Spain Crypto License (Banco de España / CNMV) — CASP Requirements 2026

Switzerland eu flags parliament bern — Spain Crypto License: Banco de España & CNMV Framework 2

Overview

Spain's Dual-Regulator Crypto Framework — MiCA Transition

Spain implemented VASP registration under Royal Decree-Law 7/2021 (transposing the EU 5AMLD), requiring all crypto service providers to register with the Banco de España for AML/CFT purposes. Under MiCA (fully applicable from December 2024), the CNMV (Comisión Nacional del Mercado de Valores) becomes the primary competent authority for CASP authorizations in Spain.

Spain has one of Europe's largest crypto user bases — approximately 5 million users — and an active regulatory dialogue between industry and the CNMV. The CNMV has been actively engaged with crypto regulation since 2021, issuing guidelines on advertising, investor protection, and classification of crypto assets.

Spanish is the world's second most spoken language and the dominant language across Latin America. A Spanish MiCA CASP license, combined with the cultural and linguistic connection, positions Spanish-licensed entities advantageously when approaching regulatory discussions in LatAm markets — even though the MiCA license itself only covers the EU.

Dual registration note: Under the Spanish framework, CNMV CASP authorization and Banco de España VASP registry registration are separate — all crypto companies operating in Spain need both. The Banco de España registration is primarily for AML/CFT oversight, while the CNMV authorization covers investment and market activities. Both must be maintained in good standing.

License Categories

Spain Crypto — Three Regulatory Tracks

Spanish crypto operators must navigate three regulatory requirements: CNMV CASP authorization (MiCA), Banco de España VASP registry, and CNMV advertising registration. Each has separate requirements and timelines.

Track	Regulator	Scope
CASP Authorization (MiCA)	CNMV	All MiCA Article 60 activities: exchange, trading platform, custody, execution, advisory
VASP Registry (AML)	Banco de España	AML/CFT registration required for all VASPs operating in Spain regardless of MiCA status
Advertising Registration	CNMV	Required for crypto ad campaigns targeting 100,000+ Spanish recipients; 10-day advance notice
EU Passport (incoming)	CNMV	EU entities with MiCA licenses from other states can passport into Spain via CNMV notification

Requirements

Spain CASP License — Key Requirements

Entity

Spanish S.L. or S.A. required

Or EU entity passporting into Spain via MiCA notification

Min. Capital

€50,000 – €150,000

Per MiCA category; paid-up capital required at application

Physical Presence

Spain or EU establishment required

Genuine substance in Spain for local applicants; EU passport for EU entities

Compliance Officer & MLRO

Both required

Spanish AML Law 10/2010 compliance required; CNMV-experienced counsel recommended

AML/CFT Framework

Spanish AML Law 10/2010 compliant

Banco de España VASP registry requires AML compliance evidence

Business Plan

CNMV-approved business plan

3-year financial projections; approved by CNMV as part of CASP authorization

BoE Registration

Mandatory — separate from CNMV

Must be registered with Banco de España before or concurrent with CNMV application

Advertising

CNMV notification for mass campaigns

10-day advance notice for campaigns over 100,000 recipients; risk warnings mandatory

Process

How to Get a Spain CASP License — Step by Step

Incorporate Spanish Entity or Prepare EU Passport Notification

Incorporate a Spanish Sociedad Limitada (S.L.) — the most common structure for fintech companies — or prepare an EU passport notification if you already hold a MiCA CASP from another EU state. S.L. incorporation in Spain takes 2–4 weeks via notary. For an S.L., a minimum share capital of €3,006 is required (lower than MiCA capital requirements).

2–4 weeks

File for registration on the Banco de España VASP registry. This is an AML/CFT registration — it requires evidence of the company's AML/CFT framework, compliance officer details, and description of crypto services. The Banco de España VASP registration can be pursued concurrently with the CNMV CASP application and typically takes 4–8 weeks.

4–8 weeks

Prepare CNMV CASP Application Package

Develop the complete CNMV application: business plan with 3-year financials, compliance documentation (AML/CFT policies, IT security, governance), organizational structure with fit & proper declarations for directors and significant shareholders, capital evidence, and description of all planned activities under MiCA Article 60. Documentation should be in Spanish.

