Estonia VASP to CASP Transition: 2026 Deadline Guide

Estonia built Europe’s best-known crypto address on one thing: a Financial Intelligence Unit (FIU) VASP registration that was quick to get and easy to run. That door closed on 1 July 2026. Under the Markets in Crypto-Assets Regulation (MiCA), supervision has moved from the FIU to the Financial Supervision Authority (Finantsinspektsioon), and the national VASP registration has been replaced by a single EU credential, the Crypto-Asset Service Provider (CASP) licence. If you held a legacy Estonian VASP registration, it stopped being a lawful basis to operate on that date.

Supervision moved from the FIU to the Finantsinspektsioon, so a former VASP now applies to a different authority under different rules. Holders who wait tend to learn this the way most compliance problems surface, when a banking partner asks for a licence reference that resolves to a regime that no longer exists. This guide is the practical path from a lapsed FIU registration to a full FSA-issued CASP authorisation in 2026, and where an existing VASP could move faster than a newcomer.

Why supervision moved from the FIU to the FSA

The old regime and the new one answer to different masters. An FIU VASP registration was an Estonian creation: supervised at home, framed primarily around anti-money-laundering registration, and with authority that stopped at the border. MiCA replaced that patchwork of national crypto rules with one directly applicable EU regulation, a single licence type that carries across the whole bloc, and a prudential supervisor to match. In Estonia, that supervisor is the Financial Supervision Authority (Finantsinspektsioon), the same body that oversees banks, investment firms and payment institutions. Crypto has been moved out of a registration desk and into full financial-services supervision.

That shift is the whole point. A VASP registration checked that you had AML controls; a CASP licence assesses you as a regulated financial firm on capital, governance, operational resilience and conduct. MiCA’s Article 143 grants firms already operating under national law a transitional period to keep going on the old basis, and Estonia set that window to close on 1 July 2026, so it has now closed. Crucially, there is no bridge between the two regimes: the FIU does not hand your file to the FSA, and your VASP registration does not roll over. You must reapply. Our MiCA regulation explained guide covers the regime change in full; this article focuses on what an Estonian VASP holder specifically has to do about it.

What a legacy VASP holder must actually do now

Reapplying to the FSA means building real substance rather than filling in a form. The registration many operators held was granted with comparatively little local presence, governance or capital. A CASP authorisation is a full financial-services licence, and the FSA assesses it as one. The applicant is an Estonian OÜ with genuine substance, meaning real management, a local registered office and a real compliance function.

The core build looks like this:

• An Estonian OÜ as the licence applicant, with a local registered office and genuine operating presence in Estonia.
• Class-based initial capital of €50,000, €125,000 or €150,000 depending on the CASP service class, kept at the higher of that tier or a quarter of last year’s fixed overheads through own funds, insurance or both.
• Fit-and-proper management assessed by the Financial Supervision Authority, plus a dedicated MLRO and board-level compliance oversight.
• AML/CFT policies aligned to the EU’s fifth and sixth anti-money-laundering directives and the Travel Rule (originator/beneficiary data on transfers).
• A DORA-compliant ICT framework — risk management, incident reporting, resilience testing and third-party ICT oversight, applicable to CASPs since 17 January 2025.
• A programme of operations, business plan and financial projections, plus custody, safeguarding and complaints-handling policies to MiCA conduct standard.

Compared with the FIU era, when little of this was asked of you, it is a real project, and the ICT and AML build take the longest. The full breakdown is in our Estonia crypto licence requirements guide, and the licence itself is covered end to end in our Estonia CASP licence explainer. The point here is to start the corporate and compliance work now, because none of it compresses into a few weeks, and you cannot provide services without authorisation in the meantime.

Old FIU VASP vs new FSA CASP

The 1 July 2026 deadline and the no-conversion trap

VASP holders tended to underestimate this because the registration still “worked” until the cut-off. The exposure is twofold. First, regulatory: now that the transitional window has shut, providing crypto-asset services on a lapsed registration is unauthorised activity, and the FSA can act on it. Second, and usually faster, commercial: crypto-friendly banks, EMI and payment-institution partners verify authorisation status directly, and a registration that resolves to a retired FIU regime simply fails that check. When it fails, settlement holds and account closures follow quickly, and unlike a fine there is no negotiating your way out of a bank’s risk decision.

There is also a scope cost to drifting. A lapsed or national-only permission cannot passport, so any EU expansion you had planned stalls until the CASP is granted. If your registration has lapsed without a new licence in place, you face a re-authorisation exercise under time pressure, the situation our crypto licence renewal in Europe guide exists to help operators avoid. The cheapest version of this transition was the one started early, and the one advantage Estonia gave existing holders was speed, which the next section covers.

The upside: faster upgrades, and an EU-27 passport

The work has two payoffs, and the first is timing. A greenfield CASP applicant builds everything from zero; an existing Estonian VASP does not. A firm with a live OÜ, an operating history and a compliance function already in place could qualify for a shorter, simplified FSA review, in practice closer to three months than the full four to six. It is not a rubber stamp: the capital, DORA and AML programme must still reach CASP standard, and the FSA expects sound own funds and a credible team rather than the minimum on paper. A legacy holder is upgrading an existing business rather than founding a new one.

The larger payoff is reach. The FIU VASP registration only ever authorised you in Estonia; every other EU market was closed to you, or demanded its own local registration. A CASP authorisation passports across all 27 member states under MiCA Article 65. You apply once in Estonia, notify the host states you want to serve, and operate EU-wide from a single licence. For any operator with ambitions beyond one country, that is a step change in addressable market. The credential also carries more weight: a Finantsinspektsioon CASP is a recognised EU financial-services licence, and banks, EMI/PI partners, institutional counterparties and auditors all read it differently from a national VASP entry. And Estonia’s own advantages travel with it: e-government efficiency and a distributed-profits corporate-tax model that taxes profit only when it is distributed. Our Estonia crypto licence pillar sets out the full picture of what the authorisation unlocks.

Convert in Estonia, or relocate?

Not every VASP holder should assume Estonia is still the answer, though for most already established here it is. The real question is where your genuine substance sits. If your management, staff and banking are already in Estonia, reapplying with the existing OÜ as CASP applicant is the cleanest route: you are adding capital, governance and policy to a business that already exists, and you keep whatever shorter-review advantage a legacy holder can still claim. Relocation only justifies its cost if your real operating centre is elsewhere, in which case it may make more sense to license where your people and controls actually are. If you are weighing the two Baltic hubs, our Estonia vs Lithuania crypto licence comparison sets the choice out side by side.

Either way, the decision should come from modelling your substance and costs. The one unsafe option is to keep operating on a registration that lapsed on 1 July 2026, because that turns a planned re-authorisation into an outage. Book a free consultation and we’ll size the CASP conversion against your service classes, capital, banking needs and timeline.

Christina S.

Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.