What Is a Crypto Exchange License?
A crypto exchange license is not one licence. It is the family of VASP and CASP-class authorisations that cover two distinct regulated activities a centralised exchange may perform, alone or together: exchanging crypto-assets against fiat money or other crypto-assets as the client’s counterparty, and operating a trading platform on which third-party client orders meet. An operator needs permission for the activities its model actually performs.
Each regime names the permission differently: the EU grants a CASP authorisation under MiCA, Dubai a VASP licence, Hong Kong a VATP licence, Singapore a DPT service licence, and the offshore centres a VASP registration or licence. The activity bundle underneath is essentially the same.
Under Regulation (EU) 2023/1114 (MiCA), the relevant crypto-asset services are the operation of a trading platform, the exchange of crypto-assets for funds, and the exchange of crypto-assets for other crypto-assets, with custody and execution of orders almost always bundled into the same application.[1] Operating a trading platform matches third-party orders multilaterally, while the two exchange services are dealing with clients using the firm’s own capital, so an operator applies only for the services it provides. The trading-platform service sits in Annex IV Class 3, which carries the €150,000 minimum prudential safeguard and, as the highest tier, sets the floor for any bundle that includes a platform; exchange services without a platform sit in Class 2 at €125,000. Ongoing coverage must equal at least the higher of that floor and one quarter of the preceding year’s fixed overheads (projected first-year overheads for a firm without a full year of operations). It may be met with own funds, an insurance policy or comparable guarantee meeting Article 67(5)–(6), or a combination.
Most other regimes draw the same perimeter with different vocabulary: VARA's Exchange Services category, the SFC's automated trading service definition, the BVI VASP Act's exchange categories.
Unlike an EMI or Payment Institution licence, a crypto exchange authorisation covers the crypto-asset activity only. Fiat deposits, withdrawals, and stored client balances usually ride on a separately licensed payment layer, either the exchange's own EMI authorisation or a partner institution. Operators planning a euro on-ramp at scale should read this page alongside EMI & Payment Institution Licensing, because the two applications are increasingly sequenced together.
Registration does not necessarily mean AML-only supervision. The BVI VASP Act, sections 10–23 also imposes financial-soundness, governance, audit, and client-asset obligations. Compare each regime’s actual permissions and ongoing duties; its name alone does not establish cost, speed, or market access.
No licence is global. An exchange must hold the local authorisation, or a valid passport, in each market it actively solicits. The reverse solicitation carve-outs that once let offshore platforms serve onshore clients have narrowed sharply: in the EU, the ESMA Guidelines on reverse solicitation under MiCA (published , applicable from ) list signs that a firm is likely to be regarded as soliciting, such as EU-targeted marketing, geo-targeted advertising, or EU-based influencers, and judge each case on all the facts; a firm that solicits EU clients cannot rely on the exemption.[2]
Crypto Exchange Licence Regimes by Region
Ten jurisdictions cover the practical decision set for a centralised exchange in 2026: two EU anchor states under MiCA, the United Kingdom, two Gulf regimes, two Asia-Pacific regimes, and a three-jurisdiction offshore tier. Every figure in this section and the tables below is drawn from the same jurisdiction records that power our comparison tool across 50 jurisdictions.
European Union: MiCA CASP authorisation
MiCA replaced the EU's fragmented national VASP regimes with a single CASP authorisation, fully applicable since . Annex IV class floors are tiered by service class: €50,000 (Class 1), €125,000 (Class 2), and €150,000 for Class 3, which includes the operation of a trading platform.[1] Prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement.
One authorisation passports to the EEA by Article 65 notification: the home regulator forwards the notification within 10 working days, and services may start no later than the 15th calendar day after submission.
Article 63 sets two clocks: completeness checked within 25 working days of receipt and a decision within 40 working days of receipt of the complete application; a written information request made by working day 20 suspends the decision period for up to 20 working days, and later requests do not.[1] Realistic end-to-end timelines differ by home state: Lithuania (Bank of Lithuania) runs 4–8 months with estimated Year-1 all-in costs of €75,900–€268,400; Malta (MFSA) runs 9–18 months, with a typical Class 2/3 build of €490,000–€1,075,000, quoted per case, plus statutory fees (an application fee of €20,000–€25,000 for Class 2/3 and the annual supervisory fee),[20] and a 35% corporate rate that the 6/7ths shareholder refund reduces to 5% effective on distributed active trading income.
Malta requires the business to be directed by at least two individuals, with at least one executive director based in Malta; Lithuania requires a licensed CASP to have a board of at least three members plus a manager, each approved by the Bank of Lithuania, and expects an operation centre in Lithuania.[23]
The transitional window matters in 2026: grandfathering of pre-MiCA national-regime firms under Article 143(3) closed no later than , and grandfathered firms could not passport. Operators still on national registrations have effectively run out of road. See the MiCA / CASP licensing guide for the deadline mechanics and the crypto licensing hub for jurisdiction-by-jurisdiction detail.
