Netherlands Crypto Licence 2026: The CASP Guide

If you want an EU crypto licence that actually carries weight, the Netherlands is one of the strongest names you can put on the door. A CASP authorisation issued by the AFM under MiCA passports across all 27 EU member states on a notification basis — and because the Dutch enforced the new regime early and strictly, a licence from them signals something to banks and partners that a rushed offshore permit never will. It is the natural choice for operators who put reputation first.

The operators who choose the Netherlands want their licence to open banking, satisfy institutional counterparties and survive scrutiny, and are not looking for the cheapest or fastest box-tick. That comes at the cost of a real substance and compliance build: a Dutch company, qualified management, an AML function and a DORA-compliant technology programme, with capital of €50,000 to €150,000 by class. This guide covers what a Netherlands crypto licence actually is in 2026, including the twin-peaks model, the capital, the passport, the early-enforcer reputation, the timeline and the trade-off.

What a Netherlands CASP licence is — and the twin-peaks model

A Netherlands crypto licence is a Crypto-Asset Service Provider (CASP) authorisation, granted under the EU’s Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114). It is the single EU credential for firms that run an exchange, safeguard client crypto, execute or receive orders, operate a trading platform, or advise on crypto-assets. It replaced the old national AML registration that Dutch crypto firms held with DNB, which was a light-touch anti-money-laundering listing rather than a financial-services licence. MiCA retired that model and replaced it with a full authorisation carrying capital, governance, conduct and technology obligations the old registration never had. Our VASP, CASP and MiCA explainer walks through that shift across the EU; our dedicated Netherlands VASP-to-CASP transition guide covers what it means for a Dutch holder specifically.

What makes the Netherlands distinctive is how supervision is split. The Dutch financial system runs on a twin-peaks model: two regulators, each with a different job. The AFM (Autoriteit Financiële Markten) is the conduct-of-business supervisor: it issues the CASP licence and polices how you treat clients, disclose risks, handle conflicts and manage complaints. The DNB (De Nederlandsche Bank), the central bank, is the prudential supervisor, and for crypto it steps in on the issuance of e-money tokens (EMT) and asset-referenced tokens (ART), where solvency and reserves matter. For a standard CASP such as an exchange, broker or custodian, the AFM is your lead authority; DNB enters the picture only if your model includes token issuance. Knowing which peak owns which question is the first thing that keeps a Dutch application on track.

Capital by service class in the Netherlands

MiCA sets minimum capital by the class of service you provide, and those tiers are identical in every EU country, which is the point operators most often miss. You do not pick the Netherlands for cheaper capital; the capital is fixed by the regulation. You pick it for the reputation, the ecosystem and the banking. What the file determines is which class (or classes) your business falls into.

Plan around two facts. First, the capital is not a fee. Held as own funds it stays in the business, an insurance policy can stand in for it, and none of it goes to the regulator. Second, the classes are cumulative: run an exchange with custody and you are in Class 2; add a full order-book trading venue and you land in Class 3 at €150,000. Most exchange and broker projects sit at €125,000. Scoping the right class before you incorporate is the single decision that most affects your budget — our Netherlands crypto licence cost breakdown models the full year-one number, capital and substance included.

From the Netherlands, one licence and 27 markets: the EU passport

The reason a CASP licence is worth the substance is the passport. Under MiCA Article 65, once the AFM authorises you, you can provide your licensed services into every other EU/EEA member state on a notification basis — the host-country regulator is notified, and you are in. You license once in the Netherlands and passport everywhere, instead of applying licence-by-licence across 27 jurisdictions.

For most crypto businesses, that reach is the reason to choose an EU licence at all. An offshore registration makes you legal in one jurisdiction; a Dutch CASP covers all 27 member states under one rulebook from a single file. And with the Netherlands specifically, the licence does double duty: full single-market access plus the standing of an early, strict enforcer. That standing is what actually opens the doors that decide whether you can operate — the banks that hold your funds, the EMI and PI partners that provide your fiat rails, the auditors and institutional counterparties who do diligence on your regulator before they do it on you. If you are weighing an EU licence against a lighter offshore permit, our VASP, CASP and MiCA explainer sets out why the two are not really the same product.

Timeline: a defined statutory clock

The Netherlands gives you a predictable regulator-side timeline. The AFM works to a statutory assessment of roughly five months — a 25-working-day completeness check to confirm your file is whole, then a 40-working-day substantive assessment. That defined clock is one of the quieter advantages of the Dutch regime: you know what the regulator’s side looks like, which makes planning launch and funding far easier than in jurisdictions where the queue is open-ended.

