What Is a Crypto License and Why Do You Need One in 2026?

A crypto license — formally known as a Virtual Asset Service Provider (VASP) registration, Crypto Asset Service Provider (CASP) authorisation, Digital Payment Token (DPT) license, or Money Services Business (MSB) registration depending on jurisdiction — is an official regulatory approval that grants a company the legal right to provide cryptocurrency-related financial services to clients.

Think of it in the same way as a banking license or a securities broker-dealer license. It is a state permission to operate in a regulated sector. Without it, you are operating illegally, regardless of how technically sophisticated your platform is or how many users you serve.

Crypto licenses are issued by financial regulators: the European Securities and Markets Authority (ESMA) and national competent authorities in the EU, the Financial Conduct Authority (FCA) in the UK, the Monetary Authority of Singapore (MAS), the Virtual Assets Regulatory Authority (VARA) in Dubai, the Financial Crimes Enforcement Network (FinCEN) in the US, and dozens of others globally.

What a Crypto License Authorises

A crypto license grants specific permissions. These typically include: operating a crypto exchange (buying, selling, and exchanging digital assets), providing crypto custody services (holding assets on behalf of clients), operating a crypto payment service or wallet, offering brokerage or OTC desk services, managing crypto asset portfolios, and in some cases, issuing or marketing crypto assets to the public.

Importantly, a license is not a blanket permission — it authorises specific regulated activities. A custodian license does not automatically permit you to operate an exchange. Most businesses need to apply for the correct license category matching their actual service model.

Different jurisdictions use different terminology and license frameworks. The table below maps the most common license types, who needs them, and where they apply.

The requirement to hold a crypto license is triggered by the nature of your business activity, not your company's legal form or where you are incorporated. If you provide any of the following services commercially, you almost certainly need a license in every jurisdiction where you have clients.

Crypto regulation focuses on specific activities that create financial risk for consumers or risk of money laundering. Under MiCA and most global frameworks, the following activity categories are regulated and require a license to perform commercially.

The consequences of operating a crypto business without the required license have become dramatically more severe in 2026. Regulators across all major jurisdictions have significantly increased enforcement activity, and the penalties are no longer primarily administrative — they are criminal.

The global regulatory map for crypto is no longer binary. In 2026, three distinct categories of jurisdiction exist: pro-licensing (with established frameworks), restricted or banned, and unregulated (which is rapidly shrinking). Understanding where your clients are located determines which licensing obligations apply to you.

The EU's Markets in Crypto-Assets (MiCA) Regulation, which entered into full force in December 2024, is the most significant development in crypto regulation since Bitcoin was created. For the first time, a major economic bloc has a comprehensive, unified regulatory framework covering the entire crypto asset sector.

What MiCA Created

MiCA established the Crypto Asset Service Provider (CASP) authorisation — a single license issued by a competent authority in any EU member state that provides passporting rights across all 27 EU countries. A company authorised as a CASP in France can operate in Germany, Italy, Spain, and every other EU member state without seeking additional national approvals.

Before MiCA, a crypto business serving clients across the EU needed to navigate 27 different national regulatory regimes — some with full licensing requirements, some with light-touch registrations, and some with no framework at all. MiCA replaced this fragmented patchwork with a single rulebook.

What MiCA Covers

MiCA covers three categories of crypto assets: asset-referenced tokens (ARTs, including stablecoins backed by multiple assets), e-money tokens (EMTs, including fiat-backed stablecoins like USDC), and all other crypto-assets (including utility tokens, governance tokens, and most existing cryptocurrencies). It explicitly excludes Bitcoin and Ethereum as "sufficiently decentralised" assets from the ART/EMT categories, though CASP licensing requirements apply to anyone providing services involving these assets.

Capital Requirements Under MiCA

MiCA sets tiered minimum capital requirements based on service type: Class 1 CASPs (order execution, advice, placement, reception/transmission of orders) require EUR 50,000. Class 2 CASPs (exchange, portfolio management) require EUR 125,000. Class 3 CASPs (custody, operation of a trading platform) require EUR 150,000. These are floor requirements — larger firms must hold capital proportional to their operational risk.

MiCA Passporting: The Key Advantage

The passporting mechanism under MiCA is genuinely transformative. Once authorised in one EU state, a CASP can notify its home regulator of its intention to operate in another EU state — the host state regulator then has 10 working days to raise objections. In practice, this means a crypto business can access the entire EU market (roughly 450 million consumers) from a single point of regulation.

This has created significant strategic interest in "MiCA-first" jurisdictions — EU member states with efficient, experienced competent authorities, competitive costs, and strong reputations. Poland, Lithuania, Ireland, and Luxembourg have emerged as particularly popular CASP authorisation hubs in 2026.