What You Need to Launch a Crypto Lending Business
A crypto-backed lending business needs five interlocking components: an operating entity in a jurisdiction whose regime actually covers lending, a licence or registration under that regime, a collateral custody architecture with segregated wallets and a loan-to-value engine, fiat disbursement and repayment rails, and a compliance stack spanning AML, sanctions screening of collateral, and the consumer-credit perimeter where borrowers are retail. And the regime and entity decisions are strictly sequential; the build streams run in parallel behind them.
Regime comes first because it is the narrowest question. Unlike exchange or custody services, lending has no MiCA authorisation class to passport: MiCA authorises ten crypto-asset services and lending is not among them, so no CASP licence covers a lending book.[5] Jurisdictions that do name lending as a licensable digital-asset activity form a short list, and four of them are covered by the partner network: Dubai, Georgia, Bermuda, and Antigua and Barbuda.
Custody architecture is the second structural choice. Borrower collateral must sit in segregated wallets with documented control, an LTV monitoring engine, and a liquidation waterfall the borrower agreed to in the loan terms. A desk that cannot evidence segregation and liquidation mechanics will not pass banking due diligence, and in the licensed regimes it will not pass the regulator either.
Infrastructure Checklist
| Component | What It Involves | Typical Timeline |
|---|---|---|
| Operating entity | Registered company in the licensing jurisdiction; holds the loan book, contracts with borrowers and vendors | 1 to 4 weeks |
| Licence / registration | VARA licence, NBG VASP registration, DABA licence, or FSRC DAB licence depending on route | About 3 to 6 months (Antigua) to 8 to 12 months (Dubai); Georgia 3 to 7 months |
| Collateral custody | Segregated wallets, key management, LTV monitoring, liquidation waterfall documented in loan terms | 4 to 8 weeks |
| Fiat rails | Operating accounts, disbursement and repayment rails, liquidation off-ramp | 6 to 12 weeks (parallel) |
| Lending engine and risk controls | Origination flow, margin-call communications, rate logic, default handling | 6 to 12 weeks (parallel) |
| Compliance stack | KYC, sanctions screening of collateral inflows, transaction monitoring, consumer-credit perimeter where retail | 4 to 8 weeks initial, then continuous |
Sequencing follows dependency. Before the licensing file, the custody file, or any bank application can be lodged, the entity must exist. Because the licensing route determines what the custody and compliance files must contain, regime selection precedes both. Banking, custody build-out, and the lending engine then run in parallel; banking is the longest-pole item, and introductions to institutions in the partner network start alongside formation, not after licensing.
Choosing the Right Jurisdiction
Jurisdiction choice determines whether the lending activity is licensable at all, the capital and deposit requirements, the tax treatment of interest income, the retail perimeter, and the banking options. For crypto lending the field is unusually narrow: most regimes regulate exchange and custody but stay silent on lending, so the comparison below covers the four network jurisdictions whose frameworks name lending or borrowing as a regulated activity.
