CASP Authorisation in Estonia
Estonia can be attractive for digital-business teams seeking an EU MiCA CASP route, but it should no longer be treated as a lightweight crypto setup. Strong substance, governance, AML, audit, banking and MiCA-readiness are central to the file.
Confirm the current Estonian MiCA/CASP supervisory authority, FIU references, application forms and fee schedule before using this page for client advice.
Regulatory status should be confirmed by local counsel before relying on this route.
What is Estonia CASP authorisation?
Estonia CASP authorisation is an EU/MiCA route for crypto-asset service providers that want a regulated operating base and potential EU/EEA market access. Estonia's digital-business reputation is useful, but the application should be treated as a full regulatory file rather than a light registration.
- Jurisdiction
- Estonia
- Regulator
- Estonian Financial Supervision Authority (FIU)
- Regime
- CASP
- Legal basis
- Legal basis: MiCA CASP authorisation through the Estonian supervisory framework.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
CASP service scope in Estonia
The Estonia file should begin with a precise activity map. Exchange, custody, brokerage, wallet, advisory, staking or payment-adjacent services can create different evidence requirements for governance, safeguarding, AML and technology controls.
Exchange
ConditionalExchange activity may require additional scope or separate licensing.
Exchange
Exchange activity may require additional scope or separate licensing.
ConditionalCustody
ConditionalCustody may require separate review or additional controls.
Custody
Custody may require separate review or additional controls.
ConditionalBrokerage
ConditionalBrokerage or OTC activity typically fits within scope.
Brokerage
Brokerage or OTC activity typically fits within scope.
ConditionalWallet provider
ConditionalExchange activity may require additional scope or separate licensing.
Wallet provider
Exchange activity may require additional scope or separate licensing.
ConditionalEU market
IncludedEU/EEA passporting available.
EU market
EU/EEA passporting available.
IncludedStartups
ExcludedHigh setup complexity means significant budget is needed.
Startups
High setup complexity means significant budget is needed.
Excluded
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
EU/EEA passporting from Estonia
Estonia is relevant for teams that need an EU MiCA CASP route and potential EU/EEA passporting. Passporting should be framed around approved services, target markets and notification steps, not as automatic market access for every future product.
Define target EU/EEA countries, client types and services before submission.
Map passporting plans to each requested CASP permission and operational capability.
Keep the Estonia authorisation strategy separate from non-EU CASP routes such as Turkey.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Capital, governance and audit expectations
The CSV snapshot indicates share capital from 50,000 EUR, state fee of 10,000 EUR, annual supervision fee of 10,000 EUR, local staff, physical office and audit. Estonia may be efficient for digital operations, but the ongoing burden is still material.
- Board, senior management, compliance, AML and technology ownership should be named and credible.highBoard, senior management, compliance, AML and technology ownership should be named and credible.high
- Capital planning should match the requested activity scope and operating risks.highCapital planning should match the requested activity scope and operating risks.high
- Audit, outsourcing, reporting and incident-management workflows should be budgeted as recurring obligations.highAudit, outsourcing, reporting and incident-management workflows should be budgeted as recurring obligations.high
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Estonia CASP application bottlenecks
The most common blockers are operating-model issues: vague scope, thin substance, weak AML controls, incomplete banking readiness or a budget based on the old idea that Estonia is a quick crypto setup.
- High
Unclear CASP service perimeter or EU/EEA passporting plan
- High
Nominal local presence without accountable management
- High
Weak custody, safeguarding, wallet or technology-control evidence
- High
Generic AML policies that do not match tokens, client geography and fiat flows
- High
Banking or PSP package prepared too late
- High
Route selection driven by a low-budget or fast offshore objective
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Activity fit for this route
Review which crypto activities fit within the scope of this route.
Exchange activity may require additional scope or separate licensing.
Custody may require separate review or additional controls.
Brokerage or OTC activity typically fits within scope.
Exchange activity may require additional scope or separate licensing.
EU/EEA passporting available.
High setup complexity means significant budget is needed.
Not sure if your model fits? Request a licensing assessment
Is Estonia CASP authorisation right for your project?
