Home› Crypto Licences› Crypto Wallet License
Last updated: April 2026
CRYPTO LICENSING · WALLET REGULATION · CUSTODIAL SERVICES

Crypto Wallet License: Custodial Wallet Provider Licensing 2026

Bitcoin coins on dollar bills — Crypto Wallet License: Custodial Wallet Provider Licensing 2

Not all crypto wallets require a license — but custodial wallet providers almost universally do. If your business holds private keys on behalf of users, you are providing crypto custody services and will need a VASP license, custody authorization, or similar regulated status in most jurisdictions. Non-custodial wallet software is generally unregulated, but the line is increasingly blurred under MiCA and FATF guidance.

Custodial
Custodial wallets = regulated in 80+ jurisdictions
3–12 mo
Typical licensing timeline by jurisdiction
$50K–$1M
Minimum capital requirements range
MiCA Art.3
EU regulatory basis for custodial wallet services
At a Glance
License Type Custody VASP
Regulator Varies by jurisdiction
MiCA Classification CASP required
Non-custodial Unregulated
Difficulty Medium-High
Bitcoin ethereum ripple crypto coins — Crypto Wallet License: Custodial Wallet Provider Licensing 2
Overview

Custodial vs Non-Custodial: The Regulatory Dividing Line

The single most important distinction in crypto wallet regulation is whether a wallet provider holds custody of user funds. A custodial wallet is one where the service provider stores and manages the private keys on behalf of the user — meaning the provider has the technical ability to transact with the user's assets. A non-custodial wallet (also called a self-custody or self-hosted wallet) is software that enables users to manage their own keys, with the provider having no access to funds.

Regulators worldwide have consistently held that custodial wallet provision constitutes a regulated financial activity. FATF Recommendation 15 explicitly includes "safeguarding and/or administration of virtual assets or instruments enabling control over virtual assets" as a VASP activity. The EU's MiCA Regulation Article 3(1)(17) defines "providing custody and administration of crypto-assets on behalf of clients" as a CASP service requiring authorization.

Non-custodial wallet software providers occupy a different regulatory position. The EU MiCA Recital 22 explicitly states that software providers of non-custodial wallets are not VASPs. However, the boundary is increasingly contested: regulators are scrutinizing wallet providers that offer integrated swap features, fiat on-ramps via third-party APIs, staking delegation services, or any activity that creates a custodial relationship — even temporarily.

For businesses operating at the custodial/non-custodial boundary — such as MPC wallet providers, smart contract wallets, or social recovery wallets — a careful jurisdictional analysis is essential before assuming an unregulated status applies.

Who Needs a License

Which Wallet Businesses Require Licensing?

If your business model involves holding, controlling, or managing crypto assets on behalf of third parties, licensing is required in virtually every regulated jurisdiction. The following business types typically require a custodial wallet or VASP license:

Business Type
Custodial Mobile Wallets
Apps where the provider stores private keys server-side on behalf of users
Business Type
Exchange Wallets
On-exchange wallets provided as part of a crypto trading platform
Business Type
Institutional Cold Storage
Third-party cold storage vaulting services for corporate or fund clients
Business Type
MPC Wallet Providers
Multi-party computation wallets where the provider holds one or more key shares
Business Type
Multi-Sig Providers
Wallets requiring provider co-signature to authorize transactions
Business Type
Hardware Wallet Manufacturers with Custody
Hardware wallet vendors offering optional cloud key backup or recovery services
Business Type
DeFi with Custody Elements
DeFi protocols or front-ends that hold user keys or funds in smart contracts under operator control
Business Type
Hybrid Custodial Solutions
Wallets offering both custodial and self-custody modes for the same user base
Top Jurisdictions

Best Jurisdictions for a Crypto Wallet License

The right jurisdiction depends on your target market, capital availability, and desired regulatory credibility. EU-based licenses offer MiCA passporting, while offshore jurisdictions minimize capital requirements and setup costs. Below are the leading options for custodial wallet providers in 2025.

Jurisdiction License Type Timeline Min Capital Corp Tax
Lithuania (FCIS) Custody VASP 2–4 months €125,000 15%
Estonia (FIU) Custody VASP 3–6 months €100,000 20%
UAE ADGM (FSRA) Custody Authorization 6–12 months $250,000 0%
Singapore (MAS) DTSP — Custody 6–18 months S$250,000 17%
Seychelles (FSA) Custody VASP 2–4 months $50,000 0%
Cayman Islands (CIMA) VASP Registration 4–8 months $100,000 0%
Requirements

Core Requirements for a Custodial Wallet License

While requirements vary by jurisdiction, the following are universally expected from custodial wallet license applicants. Preparing these thoroughly before submission is the single most important factor in reducing processing time.

