EU/EEA PassportingMiCA CASP authorisation

MiCA Crypto Licence in Spain

Spain is a mid-to-high reputation MiCA CASP authorisation route for crypto businesses that need EU/EEA passporting, CNMV supervision and a serious regulated operating model. It is not a low-budget or fast offshore setup.

Processing time
From 6 months
Service price
23 700 EUR
Required share capital
From 50 000 EUR
State fee
No state fee
Annual supervision fee
No annual fee
Banking difficulty
Medium to high
RegulatorComisión Nacional del Mercado de Valores (CNMV)

Regulatory status should be confirmed by local counsel before relying on this route.

What is Spain MiCA CASP authorisation?

Spain MiCA CASP authorisation is the CNMV-supervised route for crypto-asset service providers that want an EU home member state under MiCA. It is built for regulated CASP operations and EU/EEA market access, not for a fast offshore registration.

MICA
Jurisdiction
Spain
Regulator
Comisión Nacional del Mercado de Valores (CNMV)
Regime
MICA
Legal basis
Regime: MiCA CASP authorisation with the Spanish National Securities Market Commission (CNMV) as regulator.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

EU/EEA passporting from Spain

Spain can support EU/EEA passporting for approved MiCA CASP services, but passporting must be tied to the authorised service scope. It should not be sold as blanket EU coverage for future products, DeFi activity, payment services or investment services.

  • Exchange

    Included

    Exchange operations fit within the permitted activities of this route.

  • Custody

    Included

    Custody is within scope; review controls requirements.

  • Brokerage

    Included

    Brokerage or OTC activity typically fits within scope.

  • Wallet provider

    Included

    Exchange operations fit within the permitted activities of this route.

  • EU market

    Included

    EU/EEA passporting available.

  • Startups

    Excluded

    High setup complexity means significant budget is needed.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Spain as a MiCA home member state

Spain fits teams that want an EU market-facing CASP route with a recognised securities-market regulator and can support the operational burden of a regulated business. It is strongest for companies that treat Spain as a real supervisory home rather than a nominal filing location.

  • Regulatory track record

    Positive

    High

  • Banking access for crypto firms

    Negative

    Medium to high

  • Regulatory risk

    Caution

    Low to medium

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Spain MiCA application bottlenecks

Spain bottlenecks are likely to come from file quality, service-scope precision, local substance and counterparty readiness rather than only the headline six-month timeline. A weak application can lose time in remediation and banking due diligence.

  • Unclear CASP service scope or passporting plan across EU/EEA markets

    High

  • Management, compliance or AML ownership that does not match a Spanish regulated operating model

    High

  • Weak custody, safeguarding, reconciliation, outsourcing or technology-resilience evidence

    High

  • Generic AML, sanctions, travel-rule or token admission policies

    High

  • Banking and PSP preparation started too late in the application process

    High

  • Budgeting only the application service price while underestimating staff, office, audit, share capital and maintenance

    High

  • Payment, staking, DeFi, securities-token or e-money token features added without separate perimeter analysis

    High

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Activity fit for this route

Review which crypto activities fit within the scope of this route.

Exchange
Suitable

Exchange operations fit within the permitted activities of this route.

Custody
Suitable

Custody is within scope; review controls requirements.

Brokerage
Suitable

Brokerage or OTC activity typically fits within scope.

Wallet provider
Suitable

Exchange operations fit within the permitted activities of this route.

EU market
Suitable

EU/EEA passporting available.

Startups
Not suitable

High setup complexity means significant budget is needed.

Not sure if your model fits? Request a licensing assessment

Is Spain MiCA authorisation right for your project?

Best for

  • EU passporting and regulated CASP operations
  • EU/EEA market access

Not suitable for

  • Low-budget or fast offshore setup
  • Projects without a prepared banking strategy

Banking difficulty is high for this route. Prepare a banking strategy before committing to the Spain route.

Core requirements

Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.

Required share capitalFrom 50 000 EUR
Required
Local staffRequired
Required
Physical officeRequired
Required
AuditRequired
Required

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Local substance, office, staff and audit

The CSV facts mark local staff, physical office and audit as required. Spain should therefore be planned as a real operating route, with accountable people, local presence and audit readiness included from the start.

Local staff

Required

Required

At least one locally-accountable staff member or director is expected.

Physical office

Required

Required

A genuine office presence is expected, not a nominal registered address.

Audit

Required

Required

External audit is required for ongoing supervision compliance.

Planning notes

  • Define Spain-based management, compliance ownership, AML accountability, reporting lines and regulator-facing decision-making.
  • Document outsourced group functions, technology providers, board oversight, audit arrangements and incident escalation before filing.
  • Budget the 23,700 EUR service price, share capital from 50,000 EUR, office, staff, audit and ongoing compliance as separate cost lines even where the CSV indicates no state fee and no annual fee.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Service price (professional fees)Application preparation and professional services.
23 700 EUR EURFixed
State fee
No state feeFrom
Annual supervision feeRecurring annual cost after authorisation.
No annual feeNot applicable
Required share capitalMust be held, not an expenditure.
From 50 000 EURFrom
High ongoing cost

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Cost breakdown — Spain

Budget for service price, regulatory fees, share capital and ongoing costs separately.

