MiCA CASP License in Slovakia

Why Choose Slovakia for Crypto Licensing?

Slovakia offers a credible, pragmatic route to MiCA CASP authorisation through Národná banka Slovenska (NBS), with published application fees of €1,700–€3,400 under Opatrenie NBS č. 5/2021 as amended by Opatrenie NBS č. 8/2024.^[1][2] NBS recommends that applicants contact it before filing and use its pre-licensing dialogue.^[1] It usually accepts technical documentation in English and may, by agreement with the applicant, accept other annexes in English where this is consistent with specific binding legislation.^[2]

Pragmatic, Engaged Supervisor

In practice, NBS's pre-application channel (crypto@nbs.sk) lets an advanced applicant surface scope, governance, and ICT questions before formal submission, but it is not a consultation: NBS meets only applicants at an advanced stage, at its discretion, and gives no binding view on the outcome.^[2] NBS publicly states it supports “responsible innovative entrepreneurship that balances opportunities with financial stability and consumer protection”.^[1] The trade-off is that NBS will decline pre-application meetings where the applicant shows signs of regulatory arbitrage, licence tourism, reputational concerns, or insufficient connection to Slovakia.^[2]

The Czech National Bank (ČNB) oversees a larger cohort: the ESMA register of 24 September 2026 lists twelve entities with the Czech Republic as home state, against six Slovak CASPs.^[5]

Modest Published Fees

The NBS application fee for a CASP authorisation is set at €1,700, €2,500, or €3,400 depending on the scope of crypto-asset services requested.^[2] For 2026 the annual supervisory contribution is again 0.1% of the provider’s assets, with a minimum of €1,000, under NBS Decision No 5/2025.^[30] The Slovak fee structure is published and predictable, which matters for budgeting and for stress-testing the Year 1 cost model.

Full MiCA Passporting

A Slovak NBS CASP authorisation confers full passporting rights across the EU/EEA under MiCA Article 65. NBS publishes its own “Rules of General Good for Crypto-Asset Services” governing inbound passported activity and maintains its Financial Entities Register (subjekty.nbs.sk).^[1][5] The ESMA interim MiCA register lists Slovak CASPs alongside those of every other member state.^[5]

The ESMA register of 24 September 2026 lists six CASPs authorised by NBS: three on 18 December 2025, one on 19 December 2025, and two in January 2026, each with services notified in other EEA states.^[5] NBS itself counted six licensed providers in July 2026, out of 312 across the EU.^[6]

Tax Framework

For individuals, income from selling crypto-assets held outside a business is other income under Section 8(1)(t) of the Income Tax Act, taxed at the progressive rates of 19%, 25%, 30% and 35% from 1 January 2026, and an exchange of a crypto-asset for property, a service or another crypto-asset is part of the tax base.^[25] The consolidated Act in force from that date contains no reduced 7% rate for crypto held 12 months or longer and no €2,400 exemption for crypto used in payments.

Corporate income tax applies one rate to the whole tax base, chosen by the year’s taxable revenue: 10% where revenue does not exceed €100,000, 24% where it exceeds €5,000,000, and 21% otherwise.^[9][10] For a focused CASP whose annual taxable revenue stays below €5 million, the effective rate is favourable; for operators projecting rapid scale, the top bracket is uncompetitive against Cyprus (15% from 1 January 2026) and worth modelling carefully.

Regulatory Framework

Slovakia's MiCA framework rests on two instruments: the directly-applicable EU MiCA regulation (Regulation (EU) 2023/1114) and the Slovak implementing act, Zákon č. 248/2024 Z.z. on certain obligations and powers in the field of crypto-assets, adopted by the National Council in September 2024.^[11] The act designates NBS as the competent authority for CASP authorisation, asset-referenced token (ART) supervision, and oversight under Title IV (e-money tokens) in respect of non-bank issuers.^[11]

Regulatory History

Before MiCA, Slovakia regulated virtual currency service providers through the Trade Licensing Act (zákon o živnostenskom podnikaní), with two registered trade categories (“services related to virtual currency” for exchange, and “virtual currency wallet services”) supervised for anti-money-laundering purposes by the Finančná spravodajská jednotka (FIU) within the National Criminal Agency of the Presidium of the Police Force.^[13][14] The FIU's published VA/VASP Sectoral Analysis recorded approximately 451 entities holding virtual-currency-related trade licences as of mid-2022, rising to roughly 500–550 by end-2022; the analysis also recorded that around 80% of survey respondents reported they were not actually carrying out the activity, indicating the headline registration count materially overstated the real market.^[14]

Act 248/2024 introduced § 80ap into the Trade Licensing Act, which set the formal expiry of all virtual-currency trade licences at 30 December 2025.

