EU/EEA PassportingMiCA CASP authorisation

MiCA Crypto Licence in Cyprus

Cyprus is a CySEC-supervised MiCA CASP authorisation route for teams that need EU/EEA passporting and regulated crypto-asset service operations, while accepting local substance, audit, governance, AML and banking-readiness obligations.

Processing time
From 6 months
Service price
17 000 EUR
Required share capital
From 50 000 EUR
State fee
10,000 EUR
Annual supervision fee
From 10 000 EUR
Banking difficulty
Medium to high
RegulatorCyprus Securities and Exchange Commission (CySEC)

Regulatory status should be confirmed by local counsel before relying on this route.

What is Cyprus MiCA CASP authorisation?

Cyprus MiCA CASP authorisation is the CySEC-supervised route for crypto-asset service providers under the EU MiCA framework. It is a regulated EU operating route for CASPs, not a fast offshore registration or a low-substance setup.

MICA
Jurisdiction
Cyprus
Regulator
Cyprus Securities and Exchange Commission (CySEC)
Regime
MICA
Legal basis
Regime: MiCA CASP authorisation for crypto-asset service providers.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

EU/EEA passporting from Cyprus

Cyprus can support EU/EEA passporting for approved MiCA CASP services, but passporting is not a blanket claim. The applicant should define target markets, services and notification steps before presenting the route commercially.

  • Exchange

    Included

    Exchange operations fit within the permitted activities of this route.

  • Custody

    Conditional

    Custody may require separate review or additional controls.

  • Brokerage

    Included

    Brokerage or OTC activity typically fits within scope.

  • Wallet provider

    Included

    Exchange operations fit within the permitted activities of this route.

  • EU market

    Included

    EU/EEA passporting available.

  • Startups

    Excluded

    High setup complexity means significant budget is needed.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cyprus as a MiCA home member state

Cyprus fits teams that want an EU home member state with CySEC supervision, a medium reputation profile and a commercial cost level below heavier premium EU routes. The setup remains medium to high complexity because staff, office, audit and ongoing compliance are required.

  • Regulatory track record

    Positive

    High

  • Banking access for crypto firms

    Negative

    Medium to high

  • Regulatory risk

    Caution

    Low to medium

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cyprus MiCA application bottlenecks

The main bottlenecks are usually operating-model issues, not only document collection. Cyprus becomes harder when the applicant cannot defend service scope, substance, safeguarding, AML, governance, costs, timeline or banking assumptions.

  • Unclear CASP service perimeter or EU/EEA passporting plan

    High

  • Local staff or office model that does not support real operational control

    High

  • Weak custody, wallet, safeguarding, reconciliation or technology-resilience evidence

    High

  • Template AML, sanctions or travel-rule policies that do not match clients, tokens and fiat flows

    High

  • Banking, EMI, PI or PSP package prepared too late

    High

  • Payment, staking, DeFi or securities-like features added without perimeter analysis

    High

  • Timeline sold as exactly 6 months instead of from 6 months with regulator-question buffers

    High

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Activity fit for this route

Review which crypto activities fit within the scope of this route.

Exchange
Suitable

Exchange operations fit within the permitted activities of this route.

Custody
Conditional

Custody may require separate review or additional controls.

Brokerage
Suitable

Brokerage or OTC activity typically fits within scope.

Wallet provider
Suitable

Exchange operations fit within the permitted activities of this route.

EU market
Suitable

EU/EEA passporting available.

Startups
Not suitable

High setup complexity means significant budget is needed.

Not sure if your model fits? Request a licensing assessment

Is Cyprus MiCA authorisation right for your project?

Best for

  • EU passporting and regulated CASP operations
  • EU/EEA market access

Not suitable for

  • Low-budget or fast offshore setup
  • Projects without a prepared banking strategy

Banking difficulty is high for this route. Prepare a banking strategy before committing to the Cyprus route.

Core requirements

Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.

Required share capitalFrom 50 000 EUR
Required
Local staffRequired
Required
Physical officeRequired
Required
AuditRequired
Required

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Local substance, office, audit and governance

The CSV facts mark local staff, physical office and audit as required. Treat these as operating obligations that affect CySEC confidence, banking readiness and maintenance cost, not as simple incorporation checklist items.

Local staff

Required

Required

At least one locally-accountable staff member or director is expected.

Physical office

Required

Required

A genuine office presence is expected, not a nominal registered address.

Audit

Required

Required

External audit is required for ongoing supervision compliance.

Planning notes

  • Define Cyprus-based decision-making, compliance ownership and reporting lines before submission.
  • Document outsourced group functions, board oversight, technology providers and incident escalation.
  • Budget share capital from 50 000 EUR, the 10,000 EUR state fee, annual supervision from 10000 EUR, audit, office, staff and ongoing compliance separately from the 17 000 EUR application service fee.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Service price (professional fees)Application preparation and professional services.
17 000 EUR EURFixed
State fee
10,000 EURFrom
Annual supervision feeRecurring annual cost after authorisation.
From 10 000 EURFrom
Required share capitalMust be held, not an expenditure.
From 50 000 EURFrom
High ongoing cost

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown — Cyprus

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Cost itemAmount
Service priceApplication preparation and professional services.€17,000
State fee€10,000
Required share capitalMust be held, not an expenditure.€50,000

Summary

One-off costs
€77,000
Annual (year 1)
€0
Total year 1
€77,000

Adjust to convert to your base currency.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Application process

The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Cyprus — From 6 months.

