MiCA · Poland · Regulatory Strategy

Poland Crypto Licensing:
Team in Warsaw. Licence in the EU.

Poland has the talent, customers, and crypto infrastructure to support a serious digital-asset business. But its domestic MiCA licensing route is still unavailable.

Protegra helps Warsaw-based businesses keep their Polish team and operations while placing regulated CASP services inside an authorised EU entity.

We map your services, select the right EU route, structure the relationship between the Polish and authorised entities, and prepare the business for passporting into Poland.

Keep Warsaw for operations. Build the licence where it can work.

Poland remains subject to MiCA, but a domestic CASP authorisation route is not currently operational. An EU-authorised CASP may provide permitted services in Poland after the relevant MiCA notification process.

WHY TEAMS CHOOSE PROTEGRA

Built for Crypto — Not Adapted to It

A Poland MiCA project is not a normal licence application. The challenge is connecting the Polish business, the former VASP registration, the crypto product, and an alternative EU authorisation into one structure that can actually operate.

100% crypto-focused.

We turn Poland’s regulatory gap into a workable Warsaw-to-EU operating model.

Start your Poland assessment ⟶Schedule a regulatory strategy call ⟶

One clear regulatory position

We assess your crypto services and customer flows, your existing Polish registration, your Polish and EU customer targeting, your custody, exchange, transfer, brokerage, and advisory activity, the EU CASP authorisation route, and the passporting, payments, AML/CFT, and tax structure. You receive a practical answer: what can continue, what must change, and what requires authorisation — not conflicting advice from separate providers.

Keep Warsaw. Move the permission.

Your Polish company and team may continue handling technology, operations, product, support, or commercial functions while the authorised EU entity provides the regulated CASP services. We define which entity contracts with customers, which entity holds the authorisation, which functions are outsourced, who owns compliance and MLRO responsibility, and how customer, wallet, data, and reporting flows are controlled. The result is a real group structure, not a foreign licence attached to an unchanged Polish operation.

We manage the transition

For an existing business, we help move from the former Polish registration to a compliant operating model. That may involve reviewing current services and customers, restricting activities that cannot continue, selecting an EU licensing jurisdiction, preparing the CASP application, migrating customers and contracts, reviewing Polish marketing and onboarding, setting up passporting, banking, and payment arrangements, and supporting an orderly wind-down where required.

Your Warsaw team can remain in place. The regulated activity needs to sit within an EU structure that can actually be authorised, supervised, and operated.

Keep the team.
Move the permission.

REGULATORY FACTS

Poland at a Glance

1,229
Legacy VASPs entering the MiCA deadline

Poland entered the post-transition period with approximately 1,229 entities still recorded in its former Virtual Currency Activities Register. These businesses represented Poland’s established crypto market — but the register itself was not a MiCA authorisation.

0
Domestic MiCA CASP licences issued

By the end of the transition period, Poland had issued no domestic MiCA CASP authorisations. The market therefore had a large existing crypto base but no functioning Polish route for a new operator to obtain the authorisation locally.

30
EU and EEA markets reachable through one alternative EU licence

A CASP authorised in another EU Member State can potentially provide its permitted services in Poland after the MiCA cross-border notification process — and use the same authorisation to access the other EU and EEA markets within its approved scope.

