🇲🇹 Malta · MFSA · Virtual Financial Assets Act

Malta Crypto Licence: VFA Act & MFSA Framework 2026

Malta was the world's first country to create a complete blockchain regulatory framework — the Virtual Financial Assets Act (2018). Regulated by the MFSA, Malta VFA licences offer EU membership, English common law, and a MiCA-aligned regime, making Malta one of Europe's leading jurisdictions for crypto exchanges, custodians, and DeFi projects seeking EU market access.

6–12 mo
Timeline
5% eff.
Corp tax
EU
Passport
MFSA
Regulator
Flag of Malta
At a Glance
Regulator MFSA
Framework VFA Act (2018)
Licence categories Class 1–4
Min. capital €50k–€730k
EU passporting Yes (MiCA)
Corp tax 5% effective
Difficulty Medium–High

Why Malta Is Europe's Pioneer for Crypto Regulation

The Malta Virtual Financial Assets Act (VFA Act, 2018) was the world's first complete statutory framework for cryptocurrency businesses. The MFSA (Malta Financial Services Authority) licences and supervises VFA Service Providers across 4 classes. Malta is an EU member state, offering MiCA compliance and passporting rights across all 27 EU member states.

Malta's corporate tax is nominally 35% but an effective 5% rate is achieved via a shareholder refund mechanism — making it highly tax-efficient for international holding structures. The VFA framework is being transitioned to MiCA, with grandfathering provisions for existing VFA licensees. Malta's English-language legal system, EU status, and established financial services sector provide a strong operational base.

Malta has particular strength in attracting crypto exchanges, token issuers, and DeFi platforms. The island's regulatory track record with virtual assets since 2018 means MFSA examiners have deep experience — unlike newer regulators in some other EU states.

MiCA transition note: Existing Malta VFA licensees are being transitioned to MiCA CASP authorisations. New applicants in 2025 may apply directly under MiCA via the MFSA. VFA Agent requirements continue to apply. Contact us for the current MFSA application pathway.

Malta VFA — Class 1 to Class 4

The VFA Act establishes four licence classes based on the nature and risk level of activities. Most crypto exchanges require Class 2 or Class 3; custodians typically need Class 4.

Class Activities Min. Capital
Class 1 Receiving and transmitting orders; investment advice — no client fund-holding €50,000
Class 2 Execution of orders on behalf of clients €125,000
Class 3 Dealing on own account, underwriting of VFAs €730,000
Class 4 Custodian services, collective investment scheme management €730,000

Malta VFA Licence — Key Requirements

Entity
Maltese company required
Private limited liability company (Ltd.) incorporated in Malta
VFA Agent
Mandatory — MFSA-registered
Must co-sign application; acts as regulated intermediary with MFSA
Directors
Min. 2 Malta-resident directors (or 1 with approval)
Fit & proper assessment; relevant industry expertise required
MLRO & Compliance Officer
Both required
Malta FIAU AML/CFT framework compliance required
AML/CFT
PMLA and FIAU guidelines compliant
Malta-specific AML directives; FATF Travel Rule compliance
Whitepaper (if token issuer)
MFSA whitepaper registration
Required for all VFA token issuances; MFSA review required
Systems Audit
MFSA IT/technology assessment
Technology description and security controls required at application
Capital
€50,000 – €730,000 (by class)
Paid-up capital held in Malta; working capital additional

How to Get a Malta VFA Licence — Step by Step

1
Engage a Registered VFA Agent

The mandatory first step is engaging an MFSA-registered VFA Agent (typically a law firm or specialised advisory firm in Malta). The VFA Agent reviews your business model, determines the applicable licence class, and co-signs the application. Selecting an experienced VFA Agent is the single most important factor in application success and speed.

Week 1–2
2
Prepare Application Package

Working with the VFA Agent, develop the complete application: detailed business plan, AML/CFT policies per PMLA and FIAU guidelines, IT systems description and security architecture, financial projections, governance structure, and fit & proper documentation for all UBOs and directors. This is typically the longest preparation phase.

Weeks 2–10
3
VFA Agent Submits to MFSA for Review

The VFA Agent formally submits the application package to the MFSA. The MFSA acknowledges receipt and assigns a case officer. During the review period, MFSA may request clarifications — all responses are coordinated through the VFA Agent. Timely and complete responses are essential to avoid delays.

4–8 weeks MFSA review
4
In-Principle Approval — Finalize Setup and Capital

Upon MFSA in-principle approval, complete the Maltese company incorporation (if not already done), inject the required minimum capital, establish the physical office, open a Maltese bank account, and appoint all required compliance personnel. Submit evidence to MFSA for final review.

4–8 weeks post-IPA
5
Full Licence Issued — Commence Operations

MFSA issues the full VFA Service Provider licence. Commence operations. Ongoing obligations include: annual MFSA returns, audited financial statements, AML/CFT annual review, Travel Rule compliance, and immediate notification of material changes. The VFA Agent typically continues as ongoing regulatory liaison.

Licence issuance

Malta VFA Licence — Full Cost Breakdown

Item Details Approx. Cost
MFSA application fee By licence class (non-refundable) €3,000–€15,000
VFA Agent fees Annual retainer for ongoing compliance liaison €10,000–€25,000/yr
Company formation Malta Ltd. incorporation, constitutional docs €2,000–€5,000
Office lease (Year 1) Physical office in Malta (Valletta or Sliema) €8,000–€20,000/yr
Legal & compliance preparation Application package, AML/CFT framework, policies €15,000–€40,000
Min. capital (Class 1) Paid-up share capital retained in entity €50,000+
Estimated Year 1 Total (excl. capital) Setup, agent, regulatory fees, office, professional fees €40,000–€120,000

Malta VFA Licence — Common Questions

A VFA (Virtual Financial Assets) Service Provider licence issued by the Malta Financial Services Authority (MFSA) under the VFA Act 2018. It authorises companies to provide crypto exchange, brokerage, custody, and advisory services in Malta and the EU. The VFA framework is transitioning to MiCA, and new applicants may apply directly under MiCA through the MFSA as of 2025.
Malta's nominal corporate tax rate is 35%, but foreign shareholders receive a 6/7 refund on dividends, resulting in an effective 5% tax rate. This makes Malta one of the lowest-tax EU jurisdictions for international businesses. The refund mechanism requires proper dividend distribution — specialist Maltese tax advice is essential to structure this correctly.
Yes. Under MiCA, Malta-licensed crypto asset service providers can passport their services across all 27 EU member states without needing separate licences in each country. This is Malta's key competitive advantage. Passporting requires notification to the MFSA and the host member state regulator — the process is procedural, not a new application.
A VFA Agent is an MFSA-registered intermediary (law firm or advisory firm) required to sponsor all VFA applications. The VFA Agent co-signs the application, verifies compliance, and acts as the regulated interface between the applicant and MFSA. Appointing a qualified VFA Agent is mandatory — no application can be submitted without one. VFA Agent fees typically run €10,000–€25,000/year for the ongoing retainer.
The process takes 6–12 months from engagement of a VFA Agent to receipt of the full licence. MFSA review of complete applications typically takes 4–8 months. Well-prepared applications with experienced VFA Agents can complete in 6 months. Applications with incomplete documentation or novel business models will take longer — the MFSA is thorough and does not rush reviews.

Related European Crypto Jurisdictions