MALTA CASP/MiCA AUTHORIZATION

MiCA License in Malta:
Where Growing Crypto
Firms Can Scale

If MiCA authorization starts to feel like a game reserved for multi-billion institutions with armies of compliance officers, Malta proves otherwise.

Malta Financial Services Authority (MFSA)

was among the first EU authorities to issue

CASP licenses and continues to authorize

groth-stage and mid-sized firms. Well-

prepared applicants do succeed in Malta.

Talk to an expert

MALTA CASP/MiCA AUTHORIZATION

MiCA License iN
Malta: Where
Growing
Crypto Firms
Can Scale

If MiCA authorization starts to

feel like a game reserved for

multi-billion institutions with

armies of compliance officers,

Malta proves otherwise.

Malta Financial Services

Authority (MFSA) was among the

first EU authorities to issue CASP

licenses and continues to

authorize growth-stage and mid-

sized firms. Well-prepared applicants

do succeed in Malta.

Talk to an expert

Почему
именно
Мальта?

Malta is not starting from scratch like most EU jurisdictions. As the first EU country
to regulate crypto comprehensively through the Virtual Financial Assets Act
(VFAA) in 2018, Malta built 8 years of real-world supervisory experience before
MiCA existed. This delivers immediate advantages no other jurisdiction matches.

PROVEN REGULATORY ROUTE IN EU

MFSA had practical experience with crypto companies long before MiCA. For applicants, this means more

mature supervisory expectations, a clearer process, and a lower risk that the business model will be

treated as entirely new to the market.

BANKS AND INVESTORS UNDERSTAND THE MODEL

EU and international banks familiar with Malta's VFA regime understand crypto business models faster.

Institutional investors also recognize Malta's eight-year track record of balancing innovation with investor

protection.

EU-BASED TAX EFFICIENCY

Malta's shareholder refund mechanism for Maltese Ltd companies can reduce the headline 35% corporate

tax rate to an effective rate of around 5% when profits are distributed to shareholders. It is supported by

0% withholding tax on dividends paid to non-residents and a broad double-tax treaty network.

WHY MALTA?

Malta is not starting from scratch
like most EU jurisdictions. As the
first EU country to regulate crypto
comprehensively through the
Virtual Financial Assets Act (VFAA)
in 2018, Malta built 8 years of real-
world supervisory experience
before MiCA existed. This delivers
immediate advantages no other
jurisdiction matches.

PROVEN REGULATORY

ROUTE IN EU

MFSA had practical

experience with crypto

companies long before MiCA.

For applicants, this means

more mature supervisory

expectations, a clearer

process, and a lower risk that

the business model will be

treated as entirely new to the

market.

BANKS AND INVESTORS

UNDERSTANDING

EU and international banks

familiar with Malta's VFA regime

understand crypto business

models faster. Institutional

investors also recognize Malta's

eight-year track record of

balancing innovation with

investor protection.

EU-BASED

TAX EFFICIENCY

Malta's shareholder refund

mechanism for Maltese Ltd

companies can reduce the

headline 35% corporate tax

rate to an effective rate of

around 5% when profits are

distributed to shareholders.

MALTA IN
BULLETPOINTS:

01

CATEGORY

CASP REQUIREMENTS

IN MALTA (2026)

01

Regulator

Malta Financial Services

Authority (MFSA)

02

Corporate

form

Private limited company (Ltd)

03

Timeframe

6-9 months, including preparation

and MFSA authorization

04

Tax Regime

Approx. 5% effective rate when

profits are distributed to

shareholders; headline corporate

tax - 35%

05

Substance

Mandatory physical office and

local key personnel.

MALTA IN
BULLETPOINTS:

CATEGORY

CASP REQUIREMENTS

IN LATVIA (2026)

Regulator

Malta Financial

Services Authority (MFSA)

Tax Regime

Approx. 5% effective rate

when profits are

distributed; headline

corporate tax - 35%

Timeframe

6-9 months, including

preparation and MFSA

authorization

Corporate form

Private limited company

(LTD)

Substance

Mandatory physical office

and local key personnel)

STRATEGIC
PLANNING

MiCA requires local presence, but in Malta it becomes an asset rather than a formality.

A physical office and local decision-making capability help build banking relationships,

strengthen credibility with MFSA, and support clean EU passporting across all 27 members.

Malta has an established fintech ecosystem, including venture capital funds, fintech

incubators, and investment managers that understand regulated crypto business models

and can support capital and B2B lending relationships.

Companies gain access to a network of compliance specialists, administrators, banking

partners, and service providers who already speak the language of crypto rather than

learning on your project.

STRATEGIC
PLANNING

MiCA requires local presence,

but in Malta it becomes an

asset rather than a formality.