United Kingdom: FCA registration now, FSMA authorisation from 2027
The UK runs two regimes in sequence. As of September 2026, the live regime is the FCA cryptoasset registration under the Money Laundering Regulations 2017: an AML-only registration with no minimum capital, no prudential rulebook, and an observed end-to-end timeline of 9–18 months, although the FCA has three months to decide once it has all the information it needs.[5] The MLR application fee is £11,260, non-refundable on withdrawal or refusal (pricing Category 6 under FEES App 4 Annex 1); on the FSMA route an exchange that operates a trading platform pays £28,150 (Category 7) from , one fee at the highest applicable category.[27] The Year-1 build, quoted per case, runs £185,500–£563,000 excluding own funds (£196,900–£574,400 with statutory fees on the MLR route).
The full authorisation regime arrives next: the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made , bring regulated cryptoasset activities into FSMA from , with the authorisation gateway having opened and closing on . The FCA's prudential floors (proposed in CP25/15 and CP25/42, finalised as PS26/12 on 30 June 2026) set a £150,000 permanent minimum requirement for trading platform, custody, and staking activity and £750,000 for dealing as principal, which an exchange that trades against its own clients also needs; a firm with several permissions uses the highest applicable requirement, and own funds are the highest of that floor, a fixed overhead requirement, and a K-factor requirement.[6] A UK registration confers no EU passporting rights, and MiCA has no third-country equivalence regime.
Middle East: Dubai VARA and ADGM
Dubai (VARA) licenses Exchange Services under Dubai Law No. 4 of 2022 and the VARA Rulebooks, within the federal framework of Cabinet Decision 111/2022.[7] Paid-up capital for an exchange is the higher of AED 1.5 million and 25% of fixed annual overheads (the higher of AED 800,000 and 15% where a VARA-licensed custodian is used or VARA otherwise approves this treatment during licensing), maintained at all times through the prescribed UAE-bank trust account or qualifying surety bond, or another arrangement VARA specifies when granting the licence, plus an ongoing net-liquid-assets test of at least 1.2× monthly operating expenses with daily reconciliation.[28]
Government fees are AED 40,000–100,000 at application plus AED 80,000–200,000 annual supervision. The general VARA Year-1 benchmark is AED 1.33–7.26 million≈ $360K–2M across activities, including regulatory fees and indicative build costs but excluding paid-up capital.
Exchange first-year regulatory fees are AED 300,000≈ $82K, and the Exchange-specific build is quoted per case. The VARA track for an Exchange runs 12 months or longer and permits retail clients; UAE-resident senior officers (SEO, MLRO, Compliance Officer) are required.
Abu Dhabi (ADGM) takes the institutional lane: an FSRA Financial Services Permission under the Financial Services and Markets Regulations, granted via In-Principle Approval and an operational-readiness review,[8] over 9–19 months on our planning estimate. A virtual-asset MTF holds capital of six months’ operating expenses plus a buffer of up to six more; Year-1 all-in for an MTF is USD 1.5–2.95 million. ADGM serves mainly professional and institutional clients, with retail business only under a permission that covers it, and prohibits privacy tokens and algorithmic stablecoins.
Asia-Pacific: Singapore and Hong Kong
Singapore (MAS) licenses DPT services under the Payment Services Act 2019, with the Major Payment Institution tier the realistic class for an exchange: SGD 250,000 base capital plus a security deposit of SGD 100,000–200,000 lodged with MAS.[9] Year-1 all-in, capital included, runs about SGD 1.39–3.15 million. As of October 2026, MAS warns of a wait of more than a year before an officer is available to review an application;[35] preparation, substantive review, and approval conditions add time.
Retail access is permitted but deliberately constrained: no incentives, no payments by Singapore-issued credit or charge cards, no retail credit or leverage. The FSM Act 2022 Part 9 DTSP regime, in operation since , separately captures Singapore-based providers serving only overseas customers.
Hong Kong (SFC) licenses VATPs under the Securities and Futures Ordinance (Types 1 and 7) plus AMLO Part 5B.[10] A platform must maintain HKD 5 million paid-up share capital and, separately, required liquid capital equal to the higher of HKD 3 million and the basic amount. The two tests are not additive.
Falling below 120% of required liquid capital triggers notification to the SFC; 120% is not the minimum. The 12–18 month track includes a pre-grant gate: a single external assessment under HKSAE 3000/ISAE 3000 plus an independent penetration test.
Operating costs ex capital run HKD 6.4–17.3 million in Year 1. Retail trading is permitted for eligible large-cap assets, a broader retail perimeter than Singapore's.
Offshore tier: BVI, Cayman Islands, Seychelles
BVI offers a VASP registration under the Virtual Assets Service Providers Act, 2022 with no fixed capital floor (the FSC expects 6–12 months of operating-expense evidence) and a 4–6 month track with initial feedback in roughly 6 weeks.[11] An exchange registration carries USD 40,000 in application, initial-registration, and minimum approval fees, and a combined custody and exchange registration USD 65,000; the build is quoted for the exchange’s scope, and Year-1 costs across the four categories run USD 45,000–161,000.[24][25] The VASP Act requires at least 2 directors, both individuals. The reputational caveat is real: the BVI sits on the FATF grey list (confirmed in the statement)[18] and was added to the EU AML high-risk list with effect from ,[31] which drives enhanced counterparty due diligence.