Jurisdiction Comparison
| Factor | Dubai (VARA) | Georgia | Bermuda | Antigua & Barbuda |
|---|---|---|---|---|
| Regime | VARA VASP licence with an explicit Lending and Borrowing category | NBG VASP registration; lending among seven regulated activities | BMA DABA licence (Class T / M / F) | FSRC Digital Assets Business licence (activity-based) with sandbox option |
| Minimum capital | The higher of AED 500,000 and 25% of fixed annual overheads≈ $140K+[7] | GEL 250,000 minimum supervisory capital for lending (since 27 August 2026) | USD 100,000 baseline net assets (Class M, F); USD 10,000 (Class T) | No fixed share capital; statutory deposit scaled by activity and annual turnover; separate minimum risk capital assessed by client assets; lending category to confirm with FSRC |
| Year-1 cost | General VARA benchmark AED 1.33m to 7.26m≈ $360K–2M across activities, excluding paid-up capital. Lending and Borrowing fees are AED 300,000≈ $82K; the lending build is quoted per case | USD 15,000 to 43,000 for the registration route, excluding the lending engine | USD 462,000 to 1,610,000 (Class F lending) | Non-exchange smallest-band benchmark USD 34,100 to 64,100, excluding the locked statutory deposit; Schedule II names no lending category, so the FSRC confirms the lending fee and deposit |
| Realistic timeline | 8 to 12 months | 3 to 7 months | 6 to 12 months | About 3 to 6 months |
| Corporate tax | 9% above AED 375k profit≈ $100K for ordinary taxable persons; Qualifying Free Zone Person: 0% on Qualifying Income, 9% on other taxable income | If classified as a financial institution or loan provider: 20% annual-profit tax. Ordinary 0% retained-profit / 15% distribution treatment is not automatic for a lending business.[8] | 0%; 15% for in-scope large groups under the Corporate Income Tax Act 2023 | 25% headline under a territorial system |
| Retail lending | Mixed: retail access gated by product and marketing rules | Not permitted to natural persons | Permitted | Permitted |
| FATF standing | Clear | Clear | Clear | Clear |
Choose Dubai if institutional credibility and MENA or global non-EU distribution drive the business case, and the budget carries a full VARA build. VARA licenses Lending and Borrowing as its own activity under a dedicated Lending and Borrowing Services Rulebook, so the loan book, the collateral mechanics, and the margin-call process are assessed under rules written for lending rather than adapted from exchange supervision. See the full Dubai crypto licensing guide.
Choose Georgia if the desk is cost-sensitive and the borrower base sits in the CIS, Turkey, MENA, or the Caucasus. Its NBG VASP registration names lending among the seven regulated activities, requires GEL 250,000 of minimum supervisory capital for lending since 27 August 2026, bars lending virtual assets to natural persons, and completes in 3 to 7 months at a Year-1 cost of USD 15,000 to 43,000 for the registration route, before the lending engine. The VASP activity covers lending virtual assets; disbursing fiat against crypto collateral may fall under Georgia’s separate lending rules, so the perimeter is confirmed per case. Full detail: the Georgia crypto licensing guide.
Georgia tax depends on the business’s classification. A financial institution or loan provider is subject to 20% annual-profit tax on gross income less statutory deductions. Ordinary 0% retained-profit / 15% distribution treatment is not automatic for a lending business: establish the classification before projecting the loan book’s after-tax return.[8]
Choose Bermuda if the desk is institutional-grade and the counterparties expect a mature, internationally respected supervisor. Under the Digital Asset Business Act 2018 lending sits within the defined activities, the BMA's class system (T, M, F) lets a desk scale supervision with the book, and the 0% corporate rate holds below the Corporate Income Tax Act 2023 thresholds. Year-1 costs of USD 462,000 to 1.61 million, including the BMA minimum fee of USD 100,000 for lending, price it for funded desks. See the full Bermuda crypto licensing guide.
Choose Antigua and Barbuda if the desk wants an early, activity-flexible, English-language regime at moderate cost, with a six-month sandbox licence available for a staged launch. Licensing under the Digital Assets Business Act 2020 runs on an activity basis, with a statutory deposit scaled by turnover rather than a fixed capital floor. More detail sits in the Antigua and Barbuda crypto licensing guide.
Setting Up Your Company
Company formation is the first operational step because the licensing file, the custody arrangement, and every bank application require a registered entity. One formation mistake is specific to lending: incorporating the loan-book entity in a jurisdiction the founders like for tax, then discovering the lending regime they need sits elsewhere. Unlike a holding company, a loan-book entity cannot be cheaply re-domiciled once positions are open.