6–10 weeks

Submit CNMV Application — Review Period

File the CNMV CASP authorization application along with the application fee. The CNMV reviews the complete application, including background checks on key persons and assessment of the business plan and compliance framework. CNMV review of complete applications typically takes 2–4 months. CNMV may request additional information — respond promptly in Spanish.

2–4 months

CNMV Authorization Issued — Maintain BoE Registration

The CNMV issues the CASP authorization. Commence operations. Maintain the Banco de España VASP registration (annual update required). Ongoing obligations include annual CNMV reports, audited financial statements, AML/CFT annual review, Travel Rule compliance, and CNMV advertising notifications for mass marketing campaigns. EU passporting to other member states can begin immediately.

Authorization and ongoing

Costs

Spain CASP License — Full Cost Breakdown

Item	Details	Approx. Cost
CNMV application fee	Non-refundable CASP authorization fee	€3,000–€10,000
Banco de España VASP registration	Nominal government registration fee	Nominal fee
Company formation (S.L.)	Notary, Registro Mercantil, constitución	€1,500–€3,500
Office lease (Year 1)	Physical office in Madrid or Barcelona	€8,000–€20,000/yr
Legal & compliance	Application preparation, Spanish counsel, policies	€15,000–€35,000
Min. capital	Paid-up capital per MiCA category	€50,000–€150,000
Estimated Year 1 Total (excl. capital)	Setup, regulatory fees, office, professional fees	€35,000–€80,000

FAQ

Spain Crypto License — Common Questions

Yes. Any entity offering crypto asset services to Spanish residents must either hold a Spanish CNMV CASP authorization or passport an EU MiCA license from another EU member state. Additionally, all VASPs must register with the Banco de España for AML/CFT purposes. Operating without both authorizations is a regulatory violation subject to significant fines under Spanish law.

The CNMV (Comisión Nacional del Mercado de Valores) is Spain's securities and financial markets regulator — the equivalent of the SEC (US) or FCA (UK) for Spain. Under MiCA, it is the competent authority for authorizing and supervising Crypto Asset Service Providers (CASPs) in Spain. The CNMV has been actively engaged with crypto regulation since 2021 and issues guidance on crypto advertising, investor protection, and asset classification.

A Spanish MiCA CASP license covers EU market access only — it does not automatically authorize operations in Latin American countries, which have separate regulatory frameworks (Brazil's BCB/CVM, Mexico's CNBV, Colombia's SFC, etc.). However, a Spanish entity provides linguistic and cultural alignment, and some LatAm regulators look favorably on EU-regulated firms during their own licensing processes. A Spanish entity is often the best EU home for businesses with LatAm strategic interests.

Cyprus has lower corporate tax (12.5% vs Spain's 25%), and CySEC is often considered more streamlined than CNMV for CASP applications. Both offer comparable EU passporting rights under MiCA. Spain is preferred for companies with genuine business presence in Spain, Spanish-language market focus, or significant operations in the Spanish economy. For pure regulatory efficiency, Cyprus is typically faster and cheaper.

The CNMV issued Circular 1/2022 requiring registration of crypto advertising campaigns targeting more than 100,000 people in Spain. All mass crypto advertising must include mandatory risk warnings in a prescribed format. The CNMV must be notified 10 days before a large-scale campaign. This applies to all media — TV, online, social media, influencer marketing, and email campaigns. Non-compliant advertising can result in significant CNMV fines and reputational damage.

License application fees to the CNMV typically range from EUR 3,000 to EUR 10,000 depending on the service type, with additional costs for legal counsel, compliance infrastructure, and initial capital requirements varying by activity. Capital requirements for crypto exchanges or custodians generally start at EUR 125,000 minimum, while payment service providers may require EUR 50,000. Total first-year costs including compliance setup usually range from EUR 50,000 to EUR 200,000, with ongoing annual compliance costs of EUR 15,000 to EUR 50,000.

