Europe · MFSA · MiCA CASP · EU-passportable

Malta Crypto Licence

The original 'Blockchain Island', now a MiCA heavyweight. Malta's MFSA pioneered crypto regulation with its VFA framework in 2018 and has carried that expertise into MiCA — sitting among the EU's top five jurisdictions by authorised CASP count, with a review that runs faster than Germany, France or Italy. A premium, credible EU base at €50,000–€150,000 capital by class. Vantegris runs the MFSA file, the AML and DORA build, and the banking.

Last updated · July 2026 · 9-min read

EU-27
Passportable market
€50k+
Capital (by class)
6–9 mo
Typical timeline
Top 5
EU CASP count
Don't want to wait out the full application? Buy a ready-made, already-licensed Malta company — or sell yours. We broker both.
Licence M&A →

overview

Why Malta.

Malta got there first. Its Virtual Financial Assets (VFA) framework, launched in 2018, made it the EU's earliest dedicated crypto regime and earned it the 'Blockchain Island' label. That head start matters under MiCA: the Malta Financial Services Authority (MFSA) brings years of crypto supervision experience to Crypto-Asset Service Provider (CASP) authorisation, and Malta now sits among the top five EU jurisdictions by authorised CASP count.

For operators, Malta offers a premium, credible EU licence with a review that runs faster than the big-three markets of Germany, France and Italy — typically six to nine months. Existing VFA licence-holders are grandfathered until 1 July 2026 while they transition to CASP; new entrants apply directly. The requirements are full MiCA: a Maltese company with genuine substance, qualified management, an AML officer, initial capital of €50,000 to €150,000 by class, and a DORA-compliant ICT programme. MFSA application fees run roughly €8,000 to €30,000 by class, with annual supervisory fees on top. If you want a reputable, English-speaking EU base with deep crypto pedigree, Malta is a natural home.

Crypto pedigreeThe EU's first dedicated crypto regime (VFA, 2018) — the MFSA knows this sector.
Top-5 by countAmong the EU's most-used CASP jurisdictions, with a faster review than DE/FR/IT.
One licence, 27 marketsFull MiCA passporting across the EU by notification.
English-speaking baseAn English-language, common-law-influenced EU jurisdiction.

advantages

Why operators pick it.

01Full EU passport

Serve every EU/EEA market from one MFSA authorisation under MiCA Article 65.

02Experienced regulator

Years of VFA supervision give the MFSA real depth in assessing crypto business models.

03Faster than the big three

A six-to-nine-month review beats Germany, France and Italy for time to market.

04Reputation & ecosystem

A recognised crypto hub with specialist advisers, auditors and crypto-aware banking.

05English-language EU base

English is an official language, simplifying documentation and operations.

head to head

Malta vs. Estonia (CASP)

CriteriaMaltaEstonia
RegulatorMFSAFinantsinspektsioon
Crypto pedigreeVFA since 2018Long-standing VASP hub
Min. capital€50k–€150k by class€50k–€150k by class
Timeline6–9 months4–6 months
PositioningPremium, established brandLean, digital-first
PassportingEU-27 by notificationEU-27 by notification

who it's for

Built for these operators.

Established exchangesLarger operators who want a premium, recognised EU licence with a proven regulator.
Custodians & platformsTrading-platform and custody businesses needing the higher service classes.
Existing VFA holdersFirms transitioning a Maltese VFA licence to CASP before the 1 July 2026 cutoff.
Reputation-first teamsBusinesses for whom a credible, established jurisdiction supports banking and partnerships.

requirements

Eligibility & docs.

A Maltese company with genuine local substance.
Initial capital of €50,000, €125,000 or €150,000 depending on the CASP class.
Capital held in a bank or e-money account within the EEA.
A registered office and real operating presence in Malta.
Fit-and-proper management assessed by the MFSA.
A dedicated AML/MLRO function and clear governance.
Suitability and source-of-funds checks on shareholders and UBOs.
Relevant financial or crypto experience on the board.
A business plan, financial projections and programme of operations.
AML/CFT policies aligned to EU directives and the Travel Rule.
A DORA-compliant ICT risk and incident-management framework.
Custody, safeguarding and complaints procedures.
A MiCA white paper where tokens are issued or admitted.
Check my eligibility →

step by step

From zero to licence.

