Best EU Country for a MiCA Licence (2026): Lithuania, Malta, Germany, Ireland Compared
- Apr 20
- 11 min read
Quick summary. There is no single best EU country for a MiCA CASP licence — the right choice depends on business model, target market, talent location and substance position. Lithuania is the most efficient mainstream option. Malta has the longest crypto supervisory track record. Germany offers the highest regulatory credibility. The Netherlands suits crypto-native platforms. Ireland is the natural choice for English-speaking institutional firms. France suits firms targeting French and Southern European markets. Estonia, Latvia and Czech Republic suit lean operations.
Quick answers
Why does jurisdiction matter when MiCA is a single regime?
MiCA harmonises the substantive requirements for CASP authorisation across the EU. The capital tiers (€50,000, €125,000, €150,000), the ten regulated services, the governance standards, the AML obligations, the operational resilience requirements (DORA) and the white paper rules are the same in every Member State. So why does jurisdiction matter?
It matters because everything around the substantive rules varies materially: regulator approachability and predictability, language of process, published timelines, fintech experience, banking infrastructure, talent pool, substance expectations, ongoing supervisory style, and corporate environment. Once you are passporting your CASP licence across the EEA — which is the central commercial benefit — your home jurisdiction becomes a business efficiency decision more than a regulatory decision.
The most consequential factors in 2026:
Time to authorisation. Range is 5 months (Lithuania, Malta, Czech Republic) to 15 months (Germany, France).
Banking access. Local banks vary enormously in willingness to support crypto firms. Lithuania, Malta and Germany have established crypto-friendly banks. Ireland and France are harder.
Substance requirements. Local senior management, office and headcount expectations vary across Member States.
Regulatory credibility. A BaFin authorisation opens institutional doors that a smaller-jurisdiction authorisation does not.
Supervisory style. Lithuania and Malta apply lighter ongoing supervision. Germany, France, Netherlands and Ireland apply heavier ongoing supervision.
The right jurisdiction for an early-stage retail crypto exchange is not the right jurisdiction for an institutional custodian, an OTC desk for hedge funds, or a stablecoin issuer.
At-a-glance comparison
Country | Regulator | Time to authorise | Language | CASPs issued (early 2026) | Application fee | Best for |
Lithuania | Bank of Lithuania | 5–8 months | English | 1+ growing | Set by NCA fee schedule | Efficient mainstream |
Malta | MFSA | 5–9 months | English | 6+ | €8,000–€30,000 (by class) | Exchanges, trading platforms |
Czech Republic | Czech National Bank | 4–7 months | Czech / English | Several | Set by NCA fee schedule | Speed, lean operations |
Netherlands | DNB / AFM | 6–10 months | English | 14+ | Set by NCA fee schedule | Crypto-native platforms |
France | AMF / ACPR | 8–12 months | French | 6+ | Set by NCA fee schedule | French/Southern Europe focus |
Ireland | Central Bank of Ireland | 8–14 months | English | 2+ | Set by NCA fee schedule | English-speaking institutional |
Germany | BaFin | 10–15 months | German / English | 18+ | €10,750 | Institutional credibility |
Luxembourg | CSSF | 8–12 months | English / French | 3+ | Set by NCA fee schedule | Asset servicing, wealth |
Cyprus | CySEC | 6–9 months | English | 1+ | Set by NCA fee schedule | Retail brokerage |
Estonia | Finantsinspektsioon | 5–8 months | English | Few | Set by NCA fee schedule | Lean operations |
Latvia | Latvijas Banka | 4–6 months | English / Latvian | Few | €2,500 + 0.6% annual | Lean operations |
Spain | CNMV | 7–11 months | Spanish | 3+ | Set by NCA fee schedule | Spanish-speaking markets |
Austria | FMA | 7–10 months | German | 2+ | Set by NCA fee schedule | DACH region |
Which country is fastest?
Czech Republic, Lithuania and Malta are the fastest mainstream EU jurisdictions for MiCA CASP authorisation in 2026.
Czech Republic can complete authorisation in 4 to 7 months for qualifying entities. The Czech National Bank operates a streamlined process with lower procedural overhead than larger Member States. Banking infrastructure is reasonable. Talent pool is smaller than Lithuania or Malta.
