Why Choose Lithuania for Crypto Licensing?
Lithuania is an EU member state offering MiCA CASP authorisation with full EEA passporting, moderate costs, and one of Europe’s most developed fintech ecosystems. The Bank of Lithuania lists 70 EMIs with a full licence (September 2026) and operates CENTROlink, a central bank-run payment system that gives financial institutions access to SEPA payment schemes.
Applicants who succeeded under the old VASP regime with a minimal compliance setup will find that the new supervisor, the Bank of Lithuania, now demands governance, capital, and documentation standards comparable to an EMI application.
Full MiCA Passporting
A Lithuanian CASP authorisation grants the right to provide crypto-asset services across the EEA through a single notification to the Bank of Lithuania under MiCA Article 65.[1] After receiving all Article 65 information, the Bank of Lithuania must communicate it to the host competent authorities, ESMA and EBA within 10 working days and notify the CASP. The CASP may start when it receives that notification or, at the latest, 15 calendar days after it supplied the Article 65 information. No additional authorisation is required from host-country regulators. Both cross-border service provision and branch establishment are covered.
Estonia’s former VASP regime imposed national capital floors of €100,000–€250,000 before MiCA; its current CASP route follows MiCA’s €50,000/€125,000/€150,000 classes. Lithuania likewise applies those MiCA prudential safeguards directly, so there is no current €50,000–€100,000 capital saving against Estonia.
Established Fintech Infrastructure
The Bank of Lithuania lists 70 electronic money institutions with a full licence (checked ).[3] It also operates CENTROlink, a central bank-run payment system that gives supervised financial institutions access to SEPA payment schemes. Participation in T2, the Eurosystem’s real-time euro settlement system (the TARGET-LIETUVOS BANKAS component in Lithuania), is separate: banks, electronic money institutions, and payment institutions can join it, but not through CENTROlink.[42] For CASPs handling fiat-to-crypto conversions, this infrastructure reduces settlement dependency on third-party banking relationships. Vilnius hosts a concentrated fintech talent pool, with approximately 8,000 fintech professionals and nearly 250 fintech companies.[4]
Competitive Cost Structure
Lithuania’s Year 1 cost, €5,425 of statutory fees plus a build of €70,500–€263,000 before the prudential safeguard, is competitive within the EU MiCA landscape. Unlike Malta, where the MFSA application fee alone is €10,000–€25,000 by class and the annual supervisory fee adds a €10,000–€50,000 class base plus €2,000 per authorised service (and, after the first year, 0.05% of transaction volume, capped at €250,000),[5] Lithuania’s state application fee is €2,425. The country’s lower labour costs, with a minimum wage of €1,153 per month as of 2026, reduce the personnel component that constitutes the largest ongoing expense for licensed CASPs. That said, the €70,500 build floor assumes a lean Class 1 operation: operators planning exchange or custody services should budget closer to the €150,000–€263,000 range once compliance staffing and DORA-compliant ICT infrastructure are factored in, and separately meet prudential safeguards of at least the higher of the EUR 50,000/125,000/150,000 Annex IV class floor and 25% of previous-year fixed overheads (projected first-12-month overheads for a new firm), met by qualifying own funds, insurance or a comparable guarantee, or a combination.
Regulatory Track Record
Lithuania had over 800 VASP registrations at peak in 2022 before MiCA.[6] That regime was administered by the FCIS, so the Bank of Lithuania’s MiCA work builds on its payments and e-money supervision rather than on its own VASP supervision. The regulator published its expectations for future crypto-asset service providers in and held consultation seminars with 200+ attendees before MiCA’s application date.[7]
Regulatory Framework
Lithuania regulates crypto-asset service providers under the EU’s Markets in Crypto-Assets Regulation (MiCA), Regulation (EU) 2023/1114,[1] which applies directly as an EU Regulation without national transposition. The national implementing legislation is the Law on Markets in Crypto-Assets (Law No. XIV-2879), adopted by the Seimas on July 11, 2024.[8] The Bank of Lithuania (Lietuvos Bankas) is the sole competent authority for CASP authorisation. See the MiCA guide: requirements and timeline →
Definition: MiCA CASP Authorisation
MiCA CASP authorisation is the regulatory approval required to provide crypto-asset services within the European Union under Regulation (EU) 2023/1114, other than by an eligible financial entity notifying under Article 60 (Markets in Crypto-Assets Regulation).[1] In Lithuania, the Bank of Lithuania grants this authorisation under the supplementary Law on Markets in Crypto-Assets (No. XIV-2879). Licensed CASPs hold an indefinite authorisation (no renewal) and are subject to annual supervision fees and ongoing prudential, governance, and conduct-of-business obligations. Exchange of crypto-assets for fiat currency is VAT-exempt under the CJEU Hedqvist ruling (C-264/14); the exemption does not automatically extend to other services such as custody.
Dual-Regulator Structure
Lithuania operates a dual-supervision model for CASPs. The Bank of Lithuania handles authorisation and prudential, governance, and conduct-of-business supervision, and it also supervises CASPs’ AML/CFT compliance, under AML instructions for CASPs that it sets in agreement with the FCIS.[16] The Financial Crime Investigation Service (FCIS, Lithuanian: FNTT, Finansinių nusikaltimų tyrimo tarnyba) is the financial intelligence unit: it receives suspicious-transaction reports and notices of AML officer appointments, and it keeps a general AML supervisory power over financial institutions. CASPs must maintain compliance relationships with both bodies. STR/SAR reports are filed to FCIS via the goAML reporting system.[9]
Regulatory History
Lithuania’s crypto regulatory history explains the current landscape. The original VASP registration regime began in , administered by the FCIS under the Law on Prevention of Money Laundering and Terrorist Financing (No. VIII-275). Registration was a self-declaration process with minimal substantive review, €2,500 minimum capital, zero state fees, and no physical presence requirement. This attracted over 800 registrations by late 2022.
The Seimas approved tightening amendments (Law XIV-1374) in , effective . These raised the minimum share capital to €125,000, required a senior manager permanently resident in Lithuania, barred people with certain criminal convictions from management and ownership, limited AML officers to one operator, and barred operators from running the business mainly abroad with only non-essential functions left in Lithuania.[36]
On , the Seimas adopted Law XIV-2879 (Law on Markets in Crypto-Assets), designating the Bank of Lithuania as the competent authority for MiCA CASP authorisation from .
Regulatory Sandbox
The Bank of Lithuania has operated a regulatory sandbox since .[10] Eligibility requires genuine innovation, consumer benefit, the need for live testing, and demonstrated readiness. Duration is agreed case-by-case, with approximately 6-month terms subject to renewal. Separately, the Bank of Lithuania developed LBChain: the world’s first regulator-operated blockchain sandbox platform.
For standard MiCA CASP applications, the sandbox is unlikely to serve as a practical pathway given MiCA’s well-defined authorisation procedure, but it remains relevant for applicants testing novel business models.
Recent Regulatory Developments
Authorised CASP entity names below are sourced from the Bank of Lithuania’s supervised-entities register.[27]
- : Bank of Lithuania announced its fourth CASP authorisation (Micar Assets, UAB, authorised on according to ESMA’s register).[27][41] Published draft CASP reporting form amendments.
- : Two CASPs authorised on (CoinGate/UAB Decentralized and Nuvei Liquidity, UAB).[27] Transitional period ended . Law XV-185 had extended the original deadline to .
- : First Lithuanian MiCA CASP authorisation granted (Robinhood Europe, UAB).[27] Seimas adopted Law XV-185 extending transitional deadline.
- : MiCA fully applicable from . Bank of Lithuania began accepting formal CASP applications.
- : Bank of Lithuania published its expectations for future crypto-asset service providers.
- : Seimas adopted Law XIV-2879 (Law on Markets in Crypto-Assets).
Regulatory Overlap
EMI/PSD2 overlap: EMT issuance and EMT payment services require separate analysis. The EBA’s non-binding June 2025 opinion treats client EMT transfers and custodial wallets enabling transfers to and from third parties as payment services, while distinguishing exchange and crypto-purchase intermediation. Where PSD2 applies, the relevant services require appropriate PSP authorisation or provision through an authorised PSP under MiCA Article 70(4).[11]
The EBA transition ended on 2 March 2026: its February 2026 opinion advises supervisors to require CASPs without the relevant PSP authorisation or PSP partnership to cease these EMT payment services and offboard their clients, unless the supervisor permits temporary continuation under the pending-application conditions in paragraphs 9 to 12.[43]
MiFID II overlap: Crypto-assets that confer equity-like rights or are negotiable on capital markets are classified as transferable securities under MiFID II, not MiCA. ESMA’s technology-neutral guidelines (applicable ) establish a substance-over-form classification test.[12]
AIFMD overlap: AIFMs providing discretionary portfolio management, investment advice, or reception and transmission of crypto orders to external clients require MiCA Article 60 notification. But core fund management activities remain under AIFMD without additional MiCA authorisation.
