Europe · CySEC · MiCA CASP · EU-passportable

Cyprus Crypto Licence

The EU crypto base with a fintech backbone. Cyprus pairs a CySEC CASP authorisation under MiCA — full EU passporting at €50,000–€150,000 capital by class — with an English-speaking, low-tax jurisdiction already dense with forex, fintech and fund managers. A credible, well-connected home for exchanges and brokers. Vantegris runs the CySEC file, the AML and DORA build, and the banking.

Last updated · July 2026 · 9-min read

EU-27
Passportable market
€50k+
Capital (by class)
6–12 mo
From complete filing
15%
Corporate tax
Don't want to wait out the full application? Buy a ready-made, already-licensed Cyprus company — or sell yours. We broker both.
Licence M&A →

overview

Why Cyprus.

Cyprus punches above its size in financial services, and its crypto regime reflects that. The Cyprus Securities and Exchange Commission (CySEC) — the same regulator that made the island Europe's forex and CFD capital — is the competent authority for Crypto-Asset Service Provider (CASP) authorisation under MiCA. That heritage matters: CySEC understands high-volume, cross-border trading businesses, and the island already hosts the lawyers, auditors, banks and talent a licensed operator needs.

A Cyprus CASP is a full EU licence, passportable across all 27 member states on a notification basis, at initial capital of €50,000 to €150,000 by class — subject to a fixed-overhead test that can raise the figure, and held in qualifying own funds rather than crypto on the balance sheet. The grandfathering window for legacy national registrations closes on 1 July 2026, and CySEC set an internal filing deadline of 27 February 2026 for existing providers, so the field is moving. Plan six to twelve months from a complete filing (realistically ten to fourteen from incorporation). You need a Cyprus company with genuine substance, qualified management, an AML officer and a DORA-compliant ICT programme. With a competitive 15% corporate tax (raised from 12.5% in January 2026), English as a working language and a deep fintech ecosystem, Cyprus is a natural EU home for trading-heavy crypto businesses. We build the file to CySEC standard.

Trading-savvy regulatorCySEC built Europe's forex/CFD hub — it understands cross-border trading businesses.
One licence, 27 marketsFull MiCA passporting across the EU by notification.
Capital by class€50,000–€150,000, subject to a fixed-overhead test, in qualifying own funds.
Competitive EU base15% corporate tax and English as a working language.

advantages

Why operators pick it.

01Full EU passport

Serve every EU/EEA market from one CySEC authorisation under MiCA Article 65.

02Fintech ecosystem

A deep bench of forex, fintech and fund specialists, banks and crypto-aware advisers.

03Tax efficiency

A 15% corporate tax (from Jan 2026, the EU/OECD Pillar Two minimum) with an extensive treaty network.

04English-language base

English is widely used in business and law, simplifying documentation.

05Trading heritage

A regulator and workforce experienced with high-volume, cross-border platforms.

head to head

Cyprus vs. Malta (CASP)

CriteriaCyprusMalta
RegulatorCySECMFSA
HeritageForex/CFD hubOriginal crypto (VFA) hub
Min. capital€50k–€150k by class€50k–€150k by class
Corporate tax15%Standard, with reliefs
Timeline6–12 months6–9 months
PassportingEU-27 by notificationEU-27 by notification

who it's for

Built for these operators.

Exchanges & brokersTrading-heavy operators who value a regulator experienced with cross-border platforms.
Forex firms adding cryptoExisting CySEC-regulated CIFs extending into crypto services.
Custodians & walletsProviders safeguarding client crypto that need the custody class.
Tax-efficient EU teamsBusinesses drawn to 15% corporate tax and an English-language base.

requirements

Eligibility & docs.

A Cyprus company with genuine local substance.
Initial capital of €50,000, €125,000 or €150,000 by class, subject to a fixed-overhead test.
Capital in qualifying own funds (paid-up share capital, premium, retained earnings).
A registered office and real operating presence in Cyprus.
Fit-and-proper management assessed by CySEC.
A dedicated AML/MLRO function and clear governance.
Suitability and source-of-funds checks on shareholders and UBOs.
Relevant financial or crypto experience on the board.
A business plan, financial projections and programme of operations.
AML/CFT policies aligned to EU directives and the Travel Rule.
A DORA-compliant ICT risk and incident-management framework.
Custody, safeguarding and complaints procedures.
A MiCA white paper where tokens are issued or admitted.
Check my eligibility →

step by step

From zero to licence.

