VASP Licence in Bosnia and Herzegovina
Bosnia and Herzegovina is a low-cost regional VASP and registration-style route for teams that can accept no EU passporting, local substance requirements and elevated banking and reputation friction.
CSV-only page: ABRS scope, activity permissions and process should be reviewed by local counsel before client use.
Regulatory status should be confirmed by local counsel before relying on this route.
What is the Bosnia and Herzegovina VASP route?
Bosnia and Herzegovina is positioned here as a regional VASP licence or registration-style route under the Banking Agency of Republika Srpska. It is a cost-sensitive setup path, not an EU passporting authorisation or a high-reputation exchange licence.
- Jurisdiction
- Bosnia and Herzegovina
- Regulator
- Banking Agency of Republika Srpska (ABRS)
- Regime
- VASP
- Legal basis
- Best fit: low-cost regional VASP setup with a controlled activity scope.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
VASP activity scope
The activity perimeter should be mapped before any application work. A Bosnia and Herzegovina VASP route should not be described as one permission covering all virtual asset services, especially where custody, exchange order flow or fiat payment rails are involved.
Exchange
ConditionalExchange activity may require additional scope or separate licensing.
Exchange
Exchange activity may require additional scope or separate licensing.
ConditionalCustody
Not coveredCustody may require separate review or additional controls.
Custody
Custody may require separate review or additional controls.
Not coveredBrokerage
ConditionalBrokerage or OTC activity typically fits within scope.
Brokerage
Brokerage or OTC activity typically fits within scope.
ConditionalWallet provider
ConditionalExchange activity may require additional scope or separate licensing.
Wallet provider
Exchange activity may require additional scope or separate licensing.
ConditionalEU market
Not coveredEU passporting not available from this route.
EU market
EU passporting not available from this route.
Not coveredStartups
LicensedLower complexity makes this accessible for smaller teams.
Startups
Lower complexity makes this accessible for smaller teams.
Licensed
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Operating model and file preparation
A credible file should connect the local entity, ABRS-facing scope, responsible persons, AML controls, audit readiness and local operating setup. The low setup cost does not remove the need to evidence how the business will actually operate.
Prepare a narrow activity description instead of a broad all-services VASP narrative.
Operational control area that should be covered in the applicant's governance and compliance model.
Prepare a narrow activity description instead of a broad all-services VASP narrative.Operational control area that should be covered in the applicant's governance and compliance model.
Document AML, onboarding, transaction monitoring, outsourcing and complaints handling.
Operational control area that should be covered in the applicant's governance and compliance model.
Document AML, onboarding, transaction monitoring, outsourcing and complaints handling.Operational control area that should be covered in the applicant's governance and compliance model.
Align audit, local staff and physical office evidence with the proposed activity scope.
Operational control area that should be covered in the applicant's governance and compliance model.
Align audit, local staff and physical office evidence with the proposed activity scope.Operational control area that should be covered in the applicant's governance and compliance model.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Regional low-cost route vs high-reputation alternatives
The commercial tradeoff is direct: Bosnia and Herzegovina can be attractive for low-cost regional positioning, but it carries medium-to-high banking difficulty and low-to-medium regulatory reputation.
Regulatory reputation
Onshore (this jurisdiction)
Low to medium
Offshore comparison
Lower recognition
Regulatory reputationLow to mediumLower recognitionBanking access
Onshore (this jurisdiction)
Challenging
Offshore comparison
Often restricted
Banking accessChallengingOften restrictedCompliance burden
Onshore (this jurisdiction)
High
Offshore comparison
Variable
Compliance burdenHighVariable
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
When Bosnia and Herzegovina VASP is not suitable
This route is weak where the commercial plan depends on reputation, institutional custody, exchange-grade counterparties, EU passporting or easy banking.
The project needs EU/EEA passporting or MiCA positioning.
The business is a reputation-sensitive exchange or custody project.
The launch plan depends on bank or PSP access being available quickly.
The team cannot maintain local staff, physical office and audit evidence.
Consider instead
- Malta (MiCA) MICA — EU/EEA passporting and stronger regulatory perception
- Dubai (VARA) VASP — Stronger MENA positioning for regulated VASP projects
- Canada (MSB) MSB — Fast registration-style route with better market recognition
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Activity fit for this route
Review which crypto activities fit within the scope of this route.
