EU-passportable MiCA CASP from the MFSA

Malta Crypto Licence

Malta's MFSA pioneered crypto regulation with its VFA framework in 2018 and has carried that expertise into MiCA — fifth in the EU by authorised CASP count, with 22 of 360 on ESMA's register. A premium, credible EU base at €50,000–€150,000 capital by class. Vantegris runs the MFSA file, the AML and DORA build, and the banking.

Updated September 2026 · 9-min read

EU-27
Passportable market
€50k+
Capital (by class)
6–9 mo
Typical timeline
5th
EU CASP count (22 of 360)
Buying instead of applying? Acquire a company already licensed in Malta, subject to the regulator approving the change of control, or sell yours. We broker both.
Licence M&A →

What is the Malta crypto licence?

Malta got there early. Its Virtual Financial Assets (VFA) framework, launched in 2018, made it one of the EU's earliest dedicated crypto regimes and earned it the 'Blockchain Island' label. That head start matters under MiCA: the Malta Financial Services Authority (MFSA) brings years of crypto supervision experience to Crypto-Asset Service Provider (CASP) authorisation, and Malta now holds 22 of the 360 CASPs authorised in the EU, fifth by member state (ESMA register, 27 September 2026).

For operators, Malta offers a premium, credible EU licence with a review that typically takes six to nine months. Existing VFA licence-holders were grandfathered until 1 July 2026 while they transitioned to CASP; new entrants apply directly. The requirements are full MiCA: a Maltese company with genuine substance, qualified management, an AML officer, initial capital of €50,000 to €150,000 by class, and a DORA-compliant ICT programme. MFSA application fees are €10,000, €20,000 or €25,000 by class, with annual supervisory fees on top. If you want a reputable, English-speaking EU base with deep crypto pedigree, Malta is a natural home.

Crypto pedigree A dedicated crypto regime since 2018 (the VFA Act), so the MFSA knows this sector.
CASP count 22 of 360 authorised EU CASPs, fifth by member state (ESMA register, 27 Sep 2026).
One licence, 27 markets Full MiCA passporting across the EU by notification.
English-speaking base An English-language, common-law-influenced EU jurisdiction.

Why operators pick Malta

01Full EU passport

Serve every EU/EEA market from one MFSA authorisation under MiCA Article 65.

02Experienced regulator

Years of VFA supervision give the MFSA real depth in assessing crypto business models.

03A predictable review

Six to nine months on a complete, well-prepared file.

04Reputation & ecosystem

A recognised crypto hub with specialist advisers, auditors and crypto-aware banking.

05English-language EU base

English is an official language, simplifying documentation and operations.

Malta vs. Estonia (CASP)

Criteria Malta Estonia
Regulator MFSA Finantsinspektsioon
Crypto pedigree VFA since 2018 Long-standing VASP hub
Min. capital €50k–€150k by class €50k–€150k by class
Timeline 6–⁠9 months 4–⁠6 months
Positioning Premium, established brand Lean, digital-first
Passporting EU-27 by notification EU-27 by notification

Who the Malta crypto licence suits

Established exchanges Larger operators who want a premium, recognised EU licence with a proven regulator.
Custodians & platforms Trading-platform and custody businesses needing the higher service classes.
Existing VFA holders Firms moving a Maltese VFA licence to CASP, a transition whose grandfathering period ended on 1 July 2026.
Reputation-first teams Businesses for whom a credible, established jurisdiction supports banking and partnerships.

Malta crypto licence requirements

A Maltese company with genuine local substance.
Initial capital of €50,000, €125,000 or €150,000 depending on the CASP class.
Prudential safeguards of at least the class minimum or a quarter of last year's fixed overheads, held as own funds, insurance or both.
A registered office and real operating presence in Malta.
Fit-and-proper management assessed by the MFSA.
A dedicated AML/MLRO function and clear governance.
Suitability and source-of-funds checks on shareholders and UBOs.
Relevant financial or crypto experience on the board.
A business plan, financial projections and programme of operations.
AML/CFT policies aligned to EU directives and the Travel Rule.
A DORA-compliant ICT risk and incident-management framework.
Custody, safeguarding and complaints procedures.
A MiCA white paper where tokens are issued or admitted.
Check my eligibility →

How to get a Malta crypto licence

  1. Scope & class Fix the CASP service classes, the capital tier and the governance and substance plan. 1–2 weeks
  2. Company & capital Incorporate the Maltese company, fund capital and put the local office and roles in place. 3–5 weeks
  3. Build the file Draft the programme of operations, AML/CFT, DORA and safeguarding policies to MFSA standard. 6–10 weeks
  4. Application & review File with the MFSA and manage the review and questions to authorisation. 4–7 months
  5. Passport & launch Notify host states for EU passporting, finish banking onboarding and go live. On approval

Not sure Malta is the right fit?

