EU/EEA PassportingMiCA CASP authorisation

MiCA Crypto Licence in Norway

Norway is an EEA MiCA route for teams that need Finanstilsynet-supervised CASP authorisation, EU/EEA passporting potential and Nordic credibility. It should be planned as a high-complexity, substance-heavy route rather than a low-budget or fast offshore setup.

Processing time
From 6 months
Service price
27 800 EUR
Required share capital
From 50 000 EUR
State fee
Approx. 8,000 EUR
Annual supervision fee
Approx. 5,000 EUR
Banking difficulty
Medium to high
RegulatorFinancial Supervisory Authority of Norway (Finanstilsynet)

This page is based on the provided CSV facts only; Finanstilsynet MiCA guidance, Norwegian EEA implementation details, filing process, fees and supervisory expectations must be checked before legal advice or client onboarding.

Regulatory status should be confirmed by local counsel before relying on this route.

What is MiCA CASP authorisation in Norway?

Norway MiCA CASP authorisation is the Finanstilsynet-supervised Norwegian route for crypto-asset service providers under the EEA MiCA framework. It is relevant for businesses that need a regulated operating base, defined CASP service scope, governance, AML controls, safeguarding and an EU/EEA market access plan.

MICA
Jurisdiction
Norway
Regulator
Financial Supervisory Authority of Norway (Finanstilsynet)
Regime
MICA
Legal basis
Regime: MiCA CASP authorisation, based on the provided CSV facts.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

EU/EEA passporting and approved CASP service scope

Norway is positioned as an EU/EEA passporting route in the CSV. Passporting should be planned around the CASP services approved in the Norwegian file, the target markets and the notification process, not as a generic claim that every crypto activity is covered.

  • Exchange

    Included

    Exchange operations fit within the permitted activities of this route.

  • Custody

    Included

    Custody is within scope; review controls requirements.

  • Brokerage

    Included

    Brokerage or OTC activity typically fits within scope.

  • Wallet provider

    Included

    Exchange operations fit within the permitted activities of this route.

  • EU market

    Included

    EU/EEA passporting available.

  • Startups

    Excluded

    High setup complexity means significant budget is needed.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Norway as a MiCA home jurisdiction

Norway fits teams that value Finanstilsynet supervision, Nordic credibility and an EEA-facing regulated CASP base. The CSV baseline shows a service price of 27 800 EUR, approximate state fee of 8,000 EUR, approximate annual supervision fee of 5,000 EUR and share capital from 50 000 EUR.

  • Regulatory track record

    Positive

    High

  • Banking access for crypto firms

    Negative

    Medium to high

  • Regulatory risk

    Caution

    Low to medium

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Norway MiCA application bottlenecks

The main Norway bottlenecks are likely to come from weak scope design, insufficient local substance, unresolved custody or safeguarding controls, late banking preparation and policies that do not match the actual business model.

  • Overbroad CASP service scope without enough governance and control evidence.

    High
  • Custody, exchange or wallet architecture that is not connected to safeguarding and incident-response procedures.

    High
  • Local staff and office plans that look nominal rather than operational.

    High
  • Banking, EMI, PI or PSP package prepared too late.

    High
  • Unclear treatment of staking, payment-adjacent flows, token admission or cross-border marketing.

    High

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Activity fit for this route

Review which crypto activities fit within the scope of this route.

Exchange
Suitable

Exchange operations fit within the permitted activities of this route.

Custody
Suitable

Custody is within scope; review controls requirements.

Brokerage
Suitable

Brokerage or OTC activity typically fits within scope.

Wallet provider
Suitable

Exchange operations fit within the permitted activities of this route.

EU market
Suitable

EU/EEA passporting available.

Startups
Not suitable

High setup complexity means significant budget is needed.

Not sure if your model fits? Request a licensing assessment

Is Norway MiCA authorisation right for your project?

Best for

  • EU passporting and regulated CASP operations
  • EU/EEA market access

Not suitable for

  • Low-budget or fast offshore setup
  • Projects without a prepared banking strategy

Banking difficulty is high for this route. Prepare a banking strategy before committing to the Norway route.

Core requirements

Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.

Required share capitalFrom 50 000 EUR
Required
Local staffRequired
Required
Physical officeRequired
Required
AuditRequired
Required

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Local substance in Norway

Norway should be budgeted as a substance-based route. Local staff, physical office and audit are required in the CSV facts, so the application should describe who controls compliance, risk, technology, client onboarding and regulator-facing accountability in practice.

Local staff

Required

Required

At least one locally-accountable staff member or director is expected.

Physical office

Required

Required

A genuine office presence is expected, not a nominal registered address.

Audit

Required

Required

External audit is required for ongoing supervision compliance.