Category
What it means for your business
MiCA status
MiCA applies directly in Poland, but a Polish company currently has no functioning domestic application route for a new CASP authorisation.
Home-state authorisation
The regulated EU entity must be authorised in an EU Member State with an operational MiCA supervisory process.
Warsaw operating company
Your Polish company may continue providing permitted technology, operations, customer-support, administrative, or commercial functions, subject to the group structure and regulatory perimeter.
Regulated entity
The authorised EU CASP must retain genuine responsibility for the regulated services, including governance, compliance, risk management, customer protection, and regulatory reporting.
Outsourcing from Poland
Polish staff and service providers may support the CASP under documented outsourcing arrangements, with oversight, access rights, risk controls, and clear accountability.
Customer contracts
The entity providing the regulated service should be clearly identified in customer agreements, terms, disclosures, complaints procedures, and privacy documentation.
Polish customers
Customers in Poland may potentially be served by an EU-authorised CASP after the required MiCA cross-border notification, subject to the authorised scope and Polish marketing and consumer rules.
Website and marketing
A foreign CASP structure does not automatically make existing Polish advertising compliant. Websites, campaigns, onboarding, and customer communications must be reviewed as part of the transition.
Existing customers
Legacy customers may need to be migrated to the authorised EU entity, re-contracted, re-onboarded, or restricted depending on the service model and legal assessment.
Payment services
Fiat settlement, e-money-token transfers, payment accounts, and payment processing may require a separate payment-institution or e-money analysis.
Tax and employment
The EU licensing structure does not eliminate Polish tax, payroll, employment, transfer-pricing, social-security, or permanent-establishment questions for the Warsaw operation.
Current position
Poland’s situation remains politically and legally fluid. The page should be reviewed whenever new national legislation, supervisory guidance, or EU-level enforcement guidance is published.
WHY AN EU LICENCE

Put the Permission Where It Works

The EU route is not about abandoning Poland. It is about separating the location of your team from the location of the entity that must hold the regulated authorisation.

Licence

The authorised entity
  • Holds the MiCA authorisation and contracts with customers for regulated services.
  • Owns the regulated policies and controls, and directs compliance and risk management.
  • Controls or supervises custody arrangements and maintains regulatory capital.
  • Reports to its home-state regulator and manages passporting notifications.

Team

The Warsaw company
  • Software development, product and engineering.
  • Customer support, administration, and operational assistance.
  • Data and analytics, and marketing support subject to review.
  • Non-regulated commercial services.

Structure

The connection between them
  • Services agreements, outsourcing, and cost allocation.
  • Data access, technology ownership, and incident reporting.
  • Customer communications and compliance escalation.
  • Management reporting and regulatory access.

The exact allocation depends on the business model, outsourcing arrangements, employment structure, tax position, data flows, and the requirements of the chosen EU regulator.

Keep Warsaw for the operating team. Build the regulated entity around the supervisor that can authorise it.

Assess your group structure ⟶

Warsaw stays.
The licence travels.

THE POLISH-TO-EU ROUTE

What Happens Next?

Poland’s regulatory gap creates different starting points for different businesses. The right next step depends on whether you are already operating, preparing to launch, or building an EU structure around a Warsaw team.

For a business already providing crypto services from PolandExisting Polish operator

Stabilise the Business First

If you already provide crypto services from Poland, the first task is not choosing a new country. It is understanding what your business can continue doing now.

We review:

  • Current services and customer flows.
  • Former Polish registration.
  • Existing contracts and terms.
  • Custody and wallet arrangements.
  • Polish and EU marketing.
  • Payment and settlement flows.
  • Outsourced functions.
  • AML/CFT and transaction-monitoring controls.

You receive: a written action plan showing what can continue, what must be restricted, and what should move to an authorised EU entity.

For a product still being builtNew Polish venture

Launch the Business Around the Correct Entity

If you are still building the product, do not incorporate the operating model around the assumption that a Polish CASP licence will soon become available.

We determine:

  • Which MiCA services your product requires.
  • Which EU regulator can authorise them.
  • Which functions can remain in Warsaw.
  • Where management and compliance responsibility will sit.
  • How customers will contract with the authorised entity.
  • Whether payment or e-money permissions are also required.

You receive: a Poland-to-EU structure designed before the product, contracts, and customer journey become difficult to change.

For a Warsaw team that stays where it isWarsaw-based expansion

Keep the Team. Add the EU Licence.

Your Warsaw company may remain responsible for technology, product development, operations, support, administration, or commercial functions that sit outside the regulated service.

The authorised EU CASP must remain responsible for the regulated activity, including:

  • Customer-facing CASP services.
  • Compliance and AML/MLRO oversight.
  • Risk management.
  • Client-asset protection.
  • Regulatory reporting.
  • Outsourcing supervision.
  • Material-change notifications.

