A Bosnia and Herzegovina crypto license can be a practical option for companies looking for a Balkan-based VASP structure outside the EU MiCA framework. The jurisdiction offers a relatively fast setup process, low government fees, no specific minimum VASP capital requirement, and access to EU-adjacent markets. For crypto exchanges, custody providers, trading platforms, and virtual asset businesses, Bosnia and Herzegovina may provide a cost-efficient alternative to more complex EU CASP licensing routes.
Unlike many EU jurisdictions, Bosnia and Herzegovina is not subject to MiCA. This means crypto companies do not need to follow the full EU CASP authorization process, which may involve higher capital requirements, longer approval timelines, and more complex regulatory preparation. Instead, a local company can be incorporated, registered with the relevant authorities, and notified to the competent Securities Commission as a Virtual Asset Service Provider.
A Bosnia and Herzegovina crypto license is generally based on a notification-style VASP registration model. The framework is supported by the state-level Anti-Money Laundering and Terrorist Financing Act of 16 February 2024 and entity-level rules, especially the Law on the Securities Market of Republika Srpska. The exact process depends on where the company is incorporated: the Federation of Bosnia and Herzegovina, Republika Srpska, or Brčko District.
#What Services Can a Licensed VASP Provide?
A licensed VASP in Bosnia and Herzegovina may provide several types of virtual asset services, depending on the selected entity and regulatory route. These may include:
- crypto-to-fiat and crypto-to-crypto exchange;
- virtual currency custody and wallet depository services;
- management of virtual currencies;
- operation of trading platforms;
- transfers of virtual currencies on behalf of third parties;
- financial services related to token offerings, including ICO support.
This makes the jurisdiction relevant for crypto exchange operators, wallet providers, OTC platforms, payment-focused crypto businesses, and blockchain companies looking for a regulated structure outside the EU.
#Bosnia and Herzegovina VASP Setup: Key Information
- Regulator: Securities Commission of FBiH and RS Securities Commission for Republika Srpska.
- Local company form: A d.o.o. limited liability company is required. IBC structures are not eligible.
- Minimum share capital: There is no specific VASP minimum share capital requirement. Only nominal share capital is required for company incorporation.
- Setup timeline: Company registration usually takes around 2–4 weeks, with a 30-day notification window after incorporation.
- Corporate income tax: The corporate income tax rate is 10%.
- VAT: The standard VAT rate is 17%, while crypto exchange activity is exempt.
- MLRO requirement: A local Money Laundering Reporting Officer is mandatory.
- Director residency: A local director is required, or alternatively, a non-resident director with a “white card” work permit.
- MiCA recognition: MiCA does not apply, as Bosnia and Herzegovina is outside the EU MiCA framework.
#Why Set Up a Crypto Business in Bosnia and Herzegovina?
Bosnia and Herzegovina may be suitable for crypto companies that want a regulated European-adjacent structure without entering the EU MiCA regime. The country offers a combination of low setup costs, a fast incorporation process, no specific VASP capital floor, and a competitive tax environment.
One of the main advantages is that Bosnia and Herzegovina is outside the European Union. As a result, crypto companies are not required to obtain an EU CASP license under MiCA. This can reduce the initial regulatory burden, especially for startups, smaller exchanges, OTC businesses, and companies testing regional or international crypto operations.
Another advantage is the lack of a dedicated minimum capital requirement for VASPs. Instead of meeting a high regulatory capital threshold, the company follows the standard d.o.o. incorporation rules. This makes the structure more accessible for businesses that do not need a large institutional license from the beginning.
The timeline is also relatively efficient. A local d.o.o. can usually be incorporated within 2–4 weeks, and the VASP notification is submitted within 30 days after incorporation. In many cases, the full route to operational readiness can take around 4–6 weeks, depending on documentation, banking, and compliance preparation.
From a tax perspective, Bosnia and Herzegovina is also attractive. The corporate income tax rate is 10%, crypto exchange transactions are VAT-exempt, and dividends paid to shareholders are not taxed. These features make the country competitive compared with higher-cost European licensing jurisdictions.
#How Is Crypto Regulated in Bosnia and Herzegovina?
Crypto regulation in Bosnia and Herzegovina is split between the state level and the entity level. This is important because the country consists of the Federation of Bosnia and Herzegovina, Republika Srpska, and Brčko District. There is no single nationwide crypto law that applies in the same way across all entities.