Requirement
Registered Entity
Licensed entity must be incorporated in the licensing jurisdiction; branch structures may be accepted in some cases
Requirement
Minimum Capital
Paid-up share capital as prescribed by jurisdiction; $50K–$1M range depending on license tier
Requirement
Segregated Wallets
Client assets must be operationally segregated from company operating funds at all times
Requirement
Key Management Policy
Documented procedures for key generation, storage (HSM/MPC), backup, and emergency recovery
Requirement
AML/CFT Program
Full AML policy, KYC/KYB procedures, Transaction Monitoring, Suspicious Activity Reporting
Requirement
Insurance
Crime insurance or custody insurance required by some jurisdictions (UAE ADGM, Singapore); recommended by all
Requirement
IT Security Framework
Penetration testing, vulnerability assessment, SOC 2 or ISO 27001 alignment expected by top-tier regulators
Requirement
Business Plan
2–3 year financial projections, operational model, product description, management team CVs
Application Process

How to Obtain a Crypto Wallet License

Obtaining a custodial wallet license is a structured process that rewards thorough preparation. Rushing the submission without complete documentation is the most common cause of regulatory delays. Allow 4–8 weeks for preparation before formal submission.

1
Choose Jurisdiction
Assess target markets, capital availability, operational requirements, and desired regulatory credibility. For EU market access, Lithuania or Estonia under MiCA transition are the fastest routes. For offshore operations with minimal capital, Seychelles or Cayman Islands are the most cost-effective.
Week 1–2
2
Incorporate Entity
Register the licensed company in the chosen jurisdiction. Open a corporate bank account with the required minimum capital paid in. Appoint local directors or a compliance officer if required. Obtain a registered office address.
Week 2–6
3
Draft Key Management Policy & AML Framework
Prepare the key management policy covering HSM/MPC architecture, cold storage ratios, signing procedures, and recovery protocols. Draft the full AML/CFT policy suite including KYC procedures, transaction monitoring rules, Travel Rule compliance, and suspicious activity reporting procedures.
Week 4–10
4
Submit Application
Compile and submit the complete application package to the regulator. Respond promptly to any regulator questions or requests for additional information (RFIs). Engage a local liaison agent where required or recommended.
Months 2–8 (jurisdiction dependent)
5
Obtain License & Launch
Upon approval, receive your wallet provider authorization. Implement ongoing compliance obligations: annual audits, regulatory reporting, AML transaction monitoring, Travel Rule compliance for transfers over threshold, and insurance renewal. Begin operations and onboard clients.
Post-approval
Cost Breakdown

What Does a Crypto Wallet License Cost?

Total cost depends heavily on jurisdiction and whether you engage external advisors. The table below shows indicative ranges for the most popular custodial wallet license jurisdictions in 2025.

Cost Component Seychelles Lithuania UAE ADGM
State / Regulatory Fees $5,000–$10,000 €1,500–€3,000 $15,000–$30,000
Legal & Advisory Fees $10,000–$20,000 €15,000–€30,000 $30,000–$60,000
IT Security Audit $5,000–$15,000 €5,000–€15,000 $10,000–$25,000
Minimum Capital (locked) $50,000 €125,000 $250,000
Total Estimated Range $70K–$95K €146K–€173K $305K–$365K
◆ MARKET OVERVIEW

Global Custodial Wallet Licensing Landscape

47
Jurisdictions with active custodial wallet frameworks (2026)
90–180
Days average approval timeline across EU/UK
CHF 50,000–500,000
Initial licensing fees (jurisdiction dependent)
CHF 2–50M
Minimum capital requirements range
28
EU/EEA jurisdictions under MiCA passporting (2026)
35%
Market share held by licensed custodians in DACH region
◆ STRATEGIC OPTIONS

EU MiCA License vs. Offshore Setup

EU MiCA (Switzerland/Liechtenstein Hub)
Approval Timeline 120–180 days
Setup Costs CHF 150,000–400,000
Minimum Capital CHF 2–5M (tier-dependent)
Annual Compliance CHF 80,000–200,000
Market Access 28 EEA passporting markets
Regulatory Credibility Tier 1 / Highest
Offshore (Malta/Dubai/Singapore)
Approval Timeline 45–90 days
Setup Costs CHF 80,000–180,000
Minimum Capital CHF 500K–2M (variable)
Annual Compliance CHF 40,000–100,000
Market Access Limited / Jurisdiction-specific
Regulatory Credibility Tier 2 / Conditional
FAQ