Total timelineFrom 6 months

  1. Pre-assessment and scope review

    1–3 weeks

    Define the activity scope, governance model and target markets before formal preparation.

  2. Company setup in Cyprus

    2–6 weeks

    Establish legal entity, appoint local staff and set up local operating structure.

  3. Documentation and compliance packBottleneck risk

    3–8 weeks

    Prepare AML/CFT policies, governance documents, controls framework and application materials.

  4. Application submission to Cyprus Securities and Exchange Commission

    1–2 weeks

    Submit complete application with all required documentation.

  5. Regulator reviewBottleneck risk

    From 6 months

    Regulator reviews the application. May request clarifications. Incomplete files extend this phase.

    Depends on: File quality and completeness

  6. Authorisation or registration confirmation

    1–4 weeks

    Regulator confirms authorisation or registration. Commence operations.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

What can delay or increase cost

These factors are most likely to affect timelines and budgets for this route.

High setup complexity
High

Setup complexity is rated high for Cyprus. Company setup, governance and documentation take longer than average.

Likely impactAdd 4–8 weeks to the preparation phase.
MitigationStart company setup and governance planning immediately after scope confirmation.
Banking difficulty
High

Banking difficulty is rated high. Opening accounts for crypto businesses in Cyprus requires extensive documentation.

Likely impactBanking can delay or block operations for 3–6 months after authorisation.
MitigationIdentify and pre-qualify banking partners before submitting the application.
High maintenance cost
Medium

Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.

Likely impactRecurring annual cost significantly above the one-time service price.
MitigationModel annual compliance costs before committing to this route.
Application completeness
Medium

Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.

Likely impactEach regulator query adds 2–6 weeks to the review phase.
MitigationUse a structured compliance pack. Review file completeness before submission.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Banking and PSP readiness in Cyprus

The CSV profile rates crypto banking as medium to high and PSP availability as medium. Cyprus can support an EU-facing regulated narrative, but banks, EMIs, PIs and PSPs will still run their own onboarding and risk reviews.

Banking difficulty
High

Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.

Medium PSP availability
Medium

Reflects availability of payment service providers willing to onboard crypto-licensed entities.

A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.

Preparation checklist

  • Prepare ownership, source-of-funds, flow-of-funds, client geography, token admission and transaction monitoring evidence early.
  • Explain fiat settlement, safeguarding, reconciliation and custody flows before approaching banks or PSPs.
  • Expect stronger due diligence for exchange, custody, cross-border fiat flows and higher-risk client geographies.

When Cyprus MiCA is not the right route

Cyprus should not be selected only because it looks commercially accessible. It is still a regulated MiCA CASP authorisation route with local substance, audit, capital and ongoing maintenance expectations.

  • The project primarily wants a low-budget or fast offshore setup.

  • The team cannot fund local staff, physical office, audit, share capital and recurring supervision fees.

  • The target customers are outside the EU/EEA and passporting has limited commercial value.

  • The product is mainly DeFi, staking, payment, e-money token or securities-token related and needs a different regulatory analysis first.

Consider instead

  • Lithuania MICA — Baltic EU MiCA route with Bank of Lithuania supervision
  • Malta MICA — More established crypto regulator profile for reputation-led projects
  • Poland MICA — Central EU comparison route for cost-conscious CASP planning

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Business model fit — Cyprus

Assess how well this route covers your planned activities.

Fit score

Good fit
3/6
Partial fit
3/6
Poor fit
0/6

Cyprus covers some but not all planned activities

Some activities need additional licensing or separate review before committing.

CySEC profile for crypto firms

Regulatory authority · Cyprus

Cyprus Securities and Exchange Commission (CySEC)

CySEC should be approached as a financial-services supervisor, not as a light-touch crypto registration desk. A credible Cyprus MiCA file needs precise service scope, accountable management, AML and sanctions controls, safeguarding logic, technology resilience and a realistic banking package.

Likely areas of scrutiny
  • The application should show who controls Cyprus-based compliance, risk, AML, technology oversight and regulator-facing decisions.
  • Exchange and custody models need stronger evidence than a narrow brokerage, wallet or advisory model.
  • Generic policy packs are weak unless they are adapted to clients, tokens, jurisdictions, fiat flows, outsourcing and operational controls.
Regulatory reputation
High

Strong international recognition and established supervision track record.

Setup complexity
High

Reflects documentation depth, governance requirements and expected review friction.

Regulatory risk
Medium

Reflects likelihood of delays, additional information requests or policy uncertainty.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Compliance documentation

Most crypto licensing routes require a documented compliance framework before submission, not only after approval.

