Netherlands Crypto Licence 2026: The Definitive CASP Guide

If you want an EU crypto licence that actually carries weight, the Netherlands is one of the strongest names you can put on the door. A CASP authorisation issued by the AFM under MiCA passports across all 27 EU member states on a notification basis — and because the Dutch enforced the new regime early and strictly, a licence from them signals something to banks and partners that a rushed offshore permit never will. This is the reputation play in EU crypto licensing.

In our practice, the operators who choose the Netherlands are not the ones chasing the cheapest or fastest box-tick — they are the ones who want their licence to open banking, satisfy institutional counterparties and survive scrutiny. That comes at the cost of a real substance and compliance build: a Dutch company, qualified management, an AML function and a DORA-compliant technology programme, with capital of €50,000 to €150,000 by class. This is the definitive guide to what a Netherlands crypto licence actually is in 2026 — the twin-peaks model, the capital, the passport, the early-enforcer reputation, the timeline and the honest trade-off.

What a Netherlands CASP licence is — and the twin-peaks model

A Netherlands crypto licence is a Crypto-Asset Service Provider (CASP) authorisation, granted under the EU’s Markets in Crypto-Assets Regulation — MiCA, Regulation (EU) 2023/1114. It is the single EU credential for firms that run an exchange, safeguard client crypto, execute or receive orders, operate a trading platform, or advise on crypto-assets. It replaced the old national AML registration that Dutch crypto firms held with DNB — a light-touch anti-money-laundering listing, not a financial-services licence. MiCA retired that model and replaced it with a full authorisation carrying capital, governance, conduct and technology obligations the old registration never had. Our VASP, CASP and MiCA explainer walks through that shift across the EU; our dedicated Netherlands VASP-to-CASP transition guide covers what it means for a Dutch holder specifically.

What makes the Netherlands distinctive is how supervision is split. The Dutch financial system runs on a twin-peaks model: two regulators, each with a different job. The AFM (Autoriteit Financiële Markten) is the conduct-of-business supervisor — it issues the CASP licence and polices how you treat clients, disclose risks, handle conflicts and manage complaints. The DNB (De Nederlandsche Bank), the central bank, is the prudential supervisor — for crypto it steps in on the issuance of e-money tokens (EMT) and asset-referenced tokens (ART), where solvency and reserves matter. For a standard CASP — an exchange, broker or custodian — the AFM is your lead authority; DNB enters the picture only if your model includes token issuance. Knowing which peak owns which question is the first thing that keeps a Dutch application on track.

Capital by service class

MiCA sets minimum capital by the class of service you provide, and — this is the point operators most often miss — those tiers are identical in every EU country. You do not pick the Netherlands for cheaper capital; the capital is fixed by the regulation. You pick it for the reputation, the ecosystem and the banking. What the file determines is which class (or classes) your business falls into.

Two things matter in planning. First, the capital is funded, not a fee — it stays in the business as working capital, held in a bank or e-money account within the EEA, not paid away to the regulator. Second, the classes are cumulative: run an exchange with custody and you are in Class 2; add a full order-book trading venue and you land in Class 3 at €150,000. Most exchange and broker projects sit at €125,000. Scoping the right class before you incorporate is the single decision that most affects your budget — our Netherlands crypto licence cost breakdown models the full year-one number, capital and substance included.

One licence, 27 markets: the EU passport

The reason a CASP licence is worth the substance is the passport. Under MiCA Article 65, once the AFM authorises you, you can provide your licensed services into every other EU/EEA member state on a notification basis — the host-country regulator is notified, and you are in. You license once in the Netherlands and passport everywhere, instead of applying licence-by-licence across 27 jurisdictions.

That is the single biggest upgrade in crypto licensing to date, and it is why an EU CASP is not really comparable to an offshore registration. An offshore permit gets you legally live in one place; a Dutch CASP gets you the entire European single market — the largest regulated crypto market in the world — from one file. And with the Netherlands specifically, the licence does double duty: full single-market access plus the standing of an early, strict enforcer. That standing is what actually opens the doors that decide whether you can operate — the banks that hold your funds, the EMI and PI partners that provide your fiat rails, the auditors and institutional counterparties who do diligence on your regulator before they do it on you. If you are weighing an EU licence against a lighter offshore permit, our VASP, CASP and MiCA explainer sets out why the two are not really the same product.

Timeline: a defined statutory clock

The Netherlands gives you a predictable regulator-side timeline. The AFM works to a statutory assessment of roughly five months — a 25-working-day completeness check to confirm your file is whole, then a 40-working-day substantive assessment. That defined clock is one of the quieter advantages of the Dutch regime: you know what the regulator’s side looks like, which makes planning launch and funding far easier than in jurisdictions where the queue is open-ended.