You receive: a group structure that preserves Warsaw as an operating base while placing the licence and regulated responsibility where they can be supervised.

For a business still relying on the former registerExisting registration

Replace the Registration With a Real Operating Model

The former Polish register may explain where the business started. It does not provide the MiCA authorisation required for the next stage.

We help determine whether the business should:

  • Apply for a CASP licence in another EU Member State.
  • Transfer regulated customers and services.
  • Restrict the Polish entity to non-regulated functions.
  • Re-contract existing customers.
  • Pause or wind down services that cannot continue.
  • Maintain records and communicate changes clearly.

You receive: a controlled transition plan instead of an improvised response to the end of the legacy regime.

CHOOSE YOUR LICENCE CLASS

Which MiCA Class Fits Your Business?

Poland currently does not offer a functioning domestic CASP authorisation route. If your business needs regulated EU authorisation, the practical route is to apply in an EU Member State with an operational MiCA supervisor and then assess passporting into Poland.

MiCA defines three CASP licence classes by service scope and minimum own-funds requirement. Identify yours below—then use the calculator to map the full cost of your Poland-to-EU structure. Getting the class wrong at the start can mean costly reclassification later.

CLASS 1 · MIN. OWN FUNDS€50,000

Advisory, Order Flow, and Transfer Services

Advice, portfolio management, reception and transmission of orders, execution of orders, placing, and transfer services. The right starting point for firms not planning to hold client crypto-assets, offer exchange services, or operate a trading venue.

MOST COMMONCLASS 2 · MIN. OWN FUNDS€125,000

Custody and Exchange Services

Everything in Class 1, plus custody and administration of crypto-assets on behalf of clients and the exchange of crypto-assets for funds or for other crypto-assets. This is the class a Warsaw operator normally needs once it holds client assets or runs an exchange book.

CLASS 3 · MIN. OWN FUNDS€150,000

Trading Platform Operator

Everything in Class 2, plus operation of a trading platform for crypto-assets. The widest MiCA scope, and the only class that covers running a venue where third parties trade.

Own-funds figures and service scope: MiCA, Annex IV of Regulation (EU) 2023/1114. Checked 22 September 2026. Own funds are the applicable minimum or one quarter of the preceding year’s fixed overheads, whichever is higher.

COST CALCULATOR

What Does the Warsaw-to-EU Structure Actually Cost?

Poland charges nothing for a CASP authorisation because it does not currently issue one. The cost of this route is the EU authorisation you take instead, plus the group structure that connects it to the Warsaw team.

Three levels of support

How much of the work do you want us to do?

01 · TEMPLATES

You get the documents. You file them yourself.

€15,000
  • The full policy, procedure and governance pack for this regulator
  • Application forms filled in as far as your own data allows
  • One handover session so you know what goes where
  • You deal with the regulator yourself
02 · TAILORED

We write the file around your business.

€42,000
  • Everything above, rewritten around your actual model
  • Business plan, governance and AML/CFT built from your data
  • We assemble and check the whole file before it goes in
  • You submit and answer; we stay on call throughout
Every figure on this page assumes this level
03 · TO DECISION

We carry the file to the regulator’s answer.

€84,000
  • Everything above, and we file it
  • Every regulator question and clarification round comes to us
  • Meetings and pre-application engagement handled for you
  • We stay on the file until the decision is issued

One licence, three levels — the regulator asks for exactly the same file in all three, and what changes is how much of it sits with you. The middle level is the default here: every price on this page is quoted at it, and the selector above the total switches between them. Moving up or down changes our fee and nothing else — not the capital, not the state fees, not the statutory clock. Carrying a file to the decision is not a promise of approval: no adviser can give one, and an adviser who does is selling you something other than advice.

