Crypto License.

A crypto license is regulator authorisation to provide one or more digital-asset services — exchange, custody, brokerage, payment, token issuance. It is the legal permission to operate. Without it, the activity is unauthorised in jurisdictions that regulate the perimeter, which today includes the EU (MiCA CASP), the UK (FCA), the US (FinCEN MSB plus state MTL), the UAE (VARA), Singapore (MAS PSA), Hong Kong (SFC) and most other major financial centres.

Most operating models do — centralised exchanges, custodians, brokers, OTC desks, payment processors, stablecoin issuers and token issuers selling to retail. Genuine non-custodial DeFi front-ends and limited NFT collectibles platforms can fall outside, but the threshold question turns on activity scope, customer geography and whether the operator controls client assets.

El Salvador (DASP), Georgia (FIZ + VASP), Panama and Bosnia & Herzegovina lead on total first-year cost. Total all-in — including statutory capital, legal fees, substance and ongoing supervision — typically falls between USD 12,000 and USD 25,000 in those jurisdictions. The full ranking is on /compare/cheapest-crypto-license/.

For an institutional centralised exchange the credible shortlist is UAE (VARA), Singapore (MAS MPI) and Hong Kong (SFC VATP). Switzerland (FINMA fintech) and EU MiCA member states (Lithuania first) are credible alternatives. The right answer turns on customer geography, banking strategy and capital tolerance.

Crypto license timelines range from 1–3 weeks (Panama, no specific licence) to 18–24 months (NYDFS BitLicense). Most regimes take 8–14 weeks (offshore VASP) or 6–12 months (Tier-1 onshore). The variance comes from RFI cycles and the quality of the application file at submission, not from the published schedule.

Yes — offshore (BVI, Cayman, Panama, Jersey) is a legitimate operating base for many crypto models, particularly token issuers and custodians. The trade-off is banking access. Supervised offshore (BVI, Cayman, Jersey) plugs into institutional banking. Lightly-supervised offshore (Seychelles, Anjouan, Vanuatu) frequently cannot, and operators almost always pair it with an onshore wrapper.

VASP is the FATF-aligned offshore framework (BVI, Cayman, Georgia, Montenegro). CASP is the EU MiCA framework — passportable across all 30 EEA states under a single authorisation. VATP is the Hong Kong SFC framework for centralised crypto trading platforms. Overlapping activity, different legal systems and capital regimes.

It depends on whether the protocol is genuinely non-custodial and on whether you operate the front-end as a business. A pure smart-contract layer with anonymous deployers and no custody often falls outside licensing — but the operator behind a branded front-end, token treasury or governance hub frequently does need authorisation.

Total first-year cost for a credible crypto license ranges from USD 12,000 (El Salvador DASP) to USD 1,500,000+ (NYDFS BitLicense). The principal cost drivers are statutory capital, legal fees, substance (resident director and office), banking and ongoing supervision. We model three-year total cost upfront — first-year is rarely the relevant number.

Authorisation is the start, not the end. Year-one obligations typically include external audit, annual return to the regulator, AML programme refresh, MLRO continuity, material-change notifications and FATF Travel Rule provider integration. The same team that obtained the licence runs the post-licence supervision cycle for retainer clients.