Recent Regulatory Developments

• 30 December 2024. Crypto-specific provisions of Act 248/2024 take effect. MiCA Title V (CASPs) becomes directly applicable across the EU.^[11]
• 17 January 2025. DORA applicable. Regulation (EU) 2022/2554 (DORA) becomes applicable to financial entities including CASPs in scope under Article 2.^[15]
• 24 March 2025. NBS issues Opatrenie č. 3/2025 on CASP reporting templates. Eight regulatory reports including BIL, VZ, SLU, ADR, STA, POS, AML/CFT, and management body, published in Vestník NBS čiastka 13/2025 on 8 April 2025; provisions effective 1 July 2025.^[4]
• 18 December 2025. NBS grants the first MiCA CASP authorisations. Three Slovak providers are authorised that day and a fourth on 19 December 2025; two more follow in January 2026.^[5]
• 30 December 2025. Slovak MiCA transitional period ends. Under § 80ap of the Trade Licensing Act, legacy VCSP trade licences cease to authorise crypto-asset services (see Regulatory Transition below).^[16][17]
• 11 February 2026. ČNB issues the first six Czech MiCA authorisations. It had received 248 applications by then.^[3]
• 1 March 2026. Amendment of Act 248/2024 in force. Act No 30/2026 Coll. requires an applicant that will use network and information systems to file a description of its cybersecurity audit with the authorisation application, and adds a procedure for obtaining criminal-record extracts.^[35]
• 2 March 2026. Transition period under the EBA No-Action Letter on PSD2/MiCA interplay ends. Under that non-binding EBA advice, national authorities should stop CASPs that transfer e-money tokens (EMT) on behalf of clients, or hold EMTs in custodial wallets that can send and receive EMTs to and from third parties, unless they are authorised as a payment or electronic-money institution or partner with an authorised payment service provider; applicants that meet strict EBA conditions may continue pending a decision, but without marketing those EMT services or taking on new clients for them.^[19]

Regulatory Overlap

Slovakia's MiCA regime intersects with four other regimes that operators should map at planning stage:

Regulatory Transition: Legacy VCSP Trade Licences to MiCA CASP Authorisation

The transition from the pre-MiCA regime to MiCA CASP authorisation in Slovakia is now substantially complete. The § 80ap expiry of all legacy virtual-currency trade licences on 30 December 2025 means only legacy licence holders that held a final MiCA authorisation by that date (Slovak, or passported from another member state) could continue operating uninterrupted; an eligible financial entity could instead notify under Article 60.^[12]

Key Transition Deadlines

For new applicants in 2026 the binding constraint is application quality on a clean MiCA filing, not timing against the transitional window; continued unauthorised provision is now treated as an enforcement matter (see Enforcement, below).

License Types and Activities Covered

The ten MiCA crypto-asset services under Article 3(1)(16) of Regulation (EU) 2023/1114 apply in Slovakia in their original form, and NBS does not operate a Slovak sub-classification beyond MiCA.^[1][12]

Covered Activities

• Custody and administration of crypto-assets on behalf of clients. Holding crypto-assets or the means of access on behalf of third parties.
• Operation of a trading platform for crypto-assets. Multilateral system bringing together buyers and sellers on a non-discretionary basis.
• Exchange of crypto-assets for funds. Crypto-to-fiat conversion as a service.
• Exchange of crypto-assets for other crypto-assets. Crypto-to-crypto conversion as a service.
• Execution of orders for crypto-assets on behalf of clients. Acting on client orders to acquire or dispose of crypto-assets.
• Placing of crypto-assets. Marketing of newly-issued or existing crypto-assets to identified buyers.
• Reception and transmission of orders for crypto-assets on behalf of clients. RTO model without execution.
• Advice on crypto-assets. Personal recommendations to acquire or dispose of crypto-assets.
• Portfolio management on crypto-assets. Discretionary management of crypto-asset portfolios.
• Transfer services for crypto-assets on behalf of clients. Moving crypto-assets between addresses or accounts on behalf of clients.

NBS authorises ARTs under Title III of MiCA in respect of non-bank issuers established in Slovakia. EMT issuance is tied to existing Slovak electronic-money-institution authorisation under Act 492/2009 on payment services.^[12]

What Does NOT Require CASP Authorisation

• Proprietary trading on own account. Where no service is provided to third parties, MiCA does not engage.
• Mining and staking as a participant (not as a service). Operating as a node validator on behalf of oneself, without offering staking-as-a-service to clients, falls outside MiCA Article 3(1)(16).
• Pure software development. Open-source library publication, wallet software distribution without custody, and protocol-level governance participation.
• Unique, non-fungible NFTs. MiCA carves out genuinely unique and non-fungible crypto-assets from its scope (recital 10), though NBS, like other NCAs, treats fungibility within a collection as bringing the collection within scope.
• Crypto-assets representing other regulated financial instruments. These fall under MiFID II rather than MiCA.

