Spain Crypto Licence Cost (CNMV CASP, 2026)

A Spain crypto (CASP) licence’s real cost is the class-based initial capital — €50,000 (Class 1), €125,000 (Class 2) or €150,000 (Class 3) — not the CNMV processing fee. Every team that asks “what does a Spain crypto license cost” starts by hunting for the CNMV’s fee — and that is the wrong anchor. The regulator’s processing charge is real, but it is a rounding error next to the numbers that actually shape a Spanish CASP setup: the class-based capital you must fund, the Spanish company you must staff, and the compliance programme MiCA demands.

In our practice, the operators who win in Spain are the ones who see the whole picture early — because Spain is unusual. It is one of the EU’s biggest crypto audiences, its regulator moves fast, and yet very few providers have been licensed so far. That combination is a genuine early-mover opening, but it has a deadline. Here is the honest all-in cost of a Spain CASP licence in 2026, and why the CNMV fee is the smallest part of it.

What a Spain CASP licence actually costs in 2026

Start with the regulator’s own charge, because it is the part operators over-weight. The Comisión Nacional del Mercado de Valores (CNMV) is Spain’s national competent authority for Crypto-Asset Service Provider authorisation under MiCA, with the Bank of Spain retaining the AML registry. The CNMV levies a processing fee to assess a CASP file — a defined, one-off cost we scope precisely at quoting, and one that, on its own, explains nothing about why a serious Spanish CASP runs into six figures. The capital, the substance and the compliance build do.

The single largest number in the plan is regulatory capital, and it is set by the crypto services you intend to run — not by Spain. MiCA fixes the floor by service class, identically across every EU member state: €50,000 for Class 1, €125,000 for Class 2, and €150,000 for Class 3. That capital is not a fee — it sits in an EEA account and remains working capital of the business — but it must be genuinely funded before you launch, and it ties up cash from day one.

Two lines in that table are routinely misread. The capital is money you fund into the company, not a fee you lose — but it must be genuinely capitalised. And “substance & compliance” is not a single invoice; it is an ongoing operating cost that recurs every year the licence is live. That gap — between the regulator’s fee and the real commitment — is where most budgets go wrong. For a jurisdiction-by-jurisdiction view, our crypto licence cost comparison sets Spain against the wider EU and offshore field.

The class-based capital — the cost that isn’t a fee

The capital requirement is the part most founders underestimate, because it does not behave like a fee. Under MiCA, the minimum you must hold scales with the ambition of your business. A Class 1 provider — reception and transmission of orders, advice, execution, placing of crypto-assets — needs €50,000. Add custody of client crypto or an exchange service and you move to Class 2 at €125,000. Operate a full trading platform and you are in Class 3 at €150,000. These floors are identical in every EU country; Spain does not set them, MiCA does.

Crucially, this is working capital, not money paid away. It sits in a bank or e-money account within the EEA and funds your operations — it is there to absorb losses and demonstrate you can run the business, exactly as a prudential capital requirement does in any regulated financial firm. MiCA also requires the higher of the fixed class floor or one quarter of your prior-year fixed overheads, so a larger operation may need to hold more than the headline number. What you should not do is treat the capital as a cost to be minimised: under-scoping your service class to shave the capital line usually means re-licensing later, which is far more expensive than funding the right tier once.

Spanish substance: the recurring cost the fee schedule hides

This is where a MiCA CASP licence separates from the light-touch VASP registrations that came before, and where the real recurring money goes. A CASP authorisation requires a genuine Spanish company with real local presence: a registered office, an operating footprint, fit-and-proper management the CNMV assesses, and a dedicated money-laundering reporting officer working to the Bank of Spain’s AML registry. None of that appears on a fee schedule, and all of it recurs every year.

Substance is not box-ticking. The CNMV runs detailed suitability and source-of-funds checks on shareholders, directors and UBOs, expects relevant financial or crypto experience on the board, and wants a credible business plan, financial projections and a programme of operations. Around that sits the compliance core: AML/CFT policies aligned to the EU’s 5th and 6th anti-money-laundering directives, Travel Rule handling under the EU Transfer of Funds Regulation, client-asset safeguarding and complaints procedures. Building that framework to regulator standard is a project in itself, not a template — and the AML and MLRO function has to be staffed and maintained for the full life of the licence.

The service class you pick drives the substance too. A custody or trading-platform operator (Class 2 or 3) carries heavier safeguarding, key-management and operational obligations than a Class 1 advisory or execution firm, so your product mix shapes both the capital line and the staffing line. This is why we scope the class first and cost the substance against it. For the full picture of what the regulator expects, our Spain crypto licence requirements guide breaks the file down section by section, and the Spain CNMV CASP licence deep-dive explains how the CNMV process and its fast statutory clock actually work.

The DORA ICT programme and crypto-friendly banking

Two further cost drivers sit outside the regulator’s fee and catch operators who budget only for capital. The first is DORA. Since 17 January 2025, the Digital Operational Resilience Act has applied to CASPs, which means the CNMV expects a working ICT risk-management framework: incident reporting, resilience testing, and oversight of your third-party technology providers. For a crypto business this is not paperwork — it covers wallet architecture, key custody, disaster recovery, cybersecurity controls and the monitoring that keeps client assets safe. Building and running a DORA-compliant ICT programme is a real, recurring line in the budget, and regulators increasingly treat weak ICT resilience as a reason to slow or refuse a file.

The second is banking. A licence is not a bank account, and in crypto, payment and settlement rails are the hard part. A CASP does not use mainstream consumer processors; you build the money flow around crypto-friendly banking and specialist EMI or payment-institution partners that will actually service a licensed crypto firm. A CNMV authorisation carries real weight here — it is the credential that opens those relationships — but the onboarding still takes work, and it should be planned alongside the application, not after it. The Spain crypto licence pillar guide sets the whole engagement — capital, substance, DORA and banking — in one place.

Why the CNMV fee is the wrong anchor — and why timing matters

Add the pieces and the picture is clear. The CNMV processing fee is the small, predictable line. The weight is the class-based capital you fund (€50,000 to €150,000, which stays in the business), the Spanish company and its substance, the AML/CFT and MLRO build, the DORA ICT programme, and the crypto-friendly banking that makes the whole thing operable. Count the capital and the real year-one commitment lands in the low six figures — a very different number from the fee alone.

What that budget buys is unusually valuable in Spain’s case. One CNMV authorisation passports across all 27 EU member states on a notification basis under MiCA Article 65 — the single largest regulated crypto market in the world, entered once rather than country by country. And Spain adds two things few EU jurisdictions offer together: a very large home audience and a fast regulator. The CNMV began accepting applications in September 2024 and works to a roughly three-month statutory review, giving applicants ten business days to answer queries. That tight clock keeps the regulator’s side of the timeline predictable — a real advantage when slower EU authorities can take the better part of a year.

The maths, then, is honest rather than cheap: capital plus substance plus the compliance build, funded once, buys a full EU passport, a fast regulator and a rare early-mover position in a major market. If a Spanish CASP is where your business is heading, we run the whole file — the Spanish company, the capital and substance, the AML/CFT and DORA build, the CNMV application and the banking around it — with our fees and the regulator’s costs shown separately, never blended. See the full scope on our Spain crypto licences page, then book a free consultation and we’ll model the real year-one economics — capital included — against your service classes before you commit a euro.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.