A physical office and local

decision-making capability

help build relationships,

strengthen credibility with

MFSA, and support clean EU

passporting across all 27

member states.

Malta has an established

fintech ecosystem, including

venture capital funds, fintech

incubators, and investment

managers that understand

regulated crypto business

models and can support capital

and B2B lending relationships.

Companies gain access to a

network of compliance

specialists, administrators,

banking partners, and service

providers who already speak

the language of crypto rather

than learning on your project.

ROADMAP
FOR
OBTAINING
A CASP
LICENSE IN
Malta

STEP 1

MICA CLASS, MODEL, AND ENTITY SETUP

Define the MiCA class (1, 2, or 3), shape the model around

MFSA, banking, and investor expectations, incorporate the

Maltese Ltd, appoint directors, MLRO, and core compliance/risk

roles, and set up the office and bank account before filing.

STEP 2

STATEMENT OF INTENT AND MFSA PRE-
APPLICATION MEETING

Prepare the Statement of Intent for the initial MFSA meeting. The

regulator sees a coherent, substance-ready proposal rather than a

firm still figuring out its model.

STEP 3

MICA-READY APPLICATION PACKAGE

Build the full CASP file: three-year business plan, financial

projections, governance framework, AML/CFT and KYC policies,

risk-management framework, DORA-ready IT/cybersecurity

arrangements, and proof of substance.

STEP 4

FORMAL SUBMISSION TO MFSA

File the completed corporate documents, policies, and supporting

materials. The process begins against one consistent project

narrative rather than fragmented submissions.

STEP 5

MFSA REVIEW AND Q&A

Manage regulator questions, clarifications, and document

updates so the review does not stall for months and no

deadlines are missed.

STEP 6

IN-PRINCIPLE APPROVAL AND
PRE-COMMENCEMENT

Close in-principle approval conditions: finalize key personnel, test

systems, confirm operational readiness, and make substance and

compliance frameworks audit-ready.

STEP 7

LICENSE ISSUANCE AND LIVE OPERATIONS

After MFSA issues the CASP license and EU passporting is

activated, operations can go live. Ongoing compliance, AML

monitoring, reporting, and MiCA-aligned scaling support continue.

TIMEFRAME: ~6-9 MONTHS FROM INITIAL ASSESSMENT TO REGULATORY DECISION.

STEP 1

PRELIMINARY
MICA CLASS, MODEL,
AND ENTITY SETUP

Define the MiCA class (1, 2, or 3),

shape the model around MFSA,

banking, and investor

expectations, incorporate the

Maltese Ltd, appoint directors,

MLRO, and core compliance/risk

roles, and set up the office and

bank account before filing.

STEP 2

STATEMENT OF INTENT
AND MFSA PRE-
APPLICATION MEETING

We prepare the preliminary

submission for Latvijas Banka:

service descriptions, ownership

structure materials, management

composition, organizational

chart, and the foundational

compliance concept.

STEP 3

MICA-READY
APPLICATION PACKAGE

Build the full CASP file: three-

year business plan, financial

projections, governance

framework, AML/CFT and KYC

policies, risk-management

framework, DORA-ready

IT/cybersecurity arrangements,

and proof of substance.

STEP 5

MFSA REVIEW AND Q&A

Manage regulator questions,

clarifications, and document

updates so the review does not

stall for months and no

deadlines are missed.

STEP 4

CORMAL SUBMISSION
TO MFSA

File the completed corporate

documents, policies, and

supporting materials. The process

begins against one consistent

project narrative rather than

fragmented submissions.

STEP 6

IN-PRINCIPLE
APPROVAL AND
PRE-COMMENCEMENT

Close in-principle approval

conditions: finalize key personnel,

testsystems, confirm operational

readiness, and make substance

and compliance frameworks

audit-ready.

LICENSE ISSUANCE

AND LIVE OPERATIONS

STEP 7

After MFSA issues the CASP license

and EU passporting is activated,

operations can go live. Ongoing

compliance, AML monitoring,

reporting, and MiCA-aligned

scaling support continue.

ROADMAP
FOR OBTAINING
A CASP LICENSE
IN MALTA

TIMEFRAME: ~6-9 MONTHS FROM INITIAL

ASSESSMENT TO REGULATORY DECISION.

WHICH MiCA
CLASS IS RIGHT
FOR YOUR BUSINESS?

CLASS 1 —

Advisory and Management.

CLASS 2 —

Exchange and Custody.

CLASS 3 —

Trading Platform Operator.

CLASS 1 —

Advisory Services, Transfer Services.

Minimum capital requirement: €50,000

Suitable for less complex business models.


