Crypto Exchange License in Malta: MiCA CASP Classes (2026)

Malta regulated crypto before the EU did. The Virtual Financial Assets framework dates from 2018, which for years gave Maltese operators something no other member state could offer: a licence that already looked like MiCA. That advantage has now been spent. The transitional measures under MiCA Article 143(3), implemented in Article 66 of the Virtual Financial Assets Act, Cap. 590, expired on 30 June 2026.

For anyone scoping a crypto exchange in Malta today, that date splits the market in two. On one side are licensed CASPs. On the other are VASPs the MFSA now expects to wind down — and their client books, which are the most interesting thing happening in Maltese crypto this year. Below is what the MFSA expects of both, and what an exchange applicant should take from it.

Which class you need — and why it is not a Maltese question

MiCA lists ten crypto-asset services. An exchange normally touches three, and two set the capital floor.

If the client transacts with you at your quoted price, that is the exchange service. If users post orders and your engine matches them against each other, you are operating a trading platform — market infrastructure, with its own integrity duties, one tier up. Most exchanges do both and authorise at the higher tier.

The classes are set by the regulation and apply identically across the union, so we keep the mechanics in one place rather than repeating them country by country: the tier table, the own-funds override and the fixed-overheads calculation are in CASP capital requirements, and the regime overview in MiCA explained. What follows is what is actually Maltese.

The transitional route is closed, and the MFSA said what happens next

On 25 June 2026 the MFSA wrote to boards, referring to ESMA’s public statement of 23 June calling on unauthorised providers to wind down in an orderly way. Its message was unambiguous: Article 66 of the VFA Act expires on 30 June 2026, operational VASPs need an MFSA CASP licence before that date, and as of 1 July 2026 VASP clients do not benefit from MiCA safeguards, including the rules designed to protect client assets.

For firms that could not comply, the MFSA set out what an orderly wind-down looks like — and the specificity is worth reading as a statement of supervisory temperature:

• Stop onboarding immediately — no new clients, no new accounts or relationships, no marketing or solicitation.
• Limit services to what is necessary to sell or transfer crypto-assets, reallocate assets or close positions. Custody of client crypto may continue only for the period strictly necessary to complete an orderly exit.
• Communicate clearly, promptly and repeatedly with retail and institutional clients about the safeguards and the wind-down timeline — including a deadline after which residual positions are closed automatically, and information about client-protection requirements.
• Keep AML/CFT running throughout, with particular attention to sanctions screening, Travel Rule requirements and obligations around self-hosted wallets, and reporting suspicions to the FIAU.

The migrating client book is the opportunity — and the trap

The obvious commercial consequence is that a large number of Maltese crypto clients are moving from wound-down providers to licensed ones. For a newly authorised exchange that is the fastest route to a book. The MFSA saw it coming and addressed it in the same letter.

This is also where an exchange applicant should expect questions during authorisation. If your business plan assumes a migrated book, the MFSA will want to see how the customer due diligence on those clients will be satisfied — not a promise that it will be.

Malta is now among the most closely watched authorisation processes in the EU

In July 2025 ESMA published a fast-track peer review of CASP authorisation and supervision in Malta, and the MFSA publicly welcomed it. Whatever view one takes of the findings, the practical effect for an applicant is straightforward: Malta’s process is being observed by the EU supervisory system in a way that most member states’ are not.

The right response is not to avoid Malta — it is to file accordingly. For an exchange that means the trading-venue layer must be genuinely built, not asserted: published operating rules for the platform, orderly-trading systems with the ability to suspend or halt, market-abuse detection and reporting, pre- and post-trade transparency, and a custody model with real segregation and a reconciled client position register. Add DORA ICT resilience and an AML framework with a named MLRO, and that is the file.

Why Malta, honestly

The reason to license an exchange in Malta is the depth of the ecosystem that eighteen years of financial-services and eight years of crypto regulation have produced: practitioners, auditors, service providers and a regulator that has been supervising virtual assets longer than any of its EU peers. For a venue that expects to be examined, being in a jurisdiction where examination is routine is an advantage rather than a cost.

The reason to hesitate is that the easy route is gone. The VFA grandfathering that made Malta the pragmatic choice for existing operators expired on 30 June 2026, and what remains is a full MiCA authorisation assessed under unusually close observation. That is a good deal for a serious applicant and a poor one for anybody hoping the old framework still counts for something.

If you are scoping a Maltese exchange — or you are acquiring a book from a provider that is winding down — book a free consultation and we will map the licence perimeter, the migration compliance and the capital plan. The wider file structure is in the Malta CASP licence guide, and the closed transitional route is documented in Malta VFA to CASP.

Christina S.

Crypto Licensing · Vantegris

Part of the Vantegris desk that runs these licences end to end — writing from live applications across 40+ jurisdictions, not recycled marketing. Reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.