Ireland Crypto Licence Requirements in 2026
Full Ireland CASP licence requirements for 2026 — an Irish company with real substance, capital by class, Central Bank of Ireland fit-and-proper vetting, MLRO.
Contents
An Ireland crypto (CASP) licence requires an Irish company with genuine local substance — a registered office, real operating presence and senior management based in Ireland — plus the class-based MiCA capital (€50,000–€150,000). Ireland is where you license when reputation is the whole point — but the requirements file behind a CASP authorisation is one of the most demanding in the EU. The Central Bank of Ireland (CBI) is one of the most respected financial regulators in the world, and it applies that standard to crypto: an Irish company with real substance, funded capital, vetted people and a working AML and ICT-resilience programme, assembled to a bar that lighter jurisdictions never reach.
This guide is the requirements checklist we work from on our own desk. It covers exactly what the 2026 Ireland CASP regime demands — an Irish company with genuine presence, initial capital by service class, fit-and-proper management assessed by the CBI, an MLRO, and a DORA-compliant ICT framework — so you can price the licence on what it actually takes. Ireland deliberately chose not to offer a simplified route, and we scope the file accordingly.
The company and local substance
Everything starts with an Irish company. The Central Bank of Ireland authorises an Irish legal entity with genuine substance behind it — a registered office in Ireland, a real operating presence, and senior management the regulator expects to actually be based in the jurisdiction. There is no remote-only route: this is a full EU financial-services authorisation, and the CBI is explicit that it will not license a company directed and administered from somewhere else.
Substance is assessed in the round, and Ireland sets the bar high. The regulator wants to see that the business is genuinely run from Ireland, with the right people performing the core functions locally and real economic activity behind the licence. A company that exists only on paper — management and operations sitting abroad, a virtual address in Dublin — does not clear the substance test. Ireland’s appeal is that it is an English-language, common-law, eurozone jurisdiction already home to major payments and technology firms, so a credible operating base is achievable; but it must be real. For the full picture of what a CASP authorisation buys, our flagship Ireland crypto licence overview maps the regime end to end.
Capital by service class
This is the requirement that catches operators pricing Ireland on the state fee alone. MiCA sets a minimum capital floor by the service class you run, and Ireland applies it directly. At application you must fund the initial capital and hold it in a bank or e-money account within the EEA — it is working capital of the business, not a fee, and the CBI expects genuine funding rather than a minimum parked to pass review.
| Class | Services covered | Minimum capital |
|---|---|---|
| Class 1 | Advice, reception/transmission, execution, placing, portfolio management | €50,000 |
| Class 2 | Class 1 plus execution of orders | €125,000 |
| Class 3 | Custody, exchange, operating a trading platform, transfer services | €150,000 |
These figures are identical in every EU member state — they come from MiCA, not from national law — so the capital tier is not something you optimise by choosing Ireland over another EU jurisdiction. What Ireland offers on the same requirement is a blue-chip regulator and a base that banks and institutions trust. Costs sit outside scope here; for the full year-one build, the state fee and running costs, see the Ireland crypto licence cost guide, and for the capital rules across all three classes our CASP capital requirements primer breaks each one down.
People, governance and fit-and-proper vetting
Under MiCA the people behind the company are assessed as rigorously as the business itself, and the Central Bank of Ireland runs the vetting to a demanding standard. This is not a formality — an unresolved file on any one person holds the whole application.
Fit-and-proper senior management. The people running the CASP are assessed for competence, integrity and relevant experience. The CBI expects a board and senior management with genuine financial-services or crypto backgrounds — and, critically, senior management with real presence in Ireland. A founder team with no regulated-industry track record, or a management layer that only visits, does not satisfy the standard. Directors must demonstrate they can actually run a licensed EU financial-services business from Ireland.
A dedicated MLRO and governance structure. A money-laundering reporting officer is a condition of the licence, backed by a clear governance structure with defined responsibilities and board-level compliance oversight. The MLRO is accountable for the AML programme, transaction monitoring and reporting — and must be a real, appointable person with the seniority to do the job, not a name on an org chart.
Suitability and source-of-funds on shareholders and UBOs. Every ultimate beneficial owner and significant shareholder faces suitability checks and a source-of-funds assessment. You must show not only that the business is funded, but where the money comes from and how the beneficial owners built their wealth. Vague or undocumented wealth is one of the most common reasons a file stalls at the CBI — it applies the same standard a tier-1 bank would.
Because these checks take the longest to assemble, especially source-of-funds evidence and documents from multiple jurisdictions, start them on day one rather than treating them as a closing step.