Regulatory Transition: VASP Registration to MiCA CASP Authorisation
Lithuania transitioned from its legacy VASP registration regime (administered by the FCIS) to full MiCA CASP authorisation (administered by the Bank of Lithuania) between and . The transition period ended on , leaving unlicensed operations with no legal basis from .
Key Deadlines
| Milestone | Date | Impact |
|---|---|---|
| MiCA fully applicable | December 30, 2024 | CASP authorisation available; Bank of Lithuania begins accepting applications |
| Original transition deadline (Law XIV-2879) | June 1, 2025 | Deadline for legacy VASPs to obtain MiCA authorisation or cease operations |
| Seimas extends deadline (Law XV-185) | Transition extended by 7 months | |
| Extended transition deadline | December 31, 2025 | Final date for legacy VASPs to operate without MiCA authorisation |
| Full enforcement | January 1, 2026 | Unlicensed operation unlawful; a crime where carried on as a business or on a large scale |
Transition Statistics
The Bank of Lithuania reported material deficiencies in the transition files it assessed, including failure to demonstrate the origin of owners’ assets, non-compliance with fit-and-proper requirements, and poor documentation quality.[14] The transition therefore demonstrates a materially stricter authorisation standard than the former registration regime, without implying an approval probability from an unstable comparison of register populations.
Consequences for Unlicensed Operations
From , providing crypto-asset services in Lithuania without a MiCA authorisation or an Article 60 notification carries:[1]
- Criminal penalties under Article 202 of the Criminal Code where the activity is carried on as a business or on a large scale: a fine, restriction of liberty, arrest, or imprisonment for up to 4 years (up to 7 years where it causes very large damage to the state); legal persons are also liable[35]
- Administrative penalties under Article 15 of the Law on Markets in Crypto-Assets, which implements MiCA Article 111: fines up to €5,000,000 or 10% of total annual income (whichever is higher) for a legal person, and up to €700,000 for a manager or other natural person[8]
- Website blocking: The Bank of Lithuania is empowered to block websites of suspected illegal operators
- Public naming: The Bank of Lithuania maintains and publishes a list of entities suspected of providing illegal crypto-asset services
Financial Institutions, Article 60 Notification
Already-licensed financial entities do not need a separate CASP licence for the services Article 60 allows them: a credit institution may provide crypto-asset services, an investment firm services equivalent to its investment services, and an EMI only custody, administration, and transfer services for the e-money tokens it issues.[1] Under MiCA Article 60, these entities notify the Bank of Lithuania of their intention to provide crypto-asset services. The notification must include a programme of operations and evidence of adequate governance. This route is significantly faster than a fresh CASP application.
License Types and Activities Covered
MiCA defines 10 crypto-asset services grouped into 3 classes that determine capital requirements. Lithuania implements MiCA directly without additional national service categories. The classification determines the Annex IV class floor: €50,000 for Class 1, €125,000 for Class 2, and €150,000 for Class 3.
Covered Activities
| Class | Service | MiCA Reference | Description |
|---|---|---|---|
| 1 | Reception and transmission of orders | Art. 3(1)(23) | Receiving client orders and routing them to another CASP or trading platform |
| 1 | Providing advice on crypto-assets | Art. 3(1)(24) | Personalised recommendations on crypto-asset transactions |
| 1 | Providing portfolio management | Art. 3(1)(25) | Discretionary management of client crypto-asset portfolios |
| 1 | Execution of orders on behalf of clients | Art. 3(1)(21) | Buying/selling crypto-assets per client instructions |
| 1 | Placing of crypto-assets | Art. 3(1)(22) | Marketing newly issued crypto-assets to investors |
| 1 | Transfer services on behalf of clients | Art. 3(1)(26) | Transferring crypto-assets between addresses on behalf of clients |
| 2 | Custody and administration | Art. 3(1)(17) | Safekeeping crypto-assets and private keys on behalf of clients |
| 2 | Exchange of crypto-assets for funds | Art. 3(1)(19) | Fiat-to-crypto and crypto-to-fiat conversion |
| 2 | Exchange of crypto-assets for other crypto-assets | Art. 3(1)(20) | Crypto-to-crypto conversion |
| 3 | Operation of a trading platform | Art. 3(1)(18) | Operating an exchange matching buy/sell orders from multiple parties |
What Does NOT Require CASP Authorisation
Services provided in a fully decentralised manner without any intermediary fall outside MiCA’s scope (Recital 22). Unique, non-fungible tokens (NFTs) are excluded, although fractional parts of an NFT are not treated as unique and issuance in a large series or collection is an indicator of fungibility. Crypto-assets that qualify as financial instruments under MiFID II are regulated under existing securities law, not MiCA. Central bank digital currencies (CBDCs), deposits, insurance products, pension products, and securitisation positions are excluded.
DAO, DeFi, and Regulatory Perimeter
MiCA does not explicitly cover decentralised autonomous organisations (DAOs) or DeFi protocols. ESMA has stated that decentralisation exists on a spectrum rather than as a binary classification. Partially decentralised services, such as DEXs with upgrade keys, admin-controlled smart contracts, or governance tokens concentrated among a small group, remain within MiCA’s scope if an identifiable intermediary exists. The Bank of Lithuania has not published jurisdiction-specific guidance on DAOs, DeFi, or decentralised exchanges.[15] Applicants operating hybrid models should seek pre-application engagement through the Bank of Lithuania’s Newcomer Programme.
NFT Classification
NFTs that are unique and not fungible with other crypto-assets are excluded from MiCA under Article 2(3). Fractional parts of an NFT are not treated as unique and non-fungible, so the exclusion does not cover fractionalised units. Issuance in a large series or collection is an indicator of fungibility to be weighed, not a conclusive test, and a unique token does not lose the exclusion merely because it is traded or accumulated speculatively.
The classification is substance-based: MiCA still applies to a token that looks unique but whose actual features or uses make it fungible or not unique, and labelling a token as “NFT” does not determine its regulatory treatment. A token that qualifies as a financial instrument falls outside MiCA under Article 2(4)(a) and is regulated under securities law instead.
Tokenised securities and RWA
MiCA Article 2(4) excludes crypto-assets that qualify as financial instruments. A tokenised security, a tokenised share, bond or fund unit, is regulated under MiFID II, the Prospectus Regulation, and the EU DLT Pilot Regime (Regulation (EU) 2022/858), supervised in Lithuania by the Bank of Lithuania rather than under MiCA.
ESMA’s Guidelines on the qualification of crypto-assets as financial instruments set the boundary. The honest point: a Lithuanian MiCA CASP authorisation does not cover tokenised securities or real-world-asset tokens that meet the financial-instrument test; those follow the MiFID securities regime.
We scope the security-token route through the relevant securities regulator and pair it with crypto permissions, or with EU fund licensing for tokenised fund units, only where the operating model needs them.
Requirements
MiCA CASP authorisation in Lithuania requires a Lithuanian company (an AB or, on the route this guide describes, a UAB), prudential safeguards of at least the higher of the EUR 50,000/125,000/150,000 Annex IV class floor and 25% of previous-year fixed overheads (projected first-12-month overheads for a new firm), met by qualifying own funds, insurance or a comparable guarantee, or a combination, an operation centre in Lithuania, a management-level AML officer (MLRO), a board (valdyba) of at least three members plus a manager (vadovas), each approved in advance by the Bank of Lithuania,[8][37] and a comprehensive compliance documentation suite. All qualifying shareholders (10%+ of capital or voting rights) undergo fit-and-proper assessment.