The CNMV licensing process generally takes 3 to 6 months from submission of a complete application, though complex cases involving novel business models may extend to 9 months. The timeline begins after you submit all required documentation, and the CNMV conducts regulatory assessment, background checks on beneficial owners, and compliance framework review. Incomplete applications result in requests for additional information, which can add 1 to 3 months to the process.

Spanish CNMV-licensed crypto firms can access banking services from Spanish and EU-regulated banks, though many traditional banks remain cautious about crypto sector relationships. Most licensed operators work with specialized crypto-friendly banks in Spain or establish banking relationships through EU jurisdictions like Malta or Portugal. Bank account opening typically requires proof of CNMV authorization, compliance policies, AML/KYC procedures, and ongoing regulatory reporting, with approval timelines of 4 to 12 weeks depending on the bank's crypto exposure policies.

CNMV penalties for compliance violations range from EUR 10,000 to EUR 3,000,000 depending on severity, with additional personal liability for directors and significant reputational damage. Common violation areas include inadequate AML/KYC procedures, unauthorized marketing, failure to segregate customer assets, and insufficient capital buffers. Serious breaches can result in license suspension or revocation, civil claims from customers, and criminal prosecution for money laundering or fraud.

Spanish crypto businesses are subject to corporate income tax (Impuesto sobre Sociedades) at 25% on profits, plus VAT treatment that became clearer in 2026 with certain exemptions for crypto services under specific conditions. Employees' cryptocurrency compensation may be taxed as income, and businesses must declare all virtual asset holdings and transactions to Spanish tax authorities (Agencia Tributaria). Spain does not currently allow special crypto tax regimes like some jurisdictions, so standard corporate taxation applies alongside detailed regulatory reporting requirements.

The CNMV requires certified copies of identification documents, proof of residence, beneficial ownership declarations for all stakeholders owning more than 10%, and detailed source-of-funds documentation for initial capital. For corporate applicants, you must provide articles of association, shareholder registers, organizational charts, and background checks for all directors and key management personnel. Documentation must demonstrate compliance with Spanish anti-money laundering requirements and include certified translations into Spanish if original documents are in other languages.

Spain's CNMV licensing process is more stringent and time-intensive than Malta's (3-6 months vs. 6-12 weeks), with higher capital requirements but offering stronger institutional credibility in continental Europe. Portugal offers faster timelines and lower costs but less established regulatory precedent for crypto activities compared to Spain's developed framework. Spanish licensing provides broader EU recognition and access to Spanish banking but requires more detailed compliance infrastructure upfront, while Malta and Portugal may appeal to businesses seeking faster market entry with lower initial investment.

Compare European Licences

Related European Crypto Jurisdictions

6–12 months5% eff. tax

🇪🇺

EU MiCA

EU passportAll 27 states

🇩🇪

Germany BaFin

12–18 monthsMiCA

◆ KEY METRICS

Spain Crypto License Requirements

€300,000

Minimum Capital (CASP)

90–120 days

CNMV CASP Processing

€5,000–€15,000

Annual CNMV Fee (CASP)

19% / 25%

Corporate Tax Rate

CNMV + Banco de España

Primary Regulators

EU Passporting

Key Benefit Post-MiCA

◆ PROCESS TIMELINE

Spain Licensing Journey

Week 1–2

Banco de España VASP Registration

Submit VASP registration form with company details, ownership structure, and AML/CFT policies. Immediate provisional registry listing.

Week 3–4

CNMV CASP Authorization Application

File formal CASP application with governance documents, compliance framework, risk management, and proof of €300,000 capital.

Month 2–3

CNMV Due Diligence Review

CNMV conducts completeness check, requests supplementary documentation on organizational structure, operational procedures, and financial reporting systems.

Month 3–4

CNMV Advertising Registration

Register all marketing materials and advertising channels with CNMV compliance team. Receive approval or modification requests.

Month 4

CASP Authorization & Full License Issuance

CNMV issues formal CASP authorization decision. Banco de España updates VASP registry to full status. Operational license active across EU under MiCA.

Spain Crypto License: Banco de España & CNMV Framework 2026