At the state level, the Anti-Money Laundering and Terrorist Financing Act of 2024 defines VASPs and introduces AML/CFT obligations. This law applies across the country and creates the core compliance framework for virtual asset businesses. It covers customer verification, transaction monitoring, suspicious activity reporting, PEP identification, and other AML-related duties.
In Republika Srpska, the Law on the Securities Market, amended in 2022, provides a clearer VASP route. It defines virtual currencies and VASP services, gives authority to the RS Securities Commission, and includes registration rules for service providers related to virtual currencies.
In the Federation of Bosnia and Herzegovina and Brčko District, there is no separate entity-level crypto law. Companies usually operate under the state-level AML framework, while notification and registration procedures depend on the relevant Securities Commission and the company’s place of incorporation.
Because of this structure, choosing the right incorporation entity is a key part of setting up a crypto business in Bosnia and Herzegovina. The decision may affect registration procedures, compliance steps, regulator interaction, and banking options.
#Requirements for a Bosnia Crypto License
To obtain a Bosnia and Herzegovina crypto license, an applicant generally needs to establish a local company, appoint an MLRO, prepare an AML/CFT framework, register with the required state authorities, and ensure that management meets local requirements.
#The main requirements include:
- Local company incorporation: The applicant must register a local limited liability company, known as a d.o.o. International Business Companies are not eligible.
- Registration with state authorities: The company must register with the Tax Service, the Statistical Office, and the relevant Securities Commission, depending on the entity of incorporation.
- Share capital deposit: The company’s share capital must be deposited through a local Bosnian bank. After the required deposit, the company may use banking or payment accounts in other jurisdictions, subject to availability.
- Local MLRO appointment: A local Money Laundering Reporting Officer is required. The MLRO is responsible for AML/CFT controls, transaction monitoring, communication with authorities, and suspicious activity reporting.
- AML/CFT framework: The company must adopt internal policies covering customer due diligence, KYC, transaction monitoring, risk assessment, sanctions screening, employee training, and reporting to the Financial Intelligence Unit.
- Director residency requirement: The company must either have a local director or a non-resident director with a “white card” work permit. The white card process usually requires one personal visit to Bosnia and Herzegovina.
#How to Set Up a Crypto Company in Bosnia and Herzegovina
Setting up a crypto company in Bosnia and Herzegovina usually involves four main stages: structuring, company incorporation, compliance preparation, and VASP notification.
#Step 1: Structuring the Business Model
The first stage is to define the business model and decide which virtual asset services the company will provide. This may include exchange services, custody, trading platform operation, transfers, or token offering support.
At this stage, the company should also define its ownership structure, management model, share capital, target markets, and expected transaction flows. It is also important to decide whether the director will be a local resident or a non-resident with a white card permit.
#Step 2: Incorporating a Local d.o.o.
The second stage is company incorporation. The applicant must prepare the memorandum and articles of association, complete the notarial procedure, submit documents to the Commercial Register, and open a special-purpose bank account for the share capital deposit.
Company incorporation usually takes around 2–4 weeks, depending on document readiness and local processing times.
Step 3: Preparing AML/CFT Documentation
Before submitting the VASP notification, the company must prepare a compliant AML/CFT framework. This includes AML policies, KYC procedures, risk assessment methodology, transaction monitoring rules, internal reporting procedures, and MLRO documentation.
The company must also establish customer identification procedures from KM 1,000 and ensure that suspicious transactions can be reported to the Financial Intelligence Unit.
#Step 4: Submitting the VASP Notification
The final step is submitting the VASP notification to the relevant Securities Commission within 30 days after incorporation. The notification should include corporate documents, AML/CFT policies, MLRO details, proof of state authority registration, and other required information.
Once the notification is accepted and the company is entered into the relevant register, the VASP may begin operations within the approved service scope.
VASP Provider Responsibilities in Bosnia and Herzegovina
VASP providers in Bosnia and Herzegovina must meet several registration, tax, AML/CFT, and reporting obligations before and after starting operations:
- VASP registration: Registration is mandatory for entities offering virtual asset services in Bosnia and Herzegovina. The filing is made with the Securities Commission of FBiH or the RS Securities Commission, depending on the place of incorporation.
- AML/CFT compliance: Providers must maintain an active AML/CFT framework, appoint a local MLRO, monitor transactions, identify customers from KM 1,000, and report suspicious activity to the Financial Intelligence Unit.
