Crypto guide

Poland CASP Passporting: The Practical Route (2026)

Poland's national CASP law is vetoed and not in force. Here's how to serve Polish users today by passporting a Lithuania or Estonia MiCA CASP under Article 65.

Contents

Poland is one of the EU’s largest crypto audiences, and most operators with European ambitions want it. So the question we hear constantly is a simple one: “How do I get a Polish crypto licence?” The answer surprises people. As of September 2026 you can’t get one directly. The KNF is not refusing applications; the national law that would let it open the application window has stalled.

This is the single most misunderstood corner of the EU crypto map. The good news is that “you can’t get a domestic Polish licence yet” and “you can’t serve Polish users” are two very different statements. The first is true; the second is not. MiCA is an EU regulation, and it gives you a clean, fully lawful route into Poland today — passporting a licence obtained in Lithuania or Estonia. This guide explains exactly how that works, what it does and doesn’t buy you, and what changes if Poland’s own law finally passes.

Key takeaways
  • Poland’s national Crypto-Assets Market Act was vetoed three times (December 2025, February and June 2026) and a September 2026 override vote failed; with the law not in force, a domestic KNF CASP procedure is not reliably open.
  • The practical route today is a MiCA CASP obtained in Lithuania or Estonia, passported into Poland under Article 65, which gives a single licence EU-27 reach.
  • Passporting is a notification and needs no second licence: home-state authorisation, notify the KNF, then serve Polish users. No separate Polish fee or re-authorisation.
  • Since the 1 July 2026 MiCA cutoff, legacy VASP activity can no longer be relied on, so waiting for Poland’s law leaves you unauthorised. Place the licence in a live regime now.

Why you can’t get a domestic Polish CASP today

MiCA applies in Poland exactly as it does everywhere in the EU, and the KNF (the Polish Financial Supervision Authority) is confirmed as the competent authority for Crypto-Asset Service Provider licensing. On paper, that should mean you file with the KNF and get a Polish CASP. In practice, there is a missing piece.

MiCA is a regulation, but it leaves a set of national implementing choices to each member state, such as which authority acts, the procedural rules, fees and transition mechanics. In Poland those choices live in a domestic statute, the Crypto-Assets Market Act. That bill has had a rough passage: it was vetoed three times, in December 2025, on 12 February 2026 and on 11 June 2026, and on 4 September 2026 the Sejm fell short of the three-fifths majority needed to override the third veto (241 votes for, 266 needed). It is not in force. Without it, the KNF does not have the fully operational domestic framework it needs to run a normal CASP application pipeline.

The result is a gap that catches operators out. Poland is unmistakably an EU MiCA jurisdiction, so founders reasonably assume a Polish licence is available on the same terms as, say, a Lithuanian one. It isn’t yet. Filing into a procedure that isn’t reliably open wastes months, and since the MiCA transition deadline has passed, those are months without authorisation. The framing matters here: we don’t file into a window that isn’t open, we place the licence where it can actually be granted.

How MiCA passporting solves it

This is where MiCA’s design does the heavy lifting. Because it is a single EU regulation rather than 27 separate national laws, a CASP authorisation issued by any one member state’s regulator carries across the whole union. That mechanism lives in MiCA Article 65 — the freedom to provide crypto-asset services on a cross-border basis throughout the EU-27.

The process is a notification, not a fresh application, and it runs in three moves:

  • Authorise in a home state. You obtain a full MiCA CASP licence from a live regulator — for the reasons below, Lithuania or Estonia.
  • Notify the host state. Your home regulator sends the KNF (and any other host states you name) a passporting notification listing the services you intend to provide into Poland.
  • Serve Polish users. After the short statutory notification period, you may lawfully provide those services to customers in Poland under your single home-state licence.

There is no second Polish licence to obtain, no re-authorisation and no separate KNF application fee for the cross-border passport. A single licence reaches Poland and the rest of the single market, roughly 450 million people. If you want the fuller picture of what a Polish CASP structure looks like end to end, our Poland crypto licence guide sits alongside this route explainer, and the requirements breakdown covers the substance and governance you’ll build regardless of where the licence is issued.