What MiCA does not cover is the boundary case of decentralised exchange (DEX) interfaces operated by an identifiable legal person: ESMA's position is that operating, hosting, or maintaining a front-end that systematically matches counterparties amounts to providing a crypto-asset service as defined in MiCA Article 3(1)(16), so the authorisation requirement in Article 59 applies, and NBS aligns with that position.

Tokenised Securities and RWA

MiCA Article 2(4) excludes crypto-assets that qualify as financial instruments, so a tokenised security (a tokenised share, bond or fund unit) sits outside the CASP regime. In Slovakia these instruments are regulated under MiFID II, the Prospectus Regulation, and the EU DLT Pilot Regime (Regulation (EU) 2022/858), supervised by Národná banka Slovenska (NBS) rather than under MiCA. ESMA's Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments set the boundary between the two regimes. The honest point: a Slovak MiCA CASP authorisation does not cover tokenised securities or real-world-asset (RWA) tokens that are securities; those follow the MiFID securities regime. Where the structure is a fund rather than a single instrument, see our fund licensing guidance.

Requirements

The substantive requirements track MiCA Articles 68–73 and the supporting Regulatory Technical Standards published by ESMA and EBA. NBS expectations are mapped in detail in its public “Pred prípravou žiadosti” guidance.^[2]

CASP Requirements at a Glance

Fit-and-Proper Assessment

NBS assesses the management body on good repute, knowledge, experience, and the ability to commit sufficient time to the role. The assessment is on real decision-making authority rather than nominal titles. Qualifying shareholders (10% and above) undergo a parallel fitness assessment with prior approval required for acquisition or increase of qualifying holdings. NBS pays particular attention to whether the AML officer has both the seniority and the operational visibility to discharge the role effectively; the common mistake is naming a board member who lacks day-to-day visibility of transaction flow or onboarding decisions, which NBS treats as a substantive deficiency rather than a paperwork issue.

Local Presence

MiCA Article 59(2) requires a registered office in Slovakia, where at least part of the services are provided, a place of effective management in the EU, and at least one director resident in the EU.^[12] NBS adds a published substance test aimed at letter-box entities: a virtual office or P.O. box without permanent staff is not enough, and the applicant must show real premises available for on-site supervision, key staff in Slovakia who actually run risk management, compliance, and strategic decision-making, and documents and data kept at the registered office. NBS also expects compliance, AML/CFT control, and ICT-risk decisions to stay in-house under the statutory body in Slovakia rather than be outsourced.^[2]

AML/CFT and Travel Rule

The AML framework is Act 297/2008 Z.z. on the prevention of money laundering and terrorist financing, as amended in line with 5AMLD/6AMLD, with the Financial Intelligence Unit of the Presidium of the Police Force as the receiving body for unusual transaction reports.^[13] Since 1 June 2026 every obliged entity, CASPs included, must register in the FIU’s goAML system: existing obliged entities by 30 November 2026, a newly authorised CASP within 30 days of becoming an obliged entity.^[31] Travel Rule obligations under Regulation (EU) 2023/1113 apply directly from 30 December 2024.^[18]

Sanctions screening must use the consolidated EU list and the United Nations sanctions list; NBS pays particular attention to wallet-address record-keeping, which is reflected in the Opatrenie 3/2025 reporting templates (Form ADR).^[4]

Professional indemnity insurance is not a published NBS requirement, but is commonly held by CASPs as a commercial matter and may be requested by counterparties.

Application Process

Pre-application engagement with NBS opens the file. NBS publishes a 25-working-day statutory completeness window followed by 40 working days for substantive assessment under MiCA Article 63.^[2] On our planning estimate, a well-prepared application takes about 3–4 months from submission and 5–7 months end to end; complex or capital-heavy files run to about 10 months end to end. NBS itself warns that promises of authorisation “within three months” are unrealistic.^[2]

Application language is Slovak, and annexes in another language need a certified Slovak translation. On the applicant’s written proposal NBS may waive the translation of technical documentation or other annexes written in Czech or English, and it usually accepts technical documentation and evidence of managers’ competence in English; internal rules the firm will operate under must be in Slovak or bilingual.^[2] The pre-application channel is crypto@nbs.sk; at least five days before any pre-application meeting NBS asks for a presentation of the business model, intended services, target clients, and the model’s link to Slovakia and to the place of effective management, and it grants such meetings only to applicants at an advanced stage and at its discretion.^[2]

