Europe · Banco de Portugal & CMVM · MiCA CASP · EU-passportable

Portugal Crypto Licence

Europe's crypto lifestyle hub, now fully regulated. Portugal's twin-peaks model — Banco de Portugal grants the CASP licence, the CMVM co-supervises conduct — pairs a credible EU authorisation with Lisbon's deep crypto community and quality of life. Full EU passporting at €50,000–€150,000 capital by class, in a realistic four-to-nine-month timeline. Vantegris runs the file, the AML and DORA build, and the banking.

Last updated · July 2026 · 8-min read

EU-27
Passportable market
€50k+
Capital (by class)
4–9 mo
Realistic timeline
MiCA
Regime (CASP)
Don't want to wait out the full application? Buy a ready-made, already-licensed Portugal company — or sell yours. We broker both.
Licence M&A →

overview

Why Portugal.

Portugal spent years as Europe's informal crypto capital — Lisbon's Web3 community, favourable lifestyle and a large Banco de Portugal VASP register that was AML-only. Under MiCA that has matured into a full regime. Portugal's implementing law (Lei 69/2025) sets a twin-peaks model: the Banco de Portugal grants the Crypto-Asset Service Provider (CASP) authorisation and supervises prudential requirements, while the CMVM acts as conduct co-supervisor. The first full CASP authorisation was granted in June 2026.

For operators, Portugal combines a credible EU licence with a genuine ecosystem and one of the continent's best places to base a team. Structurally it is standard MiCA — a full licence, passportable across all 27 member states on a notification basis, at initial capital of €50,000 to €150,000 by class — with a realistic timeline of four to nine months for a well-prepared file. The old AML-only VASP register did not impose conduct or prudential requirements; CASP does, so the bar is meaningfully higher. You need a Portuguese company with real substance, qualified management, an AML officer and a DORA-compliant ICT programme. We build to the Banco de Portugal's standard and manage the CMVM conduct dimension alongside it.

Twin-peaks modelBanco de Portugal grants the licence and supervises prudential; the CMVM co-supervises conduct.
Real ecosystemLisbon's Web3 community and lifestyle make Portugal a natural place to base a team.
One licence, 27 marketsFull MiCA passporting across the EU by notification.
Higher bar than beforeCASP adds conduct and prudential rules the old AML-only register never had.

advantages

Why operators pick it.

01Full EU passport

Serve every EU/EEA market from one Portuguese CASP authorisation under MiCA Article 65.

02Crypto ecosystem

A deep Lisbon Web3 community, talent pool and events calendar to build within.

03Quality of life

One of Europe's most attractive places to base founders and staff.

04Credible regulators

A Banco de Portugal licence with CMVM conduct oversight carries real weight.

05Eurozone base

The euro simplifies capital, banking and settlement.

head to head

Portugal vs. Malta (CASP)

CriteriaPortugalMalta
RegulatorBanco de Portugal + CMVMMFSA
ModelTwin-peaks (Lei 69/2025)Single authority
Min. capital€50k–€150k by class€50k–€150k by class
Timeline4–9 months6–9 months
DrawLisbon ecosystem & lifestyleCrypto pedigree & brand
PassportingEU-27 by notificationEU-27 by notification

who it's for

Built for these operators.

Founders basing in LisbonTeams that want to live and build where the European crypto community already is.
Exchanges & brokersTrading and order-handling businesses seeking passportable EU standing.
Custodians & walletsProviders safeguarding client crypto that need the custody class.
Existing BdP VASPsFirms on the old AML-only register upgrading to a full CASP authorisation.

requirements

Eligibility & docs.

A Portuguese company with genuine local substance.
Initial capital of €50,000, €125,000 or €150,000 depending on the CASP class.
Capital held in a bank or e-money account within the EEA.
A registered office and real operating presence in Portugal.
Fit-and-proper management assessed by the Banco de Portugal (with CMVM conduct input).
A dedicated AML/MLRO function and clear governance.
Suitability and source-of-funds checks on shareholders and UBOs.
Relevant financial or crypto experience on the board.
A business plan, financial projections and programme of operations.
AML/CFT policies aligned to EU directives and the Travel Rule.
A DORA-compliant ICT risk and incident-management framework.
Custody, safeguarding, outsourcing and complaints procedures.
A MiCA white paper where tokens are issued or admitted.
Check my eligibility →

step by step

From zero to licence.

