Malta Financial Services Authority (MFSA): register, licences and requirements
The Malta Financial Services Authority (MFSA) is Malta's single unified financial regulator, supervising credit institutions, investment services, pensions, and insurance. Under national and EU frameworks, the MFSA licenses fintech entities including 43 electronic money institutions, 50 payment institutions, and 23 crypto-asset service providers under EU MiCA. It operates the LH Portal for supervisory reporting and grants In Principle Approvals during multi-stage licensing.
How to check a firm on the MFSA register
The MFSA Financial Services Register enables public verification of regulated entities and authorized individuals by searching company name, commercial registration number (C-number), regulatory authorization status, or licence category. Active register entries disclose the entity's authorized legal name, business address, licence commencement date, permitted financial services activities and schedules, and approved governance and compliance officers.2
At a glance
| Official name | Malta Financial Services Authority (Awtorità għas-Servizzi Finanzjarji ta’ Malta) |
|---|---|
| Jurisdiction | Malta |
| Type | Integrated financial regulator |
| Headquarters | Birkirkara1 |
| Founded | 20022 |
| Website | mfsa.mt1 |
| Public register | Official public register3 |
| Licence types in the Atlas | 7 |
What MFSA supervises
The Malta Financial Services Authority is the single autonomous financial regulator in Malta, entrusted with prudential and conduct supervision across credit institutions, electronic money, payment services, investment firms, collective investment schemes, pensions, insurance, and crypto-asset service providers under EU MiCA to preserve financial stability and investor confidence.2
- Electronic money institutions and payment institutions under the Financial Institutions Act (Cap. 376) and EU PSD2/EMD210
- Crypto-asset service providers (CASPs) and asset-referenced token issuers under EU MiCA Regulation (EU) 2023/111411
- Credit institutions and commercial banking operations under the Banking Act (Cap. 371) and EU CRD/CRR13
- Investment firms, brokerages, and fund managers under the Investment Services Act (Cap. 370) and EU MiFID II/AIFMD12
- Company service providers and corporate fiduciaries under the Company Service Providers Act (Cap. 529)16
- Insurance undertakings, reinsurance companies, and occupational retirement schemes2
Licences MFSA issues
- Bank · Malta
Credit institution licence
- CASP · Malta
Crypto-Asset Service Provider authorisation
Crypto-Asset Service Provider authorisation under Regulation (EU) 2023/1114capital EUR 50,000
- EMI · Malta
Electronic money institution licence
- IF · Malta
Investment services licence (Category 1, 2, or 3)
- PI · Malta
Account information service provider registration
- PI · Malta
Payment institution licence
- TCSP · Malta
Company service provider authorisation (Class A, B, or C)
Lesser-known services for applicants
Pre-application meeting / pre-assessment
Applicants begin with an intention stage: they submit a Statement of Intent and may ask for a preliminary meeting with the MFSA before filing the full application, under Authorisation Rule 4.4
Innovation hub
The MFSA operates a dedicated FinTech Innovation Hub providing informal, non-binding regulatory guidance to FinTech startups, technology providers, and incumbent firms seeking clarity on regulatory perimeter and qualifying activities under Maltese and EU financial services frameworks.5
Regulatory sandbox
The MFSA launched its FinTech Regulatory Sandbox under MFSA Act Rule 3 (revised March 2023), allowing FinTech Service Providers and FinTech Suppliers to live-test innovative products, services, or business models with real consumers in a controlled environment for up to 12 months (extendable), with proportional supervisory parameters without statutory law disapplication.5
Application portal: MFSA Licence Holder Portal (LH Portal) at https://lhportal.mfsa.mt/ for submitting regulatory returns, statutory filings, and electronic application documentation.6
Fee schedule: Official statutory subsidiary fee regulations published under national legislation: S.L. 376.03 (Financial Institutions Fees), S.L. 370.52 (Investment Services Fees), and S.L. 371.10 (Credit Institutions Fees).7
Compare with other regulators: pre-application meetings · sandboxes and innovation hubs.
Statistics
- 23 crypto-asset service providers authorised under MiCA Regulation (ESMA official register, 2026-10-16)14
- 43 electronic money institutions licensed and active under MFSA supervision (EBA PSDMD register, 2026-09-24)15
- 50 payment institutions licensed and active under MFSA supervision (EBA PSDMD register, 2026-09-24)15
- 1 account information service provider registered under MFSA supervision (EBA PSDMD register, 2026-09-24)15
Fees and timelines
| Licence | Fee | Amount |
|---|---|---|
| Payment institution licence | application | EUR 10,0007 |
| Payment institution licence | annual | EUR 15,000 + 0.02% of total assets (max EUR 250,000) for payment services only; EUR 25,000 base where e-money-related activity is added7 |
| Electronic money institution licence | application | EUR 15,0007 |
| Electronic money institution licence | annual | EUR 35,000 base + higher of 0.02% total assets or aggregate of 0.0003% payment transaction value and 0.01% average daily outstanding electronic money (max EUR 250,000)7 |
| Account information service provider registration | application | EUR 1,0007 |
| Account information service provider registration | annual | EUR 5,000 (on registration and each year)7 |
| Investment services licence (Category 1, 2, or 3) | application | EUR 7,250 for Category 2 (holding client assets) or EUR 15,000 for Category 3 (dealing on own account)8 |
| Investment services licence (Category 1, 2, or 3) | annual | EUR 7,600 minimum (Category 2) or EUR 17,500 minimum (Category 3) + EUR 700 per additional EUR 250,000 net revenue8 |
| Investment services licence for fund managers (AIFM / UCITS Management Company) | application | EUR 6,7508 |
| Investment services licence for fund managers (AIFM / UCITS Management Company) | annual | EUR 6,7508 |
| Credit institution licence | application | EUR 35,0009 |
| Credit institution licence | annual | 0.024% of institution-level deposits (minimum EUR 60,000, maximum EUR 1,700,000)9 |
| Licence | Statutory deadline | Observed |
|---|---|---|
| Payment institution licence | 3 months from receipt of a complete application10 | not published |
| Electronic money institution licence | 3 months from receipt of a complete application10 | not published |
| Crypto-Asset Service Provider authorisation under Regulation (EU) 2023/1114 | 40 working days from receipt of a complete application (following 25 working days completeness assessment)11 | not published |
| Investment services licence (Category 1, 2, or 3) | 6 months from receipt of a complete application12 | not published |
| Credit institution licence | 6 months from receipt of a complete application, and in any event within 12 months of its receipt13 | not published |
Changing the owner of a licensed firm
Prior approval required. Acquiring or increasing a qualifying holding needs the MFSA's prior approval. For payment and e-money institutions the Financial Institutions Act sets the thresholds at 20%, 30% and 50%; for banks the Banking Act adds a 60-working-day assessment period that can be extended.10
Buying a company that already holds one of these licences is often faster than applying. See ready-made licensed companies · crypto digital assets · emoney payments.
