MiCA · Malta · CASP Licensing

MiCA in Malta.
Market that knows
crypto in practice

If MiCA authorisation is starting to feel like a game reserved for multi-billion institutions with armies of compliance officers, Malta proves otherwise. For a growth-stage firm, the real challenge is not simply filing an application — it is building a structure that the regulator can approve, banks can onboard, and investors can understand.

Malta gives you a more workable route: a MiCA licence, a credible local operating structure, and a base from which to serve Europe — without locking up capital or assembling a full institutional operation before the business is ready to launch. Protegra takes you through Maltese CASP authorisation and into live, supervised operations — as one engagement, in English.

Why teams choose Protegra

Built for crypto — not adapted to it

A Malta CASP application is not won by producing more documents. It is won by making the business model, governance, substance, technology, and operating reality work together before the MFSA has to ask where the gaps are.

8 Years of Malta crypto-regulatory experience.

Malta’s VFA framework has given the market practical experience with regulated crypto businesses since 2018 — before MiCA became the European standard.

Start your application ⟶

We only do this

Our team works across Malta, the Netherlands, Latvia, Poland, and the Czech Republic exclusively on crypto and fintech regulation — MiCA, AML, DORA, and CASP licensing. A CASP file needs people who have already dealt with exchange, custody, AML, governance, substance, banking, and post-licence supervision for crypto businesses.

We build the difficult part first

Before the formal application, we align the business model, Maltese entity, key roles, governance, financial plan, AML framework, and ICT controls. The application becomes evidence of a functioning operating design — not a collection of policies assembled at the end.

We stay after the licence is issued

Most advisors consider the engagement complete at authorisation. We stay on when the operating obligations begin: AML monitoring, periodic review, regulatory reporting, disclosure controls, DAC8 readiness, and supervisory communication.

Crypto since 2018.
Not since MiCA.

Regulatory facts

Malta at a glance: what are the numbers?

~5%
Effective tax rate

Available in qualifying shareholder-refund structures when profits are distributed.

6–9
Months · typical timeframe

Indicative timeframe for preparation and MFSA authorisation, depending on the model, readiness, and regulatory process.

27
EU markets · passporting

A Malta-authorised CASP may provide permitted services across the EU following MiCA passporting and the applicable notifications.

Licensing authority
Malta Financial Services Authority (MFSA).
Company vehicle
Maltese private limited company (Ltd) incorporated and maintained in Malta.
Key roles
A governance and control structure proportionate to the business model, typically including directors, a Money Laundering Reporting Officer (MLRO), compliance responsibility, risk responsibility, and other key function holders where required.
Local substance
A genuine Malta-based operating presence, including a physical office, appropriate local personnel, clear local decision-making, and governance arrangements that demonstrate the company is managed and controlled in Malta.
Why Malta

Why choose Malta for a MiCA licence?

The licence gives you regulatory permission. Malta’s practical value is the ability to turn that permission into a credible European operating base.

Market

An international base for a European business
  • An English-speaking business environment for international founders, teams, counterparties, and investors.
  • A concentrated professional-services market that makes corporate, legal, tax, accounting, compliance, and administration easier to coordinate.
  • A European base that supports commercial credibility with investors, partners, and financial institutions.

Access

More than a local presence
  • Build a company around real operational responsibility, with local decision-making that supports a credible supervisory and commercial narrative.
  • Coordinate incorporation, governance, key personnel, vendor selection, and business preparation as one launch plan.
  • Start developing relationships with banks, payment providers, and service partners before authorisation is issued — not after.

Clarity

Designed for the business after approval
  • Build AML, ICT governance, outsourcing, disclosures, and reporting into the operating model before launch.
  • Give founders and investors a clearer picture of the costs, control framework, and decision-making structure behind the licence.
  • Expand through a defined operating plan rather than treating each new market as an entirely separate regulatory project.
Start your application ⟩

Valletta.
Your EU base.

Choose your licence class

Which MiCA class fits your business?

MiCA defines three CASP licence classes by service scope and capital requirement.
Identify yours below — then use the calculator to get your full cost breakdown. Getting the class wrong at the start means costly reclassification later.