  1. Scope & classFix the CASP service classes, the capital tier and the governance and substance plan.1–2 weeks
  2. Company & capitalIncorporate the Portuguese company, fund capital and put the local office and roles in place.3–5 weeks
  3. Build the fileDraft the programme of operations, AML/CFT, DORA, outsourcing and safeguarding policies.6–10 weeks
  4. Application & reviewFile for authorisation; the Banco de Portugal decides with a CMVM conduct opinion.4–9 months
  5. Passport & launchNotify host states for EU passporting, finish banking onboarding and go live.On approval

Not sure Portugal is the right fit?

Tell us your product and target markets — we'll confirm whether Portugal or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

pricing

Transparent packages.

Licence Application & regulator liaison
  • Portuguese company incorporation
  • CASP application (Banco de Portugal / CMVM)
  • Programme of operations & core policies
  • Regulator liaison to authorisation
Choose Licence
Full Banking, passport & scale
  • Everything in Turnkey
  • Crypto-friendly banking & PSP introductions
  • EU passport notifications
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
Banco de Portugal / CMVM processingon quote
Initial capital (class-dependent)€50,000–€150,000
Local substance & MLRO (annual)on quote
Vantegris application, AML & DORA buildon quote

The real commitments are the class-based initial capital (which stays working capital), Portuguese substance and the AML/DORA/outsourcing programme. CASP is a step up from the old AML-only register, so budget for genuine governance. We model capital and staffing to your service classes before you file.

obligations

Compliance duties.

AML/CFTCustomer due diligence, monitoring and reporting to EU 5th/6th-directive standards.
MLRO & governanceA dedicated reporting officer and board-level compliance oversight.
Travel RuleOriginator/beneficiary data on transfers under the EU Transfer of Funds Regulation.
MiCA conductClient-asset safeguarding, disclosure, conflicts and complaints obligations under CMVM oversight.
ReportingOngoing Banco de Portugal reporting and notification of material changes.

technical standards

Technology & IT.

DORA resilienceICT risk management, incident reporting, testing and third-party ICT oversight.
Asset segregationClient crypto held separately from company assets with strong custody controls.
Key managementSecure key custody, wallet design and recovery procedures.
CybersecurityEncryption, access control, monitoring and testing.
Data protectionFull GDPR compliance for personal and transaction data.

after launch

We stay on after you're live.

Compliance monitoringKeeping AML/CFT, MiCA conduct and DORA programmes current.
Regulatory reportingManaging ongoing Banco de Portugal reporting and filings.
Banking & paymentsMaintaining crypto-friendly banking and PSP relationships.
Passport & change controlAdding host-state passports and handling change-of-control filings.

market access

Reach & restrictions.

A CASP licence passports across the EU/EEA by notification, but you still follow each market's local rules and geo-block jurisdictions you are not authorised in — plus the United States, sanctioned and FATF-listed territories.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

FAQ

Who grants a Portuguese crypto licence?

Portugal uses a twin-peaks model under Lei 69/2025: the Banco de Portugal grants the CASP authorisation and supervises prudential requirements, while the CMVM acts as conduct co-supervisor. The first full CASP authorisation was granted in June 2026.

How long does it take?

A realistic working range is four to nine months for a well-prepared file, and longer for complex models or unresolved banking and outsourcing issues.

How much capital do I need?

The MiCA tiers apply: €50,000 (Class 1), €125,000 (Class 2 — custody/exchange) and €150,000 (Class 3 — trading platform). Being in the eurozone keeps capital and banking simple.

I'm on the old Banco de Portugal VASP register — is that enough?

No. The legacy register was AML-only and did not impose conduct or prudential requirements. Under MiCA you need a full CASP authorisation, which is a materially higher bar. We manage the upgrade.

Portugal or Malta?

Both are full MiCA hubs with identical capital tiers and passporting. Portugal offers the Lisbon ecosystem, lifestyle and a twin-peaks regulator; Malta offers the longer crypto pedigree and a single authority. We'll match the choice to where you want to base and your timeline.

Reviewed by the Vantegris licensing team · Last updated July 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

Proven track record
300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised feesRegulator schedule shown separately from our service fee.
We stay after issuanceRenewals, reporting and banking, handled long-term.
NDA on requestConfidential from the first message.

Free consultation

Start your Portugal file.

Applied, approved and live across every vertical. Free, confidential, no obligation — most enquiries get a reply within 24 hours.

from CASP authorisation under MiCA Book a call