Malta Crypto Licence Cost (CASP, 2026)

Ask “what does a Malta crypto license cost” and you will get a range that looks alarming next to the Baltic hubs: an MFSA application fee of €10,000 to €25,000 by class, before you have funded a euro of capital. That is real: Malta is a premium jurisdiction and prices like one.

On our client files, the operators who choose Malta are not looking for the cheapest CASP licence. They are buying an experienced, recognised regulator — the authority that has supervised crypto under the VFA Act since 2018 and now holds 22 of the EU’s 360 authorised CASPs, fifth by member state. Here is the all-in cost of a Malta CASP licence in 2026, class by class, and a clear-eyed account of what the premium actually buys.

What a Malta CASP licence actually costs in 2026

Start with the fee everyone reacts to, because it is where Malta visibly diverges from the value hubs. The MFSA charges a one-off application fee to assess a Crypto-Asset Service Provider file under MiCA, and it scales with the service class under regulation 6 of L.N. 295 of 2024: €10,000 for Class 1 services such as reception and transmission, advice and execution, €20,000 for Class 2 custody and exchange, and €25,000 for a Class 3 trading platform. On authorisation an annual supervisory fee follows: €10,000, €25,000 or €50,000 by class, plus €2,000 for each service you are authorised for and 0.05% of the previous year’s transaction volume, capped at €250,000. Set against Estonia or Lithuania, where state application fees are a few thousand euros, that is a meaningful premium, and it is the single number that makes founders pause.

But the application fee, like everywhere under MiCA, is not what shapes the budget. The largest number in the plan is regulatory capital, and it is set by the crypto services you intend to run. MiCA fixes the floor by service class, identically across every EU member state: €50,000 for Class 1, €125,000 for Class 2, and €150,000 for Class 3. That capital is not a fee. Held as own funds it stays in the company, but it must be in place before you launch, so it ties up cash from day one. MiCA also allows an insurance policy as all or part of the cover.

Two lines are routinely misread. The capital is money you fund into the company and keep, but it must be genuinely capitalised. And “substance & compliance” is an ongoing operating cost that recurs every year the licence is live. Between them they cost far more than the MFSA fee. For a jurisdiction-by-jurisdiction view, our crypto licence cost comparison sets Malta against the wider EU and offshore field.

Class-based capital in Malta — the cost that isn’t a fee

The capital requirement is the part most founders underestimate, because it does not behave like a fee. Under MiCA, the minimum you must hold scales with the ambition of your business. A Class 1 provider (order reception and transmission, advice, execution of orders, placing of crypto-assets) needs €50,000. Add custody of client crypto or an exchange service and you move to Class 2 at €125,000. Operate a full trading platform and you are in Class 3 at €150,000. These floors are identical in every EU country; Malta does not set them, MiCA does.

Crucially, held as own funds this money remains yours. It funds your operations and is there to absorb losses and demonstrate you can run the business, exactly as a prudential capital requirement does in any regulated financial firm. MiCA also requires the higher of the fixed class floor or one quarter of your prior-year fixed overheads, so a larger operation may need to hold more than the headline number. What you should not do is treat the capital as a cost to be minimised: under-scoping your service class to shave the capital line usually means re-licensing later, which is far more expensive than funding the right tier once.

Maltese substance: the recurring cost the fee schedule hides

This is where a premium MiCA jurisdiction earns its reputation, and where the real recurring money goes. A CASP authorisation requires a genuine Maltese company with real local presence: a registered office, an operating footprint, fit-and-proper management the MFSA assesses, and a dedicated money-laundering reporting officer. None of that appears on the MFSA fee schedule, and all of it recurs every year. Malta’s substance expectations are firmer than the leaner Baltic hubs — part of what you are paying the premium for is a regulator that checks the business is genuinely operated from the island.