Cost itemAmount
Service priceApplication preparation and professional services.€23,700
Required share capitalMust be held, not an expenditure.€50,000

Summary

One-off costs
€73,700
Annual (year 1)
€0
Total year 1
€73,700

Adjust to convert to your base currency.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Application process

The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Spain — From 6 months.

Total timelineFrom 6 months

  1. Pre-assessment and scope review

    1–3 weeks

    Define the activity scope, governance model and target markets before formal preparation.

  2. Company setup in Spain

    2–6 weeks

    Establish legal entity, appoint local staff and set up local operating structure.

  3. Documentation and compliance packBottleneck risk

    3–8 weeks

    Prepare AML/CFT policies, governance documents, controls framework and application materials.

  4. Application submission to Comisión Nacional del Mercado de Valores

    1–2 weeks

    Submit complete application with all required documentation.

  5. Regulator reviewBottleneck risk

    From 6 months

    Regulator reviews the application. May request clarifications. Incomplete files extend this phase.

    Depends on: File quality and completeness

  6. Authorisation or registration confirmation

    1–4 weeks

    Regulator confirms authorisation or registration. Commence operations.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

What can delay or increase cost

These factors are most likely to affect timelines and budgets for this route.

High setup complexity
High

Setup complexity is rated high for Spain. Company setup, governance and documentation take longer than average.

Likely impactAdd 4–8 weeks to the preparation phase.
MitigationStart company setup and governance planning immediately after scope confirmation.
Banking difficulty
High

Banking difficulty is rated high. Opening accounts for crypto businesses in Spain requires extensive documentation.

Likely impactBanking can delay or block operations for 3–6 months after authorisation.
MitigationIdentify and pre-qualify banking partners before submitting the application.
High maintenance cost
Medium

Ongoing supervision, audit and compliance costs are above average. Budget for these separately from the application fee.

Likely impactRecurring annual cost significantly above the one-time service price.
MitigationModel annual compliance costs before committing to this route.
Application completeness
Medium

Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.

Likely impactEach regulator query adds 2–6 weeks to the review phase.
MitigationUse a structured compliance pack. Review file completeness before submission.

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Banking and PSP strategy in Spain

Spain is not positioned as an automatic banking route. The CSV rates banking as medium to high difficulty and PSP availability as medium, so the banking package should be prepared alongside the MiCA file rather than after approval.

Banking difficulty
High

Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.

Medium PSP availability
Medium

Reflects availability of payment service providers willing to onboard crypto-licensed entities.

A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.

Preparation checklist

  • Prepare ownership, source-of-funds, source-of-wealth, flow-of-funds, client geography, token admission and transaction monitoring evidence early.
  • Explain custody, safeguarding, reconciliation, fiat settlement, chargeback exposure and outsourced operations before approaching banks or PSPs.
  • Expect enhanced diligence for exchange, custody, cross-border fiat flows, higher-risk client geography and complex token listings.

When Spain MiCA is not the right route

Spain should not be chosen only because it offers EU/EEA passporting. The route still requires substance, audit, capital, compliance ownership and a business model that fits MiCA CASP authorisation.

  • The project is a low-budget startup or needs a fast offshore launch.

  • The team cannot fund local staff, physical office, audit, share capital and ongoing compliance.

  • The target market is mainly outside the EU/EEA and passporting is not commercially important.

  • The product is mainly DeFi, staking, payments, token issuance or securities-like activity and needs a different regulatory route first.

  • The company wants a light registration story rather than a regulated EU CASP authorisation.

Consider instead

  • Malta MICA — Established MiCA route with strong crypto regulatory positioning
  • Germany MICA — Premium regulator signal for institutional-facing CASPs
  • Lithuania MICA — More cost-conscious EU passporting route

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Business model fit — Spain

Assess how well this route covers your planned activities.

Fit score

Good fit
4/6
Partial fit
2/6
Poor fit
0/6

Spain is a strong fit for your activity profile

This route covers your key activities. Proceed with detailed legal review.

CNMV profile for crypto firms

Regulatory authority · Spain

Comisión Nacional del Mercado de Valores (CNMV)

The CNMV profile should be treated as a financial-market supervisory route. A Spain MiCA file needs a clear CASP service perimeter, fit governance, AML controls, operational resilience, safeguarding logic and evidence that local substance is real.

Likely areas of scrutiny
  • Expect review pressure around service scope, management fitness, AML and sanctions controls, outsourcing, technology resilience and client-asset protection.
  • Custody, exchange and fiat-heavy models need a stronger evidence package than narrow brokerage or advisory models.
  • Generic policy packs are weak evidence; policies should match clients, tokens, jurisdictions, fiat flows, outsourcing and risk appetite.
Regulatory reputation
High

Strong international recognition and established supervision track record.

Setup complexity
High

Reflects documentation depth, governance requirements and expected review friction.

Regulatory risk
Medium

Reflects likelihood of delays, additional information requests or policy uncertainty.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Compliance documentation

Most crypto licensing routes require a documented compliance framework before submission, not only after approval.