Involving advice on crypto-assets, portfolio management, execution of orders on behalf of clients, reception and transmission of orders, placing of crypto-assets, and providing transfer services for crypto-assets on behalf of clients.


Typically, this is the optimal starting category for businesses that do not plan to hold client crypto-assets or operate a trading platform.

КЛАСС 1 —

Консультационные услуги,

трансферные услуги.

Минимальный капитал: €50,000

Подходит для менее сложных бизнес-моделей, связанных с консультированием по криптоактивам, управлением портфелем, исполнением поручений клиентов, приёмом и передачей клиентских поручений, размещением криптоактивов и переводом криптоактивов в интересах клиентов. Обычно это оптимальная стартовая категория для бизнеса, который не планирует хранить клиентские криптоактивы и запускать торговую платформу.

КЛАСС 3 —

Оператор торговой

платформы.

Минимальный капитал: €150,000

Это высший класс MiCA для

компаний, которые планируют

управлять торговой платформой

для криптоактивов. Он подходит

бизнесу, который строит рыночную

инфраструктуру, а не просто

оказывает отдельные криптоуслуги.

Class 3 включает услуги

предыдущих классов и

дополнительно охватывает

деятельность по управлению

торговой платформой.





Стоимость сопровождения: 



от €48 000

Full legal support from €55,000

WHICH MiCA
CLASS IS RIGHT FOR
YOUR BUSINESS?

  • CLASS 1 —

    Advisory Services,

    Transfer Services.

    Minimum capital requirement: €50,000

    Suitable for less complex business

    models.


    Involving advice on crypto-assets,

    portfolio management, execution

    of orders on behalf of clients,

    reception and transmission of

    orders, placing of crypto-assets,

    and providing transfer services for

    crypto-assets on behalf of clients.


    Typically, this is the optimal starting

    category for businesses that do not

    plan to hold client crypto-assets or

    operate a trading platform.


    Full legal support from

    €55,000

  • CLASS 2 —

    Exchange and custody

    of crypto-assets.

    Minimum capital requirement: €125,000

    This is the most in-demand class

    for active crypto businesses.


    It covers Class 1 services, as well

    as custody and administration of

    crypto-assets, exchange of crypto

    assets for fiat currency, and

    exchange of crypto-assets for

    other crypto-assets.


    This class is typically suitable for

    companies that want to work with

    client assets and build a broader

    operational model within the

    MiCA framework.


    Full legal support from

    €60,000

  • CLASS 3 —

    Trading Platform

    Operator.

    Minimum capital requirement: €150,000

    This is the highest MiCA class for

    companies planning to operate a

    trading platform for crypto-assets.


    It is suitable for businesses

    building market infrastructure

    rather than simply providing

    individual crypto services.


    Class 3 includes the services of the

    previous classes and additionally

    covers activities related to the

    management of a trading

    platform.



    Full legal support from

    €65,000

EFFICIENT WAY TO
ENTER THE EU MARKET

ONE-TIME

EXPENSES

EXPENSE

ITEM

AMOUNT

Legal support

from €5 5.000

Company

registration

(SIA)

€4500

State fee

€400-€1000

Share capital

€50.000 - €150.000

DORA

and IT security

from €10.000

ONGOING

EXPENSES

EXPENCE

ITEM

AMOUNT

Accounting

from €400/month

Monthly

operational expenses

~€6.000/month

(AML, director, local office)

EFFICIENT WAY
TO ENTER
THE EU MARKET

ONE-TIME EXPENSES

EXPENSE

ITEM

AMOUNT

Legal support

from

€55.000

Company

registration (LTD)

€4500

State fee

€400-€1000

Share capital

€50.000-

€150.000

DORA and

IT security

from

€10.000

ONGOING EXPENSES

EXPENSE

ITEM

AMOUNT

Accounting

from

€400/month

Monthly

operational

expenses

~€6.000/month

(AML, director, local office)

PROBLEM 1

I don't have a suitable UBO or

director for Malta.

PROBLEM 3

My team needs to be prepared

for work in accordance with the

regulatory requirements of Malta.

ALL-IN-ONE

SOLUTIONS

PROTEGRA
KNOWS

THE ANSWERS!

WHAT TO DO?

Expert Consultation

PROBLEM 2

I don't have a confirmed source of

fiat funds for the required capital

because I only work in USDT

PROBLEM 4

I want to register a company in

Malta but operate throughout the

EU in full compliance.

WHY
PROTEGRA?

We are a Warsaw-based team with practical
experience across the entire EU.

01

UNDERSTANDING

THE REGULATOR

We know how to build a dialog

with MFSA. Our role goes

beyond merely preparing

documents — we help present

your business model in a way

that withstands regulatory

scrutiny.