Substance is not box-ticking. The MFSA runs detailed fit-and-proper checks on shareholders, directors and UBOs, expects demonstrated source of funds, and wants a credible business plan with financial projections and a programme of operations. Around that sits the compliance core: AML/CFT policies aligned to the EU’s 5th and 6th anti-money-laundering directives, Travel Rule handling under the EU Transfer of Funds Regulation, client-asset safeguarding and complaints procedures. Building that framework to MFSA standard is a bespoke project in itself, and the AML and MLRO function has to be staffed and maintained for the full life of the licence.

The service class you pick drives the substance too. A custody or trading-platform operator (Class 2 or 3) carries heavier safeguarding, key-management and operational obligations than a Class 1 advisory or execution firm, so your product mix shapes both the capital line and the staffing line. This is why we scope the class first and cost the substance against it, rather than quoting a generic setup number. For the full picture of what the regulator expects, our Malta crypto licence requirements guide breaks the file down section by section, and the Malta CASP licence overview explains how the authorisation itself is structured.

DORA and crypto-friendly banking in Malta

Two further cost drivers sit outside the licence fee and catch operators who budget only for capital. The first is DORA. Since 17 January 2025, the Digital Operational Resilience Act has applied to CASPs, which means the MFSA expects a working ICT risk-management framework: incident reporting, resilience testing, and oversight of your third-party technology providers. For a crypto business this is not paperwork — it covers wallet architecture, key custody, disaster recovery, cybersecurity controls and the monitoring that keeps client assets safe. Building and running a DORA-compliant ICT programme is a real, recurring line in the budget, and a regulator with Malta’s supervisory depth treats weak ICT resilience as a reason to slow or refuse a file.

The second is banking. A licence does not come with a bank account, and in crypto the payment and settlement rails usually take the most work. A CASP does not use mainstream consumer processors; you build the money flow around crypto-friendly banking and specialist EMI or payment-institution partners that will actually service a licensed crypto firm. Here Malta’s premium reputation pays back directly — an MFSA authorisation from a recognised, established jurisdiction carries real weight with banks, PSPs and institutional partners, and Malta’s mature crypto ecosystem means specialist advisers, auditors and crypto-aware banking are close at hand. The onboarding still takes time, so start the banking conversations while the MFSA is reviewing the file rather than waiting for authorisation.

Why the fee is the wrong anchor — and what the premium buys

Add the pieces and the picture is clear. The €10,000–€25,000 MFSA application fee is the visible, predictable line, and the annual supervisory fee follows it. The weight is the class-based capital you fund (€50,000 to €150,000, which stays in the business), the Maltese company and its substance, the AML/CFT and MLRO build, the DORA ICT programme, and the crypto-friendly banking that makes the whole thing operable. Count the capital and the real year-one commitment lands well into six figures — a very different number from the fee alone.

What that budget buys is genuinely valuable, which is why serious operators still choose Malta over the cheaper hubs. One CASP authorisation passports across all 27 EU member states on a notification basis under MiCA Article 65, opening the whole single market in one step rather than country by country. The MFSA reviews in six to nine months, backed by years of VFA supervision that give it real depth in assessing crypto business models. Malta operates in English, an official language, which simplifies documentation and operations. And the credential itself, issued by the fifth-largest EU CASP jurisdiction by count and the original “Blockchain Island”, carries weight with banks, auditors and institutional counterparties in a way an offshore registration or a bargain licence does not.

One timing point applied to holders of old Maltese registrations: VFA licences valid on 30 December 2024 were grandfathered under the VFA Act until 1 July 2026, or until a CASP authorisation was granted or refused, whichever came first. There was no automatic conversion, so holders had to move to the MiCA CASP regime, and new entrants apply directly for CASP authorisation.

If a premium EU crypto licence is where your business is heading, we take on the whole file, covering the Maltese company, the capital and substance, the AML/CFT and DORA build, the MFSA application and the banking around it, and we keep our fees and the MFSA costs on separate lines. For the full engagement, see our Malta crypto licence guide and the Malta crypto licences service page, then book a free consultation and we’ll model the real year-one economics (application fee, capital and substance included) against your service classes before you commit a euro.

Christina S.

Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.