  • Required
    AML/CFT policy and risk assessmentDocument your customer risk model and control framework.
  • Required
    Customer due diligence (CDD) procedures
  • Required
    Enhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
  • Required
    Transaction monitoring system and rules
  • Required
    Sanctions screening procedures
  • Required
    Suspicious activity reporting (SAR) process
  • Required
    MLRO / Compliance officer appointmentLocal accountability may be required.
  • Recommended
    Board-approved governance charter
  • Conditional
    Outsourcing policy and monitoringRequired if functions are outsourced.
  • Recommended
    ICT / cybersecurity policy
  • Required
    Complaints handling procedure
  • Required
    Annual external audit engagementRequired for ongoing supervision compliance.

Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.

Documents to prepare

Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.

0 / 12 required
Required
Recommended
Depends on scope

Corporate documents

AML and compliance

Operational

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Risk assessment

Main risk dimensions for the Spain route.

Banking difficulty
High

Route risk rating — banking difficulty: Medium to high. Authorisation does not guarantee bank account opening.

Mitigation: Start banking outreach and compliance preparation before the application.

Setup complexity
High

Route risk rating — setup complexity: High.

Maintenance cost
High

Route risk rating — maintenance cost: High. Budget for ongoing compliance, fees and supervision separately.

Regulatory reputation
High

Route risk rating — regulatory reputation: High.

Regulatory risk
Medium

Route risk rating — regulatory risk: Low to medium. Weak compliance, vague scope or insufficient controls increase review risk.

Mitigation: Prepare an evidence-based compliance file before submission.

This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.

Spain vs other crypto licensing routes

Compare Spain with Malta for an established crypto-regulatory profile, Germany for a premium regulator signal, Lithuania or Poland for more cost-conscious EU passporting, and non-EU VASP or DAB routes where EU/EEA passporting is not the main business driver.

Current

Spain

MICA

Price
23 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

Malta

MICA

Price
20 700 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
High

+ Established MiCA route with strong crypto regulatory positioning

− State and annual fees may increase the overall budget

View route

Germany

MICA

Price
28 200 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
High difficulty
Reputation
Very high

+ Premium regulator signal for institutional-facing CASPs

− Heavier cost, complexity and supervisory burden

View route

Lithuania

MICA

Price
17 300 EUR
Timeline
From 6 months
Passporting
EU/EEA
Banking
Medium to high
Reputation
Medium

+ More cost-conscious EU passporting route

− Lower reputation signal than larger EU markets

View route

Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.

Spain vs other MiCA jurisdictions

Compare key parameters across MiCA-authorised jurisdictions.

Sort by:
SpainCurrent
Price23 700 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationHigh
Malta
Price20 700 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationHigh
Germany
Price28 200 EUR
TimelineFrom 6 months
BankingHigh difficulty
ReputationVery high
Lithuania
Price17 300 EUR
TimelineFrom 6 months
BankingMedium to high
ReputationMedium

Check your readiness for Spain MiCA authorisation

Documented AML/CFT policies, risk assessment, compliance officer.

Share capital

From 50 000 EUR minimum capital required.

AML/CFT framework

Documented AML/CFT policies, risk assessment, compliance officer.

Governance structure

Board, management, accountability chain defined.

Banking preparation

Banking strategy and identified partners.

Local substance plan

Local staff and office in Spain.

Readiness status

Answer the criteria on the left to see your readiness status.

Frequently asked questions

No. Spain is positioned as a medium-to-high complexity EU CASP route. It may have no state fee and no annual fee in the CSV facts, but it still requires staff, office, audit, share capital and a regulator-ready operating model.

Spain MiCA CASP authorisation can support EU/EEA passporting for approved CASP services, subject to the relevant notification process. Passporting should be tied to the authorised service scope, not treated as automatic coverage for every crypto activity.

Common friction points include unclear CASP service scope, weak governance, underdeveloped local substance, custody or safeguarding gaps, generic AML policies, late banking preparation and payment, staking, DeFi or securities-like features that have not been scoped separately.

No. The CSV facts rate banking as medium to high difficulty and PSP availability as medium. Banks, EMIs, PIs and PSPs still review ownership, funds, flows, clients, tokens, AML controls and risk appetite separately.

Spain is usually not the first choice when the business cannot support local staff, office, audit and ongoing compliance, when EU/EEA passporting is not commercially important, or when a lighter non-EU VASP or registration route fits the operating model better.

The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.

Your dedicated specialists

  • Enrico Kärvinen

    Enrico

  • Rein Tammik

    Rein

  • Jurata Žukaitė

    Jurata

  • Andrej Kazlauskas

    Andrej

  • Marta Värna

    Marta

  • Katrin Lepik

    Katrin

  • Inga Stankavičiūtė

    Inga

Request a Spain MiCA assessment

Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.

Leave open if you want a country comparison.
Select every activity you plan to offer. The licence route may change if you include custody, exchange, trading platform or fiat flows.
Include service fees, regulator fees, share capital, local office or staff, audit and ongoing compliance.

By submitting this form, you agree to be contacted about your crypto licensing request. Do not include passwords, private keys or confidential customer data.