Crypto Wallet License Frequently Asked Questions

Generally, no. Non-custodial wallet software, where users retain control of their own private keys, is not considered a regulated service in most jurisdictions. Regulators including FATF and the EU under MiCA distinguish between software providers and custodial service providers. However, if your non-custodial wallet integrates fiat on-ramps, facilitates exchanges, or connects to regulated services, those specific activities may be regulated independently.
The most cost-effective jurisdictions for a custodial wallet license are Seychelles (FSA, ~$50K minimum capital, $15K–$30K total setup cost) and Lithuania (FCIS custody VASP, €125K capital, 2–4 months). Both offer recognized regulatory frameworks suitable for international operations, though EU passporting only applies to Lithuanian MiCA-equivalent authorizations.
Yes. Under MiCA (Markets in Crypto-Assets Regulation), custodial wallet providers are classified as Crypto-Asset Service Providers (CASPs) under Article 3(1)(17). Providing custody and administration of crypto-assets on behalf of clients requires CASP authorization from an EU member state regulator. Non-custodial wallet software providers are explicitly excluded from MiCA's scope under Recital 22.
A compliant key management policy for a custodial wallet provider should document: private key generation procedures (HSM or MPC-based), cold vs. hot wallet segregation ratios, signing authority and threshold requirements (multi-sig), key backup and recovery procedures, access controls and personnel authorization, incident response for key compromise, and audit trail requirements. Most regulators expect at least 95% of client assets held in cold storage.
In many jurisdictions, yes. A VASP license or CASP authorization typically covers both exchange and custody/wallet services under a single authorization. In Lithuania, Estonia, and most EU jurisdictions, you can include custody of crypto-assets as an activity within your VASP registration. Some jurisdictions (like Germany BaFin or Switzerland FINMA for institutional custody) require separate or additional authorization for custody activities.
The timeline typically ranges from 4-8 months depending on the complexity of your application and FINMA's review capacity. Initial application assessment takes 2-3 months, followed by clarification requests and on-site inspections which can add another 2-5 months. Expedited processing is not available, but early engagement with FINMA can help identify issues before formal submission.
Annual compliance costs range from CHF 50,000 to CHF 200,000 depending on your asset volumes, number of users, and technological complexity. License renewal occurs every 3 years and requires submitting updated documentation and audit reports. Additional costs include mandatory external audits (CHF 20,000-40,000 annually) and compliance officer salaries (typically CHF 80,000-150,000 per year).
Major Swiss banks like Sygnum, Crypto Finance, and Incore Bank actively serve licensed wallet providers, though most require minimum transaction volumes of CHF 1 million monthly. Regional cantonal banks in Zug and Zurich are increasingly crypto-friendly but conduct stricter due diligence on wallet licensees. Expect 2-3 months for banking relationship setup and annual account review fees of CHF 10,000-25,000.
FINMA requires cyber liability insurance with minimum coverage of CHF 5-10 million depending on assets under management, plus professional indemnity insurance of CHF 2-5 million. Cold storage security and theft insurance is also mandatory with minimum CHF 1 million coverage. Most specialized insurers in Zug charge CHF 15,000-50,000 annually for comprehensive coverage.
Wallet operators are classified as financial intermediaries and subject to corporate income tax on service fees, which range from 12-18% depending on canton (Zug offers preferential rates around 12%). Value-added tax (VAT) at 8.1% applies to wallet services in 2026. Employees must be registered with Swiss social insurance, adding approximately 10.6% to payroll costs.
FINMA requires complete audit trails for all transactions, customer identification records (KYC/AML documentation), custody verification reports, and monthly compliance certifications. You must maintain segregated accounting records, internal control testing results, and incident logs for minimum 7 years. External auditors conduct unannounced reviews, and failure to produce documentation within 5 business days can result in fines up to CHF 500,000.
Zug licenses offer faster approval (4-8 months versus 6-12 for MiCA), lower ongoing compliance costs due to cantonal tax incentives, and access to Switzerland's established banking infrastructure. However, MiCA passporting allows EU market access directly, whereas Zug licensees need separate MiCA authorization to serve EU customers. For 2026, Zug remains optimal if your customer base is primarily Switzerland and non-EU jurisdictions.
Related Licenses & Jurisdictions

Explore Related Pages

🏛️
VASP License
Complete guide80+ jurisdictions
🔐
Custody License
Institutional grade6–18 months
🇱🇹
Lithuania FCIS
EU MiCA2–4 months
🇦🇪
UAE ADGM
FSRA custody0% tax

Get Your Wallet License

Our team advises custodial wallet providers on the optimal jurisdiction and guides the full application process. Fixed fees, 400+ licenses obtained.

Free Consultation →
Quick Facts
Activity Custodial Wallet
License Category VASP / CASP
Fastest Option Seychelles (2–4 mo)
EU Option Lithuania MiCA
Min Capital (low) $50,000
Non-custodial Generally unregulated
Compliance Notes
MiCA Article Art.3(1)(17)
FATF Scope Rec. 15 (custody)
Travel Rule Applies to transfers
Cold Storage ≥95% recommended
Practitioner Insight

Practical Licensing Insight

Based on CryptoLicenses.net consulting data, 2024-2026

MH
Dr. Marcus Hartmann
Senior Licensing Consultant · LL.M. International Financial Law
22 years in financial services regulation. Advised 400+ crypto licensing mandates across 60+ jurisdictions. Based in Zug, Switzerland.
Free Consultation

Ready to Get Licensed?

Tell us about your project and we'll identify the right jurisdiction, outline the requirements, and give you a realistic cost estimate — at no charge.

  • 🇨🇭 Swiss-registered firm, Zug
  • ⚡ Response within a few hours
  • 🔒 Strictly confidential
  • ✓ 80+ jurisdictions covered

Confidential · No obligation · No spam