Tell us your product and target markets — we'll confirm whether Malta or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

How much does a Malta crypto licence cost?

Licence Application & regulator liaison
  • Maltese company incorporation
  • CASP application to the MFSA
  • Programme of operations & core policies
  • Regulator liaison to authorisation
Choose Licence
Full Banking, passport & scale
  • Everything in Turnkey
  • Crypto-friendly banking & PSP introductions
  • EU passport notifications
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
MFSA application (Class 1 / 2 / 3)€10,000 / €20,000 / €25,000
Initial capital (class-dependent)€50,000–€150,000
Annual supervisory fee (Class 1 / 2 / 3), plus €2,000 per service and 0.05% of volume (cap €250,000)€10,000 / €25,000 / €50,000
Vantegris application, AML & DORA buildon quote

Budget the MFSA application fee (€10,000, €20,000 or €25,000 by class), the class-based initial capital, annual supervisory fees, Maltese substance and the AML/DORA programme. Malta is a premium jurisdiction — it costs more than the value hubs but buys a recognised, experienced regulator. We model the full economics before you commit.

Compliance obligations in Malta

AML/CFT Customer due diligence, monitoring and reporting to EU 5th/6th-directive standards.
MLRO & governance A dedicated reporting officer and board-level compliance oversight.
Travel Rule Originator/beneficiary data on transfers under the EU Transfer of Funds Regulation.
MiCA conduct Client-asset safeguarding, disclosure, conflicts and complaints obligations.
Reporting Ongoing MFSA reporting and notification of material changes.

Technical & IT standards in Malta

DORA resilience ICT risk management, incident reporting, testing and third-party ICT oversight.
Asset segregation Client crypto held separately from company assets with strong custody controls.
Key management Secure key custody, wallet design and recovery procedures.
Cybersecurity Encryption, access control, monitoring and testing.
Data protection Full GDPR compliance for personal and transaction data.

After you go live in Malta

Compliance monitoring Keeping AML/CFT, MiCA conduct and DORA programmes current.
Regulatory reporting Managing ongoing MFSA reporting and filings.
Banking & payments Maintaining crypto-friendly banking and PSP relationships.
Passport & change control Adding host-state passports and handling change-of-control filings.

Which markets a Malta licence reaches

A CASP licence passports across the EU/EEA by notification, but you still follow each market's local rules and geo-block jurisdictions you are not authorised in — plus the United States, sanctioned and FATF-listed territories.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

Malta crypto licence FAQ

Why choose Malta for a crypto licence?

Malta has run a dedicated crypto regime since the VFA Act of 2018, so the MFSA has genuine depth in supervising crypto business. It now holds 22 of the EU's 360 authorised CASPs, fifth by member state, and operates in English — a credible, established EU base.

How much does a Malta crypto licence cost?

The MFSA application fee is €10,000, €20,000 or €25,000 for a Class 1, 2 or 3 CASP. The annual supervisory fee is €10,000, €25,000 or €50,000 by class, plus €2,000 for each authorised service and 0.05% of transaction volume, capped at €250,000. Add the MiCA initial capital of €50,000–€150,000 by class, Maltese substance and the AML/DORA programme.

How long does it take?

Typically six to nine months on a complete file. Existing Maltese VFA licence-holders were grandfathered until 1 July 2026 while they transitioned to CASP.

What happens to my Malta VFA licence?

VFA licences valid on 30 December 2024 were grandfathered and could continue under the VFA Act until 1 July 2026 or until a CASP authorisation was granted or refused, whichever came first. We manage the transition.

Malta or Estonia?

Both are full MiCA hubs with identical capital tiers and passporting. Malta is the premium, established brand with an experienced regulator and English-language operations; Estonia is leaner and typically quicker. We'll recommend based on your scale, reputation needs and timeline.

Reviewed by the Vantegris licensing team. Last updated September 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised fees Regulator schedule shown separately from our service fee.
We stay after issuance Renewals, reporting and banking, handled long-term.
NDA on request Confidential from the first message.

Start your Malta file.

Tell us your product and target markets and we will map the licence route. The consultation is free and confidential, and most enquiries get a reply within 24 hours.