Cayman Islands runs a dual track under the Virtual Asset (Service Providers) Act (2024 Revision): a Registration for exchange and transfer activity, and a full Licence, mandatory for trading platforms and custody since .[12] The VASP Act sets no fixed monetary minimum. CIMA Rule 8.1 requires licensed trading platforms and custodians to maintain capital at all times equal to at least the highest of risk-based capital, six months’ fixed overheads and any amount determined by CIMA.[30] Year-1 statutory fees run USD 4,878–37,806 for a Registration and USD 79,268–371,951 for a Licence (the VATP grant fee alone is USD 121,951), with a typical build of USD 175,000–1,520,000 quoted per case, over about 4–14 months end to end.[22]
Every Cayman VASP, registered or licensed, needs at least 3 directors including 1 independent. Cayman is FATF-clear, removed from the grey list on , which keeps its institutional credibility high.
Seychelles moved from unregulated to licensed with the Virtual Asset Service Providers Act, 2024, in force .[13] By 27 September 2026 the FSA had issued no VASP licence: its register listed only transitional applicants whose complete applications were in assessment.[33] The Virtual Asset Exchange category carries USD 100,000 paid-up capital, the highest of the four categories, and from the beginning of the third year of operation the minimum becomes 2.5% of annual turnover from licensed services, under FSA guidance of 20 July 2026.[32]
Year-1 costs run USD 57,500–158,000 across the four VASP categories excluding capital (the Exchange category’s statutory fees alone are about USD 36,000), over about 4–27 months end to end, with a licensed-VASP concessionary business tax rate of 1.5% on Seychelles-sourced income.[21] Substance is required, not just expected: a resident director, a physical office, and a full-time resident compliance officer.[32]
Regime comparison
The table below compares the licence class, regulator, capital floor, and retail perimeter across all ten jurisdictions, with the UAE split across its two regulatory clusters: Dubai (VARA) and Abu Dhabi (ADGM). Capital figures are statutory minimums for the exchange or trading-platform class; several regimes add ongoing overlays covered under requirements.
| Jurisdiction | Licence | Regulator | Minimum Capital | Retail Access |
|---|---|---|---|---|
| Malta | MiCA CASP authorisation | MFSA | €150,000 (Class 3) | Permitted |
| Lithuania | MiCA CASP authorisation | Bank of Lithuania | €150,000 (Annex IV Class 3 floor) | Permitted |
| United Kingdom | MLR cryptoasset registration | FCA | None (MLR); £150,000–750,000 PMR from Oct 2027 | Permitted (s.21 promotions rules) |
| Dubai | VARA VASP licence (Exchange) | VARA | AED 1.5m standard tier; AED 800k where the custody arrangement or other VARA approval qualifies; overheads test applies | Permitted |
| Abu Dhabi (ADGM) | FSRA Financial Services Permission | ADGM FSRA | 6 months of opex + buffer | Mainly professional; retail by permission |
| Singapore | MAS DPT licence (MPI) | MAS | SGD 250,000 + security deposit | Restricted |
| Hong Kong | SFC VATP licence | SFC | HKD 5m paid-up; required liquid capital is the higher of HKD 3m and the basic amount | Permitted (eligible assets) |
| BVI | VASP registration | BVI FSC | None (risk-based) | Permitted |
| Cayman Islands | VASP licence (trading platform) | CIMA | None statutory (risk-based) | Restricted |
| Seychelles | VASP licence (Exchange) | Seychelles FSA | USD 100,000 paid-up | Permitted |
For MiCA CASPs, the amounts shown are Annex IV class floors. Prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement. MiCA Article 67(1)–(4).
The United States: No Single Federal Licence
Unlike every regime above, the United States has no single federal crypto exchange licence. The federal layer is FinCEN registration as a money services business under 31 CFR 1010.100(ff): a registration, not a licence, that attaches Bank Secrecy Act AML obligations but authorises nothing by itself.[14] The operative permission layer is state law: a patchwork of roughly 50 state money-transmitter licences, obtained state by state, each with its own capital, bonding, and reporting requirements. New York requires a dedicated virtual-currency licence, the NYDFS BitLicense under 23 NYCRR Part 200,[15] and under California’s Digital Financial Assets Law a firm serving California residents without an exemption had to file a licence application by to continue serving them.[34]
Federal legislation is moving but incomplete. The GENIUS Act, enacted , created the first federal framework for payment stablecoin issuers; its implementing rules were still at the proposal stage in September 2026, so the regime is law but not yet operational practice.[16][26] The CLARITY Act, the broader market-structure bill that would allocate spot-market jurisdiction between the SEC and CFTC, passed the House 294–134 on and cleared the Senate Banking Committee in May 2026; on a Senate cloture motion on proceeding to it failed 49–50, and it has not been enacted.[17]
Exchange licensing therefore remains a state-by-state exercise layered over federal registration.
Jagelski & Partners does not accept company formation or licensing enquiries from persons located, resident, or incorporated in the United States. Banking and payments enquiries remain eligible; this section is informational.
Key Requirements and the Application Process
The file a crypto exchange submits looks structurally similar everywhere: capital, governance, custody architecture, AML and CFT, technology resilience, and a credible business plan. What differs is the evidence standard, the statutory clock, and how much the regulator probes before grant.