Protegra legal and EU CASP application supportRegulatory perimeter analysis, jurisdiction selection, the full CASP application, and management of the home-state regulator.€42,000
EU entity formation and registered officeIncorporation in the selected Member State, corporate documents, registered office, and local substance.€4,500
MiCA own fundsThe applicable MiCA minimum or one quarter of fixed overheads, whichever is higher. Own funds are capital held in the company, not a fee. The figure is the Class 1 floor; Class 2 needs €125,000 and Class 3 €150,000.€50,000
Group and outsourcing structureServices agreements, outsourcing documentation, data access, technology ownership, cost allocation, and the management and escalation model between Warsaw and the authorised entity. The line that exists only on this route: two entities, one authorisation, and a documented relationship the home-state regulator will read.€14,000
Board, MLRO, compliance, and risk supportDirectors, senior management, MLRO, compliance, risk, and local accountability in the home state. €60,000 annualised, in the host state.€5,000 / mo
DORA and ICT securityICT risk management, cybersecurity, incident response, business continuity, third-party oversight, and resilience testing.€14,000
Transition: customer migration and re-contractingCustomer migration, contract updates, website and marketing changes, wallet and custody migration, and communications with customers and counterparties. For an existing operator; a new venture does not pay it.€12,000
Passporting notification into PolandThe MiCA cross-border notification for Poland, and for the other EU and EEA markets within the authorised scope.€3,500
Accounting and reportingFinancial administration, annual accounts, and recurring regulatory reporting for the authorised entity.€4,000 / yr
Fixed regulatory charges — paid to the chosen EU home-state regulator.
Polish CASP application feenone — no domestic route is open
Home-state application feeset by the Member State chosen
Own funds are not a feeregulatory capital held in the company
WHERE THE LICENCE GOES

Which EU State Should Host the Licence?

Poland cannot authorise the entity today, so the choice is which EU supervisor does. These are the four routes Protegra files, with the Year 1 estimate each page publishes. All four passport into Poland through the same MiCA notification.

Year 1 estimated cost of each EU host jurisdiction Protegra files in
EU host stateYear 1, estimatedWhat it gives a Warsaw team
Slovakia€120,000The cheapest EU route we publish. Suits a lean Warsaw team that needs authorisation without a large local footprint.
Cyprus€163,500An established CySEC process and a deep local services market; a statutory audit applies to every Cyprus company.
Malta€169,500The longest-running crypto supervisor in the EU, and the most demanding on substance and documentation.
The Netherlands€199,500The heaviest governance expectations of the four, and the strongest banking access once authorised.

Year 1 figures are the estimates published on each jurisdiction page and cover professional fees, formation, substance, DORA and accounting; they exclude own funds, which are held as capital rather than spent. The Warsaw-to-EU estimate in the calculator is €154,000: higher than a single-country route because it carries two lines those routes do not, the group and outsourcing structure and the transition of existing customers and contracts.

ROADMAP WITH PROTEGRA

From Warsaw to EU Authorisation

A Poland project starts with what the business does today, not with a choice of country. The jurisdiction is selected once the regulatory perimeter is known.

We document the Polish business as it operates today: ownership and entities, current registration, products and services, customers and markets, contracts and terms, wallets and custody, payment flows, marketing, outsourcing, and AML and compliance controls.

We determine which activities fall within MiCA, which may require payment authorisation, which functions can remain in Poland, and which services need to be provided by the authorised EU CASP — and whether existing customers and operations can continue, or migration or wind-down is required.

We compare possible licensing jurisdictions by regulator and pre-application access, service scope, own funds, application fees, local management, substance requirements, banking and payments, tax and accounting, passporting, and compatibility with the Warsaw team.

We design the relationship between the Polish and EU entities: customer contracts, regulated-service responsibility, support services, outsourcing, compliance reporting, technology access, data flows, cost allocation, and management and escalation.

We prepare the selected jurisdiction’s CASP application: business plan, financial projections, governance, own-funds analysis, AML/CFT, ICT and DORA, custody, outsourcing, client protection, complaints, disclosure, and regulatory reporting.

We coordinate customer migration, contract updates, website and marketing changes, wallet and custody migration, banking and payment activation, staff and service-provider arrangements, Polish operational restrictions, and communications with customers and counterparties.

