Organized document folders on a desk, crypto license application timeline in 2026
Guides: Licensing Process

How Long Does It Take to Get a Crypto License? Timelines by Jurisdiction in 2026

Most crypto licenses take six to twelve months end to end. The statutory review clock is shorter, but it only starts once your file is complete. This guide breaks the timeline into stages, compares fast jurisdictions like Lithuania against slow ones like the New York BitLicense, and explains MiCA's 25 plus 40 working-day rule for 2026.

Reading time~9 minutes
Last updatedJune 2026
CategoryLicensing Process

Meet Dr. Marcus Hartmann

Dr. Marcus Hartmann, Senior Crypto Licensing Advisor
Dr. Marcus Hartmann
Senior Licensing Advisor · Zug, Switzerland
LL.M. International Financial Law · Dr. iur. · Zurich Bar

Dr. Marcus Hartmann has spent over two decades at the intersection of financial law and emerging technology. Based in Zug, Switzerland's Crypto Valley, he has guided exchanges, custodians, and institutional investors through the full VASP and CASP licensing journey, where managing the timeline is often the difference between a launch on schedule and one that slips by quarters.

He has run licensing projects under MiCA, the New York BitLicense, the Singapore MAS regime, and FATF-aligned frameworks across the Gulf and Asia, and advises founders on jurisdiction selection where review speed, banking access, and market credibility have to be balanced across more than 60 jurisdictions.

22 years in financial services regulation
400+ crypto licensing mandates across 60+ jurisdictions
Certified AML Officer (ACAMS), FINMA-registered
Fluent in English, German, and French
View Full Profile →
Quick Answer · How Long a Crypto License Takes

Most crypto licenses take six to twelve months end to end, covering preparation, submission, regulator review, and post-license setup. The formal review clock is shorter, roughly three months under MiCA, but it only starts once your application is complete. Fast jurisdictions like Lithuania clear in three to six months; the New York BitLicense can take eighteen to twenty-four months or more.

Key Takeaways
  • End to end, plan for six to twelve months for most crypto licenses, with preparation usually the longest stage and the one you control
  • Under MiCA Article 63 the statutory clock is 25 working days for completeness plus 40 working days for assessment, about three months once your file is complete
  • Fast tier: Lithuania three to six months, Poland and the Czech Republic four to eight months, assuming a complete application
  • Slow tier: Singapore six to eighteen months, Hong Kong nine to eighteen months, New York BitLicense twelve to twenty-four months or more
  • The biggest delay is almost always an incomplete or generic application, not the regulator's processing speed

How Long It Really Takes

The honest answer is that there are two timelines, and confusing them is the most common planning mistake we see. The first is the statutory review clock, the period the regulator has to assess a complete file. The second is the end-to-end timeline, the full elapsed time from the day you decide to apply to the day you can legally operate. For most crypto licenses, that end-to-end figure is six to twelve months.

The review clock is usually far shorter than the end-to-end figure. Under MiCA, the EU framework, it is roughly three months once your application is complete. But complete is the operative word. Before the clock even starts you must form the entity, arrange capital, write your anti-money-laundering and know-your-customer policies, appoint fit-and-proper directors and a compliance officer, and assemble a stack of supporting evidence. That preparation routinely takes longer than the review itself.

Timelines also vary enormously by jurisdiction and by how complex your business is. A simple wallet or brokerage clears faster than a full exchange, a custodian, or a stablecoin issuer. If your priority is speed, our companion guide on the fastest crypto licenses ranks the quickest routes, while the broader how to get a crypto license walkthrough covers the full application step by step.

6–12 mo
Typical End-to-End
25 + 40
MiCA Working Days
3–6 mo
Lithuania (Fast)
6–18 mo
Singapore MAS
12–24 mo
NY BitLicense
5
Core Process Stages

Sources: MiCA Article 63 statutory timeline; Bank of Lithuania CASP authorisation; MAS licensing guidance; NYDFS BitLicense practice. Figures are indicative ranges for well-prepared applicants.

The Five Stages of a Crypto License

Every crypto license, in every jurisdiction, follows the same five-stage shape. The detail and the legal labels change, but the sequence does not. Understanding where the time actually goes lets you plan realistically and avoid the trap of budgeting only for the part the regulator controls. The infographic below maps the stages and shows where the calendar usually expands.