Capital and own funds
Statutory floors are only the entry point; most regimes add a formula that scales with the business. In the EU, prudential safeguards must equal the higher of the applicable Annex IV minimum and 25% of the preceding year's fixed overheads, and may consist of own funds, qualifying insurance, a comparable guarantee, or a combination.[1] Hong Kong’s required liquid capital is the higher of HKD 3 million and the basic amount, monitored monthly; falling below 120% of that requirement triggers notification to the SFC, and a platform is also expected to hold liquid assets in Hong Kong, not virtual assets, covering at least 12 months of its actual operating expenses.[29] ADGM requires a virtual-asset MTF to hold six months’ operating expenses plus, unless the FSRA directs otherwise, a buffer of up to six more.
From the third year of operation Seychelles resets the minimum to 2.5% of annual turnover from licensed services, so an exchange with turnover above USD 4 million faces a larger requirement than its USD 100,000 entry floor.[32] Even the no-floor regimes are not capital-free: the BVI FSC expects evidence of 6–12 months of operating expenses against three-year projections.
Substance and key persons
Resident-officer rules decide where the team actually sits. Lithuania requires a board of at least three members plus a manager, each approved by the Bank of Lithuania, and expects an operation centre in Lithuania;[23] Malta requires at least two individuals directing the business, with at least one executive director based in Malta. The UAE regimes require UAE-resident senior officers (SEO, MLRO, Compliance Officer). Hong Kong requires at least 2 Responsible Officers, at least 1 of them Hong Kong-resident and at least 1 an executive director. The BVI requires 2 individual directors; every Cayman VASP, registered or licensed, needs 3 directors including 1 independent.
Hiring the MLRO and compliance lead in the licensing jurisdiction before filing, not after grant, is one of the strongest credibility signals an application can send.
Custody and client assets
Every authorisation regime now treats client-asset segregation as a core gate rather than an operational detail. MiCA requires a CASP that is not itself a bank, e-money institution, or payment institution to place client funds other than e-money tokens with a credit institution or a central bank, and requires client crypto-assets to be segregated from the firm's own book.[1] Hong Kong requires custody through a wholly-owned associated entity, with a compensation arrangement covering 50% of cold-storage and 100% of hot-storage assets.
Cayman made custody and trading-platform activity licensable rather than registrable from bringing custody architecture under direct supervision.[12] Expect the custody policy, wallet-management procedure, and key-ceremony documentation to be read closely in every regime.
AML and the Travel Rule
FATF Recommendation 15 requires countries to license or register exchanges and to apply AML/CFT measures to them, and every jurisdiction on this page now applies the Travel Rule. In the EU, Regulation (EU) 2023/1113 applies the rule with no de minimis threshold for CASP-to-CASP transfers and a €1,000 threshold for self-hosted wallet verification.[3] The BVI applies a USD 1,000 threshold, Cayman’s AML Regulations (Part 10A) set no monetary threshold, and Hong Kong applies HKD 8,000. The application file must show working Travel Rule tooling, sanctions screening with regulator-grade evidence trails, and a risk assessment built at customer-segment level, not firm level.
ICT and operational resilience
In the EU, DORA (Regulation (EU) 2022/2554) has applied to CASPs since : an ICT risk-management framework, major-incident reporting, a register of ICT third-party providers, and periodic resilience testing.[4] VARA imposes its Technology and Information Rulebook with annual penetration testing; the SFC requires the pre-grant external assessment and independent cybersecurity assessments before platform launch or modifications and periodically thereafter, including penetration testing. Exchange technology files are among the heaviest of any licence class because the matching engine, wallet infrastructure, and market-surveillance stack are all in scope.
The application arc
The process arc is consistent across regimes, and the statutory clocks are knowable in advance:
- Pre-application engagement: VARA's Initial Disclosure Questionnaire, ADGM's pre-application meetings toward In-Principle Approval, the Bank of Lithuania's Newcomer Programme, CIMA's Innovation Unit meeting.
- Completeness check: MiCA fixes it at 25 working days; the Seychelles FSA treats an application as received only once complete.
- Substantive review: MiCA allows 40 working days from a complete application, suspended once for up to 20 working days by an information request made by working day 20; the SFC's VATP licensing handbook sets no fixed processing period; the BVI FSC gives initial feedback in roughly 6 weeks and targets a decision within 6 months.
- Interviews and inspection: officer interviews are standard in the Gulf; operational-readiness reviews precede grant at ADGM and VARA; Hong Kong adds the external assessment gate.
- Grant and post-grant: conditions, reporting calendars, and in the EU the Article 65 passport notifications that open the other 29 EEA markets.
The honest planning number is the end-to-end range in the table below, not the statutory clock: completeness disputes, information-request cycles, and banking evidence dominate real timelines.
How Much Does a Crypto Exchange License Cost?
Year-1 all-in cost spans two orders of magnitude: from about USD 45,000 at the BVI entry point (a standard VASP; an exchange pays USD 40,000 in FSC fees before any build) to multi-million budgets in the table below. The line items are the same everywhere: government fees, regulatory capital (sometimes inside the all-in figure, sometimes on top), advisory and drafting, resident substance, technology and compliance tooling, and audit.