After authorisation, we support the notification process for Poland and other target EU and EEA markets. The business then moves into supervised operations with AML monitoring, DORA and ICT controls, client-asset protection, regulatory reporting, outsourcing oversight, material-change notifications, and ongoing passporting management.

08

Post-Authorisation Support

INCLUDED, NOT OPTIONAL

Authorisation is the point at which the Warsaw-to-EU structure has to work in production. We stay with it.

Passporting and market access

Notification management for Poland and the other EU and EEA markets within the authorised scope, and new-service assessments as the product grows.

AML/CFT, DORA, and ICT governance

Ongoing financial-crime controls, operational-resilience governance, and the ICT evidence the home-state regulator expects to see maintained.

Custody, reporting, and banking readiness

Client-asset safeguards, regulatory reporting, and the banking and payment relationships the structure depends on.

Polish operations and group outsourcing

Oversight of the Warsaw company as an outsourced provider, cost allocation, material changes, and the documentation that keeps the two entities properly separated.

Your Warsaw team can remain in place. The authorised EU entity becomes responsible for the regulated activity.

WHY PROTEGRA

The Moments Where Poland Projects Go Wrong

Poland’s gap is not a technicality. Each of these is a question a Warsaw business has to answer before it can operate anywhere in the EU.

See how we work ⟶

“Can we rely on the former register?”

Not as a substitute for MiCA authorisation after the transition period ended.

⟶ We identify what the registration covered, what it no longer supports, and what the business must do next.

“Can we wait for Poland?”

Waiting may be commercially reasonable for some businesses, but it should be an informed decision.

⟶ We compare the risk and cost of waiting with an EU authorisation route that can provide a functioning basis for regulated services now.

“Can we keep everything in Warsaw?”

The team may remain in Warsaw. The regulated service cannot simply remain with the Polish company if that company does not hold the required authorisation.

⟶ We separate support functions from regulated responsibility and document the relationship.

“Can a foreign licence cover our existing website?”

Not automatically. The authorised entity, customer contracts, website, marketing, onboarding, disclosures, and service flows must all reflect the authorised structure and the passporting position.

⟶ We align the public-facing business with the entity that actually holds the permission.

“Does passporting solve the entire problem?”

No. Passporting supports cross-border provision of authorised CASP services. It does not replace Polish tax, payment, employment, consumer, AML, data, or corporate analysis.

“What if the product changes after authorisation?”

A new wallet feature, staking product, payment flow, token, custody model, or trading function may change the regulatory scope.

⟶ We assess product changes before launch and manage material-change notifications where required.
CLIENT EXPERIENCE

How These Problems Get Resolved

Select a challenge to see how a Poland project moves from a stalled registration to a structure that can be authorised and supervised.

Before Protegra
“We assumed our former Polish registration allowed us to continue until a new Polish law arrived.”
With Protegra
“We understood which services were affected and created a plan to restrict, migrate, wind down, or move the regulated activity into an authorised EU entity.”
FFounder, crypto-asset services business, Warsaw
FAQ