Formation by Jurisdiction
| Jurisdiction | Entity type | Formation cost | Timeline | Min. capital |
|---|---|---|---|---|
| Dubai | Free Zone Company (FZCO / FZE) | AED 20,400 to 28,400 Year-1 planning range, partner fee separate≈ $5,600–7,700 | Licence in 3 to 5 working days; operational with visa and bank account in 4 to 8 weeks | None statutory for most free zones; VARA capital applies at licensing |
| Georgia | LLC | USD 1,500 to 3,500 all-in | Registration in 1 business day; operational readiness 1 to 4 weeks | GEL 250,000 NBG capital for lending |
| Bermuda | Exempted Company | USD 3,035 official fees plus the registered office and resident representative, quoted | 3 to 7 business days (incorporation filed with the Registrar through a licensed corporate service provider) | None to incorporate; DABA net-asset requirements apply at licensing |
| Antigua & Barbuda | International Business Corporation (IBC) | USD 300 government fee; agent quoted per case | 1 to 2 weeks via licensed registered agent | None; FSRC statutory deposit applies at licensing |
Formation figures mix statutory fees and indicative market estimates as of and exclude licensing; their scope varies by row, so they are not like-for-like totals. In all four jurisdictions the entity can be formed before the licensing file is complete, and should be: the entity name goes on every subsequent document, from the custody agreement to the bank application.
Licensing Requirements
Each regime carries its own licence type: a VARA VASP licence under the Lending and Borrowing category in Dubai, an NBG VASP registration in Georgia, a DABA Class T, M, or F licence in Bermuda, and an activity-based Digital Assets Business licence in Antigua and Barbuda. Georgia requires GEL 250,000 of minimum supervisory capital for a lending VASP since 27 August 2026, while Bermuda Class M and F require baseline net assets of USD 100,000.
For Dubai's Lending and Borrowing activity, paid-up capital is the higher of AED 500,000 and 25% of fixed annual overheads; capital requirements are cumulative when several activities are licensed.[7]
Dubai (VARA). Within VARA's activity model, under Dubai Law No. 4 of 2022, the Lending and Borrowing category sits alongside advisory, broker-dealer, custody, exchange, management, transfer, and issuance.[1] Approval is a two-stage process running 8 to 12 months, and the application, supervision, and capital numbers scale by activity. A lending desk that also takes custody of collateral needs the custody activity as well; VARA prices each additional activity separately.
Georgia (NBG). Registration rather than licence: the National Bank of Georgia registers VASPs under Decree N94/04 and supervises lending as one of seven regulated activities.[2] Since 27 August 2026 a lending VASP must hold at least GEL 250,000 of supervisory capital,[9] and the registration rule bars lending virtual assets to natural persons.[2] AML/CFT documentation, key-person fitness, and the custody arrangement form the centre of the file.
Bermuda (BMA). Bermuda's Digital Asset Business Act 2018 defines the licensable activities and the BMA's class system stages supervision: Class T for pilots, Class M for modified supervision, Class F for full licence.[3] Operationally, the Digital Asset Business Code of Practice sets the bar: custody, client disclosure, and risk management, which for a lending desk means documented LTV and liquidation mechanics.
Antigua and Barbuda (FSRC). Antigua and Barbuda's Digital Assets Business Act 2020 (as amended) licenses named activities, with a statutory deposit scaled by category and annual turnover rather than a fixed capital floor, and a six-month sandbox licence, extendable for three months, for staged launches.[4] Schedule II to the 2021 Regulations sets annual licence fees of EC$20,000 to 30,000 for Category A activities and EC$50,000 to 70,000 for an exchange, but names no category for lending, so the fee and statutory deposit for a lending licence are confirmed with the FSRC.[10]
Lending inside the EU: the MiCA gap
MiCA's ten authorised services cover exchange, custody, transfer, advice, portfolio management, and platform operation; lending and borrowing are outside the perimeter, and Article 142(2)(b) requires the Commission’s review report to assess whether regulating crypto-asset lending and borrowing is necessary and feasible.[5] An EU entity can lend against crypto collateral, but it does so under national financial, consumer-credit, and AML law, without a passport, and with member-state-by-member-state variation.