1
Preparation · 2–6 months
Structure, capital, and compliance framework
Form the entity, arrange minimum capital, draft AML, KYC, and risk policies, and appoint fit-and-proper directors and a compliance officer. This is the longest stage and the one you fully control.
2
Submission · days–weeks
File the complete application and fees
Lodge the full application package with the regulator, pay the fees, and trigger the statutory clock. A complete, well-evidenced file here saves months of queries later.
3
Review · ~3 months (MiCA)
Completeness check and substantive assessment
The regulator first checks completeness, then assesses fit-and-proper, governance, capital, AML, and technology controls. Under MiCA this is 25 plus 40 working days once the file is complete.
4
Decision · weeks
Grant, conditions, or refusal
The regulator issues a reasoned decision: authorisation, authorisation with conditions, or refusal. Conditions often require further steps before the license becomes fully operational.
5
Post-license · weeks–months
Banking, controls, and go-live
Open banking relationships, finalise transaction monitoring and onboarding, meet any conditions, and begin ongoing supervision and reporting before you can serve customers.

"Founders ask how long the regulator takes, but that is the wrong question. The regulator's clock is fixed and short. What varies is how long it takes the applicant to hand over a file the regulator can actually approve. We have seen identical business models clear in four months in one case and stall for over a year in another, purely because of the quality of the application."

Dr. Marcus Hartmann, Senior Licensing Advisor

The MiCA 25 plus 40 Working-Day Rule

For any EU crypto-asset service provider, the review clock is set out in Article 63 of MiCA, the Markets in Crypto-Assets Regulation. It has two distinct phases. First, the national competent authority has 25 working days from receiving your application to check whether it is complete. If anything is missing, the regulator tells you and you supply it. Second, once the file is complete, the authority has 40 working days to assess it fully and issue a reasoned decision granting or refusing authorisation.

Added together, 25 plus 40 working days is roughly three months of regulator time. That figure is what a lot of marketing material quotes when it suggests a MiCA license takes only a couple of months. It is technically true and practically misleading, because the clock only runs against a complete application, and reaching completeness is the part that takes most of the calendar.

There is also a pause mechanism. If the regulator requests further information during the 40-day assessment, the clock can be suspended while you respond, up to a maximum of 20 working days. Every query you trigger therefore extends the review. This is precisely why the quality of your initial submission matters so much: a thin or generic file generates rounds of questions that each add weeks. The same MiCA timeline applies in every EU member state, so the differences between, say, Lithuania and Germany come down to regulator workload and how each authority handles its queue, not the headline statutory numbers.

Crypto License Timeline by Jurisdiction

The table below compares realistic end-to-end timelines against the statutory or pledged review period for the major crypto-licensing regimes in 2026. End-to-end figures assume a well-prepared applicant and a reasonably standard business model. More complex operations, custody, stablecoins, or full exchanges, sit at the upper end of every range. You can explore each route in depth through our crypto licenses hub.

Jurisdiction Typical End-to-End Statutory / Pledged Review
Lithuania (CASP) 3–6 months MiCA: 25 + 40 working days
Czech Republic (CASP) 3–6 months MiCA: 25 + 40 working days
Poland (CASP) 4–8 months MiCA: 25 + 40 working days
EU average (CASP) 6–12 months MiCA: 25 + 40 working days
Singapore (MAS) 6–18 months No fixed clock; 6–18 mo processing
Hong Kong (SFC VATP) 9–18 months Pledge: up to 15 weeks processing
New York (BitLicense) 12–24+ months No statutory deadline

Indicative ranges for well-prepared applicants in 2026. Statutory review periods cover only the regulator's processing time, not preparation or post-license setup. Sources listed below.

Read the two columns together: a short statutory review does not guarantee a short project. Hong Kong pledges fifteen weeks of processing, yet end-to-end VATP licensing still runs nine to eighteen months once you add system build-out and the external assessment. Always plan around the end-to-end column, not the review clock.

◆ Need Help?

Want a realistic timeline for your specific model and market? Get a free 30-minute consultation. We will map the stages, the statutory clock, and the likely end-to-end date for your chosen jurisdiction.

