Estonia VASP to CASP Transition: 2026 Deadline Guide

Estonia built Europe’s best-known crypto address on one thing: a Financial Intelligence Unit (FIU) VASP registration that was quick to get and easy to run. That door is closing. Under the Markets in Crypto-Assets Regulation (MiCA), supervision has moved from the FIU to the Financial Supervision Authority (Finantsinspektsioon), and the national VASP registration is being replaced by a single EU credential — the Crypto-Asset Service Provider (CASP) licence. If you hold a legacy Estonian VASP registration, the date that governs your business is 1 July 2026.

In our practice, the FIU VASP holders who come through this cleanly treat it as a corporate re-authorisation project with a hard deadline, not a renewal. The ones who wait learn the hard part the way most compliance problems surface — a banking partner asks for a licence reference that resolves to a regime that no longer exists. This guide is the practical path from a lapsing FIU registration to a full FSA-issued CASP authorisation in 2026, and where an existing VASP can move faster than a newcomer.

Why supervision moved from the FIU to the FSA

The old regime and the new one answer to different masters. An FIU VASP registration was an Estonian creation — supervised at home, framed primarily around anti-money-laundering registration, and with authority that stopped at the border. MiCA replaced that patchwork of national crypto rules with one directly applicable EU regulation, a single licence type that carries across the whole bloc, and a prudential supervisor to match. In Estonia that supervisor is the Financial Supervision Authority (Finantsinspektsioon) — the same body that oversees banks, investment firms and payment institutions. Crypto has been moved out of a registration desk and into full financial-services supervision.

That shift is the whole point. A VASP registration checked that you had AML controls; a CASP licence assesses you as a regulated financial firm — capital, governance, operational resilience and conduct. MiCA’s Article 143 grants firms already operating under national law a transitional period to keep going on the old basis, and Estonia has set that window to close on 1 July 2026. Crucially, there is no bridge between the two regimes: the FIU does not hand your file to the FSA, and your VASP registration does not roll over. You must reapply. Our MiCA regulation explained guide covers the regime change in full; this article focuses on what an Estonian VASP holder specifically has to do about it.

What a legacy VASP holder must actually do now

Reapplying to the FSA is a substance exercise, not a form. The registration many operators hold today was granted with comparatively little local presence, governance or capital. A CASP authorisation is a full financial-services licence, and the FSA assesses it as one. The applicant is an Estonian OÜ with genuine substance — real management, a local registered office and a real compliance function, not a nameplate.

The core build looks like this:

• An Estonian OÜ as the licence applicant, with a local registered office and genuine operating presence in Estonia.
• Class-based initial capital of €50,000, €125,000 or €150,000 depending on the CASP service class, held in an EEA bank or e-money account.
• Fit-and-proper management assessed by the Financial Supervision Authority, plus a dedicated MLRO and board-level compliance oversight.
• AML/CFT policies aligned to the EU’s fifth and sixth anti-money-laundering directives and the Travel Rule (originator/beneficiary data on transfers).
• A DORA-compliant ICT framework — risk management, incident reporting, resilience testing and third-party ICT oversight, applicable to CASPs since 17 January 2025.
• A programme of operations, business plan and financial projections, plus custody, safeguarding and complaints-handling policies to MiCA conduct standard.

Compared with the FIU era, when little of this was asked of you, it is a real project — and the ICT and AML build are the long poles. The full breakdown is in our Estonia crypto licence requirements guide, and the licence itself is covered end to end in our Estonia CASP licence explainer. The point here is to start the corporate and compliance work now, because none of it compresses into the weeks before the deadline.

Old FIU VASP vs new FSA CASP

The 1 July 2026 deadline — and the no-conversion trap

VASP holders tend to underestimate this because the registration still “works” today. The exposure is twofold. First, regulatory: once the transitional window shuts, providing crypto-asset services on a lapsed registration is unauthorised activity, and the FSA can act on it. Second — and usually faster — commercial: crypto-friendly banks, EMI and payment-institution partners verify authorisation status directly, and a registration that resolves to a retired FIU regime simply fails that check. When it fails, settlement holds and account closures follow quickly, and unlike a fine there is no negotiating your way out of a bank’s risk decision.

There is also a scope cost to drifting. A lapsed or national-only permission cannot passport, so any EU expansion you had planned stalls until the CASP is granted. If your registration ever does lapse before the new licence is live, you face a re-authorisation exercise under time pressure — the exact situation our crypto licence renewal in Europe guide exists to help operators avoid. The cheapest version of this transition is the one you start early, and the one advantage Estonia hands existing holders is speed, which the next section covers.

The upside: faster upgrades, and an EU-27 passport

The work has two payoffs, and the first is timing. A greenfield CASP applicant builds everything from zero; an existing Estonian VASP does not. A firm with a live OÜ, an operating history and a compliance function already in place can qualify for a shorter, simplified FSA review — in practice closer to three months than the full four to six. It is not a rubber stamp: the capital, DORA and AML programme must still reach CASP standard, and the FSA expects sound own funds and a credible team rather than the minimum on paper. But a legacy holder that starts early is upgrading a business, not founding one.

The larger payoff is reach. The FIU VASP registration only ever authorised you in Estonia; every other EU market was closed to you, or demanded its own local registration. A CASP authorisation passports across all 27 member states under MiCA Article 65 — you apply once in Estonia, notify the host states you want to serve, and operate EU-wide from a single licence. For any operator with ambitions beyond one country, that is a step change in addressable market, not a compliance chore. The credential also carries more weight: a Finantsinspektsioon CASP is a recognised EU financial-services licence, and banks, EMI/PI partners, institutional counterparties and auditors all read it differently from a national VASP entry. And Estonia’s own advantages travel with it — e-government efficiency and a distributed-profits corporate-tax model that taxes profit only when it is distributed. Our Estonia crypto licence pillar sets out the full picture of what the authorisation unlocks.

Convert in Estonia, or relocate?

Not every VASP holder should assume Estonia is still the answer — but for most already established here, it is. The honest question is where your genuine substance sits. If your management, staff and banking are already in Estonia, reapplying with the existing OÜ as CASP applicant is the cleanest route: you are adding capital, governance and policy to a business that already exists, and you keep the shorter-review advantage a legacy holder earns. Relocation only justifies its cost if your real operating centre is elsewhere — in which case it may be more honest to license where your people and controls actually are. If you are weighing the two Baltic hubs, our Estonia vs Lithuania crypto licence comparison sets the choice out side by side.

Either way, the decision is a modelling exercise, not a default — and the one option that isn’t safe is running past the window on a registration that has lapsed. Standing still converts a manageable, planned re-authorisation into an outage. Book a free consultation and we’ll size the CASP conversion against your service classes, capital, banking needs and timeline before the 1 July 2026 clock runs down.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.