The independent specialist’s compliance team drafts Slovakia-specific compliance documentation as part of its CASP licensing engagement with the client: the AML/CFT Policy Manual, the Enterprise-Wide Risk Assessment, the Wallet Management and Custody Procedures, and the DORA ICT Risk Management Framework. The compliance documentation is the most time-intensive component of any Slovak MiCA application: 6 to 10 weeks of specialist work that cannot be shortcut with generic templates from other jurisdictions. Book a Licensing Assessment →

Required Documents

Documents follow the MiCA Article 62 application pack as specified in Commission Delegated Regulation (EU) 2025/305 and the EBA's parallel RTS package.^[23] NBS expects bespoke documentation tailored to the applicant's business model; the most common cause of RFI is the submission of generic templates that do not engage with the applicant's actual operations.^[2]

Corporate Documents

• Founding document (memorandum of association, or deed of foundation for a single founder), executed since 17 August 2026 as a notarial deed or an attorney-authorised document unless the simplified online form is used
• Slovak Obchodný register extract confirming incorporation
• Tax registration and VAT registration certificates where applicable
• Bank statement evidencing share capital paid in

Personal Documents (All Directors, Officers, Qualifying Shareholders, UBOs)

• Curriculum vitae with detailed regulated-industry experience
• Criminal record extract from country of residence (and from any other country of residence in the past 10 years)
• Self-declaration of fit-and-proper status, signed
• Evidence of financial standing (where qualifying shareholder)
• ID document copy (apostilled and translated into Slovak where issued abroad)

Compliance Documentation

The compliance documentation is the most heavily scrutinised component of any Slovak MiCA CASP application. The independent specialist drafts each of these documents as part of its licensing engagement with the client: bespoke and Slovakia-specific, not templates adapted from other jurisdictions. Each document must reflect the applicant's specific business model, risk profile, and operational structure.

Business Plan and Financial Projections

Three-year financial projections covering revenue model, client acquisition assumptions, fee structure, operating cost base, capital adequacy under stress scenarios, and the path to break-even. NBS scrutinises the credibility of projections relative to the applicant's actual go-to-market strategy.

Technology and Operational Documentation

ICT architecture diagram, cybersecurity policy, custody architecture (hot/cold wallet split, multi-signature arrangements, key management procedures), business continuity plan, and the DORA Register of Information for third-party ICT service providers.

Costs and Pricing

Slovak cost divides into a statutory figure and a build figure. The statutory part is set by Opatrenie NBS č. 5/2021 as amended by Opatrenie NBS č. 8/2024, with three published bands tied to the scope of crypto-asset services requested, and comes to €2,700 to €6,400 in Year 1 once the first twelve months of the supervisory contribution, budgeted at the full annual rate, are added.^[2]

The application fee starts at €1,700 in the lowest band. The build part, quoted per case, runs €36,500 to €73,500: specialist compliance documentation, ICT and DORA implementation, legal advisory, and the Slovak operating company set-up.

Government / NBS Fees

The mapping of the three application-fee bands to MiCA capital classes (Class 1/2/3) is widely repeated by Slovak law firms but NBS itself ties the bands to “scope of services requested” without an explicit class-by-class mapping.^[1][2] In practice, simpler service mixes attract the €1,700 band and full custody-and-trading-platform applications attract the €3,400 band.

Statutory Cost: NBS and State Charges

Typical Build, Quoted Per Case

Together the two figures put a focused Slovak application at roughly €39,000 to €80,000 in Year 1, excluding Article 67 prudential safeguards (Annex IV class floors of €50,000, €125,000 or €150,000, subject to the higher fixed-overhead test) and operating cash burn. From Year 2 the recurring outlay runs about €49,000 to €103,000 a year on our planning estimate: the supervisory contribution is the statutory line, the statutory audit and a fully loaded AML officer make up the rest, and other compliance and ICT personnel and ongoing legal counsel are quoted per case on top.

For supervision-fee-based regimes such as Slovakia's, the NBS authorisation is indefinite under MiCA Article 64; the recurring cost is the annual supervisory contribution (0.1% of assets, minimum €1,000) plus the statutory audit under Act 431/2002 and ongoing compliance personnel costs.^[2][30]

Timeline

NBS processing runs on two statutory clocks under MiCA Article 63: 25 working days for completeness review and 40 working days for substantive assessment. Around these sit the Slovak entity set-up, the application-preparation work, and any RFI cycles. On our planning estimate a well-prepared application takes about 3–4 months from submission and 5–7 months end to end, and a complex file with several rounds of questions about 6–10 months end to end.

NBS does not publish a service standard for MiCA authorisation throughput beyond the Article 63 statutory clock. NBS granted its six authorisations so far between 18 December 2025 and 15 January 2026, according to the ESMA register of 24 September 2026,^[5] and counted the same six licensed providers in July 2026.^[6] NBS also states that a Slovak licence is not procedurally faster than in other member states, since MiCA’s requirements and clocks are uniform.^[2] The live, named list is kept in the NBS register of supervised entities and the ESMA interim register.