The most common early mistake is underestimating the language barrier. While the Bank of Lithuania accepts application materials in English, all ongoing regulatory correspondence, inspection reports, and STR filings to the FCIS operate in Lithuanian. Applicants without Lithuanian-speaking compliance staff will need a permanent translation arrangement, not a one-off service.
| Requirement | Detail |
|---|---|
| Entity type | AB or UAB; the UAB (Uždaroji Akcinė Bendrovė, private limited company) route is described here |
| Annex IV class floor (Class 1) | €50,000 |
| Annex IV class floor (Class 2) | €125,000 |
| Annex IV class floor (Class 3) | €150,000 |
| Ongoing prudential-safeguard formula | Higher of: permanent minimum per class OR 25% of fixed overheads of the preceding year; for a firm without a full year of operations, use projected fixed overheads for its first 12 months |
| Management body | Board (valdyba) of at least three members plus a manager (vadovas), each approved in advance by the Bank of Lithuania; corporate directors not permitted |
| MLRO | Management-level AML officer, plus a board member responsible for AML; the FCIS is notified within 7 working days |
| Director EU residency | At least 1 director must be resident in the EU (MiCA Article 59(2)) |
| Physical office | Registered office in Lithuania; virtual offices not accepted |
| Foreign ownership | 100% foreign ownership permitted |
| Qualifying shareholders | All holders of 10%+ capital/voting rights undergo fit-and-proper assessment with source-of-funds verification |
| PI insurance | Optional: MiCA Article 67(4) lets an insurance policy or comparable guarantee cover all or part of the prudential safeguard, alone or combined with own funds |
Fit-and-Proper Assessment
The Bank of Lithuania evaluates directors, senior managers, qualifying shareholders, and key function holders (MLRO, CCO) against MiCA’s fit-and-proper criteria. Assessment dimensions include: professional qualifications and experience, reputation and integrity (criminal background check, regulatory history), financial soundness (no insolvency or ongoing enforcement), and collective knowledge of the management body. The fit-and-proper assessment was the primary failure point in early Lithuanian CASP applications: applicants were unable to demonstrate legitimate origin of owners’ capital or had regulatory histories in other jurisdictions that raised concerns.
Local Presence and Substance
Lithuania requires genuine local substance for licensed CASPs. The Bank of Lithuania states that a licensed provider must have an appropriate operation centre in Lithuania for its business model and must not be an empty shell with most of its activities outsourced, so a virtual office alone is not enough.[7] The VASP-era statutory rules, including a senior manager permanently resident in Lithuania, lapsed with the national regime on ; the AML Law now requires a management-level AML officer and, because a CASP has a board, a board member responsible for AML.[16]
At least one director must be resident in the EU under MiCA Article 59(2). The Bank of Lithuania assesses whether the applicant’s organisational structure allows effective supervision from Lithuania. A letterbox entity with outsourced management in another jurisdiction is not acceptable.
AML/CFT and Travel Rule
Lithuania’s AML framework is governed by the Law on the Prevention of Money Laundering and Terrorist Financing (No. VIII-275, as amended).[16] The EU’s Transfer of Funds Regulation Recast (Regulation (EU) 2023/1113) applies directly. Critical detail: there is no de minimis threshold for CASP-to-CASP transfers, so full originator and beneficiary information must accompany all crypto transfers regardless of amount. The €1,000 threshold applies only to transfers involving self-hosted wallets.
Where a transfer exceeds €1,000 to or from an unhosted address, the CASP must assess whether its client owns or controls that address.[17]
Sanctions screening must cover EU sanctions lists (mandatory), UN sanctions lists (implemented via EU legislation), and FCIS-maintained lists under UNSCR 1373. OFAC screening is not legally mandatory in Lithuania but is strongly recommended given extraterritorial reach and correspondent banking expectations. Suspicious transaction reports are filed to the FCIS via the goAML system, within 3 working hours for suspended transactions.
Application Process
The Bank of Lithuania assesses MiCA CASP applications within a statutory framework of 25 working days for completeness and 40 working days for substantive assessment (from receipt of the complete application; suspended for up to 20 working days by a written information request made by working day 20).[1] The realistic end-to-end timeline, from initial preparation through authorisation, is 4–8 months.
Experienced applicants invest heavily in pre-application engagement through the Bank of Lithuania’s Newcomer Programme. The informal feedback received at this stage, particularly on business model viability and governance expectations, can save months of back-and-forth during formal assessment.
Application language: Lithuanian is the primary regulatory language. Filing is through the Bank of Lithuania’s LBIS electronic portal. The Bank of Lithuania’s CASP licensing rules and key annexes are published in English. Supporting documents can be submitted with certified translations. The Bank of Lithuania retains the right to require Lithuanian translations of all materials.
Pre-application engagement: The Bank of Lithuania operates a Newcomer Programme where prospective market participants present their business plan and receive initial regulatory feedback before filing a formal application.[18] This is not mandatory but strongly recommended, it identifies deficiencies before the statutory clock begins.
Entity Formation and Prudential Safeguards
Forming a Lithuanian UAB is the first step. See the full Lithuania company formation guide → Incorporate the UAB through the Register of Legal Entities. Put in place prudential safeguards of at least the higher of the EUR 50,000/125,000/150,000 Annex IV class floor and 25% of previous-year fixed overheads (projected first-12-month overheads for a new firm), met by qualifying own funds, insurance or a comparable guarantee, or a combination; MiCA does not require a separate locked cash deposit. Appoint the management body (a board of at least three members and a manager, each needing prior Bank of Lithuania approval), the MLRO, and the compliance officer. Establish the operation centre in Lithuania.
Compliance Documentation Preparation
Draft the full compliance documentation suite required under MiCA Article 62 and Commission Delegated Regulation (EU) 2025/305. This includes the AML/CFT policy manual, enterprise-wide risk assessment, sanctions screening procedures, transaction monitoring framework, Travel Rule implementation documentation, KYC/CDD procedures, business continuity plan, DORA/ICT risk management framework, cybersecurity policies, complaints handling, conflicts of interest, and wind-down plan. Each document must be bespoke and tailored to the applicant’s specific business model.
Banking and Payment Infrastructure Setup
Open a corporate bank account with a Lithuanian credit institution or a foreign bank with a Lithuanian branch. Unless the CASP is itself a credit institution, EMI, or payment institution, MiCA Article 70(3) requires client funds other than e-money tokens to be placed with a credit institution or a central bank by the end of the following business day, separately identifiable from the CASP’s own funds: an EMI account does not satisfy this safeguarding rule.[1]
Pre-Application Engagement
Engage with the Bank of Lithuania’s Newcomer Programme. Present the business model, corporate structure, and governance framework for preliminary feedback.
Formal Application Submission
Submit the complete application through the LBIS electronic portal. The application form (Annex 1) and supporting annexes (2–7) are published on the Bank of Lithuania’s CASP authorisation page.[15] Pay the state application fee (€2,425).
Completeness Assessment
The Bank of Lithuania verifies that all required documentation has been submitted. If incomplete, the Bank of Lithuania sets a deadline for the missing information; the 40-working-day assessment runs from receipt of the complete application. This is where poorly prepared applications stall.
Substantive Assessment and Decision
The Bank of Lithuania assesses the application against MiCA’s authorisation criteria. A written information request made by working day 20 can suspend the assessment once, for up to 20 working days. Authorisation is published in the Lithuanian CASP register and notified to ESMA for inclusion in the EU-wide register.
Compliance documentation is the most time-intensive component of any Lithuanian CASP application: 8–12 weeks of specialist drafting work covering Lithuania-specific AML/CFT policy manuals, enterprise-wide risk assessments, sanctions screening frameworks, and Travel Rule implementation.
Required Documents
The Bank of Lithuania’s CASP authorisation documentation requirements follow MiCA Article 62 and Commission Delegated Regulation (EU) 2025/305.[19] The Bank of Lithuania publishes the application form (Annex 1) and six supporting annexes covering governance, programme of operations, and prudential safeguards.
Corporate Documents
Certificate of UAB incorporation from the Lithuanian Register of Legal Entities. Articles of Association (Įstatai). Shareholder register. Evidence of the prudential safeguards under MiCA Article 67 (a bank statement for paid-in own funds, or the insurance policy or guarantee). LEI (Legal Entity Identifier). Proof of registered office address.
Personal Documents (All Directors, Officers, and Qualifying Shareholders)
Valid government-issued photo identification (passport or national ID). Curriculum vitae (CV) with detailed professional history. Criminal record certificates from each country of residence in the past 10 years. Declaration of good repute and absence of pending proceedings. Evidence of professional qualifications, skills, and experience relevant to the role. For qualifying shareholders (10%+): detailed source-of-funds and source-of-wealth documentation, the most scrutinised element in Lithuanian CASP applications.
Compliance Documentation
The independent specialist introduced for the case drafts each of these documents to Lithuania-specific requirements, under its own engagement with the client. The compliance documentation is the most heavily scrutinised component of any Lithuanian CASP application. Each document must be bespoke and Lithuania-specific, reflecting the applicant’s specific business model, risk profile, and operational structure: generic MiCA templates adapted from other jurisdictions are the single most common cause of application delays and rejection.
The AML/CFT policy must address Lithuania’s dual-supervision model: the Bank of Lithuania’s AML/CFT instructions and supervision, and reporting to the FCIS/FNTT as the financial intelligence unit. The manual must include the methodology for customer risk categorisation, enhanced due diligence triggers, PEP screening procedures, and the interface with the goAML reporting system.