Lithuania typically completes in 5 to 8 months. The Bank of Lithuania has the largest fintech licensing track record in continental Europe — having authorised hundreds of EMIs and PIs since 2017 — and applies that operational efficiency to CASP applications. The process is in English and has a structured pre-application engagement option.
Malta typically completes in 5 to 9 months. The MFSA has the longest crypto-specific supervisory track record in the EU (regulating crypto under the Virtual Financial Assets Act since 2018) and applies experienced supervisory practice to CASP applications. The process is in English.
These three are the operational speed leaders. They are not the only credible options — they trade off speed against other factors including regulatory credibility, banking depth and substance expectations.
Best for lean operations?
For applicants prioritising operational efficiency — typically startups and growth-stage firms — three jurisdictions stand out:
Estonia has been a fintech-forward jurisdiction since the original VASP regime. The Finantsinspektsioon is experienced with crypto regulation. Senior management talent and corporate substance are available efficiently relative to Western European hubs.
Latvia offers similar advantages to Estonia in talent and corporate substance. Banking access for crypto firms is the main constraint and should be confirmed before jurisdiction selection.
Czech Republic combines a streamlined authorisation process at the Czech National Bank with a growing fintech ecosystem in Prague.
Lithuania is the most common choice for applicants wanting lean operations without sacrificing regulatory credibility. The combination of mature fintech regulator, English-language process and substantial talent pool in Vilnius makes it the default mainstream lean-operations choice.
Malta is suited to applicants where established corporate structuring is part of the strategic rationale, given Malta's mature international corporate framework.
For lean startups: Estonia, Latvia or Czech Republic are the structurally efficient options. For established operators wanting efficiency without sacrificing credibility: Lithuania. For established corporate structuring: Malta or Cyprus.
Which country has the most CASP licences?
Germany, the Netherlands, France and Malta lead in CASP authorisations issued as of early 2026.
Germany: ~18 CASPs authorised (BaFin), led by regulated banks and broker-banks plus institutional custodians.
Netherlands: ~14 CASPs (DNB and AFM), led by crypto-native trading platforms and on-ramp providers.
France: ~6 CASPs (AMF), led by traditional finance entrants and PSAN-transition firms.
Malta: ~6 CASPs (MFSA), dominated by trading platforms and exchanges.
Spain: 3 CASPs (CNMV), bank-led pattern.
Austria: 2 CASPs (FMA).
Ireland: 2 CASPs (CBI).
Luxembourg: 3 CASPs (CSSF).
Cyprus: 1 CASP (CySEC).
Lithuania: 1+ CASP (Bank of Lithuania), with a substantial pipeline.
The numbers themselves matter less than the patterns they reveal. Germany attracts banks and institutional custodians. Netherlands attracts crypto-native platforms. Malta is the exchange hub. France attracts traditional finance entrants. Lithuania, despite its fintech leadership in PI/EMI, has been slower to issue CASP authorisations — partly because the early Lithuanian VASPs that transitioned faced application quality issues and partly because the Bank of Lithuania has applied a more selective gateway than expected.
Best for exchanges?
Malta is the EU exchange hub. The MFSA's track record with the Virtual Financial Assets Act since 2018 means it has supervisory experience with order book operation, market surveillance, custody at scale, and the operational realities of crypto exchanges. The CASP authorisations issued by MFSA confirm this pattern, with several major trading platforms selecting Malta as their EU home jurisdiction.
Ireland is a credible alternative for institutional or US-headquartered exchanges. The English-language process, common law framework and strong banking infrastructure suit firms with US or UK heritage. Authorisation is materially harder than Malta but the post-authorisation environment is excellent.
Cyprus suits retail-focused brokerage and CFD-style platforms transitioning to crypto. CySEC has long experience with retail brokerage and combines that with MiCA authorisation.
Lithuania, Netherlands and Germany also issue CASP authorisations to exchanges but are not the natural first choice for that business model.
Best for institutional credibility?
Germany (BaFin) offers the highest regulatory credibility in the EU. A BaFin CASP authorisation functions as a quality stamp with banks, institutional counterparties, large enterprise clients, and investors. The BaFin CASPs to date include regulated banks, broker-banks and institutional custodians, confirming the institutional positioning.
The trade-off is timeline (10 to 15 months), language (German for substantive submissions in most cases), and substance expectations. Senior management requirements, technology build expectations and the depth of the regulatory file are all at the EU upper end.