Government fees alone illustrate the spread: the FCA charges £11,260 for MLR registration and £28,150 for FSMA authorisation of a trading platform; VARA charges AED 40,000–100,000 at application plus AED 80,000–200,000 in annual supervision; the Cayman VATP licence grant fee is USD 121,951; the Seychelles Exchange category pays an annual licence fee of SCR 375,000 on a SCR 75,000 base; a BVI exchange registration carries USD 40,000 in application, initial-registration, and minimum approval fees, or USD 65,000 combined with custody.
| Jurisdiction | Year-1 All-In | Ongoing Annual | Timeline |
|---|---|---|---|
| Malta | €490,000–€1,075,000 typical build, quoted per case, + statutory fees | €365,000–€765,000 typical build + supervisory fees | 9–18 months |
| Lithuania | €75,900–€268,400 | Supervision, audit, and substance driven | 4–8 months |
| United Kingdom | £196,900–£574,400 (MLR route, ex own funds) | £115,000–£350,000 build + FCA periodic fees | 9–18 months |
| Dubai (VARA) | General VARA benchmark AED 1.33–7.26m≈ $360K–2M across activities, excluding paid-up capital; Exchange build quoted per case | General VARA benchmark AED 0.81–4.8m≈ $220K–1.3M across activities, including supervision; Exchange programme quoted per case | 12+ months |
| Abu Dhabi (ADGM) | USD 1.5–2.95m | USD 810,000–1.62m + trading levy | 9–19 months |
| Singapore | SGD 1.39–3.15m (incl. capital) | SGD 595,000–1.63m | More than a year before MAS review; total longer |
| Hong Kong | HKD 6.4–17.3m (ex capital) | HKD 3.6–10.2m (ex capital) | 12–18 months |
| BVI | USD 45,000–161,000 across the four categories (Exchange fees alone USD 40,000) | USD 18,300–67,500 | 4–6 months |
| Cayman Islands | USD 180,000–1.89m (by class) | Scales with revenue tier | 4–14 months |
| Seychelles | USD 57,500–158,000 across the four categories (ex capital; Exchange fees alone about USD 36,000) | SCR 375,000 fee on a SCR 75,000 base, plus substance | About 4–27 months |
Cheap and credible pull in opposite directions. The BVI's low entry cost comes with FATF grey-list counterparty friction; Hong Kong’s HKD 5 million paid-up floor and separate liquid-capital test sit inside a full SFC licensing framework. The right way to read the table is to fix the target market first, then let the regime list collapse: an EU retail exchange has two realistic rows, a Gulf institutional venue has two different ones, and a non-EU global startup is choosing within the offshore tier.
Banking for Licensed Crypto Exchanges
A licence without banking is a certificate on the wall. An exchange needs three account layers, each with a different acceptability profile: client fiat accounts for deposits and withdrawals, an operating account for the firm's own funds, and where the regime requires it, a safeguarding account.
Under MiCA Article 70, a CASP that is not itself a bank, e-money institution or payment institution must place client funds other than e-money tokens with a credit institution or a central bank, and in practice that is the binding constraint: in the Baltic CASP market banks are selective about full safeguarding accounts, so plan for several bank applications and a lead time measured in months rather than weeks.[1]
In the offshore tier the constraint is sharper still: BVI-registered exchanges bank almost entirely outside the territory, through EU and UK fintech rails. This is why banking feasibility belongs at the start of the licensing decision, not the end. Jagelski & Partners scopes banking options in writing and introduces an independent specialist before a licence application is filed. You contract directly with the specialist; account approval remains the financial institution's decision. Through Jagelski & Partners’ partner network, businesses placed more than fourteen billion euros in client turnover across banking and EMI relationships in 2025.
For banking placement, Jagelski & Partners is paid by the institution, not by the client. We do not mark up institutional pricing. We do not charge an onboarding fee. The institutional rates the client sees are the rates the institution applies. Crypto-to-fiat settlement rails are scoped through crypto & fiat settlement banking, and the wider account architecture through high-risk business accounts.
Frequently Asked Questions
A crypto exchange license is the authorisation that lets a business exchange crypto-assets against fiat money or other crypto-assets, operate a trading platform where third-party client orders meet, or both, depending on its model. It is not one licence: each regime names and structures it differently. The EU grants a MiCA CASP authorisation, Dubai a VARA VASP licence, Hong Kong an SFC VATP licence, Singapore an MAS DPT service licence, and offshore centres such as the BVI, the Cayman Islands, and Seychelles grant VASP registrations or licences. No version is global: an exchange needs the local authorisation, or a valid passport, in every market it actively solicits.
A VASP registration has the scope set by national law. BVI registration includes financial-soundness, governance, audit, and client-asset duties, while the UK’s current MLR registration focuses on AML supervision. MiCA CASP authorisation adds a harmonised prudential and conduct framework and EEA passporting. Registration alone does not imply lighter regulation, faster approval, or lower cost.[11][1]
Estimated Year-1 all-in costs span two orders of magnitude by jurisdiction. At the low end, a BVI VASP registration runs USD 45,000–161,000 across its four categories (an exchange’s statutory fees alone are USD 40,000) and a Seychelles VASP licence USD 57,500–158,000 across its four categories (the Exchange category’s statutory fees alone are about USD 36,000), excluding the USD 100,000 paid-up capital. In the EU, Lithuania runs €75,900–€268,400, and Malta’s typical Class 2/3 build alone is €490,000–€1,075,000 before statutory fees. The UK runs £196,900–£574,400 on the MLR route, excluding own funds.