Planning notes

  • Prepare a staffing model that connects management, compliance, AML and operational responsibilities to the Norway entity.
  • Budget office, audit, local governance and ongoing compliance separately from the 27 800 EUR service price.
  • Avoid a nominal footprint that cannot explain how Norway-based governance supervises cross-border CASP activity.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Service price (professional fees)Application preparation and professional services.
27 800 EUR EURFixed
State fee
Approx. 8,000 EURFrom
Annual supervision feeRecurring annual cost after authorisation.
Approx. 5,000 EURFrom
Required share capitalMust be held, not an expenditure.
From 50 000 EURFrom
High ongoing cost

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown — Norway

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Cost itemAmount
Service priceApplication preparation and professional services.€27,800
State fee€1
Required share capitalMust be held, not an expenditure.€50,000

Summary

One-off costs
€77,801
Annual (year 1)
€0
Total year 1
€77,801

Adjust to convert to your base currency.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Application process

The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Norway — From 6 months.

Total timelineFrom 6 months
  1. Pre-assessment and scope review

    1–3 weeks

    Define the activity scope, governance model and target markets before formal preparation.

  2. Company setup in Norway

    2–6 weeks

    Establish legal entity, appoint local staff and set up local operating structure.

  3. Documentation and compliance packBottleneck risk

    3–8 weeks

    Prepare AML/CFT policies, governance documents, controls framework and application materials.

  4. Application submission to Financial Supervisory Authority of Norway

    1–2 weeks

    Submit complete application with all required documentation.

  5. Regulator reviewBottleneck risk

    From 6 months

    Regulator reviews the application. May request clarifications. Incomplete files extend this phase.

    Depends on: File quality and completeness

  6. Authorisation or registration confirmation

    1–4 weeks

    Regulator confirms authorisation or registration. Commence operations.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

What can delay or increase cost

These factors are most likely to affect timelines and budgets for this route.

High setup complexity
High

Setup complexity is rated high for Norway. Company setup, governance and documentation take longer than average.

Likely impactAdd 4–8 weeks to the preparation phase.
MitigationStart company setup and governance planning immediately after scope confirmation.
Banking difficulty
High

Banking difficulty is rated high. Opening accounts for crypto businesses in Norway requires extensive documentation.

Likely impactBanking can delay or block operations for 3–6 months after authorisation.
MitigationIdentify and pre-qualify banking partners before submitting the application.
High maintenance cost
Medium

Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.

Likely impactRecurring annual cost significantly above the one-time service price.
MitigationModel annual compliance costs before committing to this route.
Application completeness
Medium

Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.

Likely impactEach regulator query adds 2–6 weeks to the review phase.
MitigationUse a structured compliance pack. Review file completeness before submission.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Banking and PSP strategy

Banking difficulty is marked medium to high and payment provider availability is marked medium in the CSV facts. Norway can support a credible regulated EEA story, but account opening and payment provider onboarding should be prepared in parallel with the MiCA file.

Banking difficulty
High

Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.

Medium PSP availability
Medium

Reflects availability of payment service providers willing to onboard crypto-licensed entities.

A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.

Preparation checklist

  • Prepare flow-of-funds diagrams, source-of-funds evidence, client-risk segmentation and token admission logic before bank or PSP outreach.
  • Custody, exchange and cross-border fiat flows should be matched with stronger controls and operational evidence.
  • Do not assume MiCA authorisation or Finanstilsynet supervision automatically solves banking or PSP onboarding.

When Norway MiCA is not the right route

Norway should not be the default choice for every crypto company. It is a high-complexity EEA CASP route and should be compared with other MiCA countries or non-EU alternatives when the business does not need EU/EEA passporting.

  • The project mainly needs a low-budget or fast offshore setup.

  • The team cannot support local staff, office, audit, share capital and ongoing compliance.

  • The target market is outside the EU/EEA and passporting has little commercial value.

  • The product is early-stage DeFi, staking-heavy or payment-adjacent and has not completed service-scope review.

Consider instead

  • Liechtenstein MICAPremium EEA route with strong financial-services reputation
  • Germany MICAVery high reputation and strong institutional credibility
  • Malta MICAEstablished EU crypto authorisation profile

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Business model fit — Norway

Assess how well this route covers your planned activities.

Fit score

Good fit
4/6
Partial fit
2/6
Poor fit
0/6

Norway is a strong fit for your activity profile

This route covers your key activities. Proceed with detailed legal review.

Finanstilsynet regulator profile

Regulatory authority · Norway

Financial Supervisory Authority of Norway (Finanstilsynet)

A Norway MiCA file should read like a mature financial-services application. Finanstilsynet positioning is strongest when the applicant can show clear services, accountable management, Norwegian substance, AML controls, safeguarding and a realistic banking or PSP package.

Likely areas of scrutiny
  • The application needs to explain how the Norway entity controls day-to-day CASP operations.
  • Exchange, custody and fiat-touching models need stronger documentation than narrow brokerage or advisory models.
  • Fees, timelines, forms, EEA implementation details and Finanstilsynet process should be rechecked before client-facing reliance.
Regulatory reputation
High

Strong international recognition and established supervision track record.