Laws MFSA applies
- Markets in Crypto-Assets Regulation: Regulation (EU) 2023/1114
- Directive (EU) 2015/2366 on payment services in the internal market: Directive (EU) 2015/2366
- Directive 2009/110/EC on the taking up, pursuit and prudential supervision of the business of electronic money institutions: Directive 2009/110/EC
- Directive 2014/65/EU on markets in financial instruments: Directive 2014/65/EU
- Capital Requirements Directive: Directive 2013/36/EU
- Capital Requirements Regulation: Regulation (EU) No 575/2013
- Digital Operational Resilience Act: Regulation (EU) 2022/2554
Recent and upcoming changes
- 2026-07-01: Full expiration of MiCA transitional grandfathering in Malta; all cryptoasset service providers operating in the jurisdiction must hold a full MiCA CASP authorisation or be an exempt financial entity under Article 60.11
- 2025-01-17: EU Digital Operational Resilience Act (DORA, Regulation (EU) 2022/2554) took effect across all MFSA-supervised financial institutions, investment firms, and banks, establishing unified ICT risk management, incident classification, and digital operational testing standards.17
- 2025-01-01: Legal Notice 366 of 2024 (amending S.L. 376.03) and Legal Notice 370 of 2024 (S.L. 370.52) took effect, enacting a comprehensive overhaul of application and annual supervisory fee schedules across financial institutions and investment services.7
- 2024-12-30: EU MiCA Title V entered into direct application across Malta, transitioning the MFSA's crypto regulatory regime from the domestic VFA Act framework to European-wide MiCA CASP licensing.11
Contacts and public register
Address: Malta Financial Services Authority, Triq l-Imdina, Zone 1, Central Business District, Birkirkara, CBD 1010, Malta1
Website: mfsa.mt1
Check whether a firm is licensed: official register3 · official register14 · official register15.
Working with Protegra
From Protegra: CASP license in Malta.
Frequently asked questions
How did Malta transition its VFA crypto regime to EU MiCA?
Malta originally regulated digital assets under the Virtual Financial Assets Act (Cap. 590) of 2018. Following the adoption of the EU Markets in Crypto-Assets Regulation (MiCA), the MFSA fully aligned its regulatory framework with MiCA Title V starting 30 December 2024. All legacy VFA service providers transitioned or exited by 1 July 2026, establishing 22 authorised MiCA CASPs.
What approvals are required for a change of control of an MFSA-licensed institution?
You need the MFSA's approval before the deal closes. For payment and e-money institutions the thresholds are 20%, 30% and 50% of capital or voting rights under the Financial Institutions Act; for banks, the Banking Act gives the MFSA 60 working days to assess the acquirer, which it can extend.
Does the MFSA provide pre-application guidance or a regulatory sandbox?
Yes. Prospective applicants engage through the MFSA's Intention Stage, submitting a Statement of Intent and holding preparatory meetings to clarify requirements before formally applying. Additionally, the MFSA runs a FinTech Regulatory Sandbox under Rule 3, allowing eligible fintech providers to live-test innovative financial products and services with real consumers for up to 12 months under proportionate supervisory oversight.
Sources
- en.wikipedia.org: Malta Financial Services Authority · secondary · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- mfsa.mt: financial services register · retrieved 2026-09-24
- mfsa.mt: Authorisation Rule 4 of the MFSA Act (PDF) · retrieved 2026-09-24
- esma.europa.eu: jc 2018 74 joint report on regulatory sandboxes and innovati (PDF) · retrieved 2026-09-24
- lhportal.mfsa.mt · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- EUR-Lex: CELEX 32023R1114 · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- esma.europa.eu: CASPS.csv · retrieved 2026-10-19
- euclid.eba.europa.eu: download PSDMD 202609240000.zip · retrieved 2026-09-24
- Laws of Malta (PDF) · retrieved 2026-09-24
- EUR-Lex: CELEX 32022R2554 · retrieved 2026-09-24
Applying to MFSA, or buying a firm it licenses?
Tell us your business model and target markets. We check the fit before you spend on an application, then handle the licence end to end.
A free preliminary assessment: we check your business model against the licence before you spend on an application. We handle this licence and any other fintech licence, including jurisdictions the Atlas does not cover yet.