For comparison, the general Dubai VARA benchmark is AED 1.33–7.26 million≈ $360K–2M across activities, excluding paid-up capital; an Exchange-specific build is quoted per case. Other routes include ADGM USD 1.5–2.95 million, Singapore about SGD 1.39–3.15 million including capital, and Hong Kong HKD 6.4–17.3 million in operating costs excluding its separate HKD 5 million paid-up and variable required-liquid-capital tests.
Realistic end-to-end timelines, including preparation: Seychelles about 4–27 months (FSA service standard 3 months to 2 years), BVI 4–6 months, Cayman Islands about 4–14 months depending on track, Lithuania 4–8 months, Dubai (VARA) 12 months or longer for an Exchange, ADGM 9–19 months, Singapore more than a year waiting for a MAS review officer, plus preparation, substantive review and approval conditions, Malta and the United Kingdom 9–18 months, and Hong Kong 12–18 months. Statutory clocks are shorter (MiCA allows 25 working days for the completeness check and 40 working days from a complete application for the decision; the SFC's VATP licensing handbook sets no fixed processing period), but information-request cycles, officer interviews, custody reviews, and banking evidence dominate real timelines. Running banking and substance in parallel with drafting, rather than after filing, is the main controllable accelerator.
BVI and Seychelles offer offshore exchange routes, but their published regulatory fees alone do not establish which has the lowest all-in exchange cost; compare quotations for the same exchange scope. A BVI exchange registration carries USD 40,000 in application, initial-registration, and minimum approval fees (USD 65,000 combined with custody), no fixed capital floor, and a 4–6 month track, with the build quoted for the exchange’s scope. Seychelles is a low-cost licence regime with a real capital requirement: USD 57,500–158,000 across its four categories, with the Exchange category’s statutory fees alone about USD 36,000, plus USD 100,000 paid-up capital for that category. The trade-offs are concrete rather than cosmetic: the BVI sits on the FATF grey list and the EU AML high-risk list as of September 2026, which lengthens every counterparty onboarding, and neither jurisdiction provides access to EU, UK or US clients. Cheap entry suits a non-EU global startup; it anti-sells to institutional counterparties.
Statutory floors for the exchange or trading-platform class: €150,000 in the EU for a trading platform (MiCA Annex IV Class 3) or €125,000 for exchange services without a platform (Class 2), AED 1.5 million in Dubai (VARA Exchange standard tier; a lower tier applies where the custody arrangement or other licensing approval qualifies), six months’ operating expenses plus a buffer of up to six more for a virtual-asset MTF in ADGM, SGD 250,000 plus a SGD 100,000–200,000 security deposit in Singapore, HKD 5 million paid-up in Hong Kong with a separate required-liquid-capital test equal to the higher of HKD 3 million and the basic amount, and USD 100,000 in Seychelles. The BVI, the Cayman Islands, and the UK's live MLR registration set no fixed floor.
Most regimes add ongoing overlays: 25% of fixed annual overheads in Dubai where that exceeds AED 1.5 million, liquid assets covering 12 months of operating expenses and a notification threshold at 120% of required liquid capital in Hong Kong, for Cayman-licensed custodians and trading platforms, capital maintained at all times at the highest of risk-based capital, six months’ fixed overheads and any CIMA-determined amount under binding Rule 8.1, and 2.5% of turnover from year three in Seychelles.
For MiCA CASPs, prudential safeguards must equal at least the higher of the applicable Annex IV class floor and 25% of the previous year’s fixed overheads. A new firm uses projected fixed overheads for its first 12 months; the permitted deductions apply. Qualifying own funds, an insurance policy or comparable guarantee, or a combination may meet the requirement. MiCA Article 67(1)–(4).
Yes. A MiCA CASP authorisation from any EEA state passports across the EEA by notification under Article 65: the home regulator forwards the notification within 10 working days, and services may start no later than the 15th calendar day after submission. Most crypto exchange licences elsewhere cover a single country. The transitional caveat was that firms operating on grandfathered national VASP registrations under Article 143(3) could not passport; the grandfathering window closed no later than 1 July 2026. No licence from outside the EEA, including the UK's, benefits from an equivalence mechanism, because MiCA does not contain one.
Not systematically. The only lawful route without a CASP authorisation is reverse solicitation under MiCA Article 61, and the ESMA Guidelines (published 26 February 2025, applicable from 27 April 2025) interpret it restrictively: the client must initiate the relationship at their own exclusive initiative, and the guidelines list signs that a firm is likely to be regarded as soliciting, such as EU-targeted marketing, geo-targeted advertising, or EU-based influencers, judged on all the facts; a firm that solicits EU clients cannot rely on the exemption.
Reverse solicitation is a passive defence for incidental clients, not a market-access strategy. An operator that wants EU revenue at scale obtains a CASP authorisation in a member state and passports from there.
There is no single federal crypto exchange licence in the United States. The working structure is FinCEN registration as a money services business under 31 CFR 1010.100(ff), layered under a patchwork of roughly 50 state money-transmitter licences obtained state by state, with the NYDFS BitLicense under 23 NYCRR Part 200 required for New York. The CLARITY Act, the federal market-structure bill, has not been enacted, so exchange licensing remains state by state; the United States section of this page gives its status and that of the GENIUS Act for stablecoin issuers. Jagelski & Partners does not accept company formation or licensing enquiries from persons located, resident, or incorporated in the United States. Banking and payments enquiries remain eligible; this answer is informational.
