Cyprus Crypto License (CySEC CASP) — Requirements & MiCA 2026

Bitcoin coin stock market app phone — Cyprus Crypto License: CySEC CASP Authorisation 2026

Overview

Why Cyprus Is Europe's Top Choice for MiCA Licensing

Cyprus implemented CASP (Crypto Asset Service Provider) regulations aligned with EU MiCA in 2021 and updated in 2023–2024. CySEC (Cyprus Securities and Exchange Commission) is the competent authority. Cyprus's 12.5% corporate tax is the lowest in the EU, combined with a sophisticated double tax treaty network covering 60+ treaties.

The island's English-language legal system (based on English common law), EU membership, and established financial services sector — with hundreds of regulated forex and fintech companies — make it a top choice for European crypto operations. CySEC has built significant experience with financial technology regulation over the past decade.

Under MiCA (fully applicable from December 2024), Cyprus provides a clear, single-regulator pathway to EU-wide passporting. CySEC is known as one of the more commercially engaged regulators in the EU — accessible to applicants and pragmatic in its review of novel business models.

MiCA speed advantage: Cyprus is often the fastest EU jurisdiction for MiCA CASP authorization. CySEC has invested heavily in processing capacity and has established streamlined procedures for complete applications. Well-prepared applicants with experienced local counsel can achieve authorization in 3–4 months.

License Categories

Cyprus CASP — MiCA Activity Categories

CASP authorisation covers all MiCA Article 60 activities. Companies apply for the specific activity classes they need — a single CASP authorization can cover multiple activities.

Activity	Min. Capital	Notes
Reception & transmission of orders	€50,000	Lowest capital tier; advisory and order routing
Execution of orders on behalf of clients	€125,000	Active trading on behalf of clients
Operating a crypto-asset trading platform	€150,000	Exchange operator; highest capital requirement
Exchange for fiat / crypto-to-crypto	€125,000	Conversion services for clients
Transfer of crypto-assets	€50,000	Crypto transfer and settlement services
Crypto-asset custody	€125,000	Safekeeping of client assets; cold storage required
Placement of crypto-assets	€125,000	Primary market placement services

Requirements

Cyprus CASP License — Key Requirements

Entity

Cyprus company (Ltd.) required

Private limited company incorporated at Cyprus Registrar of Companies

Min. Capital

€50,000 – €150,000

Depends on activity categories selected; paid-up at application

Directors

Min. 2 Cyprus-resident directors (or 1 with approval)

CySEC fit & proper assessment; relevant industry experience required

Physical Office

Required in Cyprus

Genuine substance; virtual offices not accepted under MiCA

MLRO & Compliance Officer

Both required

AML Directive and CySEC AML guidelines compliance

AML/CFT Framework

EU AML Directive compliant

KYC/CDD, transaction monitoring, Travel Rule compliance

IT Systems

Cybersecurity policy required

Technology architecture description; business continuity plan

Business Plan

CySEC-reviewed business plan

3-year financial projections; revenue model and market analysis

Process

How to Get a Cyprus CASP License — Step by Step

Incorporate Cyprus Entity and Establish Local Presence

Incorporate a Cyprus private limited company (Ltd.) at the Registrar of Companies. Establish the physical office in Cyprus, appoint Cyprus-resident directors, and open a Cypriot bank account. Engage local legal counsel experienced in CySEC CASP applications — this is essential for a smooth process.

2–4 weeks

Prepare CASP Application Package

Develop the complete application: business plan with 3-year financials, AML/CFT framework per EU AML Directive, IT systems description and cybersecurity policy, organizational structure and governance documentation, business continuity plan, and fit & proper documentation for all directors and significant shareholders.

4–8 weeks

Submit to CySEC with Application Fee

File the complete CASP application with CySEC and pay the CySEC application fee (€10,000). CySEC will confirm receipt and assign a case officer. All correspondence is in English. CySEC is generally responsive to queries from counsel during the review period.

Week 8–10

CySEC Review and Possible Questions

CySEC reviews the application comprehensively, including background checks on all key persons and assessment of the compliance and governance framework. CySEC may issue questions or requests for additional information — respond promptly and comprehensively. CySEC review of complete applications typically takes 2–4 months.

2–4 months

CASP Authorization Issued

CySEC issues the CASP Authorization. Commence operations. Ongoing obligations include annual CySEC returns, annual audited financial statements, AML/CFT annual review, Travel Rule compliance, and immediate notification to CySEC of material changes. EU passporting notifications can be filed immediately after authorization.

Authorization issued

Costs

Cyprus CASP License — Full Cost Breakdown

Item	Details	Approx. Cost
CySEC application fee	Non-refundable application fee	€10,000
CySEC annual supervisory fee	Ongoing annual regulatory fee	€10,000–€25,000/yr
Company formation	Cyprus Ltd. incorporation, Registrar fee, legal	€1,500–€3,500
Office lease (Year 1)	Physical office in Limassol or Nicosia	€6,000–€15,000/yr
Legal & compliance	Application preparation, AML/CFT policies	€15,000–€30,000
Min. capital	Paid-up capital (by activity category)	€50,000–€150,000
Estimated Year 1 Total (excl. capital)	Setup, regulatory fees, office, professional fees	€40,000–€90,000

FAQ

Cyprus CASP License — Common Questions

A Crypto Asset Service Provider (CASP) authorisation issued by the Cyprus Securities and Exchange Commission (CySEC) under EU MiCA and the Cyprus Investment Services and Activities and Regulated Markets Law. It permits a wide range of crypto asset services within Cyprus and across the EU via passporting. Cyprus was one of the first EU member states to implement the MiCA CASP framework in full.