For firms targeting institutional banking partnerships, large corporate clients, or institutional-grade investor capital, BaFin authorisation is often worth the additional time investment from the outset.
The Netherlands (DNB / AFM) is a strong second choice for institutional credibility, particularly for crypto-native platforms. Ireland is third, particularly for US-heritage firms.
How to choose the right country: a decision framework
The right MiCA jurisdiction is the one that fits your business model and growth trajectory. A four-step framework:
Step 1: Identify your target customers. Where are they? B2C consumer fintech with a German-speaking customer base belongs in Germany or Austria, not Lithuania. Institutional custody for North American hedge funds belongs in Ireland or Luxembourg. Pan-European exchange targeting retail customers across multiple markets belongs in Malta. Spanish-speaking customer base belongs in Spain. Specific market focus narrows the choice substantially.
Step 2: Assess your starting position. Existing UK firm seeking parallel EU authorisation? Lithuania, Ireland or the Netherlands are the typical choices. Existing US firm seeking EU entry? Ireland, Luxembourg or the Netherlands. Existing EU PSP or EMI seeking to add crypto? Often the existing jurisdiction is the right answer for the CASP add-on. New entrant from scratch? The choice is wider.
Step 3: Decide on speed vs credibility. Need to be authorised before 1 July 2026 (grandfathered VASP transition), or want fastest time to revenue? Lithuania, Malta or Czech Republic. Need institutional credibility for fundraising or banking? Germany, Netherlands or Ireland. The 5-to-15-month timeline range is real and consequential.
Step 4: Confirm substance. Whatever jurisdiction you choose, MiCA requires real substance: local-resident senior management, real local office, genuine local operations. Letterbox arrangements are explicitly challenged by every major NCA. The substance requirements vary in detail but the principle is universal. Dropping a Lithuanian SPV with no real Vilnius operations is not a strategy — it is a reason to be refused.
For most fintech models in 2026, a defensible default is Lithuania, with the option to add a second authorisation in a more credible jurisdiction (Germany, Ireland or Netherlands) once the business is established. For exchange and trading platform models, Malta is the natural default. For institutional and regulated banking-adjacent models, Germany. The right answer is the one that maps to your actual model, not the one with the loudest marketing.
How Buckingham Capital Consulting can help
Buckingham Capital Consulting has worked with the Bank of Lithuania, the Malta Financial Services Authority, BaFin, De Nederlandsche Bank and the Dutch AFM, the Central Bank of Ireland, the Banque de France and ACPR, the Luxembourg CSSF, the Czech National Bank, CySEC and the FCA across hundreds of authorisations since 2013. Our jurisdiction selection work for MiCA applicants is grounded in repeated, current experience with each NCA — not in marketing claims about jurisdictions we have never worked in.
Our jurisdiction assessment is the first step in every CASP engagement. We map the applicant's business model, target customers, talent location, banking strategy and growth trajectory against each candidate jurisdiction's regulator approach, timeline, substance expectations, banking infrastructure and post-authorisation supervisory style. We recommend the right jurisdiction for the firm — not a default jurisdiction we always sell.
Once jurisdiction is selected, we manage the full authorisation as a single engagement: entity incorporation and substance arrangements, preparation of the complete application file, governance and senior manager framework, AML and financial crime programme, custody and market surveillance policies (where relevant), DORA-compliant ICT framework, capital adequacy calculations, three-year financial projections, fitness and propriety assessments, NCA correspondence and case officer engagement, banking introductions, and post-authorisation passporting notifications.
For groups maintaining parallel UK and EU authorisations, or operating across multiple EU Member States, we coordinate the regulatory architecture to minimise duplication and ensure consistent group-wide governance.
If you are choosing between EU jurisdictions for a MiCA CASP licence, considering a parallel UK / EU structure, or restructuring an existing fragmented EU presence, contact our team for an initial assessment.
Email: info@buckinghamcapitalconsulting.co.uk Tel: 0207 866 2512
Frequently asked questions
Which is the best EU country for a MiCA licence? There is no single best country — it depends on business model, target market, talent location and substance position. Lithuania is the most efficient mainstream option. Malta has the longest crypto track record. Germany offers the highest regulatory credibility. Netherlands suits crypto-native platforms. Ireland suits English-speaking institutional firms. Cyprus suits retail brokerage. Estonia, Latvia and Czech Republic suit lean operations.