The risk assessment must cover Lithuania-specific risks including the country’s position as a gateway to Baltic and CEE markets, exposure to CIS-origin client flows, and specific sectors identified as higher risk by the FCIS national risk assessment. The assessment must be dynamic, updated at least annually.
Lithuanian CASPs must screen against EU consolidated sanctions lists (mandatory) and UN sanctions lists (mandatory). The procedures must specify screening frequency (real-time for onboarding, ongoing monitoring thereafter), the technical screening solution used, false-positive management, and the 2-working-day notification obligation to the FCIS for frozen assets.
The framework must address on-chain analytics capability, thresholds for automated alerts, escalation procedures, and investigator workflows. For Lithuania, the monitoring must integrate with the goAML STR filing system.
The documentation must specify the messaging protocol (IVMS101, OpenVASP/TRP, or proprietary), the process for assessing whether the client owns or controls a self-hosted address for transfers exceeding €1,000, and interoperability arrangements with counterparty CASPs. There is no de minimis threshold for CASP-to-CASP transfers.
Reports are filed to the FCIS (FNTT) via Lithuania’s goAML system. For suspended transactions, reporting must occur within 3 working hours. The procedures must cover staff training, internal escalation, tipping-off prohibitions, and record retention.
The procedures must differentiate between individual and institutional clients (KYB), specify document requirements for each risk category, and address remote onboarding technology (video verification, electronic identification). Lithuania’s requirements follow EU AMLD5 standards.
The documentation must address all five DORA pillars. For Lithuanian CASPs, the Bank of Lithuania is the enforcement authority for DORA compliance. See the ICT Risk Management section below for full details.
MiCA requires CASPs to establish and maintain effective complaints handling procedures. The policy must specify response timeframes, escalation procedures, and record-keeping. It must be published on the CASP’s website.
The policy must address conflicts arising from proprietary trading, employee personal dealing, related-party transactions, and incentive structures. The Bank of Lithuania expects specific procedures for disclosure when conflicts cannot be avoided.
Business Plan and Financial Projections
Programme of operations per MiCA Article 62(2)(d): description of all crypto-asset services to be provided, target markets, client profile, marketing strategy. Three-year financial projections including revenue model, cost base, capital adequacy forecasts, and break-even analysis. Description of the governance structure and internal control mechanisms.
Technology and Operational Documentation
IT architecture documentation. Cybersecurity policy and penetration test reports. Hot/cold wallet management and key management procedures (for custody service providers). Business continuity plan and disaster recovery procedures. Third-party ICT provider register (DORA requirement). Incident response plan for major ICT incidents.
Costs and Pricing
Lithuania’s MiCA CASP authorisation costs are structured across three tiers matching MiCA’s service classification. The state fee for issuing the licence is €2,425 and a change to it costs €272, substantially lower than Malta’s €10,000–€25,000 application fee.[31] Supervision is charged separately: the Bank of Lithuania levies an annual fee of 0.7% of the provider’s revenue, with a floor of €3,000, so a pre-revenue CASP still budgets €3,000 a year.[32] Those two charges are the whole statutory bill, €5,425 in Year 1. Everything else is build: the largest components are personnel (3+ staff at Lithuanian salary levels) and compliance documentation preparation, with the prudential safeguard (own funds, insurance, or a comparable guarantee) held on top.
Statutory Cost, Year 1
| Statutory charge (EUR) | Low (Class 1) | Mid (Class 2) | High (Class 3) |
|---|---|---|---|
| State fee for the licence application (single payment on application) | €2,425 | €2,425 | €2,425 |
| Bank of Lithuania supervision fee, Year 1 (annual: 0.7% of revenue, minimum €3,000) | €3,000 | €3,000 | €3,000 |
| Statutory cost, Year 1 | €5,425 | €5,425 | €5,425 |
Both lines come from published schedules: the state fee from Resolution No 1458, item 3.157.1, and the supervision fee from the Bank of Lithuania’s own rate, 0.7% of revenue with a €3,000 floor.[31][32] Neither varies by service class. From Year 2 the statutory charge is the supervision fee alone, so €3,000 for a pre-revenue CASP and 0.7% of revenue above that.
Typical Build, Year 1 (Quoted Per Case)
| Cost Component (EUR) | Low (Class 1) | Mid (Class 2) | High (Class 3) |
|---|---|---|---|
| UAB formation and registration | €3,000 | €5,000 | €7,000 |
| Legal advisory (application preparation) | €10,000 | €25,000 | €50,000 |
| Compliance documentation (AML/CFT policy suite, risk assessment, Travel Rule, sanctions screening) | €5,000 | €15,000 | €25,000 |
| Technology/ICT documentation (DORA, cybersecurity, BCP) | €5,000 | €10,000 | €20,000 |
| Personnel (MLRO + CCO + operations, annual) | €36,000 | €72,000 | €120,000 |
| Office and operational costs (annual) | €6,000 | €12,000 | €24,000 |
| External audit (annual) | €5,000 | €10,000 | €15,000 |
| Banking setup | €500 | €1,000 | €2,000 |
| Prudential safeguard if funded as own funds (planning assumption; held, not consumed) | €50,000 | €125,000 | €150,000 |
| Typical build, Year 1 (quoted per case, excl. capital) | ~€70,500 | ~€150,000 | ~€263,000 |
| Typical build, annual from Year 2 (excl. capital) | ~€52,000 | ~€97,000 | ~€167,000 |
Note: The capital row assumes the €50,000–€150,000 prudential safeguard is funded as own funds, which stay on the balance sheet and are not consumed during operations. MiCA Article 67(4) also allows an insurance policy or a comparable guarantee, or a combination, and requires no separate locked cash deposit. The ongoing requirement is the higher of the permanent minimum or 25% of the preceding year’s fixed overheads.[1]
Timeline
| Stage | Duration | Cumulative |
|---|---|---|
| Entity formation and prudential safeguards | 2–6 weeks | 2–6 weeks |
| Compliance documentation preparation | 6–10 weeks | 8–16 weeks |
| Banking and payment infrastructure (parallel) | 2–4 weeks | Parallel with Stages 2–3 |
| Pre-application engagement (optional) | 1–2 weeks | 9–18 weeks |
| Formal application submission | 1 week | 10–19 weeks |
| Completeness assessment | Up to 25 working days | 11–24 weeks |
| Substantive assessment | 40–60 working days | 19–36 weeks |
| Total (best case to complex) | 4–8 months | 19–36 weeks |
The Bank of Lithuania processed the first authorised Lithuanian CASP in approximately 5 months from the commencement date to the authorisation, suggesting the lower end of the range is achievable for well-prepared applicants. Complex applications or those requiring additional information can extend to 9–12 months.
Taxation
Lithuania is a moderate-tax EU jurisdiction with a standard corporate income tax rate of 17%, increased from 16% effective as part of a defence spending package (previously 15% until ).[20] A reduced 7% rate applies to qualifying small companies. Crypto-asset services (exchange of crypto for fiat) are VAT-exempt under the CJEU Hedqvist ruling.
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate income tax | 17% (standard, from ) | All CASP profits |
| Small company rate | 7% (revenue ≤ €300,000, from ) | Available if CASP qualifies; 0% for the first 2 taxable periods of new companies owned by individuals |
| Capital gains (corporate) | 17% (part of CIT) | Gains from crypto trading by corporate entities |
| Capital gains (individual) | 15% up to 12 VDU (€27,745.80 in 2026), then 20%/25%/32%[40] | €2,500 non-taxable annual gain on personal asset sales |
| VAT | 21% standard; crypto exchange VAT-exempt | Fiat-to-crypto exchange exempt per Hedqvist ruling |
| Dividend tax (company recipient) | 17% corporate income tax from 2026 | Subject to the participation exemption (generally a ≥10% voting holding for ≥12 months) |
| Dividend withholding (individual recipient) | 15% | Income-tax withholding, subject to any applicable treaty reduction |
| Interest withholding | 0% (EEA/DTT) / 10% | Depends on recipient jurisdiction |
| Employer social contributions | 1.77%–2.49% | On gross salary; employee pays ~19.5% |
Tax Incentives
Lithuania offers targeted incentives that can reduce the effective tax burden. Free Economic Zones (7 zones across the country) provide 0% CIT for the first 10 years and a 50% reduction for the following 6 years for qualifying investments (minimum €1 million or €100,000 for service companies with 20+ employees).[22] R&D expenditure qualifies for a triple deduction (300%), and qualifying intellectual property income benefits from a 7% CIT rate under the patent box regime.