Exchange activity may require additional scope or separate licensing.
Custody may require separate review or additional controls.
Brokerage or OTC activity typically fits within scope.
Exchange activity may require additional scope or separate licensing.
EU passporting not available from this route.
Lower complexity makes this accessible for smaller teams.
Not sure if your model fits? Request a licensing assessment
Business model fit — Bosnia and Herzegovina
Assess how well this route covers your planned activities.
Fit score
- Good fit
- 0/6
- Partial fit
- 4/6
- Poor fit
- 2/6
Bosnia and Herzegovina may not cover your primary activities
Consider an alternative route that better matches your activity profile.
Is Bosnia and Herzegovina VASP authorisation right for your project?
Best for
- Low-cost regional VASP setup
Not suitable for
- Reputation-sensitive exchange or custody projects
- Projects without a prepared banking strategy
Banking difficulty is high for this route. Prepare a banking strategy before committing to the Bosnia and Herzegovina route.
Core requirements
Use this section to check the main regulatory and operational requirements before committing to a jurisdiction.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Local presence and substance
The CSV snapshot requires local staff, a physical office and audit. That makes the route operationally light compared with many high-reputation regimes, but not a no-substance offshore setup.
Local staff
RequiredRequired
At least one locally-accountable staff member or director is expected.
Physical office
RequiredRequired
A genuine office presence is expected, not a nominal registered address.
Audit
RequiredRequired
External audit is required for ongoing supervision compliance.
Planning notes
- Plan for local staffing and address evidence before presenting the route to banks or PSPs.
- Keep governance and AML responsibilities tied to named people, not only external providers.
- Treat audit readiness as part of the operating model, even where annual supervision fees are listed as not applicable.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown
Budget for service price, regulatory fees, share capital and ongoing costs separately.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Cost breakdown — Bosnia and Herzegovina
Budget for service price, regulatory fees, share capital and ongoing costs separately.
| Cost item | Amount |
|---|---|
| Service priceApplication preparation and professional services. | €9,200 |
Summary
- One-off costs
- €9,200
- Annual (year 1)
- €0
- Total year 1
- €9,200
Adjust to convert to your base currency.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Application process
The sequence below shows the usual project flow. Exact steps depend on the regulator, business model and application scope. Bosnia and Herzegovina — From 2 months.
Pre-assessment and scope review
1–3 weeksDefine the activity scope, governance model and target markets before formal preparation.
Company setup in Bosnia and Herzegovina
2–6 weeksEstablish legal entity, appoint local staff and set up local operating structure.
Documentation and compliance packBottleneck risk
3–8 weeksPrepare AML/CFT policies, governance documents, controls framework and application materials.
Application submission to Banking Agency of Republika Srpska
1–2 weeksSubmit complete application with all required documentation.
Regulator reviewBottleneck risk
From 2 monthsRegulator reviews the application. May request clarifications. Incomplete files extend this phase.
Depends on: File quality and completeness
Authorisation or registration confirmation
1–4 weeksRegulator confirms authorisation or registration. Commence operations.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
What can delay or increase cost
These factors are most likely to affect timelines and budgets for this route.
Banking difficulty is rated high. Opening accounts for crypto businesses in Bosnia and Herzegovina requires extensive documentation.
Regulatory risk is rated high. Enforcement focus and compliance expectations are above average for Bosnia and Herzegovina.
Incomplete files are the most common cause of delay. Regulator queries extend review by weeks or months.
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Banking and PSP feasibility
Banking is the main weakness. The route has medium-to-high banking difficulty, low-to-medium PSP availability and low-to-medium regulatory reputation, so account opening should be treated as a separate feasibility workstream.
Reflects how challenging it is to open and maintain business bank accounts in this jurisdiction.
Reflects availability of payment service providers willing to onboard crypto-licensed entities.
A licence or registration does not guarantee bank account or payment provider approval. Banking feasibility should be reviewed before the application strategy is finalized.
Preparation checklist
- Do not promise bank or PSP onboarding from the VASP route alone.
- Prepare source-of-funds, transaction flow, token policy and AML materials before bank outreach.