  1. Scope & classFix the CASP service classes, the capital tier and the governance and substance plan.1–2 weeks
  2. Company & capitalIncorporate the Maltese company, fund capital and put the local office and roles in place.3–5 weeks
  3. Build the fileDraft the programme of operations, AML/CFT, DORA and safeguarding policies to MFSA standard.6–10 weeks
  4. Application & reviewFile with the MFSA and manage the review and questions to authorisation.4–7 months
  5. Passport & launchNotify host states for EU passporting, finish banking onboarding and go live.On approval

Not sure Malta is the right fit?

Tell us your product and target markets — we'll confirm whether Malta or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

pricing

Transparent packages.

Licence Application & regulator liaison
  • Maltese company incorporation
  • CASP application to the MFSA
  • Programme of operations & core policies
  • Regulator liaison to authorisation
Choose Licence
Full Banking, passport & scale
  • Everything in Turnkey
  • Crypto-friendly banking & PSP introductions
  • EU passport notifications
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
MFSA application (by class)≈€8,000–€30,000
Initial capital (class-dependent)€50,000–€150,000
Annual supervisory feeclass-dependent
Vantegris application, AML & DORA buildon quote

Budget the MFSA application fee (≈€8,000–€30,000 by class), the class-based initial capital, annual supervisory fees, Maltese substance and the AML/DORA programme. Malta is a premium jurisdiction — it costs more than the value hubs but buys a recognised, experienced regulator. We model the full economics before you commit.

obligations

Compliance duties.

AML/CFTCustomer due diligence, monitoring and reporting to EU 5th/6th-directive standards.
MLRO & governanceA dedicated reporting officer and board-level compliance oversight.
Travel RuleOriginator/beneficiary data on transfers under the EU Transfer of Funds Regulation.
MiCA conductClient-asset safeguarding, disclosure, conflicts and complaints obligations.
ReportingOngoing MFSA reporting and notification of material changes.

technical standards

Technology & IT.

DORA resilienceICT risk management, incident reporting, testing and third-party ICT oversight.
Asset segregationClient crypto held separately from company assets with strong custody controls.
Key managementSecure key custody, wallet design and recovery procedures.
CybersecurityEncryption, access control, monitoring and testing.
Data protectionFull GDPR compliance for personal and transaction data.

after launch

We stay on after you're live.

Compliance monitoringKeeping AML/CFT, MiCA conduct and DORA programmes current.
Regulatory reportingManaging ongoing MFSA reporting and filings.
Banking & paymentsMaintaining crypto-friendly banking and PSP relationships.
Passport & change controlAdding host-state passports and handling change-of-control filings.

market access

Reach & restrictions.

A CASP licence passports across the EU/EEA by notification, but you still follow each market's local rules and geo-block jurisdictions you are not authorised in — plus the United States, sanctioned and FATF-listed territories.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

FAQ

Why choose Malta for a crypto licence?

Malta ran the EU's first dedicated crypto regime (the VFA Act, 2018), so the MFSA has genuine depth in supervising crypto business. It now sits among the top five EU jurisdictions by authorised CASP count, reviews faster than Germany, France or Italy, and operates in English — a credible, established EU base.

How much does a Malta crypto licence cost?

MFSA application fees run roughly €8,000 to €30,000 depending on the licence class, with annual supervisory fees on top. Add the MiCA initial capital of €50,000–€150,000 by class, Maltese substance and the AML/DORA programme.

How long does it take?

Typically six to nine months — faster than the largest EU markets. Existing Maltese VFA licence-holders are grandfathered until 1 July 2026 while they transition to CASP.

What happens to my Malta VFA licence?

VFA licences valid on 30 December 2024 are grandfathered and may continue under the VFA Act until 1 July 2026 or until a CASP authorisation is granted or refused, whichever comes first. We manage the transition.

Malta or Estonia?

Both are full MiCA hubs with identical capital tiers and passporting. Malta is the premium, established brand with an experienced regulator and English-language operations; Estonia is leaner and typically quicker. We'll recommend based on your scale, reputation needs and timeline.

Reviewed by the Vantegris licensing team · Last updated July 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

Proven track record
300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised feesRegulator schedule shown separately from our service fee.
We stay after issuanceRenewals, reporting and banking, handled long-term.
NDA on requestConfidential from the first message.

Free consultation

Start your Malta file.

Applied, approved and live across every vertical. Free, confidential, no obligation — most enquiries get a reply within 24 hours.

from CASP authorisation under MiCA Book a call