What is the CNMV in Spain?

The CNMV (Comisión Nacional del Mercado de Valores) is Spain's securities and financial markets regulator. Under MiCA, it is the competent authority for authorizing and supervising Crypto Asset Service Providers (CASPs) in Spain.

Can I use a Spanish crypto licence to serve Latin American markets?

A Spanish MiCA CASP licence covers EU market access only — it does not automatically authorize operations in Latin American countries (which have separate regulatory frameworks). However, a Spanish entity provides linguistic and cultural alignment, and some LatAm countries look favorably on EU-regulated firms in their licensing processes.

How does Spain compare to Cyprus for EU crypto licensing?

Cyprus is faster (3–6 months, with CySEC being more streamlined), has lower corporate tax (12.5% vs Spain's 25%), and is often preferred for speed-to-market. Spain is preferred for companies with genuine business or market presence in Spain or wanting access to the Spanish-speaking market.

What advertising restrictions apply to crypto in Spain?

The CNMV issued circular rules in 2022 requiring registration of crypto advertising campaigns targeting more than 100,000 people in Spain. Campaigns must include risk warnings. CNMV must be notified 10 days before a large-scale crypto ad campaign. This applies to all media including social media.

Spain Crypto Licence (Banco de España /

Overview

Spain's Dual-Regulator Crypto Framework — MiCA Transition

Spain implemented VASP registration under Royal Decree-Law 7/2021 (transposing the EU 5AMLD), requiring all crypto service providers to register with the Banco de España for AML/CFT purposes. Under MiCA (fully applicable from December 2024), the CNMV (Comisión Nacional del Mercado de Valores) becomes the primary competent authority for CASP authorisations in Spain.

Spain has one of Europe's largest crypto user bases — approximately 5 million users — and an active regulatory dialogue between industry and the CNMV. The CNMV has been actively engaged with crypto regulation since 2021, issuing guidelines on advertising, investor protection, and classification of crypto assets.

Spanish is the world's second most spoken language and the dominant language across Latin America. A Spanish MiCA CASP licence, combined with the cultural and linguistic connection, positions Spanish-licensed entities advantageously when approaching regulatory discussions in LatAm markets — even though the MiCA licence itself only covers the EU.

Dual registration note: Under the Spanish framework, CNMV CASP authorisation and Banco de España VASP registry registration are separate — all crypto companies operating in Spain need both. The Banco de España registration is primarily for AML/CFT oversight, while the CNMV authorisation covers investment and market activities. Both must be maintained in good standing.

Licence Categories

Spain Crypto — Three Regulatory Tracks

Spanish crypto operators must work through three regulatory requirements: CNMV CASP authorisation (MiCA), Banco de España VASP registry, and CNMV advertising registration. Each has separate requirements and timelines.

Track	Regulator	Scope
CASP Authorisation (MiCA)	CNMV	All MiCA Article 60 activities: exchange, trading platform, custody, execution, advisory
VASP Registry (AML)	Banco de España	AML/CFT registration required for all VASPs operating in Spain regardless of MiCA status
Advertising Registration	CNMV	Required for crypto ad campaigns targeting 100,000+ Spanish recipients; 10-day advance notice
EU Passport (incoming)	CNMV	EU entities with MiCA licences from other states can passport into Spain via CNMV notification

Requirements

Spain CASP Licence — Key Requirements

Entity

Spanish S.L. or S.A. required

Or EU entity passporting into Spain via MiCA notification

Min. Capital

€50,000 – €150,000

Per MiCA category; paid-up capital required at application

Physical Presence

Spain or EU establishment required

Genuine substance in Spain for local applicants; EU passport for EU entities

Compliance Officer & MLRO

Both required

Spanish AML Law 10/2010 compliance required; CNMV-experienced counsel recommended

AML/CFT Framework

Spanish AML Law 10/2010 compliant

Banco de España VASP registry requires AML compliance evidence

Business Plan

CNMV-approved business plan

3-year financial projections; approved by CNMV as part of CASP authorisation

BoE Registration

Mandatory — separate from CNMV

Must be registered with Banco de España before or concurrent with CNMV application

Advertising

CNMV notification for mass campaigns

10-day advance notice for campaigns over 100,000 recipients; risk warnings mandatory

Process

How to Get a Spain CASP Licence — Step by Step

1

Incorporate Spanish Entity or Prepare EU Passport Notification

Incorporate a Spanish Sociedad Limitada (S.L.) — the most common structure for fintech companies — or prepare an EU passport notification if you already hold a MiCA CASP from another EU state. S.L. incorporation in Spain takes 2–4 weeks via notary. For an S.L., a minimum share capital of €3,006 is required (lower than MiCA capital requirements).