DAC8 / CARF Reporting
Lithuania transposed the DAC8 Directive (Council Directive (EU) 2023/2226) through Law No. XV-309 of , which adds crypto-asset reporting to the Law on Tax Administration from ; the State Tax Inspectorate approved the reporting procedure on .[38] Reporting CASPs collect data from January 1, 2026 and report once a year for the previous calendar year; member states exchange the 2026 data by .[23] Lithuania is also committed to CARF (OECD Crypto-Asset Reporting Framework) implementation, with first exchanges targeted for 2027.[24]
Pillar Two (Global Minimum Tax)
Lithuania is one of 5 EU Member States that elected the Article 50 deferral, so it does not apply the IIR (Income Inclusion Rule) and UTPR (Undertaxed Profits Rule) for six consecutive fiscal years beginning from 31 December 2023 (to the end of 2029 for a calendar-year group). The OECD Global Minimum Tax applies to multinational groups with consolidated revenue of €750 million or more: a threshold unlikely to affect standalone Lithuania-domiciled CASPs.
Ongoing Compliance & Post-Registration
MiCA CASP authorisation creates a permanent compliance infrastructure obligation. The authorisation is indefinite (no renewal), but the Bank of Lithuania conducts ongoing supervision through annual reporting, periodic inspections, and real-time incident reporting. Annual ongoing compliance costs range from €55,000 for a minimal Class 1 operation to €170,000+ for a full-service Class 3 exchange.
Annual Reporting Obligations
CASPs must submit financial statements, capital adequacy reports, and activity reports to the Bank of Lithuania per Resolution No. 03-121 ().[7] Annual audited financial statements are mandatory. CASPs must also report to the FCIS on AML/CFT compliance matters. DAC8 reporting to the VMI starts in 2027 for 2026 data, on the timetable set by the VMI’s reporting procedure.
Supervision Fees
MiCA authorisation is indefinite: there is no annual renewal fee. Instead, CASPs pay an annual supervision contribution set by Bank of Lithuania Board resolution. The contribution funds the Bank of Lithuania’s supervisory activities and is calculated annually.
Regulatory Inspections
The Bank of Lithuania conducts both scheduled and unscheduled supervisory inspections. Thematic reviews focus on AML/CFT compliance, client asset segregation, cybersecurity, and governance. The FCIS conducts separate AML/CFT inspections. The dual-regulator model means inspections from either body can occur independently.
Enforcement
The Bank of Lithuania’s enforcement powers under MiCA include:
- Administrative fines up to €5,000,000 or 10% of total annual income, whichever is higher, for CASPs (Law on Markets in Crypto-Assets, Article 15; MiCA Article 111 sets an EU floor of €5,000,000 or 5%)[8]
- Fines up to €700,000 for natural persons (directors, officers)
- Public statements naming the entity and the nature of the breach
- Withdrawal of authorisation
- Temporary prohibition on management functions
- Suspension or limitation of services
Advertising and Promotion Rules
MiCA’s marketing rules apply directly to Lithuanian CASPs. Under Article 66(2), the information a CASP gives clients, including marketing communications, must be fair, clear, and not misleading, and marketing communications must be identified as such. The statement that no competent authority has reviewed or approved the communication (Article 7(1)(e)) applies to marketing of an offer to the public, or an admission to trading, of crypto-assets other than asset-referenced and e-money tokens.[1] A CASP’s marketing breaches fall under the general fine ceiling of Article 15 of the Law on Markets in Crypto-Assets: up to €5,000,000 or 10% of total annual income, whichever is higher.[8] CASPs are accountable for third-party promotional content, including influencer and social media marketing. Google requires valid CASP authorisation for crypto advertising within the EU from .
ICT Risk Management & Operational Resilience
The Digital Operational Resilience Act (DORA, Regulation (EU) 2022/2554) applies to all CASPs authorised under MiCA.[25] DORA has been applicable since . The Bank of Lithuania is the enforcement authority for DORA compliance among Lithuanian CASPs. Under Article 15 of the Law on Markets in Crypto-Assets, DORA breaches by a CASP can draw fines of up to €5,000,000 or 10% of total annual income, whichever is higher, and up to €700,000 for a manager or other natural person.[8]
Incident Reporting
Major ICT-related incidents must be reported to the Bank of Lithuania within strict deadlines:
| Report | Deadline |
|---|---|
| Initial notification | as early as possible, within 4 hours of classification as major and normally no later than 24 hours after awareness (if classified after that window, within 4 hours of classification) |
| Intermediate report | 72 hours after initial notification |
| Final report | 1 month after latest intermediate report |
Digital Resilience Testing
All CASPs must conduct general resilience testing under DORA Articles 24–25, including vulnerability assessments and penetration testing. Threat-led penetration testing (TLPT) under Articles 26–27 applies only to entities identified by the Bank of Lithuania as significant. TLPT frequency: at least every 3 years. Microenterprises are explicitly excluded from TLPT. Most smaller and mid-size CASPs will not be designated for TLPT but must still conduct general testing.
Third-Party ICT Risk
CASPs must maintain a register of all ICT third-party service providers, including cloud providers, blockchain infrastructure providers, and custody technology vendors. Contractual arrangements must include audit rights, termination provisions, and data localisation specifications.
Wallet and Key Management
CASPs providing custody services must implement segregated hot/cold wallet architectures, multi-signature authorisation for material transactions, key generation in secure environments, and documented key backup and recovery procedures.
Banking
Banking access for MiCA-licensed CASPs in Lithuania is moderate to difficult. Traditional Lithuanian banks, including the major banks that dominate the retail market, remain cautious about onboarding crypto-asset service providers. MiCA authorisation improves credibility compared to the former VASP regime, but does not guarantee acceptance.
Lithuania’s 70 EMIs with a full licence (Bank of Lithuania list, checked ) provide operational alternatives. European EMIs licensed in Lithuania and connected to CENTROlink, the Bank of Lithuania’s central bank-operated payment infrastructure, offer SEPA credit transfers; T2 (TARGET) participation is separate and does not come through CENTROlink.[42] This infrastructure reduces dependency on traditional bank correspondent relationships for payment processing.
For client fund safeguarding under MiCA Article 70(3), a CASP that is not itself a credit institution, EMI, or payment institution needs an account at a credit institution (or a central bank) to hold client funds.[1] This is the harder account to obtain. European credit institutions with Lithuanian branches or direct presence are more receptive to MiCA-licensed entities than they were to VASP-registered entities, but enhanced due diligence processes remain lengthy. Applicants should budget 2–4 months for safeguarding account setup and begin the process in parallel with the CASP application.
Operators who already hold an EMI licence or have an existing relationship with a Lithuanian bank are at a significant advantage. Cold-start CASP applicants should begin banking conversations during the application preparation phase, not after authorisation is granted.
Through Jagelski & Partners’ partner network, businesses placed more than fourteen billion euros in client turnover across banking and EMI relationships in 2025. The network covers 90+ institutions across EU banks, EMIs, offshore correspondent banks, and crypto-native rails in Switzerland, Liechtenstein, UAE, and Asia. Pre-qualified placement, no markup on institutional pricing, no onboarding fee. Jagelski & Partners is paid by the institution, not by the client.
We do not charge an onboarding fee. Banking access is a binding constraint for Lithuanian CASP operations. A licence without banking access is a certificate on the wall. Banking placement across our partner network →
CENTROlink-connected EMIs for operational flows, EEA credit institutions for Article 70 safeguarding, and crypto-native rails in Switzerland, Liechtenstein, and the UAE layered for redundancy. Jagelski & Partners scopes banking options in writing and introduces an independent specialist before a licence application is filed. You contract directly with the specialist; account approval remains the financial institution's decision.
Explore Banking SolutionsFATF Status & International Standing
Lithuania does not appear on any FATF list. It is absent from both the FATF list of Jurisdictions under Increased Monitoring (the “grey list”) and the list of High-Risk Jurisdictions subject to a Call for Action (the “black list”), and has never been listed under either. As an EU member state, Lithuania is likewise outside the scope of the EU list of high-risk third countries, which by definition covers non-EU jurisdictions only.
Lithuania’s anti-money-laundering framework is assessed by MONEYVAL, the Council of Europe’s FATF-style regional body, not by the FATF directly. Its fifth-round Mutual Evaluation Report was adopted at the 57th Plenary in , placing Lithuania in enhanced follow-up: a standard, more frequent reporting cadence within the evaluation cycle, not a sanction or watchlist.
