FIU) as a VASP (Virtual Asset Service Provider) registration — famous across the industry for being cheap and fast, which is why thousands of firms picked one up. MiCA retired that model. Crypto services are now a supervised financial activity, and the competent authority is the FSA — the same regulator that oversees Estonia’s banks, funds and payment institutions. That is a material step up in seriousness: the CASP licence carries capital, governance, AML and technology obligations the old FIU registration never did. If you have read our VASP, CASP and MiCA explainer, Estonia is the clearest example of the shift — the jurisdiction that defined the old, light-touch way is now issuing a full central-supervisor licence.

The 1 July 2026 deadline — the fact that reshapes every Estonian file

This is the single most important thing to understand about Estonia in 2026, and it is where we see the most expensive mistakes. Existing FIU VASP authorisations are valid only until 1 July 2026. There is no automatic conversion into a CASP licence. A firm holding a legacy Estonian VASP registration must file a fresh application with the Financial Supervision Authority to obtain CASP authorisation, and if it does not, its right to provide crypto services lapses at the deadline.

That has two practical consequences. First, if you already hold an Estonian VASP, the clock is real — a four-to-six-month application does not leave much room if you start late, so the CASP file should already be in motion. Second, if you are a new entrant, there is no point chasing an FIU registration that is on its way out; you apply directly for the CASP. Either way, the transition is a full re-authorisation, not a rubber stamp. Our dedicated Estonia VASP-to-CASP transition guide walks through exactly what a legacy holder has to rebuild, and the deeper class-by-class detail on the licence itself lives in our Estonia CASP licence guide.

Capital by service class

MiCA sets minimum capital by the class of service you provide, and — this is the point operators most often miss — those tiers are the same in every EU country. You do not pick Estonia for cheaper capital; the capital is fixed by the regulation. What Estonia determines is the regulator you deal with, the tax model and the administrative experience. The FSA decides which class (or classes) your business falls into and whether your own funds are genuinely sound.

Two things matter in planning. First, the capital is funded, not a fee — it stays in the business as working capital, held in a bank or e-money account within the EEA, not paid away to the regulator. Second, the classes are cumulative: an exchange with custody sits in Class 2 at €125,000, and a full order-book trading venue lands in Class 3 at €150,000. Most exchange and broker projects sit at €125,000. Crucially, the FSA — like any central-style supervisor — expects robust own funds and a credible team, not the paper minimum; we size capital and staffing to your service classes before you file. Our Estonia crypto licence cost breakdown models the full year-one number, capital included.

One licence, 27 markets: the EU passport

The reason a CASP licence is worth the substance is the passport. Under MiCA Article 65, once the Financial Supervision Authority authorises you, you can provide your licensed services into every other EU/EEA member state on a notification basis — the regulator in each host country is notified, and you are in. You license once in Estonia and passport everywhere, instead of applying licence-by-licence across 27 jurisdictions.

That is the single biggest upgrade in crypto licensing to date, and it is why an EU CASP is not really comparable to an offshore registration. An offshore VASP gets you legally live in one place; an Estonian CASP gets you the entire European single market — the largest regulated crypto market in the world — from one file. It also carries weight with the parties that decide whether you can actually operate: the banks that hold your funds, the crypto-friendly EMI and PI partners that provide your fiat rails, auditors and institutional counterparties. An FSA-supervised licence opens doors an offshore permit never will. Passporting is market access, not a free pass on conduct — you still honour each market’s local marketing rules and geo-block jurisdictions you are not authorised in, plus the United States and sanctioned or FATF-listed territories.

Timeline, substance and the Estonian OÜ

Expect four to six months from scratch on a complete, well-prepared application, and potentially closer to three months where an existing Estonian VASP is upgrading to CASP and can lean on documentation it already holds. The clock that matters is not the FSA’s queue but your own preparation: the classes scoped, the Estonian company incorporated and capitalised, the programme of operations and the AML, DORA and safeguarding policies drafted to FSA standard, and management genuinely fit-and-proper. Thin files stall in review questions; complete ones move.

Substance is where the modern Estonian licence separates hardest from the old FIU registration. A CASP authorisation requires an Estonian OÜ with a genuine registered office and local substance — not a nominee shell. On top of the entity you need a live compliance function: a dedicated MLRO and AML/CFT policies aligned to the EU’s 5th and 6th AML directives, the EU Transfer of Funds Regulation (the Travel Rule) for originator and beneficiary data on transfers, and suitability and source-of-funds checks on shareholders and UBOs. And since 17 January 2025, MiCA firms must run a DORA-compliant ICT programme — operational resilience, incident reporting, resilience testing and third-party ICT oversight — which for a crypto business also means serious custody, key-management and cybersecurity controls. Our Estonia crypto licence requirements guide sets out the complete document and governance checklist.

Where Estonia genuinely earns its reputation is the administration of all this. e-Residency, digital signatures and online filing make incorporating and running a licensed OÜ unusually efficient, and the country’s distributed-profits corporate-tax model — where corporate tax applies only when profits are actually distributed — is attractive for teams that reinvest. The substance is real and it is a recurring cost; Estonia just makes the mechanics of carrying it lighter than most EU peers.

Who Estonia suits — and how it compares to Lithuania

So who is it for? Estonia suits operators who genuinely need the EU market and value a digital-first, efficient jurisdiction to hold it in — exchanges, brokers, custodians, wallet providers and trading platforms that can meet the capital and substance bar. It is a particularly natural home for the many firms that already hold a legacy Estonian VASP and simply need to convert their operation into a compliant CASP before the July 2026 deadline. If your market is global or non-EU, an offshore or Gulf regime is often faster and cheaper, and no single licence covers every market — many groups run a CASP for Europe and a separate licence for the rest of the world.

Its closest peer is Lithuania, the other Baltic MiCA hub. The two are close enough that the decision usually comes down to ecosystem, tax and review speed rather than the licence itself.

Both give you identical capital tiers and the same full EU passport, so neither is “more of a licence” than the other. Estonia leans on digital administration and its distributed-profits tax; Lithuania offers the deeper fintech bench and typically the fastest queue. Our Estonia vs Lithuania crypto licence comparison runs the two side by side, and if the exchange use case is where you are heading, our Estonia crypto exchange licence guide sequences the build.

The honest trade-off

Estonia is not the cheap, fast FIU registration it used to be, and it would be dishonest to sell it that way. A modern CASP file costs real money in capital and substance, takes four to six months, and requires a live compliance and DORA programme you maintain for as long as you hold the licence. What it buys is the entire EU single market from one authorisation, an FSA credential that unlocks banking an offshore permit cannot, and a genuinely efficient jurisdiction to run it from. For a legacy VASP holder, it is also simply the only way to stay in business past 1 July 2026.

If a full EU crypto licence is where your project is heading, we run the entire file — the Estonian OÜ, the substance and management, the AML and DORA framework, the Financial Supervision Authority application and the crypto-friendly banking around it — with our fees and the state costs shown separately, never blended. See the scope on our Estonia crypto licence page, then book a free consultation and we’ll model the real year-one economics — the right service class, the capital, the deadline and whether Estonia or a neighbour fits your plan — before you commit a euro.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.