No. The licence authorises the regulated activity; it does not open a single account. An exchange needs client fiat accounts, an operating account and, where the regime requires it, a safeguarding account, and under MiCA Article 70 a CASP that is not itself a bank, e-money institution or payment institution must place client funds other than e-money tokens with a credit institution or a central bank; in the Baltic CASP market banks are selective about these accounts, so plan for several bank applications and a lead time of months rather than weeks.
Offshore-registered exchanges typically cannot bank locally at all and run on EU and UK fintech rails. This is why Jagelski & Partners scopes banking options in writing before any licence application is filed, drawing on pre-qualified routes across 90+ institutions; account approval remains the institution’s decision.
Start Your Exchange Licensing Brief
Jagelski & Partners maps the exchange's order-book model, custody arrangement, and target markets to the licence class that fits, then introduces independent specialists for formation, capital, banking, and the application across the EU, the UK, the Gulf, Asia-Pacific, and the offshore tier.
References
Show all references
- European Union, Regulation (EU) 2023/1114 of the European Parliament and of the Council on markets in crypto-assets (MiCA), Articles 59–67 and 70, and Annex IV, eur-lex.europa.eu, accessed .
- European Securities and Markets Authority, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), published , applicable from , esma.europa.eu, accessed .
- European Union, Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets (Travel Rule), eur-lex.europa.eu, accessed .
- European Union, Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA), OJ L 333/1, eur-lex.europa.eu, accessed .
- Financial Conduct Authority, Cryptoasset registration under the Money Laundering Regulations 2017, fca.org.uk, and Cryptoasset registration information for applicants (a decision within 3 months once the FCA has all the information it needs), fca.org.uk, accessed ; UK Government, Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made , legislation.gov.uk, accessed .
- Financial Conduct Authority, PS26/12: A prudential regime for cryptoasset firms, published , CRYPTOPRU 4.2.1R (permanent minimum requirements: £150,000 for operating a trading platform, safeguarding or staking; £750,000 for dealing as principal; the highest applicable requirement applies), fca.org.uk, accessed .
- Virtual Assets Regulatory Authority (Dubai), Virtual Assets and Related Activities Regulations 2023 and VARA Rulebooks (Exchange Services), rulebooks.vara.ae, accessed .
- ADGM Financial Services Regulatory Authority, Financial Services and Markets Regulations (FSMR) and the FSRA Virtual Asset Framework, adgm.com, accessed .
- Monetary Authority of Singapore, Payment Services Act 2019 (digital payment token services); Financial Services and Markets Act 2022 Part 9 (DTSP), mas.gov.sg, accessed .
- Securities and Futures Commission (Hong Kong), Licensing regime for virtual asset trading platform operators (SFO Types 1 and 7; AMLO Part 5B), sfc.hk, accessed .
- BVI Financial Services Commission, Virtual Assets Service Providers Act, 2022 (Act No. 17 of 2022), bvifsc.vg, accessed .
- Cayman Islands Monetary Authority, Virtual Asset (Service Providers) Act (2024 Revision) and the licensing of virtual asset trading platforms, cima.ky, accessed .
- Seychelles Financial Services Authority, Virtual Asset Service Providers Act, 2024 (Act 12 of 2024) and the Virtual Asset Service Provider (Capital and other Financial Requirements) Regulations, 2024 (SI 72 of 2024), fsaseychelles.sc, accessed .
- US Financial Crimes Enforcement Network, Money services business definition, 31 CFR 1010.100(ff), ecfr.gov, accessed .
- New York State Department of Financial Services, Virtual currency business activity (BitLicense), 23 NYCRR Part 200, dfs.ny.gov, accessed .
- US Congress, GENIUS Act (S.1582, 119th Congress), enacted , congress.gov, accessed .
- US Congress, CLARITY Act (H.R.3633, 119th Congress), passed the House 294–134 on ; Senate cloture on the motion to proceed not invoked 49–50 on , congress.gov, accessed .
- Financial Action Task Force, Jurisdictions under Increased Monitoring, , fatf-gafi.org, accessed .
- EFTA, EEA-Lex: Regulation (EU) 2023/1114 (MiCA), incorporated into the EEA Agreement by Joint Committee Decision No 41/2025 and in force in the EEA from 24 June 2025; Directive (EU) 2015/2366 (PSD2), JCD 165/2019, in force 1 May 2022; Directive 2009/110/EC (EMD2), JCD 120/2010, in force 1 November 2012; Directive 2014/65/EU (MiFID II), JCD 78/2019, in force 3 December 2019, efta.int, accessed .
- Government of Malta, Markets in Crypto-Assets Act (Fees) Regulations, S.L. 647.01 (Legal Notice 295 of 2024), regulation 6(1): CASP application fee €10,000 (Class 1), €20,000 (Class 2) or €25,000 (Class 3), highest class only, legislation.mt, accessed .