Lithuania then progressed through successive follow-up reports between 2020 and 2023; its fourth Enhanced Follow-Up Report, adopted at the 66th Plenary in and published in , re-rated Recommendation 2 to Compliant.[26]
MONEYVAL terminated Lithuania’s fifth-round reporting at its 67th Plenary in and terminated the related Compliance Enhancing Procedures at its 68th Plenary in , completing the fifth-round process; Lithuania now awaits evaluation under MONEYVAL’s sixth round.[30] It holds ratings of Compliant or Largely Compliant on 36 of 40 FATF Recommendations, with four remaining Partially Compliant: R.6 (targeted financial sanctions, terrorism), R.7 (targeted financial sanctions, proliferation), R.15 (new technologies and virtual assets), and R.28 (DNFBP supervision).
The Partially Compliant rating on R.15 (virtual assets) reflects deficiencies identified during the 2020 1st Follow-Up Report, which related to the original VASP registration regime’s weak supervisory framework. The MiCA transition and transfer of supervision to the Bank of Lithuania represent Lithuania’s primary remediation response.
MiCA Passporting and EU Market Access
MiCA passporting is the headline commercial value of Lithuanian CASP authorisation. Under Article 65, a Lithuanian CASP notifies the Bank of Lithuania of its intention to provide cross-border services or establish a branch in other EEA member states. After receiving all Article 65 information, the Bank of Lithuania must communicate it to the host competent authorities, ESMA and EBA within 10 working days and notify the CASP. The CASP may start when it receives that notification or, at the latest, 15 calendar days after it supplied the Article 65 information. No separate authorisation or additional capital is required from host countries.[1] Both routes are covered: freedom to provide services (cross-border without establishment) and right of establishment (opening a branch). Host NCAs cannot block either route except in extraordinary circumstances. Three of the four Lithuanian CASPs (Robinhood Europe, UAB Decentralized, and Nuvei Liquidity) list all 29 other EEA states as passport destinations in ESMA’s interim register of ; Micar Assets lists none.[41]
The MiCA passport extends across the full EEA. EEA jurisdictions Iceland, Liechtenstein, and Norway sit inside the MiCA passport via EEA Joint Committee Decision No 41/2025 of (with supplementary RTS via JCD 138/2025 of ); three non-EU/non-EEA jurisdictions in geographical Europe sit outside the passport regime, so their own rules decide whether serving local clients needs a local licence or registration: the United Kingdom, Switzerland, and Gibraltar.[28]
Article 61 reverse solicitation is third-country-only and does not apply to a Lithuanian-authorised CASP marketing to other EU/EEA Member States: passporting via Article 65 is the operative pathway. The ESMA Guidelines on reverse solicitation () are framed for non-EU operators serving EU clients on a strictly unsolicited basis, with any further same-type marketing confined to the context of the original transaction. See the dedicated reverse solicitation guide for the third-country compliance pattern.[29]
The ESMA Interim MiCA Register has been operational since , published as CSV files updated weekly.[12] ESMA said the CSV files would run until mid-2026, when the register would be integrated into its IT systems; on it was still published as interim CSV files. The register is the authoritative source for the current EU-wide count of authorised CASPs.
Advantages and Limitations
Lithuania offers a genuine commercial proposition for MiCA CASP authorisation: competitive costs, EU passporting, and established fintech infrastructure. The limitations are real but manageable: language barriers, a rigorous regulator, and moderate banking difficulty.
- Full MiCA passporting across the EEA. A single Lithuanian authorisation grants cross-border service provision and branch establishment rights across the 27 EU Member States, reaching Iceland, Liechtenstein, and Norway through EEA Joint Committee Decision No 41/2025.
- MiCA capital requirements applied directly, no national overlays. Lithuania follows prudential safeguards of at least the higher of the EUR 50,000/125,000/150,000 Annex IV class floor and 25% of previous-year fixed overheads (projected first-12-month overheads for a new firm), met by qualifying own funds, insurance or a comparable guarantee, or a combination.
- Deep fintech ecosystem. Seventy fully licensed EMIs and CENTROlink infrastructure provide operational banking alternatives.
- Lower operational costs than Western European alternatives. Personnel, office, and professional service costs in Vilnius are 40–60% lower than Frankfurt, Paris, or Dublin.
- Regulator with deep fintech supervisory experience. The Bank of Lithuania supervises 70 fully licensed EMIs and the wider fintech sector, and has licensed CASPs under MiCA since 2025.
- Indefinite authorisation with no renewal fees. MiCA CASP authorisation does not expire. Ongoing costs are annual supervision contributions, not renewal fees.
- Lithuanian-language regulatory proceedings. The primary regulatory language is Lithuanian. Reporting templates are in Lithuanian only. Mitigation: Engage Lithuanian-speaking compliance counsel. Key CASP guidance is published in English.
- Rigorous fit-and-proper standards. Source-of-wealth evidence and governance documentation require careful preparation. Mitigation: Prepare comprehensive source-of-wealth documentation from the outset. Engage with the Newcomer Programme before formal filing.
- Banking access remains moderate to difficult. Traditional banks are cautious with crypto businesses. Client funds must be placed with a credit institution or central bank, not an EMI, unless the CASP is itself a credit institution, EMI, or payment institution. Mitigation: Begin banking setup in parallel with the CASP application.
- Higher corporate tax than Baltic peers. Lithuania’s 17% CIT rate compares unfavourably to Estonia’s 0% on retained profits and Latvia’s 0% retained / 20% distributed model. Mitigation: Qualifying small companies benefit from 7% CIT. Free Economic Zones offer 0% for 10 years.
- Dual-supervision model increases compliance burden. CASPs deal with both the Bank of Lithuania, which supervises their prudential, conduct, and AML/CFT compliance, and the FCIS, which receives suspicious-transaction reports and keeps general AML supervisory powers. Mitigation: Appoint compliance staff familiar with both regulators’ expectations.
How Lithuania Compares
Lithuania competes directly with Estonia (the Baltic digital pioneer), Latvia (the cost-conscious alternative), Poland (the CEE market weight), and Malta (the established crypto centre). Each except Poland, which had no MiCA authorisation route on 4 September 2026, offers MiCA passporting; the key differentiators are cost, timeline, tax, and regulatory maturity.
| Factor | Lithuania | Estonia | Latvia | Poland | Malta |
|---|---|---|---|---|---|
| Licence Type | MiCA CASP | MiCA CASP | MiCA CASP | MiCA CASP | MiCA CASP |
| Regulator | Bank of Lithuania | Finantsinspektsioon (FSA) | Latvijas Banka | None designated (KNF proposed) | MFSA |
| Timeline | 4–8 months | 6–12 months | 6–9 months | Not operational | 9–18 months |
| Min. Capital | Article 67 safeguards: max(€50,000 / €125,000 / €150,000 class floor, 25% of previous-year fixed overheads; projected first-12-month overheads for a new firm). Qualifying own funds, insurance/comparable guarantee, or a combination. | Article 67 safeguards: max(€50,000 / €125,000 / €150,000 class floor, 25% of previous-year fixed overheads; projected first-12-month overheads for a new firm). Qualifying own funds, insurance/comparable guarantee, or a combination. | Article 67 safeguards: max(€50,000 / €125,000 / €150,000 class floor, 25% of previous-year fixed overheads; projected first-12-month overheads for a new firm). Qualifying own funds, insurance/comparable guarantee, or a combination. | Article 67 safeguards: max(€50,000 / €125,000 / €150,000 class floor, 25% of previous-year fixed overheads; projected first-12-month overheads for a new firm). Qualifying own funds, insurance/comparable guarantee, or a combination. (proposed) | Article 67 safeguards: max(€50,000 / €125,000 / €150,000 class floor, 25% of previous-year fixed overheads; projected first-12-month overheads for a new firm). Qualifying own funds, insurance/comparable guarantee, or a combination. |
| Year 1 all-in | €75,900–€268,400 | €131,750–€308,500 | €180,500–€440,500 | Not available | €490,000–€1,075,000 build + statutory fees |
| Corporate Tax | 17% standard / 7% small | 0% retained / 22% distributed | 0% retained / 20% distributed | 19% / 9% small | 35% headline; ~5% effective after the 6/7 shareholder refund |
| Local Presence | Operation centre, MLRO, board of 3+ and a manager | Office, 2+ directors, compliance officer | Office, EU-resident director (2+ expected in practice), MLRO | Office, 2+ directors (proposed) | Office, 2+ directors, company secretary |
| EU Passporting | Yes | Yes | Yes | No (legislation blocked) | Yes |
| FATF / MONEYVAL status | Not FATF-listed; MONEYVAL 5th round complete () | MONEYVAL: Enhanced Follow-Up | MONEYVAL: 6th round MER () | MONEYVAL: Enhanced Follow-Up; CEPs from | Not FATF-listed; grey-list exit (); MONEYVAL: Enhanced Follow-Up |
| Best For | Cost-conscious operators; EU access; fintech ecosystem | Tech-first companies reinvesting profits (0% CIT); e-Residency | Startups; low application fee; supportive regulator | As of , unsuitable (no MiCA implementation or designated authority) | Established exchanges; English-language operations |
Compare every crypto jurisdiction side by side →
The key difference: Lithuania, Latvia, and Estonia all apply the MiCA capital classes directly; Estonia’s higher national floors (€100,000–€250,000) belonged to its former VASP regime. Lithuania’s advantage over Latvia is its deeper fintech ecosystem (70 fully licensed EMIs vs. Latvia’s smaller market). Lithuania’s disadvantage versus Estonia and Latvia is the 17% CIT rate: companies reinvesting profits pay 0% in Estonia and Latvia.