The caveat is “complete file”. The clock that matters most is not the AFM’s assessment but your own preparation. A realistic end-to-end timeline is eight to ten months: the classes scoped, the Dutch company incorporated and capitalised, the programme of operations and the AML, DORA and safeguarding policies drafted to AFM and DNB standard, management genuinely fit-and-proper, and, where relevant, the PSD2 overlap resolved before you file. Poorly prepared applications stall in review questions, and that is where the timeline risk sits. Get the documentation right the first time and the five-month statutory clock is a genuine edge; submit half-built and the completeness check bounces it back before the assessment even starts. Our Netherlands crypto licence requirements guide sets out the full document and governance checklist that keeps a file moving.

The real substance requirement in the Netherlands

This is where a modern Dutch CASP separates hardest from the old registration, and where the real work goes. Authorisation requires a Dutch company (typically a B.V.) with genuine local substance rather than a nominee shell. That means a registered office and a real operating presence in the Netherlands, own funds or insurance cover at MiCA’s level, and management the AFM assesses as qualified and fit-and-proper, with relevant financial-services or crypto experience.

On top of the entity, you need a live compliance function. A dedicated MLRO (money-laundering reporting officer) and AML/CFT policies aligned to the EU’s 5th and 6th AML directives, the EU Transfer of Funds Regulation (the Travel Rule) for originator and beneficiary data on transfers, and suitability and source-of-funds checks on shareholders and UBOs. Since 17 January 2025, MiCA firms must also run a DORA-compliant ICT programme (operational resilience, incident reporting, resilience testing and third-party ICT oversight), which for a crypto business also means serious custody, key-management and cybersecurity controls. And one planning note unique to the Dutch setup: if your model provides certain payment services tied to e-money tokens, you may need a separate PSD2 payment-institution licence, which those services have required since 1 March 2026. It does not touch every CASP, but it is exactly the kind of overlap that is expensive to find late, which is why we scope it before anything is filed.

Banking, the deadline, and who it suits

For a crypto business, the hardest single piece is usually the banking rather than the licence text. Mainstream consumer processors do not serve crypto, so a Dutch CASP relies on crypto-friendly banks and EMI/PI partners for its fiat rails. This is where the early-enforcer reputation pays off most concretely: a licence from a regulator banks respect makes the onboarding conversation materially easier than the same conversation backed by an offshore permit. Open the bank and EMI/PI conversations while the AFM file is being prepared, because the eight-to-ten-month build leaves room to onboard fiat partners before authorisation arrives. If you are migrating an existing Dutch registration, our Netherlands VASP-to-CASP transition guide covers how the rails carry over.

The date to keep on the wall is 30 June 2025 — the Dutch MiCA transition cut-off, which has already passed. Unlike EU states that ran their transition to the full outer limit of 1 July 2026, the Netherlands closed the door early. In practice that means the Dutch market is already a fully-enforcing CASP regime: legacy DNB AML registrations no longer carry firms, and new entrants apply directly for AFM authorisation. There is no soft transitional cushion to lean on here, which is part of why the licence reads as credible.

So who is it for? The Netherlands suits operators who genuinely need the EU market and want a licence that signals seriousness — exchanges, custodians, brokers, trading platforms and OTC desks that can meet the capital and substance bar and value credibility over speed or price. If your market is global or non-EU, an offshore or Gulf regime is often faster and cheaper, and no single licence covers every market. Many groups run one EU CASP for Europe and a separate licence for the rest of the world. Before you commit, our Netherlands crypto licence cost breakdown models the real year-one number so the decision rests on real figures.

The Netherlands trade-off

Other EU states offer cheaper and quicker CASP routes. A Dutch file costs real money in capital and substance, takes eight to ten months end to end, requires a live compliance and DORA programme you maintain for as long as you hold the licence, and may pull in a PSD2 licence on top where EMT payments are in scope. What it buys is the EU single market from one authorisation, from a regulator that enforced MiCA early, on 30 June 2025.

If a high-trust EU crypto licence is where your project is heading, we run the entire file, covering the Dutch B.V., the substance and management, the AML and DORA framework, the AFM application with DNB where relevant, the PSD2 scoping and the crypto-friendly banking around it. State costs and our fees appear as separate items. See the scope on our Netherlands crypto licence page, then book a free consultation and we’ll model the real year-one economics (the right service class, the capital, any PSD2 overlap, and whether the Netherlands or a neighbour fits your plan) before you commit a euro.

Christina S.

Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.