Taxation

Slovakia sets one CIT rate by taxable revenue and has progressive personal income tax on crypto-asset sales, and a 24% corporate rate that is uncompetitive against Cyprus or Hungary once annual taxable revenue exceeds €5 million.

Personal Income Tax on Crypto-Assets

Under the Income Tax Act as consolidated from 1 January 2026, an individual’s income from selling crypto-assets held outside a business is other income (Section 8(1)(t)), taxed at the progressive personal rates. Exchanging a crypto-asset for property, a service or another crypto-asset is included in the tax base at fair value (Section 8(17)), and crypto-assets obtained by validating transactions are taxed when sold.^[25]

Individuals insured in Slovakia also pay health-insurance contributions on this income: under Section 13(7) of the Health Insurance Act the assessment base is the income-tax base, at a transitional standard rate of 16% (8% for a person with a disability under the Act) from 1 January 2026 to 31 December 2027.^[27]

The Act contains no reduced 7% rate for crypto held 12 months or longer and no €2,400 exemption for crypto used in payments. Act No 315/2023, adopted in June 2023, would have introduced from 1 January 2024 a 7% rate for crypto held longer than one year, a €2,400 exemption for crypto exchanged for goods or services and an exclusion of non-business crypto sale income from health-insurance contributions, but Article XVIII of Act No 530/2023 deleted those provisions with effect from 31 December 2023, so they never took effect.^[7][26] Specific structures should be confirmed with Finančné riaditeľstvo SR.

DAC8 / CARF Reporting

Slovakia transposed Directive (EU) 2023/2226 (DAC8), which brings the OECD Crypto-Asset Reporting Framework into EU law, by Act No 200/2025 Coll., in force from 1 January 2026. Reporting crypto-asset service providers collect tax-residence and TIN information from clients and report each calendar year to the Slovak tax authority by 31 May of the following year, so the first reports, on 2026, are due by 31 May 2027; the Slovak authority passes them to other member states by 30 September.^[32]

Pillar Two (Global Minimum Tax)

Slovakia transposed the EU Minimum Tax Directive (Directive (EU) 2022/2523), which implements the OECD Global Anti-Base Erosion (GloBE) rules, by Act No 507/2023 Coll., in force from 31 December 2023: a domestic top-up tax brings the effective rate to 15% for groups with consolidated revenue of at least €750 million.^[33] Slovakia elected under Article 50 of the directive to defer the income inclusion and undertaxed profits rules for six fiscal years from 31 December 2023.^[34] The first returns, for 2024, were due by 30 June 2026: 15 months after the year end plus three months for the first year.^[33] The threshold is unlikely to affect standalone Slovak-domiciled CASPs but is material for CASPs that are subsidiaries of larger groups.

Ongoing Compliance & Post-Registration

CASP authorisation creates a permanent compliance infrastructure obligation. Authorised CASPs are subject to harmonised NBS reporting templates under Opatrenie 3/2025 (eight regulatory reports including balance sheet, own funds, services, wallet addresses, complaints, provider data, AML/CFT, and management body) with quarterly and annual frequencies.^[4]

Annual Reporting Obligations

• Statutory audit under Act 431/2002 on Accounting, conducted annually by a Slovak Chamber of Auditors-registered firm.
• NBS regulatory reporting per Opatrenie 3/2025: eight reports including BIL, VZ, SLU, ADR, STA, POS, AML/CFT, and management body, on quarterly or annual cadence depending on the form.^[4]
• AML/CFT annual compliance report to the management body, summarising AML programme effectiveness, monitoring outcomes, training completion, and SAR/STR statistics.
• DORA Register of Information annual submission covering ICT third-party arrangements.
• DAC8 / CARF client-information reporting by 31 May each year, first by 31 May 2027 for 2026.

Renewal Fees / Supervision Fees

The MiCA CASP authorisation is indefinite under Article 64: no renewal cycle, no expiry date. The recurring NBS cost is the annual supervisory contribution: 0.1% of assets with a minimum of €1,000 for 2026 under Decision No 5/2025. The NBS Bank Board sets it for each year by 20 December of the year before, and a newly authorised provider pays from the first day of the sixth month after authorisation.^[30][2] Other recurring costs: statutory audit (€8,000–€20,000 depending on entity size), AML officer compensation (€40,000–€80,000 fully loaded), compliance and ICT personnel, registered seat administration, ongoing legal counsel.