As of , Poland had no MiCA-implementing legislation in force after three presidential vetoes, and no Polish competent authority could receive CASP applications; Romania was in a similar position.[33][34] A Polish business that needs MiCA authorisation therefore has to obtain it through an entity established in another member state.
An independent specialist introduced by Jagelski & Partners covers end-to-end crypto licensing in Estonia, Latvia, and Czech Republic, including company formation, licence application, banking introductions, and post-licensing compliance. See the full Estonia CASP licensing guide →
Estonia: 0% CIT on Retained Profits
Estonia’s MiCA CASP authorisation combines full EU passporting with 0% corporate tax on retained profits, a significant advantage for growth-stage operators reinvesting revenue.
Estonia CASP Licensing GuideWhen Lithuania Is the Right Choice
Choose Lithuania if the priority is EU-wide passporting under MiCA’s prudential-safeguard rules and a comparatively low Year-1 cost, with the EMI and CENTROlink ecosystem and Lithuanian-speaking compliance personnel on hand. Consider alternatives if retaining and reinvesting profits is the priority (Estonia or Latvia) or English-language regulatory proceedings are a requirement (Malta). No EU MiCA jurisdiction permits an operation with minimal local substance, though substance requirements differ in scope.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Lithuania Applications
Governance and documentation quality are central to a CASP application. The following checklist addresses preparation risks without implying a measured rejection rate.
- Inadequate source-of-funds documentation for beneficial owners. The Bank of Lithuania scrutinises the origin of capital contributed by qualifying shareholders (10%+) with a depth that exceeds many applicants’ expectations. Tax returns, bank statements, and employment records covering 3–5 years are the starting point, not certificates of deposit alone.
- Submitting generic compliance templates. The Bank of Lithuania does not accept compliance documentation adapted from other jurisdictions or downloaded from template libraries. Each document must reference Lithuanian legislation (Law No. VIII-275 for AML), the dual-supervisor model (Bank of Lithuania + FCIS), and the specific goAML reporting interface.
- Underestimating the language barrier. Regulatory filings, reporting templates, and certain correspondence occur in Lithuanian. Applicants without Lithuanian-language capability in their compliance team face operational difficulties post-authorisation.
- Treating the AML officer as a formality. The AML Law requires a management-level AML officer and a board member responsible for AML, and the Bank of Lithuania expects an operation centre in Lithuania, so a nominee or part-time arrangement without genuine oversight of AML/CFT operations weakens the file.
- Failing to begin banking setup in parallel. MiCA Article 70(3) requires client funds to be placed with a credit institution or a central bank, unless the CASP is itself a credit institution, EMI, or payment institution. Obtaining a credit institution account for a crypto business takes 2–4 months. The banking setup should commence during the compliance documentation preparation phase.
- Conflating old VASP-era requirements with MiCA. The pre- requirements (€2,500 capital, no physical office, no fit-and-proper) no longer apply. All pre-MiCA data is obsolete.
Frequently Asked Questions
The Law on Markets in Crypto-Assets allows a Lithuanian CASP to be an AB (public limited company) or a UAB (Uždaroji Akcinė Bendrovė, private limited company); this guide describes the UAB route.[8] The UAB must be registered with the Lithuanian Register of Legal Entities before filing the CASP application. 100% foreign ownership is permitted. All qualifying shareholders holding 10% or more of capital or voting rights undergo fit-and-proper assessment, including detailed source-of-funds verification.
Corporate directors are not permitted: only natural persons may serve as directors. A plain UAB can run with a single manager (vadovas), but the Law on Markets in Crypto-Assets requires a licensed CASP to have a board (valdyba) as well as a manager, the Law on Companies sets a board at no fewer than three members, and each manager and board member needs the Bank of Lithuania’s prior approval.[8][37]
No. Lithuania’s transitional period ended on . All legacy VASP registrations expired on that date. There is no conversion mechanism, and every entity that is not an eligible financial entity notifying under Article 60 must complete the full MiCA CASP authorisation procedure with the Bank of Lithuania, regardless of prior VASP status.[1] From , providing crypto-asset services without a MiCA authorisation or an Article 60 notification is unlawful in Lithuania: carried on as a business or on a large scale it is a crime punishable by up to four years’ imprisonment,[35] and administrative fines reach €5,000,000 or 10% of total annual income, whichever is higher.[8]
The realistic end-to-end timeline is 4–8 months. This breaks down as: 2–6 weeks for entity formation and prudential safeguards, 6–10 weeks for compliance documentation preparation, up to 25 working days for the Bank of Lithuania’s completeness check, and 40–60 working days for substantive assessment, counted from receipt of the complete application. The first Lithuanian CASP (Robinhood Europe) was authorised approximately 5 months after MiCA’s application date, confirming the lower end of the range is achievable for well-prepared applicants. Complex applications or those requiring additional information can extend to 9–12 months.
The Bank of Lithuania’s primary regulatory language is Lithuanian. The CASP licensing rules and key guidance documents are published in English. Applications are submitted through the LBIS electronic portal, with supporting documents accepted with certified translations. Reporting templates are published in Lithuanian only. Applicants without Lithuanian-speaking compliance staff should engage local counsel. The Bank of Lithuania’s Newcomer Programme consultations are available in English.
Lithuania applies MiCA’s prudential safeguards directly without national overlays: €50,000 for Class 1 services (execution, advice, portfolio management, R&T orders, placing, transfer), €125,000 for Class 2 (Class 1 + custody, fiat exchange, crypto exchange), and €150,000 for Class 3 (Class 2 + trading platform operation). The ongoing requirement is the higher of the permanent minimum or 25% of the preceding year’s fixed overheads, and it can be met with own funds, an insurance policy or a comparable guarantee, or a combination. Estonia’s former national floors of €100,000–€250,000 ended with its VASP regime, so both countries now apply the same MiCA classes.
As of , Lithuania’s standard corporate income tax rate is 17%, increased from 16% as part of a defence funding package adopted by the Seimas in . The previous increase from 15% to 16% took effect in . A reduced 7% rate applies to qualifying small companies with annual gross revenue of €300,000 or less. Newly registered small companies owned only by individuals pay 0% CIT for their first two taxable periods, provided the business continues and no shares pass to new owners in the first three periods.[39] Crypto-asset exchange services (fiat-to-crypto) are VAT-exempt.
Yes. DORA (Regulation (EU) 2022/2554) has been applicable since and explicitly includes CASPs authorised under MiCA. Lithuanian CASPs must comply with all five DORA pillars: ICT risk management, incident reporting (initial notification as early as possible, within four hours of classification as major and normally no later than 24 hours after awareness (if classification occurs after that 24-hour window, within four hours of classification)), resilience testing, third-party ICT risk management, and information sharing.
Threat-led penetration testing (TLPT) applies only to entities designated as significant by the Bank of Lithuania, most smaller CASPs will not be designated. All CASPs must maintain a register of ICT third-party providers and conduct general vulnerability testing.
Under the TFR Recast (Regulation (EU) 2023/1113), there is no de minimis threshold for CASP-to-CASP transfers, so full originator and beneficiary information must accompany every crypto-asset transfer regardless of amount. The €1,000 threshold applies only to transfers involving self-hosted wallets. Where a transfer exceeds €1,000 to or from an unhosted address, the CASP must assess whether the client owns or controls that address. The dominant messaging standard is IVMS101, transported via protocols including OpenVASP/TRP and TRISA.
No. MiCA Article 2(4) excludes crypto-assets that qualify as financial instruments, so a Lithuanian MiCA CASP authorisation does not cover them. A tokenised security, a tokenised share, bond or fund unit, is regulated under MiFID II, the Prospectus Regulation, and the EU DLT Pilot Regime (Regulation (EU) 2022/858), supervised in Lithuania by the Bank of Lithuania rather than under MiCA.
ESMA’s Guidelines on the qualification of crypto-assets as financial instruments set the boundary. Tokenised securities and real-world-asset tokens that meet the financial-instrument test follow the MiFID securities regime; tokenised fund units route through EU fund licensing.
