No regulator issues a document called a crypto license. The phrase is shorthand for several different authorisations that share a purpose and differ in almost everything else. In the European Union the instrument is a CASP authorisation, in the United States it is federal registration plus state licensing, in Georgia and Australia it is a VASP registration, and in Switzerland it is membership of a self-regulatory body. Which one applies depends on what your business does with client assets and where your clients are. Equilex handles crypto licensing across jurisdictions.
What a Crypto License Actually Is
Regulators authorise activities. Industry labels carry no weight. A company gets caught by a licensing regime because of what it does with someone else's money or assets, and the label attached to that permission varies by country.
Three questions decide the answer in almost every jurisdiction. Does the business hold or control client assets? Does it exchange one asset for another on a client's behalf? Does it stand between a buyer and a seller? A yes to any of these usually brings a business inside a regime somewhere.
The name changes across borders. The European Union authorises a Crypto-Asset Service Provider. Australia and Georgia register a Virtual Asset Service Provider. El Salvador registers a Digital Asset Service Provider. Hong Kong licenses a Virtual Asset Trading Platform. The underlying question stays the same in each case.
Who Needs a Crypto License
The clearest cases are exchanges, brokers and custodians. A platform that lets users swap one token for another, or crypto for fiat, sits inside a regime in every major jurisdiction. So does a business that holds client keys or client balances.
Payment businesses that accept crypto often need two permissions, because moving fiat and handling crypto fall under separate rules. Stablecoin issuers face the strictest treatment: the European Union confines fiat-backed token issuance to banks and electronic money institutions, and Hong Kong has granted two issuer licenses from thirty-six applications.
Some models sit outside. Non-custodial wallet software, where the provider never controls keys, generally falls outside licensing, though several regulators are reviewing that position. Pure information services and analytics stay outside. Mining is treated as an industrial activity in most places, until the operator starts converting output for clients.
The trigger that surprises founders most is geography. Regulators reach businesses that market to their residents, wherever the company sits. An offshore entity serving European clients falls under European rules regardless of where it incorporated.
Timing catches people out as well. Most regimes require authorisation before a business starts serving clients, and a few treat operating first and registering later as an offence in its own right. Switzerland requires affiliation before activity begins. Australia gives a business twenty-eight days from the moment it starts providing a designated service.
The Main Licensing Regimes
European Union. MiCA replaced national frameworks, and since 1 July 2026 serving EU clients requires a CASP authorisation from a member state. One authorisation passports across all twenty-seven. Malta is a common entry point, and we handle CASP authorisation through the MFSA. Our analysis of the end of MiCA grandfathering covers what happened to firms that missed the transition.
United States. There is no single federal license. Exchangers and custodians register with FinCEN as money services businesses and then obtain state money transmitter licenses wherever they serve clients. We handle MSB registration and state licensing in the US, and the full process is set out in our guide to US MSB registration.
Canada. A single FINTRAC registration applies federally, with additional provincial requirements in Quebec. Capital thresholds do not apply, which makes it one of the cheaper North American entry points. We handle MSB registration with FINTRAC.
Georgia. The National Bank registers virtual asset service providers with no capital threshold for a limited company, though the regime requires local substance and bars distribution through agents. We handle VASP registration in Georgia, and our Georgia VASP guide sets out the requirements in full.
Australia. AUSTRAC handles anti-money-laundering registration, and ASIC licenses activities involving financial products. Since the 2026 reforms most platforms need both. We handle AUSTRAC registration for digital asset businesses, and the split between the two regimes is explained in AFSL or VASP registration.
Switzerland. Membership of a recognised self-regulatory organisation satisfies anti-money-laundering obligations for intermediaries that do not require direct FINMA authorisation. We handle SRO membership in Switzerland, and our Swiss SRO guide explains where the line falls.
El Salvador. Two separate registrations cover digital assets and Bitcoin services, and the country combines fast entry with tax incentives under its digital asset law. We handle DASP and Bitcoin service provider registration. Neither registration grants access to the European or United States markets.
Comparing the Main Crypto Licenses
| Jurisdiction | Authorisation | Regulator | Minimum capital |
|---|---|---|---|
| European Union (Malta) | CASP authorisation | MFSA | EUR 50,000 to 150,000 by service class |
| United States | MSB registration plus state licences | FinCEN and state regulators | None federally; varies by state |
| Canada | MSB registration | FINTRAC | None |
| Australia | VASP registration, plus AFSL for financial products | AUSTRAC and ASIC | None for registration |
| Switzerland | SRO membership | FINMA-recognised SRO | None beyond company law |
| Georgia | VASP registration | National Bank of Georgia | None for a limited company |
| El Salvador | DASP plus Bitcoin service provider | CNAD | None fixed |
Which One to Start With
Client geography answers this faster than any feature comparison.