For EU consumer lending, national measures implementing Directive (EU) 2023/2225 (CCD2) apply from , subject to its scope and exclusions. Check the borrower’s market, the credit agreement and applicable consumer-credit duties before origination; a crypto-business licence does not settle that assessment.[11]
For most builds the practical answer is a licensed non-EU entity plus a per-market analysis of borrower-side rules. See the crypto licensing hub for the full regime map.
Banking
Banks read a crypto lending desk as double exposure: a crypto-native counterparty plus a credit business. Collateral volatility, liquidation-driven flow spikes, and source-of-funds questions on repaid principal push primary clearing banks toward refusal; through the partner network, operating and rail accounts typically onboard in 6 to 12 weeks, longer than for a licensed exchange because the diligence is direct.
In practice the path is a multi-institution architecture. An EU-licensed EMI carries operating flows and payroll; a custody-grade institution in a digital-asset-aware jurisdiction holds collateral under the segregation the regulator and the loan terms require; disbursement rails match the borrowers' currencies. Three settlement components are specific to lending: the disbursement off-ramp (loan principal out, often same-day against posted collateral), the repayment on-ramp (principal and interest in, with source-of-funds evidence attached), and the liquidation settlement leg (collateral sold, proceeds converted and reconciled against the loan). Each leg needs its own institution answer before origination starts.
Ongoing Compliance
Compliance is a permanent operating expense, not a licensing one-off. Annual ranges run from USD 8,000 to 25,000 on the Georgia registration route (accounting, registered office, AML/CFT maintenance) to USD 348,000 to 1.3 million for a Bermuda Class F lending licensee (the BMA annual fee of at least USD 100,000 plus the ongoing build); for Antigua and Barbuda, the published fee schedule names no lending category, so the annual licence fee is confirmed with the FSRC, and a compliance officer, audit, and principal office come on top.[10]
Specific to a lending book: sanctions and provenance screening of collateral inflows before acceptance, transaction monitoring across disbursement and repayment legs, Travel Rule data on qualifying transfers, LTV monitoring with auditable margin-call records, liquidation disclosures matching the loan terms, and, where borrowers are retail, the conduct and affordability rules of each borrower market. Regimes with staged classes (Bermuda) or activity pricing (Dubai, Antigua) re-price as the book grows, so the compliance budget scales with origination volume.
On the watchlist: the Commission's MiCA review under Article 142 must assess whether regulating crypto-asset lending and borrowing is necessary and feasible, and an EU authorisation class for lending would change the strategy for any EU-facing book.[5] Jurisdiction pages carry the per-regime detail.
Realistic Timeline and Costs
End-to-end, a crypto lending business reaches first origination in 3 to 9 months on the Georgia registration and Antigua and Barbuda licence routes, and 6 to 12 months on the Bermuda and Dubai licences. Custody build-out, banking, and the lending engine run in parallel with the licensing file; banking is the usual critical path.
Cost Breakdown
| Phase | Timeline | Notes | Cost Range |
|---|---|---|---|
| Formation & setup | 1 to 4 weeks | Georgia and Antigua at the low end; Dubai FZCO (AED 20.4k to 28.4k) at the top; Bermuda from USD 3,035 in official fees plus quoted provider roles | USD 1,500 to 15,000 |
| Licensing / registration | 2 to 12 months | Georgia registration: USD 10k to 25k advisory + state fee; Antigua: fees + scaled deposit; Bermuda Class F and Dubai VARA carry six-figure builds | USD 10,000 to 600,000+ |
| Banking & custody | 6 to 12 weeks (parallel) | EMI operating accounts, custody-grade collateral arrangement, disbursement rails; excludes locked deposits | USD 10,000 to 60,000 |
| Lending engine & go-live | 6 to 12 weeks (parallel) | Origination flow, LTV monitoring, liquidation waterfall, margin-call communications, compliance tooling | USD 15,000 to 120,000 |
| Year-1 total | 3 to 12 months | The floor is the sum of the phase floors, since the Georgia registration route alone (USD 15,000 to 43,000) excludes the lending engine. The ceiling is the general VARA benchmark across activities, not a lending-specific quotation. Capital excluded. | USD 36,500 to AED 7.26 million≈ $2M |
Figures are Year-1 all-in ranges as of , in USD unless stated, and exclude paid-in capital, locked statutory deposits, and loan-book funding itself. Ongoing Year-2 costs drop to the compliance ranges in the previous section plus banking and custody fees.