Common Questions

Current Polish position
01Can I obtain a MiCA CASP licence in Poland now?
As of September 2026, Poland does not have a functioning domestic route for issuing the full CASP authorisation required by most crypto-asset service providers. The proposed Crypto-Asset Market Act was vetoed three times, and the Sejm failed to override the third veto on 4 September 2026.
02Does MiCA apply in Poland?
Yes. MiCA is an EU Regulation and applies directly. The difficulty is that Poland has not completed the national framework needed to operate the domestic authorisation and supervisory system.
03Can we continue under the old Polish register?
Not as a substitute for MiCA authorisation after the transition period ended on 1 July 2026. The former registration was not equivalent to a CASP authorisation and did not create EU passporting rights. Existing businesses need a current review of their services and operating model.
04What were the presidential vetoes about?
The proposed legislation was intended to establish Poland’s national framework around MiCA and designate the KNF as the principal supervisor. The President objected to the structure and scope of the proposed framework, including reported concerns about supervisory powers, website-blocking and account-freezing mechanisms, costs, and judicial oversight.
Warsaw-to-EU structure
05Can I keep my company and team in Warsaw?
Potentially. The Polish company may continue providing technology, product, operations, support, administrative, or other permissible services while the authorised EU entity provides the regulated CASP services. The arrangement must reflect genuine responsibility, documented outsourcing, appropriate management, and clear regulatory accountability.
06Can I outsource the regulated activity to Poland?
Outsourcing is possible only within the requirements of the home-state regulator. The authorised EU CASP must retain responsibility, oversight, access rights, risk management, compliance control, and the ability to direct or intervene in the outsourced function.
07Which entity should contract with customers?
Generally, the entity providing the regulated CASP service should be clearly identified in the customer agreement, terms, disclosures, complaints process, and onboarding materials. The correct answer depends on the service model, jurisdiction, outsourcing, customer location, and group structure.
08Can a foreign EU CASP serve Polish customers?
Potentially, yes. A CASP authorised in another EU Member State may provide its permitted services in Poland after the required MiCA cross-border notification process. The authorised scope, marketing, customer onboarding, consumer rules, tax, payment services, and Polish-law requirements must still be reviewed.
09Does passporting cover the whole group?
No. Passporting belongs to the authorised CASP entity and covers the permitted services within its authorisation. It does not automatically authorise the Polish parent, subsidiary, technology provider, or service company.
Services and operations
10Which crypto services require MiCA authorisation?
Potentially regulated services include custody and administration, operation of a trading platform, exchange of crypto-assets for funds, exchange of crypto-assets for other crypto-assets, execution of orders, placing, reception and transmission of orders, advice, portfolio management, and transfer services. The classification depends on what the business actually does.
11Can technology companies operate from Poland without a CASP licence?
Potentially, if they genuinely provide technology or support services without performing regulated activities. The analysis changes if the company controls client assets, executes orders, provides advice, facilitates exchange, transfers crypto-assets, or presents itself as the provider of the regulated service.
12Do payment services require a separate licence?
Potentially. Fiat settlement, payment accounts, e-money-token transfers, payment processing, and other payment functions may require a payment-institution or e-money analysis separate from the CASP authorisation.
13Will a Polish bank support the EU structure?
There is no guarantee. Banks independently assess ownership, customer profile, transaction flows, source of funds, AML controls, custody, technology, management, and the reason for maintaining the Polish operation.
14Does Poland have a special crypto tax regime?
The tax outcome depends on the activity, company, revenue, transaction, customer, and accounting structure. A foreign EU CASP does not eliminate Polish tax, payroll, employment, VAT, withholding, transfer-pricing, permanent-establishment, or customer-reporting questions.
15What happens after the EU CASP licence is granted?
The business must maintain own funds, governance, AML/CFT, DORA and ICT controls, client-asset safeguards, outsourcing oversight, complaints and disclosures, regulatory reporting, passporting notifications, and material-change controls.
16Can Protegra support us after authorisation?
Yes. Support can include passporting, AML/CFT, DORA and ICT governance, custody, regulatory reporting, banking readiness, Polish customer operations, group outsourcing, material changes, and new-service assessments.

Reference: Crypto-asset service provider (MiCA CASP) licences compared in the Licensing Atlas.

Start now

Build Your Poland-to-EU Strategy

Leave your details and we will assess your current position, identify whether your activities require CASP authorisation, and determine whether Poland or another EU Member State should sit at the centre of your regulated structure. You will receive a personalised Poland crypto-regulatory plan within 24 hours.

Your current MiCA and Polish perimeter.

Whether the former registration remains relevant.

The services that may need to stop, migrate, or be authorised.

Whether an EU CASP licence is required.

A proposed jurisdiction and entity route.

A Warsaw-to-EU operating model.

An initial cost and timeline view.

The immediate actions to reduce regulatory risk.

Former Polish Virtual Currency Activities Register, existing exchange, custody, brokerage, wallet infrastructure, payments, advisory, trading platform, new launch, or other activity.

Blog

Latest news from Protegra