2–4 weeks

2

Register with Banco de España VASP Registry

File for registration on the Banco de España VASP registry. This is an AML/CFT registration — it requires evidence of the company's AML/CFT framework, compliance officer details, and description of crypto services. The Banco de España VASP registration can be pursued concurrently with the CNMV CASP application and typically takes 4–8 weeks.

4–8 weeks

3

Prepare CNMV CASP Application Package

Develop the complete CNMV application: business plan with 3-year financials, compliance documentation (AML/CFT policies, IT security, governance), organizational structure with fit & proper declarations for directors and significant shareholders, capital evidence, and description of all planned activities under MiCA Article 60. Documentation should be in Spanish.

6–10 weeks

4

Submit CNMV Application — Review Period

File the CNMV CASP authorisation application along with the application fee. The CNMV reviews the complete application, including background checks on key persons and assessment of the business plan and compliance framework. CNMV review of complete applications typically takes 2–4 months. CNMV may request additional information — respond promptly in Spanish.

2–4 months

5

CNMV Authorisation Issued — Maintain BoE Registration

The CNMV issues the CASP authorisation. Commence operations. Maintain the Banco de España VASP registration (annual update required). Ongoing obligations include annual CNMV reports, audited financial statements, AML/CFT annual review, Travel Rule compliance, and CNMV advertising notifications for mass marketing campaigns. EU passporting to other member states can begin immediately.

Authorisation and ongoing

Costs

Spain CASP Licence — Full Cost Breakdown

Item	Details	Approx. Cost
CNMV application fee	Non-refundable CASP authorisation fee	€3,000–€10,000
Banco de España VASP registration	Nominal government registration fee	Nominal fee
Company formation (S.L.)	Notary, Registro Mercantil, constitución	€1,500–€3,500
Office lease (Year 1)	Physical office in Madrid or Barcelona	€8,000–€20,000/yr
Legal & compliance	Application preparation, Spanish counsel, policies	€15,000–€35,000
Min. capital	Paid-up capital per MiCA category	€50,000–€150,000
Estimated Year 1 Total (excl. capital)	Setup, regulatory fees, office, professional fees	€35,000–€80,000

FAQ

Spain Crypto Licence — Common Questions

Yes. Any entity offering crypto asset services to Spanish residents must either hold a Spanish CNMV CASP authorisation or passport an EU MiCA licence from another EU member state. Additionally, all VASPs must register with the Banco de España for AML/CFT purposes. Operating without both authorisations is a regulatory violation subject to significant fines under Spanish law.

The CNMV (Comisión Nacional del Mercado de Valores) is Spain's securities and financial markets regulator — the equivalent of the SEC (US) or FCA (UK) for Spain. Under MiCA, it is the competent authority for authorizing and supervising Crypto Asset Service Providers (CASPs) in Spain. The CNMV has been actively engaged with crypto regulation since 2021 and issues guidance on crypto advertising, investor protection, and asset classification.

A Spanish MiCA CASP licence covers EU market access only — it does not automatically authorize operations in Latin American countries, which have separate regulatory frameworks (Brazil's BCB/CVM, Mexico's CNBV, Colombia's SFC, etc.). However, a Spanish entity provides linguistic and cultural alignment, and some LatAm regulators look favorably on EU-regulated firms during their own licensing processes. A Spanish entity is often the best EU home for businesses with LatAm strategic interests.

Cyprus has lower corporate tax (12.5% vs Spain's 25%), and CySEC is often considered more streamlined than CNMV for CASP applications. Both offer comparable EU passporting rights under MiCA. Spain is preferred for companies with genuine business presence in Spain, Spanish-language market focus, or significant operations in the Spanish economy. For pure regulatory efficiency, Cyprus is typically faster and cheaper.

The CNMV issued Circular 1/2022 requiring registration of crypto advertising campaigns targeting more than 100,000 people in Spain. All mass crypto advertising must include mandatory risk warnings in a prescribed format. The CNMV must be notified 10 days before a large-scale campaign. This applies to all media — TV, online, social media, influencer marketing, and email campaigns. Non-compliant advertising can result in significant CNMV fines and reputational damage.

Compare European Licences