Get Free Consultation →

The Fast Jurisdictions

Inside the EU, the fastest crypto licenses tend to come from authorities with a streamlined queue and a track record of processing crypto applications efficiently. Lithuania is the standout. The Bank of Lithuania frequently completes CASP review in three to six months, and a well-documented file can move through in as little as three to four months in total. That speed, combined with EU passporting once authorised, makes it a popular first port of call.

Poland and the Czech Republic sit just behind, typically in the four to eight-month range for a mid-sized exchange with complete documentation. It is worth noting that national implementation of MiCA has progressed at different speeds across the bloc, so the practical availability and queue length in any given member state can shift from quarter to quarter. We track these moving parts so clients pick a jurisdiction that is genuinely open and fast at the moment they apply, not one that was fast last year.

Across all of these EU routes the same MiCA statutory clock applies. The speed advantage comes from regulator workload, local processing efficiency, and how quickly the authority turns around its queries, not from a shorter legal deadline. You can read more on the specifics in our Lithuania crypto license overview, which sets out capital, requirements, and the realistic calendar in detail.

The Slow Jurisdictions

At the other end of the spectrum sit regimes prized for credibility and market access but known for long, demanding reviews. The New York BitLicense, issued by the NYDFS, is the clearest example. There is no statutory deadline at all. Simple exchange or wallet models average twelve to eighteen months, while complex custody or stablecoin businesses can take twenty-four months or more. Historically, some applicants waited three to four years for approval, a reflection of the depth of scrutiny applied to governance, capital, and AML controls.

Singapore is similarly thorough. A well-prepared applicant should plan for six to nine months from start to grant, but the processing stage alone runs six to twelve months for standard payment institutions and nine to eighteen months for major payment institutions. The Monetary Authority of Singapore tests fit-and-proper status, governance, capital, AML, custody, and technology-risk controls in detail, and admits only applicants who can evidence all of it.

Hong Kong rounds out the slow tier. The SFC's performance pledge is to process applications in up to fifteen weeks, but the real-world Virtual Asset Trading Platform timeline runs far longer, typically nine to eighteen months once system build-out and the external assessment are included. Since January 2025 the SFC has expedited the process with a single external assessment in place of the earlier two-phase report, which trims, but does not eliminate, the front-loaded compliance work.

From Our Practice

Across our licensing work in more than 60 jurisdictions, the single biggest cause of a blown timeline is not the regulator. It is an application that looks complete on the surface but cannot withstand the first round of substantive questions. Generic AML policies, capital that is committed but not yet evidenced, and key personnel whose fit-and-proper documentation is thin will each trigger queries that add weeks, and under MiCA can suspend the clock for up to twenty working days at a time.

We also see founders pick a jurisdiction purely for speed and then lose all of that saved time at the post-license stage, when banking partners and counterparties hesitate over a lesser-known regulator. The most reliable way to hit a target launch date is to invest in the preparation phase, build the file alongside the AML and KYC framework rather than after it, and choose a jurisdiction whose review speed and market standing both fit the business.

How to Shorten the Timeline

Because the review clock is largely fixed, almost all of the time you can save sits in your own hands. The most effective lever is submitting a complete, well-evidenced file the first time. Regulators slow down predictably when policies are generic, when capital is asserted rather than proven, and when key personnel are not properly documented. Closing those gaps before submission prevents the rounds of queries that otherwise stretch the review out by months.

Choosing the right jurisdiction is the second lever. A faster authority with a shorter queue can save you several months over a slower one for the same business model, provided the faster route still gives you the banking access and market credibility you need. Engaging advisors early, and where possible pre-clearing your business model with the regulator, lets you fix problems on paper rather than mid-review.

Finally, match the jurisdiction to your business complexity. A simple wallet or brokerage will clear faster almost everywhere, so if speed is the priority, keep the initial scope tight and expand once you are authorised. When you are ready to map a realistic calendar for your specific case, get in touch with our team and we will set out the stages and the likely end-to-end date for each option on your shortlist.