Best for
- EU passporting and regulated CASP operations
- EU/EEA market access
Not suitable for
- Low-budget or fast offshore setup
- Projects without a prepared banking strategy
Banking difficulty is high for this route. Prepare a banking strategy before committing to the Estonia route.
Core requirements
Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Local substance in Estonia
Local staff and a physical office should be treated as operating requirements, not cosmetic items. Estonia is digital-business friendly, but the CASP model still needs accountable local management and a defensible outsourcing structure.
Local staff
RequiredRequired
At least one locally-accountable staff member or director is expected.
Physical office
RequiredRequired
A genuine office presence is expected, not a nominal registered address.
Audit
RequiredRequired
External audit is required for ongoing supervision compliance.
Planning notes
- Plan local compliance ownership and regulator-facing accountability before filing.
- Document what is managed in Estonia and what is outsourced to group or technology providers.
- Budget staff, office, audit and ongoing compliance separately from application advisory fees.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown
Budget for service price, regulatory fees, share capital and ongoing costs separately.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown — Estonia
Budget for service price, regulatory fees, share capital and ongoing costs separately.
| Cost item | Amount |
|---|---|
| Service priceApplication preparation and professional services. | €18,400 |
| State fee | €10,000 |
| Required share capitalMust be held, not an expenditure. | €50,000 |
Summary
- One-off costs
- €78,400
- Annual (year 1)
- €0
- Total year 1
- €78,400
Adjust to convert to your base currency.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Application process
The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Estonia — From 6 months.
Pre-assessment and scope review
1–3 weeksDefine the activity scope, governance model and target markets before formal preparation.
Company setup in Estonia
2–6 weeksEstablish legal entity, appoint local staff and set up local operating structure.
Documentation and compliance packBottleneck risk
3–8 weeksPrepare AML/CFT policies, governance documents, controls framework and application materials.
Application submission to Estonian Financial Supervision Authority
1–2 weeksSubmit complete application with all required documentation.
Regulator reviewBottleneck risk
From 6 monthsRegulator reviews the application. May request clarifications. Incomplete files extend this phase.
Depends on: File quality and completeness
Authorisation or registration confirmation
1–4 weeksRegulator confirms authorisation or registration. Commence operations.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
What can delay or increase cost
These factors are most likely to affect timelines and budgets for this route.
Setup complexity is rated high for Estonia. Company setup, governance and documentation take longer than average.
Banking difficulty is rated high. Opening accounts for crypto businesses in Estonia requires extensive documentation.
Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.
Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Banking and PSP strategy in Estonia
Banking difficulty is medium to high and should be handled before the application becomes a timeline exercise. A credible bank or PSP package is especially important for exchange, custody and fiat-heavy models.
Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.
Reflects availability of payment service providers willing to onboard crypto-licensed entities.
A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.
Preparation checklist
- Prepare flow-of-funds diagrams, client geography, token policy and transaction monitoring evidence.
- Explain fiat rails, safeguarding and settlement flows before approaching banks or PSPs.
- Do not assume Estonian authorisation or digital-business reputation will automatically solve account opening.
Business model fit — Estonia
Assess how well this route covers your planned activities.
Fit score
- Good fit
- 0/6
- Partial fit
- 6/6
- Poor fit
- 0/6
Estonia may not cover your primary activities
Consider an alternative route that better matches your activity profile.
Estonian application profile
Estonian Financial Supervision Authority (FIU)
An Estonia CASP file should read like a regulated financial services application: clear services, accountable management, local substance, AML controls, safeguarding, technology governance and a realistic banking plan. Template policies or nominal local presence create avoidable review risk.
- Estonia is strongest for teams that value EU reputation and can evidence real local governance.
- Custody, exchange and cross-border fiat flows need a stronger control file than narrow brokerage models.
- AML, sanctions, travel rule, transaction monitoring, outsourcing and cybersecurity evidence should match the product.
- The CSV regulator label should be legally reviewed before final client-facing use.
Strong international recognition and established supervision track record.
Reflects documentation depth, governance requirements and expected review friction.
Reflects likelihood of delays, additional information requests or policy uncertainty.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Compliance documentation
Most crypto licensing routes require a documented compliance framework before submission, not only after approval.
- RequiredAML/CFT policy and risk assessmentDocument your customer risk model and control framework.