12.5% — the lowest in the EU. Cyprus also offers an attractive IP Box regime (2.5% effective rate on qualifying IP income) and an extensive double tax treaty network covering 60+ countries, including the UK, US, and all EU member states. Combined with EU membership, this makes Cyprus one of the most tax-efficient EU bases for international crypto operations.

Yes. Under MiCA, Cyprus CASP license holders can passport their crypto services to all 27 EU member states without requiring separate national licences. CySEC is recognized as one of the more accessible MiCA competent authorities in Europe. The passporting process is notification-based — file with CySEC and the host state regulator, then wait for confirmation (typically 1–2 months per state).

Both are EU member states with comparable passporting rights. Cyprus has a lower corporate tax rate (12.5% vs Malta's effective ~5% via refund mechanism), faster processing times (3–6 months vs 6–12 months), and a larger established financial services ecosystem. Malta has a longer VFA track record since 2018. Cyprus is typically preferred for companies prioritizing speed-to-market and operational simplicity.

Yes. CySEC requires genuine physical presence in Cyprus, including a registered office and operational staff. Virtual offices and mail-drop addresses are not accepted. The substance requirement has become stricter under MiCA. At minimum, two Cyprus-resident directors and a local compliance officer are required, supported by a functional office with dedicated space.

The application fee to CySEC is approximately 2,500 EUR, with initial capital requirements ranging from 125,000 EUR to 730,000 EUR depending on your business activities and risk classification. Additional costs include legal fees (5,000-15,000 EUR), compliance consulting (3,000-10,000 EUR), and annual operating expenses such as CySEC supervision fees (around 1,500-3,000 EUR annually). Total first-year costs typically range between 135,000 EUR and 758,500 EUR before operational expenses.

The CySEC review period typically takes 4-6 months from submission of a complete application, though complex cases may extend to 8-9 months. Pre-application preparation and document gathering usually requires 2-3 months, making the total timeline approximately 6-12 months from initial engagement to license issuance. Delays can occur if CySEC requests additional information or clarifications on your compliance framework.

You must maintain a business bank account with a regulated Cypriot or EU bank, and CySEC requires segregation of client funds in dedicated accounts separate from operational funds. As of 2026, many major EU banks have tightened crypto-related banking due to regulatory scrutiny, making it essential to establish banking relationships before applying for your license. Some applicants use specialized banking partners in Cyprus or partner jurisdictions that understand crypto business models.

CySEC requires at least one Compliance Officer, one Money Laundering Reporting Officer (MLRO), and a Board or management body with fit-and-proper individuals; for smaller operations, some roles may overlap. You must also implement an AML/KYC program compliant with FATF recommendations and maintain detailed documentation of governance procedures, risk management policies, and internal audit functions. The Compliance Officer must be independent and have direct access to senior management and the board.

Cyprus faces ongoing international scrutiny regarding AML/CFT compliance and has faced placement on grey lists by the Financial Action Task Force in the past, which can impact banking relationships and business perception. The jurisdiction is also subject to EU regulatory changes that may increase compliance burdens, and some institutional clients or payment processors remain hesitant to work with Cyprus-licensed entities due to reputational concerns. Additionally, banking access remains challenging due to de-risking by major financial institutions.

Your CASP license does not have a fixed expiration date but requires annual compliance reporting and payment of annual supervision fees to CySEC, typically due by March 31st each year. CySEC may also conduct annual compliance assessments and request updated documentation on governance, financial standing, and AML/KYC procedures. Failure to submit annual reports or maintain compliance standards can result in license suspension or revocation.

You must provide certified articles of incorporation, ownership structure documents, CVs and background checks for all beneficial owners and key personnel, a detailed business plan, and a comprehensive compliance manual covering AML/KYC, risk management, and complaints procedures. Additionally, you need audited financial statements (if applicable), proof of initial capital, banking reference letters, and organizational charts with clear governance structures. All documents must be certified or apostilled if originating from non-EU jurisdictions.

Compare European Licences

Related European Crypto Jurisdictions

🇲🇹

Malta VFA

6–12 months5% eff. tax

EU passportAll 27 states

🇬🇮

Gibraltar

4–8 monthsGFSC

◆ KEY METRICS

Cyprus CASP License Requirements

€730,000

Minimum Capital

90–120 days

Processing Timeline

€2,500–€5,000

Annual Authorization Fee

12.5%

Corporate Tax Rate (EU Lowest)

CySEC

Competent Authority

Multi-Activity

Single Authorization for All MiCA Services

◆ APPLICATION JOURNEY

5-Step CySEC CASP Licensing Process

Week 1–2

Pre-Application Consultation

Engage with CySEC to confirm activity classification, governance structure, and compliance roadmap alignment with MiCA Article 60 requirements.

Week 3–6

Dossier Preparation & Submission

Compile AML/CFT policies, IT security framework, organizational charts, CVs of management, financial statements, and capital certification documents; submit to CySEC.

Month 2–3

CySEC Initial Review & Queries

CySEC conducts completeness check and issues information requests (IRs); applicant responds with clarifications and additional documentation within 10–15 business days.

Month 3–4

Substantive Assessment & On-Site Review

CySEC evaluates governance, suitability of directors/shareholders, compliance infrastructure, and technology infrastructure; may conduct on-site inspection of premises and systems.

Month 4 (Day 90–120)

Authorization Decision & Issuance

CySEC issues authorization decision by formal letter; upon approval, applicant pays annual fee (€2,500–€5,000) and receives CASP registration certificate covering authorized activity classes.

Cyprus Crypto License: CySEC CASP Authorisation 2026