  1. Scope & classFix the CASP service classes, the capital tier and the governance and substance plan.1–2 weeks
  2. Company & capitalIncorporate the Cyprus company, fund own funds and put the local office and roles in place.3–5 weeks
  3. Build the fileDraft the programme of operations, AML/CFT, DORA and safeguarding policies to CySEC standard.6–10 weeks
  4. Application & reviewFile with CySEC and manage the review and RFIs to authorisation.6–12 months
  5. Passport & launchNotify host states for EU passporting, finish banking onboarding and go live.On approval

Not sure Cyprus is the right fit?

Tell us your product and target markets — we'll confirm whether Cyprus or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

pricing

Transparent packages.

Licence Application & CySEC liaison
  • Cyprus company incorporation
  • CASP application to CySEC
  • Programme of operations & core policies
  • Regulator liaison to authorisation
Choose Licence
Full Banking, passport & scale
  • Everything in Turnkey
  • Crypto-friendly banking & PSP introductions
  • EU passport notifications
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
CySEC processing (state fee)on quote
Own funds (class-dependent + overhead test)€50,000–€150,000+
Local substance & MLRO (annual)on quote
Vantegris application, AML & DORA buildon quote

The real commitments are the class-based own funds (which stay in the business, subject to a fixed-overhead test), Cyprus substance and the AML/DORA programme. Corporate tax is 15%. We model capital and staffing to your service classes before you file.

obligations

Compliance duties.

AML/CFTCustomer due diligence, monitoring and reporting to EU 5th/6th-directive standards.
MLRO & governanceA dedicated reporting officer and board-level compliance oversight.
Travel RuleOriginator/beneficiary data on transfers under the EU Transfer of Funds Regulation.
MiCA conductClient-asset safeguarding, disclosure, conflicts and complaints obligations.
ReportingOngoing CySEC reporting and notification of material changes.

technical standards

Technology & IT.

DORA resilienceICT risk management, incident reporting, testing and third-party ICT oversight.
Asset segregationClient crypto held separately from company assets with strong custody controls.
Key managementSecure key custody, wallet design and recovery procedures.
CybersecurityEncryption, access control, monitoring and testing.
Data protectionFull GDPR compliance for personal and transaction data.

after launch

We stay on after you're live.

Compliance monitoringKeeping AML/CFT, MiCA conduct and DORA programmes current.
Regulatory reportingManaging ongoing CySEC reporting and filings.
Banking & paymentsMaintaining crypto-friendly banking and PSP relationships.
Passport & change controlAdding host-state passports and handling change-of-control filings.

market access

Reach & restrictions.

A CASP licence passports across the EU/EEA by notification, but you still follow each market's local rules and geo-block jurisdictions you are not authorised in — plus the United States, sanctioned and FATF-listed territories.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

FAQ

Why Cyprus for a crypto licence?

CySEC built Cyprus into Europe's forex and CFD hub, so it understands high-volume, cross-border trading businesses — and the island has the banks, lawyers, auditors and talent a licensed operator needs. Add a 15% corporate tax (up from 12.5% in January 2026) and English as a working language, and it's a natural EU base for trading-heavy crypto firms.

How much capital do I need?

The MiCA tiers apply — €50,000 (Class 1), €125,000 (Class 2 — custody/exchange) and €150,000 (Class 3 — trading platform) — subject to a fixed-overhead test that can raise the figure. Capital must be in qualifying own funds, not crypto held on the balance sheet.

How long does it take?

Plan six to twelve months from a complete filing, and realistically ten to fourteen months from incorporation. The grandfathering window closes on 1 July 2026, and CySEC set a 27 February 2026 internal filing deadline for existing providers.

Does a Cyprus CASP passport across the EU?

Yes. It is a full MiCA authorisation and passports into all 27 member states on a notification basis.

Cyprus or Malta?

Both are full MiCA hubs with identical capital tiers and passporting. Cyprus leans on CySEC's forex/trading heritage and a 15% tax (raised from 12.5% in January 2026); Malta has the longer dedicated-crypto pedigree. We'll match the choice to your model, banking and timeline.

Reviewed by the Vantegris licensing team · Last updated July 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

Proven track record
300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised feesRegulator schedule shown separately from our service fee.
We stay after issuanceRenewals, reporting and banking, handled long-term.
NDA on requestConfidential from the first message.

Free consultation

Start your Cyprus file.

Applied, approved and live across every vertical. Free, confidential, no obligation — most enquiries get a reply within 24 hours.

from CASP authorisation under MiCA Book a call