The documents and programme
Alongside people and capital, the Central Bank of Ireland reviews a defined set of documents and policies. Filing with any of these missing, or written for a different business model, is what turns a demanding review into a rejected one. The core pack is:
| Document | What it proves | Notes |
|---|---|---|
| Business plan & financial projections | A viable, credible operation | Must match your service classes and capital |
| Programme of operations | How each service is actually run | Per CASP class applied for |
| AML/CFT policies | A working compliance programme | EU directives plus the Travel Rule |
| DORA ICT framework | Operational and cyber resilience | Risk management plus incident reporting |
| Custody, safeguarding & complaints | Client-asset protection and conduct | Asset segregation for custody classes |
| MiCA white paper | Compliant token disclosure | Where you also issue or admit tokens |
Three elements deserve emphasis. The AML/CFT policies must be operable documents aligned to the EU’s anti-money-laundering directives and the Travel Rule — the EU Transfer of Funds Regulation obligation to attach originator and beneficiary data to crypto transfers — because the MLRO is expected to actually run them. The DORA ICT framework covers ICT risk management, incident reporting, resilience testing and third-party ICT oversight, and it applies to every CASP. And where you issue or admit tokens to trading, a MiCA white paper meeting the regulation’s disclosure standard is required on top of the service authorisation. Custody, safeguarding and complaints-handling policies round out the pack, with strict client-asset segregation for any class that touches custody. The CBI reads these against your actual model — a generic pack lifted from another jurisdiction is transparent to a regulator of its calibre.
Transition, passporting and the deadline
Two dates frame the requirements. First, the VASP-to-CASP transition: under MiCA the national VASP registration is being retired. Ireland took a shorter approach than most — existing providers had until 30 December 2025, and the CBI deliberately did not offer a simplified authorisation route, so legacy firms face the full application. The EU-wide hard deadline is 1 July 2026 with no extension. New entrants apply directly for CASP; there is no VASP shortcut left. If you hold a legacy registration, our VASP-to-CASP transition guide walks through the upgrade path and the deadline mechanics.
Second, the reward for meeting the full requirements: passporting. Once the Central Bank of Ireland grants the CASP licence, it lets you offer crypto services across all 27 EU member states on a notification basis under MiCA Article 65 — one licence, the single largest regulated crypto market in the world. That EU-wide reach, carried by a blue-chip Irish credential, is precisely what the substance, capital and DORA requirements are the price of.
Assembling the file in the right order
Requirements are one thing; sequence is another. The order that avoids rework is: fix your CASP service classes and the matching capital tier first, then incorporate the Irish company, fund the capital in an EEA account and stand up the local office, Ireland-based senior management and key roles. Assemble every UBO and management fit-and-proper file — source of funds, suitability, experience evidence — in parallel, because they take the longest. Draft the programme of operations, AML/CFT and DORA policies against your actual model, not off a template. Only then does the application go in.
None of this is a light registration — and that is the point. The CASP regime asks for a real Irish company, real capital, senior management present in Ireland, vetted owners and operable AML and ICT programmes, and in exchange gives you a full EU credential that passports across 27 markets and carries exceptional weight with banks, PSPs and institutional partners. Because the CBI scrutinises the file rigorously, getting it complete the first time is what keeps the six-to-twelve-month window realistic; file with gaps and it drifts.
Ready to assemble your CASP requirements pack, or want a second opinion on a file you have already started? Our team handles the full Irish substance, fit-and-proper, AML and DORA build end to end and will review any application against the Central Bank of Ireland’s expectations before you submit. Book a free consultation and we will tell you exactly what is missing.
Frequently asked questions
Do I need an Irish company for a CASP licence?
Yes. The applicant must be an Irish company with genuine local substance — a registered office, a real operating presence in Ireland, and senior management actually based there. This is a full EU financial-services authorisation from a top-tier regulator, not an offshore registration you can hold from anywhere. The Central Bank of Ireland will not authorise a nameplate entity run from another country.
How much capital does the Ireland crypto licence require?
Initial capital is set by service class under MiCA: €50,000 (advice, reception/transmission, execution, placing, portfolio management), €125,000 (adds execution of orders), or €150,000 (custody, exchange, operating a trading platform, transfer services). The capital is held in an EEA bank or e-money account and remains working capital of the business — it is not a fee you write off, and the CBI expects genuine funding, not a minimum on paper.
Who does the Central Bank of Ireland assess as fit-and-proper?
Senior management, board members and key function holders are assessed for competence, integrity and relevant financial-services or crypto experience, and shareholders and ultimate beneficial owners face suitability and source-of-funds checks. The CBI expects senior management with real presence in Ireland, and an unexplained ownership chain or an undocumented source of wealth will stall the whole file.
Is an MLRO and a DORA framework mandatory?
Yes to both. A dedicated money-laundering reporting officer (MLRO) and a robust governance structure are conditions of the licence, and since 17 January 2025 a DORA-compliant ICT risk-management and incident-reporting framework is required of every CASP. The Central Bank of Ireland treats these as operable programmes the business must actually run, not template documents assembled to pass a review.
Is a VASP registration still available in Ireland?
No. Under MiCA the national VASP regime is replaced by the CASP licence. Ireland adopted a shorter transition — existing providers had until 30 December 2025 — and did not offer a simplified authorisation route. New entrants apply directly for CASP authorisation, and any legacy provider must transition or wind down before the EU hard deadline of 1 July 2026.
How long does the Ireland crypto licence take?
Plan for six to twelve months, reflecting the CBI's thorough review. The timeline depends on your service classes, the quality of the business plan, AML/CFT and DORA documentation, the strength of your Irish substance, and how quickly you answer the regulator's review questions. Ireland is a demanding file by design — a clean, complete application moves; one with gaps drifts.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
Licence, done right.
300+ licences obtained across 40+ jurisdictions. Book a free consultation.
Book a free consultation