Regulatory Inspections

NBS conducts both scheduled supervisory reviews and thematic inspections. ESMA's July 2025 peer review of NCA practice on MiCA CASP authorisations (which examined the MFSA's approach but issued cross-cutting recommendations for all NCAs) identified seven thematic areas for supervisory attention: business growth assessment, conflicts of interest, governance and intragroup arrangements, ICT and DORA, AML, ART/EMT proximity, and outsourcing.^[21] NBS is expected to weight inspections to these themes.

Enforcement

NBS publishes warnings about non-authorised entities and treats continued unauthorised crypto-asset service provision after 30 December 2025 as a breach of MiCA carrying NBS sanctions, which may also constitute the criminal offence of unauthorised business activity under Slovak law.^[2] ESMA's 17 April 2026 statement (ESMA75-113276571-1679) confirmed the EU-wide enforcement expectation: NCAs are to act against firms continuing to provide services without approval and require wind-down plans.^[20]

ICT Risk Management & Operational Resilience

DORA, Regulation (EU) 2022/2554, became applicable on 17 January 2025 and includes CASPs in its definition of financial entity under Article 2.^[15] NBS supervises DORA through its dedicated supervision channel, separate from the crypto-assets page but applied in parallel during CASP authorisation review.

ICT Risk Management Framework (Articles 5–15)

CASPs must adopt a written ICT risk management framework with management body approval, covering ICT governance, ICT risk identification and classification, protection and prevention controls, detection mechanisms, response and recovery, and learning and evolving. The framework must be reviewed at least annually and after every major ICT incident.

ICT-Related Incident Reporting (Articles 17–23)

Major ICT-related incidents must be reported to NBS within initial-notification, intermediate-report, and final-report cadences set by the ESAs' Joint RTS. Voluntary reporting of significant cyber threats is encouraged. The applicant's incident classification scheme must align with Commission Delegated Regulation 2024/1772 (criteria for classification of major incidents).

Digital Operational Resilience Testing (Articles 24–27)

Annual basic resilience testing for all CASPs. Threat-Led Penetration Testing (TLPT) every three years for significant entities; the Slovak NBS, following ECB TIBER-EU methodology where relevant, will identify CASPs in scope of TLPT based on size, criticality, and interconnectedness.

ICT Third-Party Risk (Articles 28–44)

The Register of Information lists all ICT third-party service providers with associated criticality assessments and contractual safeguards. Contracts with ICT third-party providers must address the matters set out in DORA Article 30, including service-level commitments, audit rights, exit strategy, and sub-contracting chain transparency.

Custody and Wallet Management

Hot wallet / cold wallet segregation aligned with the operational risk profile; documented key management procedures including key generation, storage, rotation, backup, and recovery; multi-signature thresholds documented and tested; insurance arrangements for hot wallet exposure where commercially available. NBS reflects custody and wallet management expectations in the Opatrenie 3/2025 Form ADR (wallet addresses) reporting template.^[4]

Proportionality

DORA Article 16 reserves the simplified ICT risk management framework for small and non-interconnected investment firms, exempted payment and electronic-money institutions, certain exempted credit institutions, and small occupational pension funds; CASPs are not on that list.^[15] A smaller CASP relies instead on the Article 4 proportionality principle, and its DORA pack should explain how the framework is scaled to its size and risk profile.

Banking

Banking access for a Slovak MiCA CASP is the most operationally sensitive element of the post-authorisation set-up. Slovak universal banks have improved their crypto-asset risk appetite materially since the 2018–2020 de-risking cycle, but onboarding a newly-authorised CASP remains slower and more documentation-heavy than onboarding a non-crypto Slovak s.r.o.

Practical Banking Architecture

The realistic banking architecture for a Slovak CASP combines three institutional archetypes: (i) a Slovak universal bank for euro operating accounts, payroll, and tax remittance, where appetite is cautious, KYC documentation is heavy, and most universal banks expect the MiCA CASP authorisation to be granted or near-grant before final onboarding; (ii) one or two EEA-passported electronic money institutions (EMI) for operating and high-frequency settlement flows (client funds themselves go to a separately identifiable account at a credit institution or a central bank under MiCA Article 70(3)), which typically onboard faster than universal banks and offer a wider crypto-aware appetite, though pricing is materially above universal bank rates; and (iii) for operators with USD or other non-EUR settlement legs, a correspondent EMI or PI arrangement that can transit USD without depending on a single US correspondent.