The Article 65 passport is the whole route

Everything hinges on one MiCA provision: Article 65’s freedom to provide services cross-border. A CASP authorised in Lithuania or Estonia, once notified to the KNF, serves Polish users lawfully — no Polish licence required. If Poland’s domestic law never passes, this route still works; if it does pass, your passport remains valid anyway. Start where the licence can be granted with our Poland crypto licensing service.

Why Lithuania or Estonia as the home state

Any EU member state’s CASP passports into Poland identically, so the home-state choice is about which regulator can authorise you well and quickly. On both counts, Lithuania and Estonia lead.

Lithuania offers a well-understood process: reviews typically run around three to six months on a complete file, and the ecosystem (banking partners, service providers, MLRO talent) is deep. That is why it is our default recommendation for reaching Poland; our Lithuania crypto licence guide walks through the full process. Estonia offers a comparable profile through its Financial Supervision Authority, with e-government efficiency and a distributed-profits tax regime that many operators find attractive.

Crucially, the licence you build in either state is not a compromise or a workaround. It is a full MiCA CASP with the same capital, substance and conduct obligations you would face anywhere in the EU. The capital tiers are fixed union-wide and do not change by country: €50,000 for Class 1 (reception and transmission, advice, execution and placing), €125,000 for Class 2 (adds custody and exchange) and €150,000 for Class 3 (operating a trading platform). You also carry a DORA-compliant ICT resilience programme, a dedicated MLRO, AML/CFT to the EU’s directives and the Travel Rule. None of that is Poland-specific; it travels with the passport. What the home-state choice buys you is speed and a smooth authorisation rather than a lighter licence.

Passport now vs. wait for the KNF

Here is the decision as we lay it out for clients targeting Poland:

Factor Passport in (Lithuania / Estonia) Wait for domestic KNF licence
Available now Yes (live regimes) No: national law vetoed three times, not in force
Serves Polish users Yes, via MiCA Article 65 Yes, once the law is enacted
Covers rest of EU-27 Yes — one passport, whole single market Yes, once live
Timeline ≈3–6 months (home-state review) Unknown — depends on when the law passes
Capital €50k / €125k / €150k by class €50k / €125k / €150k by class (same MiCA tiers)
MiCA 1 Jul 2026 cutoff Met with a live licence Not met while the domestic law stays out of force
Best for Reaching Polish users now, EU-wide reach Operators who specifically need a Polish-domiciled licence later

The 1 July 2026 MiCA cutoff was the pressure point. Since that date legacy national VASP activity can no longer be relied on, and full MiCA authorisation is required to provide crypto-asset services. An operator waiting on Poland’s stalled law had no domestic route to authorisation by that deadline, whereas a live Lithuanian or Estonian CASP cleared the bar. The economics of the passport route therefore track your home-state licence (class-based capital, substance and the AML/DORA build), and our Poland crypto licence cost breakdown maps the full year-one picture against the domestic alternative.

What passporting does and doesn’t give you

It is worth being precise about the boundaries, because “passport” gets over-read. On the “does” side: a passported CASP can serve Polish customers with each crypto-asset service it is authorised for, on a cross-border basis, under its single home-state licence — no Polish licence, no KNF re-authorisation. That is genuine, lawful market access, and for the large majority of exchanges, wallets and brokers it is everything they need to reach Poland.

On the “doesn’t” side, three things. First, a cross-border passport is not a physical Polish branch; if you want an establishment on the ground, that requires a separate branch notification, which we handle where it makes sense. Second, the passport does not exempt you from Polish rules of general application — local marketing and advertising standards, consumer-protection expectations and language conventions still apply. Third, it is not a Polish-domiciled licence, so if your strategy specifically calls for a KNF-issued authorisation (for local optics, procurement or otherwise), the passport works as a bridge to that authorisation and cannot replace it.