Frequently Asked Questions
Costs & Timeline
Jagelski & Partners scopes crypto lending builds from roughly USD 15,000 to USD 43,000 for Year 1 on the Georgia registration route (formation, NBG VASP registration, custody and banking setup, compliance documentation, excluding the lending engine). A Bermuda DABA Class F lending licence runs USD 462,000 to USD 1.61 million in Year 1 (the BMA minimum grant fee for lending is USD 100,000). For Antigua and Barbuda, the published benchmark for a non-exchange business in the smallest band is USD 34,100 to 64,100 before the statutory deposit, which is held rather than spent; the fee schedule names no lending category, so the FSRC confirms the fee and deposit for a lending licence. These figures follow the Bermuda and Antigua and Barbuda licensing guides, which set out the statutory fee schedules behind them.
For Dubai, the general VARA benchmark is AED 1.33 million to 7.26 million≈ $360K–2M across activities, including first-year regulatory fees and indicative build costs but excluding paid-up capital. Lending and Borrowing falls in the AED 300,000 first-year fee tier≈ $82K; the lending-specific build is quoted per case. The general benchmark is not a lending-specific price range. The spread is driven by the licensing route, not the technology: the lending engine and custody stack cost broadly the same everywhere. Figures as of .
Operational readiness in 3 to 9 months on the Georgia registration and Antigua and Barbuda licence routes: Georgia’s NBG VASP registration runs 3 to 7 months and Antigua and Barbuda’s licence about 3 to 6 months end to end, with banking, custody, and the lending engine built in parallel. A Bermuda DABA licence runs 6 to 12 months and a Dubai VARA licence 8 to 12 months.
The critical-path item on every route is banking: operating and rail accounts typically onboard in 6 to 12 weeks, and Jagelski & Partners scopes the banking in the written brief and introduces the case to banking partners before the licensing file is submitted.
Licensing
It depends on where the lending entity is domiciled and who the borrowers are. Four regimes covered by the Jagelski & Partners network treat lending as a licensable digital-asset activity: Dubai’s VARA regime carries an explicit Lending and Borrowing category, Georgia’s NBG VASP registration names lending among seven regulated activities, Bermuda’s Digital Asset Business Act 2018 captures it within the defined DABA activities, and Antigua and Barbuda’s Digital Assets Business Act 2020 licenses it on an activity basis.
In the EU there is no equivalent: MiCA authorises ten crypto-asset services and lending is not among them, so the activity falls to national financial, consumer-credit, and anti-money-laundering law.
No. MiCA (Regulation (EU) 2023/1114) authorises ten crypto-asset services and lending is not among them, so no CASP licence covers a lending book. In most EU jurisdictions there is no dedicated authorisation for crypto-collateralised lending at all, which leaves the activity governed by general financial, consumer-credit, and money-laundering law rather than a purpose-built regime.
Article 142 of MiCA requires the European Commission's review report to assess whether regulating crypto-asset lending and borrowing is necessary and feasible, so an EU regime may follow. Until it does, an EU-facing lending desk needs a per-market perimeter analysis, not a passport.
There is no single best jurisdiction; the choice follows the borrower base and the capital available. Dubai is the default where institutional credibility and MENA or global non-EU distribution matter, and VARA licenses Lending and Borrowing as its own activity under a dedicated rulebook. Georgia is a cost-sensitive route with a 3 to 7 month registration.
