Regulated activity

Custody and administration of crypto-assets

Safekeeping or controlling crypto-assets or private keys on behalf of clients requires a crypto-asset service provider (CASP) authorisation in the EU under MiCA Article 3(1)(16)(a) and 3(1)(17). Authorised CASPs benefit from EU-wide passporting across the EEA. Outside the European Union, this activity falls under virtual asset service provider (VASP) regimes or national trust and custody frameworks.

Last verified 2026-09-24Markdown · Data (CC BY 4.0)
Custody and administration of crypto-assets: regulated activityMiCA

Definition

Safekeeping or controlling crypto-assets, or the means of access to them such as private keys, on behalf of clients.

Which licence you need

Licence families that typically permit this activity:

Where it can be licensed

Jurisdictions where custody and administration of crypto-assets can be licensedCyprusCzech RepublicEstoniaFranceGermanyIrelandItalyLatviaLithuaniaLuxembourgNetherlandsPolandSlovakiaSpainBritish Virgin IslandsCayman IslandsDubai (VARA)Malta
Licences in the Atlas that permit this activity
EU/EEA passportDomestic
British Virgin Islands: Investment Business Licence (Categories 1-4: dealing, managing, advising, custody/administration of investments)✓
Cayman Islands: Virtual Asset Service Provider Licence (custody or trading platform services, Phase 2)✓
Cyprus: Notification by financial entities providing crypto-asset services under MiCAR Article 60✓
Cyprus: Crypto-Asset Service Provider (CASP) authorisation under MiCAR Article 63✓
Czech Republic: Crypto-Asset Service Provider authorisation under MiCA and Act No. 31/2025 Coll. (povolení k činnosti poskytovatele služeb souvisejících s kryptoaktivy)✓
Dubai (VARA): Virtual Asset Custody Services Licence✓
Estonia: Authorisation to operate as a crypto-asset service provider under MiCA✓
France: Prestataire de services sur crypto-actifs (PSCA) / Crypto-asset service provider authorization under EU MiCA Regulation✓
Germany: Crypto-asset service provider licence (Zulassung als Anbieter von Kryptowerte-Dienstleistungen nach Art. 59 MiCAR / KMAG)✓
Germany: Qualified crypto custody licence (Erlaubnis für das qualifizierte Kryptoverwahrgeschäft nach § 1 Absatz 1a Satz 2 Nummer 6 KWG)✓
Ireland: Crypto-Asset Service Provider Authorisation✓
Italy: Fornitore di servizi per le cripto-attività / Crypto-asset service provider (CASP) authorization✓
Latvia: Crypto-asset service provider licence under MiCA✓
Lithuania: Crypto-asset service provider licence✓
Luxembourg: Crypto-asset service provider authorisation under MiCA Regulation✓
Malta: Crypto-Asset Service Provider authorisation under Regulation (EU) 2023/1114✓
Netherlands: Crypto-Asset Service Provider (CASP) authorisation under Regulation (EU) 2023/1114 (MiCA)✓
Poland: Crypto-Asset Service Provider authorization under MiCA (zezwolenie na świadczenie usług w zakresie kryptoaktywów)✓
Slovakia: Crypto-asset service provider licence under MiCA (povolenie na činnosť poskytovateľa služieb kryptoaktív)✓
Spain: Proveedor de servicios de criptoactivos (PSC) / Crypto-asset service provider authorization✓

Frequently asked questions

Does providing non-custodial wallet software require a custody licence?

Purely non-custodial or self-hosted software providers that never hold private keys or exercise control over user funds generally do not require a custody licence. However, if the developer retains co-signing ability, private keys or secondary recovery authority, financial regulators categorise the service as regulated custody.

Can a crypto custodian hold client tokens in omnibus accounts?

Yes, custodians may pool assets in omnibus wallets under MiCA, provided they maintain separate accounting ledgers that guarantee each client's entitlements. Regulatory standards require strict segregation of proprietary assets from client funds and continuous reconciliation to safeguard client holdings in the event of custodian insolvency.

Last verified 2026-09-24Author Danil Marmysh, Founder & CEO, ProtegraReviewed by Anastasia Sidorenkova, Head of Licensing, ProtegraReport an errorReference information, not legal advice.

Sources

  1. MiCA Art. 3(1)(16)(a) and 3(1)(17) · retrieved 2026-09-24

Planning custody and administration of crypto-assets? Get the licence right first

Tell us your model and target markets. We check which licence it needs, and whether a narrower one will do, before you spend on an application.

A free preliminary assessment: we check your business model against the licence before you spend on an application. We handle this licence and any other fintech licence, including jurisdictions the Atlas does not cover yet.