That last point is where the “if Poland’s law passes” scenario lands. A passported CASP stays valid whatever Warsaw enacts, so there is never a forced migration. But operators who do want a domestic licence benefit from being structured for it in advance, with capital, governance and AML already at MiCA standard, so a direct KNF filing is a formality rather than a fresh build. We watch the regime and tell you the moment a domestic application becomes worthwhile.

The route we run

For an operator whose goal is “reach Polish users compliantly, soon,” the path is settled: build a full MiCA CASP in Lithuania or Estonia, notify the KNF under Article 65, and go live — while keeping the option to file a direct KNF application open for the day Poland’s domestic regime finally opens. A Polish operating company, local staff and marketing can all sit alongside a passported licence if you want a real presence in the market.

We won’t sell you a filing into a window that isn’t open, and we won’t pretend the domestic route exists yet when it doesn’t. We’ll place the licence where it can actually be granted, passport it cleanly into Poland, and keep you first in line for the KNF regime when the law changes. Book a free consultation and we’ll map the route around your real target market.

Frequently asked questions

Can I get a Polish CASP licence directly from the KNF right now?

Not reliably. Poland's national Crypto-Assets Market Act, the domestic law that fully empowers the KNF to open a CASP application window, was vetoed three times (December 2025, 12 February 2026 and 11 June 2026); a September 2026 override vote failed, so the law is still not in force. Until it is, a purely domestic Polish CASP procedure is not operational, so the dependable way to reach Polish users is a CASP from an EU state with a live regime, passported in.

How does MiCA passporting into Poland actually work?

MiCA Article 65 gives every authorised CASP the freedom to provide services across the EU-27. You obtain the licence in a home state (Lithuania or Estonia), your home regulator sends a notification to the KNF, and after the short notification period you may lawfully serve Polish users. There is no second Polish licence, no re-authorisation and no separate KNF fee — the single home-state licence carries the market.

Why Lithuania or Estonia as the home state?

Both run mature, fully live MiCA CASP regimes with fast, well-understood processes (typically a 3–6 month review), and both were early to build CASP pipelines off their large legacy VASP sectors. A licence granted there passports into Poland exactly like one from any other member state, so you get Polish market access without waiting on Warsaw's stalled legislation.

Does passporting into Poland let me do everything a domestic licence would?

For cross-border service, yes — a passported CASP can serve Polish customers with the crypto-asset services it is authorised for. What it does not give you is a Polish-domiciled licence or a physical branch by default; establishing a branch needs a separate branch notification, and you still follow Polish marketing and consumer rules. For most operators, cross-border passporting is all they need.

What is the 1 July 2026 MiCA cutoff?

It was the hard EU deadline after which legacy national VASP registrations could no longer be relied on; full MiCA authorisation is now required to provide crypto-asset services in the EU. That is why the licence belongs in a live regime: with the transition window closed, waiting for Poland's domestic law leaves you without a valid authorisation.

Will I have to re-license if Poland's national law finally passes?

No. A passported EU CASP stays valid regardless of what Poland enacts — MiCA is one regulation across the whole union. If you later want a Polish-domiciled licence for strategic reasons, we structure the setup so a direct KNF application is straightforward once the domestic window opens, and file it then without disrupting your existing operations.

Sources

Christina S.
Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Related service Poland crypto licence →

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.

Share
TG share on Telegram X In share on LinkedIn WA share on WhatsApp Reddit Mail share by email
Talk to a specialist.

We'll map the fastest route to a licensed, banked, live operation.

Book a free consultation →

Stay ahead of the rules.

Licence fees, rules and deadlines change through the year. Subscribe and we'll email you Vantegris licensing updates.

We use your email to send these updates and note where you signed up. Unsubscribe any time from any email. Privacy policy.

Licence, done right.

300+ operators licensed across 40+ jurisdictions. Book a free consultation.

Book a free consultation