Portugal Crypto Licence Cost (CASP, 2026)

A Portugal crypto (CASP) licence’s real cost is the class-based MiCA capital (€50,000, €125,000 or €150,000 by service class) rather than a single headline regulator fee. Every founder who asks “what does a Portugal crypto license cost” starts by hunting for a single headline fee. There isn’t one that matters. Portugal’s regulators charge supervisory fees to assess a Crypto-Asset Service Provider file, but those charges are a small, quote-based line. The class-based capital, the Portuguese substance and the compliance programme MiCA demands are what actually cost money — and they dwarf anything on the fee schedule.

Portugal splits the work between two supervisors: the Banco de Portugal grants the CASP authorisation and charges an assessment fee, and the CMVM gives a conduct opinion. That fee is small beside the capital, the Portuguese company and staff, and the AML and DORA framework you must run. Here is the all-in cost of a Portugal CASP licence in 2026, and why the regulator’s own fee is the smallest part of it.

What a Portugal CASP licence actually costs in 2026

Start with the regulator’s fees, because founders over-weight them. Portugal runs a twin-peaks model under its MiCA implementing law: the Banco de Portugal grants the CASP authorisation and supervises prudential requirements, while the CMVM acts as conduct co-supervisor. Both bodies levy fees, set by regulation, to assess and supervise a file — confirm the current schedule at scoping. But on their own those charges explain nothing about why a serious CASP setup runs into six figures. The capital, the substance and the compliance build do.

The single largest number in the plan is regulatory capital, and it is set by the crypto services you intend to run. MiCA fixes the floor by service class, identically across every EU member state: €50,000 for Class 1, €125,000 for Class 2, and €150,000 for Class 3. That capital is not a fee. It sits on your balance sheet as own funds (or is covered by an insurance policy), and it must be in place before you launch.

Two lines in that table are routinely misread. The capital stays in the company as its own money, but it must be genuinely capitalised. And “substance & compliance” is an ongoing operating cost that recurs every year the licence is live. Budget for them first, because the regulator’s assessment fee is the small part. For a jurisdiction-by-jurisdiction view, our crypto licence cost comparison sets Portugal against the wider EU field.

Class-based capital in Portugal — the cost that isn’t a fee

The capital requirement is the part most founders underestimate, because it does not behave like a fee. Under MiCA, the minimum you must hold scales with the ambition of your business. A Class 1 provider (order reception and transmission, advice, execution of orders, placing of crypto-assets) needs €50,000. Add custody of client crypto or an exchange service and you move to Class 2 at €125,000. Operate a full trading platform and you are in Class 3 at €150,000. These floors are identical in every EU country; Portugal does not set them, MiCA does.

Crucially, own funds are equity the company keeps. They fund your operations and are there to absorb losses and demonstrate you can run the business, exactly as a prudential capital requirement does in any regulated financial firm. MiCA also requires the higher of the fixed class floor or one quarter of your prior-year fixed overheads, so a larger operation may need to hold more. Do not treat the capital as a cost to be minimised: under-scoping your service class to shave the capital line usually means re-licensing later, which is far more expensive than funding the right tier once.

Portuguese company, substance and the recurring cost the fee schedule hides

This is where a MiCA CASP authorisation separates from the light-touch VASP register Portugal ran before MiCA, and where the real recurring money goes. A CASP licence requires a genuine Portuguese company with real local presence: a registered office, an operating footprint in Portugal, fit-and-proper management the Banco de Portugal assesses, and a dedicated money-laundering reporting officer. None of that appears on the regulator’s fee schedule, and all of it recurs every year.

Substance is not box-ticking. The Banco de Portugal runs detailed fit-and-proper checks on shareholders, directors and UBOs, expects demonstrated source of funds, and wants a credible business plan with financial projections and a programme of operations. Because Portugal is twin-peaks, the CMVM feeds a conduct opinion into that assessment. Around it sits the compliance core: AML/CFT policies aligned to the EU’s 5th and 6th anti-money-laundering directives, Travel Rule handling under the EU Transfer of Funds Regulation, client-asset safeguarding and complaints procedures. Building that framework to regulator standard is a real project, and the AML and MLRO function has to be staffed and maintained for the full life of the licence.