- Republic of Seychelles, Business Tax (Amendment of Seventh Schedule) Regulations, 2024 (S.I. 102 of 2024), item 5: tax of 1.5% on the assessable income of a licensee under Part III of the Virtual Asset Service Providers Act, 2024 (Act 12 of 2024), in operation , src.gov.sc, accessed .
- Cayman Islands, Virtual Asset (Service Providers) (Amendment) Regulations, 2025 (SL 19 of 2025), Schedule 2 (registration and licence fees, stated in Cayman Islands dollars; trading-platform licence grant fee KYD 100,000), Legislation Gazette No. 17 of , cima.ky, accessed .
- Seimas of the Republic of Lithuania, Law on Markets in Crypto-Assets (No. XIV-2879), consolidated edition from 2 July 2026, Article 4 (a licensed crypto-asset service provider has a board and a manager, each approved in advance by the Bank of Lithuania), e-seimas.lrs.lt, and Law on Companies (No. VIII-1835), Article 33(2) (a board has at least three members), e-seimas.lrs.lt, accessed ; Bank of Lithuania, Markets in Crypto-Assets (an appropriate operation centre in Lithuania expected), lb.lt, accessed .
- Virgin Islands, Financial Services (Fees) (Amendment) Regulations, 2023 (S.I. 2023 No. 5), Schedule item (xi), Virtual Assets Service Providers Act: application fee USD 5,000, or 10,000 for custody or an exchange; initial registration USD 7,500, 15,000 for custody, or 25,000 for an exchange; approval of the auditor USD 1,000 plus 1,500 and of each director or senior officer USD 200 plus 300, bvifsc.vg, accessed .
- Virgin Islands, Financial Services (Fees) (Amendment) Regulations, 2025 (S.I. 2025 No. 4, gazetted ): approval of a person as both Money Laundering Reporting Officer and compliance officer in a single application (Financial Services Commission Act, s.34(8)), laws.gov.vg, accessed .
- Federal Register, GENIUS Act Regulations on Payment Stablecoin Issuance, Offer, and Sale (Treasury proposed rule, 91 FR 53368, 18 August 2026; no GENIUS Act implementing rule published as final by 22 September 2026), federalregister.gov, accessed .
- Financial Conduct Authority, Handbook Notice No 144 (September 2026), paragraphs 2.20–2.23 and 3.32–3.43: Cryptoasset Activities (Periodic and Application Fees) Instrument 2026, in force (FSMA application fee £28,150, Category 7, for operating a qualifying cryptoasset trading platform; one fee at the highest applicable category), fca.org.uk, accessed .
- Virtual Assets Regulatory Authority, Company Rulebook, Part VI.B.1–3 (Paid-Up Capital: Exchange Services the higher of AED 1,500,000 and 25% of fixed annual overheads, or the higher of AED 800,000 and 15% where a VARA-licensed custodian is used or VARA otherwise approves during licensing; held at all times in a UAE-bank trust account or a surety bond with VARA as beneficiary, or in another manner VARA specifies on granting the licence) and VI.C (Net Liquid Assets), rulebooks.vara.ae, accessed .
- Securities and Futures Commission (Hong Kong), Guidelines for Virtual Asset Trading Platform Operators, paragraphs 6.1 (liquid assets in Hong Kong, virtual assets excluded, of at least 12 months of actual operating expenses), 6.2 (HKD 5,000,000 paid-up share capital), 6.3 (required liquid capital: the higher of HKD 3,000,000 and the basic amount) and 6.9 (notification when liquid capital falls below 120% of required liquid capital), sfc.hk, accessed .
- Cayman Islands Monetary Authority, Statement of Guidance: Virtual Asset Custodians and Virtual Asset Trading Platforms (February 2026 version, listed as current on CIMA’s VASP regulatory-measures page; the file name and side stamps mark individual paragraphs, mainly conduct-of-business provisions, as “Repealed”, and section 8.1 is not so marked), section 8.1 (regulatory capital of at least the higher of risk-based capital and six months’ fixed overheads, or an amount the Authority determines), cima.ky, accessed .
- European Commission, High-risk third countries (Commission Delegated Regulation (EU) 2016/1675 as amended by Delegated Regulations (EU) 2026/46 and 2026/83; British Virgin Islands listed with effect from ), finance.ec.europa.eu, accessed .
- Seychelles Financial Services Authority, Virtual Asset Service Providers: Paid-Up Capital Requirements Guidance Note, version of (paras 3.4–3.5: from the third year the minimum paid-up capital is 2.5% of annual turnover from licensed services), fsaseychelles.sc, and Substance Requirements Guidance Note, version of (a resident director living in Seychelles 183 days or more in any 12 months; a full-time resident compliance officer; compliance not outsourced save within FSA-approved group structures), fsaseychelles.sc, accessed .
- Seychelles Financial Services Authority, Licensed VASPs register (no entity listed as licensed; transitional applicants listed in assessment), fsaseychelles.sc, accessed .
- California Department of Financial Protection and Innovation, Digital Financial Assets Law: Preparing for your Application (a DFAL licence application was due by 1 July 2026 to continue serving California residents), dfpi.ca.gov, accessed .
- Monetary Authority of Singapore, Form 1: Application for a Payment Service Provider Licence, waiting-period notice (page last updated 9 October 2025), mas.gov.sg, accessed .