- RequiredCustomer due diligence (CDD) procedures
- RequiredEnhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
- RequiredTransaction monitoring system and rules
- RequiredSanctions screening procedures
- RequiredSuspicious activity reporting (SAR) process
- RequiredMLRO / Compliance officer appointmentLocal accountability may be required.
- RecommendedBoard-approved governance charter
- ConditionalOutsourcing policy and monitoringRequired if functions are outsourced.
- RecommendedICT / cybersecurity policy
- RequiredComplaints handling procedure
- RequiredAnnual external audit engagementRequired for ongoing supervision compliance.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Documents to prepare
Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.
Corporate documents
AML and compliance
Operational
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Risk assessment
Main risk dimensions for the Estonia route.
Route risk rating — banking difficulty: Medium to high. Authorisation does not guarantee bank account opening.
Mitigation: Start banking outreach and compliance preparation before the application.
Route risk rating — setup complexity: Medium to high.
Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.
Route risk rating — regulatory reputation: High.
Route risk rating — regulatory risk: Low to medium. Weak compliance, vague scope or insufficient controls increase review risk.
Mitigation: Prepare an evidence-based compliance file before submission.
This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.
Estonia CASP vs alternatives
Compare Estonia with Lithuania CASP and Latvia CASP for Baltic EU/MiCA positioning, Malta CASP for an established MFSA-facing EU route, and Turkey CASP when the commercial driver is Turkey local-market access rather than EU/EEA passporting.
Estonia
CASP
- Price
- 18 400 EUR
- Timeline
- From 6 months
- Passporting
- EU/EEA
- Banking
- Medium to high
- Reputation
- High
Lithuania (CASP)
CASP
- Passporting
- EU/EEA
- Banking
- Medium to high
- Reputation
- High
+ Baltic EU/MiCA comparison route for CASP passporting plans
− Not a substitute for Estonia-specific substance and regulator review
View routeLatvia (CASP)
CASP
- Passporting
- EU/EEA
- Banking
- Medium to high
- Reputation
- High
+ Alternative Baltic EU/MiCA route for regulated CASP operations
− Requires separate assessment of local substance, fees and supervisor expectations
View routeMalta (CASP)
CASP
- Price
- 20 700 EUR
- Timeline
- From 6 months
- Passporting
- EU/EEA
- Banking
- Medium to high
- Reputation
- High
+ Established EU/MiCA CASP route with MFSA-facing regulatory profile
− Usually heavier and not a low-cost route
View routeTurkey (CASP)
CASP
- Price
- 52 800 EUR
- Timeline
- From 3 months
- Passporting
- No passporting
- Banking
- High
- Reputation
- Medium
+ Local-market CASP route for Turkey-facing operations
− No EU/EEA passporting and a materially different regulatory perimeter
View routeFees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Estonia vs other CASP routes
Compare key parameters across CASP authorisation routes.
Check your readiness for Estonia CASP authorisation
Documented AML/CFT policies, risk assessment, compliance officer.
From 50 000 EUR minimum capital required.
Documented AML/CFT policies, risk assessment, compliance officer.
Board, management, accountability chain defined.
Banking strategy and identified partners.
Local staff and office in Estonia.
Readiness status
Answer the criteria on the left to see your readiness status.
Frequently asked questions
Estonia CASP authorisation under MiCA can support EU/EEA passporting for approved services, subject to the required notification process. It should not be presented as automatic access for every future product or activity.
No. Estonia may remain attractive for digital-business teams, but MiCA-era CASP authorisation requires substance, governance, AML controls, audit, capital planning and banking readiness.
Plan for local staff, a physical office, accountable management, compliance and AML ownership, audit, outsourcing controls and product-specific technology and safeguarding procedures.
The CSV profile is medium to high. Banking and PSP discussions should be prepared alongside the authorisation strategy with clear ownership, flow-of-funds, client geography, token policy and transaction monitoring evidence.
Compare Estonia with Lithuania, Latvia and Malta when EU/MiCA passporting is the commercial driver. Compare Turkey only when the project needs Turkey local-market access, because Turkey CASP does not provide EU/EEA passporting.
The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.
Your dedicated specialists
Enrico
Rein
Jurata
Andrej
Marta
Katrin
Inga
Request a Estonia CASP assessment
Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.