- State authority registration: Companies must register with the Tax Service, the Statistical Bureau, and the relevant Securities Commission.
- Corporate income tax: VASP providers are subject to 10% corporate income tax on profits.
- Annual reporting: Companies must prepare financial statements, maintain tax records, report virtual asset transactions, and submit AML-related reports in line with the AML Law of February 2024.
#Legal Framework for Crypto in Bosnia and Herzegovina
The legal framework for crypto in Bosnia and Herzegovina is based on a combination of AML, securities, banking, payment, and digital asset rules. There is no single nationwide VASP law, so applicable requirements may depend on whether the company is incorporated in FBiH, Republika Srpska, or Brčko District:
- Anti-Money Laundering and Terrorist Financing Act of BiH, 2024: Establishes the state-level AML/CFT framework, defines VASPs and their services, introduces customer verification, PEP identification, and limits cash transactions to EUR 15,000. It also recognizes that cryptocurrency may be transferred, exchanged, and stored, but not treated as legal tender.
- Law on the Central Bank of Bosnia and Herzegovina: Gives the Central Bank authority over monetary transactions, including foreign currency and cryptocurrency-related matters.
- Law on the Securities Market of Republika Srpska, 2022: Defines virtual currencies and VASP services, sets the powers of the RS Securities Commission, and includes the VASP register and registration rules for virtual currency service providers.
- National Payment Transactions Act: Covers methods for controlling and processing payment systems, including cryptocurrency-related transactions.
- Digital Assets Act of Republika Srpska, 2020: Provides an earlier entity-level regulatory basis for different types of cryptocurrency transactions.
- Banking Act: Regulates financial institutions and their cooperation with fintech companies.
#Taxation of Crypto Companies in Bosnia and Herzegovina
Crypto companies in Bosnia and Herzegovina are generally taxed under ordinary tax rules. There is no separate crypto tax regime, but the standard corporate and personal tax rules apply to crypto-related income and gains.
The main tax points include:
- Corporate income tax: Crypto companies pay 10% corporate income tax on profits.
- Personal income tax: Individuals earning income from crypto-related activity may be subject to 10% personal income tax.
- Capital gains tax: Gains from the sale of digital assets may be subject to 13% capital gains tax.
- VAT: The standard VAT rate is 17%, but crypto-to-fiat and crypto-to-crypto exchange transactions are exempt.
- Dividends: Dividends paid to shareholders are not taxed.
Crypto companies must also maintain proper accounting records, transaction records, KYC files, tax documentation, and suspicious transaction reports where required.
#Key Risks of Operating a Crypto Business in Bosnia and Herzegovina
Although Bosnia and Herzegovina can be attractive for VASP setup, companies should consider the regulatory and operational risks before choosing this jurisdiction.
The main risks include:
- No single state-level VASP law: The framework is based on a combination of the AML Law, entity-level securities rules, and related financial legislation. This may leave some operational details open to interpretation.
- Regulatory fragmentation: The rules differ between FBiH, Republika Srpska, and Brčko District. The incorporation entity directly affects the compliance route.
- Unclear legal status of cryptocurrency: Virtual currencies are not recognized as legal tender, and their classification may affect contracts, settlements, and dispute resolution.
- Limited rules for NFTs and staking: NFTs, proof-of-stake services, and direct token sales by issuers may not have a clearly defined compliance perimeter.
- Banking limitations: Some local banks may be reluctant to support crypto-related activity. Although the share capital deposit must go through a Bosnian bank, operational banking may need to be arranged through European EMIs or other providers.
- Limited regulatory precedent: The current AML framework is relatively new, so enforcement practice and regulator interpretation are still developing.
#Conclusion
A Bosnia and Herzegovina crypto license may be a practical option for businesses that want to operate a regulated crypto company in Europe-adjacent markets without applying for an EU MiCA license. The jurisdiction offers a relatively fast setup process, low government costs, no specific VASP minimum capital, and a competitive 10% corporate income tax rate.
At the same time, the framework is still developing. Companies must carefully consider the differences between FBiH and Republika Srpska, the absence of a unified nationwide VASP law, banking limitations, and the limited regulatory precedent. With the right entity choice, proper AML/CFT documentation, and a well-prepared notification file, a VASP structure in Bosnia and Herzegovina can usually become operational within approximately 4–6 weeks.
