Europe · CNMV · MiCA CASP · EU-passportable

Spain Crypto Licence

A huge EU market with a fast regulator and, so far, few licensees. Spain's CNMV runs a roughly three-month statutory CASP review and has authorised only a handful of providers — early-mover room in one of Europe's largest crypto audiences, with full EU passporting at €50,000–€150,000 capital by class. Vantegris runs the CNMV file, the AML and DORA build, and the banking.

Last updated · July 2026 · 8-min read

EU-27
Passportable market
€50k+
Capital (by class)
~3 mo
CNMV statutory review
MiCA
Regime (CASP)
Don't want to wait out the full application? Buy a ready-made, already-licensed Spain company — or sell yours. We broker both.
Licence M&A →

overview

Why Spain.

Spain is one of the EU's largest crypto user bases, and its regulator moves quickly — yet very few providers have been licensed so far. The Comisión Nacional del Mercado de Valores (CNMV) is the national competent authority for Crypto-Asset Service Provider (CASP) authorisation, with the Bank of Spain retaining the AML/VASP registry. The CNMV began accepting applications in September 2024 and works to a roughly three-month statutory review, giving applicants ten business days to answer any queries.

That combination — a big audience, a fast regulator and a thin field of licensees — is a genuine early-mover opportunity. The transitional window was extended to 30 June 2026, after which unlicensed providers face a wind-down. Structurally it is standard MiCA: a full EU licence, passportable across all 27 member states on a notification basis, at initial capital of €50,000 to €150,000 by class. You need a Spanish company with genuine substance, qualified management, an AML officer and a DORA-compliant ICT programme. For teams that want scale in a major Southern-European market with room still open, Spain is compelling.

Large marketOne of the EU's biggest crypto audiences — and still lightly licensed.
Fast regulatorThe CNMV works to a roughly three-month statutory review.
One licence, 27 marketsFull MiCA passporting across the EU by notification.
Early-mover roomFew CASPs authorised so far — space to establish before the field fills.

advantages

Why operators pick it.

01Full EU passport

Serve every EU/EEA market from one CNMV authorisation under MiCA Article 65.

02Quick statutory clock

A ~3-month CNMV review keeps the regulator's side of the timeline tight.

03Big home market

Direct reach into one of Europe's largest and most active crypto audiences.

04First-mover position

A thin field of licensees leaves room to establish a brand early.

05Eurozone base

The euro simplifies capital, banking and settlement.

head to head

Spain vs. Lithuania (CASP)

CriteriaSpainLithuania
RegulatorCNMVBank of Lithuania
Home marketVery largeSmaller, hub-focused
Min. capital€50k–€150k by class€50k–€150k by class
Statutory review≈3 months3–6 months typical
Licensee fieldThin (early-mover)Deep, established
PassportingEU-27 by notificationEU-27 by notification

who it's for

Built for these operators.

Spain-focused operatorsTeams whose primary audience is Spanish or Southern-European users.
Exchanges & brokersTrading and order-handling businesses wanting a big home market plus EU passporting.
Custodians & walletsProviders safeguarding client crypto that need the custody class.
Early moversBusinesses that want to establish before the Spanish field fills out.

requirements

Eligibility & docs.

A Spanish company with genuine local substance.
Initial capital of €50,000, €125,000 or €150,000 depending on the CASP class.
Capital held in a bank or e-money account within the EEA.
A registered office and real operating presence in Spain.
Fit-and-proper management assessed by the CNMV.
A dedicated AML/MLRO function and clear governance.
Suitability and source-of-funds checks on shareholders and UBOs.
Relevant financial or crypto experience on the board.
A business plan, financial projections and programme of operations.
AML/CFT policies aligned to EU directives and the Travel Rule.
A DORA-compliant ICT risk and incident-management framework.
Custody, safeguarding and complaints procedures.
A MiCA white paper where tokens are issued or admitted.
Check my eligibility →

step by step

From zero to licence.

  1. Scope & classFix the CASP service classes, the capital tier and the governance and substance plan.1–2 weeks
  2. Company & capitalIncorporate the Spanish company, fund capital and put the local office and roles in place.3–5 weeks
  3. Build the fileDraft the programme of operations, AML/CFT, DORA and safeguarding policies to CNMV standard.6–10 weeks
  4. Application & reviewFile with the CNMV; statutory review runs ~3 months, with 10 business days to answer queries.3–5 months
  5. Passport & launchNotify host states for EU passporting, finish banking onboarding and go live.On approval

Not sure Spain is the right fit?