Sequencing Banking and Authorisation

The common mistake is filing the NBS application and the banking applications sequentially rather than in parallel. NBS substantive assessment runs 40 working days from its completeness assessment, suspended at most once, for up to 20 working days, by a written information request; banking onboarding runs 8–16 weeks for a universal bank and 6–10 weeks for an EMI. Experienced applicants overlap the two clocks, with banking conditional on NBS authorisation grant becoming final. NBS also expects the application itself to show where client funds will be held apart from the firm’s own money, for example through a signed account agreement with a financial institution, so at least that account cannot wait for the authorisation.^[2]

Jagelski & Partners' Banking Service

Jagelski & Partners' banking partner network includes more than 90 institutions across the EU, Switzerland, the UK, the Channel Islands, and the Middle East, with documented appetite for MiCA-authorised CASPs across the universal-bank, EMI, and PI archetypes. A licence without banking access is a certificate on the wall: learn about our Banking service →

FATF Status & International Standing

Slovakia is not a member of the FATF: its AML/CFT framework is assessed via MONEYVAL, the Council of Europe Committee of Experts on the Evaluation of Anti-Money Laundering Measures and the Financing of Terrorism, rather than by FATF directly. Slovakia is not on the FATF grey list or black list. Its fifth-round MONEYVAL evaluation placed it in enhanced follow-up; at MONEYVAL’s plenary of 16 December 2025 its fourth follow-up report upgraded eight FATF Recommendations, and Slovakia left both the follow-up process and the first step of MONEYVAL’s compliance-enhancing procedures ahead of its sixth-round evaluation in 2028.^[31] Slovak CASPs benefit from the standard EU MiCA passporting framework with no jurisdictional FATF overlay constraints on counterparty onboarding.

MiCA Passporting and EU Market Access

A Slovak CASP authorisation grants the right to provide crypto-asset services on a freedom-of-services basis across the EU/EEA, and to establish branches in host member states subject to host-NCA notification. NBS routes the home-host notification through standard MiCA Article 65 procedures. NBS publishes its own “Rules of General Good for Crypto-Asset Services” document setting out public-interest constraints on inbound passported services into Slovakia; its text still leaves the cited Slovak act and NBS measure unnumbered.

NBS states that the freedom to provide services and the right of establishment are not absolute and may be restricted to protect the public interest, so Slovak CASPs passporting into other member states should likewise take into account restrictions under the host state’s national legislation.^[1] On the ESMA register of 24 September 2026, all six Slovak CASPs had notified services in other EEA states.^[5]

Advantages and Limitations

Slovakia's MiCA framework offers a credible EU launch route with genuine pragmatic strengths, but the trade-offs are real and should be modelled honestly against alternative jurisdictions before commitment.

• ✓ Pragmatic, engaged supervisor. NBS may hold a pre-licensing meeting with an advanced applicant and usually accepts technical documentation in English, which helps a prepared applicant anticipate questions before the statutory clock runs.
• ✓ Modest published fees. NBS application fee €1,700–€3,400; annual supervisory contribution 0.1% of assets with a €1,000 minimum.
• ✓ Full EU passporting. MiCA Article 65 grants service-provision and branch-establishment rights across the EU/EEA.
• ✓ Published expectations. NBS publishes its fees, its substance test, and its language rules for applicants, so the bar is known before filing.
• ✓ Eurozone and SEPA membership. Euro is the home currency; SEPA and TIPS access run through NBS-supervised institutions.
• × Grandfathering window is closed. The 12-month MiCA transitional period ended 30 December 2025; new applicants in 2026 face a clean greenfield filing with no soft landing. Mitigation: budget the full pre-application + application + RFI cycle (about 5–10 months end to end) into the go-live timeline rather than assuming a fast track.
• × Top CIT bracket uncompetitive at scale. 24% CIT once taxable revenue exceeds €5 million is materially above Cyprus (15% from 1 January 2026), Hungary (9%), Romania (16%), and Poland (19%). Mitigation: model the projected revenue trajectory before commitment; for operators projecting >€5m taxable revenue within 24 months, run a parallel Cyprus or Hungary analysis.
• × Smaller crypto-native ecosystem than Lithuania or Estonia. Talent pool for crypto-aware compliance and ICT roles is thinner; banking partner choices are fewer. Mitigation: source senior AML and ICT roles from the broader CEE talent pool (Czech Republic, Poland, Hungary); pre-qualify banking partners through the Jagelski & Partners network before authorisation rather than after.
• × Slovak-language filings. Applications must be in Slovak; English annexes are accepted only on written waiver request. Mitigation: engage Slovak counsel for primary filing language with a parallel English working file for management and DORA documentation.
• × EMT transfer and custody can trigger parallel PSD2/EMI authorisation cost. From 2 March 2026, CASPs transferring EMTs, or holding them in custodial wallets that can send and receive EMTs to and from third parties, need EMI or PI authorisation or partnership under EBA advice to national authorities. Mitigation: scope away from EMT-handling at authorisation where commercially viable; for EMT-touching business models, structure as a partnership with an authorised EMI rather than building EMI capability in-house.