Crypto License Timelines: Common Questions

Most crypto licenses take six to twelve months end to end, counting preparation, submission, regulator review, and post-license setup. The formal review clock is shorter: under MiCA it runs roughly three months once your file is complete. The real variable is how long it takes you to build a complete, compliant application before the clock even starts.
Under MiCA Article 63, a national competent authority has 25 working days to assess whether your application is complete, then 40 working days from receipt of a complete file to grant or refuse authorisation with a reasoned decision. Combined, that is about three months, though the clock can be suspended up to 20 working days while you supply missing information.
No. The 25 plus 40 working days only begins once you submit a complete application. The preparation phase, structuring the entity, raising capital, writing AML and KYC policies, and appointing fit-and-proper staff, typically takes several months. A realistic end-to-end MiCA timeline is therefore six to twelve months, not three.
Within the EU, Lithuania is among the quickest, with CASP review often completed in three to six months. Poland and the Czech Republic also sit in the faster tier at roughly four to eight months. These timelines assume a complete, well-documented application and the same MiCA statutory clock applies in all EU member states.
The NYDFS BitLicense has no statutory deadline and is known for long reviews. Simple exchange or wallet models average twelve to eighteen months, while complex custody or stablecoin businesses can take twenty-four months or more. Historically some applicants waited three to four years, reflecting deep scrutiny of governance, capital, and AML controls.
A well-prepared Singapore applicant should plan for around six to nine months from start to grant. The processing stage alone runs six to twelve months for standard payment institutions and nine to eighteen months for major payment institutions, depending on business complexity and the regulator's review workload at the time.
The SFC's performance pledge is to process applications in up to fifteen weeks, but real-world Hong Kong VATP licensing runs far longer once you add system build-out and the external assessment. End to end, nine to eighteen months is realistic. Since January 2025 a single, expedited external assessment has replaced the earlier two-phase report process.
There are five stages: preparation, where you structure the entity and build the compliance framework; submission of the complete application and fees; statutory review, including a completeness check and substantive assessment; approval, conditions, or refusal; and post-license setup, where you arrange banking and finalise operational controls before launch.
Preparation usually takes the longest and is the part you control. Building capital, drafting AML and KYC policies, appointing fit-and-proper personnel, and assembling complete documentation often takes two to six months. A thin or generic application is the single biggest cause of regulator queries that then stretch the review phase out further.
Yes, mostly by submitting a complete, well-evidenced file the first time. Regulators slow down when policies are generic, capital is unproven, or key personnel are not properly documented. Choosing a faster jurisdiction, engaging advisors early, and pre-clearing your business model with the regulator all shorten the calendar materially.
Significantly. A simple wallet or brokerage clears review faster than a full exchange, a custodian, or a stablecoin issuer. More complex models trigger deeper scrutiny of custody arrangements, technology risk, and capital adequacy, which lengthens the substantive assessment. In Singapore, for example, major payment institution applications take far longer than standard ones.
Preparation typically runs two to six months. It covers company formation, capital arrangements, drafting AML, KYC, and risk policies, appointing directors and a compliance officer, and assembling supporting evidence. The stronger this groundwork, the shorter and smoother the regulator's review, because there are fewer gaps to query and fewer rounds of back-and-forth.
Post-license work can still take weeks to months. You open banking relationships, finalise transaction monitoring and onboarding controls, and meet any conditions the regulator attached to the grant. Ongoing supervision then begins, with periodic reporting and audits. A license is the start of an obligation, not the finish line of the project.
Not necessarily. A quick jurisdiction may offer weaker banking access, less market credibility, or narrower passporting rights. The right timeline balances speed against where you actually want to operate and serve customers. We help clients weigh review speed against substance so the license fits the business rather than just the calendar.

Sources & Official References

MH
Senior Licensing Advisor · LL.M. International Financial Law
22 years in financial services regulation. Advised 400+ crypto licensing mandates across 60+ jurisdictions. Based in Zug, Switzerland.
Free Consultation

Get a Realistic Crypto License Timeline

Share your business model and target markets, and we will map the stages, the statutory review clock, and a realistic end-to-end date for each jurisdiction on your shortlist. No obligation.

  • 🇨🇭 Swiss-registered firm, Zug
  • ⚡ Response within 24 hours
  • 🔒 Strictly confidential
  • ✓ 80+ jurisdictions covered

Confidential · No obligation · No spam