The service class you pick drives the substance too. A custody or trading-platform operator (Class 2 or 3) carries heavier safeguarding, key-management and operational obligations than a Class 1 advisory or execution firm, so your product mix shapes both the capital line and the staffing line. This is why we scope the class first and cost the substance against it, rather than quoting a generic setup number. For the full picture of what the regulator expects, our Portugal crypto licence requirements guide breaks the file down section by section, and the Portugal crypto licence pillar guide sets the whole engagement in one place.

DORA and crypto-friendly banking in Portugal

Two further cost drivers sit outside the regulator’s fee and catch operators who budget only for capital. The first is DORA. Since 17 January 2025, the Digital Operational Resilience Act has applied to CASPs, which means the Banco de Portugal expects a working ICT risk-management framework: incident reporting, resilience testing, and oversight of third-party technology providers. For a crypto business this is not paperwork — it covers wallet architecture, key custody, disaster recovery, cybersecurity controls and the monitoring that keeps client assets safe. Building and running a DORA-compliant ICT programme is a real, recurring line in the budget, and regulators increasingly treat weak ICT resilience as a reason to slow or refuse a file.

The second is banking. The licence does not come with a bank account, and in crypto the payment and settlement rails are the hard part. A CASP does not use mainstream consumer processors; you build the money flow around crypto-friendly banking and specialist EMI or payment-institution partners that will actually service a licensed crypto firm. A Banco de Portugal authorisation carries real weight here, because it is the credential that opens those relationships. Onboarding still takes work, so start the EMI and banking conversations while the Banco de Portugal reviews the file; the four-to-nine-month review leaves time to have accounts ready when the authorisation issues. Being in the eurozone helps, keeping capital, banking and settlement in a single currency.

Why the regulator fee is the wrong anchor — and what the real budget buys

Add the pieces and the picture is clear. The Banco de Portugal and CMVM fees are the small, predictable lines. The weight is the class-based capital you fund (€50,000 to €150,000, which stays in the business), the Portuguese company and its substance, the AML/CFT and MLRO build, the DORA ICT programme, and the crypto-friendly banking that makes the whole thing operable. Count the capital and the real year-one commitment lands in the low six figures — a very different number from the fee alone.

What that budget buys is genuinely valuable. One CASP authorisation passports across all 27 EU member states on a notification basis under MiCA Article 65 — the whole single market, entered once rather than country by country. Portugal pairs that credential with an advantage most hubs cannot match: Lisbon’s deep Web3 community, a strong talent pool and one of Europe’s most attractive places to base founders and staff. The realistic timeline is four to nine months on a prepared file, and the credential carries weight with banks, PSPs and institutional partners in a way an offshore registration does not. Tax is then the downstream question, and our Portugal crypto tax guide walks through how gains and holdings are treated once you are operating.

One timing point matters for anyone still holding an old registration: under MiCA the CASP licence has replaced the national VASP regime, and the transitional window for previously registered VASPs closed on 1 July 2026. Portugal’s legacy Banco de Portugal register was AML-only, imposing no conduct or prudential requirements, so upgrading to a full CASP authorisation is a genuine step up with real new obligations. New entrants apply directly for CASP now.

If a full EU crypto licence is where your business is heading, we run the whole file, including the Portuguese company, capital and substance, the AML/CFT and DORA build, the Banco de Portugal and CMVM application and the banking around it. Regulator costs appear as their own lines, separate from our fees. See the full scope on our Portugal crypto licences page, then book a free consultation and we’ll model the real year-one economics, capital included, against your service classes before you commit a euro.

Christina S.

Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Full profile Book a free consultation

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.