Class 1 · min. own funds€50,000

Advisory, order flow, and transfer services

Advice, portfolio management, reception and transmission of orders, execution of orders, placing, and transfer services. The right starting point for firms not planning to hold client crypto-assets or operate a trading venue.

Most commonClass 2 · min. own funds€125,000

Exchange and custody services

The most commercially relevant class for active crypto businesses. Covers exchange activity and custody — the natural fit for firms handling client assets, offering crypto-to-fiat or crypto-to-crypto exchange, or building a broader MiCA operating model.

Class 3 · min. own funds€150,000

Trading platform authorisation

The highest MiCA class, intended for firms planning to operate a crypto-asset trading platform. The right route for businesses building market infrastructure rather than offering individual crypto services.

Cost calculator

How much should you set aside for a Maltese MiCA licence?

A MiCA class tells you the minimum regulatory capital. It does not tell you what it takes to establish and run the business. Select the workstreams your model needs to see an indicative Year 1 view of legal preparation, entity setup, technology, and ongoing support.

Three levels of support

How much of the work do you want us to do?

01 · TEMPLATES

You get the documents. You file them yourself.

€15,000
  • The full policy, procedure and governance pack for this regulator
  • Application forms filled in as far as your own data allows
  • One handover session so you know what goes where
  • You deal with the regulator yourself
02 · TAILORED

We write the file around your business.

€45,000
  • Everything above, rewritten around your actual model
  • Business plan, governance and AML/CFT built from your data
  • We assemble and check the whole file before it goes in
  • You submit and answer; we stay on call throughout
Every figure on this page assumes this level
03 · TO DECISION

We carry the file to the regulator’s answer.

€90,000
  • Everything above, and we file it
  • Every regulator question and clarification round comes to us
  • Meetings and pre-application engagement handled for you
  • We stay on the file until the decision is issued

One licence, three levels — the regulator asks for exactly the same file in all three, and what changes is how much of it sits with you. The middle level is the default here: every price on this page is quoted at it, and the selector above the total switches between them. Moving up or down changes our fee and nothing else — not the capital, not the state fees, not the statutory clock. Carrying a file to the decision is not a promise of approval: no adviser can give one, and an adviser who does is selling you something other than advice.

Legal feesPreparation + MFSA management+€45,000
Share capitalRequired by class+€125,000
Company registration (Ltd)Incl. VAT, analysis and tax structuring+€4,500
Monthly operating costsBoard, MLRO, office — from €6,000/mo, annualised+€72,000
DORA & IT securityDocumentation development and audit — €10,000–€18,000+€14,000
AccountingFree for the first 2 months, then from €400/mo+€4,000
Fixed regulatory charges — paid directly to the MFSA and Malta Business Registry
MFSA application processing€200 per month, capped at €10,000
MFSA propriety assessment€700 per person
MFSA suitability assessment€2,900 per person
Malta Business Registry feeapprox. €400–€1,000, depending on capital
Own funds are not a feeregulatory capital held in the company
Roadmap with Protegra

How long does the Malta licence take, step by step?

Seven steps to authorisation — and structured support once your Malta-based business is live.

After we define your MiCA class and shape a model that fits MFSA expectations, banking requirements, and investor needs, we incorporate the Maltese private limited company (Ltd). Directors, the MLRO, and core compliance and risk roles are put in place alongside the physical office and corporate bank account before the application is submitted.
We prepare the Statement of Intent and position the project for the initial MFSA meeting. The regulator sees a coherent, substance-ready proposal — not a firm still trying to work out its structure, governance, and risk profile.
The full CASP file is built as one consistent package: a three-year business plan, financial projections, governance framework, AML/CFT and KYC policies, risk-management framework, DORA-compliant ICT and cybersecurity arrangements, and proof of substance. This preparation helps reduce avoidable requests for information and keeps the MFSA process moving.
The completed application is submitted to the MFSA with all corporate documents, policies, financial materials, and supporting evidence. The regulator receives a clear and consistent narrative rather than fragmented submissions prepared in isolation.
We manage clarifications, requests for information, document revisions, and communication with the MFSA. Responses are coordinated across the business model, governance, AML, risk, technology, and substance requirements, so the process keeps moving and deadlines are not missed.
Once in-principle approval is granted, the remaining conditions are addressed. Key personnel are finalised, systems are tested, operational readiness is confirmed, and the substance and compliance frameworks are made audit-ready. The focus is on clean, bankable onboarding — not symbolic approval.
After the MFSA issues the full CASP licence and EU passporting is activated, operations can go live. Your Malta-based business can begin operating within the scope of its authorisation, with structured support as it grows across Europe.
08