Yes. MiCA Article 65 grants Lithuanian CASPs the right to provide crypto-asset services across the EEA through a single notification to the Bank of Lithuania. Both cross-border service provision and branch establishment are covered. After receiving all Article 65 information, the Bank of Lithuania must communicate it to the host competent authorities, ESMA and EBA within 10 working days and notify the CASP. The CASP may start when it receives that notification or, at the latest, 15 calendar days after it supplied the Article 65 information. No additional authorisation or capital is required from host-country regulators.
Three of the four Lithuanian CASPs list all 29 other EEA states as passport destinations in ESMA’s register of . The Bank of Lithuania remains the home supervisor of a passported CASP; host authorities cooperate with it and may take precautionary measures under MiCA Article 102.
Banking access is moderate to difficult. Traditional Lithuanian banks remain cautious with crypto businesses, though MiCA authorisation improves credibility over the former VASP regime. A key distinction: unless the CASP is itself a credit institution, EMI, or payment institution, MiCA Article 70(3) requires client funds other than e-money tokens to be placed with a credit institution or a central bank by the end of the following business day, in an account separately identifiable from the CASP’s own; an EMI account does not meet that rule.[1] Lithuania’s 70 fully licensed EMIs provide operational banking alternatives, and CENTROlink gives connected institutions access to SEPA payment schemes. An EMI account for operations alongside a credit-institution safeguarding account is one practical arrangement, not a statutory requirement.
Start your Lithuania CASP application
Jagelski & Partners scopes your written brief and introduces an independent specialist who runs the licensing application and banking work. Book a free assessment and we'll map your route to approval.
Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.
References
Show all references
- Regulation (EU) 2023/1114 (Markets in Crypto-Assets Regulation, MiCA), Official Journal of the European Union, EUR-Lex, accessed .
- Estonian FSA, Crypto-Asset Service Provider requirements, fi.ee, accessed .
- Bank of Lithuania, Electronic money institutions (full-licence list: 70 institutions), lb.lt, accessed .
- Go Vilnius, FinTech sector overview, govilnius.lt, accessed .
- Malta Financial Services Authority, MiCA CASP Licensing, mfsa.mt, accessed .
- Coincub, Crypto Registration Report 2023, coincub.com, accessed .
- Bank of Lithuania, Markets in Crypto-Assets (authorisation expectations, including the operation-centre test) and Expectations for future crypto-asset service providers (16 August 2024) and Resolution No. 03-121 on CASP reporting (August 26, 2025), lb.lt, accessed .
- Seimas, Law on Markets in Crypto-Assets (No. XIV-2879) of 11 July 2024, consolidated edition from 2 July 2026, Articles 3, 4 (management bodies: general meeting, board and manager; prior approval of managers), 15 (fines) and 22 (Article 22(3) as amended by Law No. XV-185 of 8 May 2025), e-seimas.lrs.lt, accessed .
- FCIS (FNTT), goAML reporting system, fntt.lt, accessed .
- Bank of Lithuania, Regulatory Sandbox, lb.lt, accessed .
- EBA, Opinion on the regulatory treatment of E-Money Token services under MiCA and PSD2 (), eba.europa.eu, accessed .
- ESMA, Guidelines on conditions and criteria for qualification of crypto-assets as financial instruments and MiCA Interim Register, esma.europa.eu, accessed .
- Bank of Lithuania, Notice on cessation of unlicensed crypto-asset services, lb.lt, accessed .
- Global Legal Insights, Blockchain & Cryptocurrency Laws and Regulations 2026 – Lithuania (Ellex), globallegalinsights.com, accessed .
- Bank of Lithuania, CASP authorisation page (includes application form and Annexes 1–7), lb.lt, accessed .
- Law on Prevention of Money Laundering and Terrorist Financing (No. VIII-275), e-seimas.lrs.lt, consolidated edition from 30 June 2026 (Articles 2(7), 4(1) and (9), 22(1) and 25; the virtual-currency operator paragraphs of Article 25 no longer apply from 1 January 2026), accessed .
- Regulation (EU) 2023/1113 (Transfer of Funds Regulation Recast), EUR-Lex, accessed .
- Bank of Lithuania, Newcomer Programme, lb.lt, accessed .
- Commission Delegated Regulation (EU) 2025/305: RTS for MiCA CASP authorisation, EUR-Lex, accessed .
- KPMG, Lithuania: Amendments to corporate income taxation effective January 1, 2026, kpmg.com, accessed .
- Lithuanian Parliament (Seimas), Corporate income tax set to rise to 17%, lrs.lt, accessed .
- Invest Lithuania, Free Economic Zones, investlithuania.com, accessed .
- EY, EU adopts DAC8 Directive introducing tax transparency rules for crypto assets, ey.com, accessed .
- OECD, Crypto-Asset Reporting Framework (CARF), oecd.org, accessed .
- Regulation (EU) 2022/2554 (Digital Operational Resilience Act, DORA), EUR-Lex, accessed .
- MONEYVAL, Lithuania: Fourth Enhanced Follow-Up Report (adopted at the 66th Plenary, ; published ), fatf-gafi.org, accessed .
- Bank of Lithuania, CASP authorisation register and supervised entities database, lb.lt, accessed .
- EEA Joint Committee, Decision No 41/2025 of 20 February 2025 amending Annex IX (Financial services) to the EEA Agreement (incorporation of MiCA); supplementary JCD No 138/2025 of 13 June 2025 (RTS), efta.int, accessed .
- ESMA, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), , esma.europa.eu, accessed .
- MONEYVAL, Outcomes of the 68th Plenary meeting (; MONEYVAL terminated the Compliance Enhancing Procedures for Lithuania, completing its fifth-round process), coe.int, accessed .
- Government of the Republic of Lithuania, Resolution No 1458 of 15 December 2000 approving the List of Specific State Fee Amounts, item 3.157.1 (issue of a crypto-asset service provider licence, €2,425; amendment, €272; in force from ), e-seimas.lrs.lt, accessed .
- Bank of Lithuania, Rates of contributions for financial market supervision, 2026, item 42 (crypto-asset service providers: annual revenue, 0.7%, minimum contribution €3,000), lb.lt, accessed .
- Sejm of the Republic of Poland, Vote 15 at sitting 64: President’s request to reconsider the Crypto-Assets Market Act of 15 May 2026 (241 votes; 266 required), , api.sejm.gov.pl, accessed .
- ESMA, List of competent authorities notified to ESMA under MiCA (Romania: competent authorities not yet formally designated), last updated 17 February 2026, esma.europa.eu, accessed .
- Criminal Code of the Republic of Lithuania, consolidated edition from 3 July 2026, Article 202 (unlawful commercial, financial or professional activity without a required licence), e-seimas.lrs.lt, accessed .
- Seimas, Law No. XIV-1374 of 30 June 2022 amending Articles 2, 9 and 25 of the Law on the Prevention of Money Laundering and Terrorist Financing (in force 1 November 2022), e-seimas.lrs.lt, accessed .
- Seimas, Law on Companies (No. VIII-1835), consolidated edition 1 July–31 October 2026, Articles 19 and 33(2) (a board has at least three members), e-seimas.lrs.lt, accessed .
- State Tax Inspectorate (VMI), Mokesčių administravimo įstatymo pakeitimai nuo 2026 m. (Law No. XV-309 of 19 June 2025 adding crypto-asset reporting to the Law on Tax Administration from 1 January 2026; order VA-119 of 10 December 2025 approving the reporting procedure), vmi.lt, accessed .
- Seimas, Law on Corporate Income Tax (No. IX-675), consolidated edition from 19 May 2026, Article 5(1)–(3) (17% standard rate; 0% and 7% for entities with income up to €300,000) as amended by Law No. XV-285 of 17 June 2025, e-seimas.lrs.lt, accessed .
- State Tax Inspectorate (VMI), Apie gyventojų pajamų mokesčio tarifus (2026 rates: 15% on non-employment income up to 12 VDU, then 20%, 25% and 32% bands; 1 VDU = €2,312.15), vmi.lt, accessed .
- ESMA, Interim MiCA register: crypto-asset service providers (CSV extract last updated 24 September 2026), esma.europa.eu, accessed .
- Bank of Lithuania, TARGET-LIETUVOS BANKAS (in Lithuanian; the Bank of Lithuania’s component of the Eurosystem’s T2 real-time euro settlement system, separate from CENTROlink, the retail payment system for SEPA payments; banks, electronic money institutions, and payment institutions may participate; page updated 10 September 2026), lb.lt, accessed .
- European Banking Authority, EBA/OP/2026/01: Opinion on the end of the No Action Letter transition period, , paragraphs 7 to 14, eba.europa.eu, accessed .