Setup complexity
High

Reflects documentation depth, governance requirements and expected review friction.

Regulatory risk
Medium

Reflects likelihood of delays, additional information requests or policy uncertainty.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Compliance documentation

Most crypto licensing routes require a documented compliance framework before submission, not only after approval.

  • Required
    AML/CFT policy and risk assessmentDocument your customer risk model and control framework.
  • Required
    Customer due diligence (CDD) procedures
  • Required
    Enhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
  • Required
    Transaction monitoring system and rules
  • Required
    Sanctions screening procedures
  • Required
    Suspicious activity reporting (SAR) process
  • Required
    MLRO / Compliance officer appointmentLocal accountability may be required.
  • Recommended
    Board-approved governance charter
  • Conditional
    Outsourcing policy and monitoringRequired if functions are outsourced.
  • Recommended
    ICT / cybersecurity policy
  • Required
    Complaints handling procedure
  • Required
    Annual external audit engagementRequired for ongoing supervision compliance.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Documents to prepare

Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.

0 / 12 required
Required
Recommended
Depends on scope

Corporate documents

AML and compliance

Operational

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Risk assessment

Main risk dimensions for the Norway route.

Banking difficulty
High

Route risk rating — banking difficulty: Medium to high. Authorisation does not guarantee bank account opening.

Mitigation: Start banking outreach and compliance preparation before the application.

Setup complexity
High

Route risk rating — setup complexity: High.

Maintenance cost
High

Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.

Regulatory reputation
High

Route risk rating — regulatory reputation: High.

Regulatory risk
Medium

Route risk rating — regulatory risk: Low to medium. Weak compliance, vague scope or insufficient controls increase review risk.

Mitigation: Prepare an evidence-based compliance file before submission.

This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.

Norway vs other MiCA countries

Compare Norway with Liechtenstein for a premium EEA option, Germany for very high institutional credibility, and Malta for an established EU crypto authorisation profile. If EU/EEA passporting is not needed, compare non-EU VASP or registration routes with a clear scope gap.

Current

Norway

MICA

Price
27 800 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

Liechtenstein

MICA

Price
24 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium
Reputation
Very high

+ Premium EEA route with strong financial-services reputation

Still requires serious substance, governance and application preparation

View route

Germany

MICA

Price
28 200 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
High
Reputation
Very high

+ Very high reputation and strong institutional credibility

Higher complexity and a demanding regulator-facing file

View route

Malta

MICA

Price
20 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

+ Established EU crypto authorisation profile

Not a low-substance or low-compliance shortcut

View route

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Norway vs other MiCA jurisdictions

Compare key parameters across MiCA-authorised jurisdictions.

Sort by:

Check your readiness for Norway MiCA authorisation

Documented AML/CFT policies, risk assessment, compliance officer.

Share capital

From 50 000 EUR minimum capital required.

AML/CFT framework

Documented AML/CFT policies, risk assessment, compliance officer.

Governance structure

Board, management, accountability chain defined.

Banking preparation

Banking strategy and identified partners.

Local substance plan

Local staff and office in Norway.

Readiness status

Answer the criteria on the left to see your readiness status.

Frequently asked questions

No. Norway should be treated as a high-complexity EEA CASP route with required staff, office and audit. The CSV baseline starts from 6 months and is not positioned as a fast offshore setup.

Yes, the provided CSV facts identify EU/EEA passporting. In practice, passporting must follow the approved CASP service scope, EEA implementation, notifications and ongoing compliance, so it should not be described as automatic coverage for every crypto activity.

Exchange, custody, brokerage and wallet services are the clearest fits when the business can evidence governance, AML controls and safeguarding. Advisory, staking and payment-adjacent models need scope review; DeFi should not be treated as a standard fit without legal analysis.

The common friction points are unclear CASP service scope, weak local substance, incomplete AML and governance evidence, unresolved custody or safeguarding controls, and banking or PSP preparation that does not match the operating model.

No. Banking is marked medium to high and payment provider availability is marked medium in the CSV facts. Banks and PSPs still review flows, clients, controls, source of funds and the exact business model.

The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.

Your dedicated specialists

  • Enrico Kärvinen

    Enrico

  • Rein Tammik

    Rein

  • Jurata Žukaitė

    Jurata

  • Andrej Kazlauskas

    Andrej

  • Marta Värna

    Marta

  • Katrin Lepik

    Katrin

  • Inga Stankavičiūtė

    Inga

Request a Norway MiCA assessment

Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.

Leave open if you want a country comparison.
Select every activity you plan to offer. The licence route may change if you include custody, exchange, trading platform or fiat flows.
Include service fees, regulator fees, share capital, local office or staff, audit and ongoing compliance.

By submitting this form, you agree to be contacted about your crypto licensing request. Do not include passwords, private keys or confidential customer data.