02

PROACTIVE

LEGAL NETWORK

Our team constantly keeps its

finger on the pulse and "lives"

within the legal information field.

We're always up-to-date with the

latest news, and we maintain our

experience and monitor the

market.

03

DORA REGULATION

READINESS

Achieve comprehensive

compliance with the DORA. Our

specialized IT and cybersecurity

teams will audit your existing

infrastructure, and prepare all

necessary technical docs.


01

UNDERSTANDING

THE REGULATOR

We know how to build a

dialog with MFSA.

Our role goes beyond merely

preparing documents — we

help present your business

model in a way that

withstands regulatory

scrutiny.

PROACTIVE

LEGAL NETWORK

02

Our team constantly keeps its

finger on the pulse and "lives"

within the legal information

field. We're always up-to-date

with the latest news, and we

maintain our experience and

monitor the market.

DORA REGULATION

READINESS

03

Achieve comprehensive

compliance with the DORA.

Our specialized IT and

cybersecurity teams will

audit your existing

infrastructure, and prepare

all necessary technical docs.

WHY
PROTEGRA?

We are a Warsaw-based team
with practical experience across
the entire EU.

READY TO TURN REGULATORY

COMPLEXITIES INTO

OPPORTUNITIES?

Leave your contact details - we will get back to you within

24 hours with a concrete action plan

READY TO TURN

REGULATORY

COMPLEXITIES

INTO

OPPORTUNITIES?

Leave your contact details -

we will get back to you within

24 hours with a concrete action plan

LATEST NEWS

FROM PROTEGRA

Blog

26 May' 2026

POLAND, THE COUNTRY

THAT FAILED TO PUT MICA

INTO PRACTICE, MAY BE

ITS WEAKEST LINK

Poland is the first real stress test of MiCA: as hundreds of

Polish crypto firms face shutdown or relocation, the standoff

exposes a deeper flaw in Europe’s promise of a unified crypto

market.



Читать

27 May' 2026

THE QUALIFYING

CRITERION OF CUSTODY AS

A FAULT LINE IN MICA:

RISKS FOR CASP BUSINESS

Custody is not about what a company calls itself, but about

whether it really holds or controls client crypto-assets behind the

scenes. Under MiCA, this means custody is determined by actual

functional control over client assets, not by license class, making

misclassification a critical regulatory risk across the entire EU.


Читать

29 May' 2026

A NEW ERA OF CRYPTO-ASSET

SUPERVISION: WHAT HAS KNF

LEARNED FROM OVERSEEING

THE PAYMENT FINTECH

MARKET?

Crypto supervision in Poland is built on years of experience

overseeing payment fintechs, where the regulator learned to

demand real governance, client-asset protection, and genuine

operational substance.


Читать

1 June' 2026

A NEW ERA OF CRYPTO-ASSET

SUPERVISION: WHAT HAS KNF

LEARNED FROM OVERSEEING

THE PAYMENT FINTECH

MARKET?

Crypto supervision in Poland is built on years of experience

overseeing payment fintechs, where the regulator learned to

demand real governance, client-asset protection, and genuine

operational substance.


Читать

26 May' 2026

POLAND, THE COUNTRY

THAT FAILED TO PUT MICA

INTO PRACTICE, MAY BE

ITS WEAKEST LINK

Poland is the first real stress test of MiCA: as

hundreds of Polish crypto firms face shutdown

or relocation, the standoff exposes a deeper

flaw in Europe’s promise of a unified crypto

market.


Read

27 May' 2026

THE QUALIFYING

CRITERION OF CUSTODY AS

A FAULT LINE IN MICA:

RISKS FOR CASP BUSINESS

Custody is not about what a company calls

itself, but about whether it really holds or

controls client crypto-assets behind the

scenes. Under MiCA, this means custody is

determined by actual functional control over

client assets, not by license class, making

misclassification a critical regulatory risk

across the entire EU.

Read

LATEST NEWS

FROM PROTEGRA

Blog

Nowy Swiat 54/56,

00-363, Warszawa

sales@protegra.org

SITE NAVIGATION

Home

CASP/MiCA
DORA
Team
Blog

OUR LINKS:

Whatsapp

Telegram

Linkedin

Instagram

© 2026, PROTEGRA,

ALL RIGHTS RESERVED.

PRIVACY POLICY

© 2026, PROTEGRA,

ALL RIGHTS RESERVED.

SALES@PROTEGRA.ORG

PRIVACY POLICY

website navigation

Home

CASP/MiCA

DORA

Team

Blog

Our Links

LinkedIn

Instagram

Telegram

Whatsapp