Which EU country issues MiCA licences fastest? Czech Republic, Lithuania and Malta are the fastest. Czech Republic typically authorises in 4 to 7 months. Lithuania in 5 to 8 months. Malta in 5 to 9 months. The Netherlands and France are 6 to 12 months. Ireland is 8 to 14 months. Germany is 10 to 15 months. Application quality is the biggest variable across all jurisdictions.
Which country has the most MiCA CASP licences issued? As of early 2026: Germany has approximately 18 CASPs authorised (led by regulated banks), Netherlands has 14 (led by crypto-native platforms), France 6, Malta 6 (dominated by exchanges), Spain 3, Luxembourg 3, Austria 2, Ireland 2, Cyprus 1, Lithuania 1 with substantial pipeline. Numbers continue to grow as the 1 July 2026 deadline approaches.
Which EU country is best for a crypto exchange? Malta is the EU exchange hub. The MFSA has supervisory experience with order book operation, market surveillance and custody at scale dating to the 2018 Virtual Financial Assets Act. Several major trading platforms have selected Malta as their EU home jurisdiction. Ireland is a credible alternative for institutional or US-headquartered exchanges. Cyprus suits retail-focused brokerage with CFD heritage.
What are MiCA CASP application fees by country? Application fees are set by each Member State's NCA. Confirmed published figures: Germany (BaFin) charges approximately €10,750 for a CASP application under the German Cryptomarkets Supervision Act (KMAG) cost regulation. Malta (MFSA) charges €8,000 to €30,000 application fees with €6,000 to €30,000+ annual supervisory fees scaled by licence class, transaction volume and risk profile, under the Financial Markets (Fees) Regulations, 2024. Latvia (Latvijas Banka) charges €2,500 application fee plus an annual supervisory fee of 0.6% of gross profits with a €3,000 minimum. The Bank of Lithuania, Czech National Bank, ACPR/AMF, DNB/AFM, Central Bank of Ireland, CSSF, CySEC, CNMV, FMA and Finantsinspektsioon each publish their own fee schedules with structures varying between flat application fees, supervisory fees scaled to firm size, and combined approaches. Applicants should confirm the current schedule with the home Member State NCA before submission. Application fees are typically a small fraction of the broader cost of authorisation.
Which EU country offers the best banking access for crypto firms? Banking access varies independently of regulator quality. Lithuania, Malta and Germany have established crypto-friendly banks. The Netherlands has good banking infrastructure but historically conservative. Ireland and France are harder. Estonia and Latvia have meaningful access but smaller market depth. Banking due diligence should be part of jurisdiction selection — applying to a regulator without confirmed banking access is a common cause of post-authorisation operational failure.
Can a non-EU founder set up a MiCA-licensed CASP? Yes, through an EU-incorporated subsidiary. Non-EU founders cannot directly hold a MiCA licence but can establish an EU legal entity, appoint EU-resident management, build genuine local substance, and apply for CASP authorisation through the EU entity. Most major non-EU crypto firms operating in the EU use this structure. The choice of EU country is the same exercise as for EU-resident applicants.
What substance does an EU CASP need to have in its home country? EU CASPs need genuine local substance: local-resident CEO and MLRO at minimum (often plus CCO, CFO, head of compliance), real local office, meaningful local headcount commensurate with the activity, local IT or outsourcing arrangements, and demonstrated local decision-making. Letterbox arrangements with no real local operations are routinely refused. Substance expectations vary in detail across Member States but the principle is universal.
Can I switch MiCA jurisdiction after authorisation? Switching is possible but operationally substantial. There is no MiCA mechanism for transferring authorisation between Member States — switching requires a new application in the target jurisdiction and surrender of the original authorisation. The new application benefits from the existing track record but is materially a fresh authorisation process. Most firms that find themselves in a suboptimal jurisdiction either accept the operational implications and live with it or sell the original authorisation to another operator.
Should I get a MiCA licence in addition to a UK FCA cryptoasset authorisation? If you serve EU customers, yes — MiCA authorisation is the only route to provide regulated crypto-asset services in the EU. UK FCA authorisation does not provide EU passporting. Many serious crypto firms maintain parallel UK and EU authorisations through separate legal entities. The application files have substantial overlap (governance, AML, ICT, senior management) which can be coordinated to minimise duplication, but the regulators, capital pools and ongoing reporting are separate.