Georgia tax depends on classification: a financial institution or loan provider faces 20% annual-profit tax on gross income less statutory deductions. Ordinary 0% retained-profit / 15% distribution treatment is not automatic for a lending business. Confirm the model’s classification before choosing the jurisdiction on tax grounds.[8] Bermuda fits institutional-grade desks that can carry USD 462,000+ Year-1 costs for a mature supervisor. Antigua and Barbuda is the early activity-flexible English-language regime with a sandbox option. Jagelski & Partners scopes the fit from the written brief.
Banking & Operations
Regime-dependent. Bermuda and Antigua and Barbuda permit retail participation under their digital-asset frameworks, Georgia’s registration rule bars lending virtual assets to natural persons, and Dubai’s VARA regime takes a mixed position with retail access gated by product and marketing rules. The harder constraint is usually the borrower’s own jurisdiction: lending to consumers in the EU can trigger national consumer-credit licensing and conduct rules that apply regardless of where the lender is domiciled.
A retail lending book therefore needs a marketing-perimeter analysis per target market before origination starts, and several builds deliberately restrict Phase 1 to professional and corporate borrowers.
Through a multi-institution architecture, not a single-bank application. Banks read a crypto lending desk as double exposure: a crypto-native counterparty plus a credit business, with collateral volatility and liquidation-driven flows on top. The practical stack combines an EU-licensed Electronic Money Institution for operating flows, a custody-grade institution in a digital-asset-aware jurisdiction for collateral, and disbursement rails matched to the borrowers’ currencies.
Jagelski & Partners scopes the banking stack in the written brief and introduces the case to institutions in the partner network before the licensing file is submitted; operating and rail accounts typically onboard in 6 to 12 weeks.
Start Your Crypto Lending Assessment
Request a free assessment. Jagelski & Partners scopes the licensing route, entity setup, collateral custody, banking stack, and compliance perimeter for crypto lending businesses across four regimes, with estimated end-to-end operational readiness in 3 to 9 months on the Georgia registration and Antigua and Barbuda licence routes, and 6 to 12 months on the Bermuda and Dubai routes. These are planning estimates from project kickoff to first origination, not statutory deadlines.
Initial assessments are free · Response within one business day
References
Show all references
- Government of Dubai, Dubai Law No. 4 of 2022 Concerning the Regulation of Virtual Assets in the Emirate of Dubai, rulebooks.vara.ae, accessed .
- National Bank of Georgia, Rule on Virtual Asset Service Provider Registration at the National Bank of Georgia (Decree N94/04, effective 1 July 2023), nbg.gov.ge, accessed .
- Bermuda Monetary Authority, Digital Asset Business Act 2018 (consolidated), bma.bm, accessed .
- Government of Antigua and Barbuda, Digital Assets Business Act 2020 (No. 16 of 2020), laws.gov.ag, accessed .
- European Parliament and Council, Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA), Article 3(1)(16) service list and Article 142(2) review clause, eur-lex.europa.eu, accessed .
- Bermuda Monetary Authority, Digital Asset Business Code of Practice, bma.bm, accessed .
- Virtual Assets Regulatory Authority, Company Rulebook, Part VI.B.1ā2 (Paid-Up Capital), rulebooks.vara.ae, accessed .
- Georgia, Tax Code, Articles 97(12) and 98(4): profit-tax base and rate for financial institutions and loan providers, matsne.gov.ge, verified .
- National Bank of Georgia, The National Bank of Georgia Expands the Supervisory Framework for Virtual Asset Service Providers (minimum supervisory capital GEL 250,000 for lending and other services, from Order No. 207/04 of 26 August 2026), , nbg.gov.ge, accessed .
- Financial Services Regulatory Commission, Digital Assets Business Regulations 2021 (No. 38 of 2021), Schedule II (fees and statutory deposit by category), abipco.gov.ag, gazetted , accessed .
- European Parliament and Council, Directive (EU) 2023/2225 on credit agreements for consumers, Articles 2 and 48, eur-lex.europa.eu, accessed .