Serving clients in the European Union leaves one option, because national regimes closed and only a CASP authorisation grants access. Serving United States clients means federal registration plus a state-by-state build, and the Montana route keeps the first phase cheap while a business tests the market.
For everything else the question becomes what the business needs the licence to do. A platform that needs banks and payment providers to take it seriously benefits from Switzerland or an EU authorisation. A business that needs to launch and start operating chooses Georgia or El Salvador and accepts the market limits that come with them. A platform built for the Asia-Pacific region starts with AUSTRAC.
Groups serving several regions hold several authorisations. A common structure pairs a fast registration for global operations with an EU authorisation for European clients, with each entity kept inside the scope of its own permission.
How to Get a Crypto License
The sequence looks similar everywhere, and the work sits at the start, long before anyone files anything.
Map your activities against the regulated list in each target market before choosing a jurisdiction. Founders often reverse these two steps and pick a country first, then discover their model needs a permission that country does not offer.
Incorporate locally. Almost every regime requires a domestic entity, and several also require resident directors, a compliance officer or a physical office.
Build the compliance file. An anti-money-laundering programme, know-your-customer procedures, risk assessment, business continuity plan and information security documentation form the core of every application, and preparing them takes longer than the regulator spends reviewing them.
Fund the capital requirement where one applies, then file and answer questions. Supplementary requests are routine and they extend timelines more than the formal assessment period does.
What It Costs
Government fees are usually the smallest line. Georgia charges a one-off state fee, AUSTRAC and FinCEN charge nothing for registration, and Malta's application fee is a fraction of the first-year budget.
Capital requirements vary widely. The European Union sets minimum capital by service class under MiCA, from fifty thousand euros for the narrowest permissions to one hundred and fifty thousand for trading platforms. Many other jurisdictions set none, relying instead on substance and compliance requirements.
The real cost sits in operations: a local entity, resident staff, compliance systems, external audit and banking. Budgets range from low five figures for a light registration to several hundred thousand for United States multi-state coverage. Our comparison of the best countries to get a crypto license sets out figures by jurisdiction.
Choosing Between Jurisdictions
Client geography decides more than any other factor. A license only authorises activity in the market that granted it, with the European passport as the single exception. Businesses serving several regions hold several authorisations.
Banking acceptance comes second. A registration that no bank recognises leaves a company unable to operate, and this is where the cheapest routes cost the most.
Timeline matters third. Some registrations complete in weeks and others take a year, which changes what a funding runway can support.
If you are working out which authorisation your model needs, schedule a call with the Equilex licensing team to map your activities against the regimes that apply to your clients.
What a License Does Not Give You
A license authorises activity in one market. Firms treat authorisation as a global permission and discover the limits after they start marketing abroad.
It does not guarantee banking. Payment providers and banks run their own assessments, and holding a registration improves the odds without settling the question.
It does not cover activities outside its scope. Adding staking, lending or derivatives to a licensed exchange usually requires a variation or a separate permission.
It does not survive a change of business model. Regulators authorise what a firm described in its application, and material changes need notification or approval.
It does not remove the need to look at each new market. A firm expanding from one region to another repeats the whole analysis, because the activity that needed no permission at home may need one next door.
FAQ
What is a crypto license?
The term covers any authorisation that lets a business provide crypto services legally in a jurisdiction. In the European Union it is a CASP authorisation, in the United States federal registration plus state licensing, and elsewhere a VASP or DASP registration. No single global license exists.
Who needs a crypto license?
Exchanges, brokers, custodians and any business that holds or moves client assets. Payment firms handling crypto usually need permissions covering both fiat and digital assets. Non-custodial software providers and analytics services generally sit outside, though regulators keep reviewing where that line falls.
How long does it take to get a crypto license?
Light registrations complete in weeks. Mid-tier registrations run two to four months. A MiCA CASP authorisation takes the best part of a year including preparation, and United States multi-state licensing can run twelve to eighteen months. In most cases document preparation consumes more time than regulatory review.
Do I need a license if my company is offshore?
Probably, if you serve clients in a regulated market. Regulators reach businesses that market to their residents regardless of where the entity sits, so offshore incorporation changes the tax position and leaves the licensing obligation intact.
Can one license cover several countries?
Only in the European Union, where a CASP authorisation from one member state passports across all twenty-seven. Every other regime is national. Groups serving several regions hold several authorisations and structure entities to match the markets they operate in.