How Slovakia Compares

Slovakia compares most directly against three CEE EU member states with MiCA frameworks at varying maturity: Czech Republic (its closest MiCA peer in size, regulatory approach, and CEE positioning), Poland (its largest EU neighbour, whose national MiCA implementing act failed when the Sejm could not override the third veto on 4 September 2026), and Romania (an alternative low-CIT CEE jurisdiction whose own implementing ordinance is unadopted, so no competent authority is designated).

Cyprus serves as the established-centre cross-tier reference for operators whose tax projections justify the move to a more crypto-native EU ecosystem.

Compare every crypto jurisdiction side by side →

Czech Republic is Slovakia's natural CEE peer: a comparable framework supervised by ČNB, with a deeper local market (251 applications and notifications assessed and 11 authorisations granted by 1 July 2026^[29]), a flat 21% CIT, and a more demanding institutional supervisory style. Slovakia fits when the priority is supervisor engagement; Czech Republic fits when the priority is institutional credibility and a larger CASP cohort.

Poland is structurally absent from the 2026 comparison: the President vetoed Bill 1424 on 1 December 2025 and a substantively identical Bill 2064 on 12 February 2026,^[22] then vetoed a third government draft on 11 June 2026 after the Sejm passed it on 15 May 2026, and on 4 September 2026 the Sejm failed to override that veto, leaving Poland without a functioning national MiCA implementing act despite EU-wide MiCA applicability.^[24][28]

Operators considering Poland on the strength of its 19% CIT and large domestic market should treat the jurisdiction as effectively closed for new applicants until the political deadlock resolves.

Romania offers a lower 16% CIT, and its draft implementing ordinance would add a monthly 0.5% supervisory levy on revenues that would materially affect Year 2 onward economics, but, as of September 2026, that ordinance is unadopted and no Romanian application can be filed.^[36] Cyprus, as the cross-tier reference under CySEC, offers a 15% headline CIT from 1 January 2026, a deeper crypto-native ecosystem, and a heavier substance and authorisation bar.

When Slovakia Is the Right Choice

Choose Slovakia if:

• Annual taxable revenue is projected to remain below €5 million (keeping the CIT rate at 21% or 10%).
• The operating model does not rely on EMT transfer or custody services that EBA advice treats as payment services requiring parallel PSD2/EMI authorisation.
• Founders are willing to meet NBS’s substance test: real premises in Slovakia and key staff there who run risk management, compliance, and strategic decisions, with at least one director resident in the EU.
• Pragmatic, engaged supervision is more valuable than a deep, institutional-grade ecosystem.

Consider alternatives if:

• Annual taxable revenue is projected to exceed €5 million within 24 months: model Cyprus (15% CIT from 1 January 2026) or Czech Republic (21% flat) in parallel.
• The business is EMT-issuance or EMT-handling at scale: model Lithuania for its deeper fintech banking and EMI ecosystem.
• Institutional credibility and a large CASP cohort matter more than supervisor engagement: model Czech Republic with its larger application volume.
• A demonstrated MiCA passporting track record matters to counterparties: model an EU member state with an earlier and larger MiCA authorisation cohort.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Common Mistakes in Slovakia Applications

NBS's published Pred prípravou žiadosti guidance and the patterns observable in early CEE MiCA authorisations point to a consistent set of avoidable application errors.

• Treating pre-application engagement as a formality. Operators who file directly without engaging crypto@nbs.sk lose the chance to surface scope, governance, and ICT questions before the statutory clock runs; NBS meets only applicants at an advanced stage and gives no binding view, so a meeting prepares the file rather than shortens the review.
• Naming a nominal AML officer without operational visibility. NBS scrutinises whether the AML officer has both the seniority and the day-to-day visibility to discharge the role. Board members without operational involvement, or junior employees without management authority, are flagged as substantive deficiencies rather than paperwork issues.
• Submitting generic, non-Slovakia-specific compliance documentation. AML manuals and risk assessments adapted from other jurisdictions without engaging Slovak Act 297/2008 by name, without referencing the Slovak FIU, and without addressing Slovakia-specific risks are the leading cause of substantive RFIs.
• Underestimating DORA application from day one. Some applicants treat DORA as a Year 2 implementation programme, but the framework must be in place and demonstrable at authorisation; NBS reviews DORA architecture as part of the substantive assessment, not as an ongoing obligation to be evidenced later.
• Filing banking applications after NBS authorisation rather than in parallel. As covered under Banking, sequential filing adds two to four months to operational readiness with no upside.
• Assuming the application fee bands map cleanly to MiCA capital classes. NBS ties the €1,700 / €2,500 / €3,400 bands to “scope of services requested”, not to capital class. Confirm the fee band with NBS at pre-application stage to avoid budgeting against the wrong band.

Frequently Asked Questions

References