MiCA CASP Licence in Malta (MFSA)

Malta was the EU's first mover on crypto regulation. Its Virtual Financial Assets (VFA) framework has run since 2018, which means the Malta Financial Services Authority (MFSA) entered the MiCA era with more supervisory experience of crypto-asset businesses than almost any other national competent authority. For operators who want a regulator that already understands exchanges, wallet providers and trading venues, that track record is the main draw.

Under MiCA, a Crypto-Asset Service Provider (CASP) authorisation from the MFSA lets you serve clients across all 27 EU member states through passporting — one licence, the whole single market. Existing Maltese VFA licence holders sat under a transitional regime that ended on 1 July 2026, or on the date the MFSA grants or refuses their CASP authorisation, whichever comes first. New applicants apply directly under MiCA.

In practice the MFSA review typically runs three to six months, depending on how complete and credible the application is. Expect close scrutiny of AML/KYC controls, governance, and the fitness and propriety of directors and shareholders — Malta's experience cuts both ways, and the authority is not a rubber stamp.

Minimum capital follows MiCA's Annex IV classes (€50,000 / €125,000 / €150,000 by service type), subject to the Article 67 own-funds floor — identical across the EU. You can model your class and cost with our CASP Jurisdiction Selector & Cost Estimator.

Why operators choose Malta: the most mature EU crypto-regulatory ecosystem, an English-speaking jurisdiction and a regulator that has seen the business before. What to weigh: that same maturity means rigorous AML expectations and a substantive presence on the island. If you are not sure whether you even need a CASP licence, start with our MiCA Exposure Checker.