The caveat is “complete file”. The clock that matters most is not the AFM’s assessment but your own preparation. A realistic end-to-end timeline is eight to ten months: the classes scoped, the Dutch company incorporated and capitalised, the programme of operations and the AML, DORA and safeguarding policies drafted to AFM and DNB standard, management genuinely fit-and-proper, and — where relevant — the PSD2 overlap resolved before you file. Poorly prepared applications stall in review questions, which is where the timeline risk sits, not in the regulator being slow. Get the documentation right the first time and the five-month statutory clock is a genuine edge; submit half-built and the completeness check bounces it back before the assessment even starts. Our Netherlands crypto licence requirements guide sets out the full document and governance checklist that keeps a file moving.

The real substance requirement

This is where a modern Dutch CASP separates hardest from the old registration, and where the real work goes. Authorisation requires a Dutch company — typically a B.V. — with genuine local substance, not a nominee shell. That means a registered office and a real operating presence in the Netherlands, initial capital funded into an EEA account, and management the AFM assesses as qualified and fit-and-proper, with relevant financial-services or crypto experience.

On top of the entity, you need a live compliance function. A dedicated MLRO (money-laundering reporting officer) and AML/CFT policies aligned to the EU’s 5th and 6th AML directives, the EU Transfer of Funds Regulation (the Travel Rule) for originator and beneficiary data on transfers, and suitability and source-of-funds checks on shareholders and UBOs. Since 17 January 2025, MiCA firms must also run a DORA-compliant ICT programme — operational resilience, incident reporting, resilience testing and third-party ICT oversight — which for a crypto business also means serious custody, key-management and cybersecurity controls. And one planning note unique to the Dutch setup: if your model provides certain payment services tied to e-money tokens, a separate PSD2 payment-institution licence may be required from 1 March 2026. It does not touch every CASP, but it is exactly the kind of overlap that is expensive to find late — which is why we scope it before anything is filed.

Banking, the deadline, and who it suits

For a crypto business, the hardest single piece is rarely the licence text — it is the banking. Mainstream consumer processors do not serve crypto, so a Dutch CASP relies on crypto-friendly banks and EMI/PI partners for its fiat rails. This is where the early-enforcer reputation pays off most concretely: a licence from a regulator banks respect makes the onboarding conversation materially easier than the same conversation backed by an offshore permit. That banking layer should be sequenced alongside the application, not after it — and if you are migrating an existing Dutch registration, our Netherlands VASP-to-CASP transition guide covers how the rails carry over.

The date to keep on the wall is 30 June 2025 — the Dutch MiCA transition cut-off, which has already passed. Unlike EU states that ran their transition to the full outer limit of 1 July 2026, the Netherlands closed the door early. In practice that means the Dutch market is already a fully-enforcing CASP regime: legacy DNB AML registrations no longer carry firms, and new entrants apply directly for AFM authorisation. There is no soft transitional cushion to lean on here, which is part of why the licence reads as credible.

So who is it for? The Netherlands suits operators who genuinely need the EU market and want a licence that signals seriousness — exchanges, custodians, brokers, trading platforms and OTC desks that can meet the capital and substance bar and value credibility over speed or price. If your market is global or non-EU, an offshore or Gulf regime is often faster and cheaper, and no single licence covers every market. Many groups run one EU CASP for Europe and a separate licence for the rest of the world. Before you commit, our Netherlands crypto licence cost breakdown models the real year-one number so the decision is made on figures, not impressions.

The honest trade-off

The Netherlands is not the cheapest or the fastest EU crypto licence, and it would be dishonest to sell it as either. A Dutch CASP file costs real money in capital and substance, takes eight to ten months end to end, requires a live compliance and DORA programme you maintain for as long as you hold the licence, and may pull in a PSD2 licence on top where EMT payments are in scope. What it buys is the entire EU single market from one authorisation — and, uniquely, the credibility of an early, strict enforcer that unlocks banking and institutional trust an offshore permit cannot. For a business meant to operate in Europe for years and be taken seriously while doing it, that is the whole point.

If a high-trust EU crypto licence is where your project is heading, we run the entire file — the Dutch B.V., the substance and management, the AML and DORA framework, the AFM application with DNB where relevant, the PSD2 scoping and the crypto-friendly banking around it — with our fees and the state costs shown separately, never blended. See the scope on our Netherlands crypto licence page, then book a free consultation and we’ll model the real year-one economics — the right service class, the capital, any PSD2 overlap, and whether the Netherlands or a neighbour fits your plan — before you commit a euro.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.