  • Required
    AML/CFT policy and risk assessmentDocument your customer risk model and control framework.
  • Required
    Customer due diligence (CDD) procedures
  • Required
    Enhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
  • Required
    Transaction monitoring system and rules
  • Required
    Sanctions screening procedures
  • Required
    Suspicious activity reporting (SAR) process
  • Required
    MLRO / Compliance officer appointmentLocal accountability may be required.
  • Recommended
    Board-approved governance charter
  • Conditional
    Outsourcing policy and monitoringRequired if functions are outsourced.
  • Recommended
    ICT / cybersecurity policy
  • Required
    Complaints handling procedure
  • Required
    Annual external audit engagementRequired for ongoing supervision compliance.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Documents to prepare

Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.

0 / 12 required
Required
Recommended
Depends on scope

Corporate documents

AML and compliance

Operational

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Risk assessment

Main risk dimensions for the Cyprus route.

Banking difficulty
High

Route risk rating — banking difficulty: Medium to high. Authorisation does not guarantee bank account opening.

Mitigation: Start banking outreach and compliance preparation before the application.

Setup complexity
High

Route risk rating — setup complexity: High.

Maintenance cost
High

Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.

Regulatory reputation
High

Route risk rating — regulatory reputation: High.

Regulatory risk
Medium

Route risk rating — regulatory risk: Low to medium. Weak compliance, vague scope or insufficient controls increase review risk.

Mitigation: Prepare an evidence-based compliance file before submission.

This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.

Cyprus vs other MiCA and VASP routes

Compare Cyprus with Lithuania and Poland for other medium-reputation EU routes, Malta for a more established crypto regulator profile, Germany for a premium banking and reputation narrative, and Dubai VASP or other non-EU routes when EU/EEA passporting is not the commercial driver.

Current

Cyprus

MICA

Price
17 000 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

Lithuania

MICA

Price
17 300 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
Medium

+ Baltic EU MiCA route with Bank of Lithuania supervision

− Still requires local substance, audit and scope-specific controls

View route

Malta

MICA

Price
20 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

+ More established crypto regulator profile for reputation-led projects

− Usually heavier and more expensive than Cyprus

View route

Poland

MICA

Price
17 800 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium
Reputation
Medium

+ Central EU comparison route for cost-conscious CASP planning

− Route choice still depends on substance, banking and service scope

View route

Dubai (VASP)

VASP

Price
22 300 EUR
Timeline
From 6 months
Passporting
No EU/EEA passporting
Banking
Medium
Reputation
High

+ Non-EU alternative when UAE operations are the commercial driver

− Does not replace MiCA passporting for EU/EEA markets

View route

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cyprus vs other MiCA jurisdictions

Compare key parameters across MiCA-authorised jurisdictions.

Sort by:
CyprusCurrent
Price17 000 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationHigh
Lithuania
Price17 300 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationMedium
Malta
Price20 700 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationHigh
Poland
Price17 800 EUR
TimelineFrom 6 months
BankingMedium
ReputationMedium

Check your readiness for Cyprus MiCA authorisation

Documented AML/CFT policies, risk assessment, compliance officer.

Share capital

From 50 000 EUR minimum capital required.

AML/CFT framework

Documented AML/CFT policies, risk assessment, compliance officer.

Governance structure

Board, management, accountability chain defined.

Banking preparation

Banking strategy and identified partners.

Local substance plan

Local staff and office in Cyprus.

Readiness status

Answer the criteria on the left to see your readiness status.

Frequently asked questions

No. Cyprus should not be treated as a low-budget or fast offshore setup. The CSV facts show local staff, physical office, audit, share capital from 50 000 EUR, a 10,000 EUR state fee and annual supervision from 10000 EUR.

It can support EU/EEA passporting for approved CASP services, subject to the required notification process. Passporting should be tied to the authorised service scope, target markets and operating model, not treated as automatic coverage for every future activity.

Exchange, brokerage and wallet services are the clearest fits in this content model. Custody, advisory, staking and payment-adjacent models need scope review, while DeFi is not a clean standard CASP fit without separate legal analysis.

The main friction points are unclear CASP service scope, weak local substance, generic AML policies, underdeveloped safeguarding or custody controls, late banking preparation and payment, staking or DeFi features that have not been scoped legally.

No. Banks, EMIs, PIs and PSPs still assess ownership, source of funds, client geography, fiat flows, token policy, AML controls, safeguarding and risk appetite. Banking and PSP preparation should start before submission.

The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.

Your dedicated specialists

  • Enrico Kärvinen

    Enrico

  • Rein Tammik

    Rein

  • Jurata Žukaitė

    Jurata

  • Andrej Kazlauskas

    Andrej

  • Marta Värna

    Marta

  • Katrin Lepik

    Katrin

  • Inga Stankavičiūtė

    Inga

Request a Cyprus MiCA assessment

Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.

Leave open if you want a country comparison.
Select every activity you plan to offer. The licence route may change if you include custody, exchange, trading platform or fiat flows.
Include service fees, regulator fees, share capital, local office or staff, audit and ongoing compliance.

By submitting this form, you agree to be contacted about your crypto licensing request. Do not include passwords, private keys or confidential customer data.