Post-licensing support

Included, not optional

Authorisation is the point at which supervisory work begins. We remain involved as your Malta business moves from readiness into day-to-day regulated operations.

Financial-crime and compliance support

Ongoing AML monitoring, periodic risk assessment, and policy maintenance as the business and its exposures change.

Regulatory reporting and notifications

Reporting, notifications, and supervisory communication with the MFSA handled as part of the live compliance programme.

Policy, governance, and control updates

Periodic review of policies, governance arrangements, and internal controls as the business evolves.

MiCA disclosures, DAC8 and DORA

Support for MiCA disclosure obligations, DAC8 readiness, and DORA-related requirements after authorisation.

Why Protegra

Turning a CASP application into a working business.

A CASP file can be technically complete and still fail as a business plan. The MFSA does not assess policies in isolation; it assesses whether the company behind them has the people, controls, capital, and decision-making to operate.

See how we work ⟶

The disconnected-advice problem

A corporate agent, a law firm, a compliance consultant, and an IT provider may each produce good work. But if their assumptions do not match, the regulator sees a business that does not hold together.

⟶ Protegra keeps one operating model behind every workstream.

The credibility problem

Governance cannot be created by naming people in an organisation chart. The regulator needs to see clear accountability, relevant experience, and decision-making that matches the proposed business.

⟶ We help make the structure credible in practice, not merely complete in documentation.

The sequencing problem

The wrong order of decisions can burn runway: committing to premises, capital, technology, or senior hires before the operating model and application scope are settled.

⟶ We structure the project in the order that reduces unnecessary rework.

The ownership problem

When the application is submitted, someone must still own the outcome — not just individual documents, deadlines, or suppliers.

⟶ Protegra remains accountable for connecting the authorisation project to the supervised operation that follows.
Client experience

How these problems get resolved.

Select a challenge to see how a Malta CASP project moves from fragmented preparation to one operating model.

Before Protegra
“We had incorporation support, legal advice, and a compliance consultant. But no one could tell us whether the whole structure would make sense to the MFSA.”
With Protegra
“The project stopped being separate workstreams. We had one business model, one timeline, and one regulatory narrative.”
FAQ

Malta CASP licence: common questions.

The Malta CASP licence
01Is Malta right for my specific business model?
That depends on the services you plan to offer, your ownership and governance structure, the scale of your operations, custody or exchange activity, target markets, and commercial priorities. We assess those factors before recommending a licensing route.
02What does the MFSA expect to see before an application is submitted?
The MFSA expects a coherent operating model supported by appropriate governance, key people, financial resources, local substance, AML/CFT controls, risk management, ICT arrangements, and realistic financial projections.
03What can be done before the entity and full capital are in place?
The service scope, ownership structure, business plan, governance design, key-person strategy, and much of the application architecture can be prepared before every operational commitment is finalised. The exact sequencing depends on the project.
04What happens if the MFSA asks for additional information?
We manage the response process, coordinate required clarifications and revisions, and keep the application narrative consistent across business, governance, compliance, and technology workstreams.
Working with Protegra
05Can Protegra support a business after it starts operating?
Yes. We can continue with the compliance programme, regulatory communication, monitoring, reporting, governance updates, disclosure support, and other post-authorisation obligations.

Reference: the Crypto-Asset Service Provider authorisation under Regulation (EU) 2023/1114 in the Licensing Atlas.

Start now

Apply for your Malta CASP licence.

Leave your details — we'll assess your model and send a personalised Malta licensing plan within 24 hours.

Blog

Latest news from Protegra