Tell us your product and target markets — we'll confirm whether Spain or another jurisdiction gets you live fastest, at the lowest all-in cost.

Get my quote →

pricing

Transparent packages.

Licence Application & regulator liaison
  • Spanish company incorporation
  • CASP application to the CNMV
  • Programme of operations & core policies
  • Regulator liaison to authorisation
Choose Licence
Full Banking, passport & scale
  • Everything in Turnkey
  • Crypto-friendly banking & PSP introductions
  • EU passport notifications
  • Ongoing compliance & reporting support
Choose Full
Regulatory fees & add-ons
CNMV processing (state fee)on quote
Initial capital (class-dependent)€50,000–€150,000
Local substance & MLRO (annual)on quote
Vantegris application, AML & DORA buildon quote

The real commitments are the class-based initial capital (which stays working capital), Spanish substance and the AML/DORA programme. The CNMV expects a complete, high-quality file and credible team. We model capital and staffing to your service classes before you file.

obligations

Compliance duties.

AML/CFTCustomer due diligence, monitoring and reporting to EU 5th/6th-directive standards, with the Bank of Spain AML registry.
MLRO & governanceA dedicated reporting officer and board-level compliance oversight.
Travel RuleOriginator/beneficiary data on transfers under the EU Transfer of Funds Regulation.
MiCA conductClient-asset safeguarding, disclosure, conflicts and complaints obligations.
ReportingOngoing CNMV reporting and notification of material changes.

technical standards

Technology & IT.

DORA resilienceICT risk management, incident reporting, testing and third-party ICT oversight.
Asset segregationClient crypto held separately from company assets with strong custody controls.
Key managementSecure key custody, wallet design and recovery procedures.
CybersecurityEncryption, access control, monitoring and testing.
Data protectionFull GDPR compliance for personal and transaction data.

after launch

We stay on after you're live.

Compliance monitoringKeeping AML/CFT, MiCA conduct and DORA programmes current.
Regulatory reportingManaging ongoing CNMV reporting and filings.
Banking & paymentsMaintaining crypto-friendly banking and PSP relationships.
Passport & change controlAdding host-state passports and handling change-of-control filings.

market access

Reach & restrictions.

A CASP licence passports across the EU/EEA by notification, but you still follow each market's local rules and geo-block jurisdictions you are not authorised in — plus the United States, sanctioned and FATF-listed territories.

Restricted / prohibited countries
United StatesSanctioned territoriesFATF-listed nationsMarkets requiring separate local authorisation

Operators must use GEO-IP blocking for restricted countries and any FATF-blacklisted nation. Non-compliance can lead to licence suspension or revocation.

FAQ

Who regulates crypto licences in Spain?

The CNMV (Comisión Nacional del Mercado de Valores) is the national competent authority for CASP authorisation under MiCA. The Bank of Spain retains the AML/VASP registry. The CNMV began accepting applications in September 2024.

How long does the Spanish crypto licence take?

The CNMV works to a roughly three-month statutory review once your file is complete, giving you ten business days to answer any queries. With preparation, plan three to five months end to end.

How much capital do I need?

The MiCA tiers apply: €50,000 (Class 1), €125,000 (Class 2 — custody/exchange) and €150,000 (Class 3 — trading platform). Capital sits in an EEA account as working capital.

Is there really an early-mover advantage in Spain?

Spain is one of the EU's largest crypto markets, yet only a handful of CASPs had been authorised by mid-2026. That thin field, combined with a fast regulator, leaves genuine room to establish a brand before the market fills — which is why we flag it.

What is the deadline?

Spain's transitional window was extended to 30 June 2026. After that, providers without CNMV CASP authorisation are prohibited from offering crypto services and must wind down — so acting now matters.

Reviewed by the Vantegris licensing team · Last updated July 2026. This page is general information, not legal advice. Licensing requirements vary by jurisdiction and change over time.

Proven track record
300+ operators licensed across 40+ jurisdictions.

From crypto casinos to B2B platform providers, operators trust Vantegris to move fast without cutting compliance corners.

See how we ran this for a client →
Itemised feesRegulator schedule shown separately from our service fee.
We stay after issuanceRenewals, reporting and banking, handled long-term.
NDA on requestConfidential from the first message.

Free consultation

Start your Spain file.

Applied, approved and live across every vertical. Free, confidential, no obligation — most enquiries get a reply within 24 hours.

from CASP authorisation under MiCA Book a call