- Reputation-sensitive custody or exchange projects should benchmark higher-reputation alternatives first.
Compliance documentation
Most crypto licensing routes require a documented compliance framework before submission, not only after approval.
- RequiredAML/CFT policy and risk assessmentDocument your customer risk model and control framework.
- RequiredCustomer due diligence (CDD) procedures
- RequiredEnhanced due diligence (EDD) proceduresFor high-risk clients and jurisdictions.
- RequiredTransaction monitoring system and rules
- RequiredSanctions screening procedures
- RequiredSuspicious activity reporting (SAR) process
- RequiredMLRO / Compliance officer appointmentLocal accountability may be required.
- RecommendedBoard-approved governance charter
- ConditionalOutsourcing policy and monitoringRequired if functions are outsourced.
- RecommendedICT / cybersecurity policy
- RequiredComplaints handling procedure
- RequiredAnnual external audit engagementRequired for ongoing supervision compliance.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Documents to prepare
Preparing these materials before filing reduces regulator questions and helps with banking or payment provider onboarding.
Corporate documents
AML and compliance
Operational
Fees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Regulator profile
Banking Agency of Republika Srpska (ABRS)
Moderate reputation; assess banking and partner acceptance case by case.
Reflects documentation depth, governance requirements and expected review friction.
Reflects likelihood of delays, additional information requests or policy uncertainty.
Country-specific regulatory statements should be checked against current regulator guidance before relying on this route.
Risk assessment
Main risk dimensions for the Bosnia and Herzegovina route.
Route risk rating — regulatory risk: Medium to high. Weak compliance, vague scope or insufficient controls increase review risk.
Mitigation: Prepare an evidence-based compliance file before submission.
Route risk rating — banking difficulty: Medium to high. Authorisation does not guarantee bank account opening.
Mitigation: Start banking outreach and compliance preparation before the application.
Route risk rating — setup complexity: Low.
Route risk rating — maintenance cost: Low. Budget for ongoing compliance, fees and supervision separately.
Route risk rating — regulatory reputation: Low to medium.
This content is for general orientation only. Crypto regulation changes quickly and the final scope should be confirmed through a jurisdiction-specific legal review before filing or incorporation.
Bosnia and Herzegovina vs other VASP routes
Use Bosnia and Herzegovina as a low-cost regional benchmark. Compare Malta for EU/EEA passporting, Dubai for stronger VASP perception and Canada MSB for a fast registration-style route with better market recognition.
Bosnia and Herzegovina
VASP
- Price
- 9 200 EUR
- Timeline
- From 2 months
- Passporting
- No passporting
- Banking
- Medium to high
- Reputation
- Low to medium
Malta (MiCA)
MICA
- Price
- 20 700 EUR
- Timeline
- From 6 months
- Passporting
- EU/EEA
- Banking
- Medium
- Reputation
- High
+ EU/EEA passporting and stronger regulatory perception
− Higher cost, EU substance and more demanding authorisation work
View routeDubai (VARA)
VASP
- Price
- 22 300 EUR
- Timeline
- From 6 months
- Passporting
- No passporting
- Banking
- Medium
- Reputation
- High
+ Stronger MENA positioning for regulated VASP projects
− Higher fees, supervision budget and local operating burden
View routeCanada (MSB)
MSB
- Price
- 20 600 EUR
- Timeline
- From 2 months
- Passporting
- No passporting
- Banking
- Medium
- Reputation
- High
+ Fast registration-style route with better market recognition
− Not an EU passporting route and not a full prudential licence
View routeFees, timelines and capital figures are indicative and may vary by business model, regulator feedback, application scope and third-party costs.
Bosnia and Herzegovina vs other VASP jurisdictions
Compare key parameters across VASP-regulated jurisdictions.
Check your readiness for Bosnia and Herzegovina VASP authorisation
Documented AML/CFT policies, risk assessment, compliance officer.
Documented AML/CFT policies, risk assessment, compliance officer.
Board, management, accountability chain defined.
Banking strategy and identified partners.
Local staff and office in Bosnia and Herzegovina.
Readiness status
Answer the criteria on the left to see your readiness status.
Frequently asked questions
No. Activity scope should be reviewed separately. Exchange, brokerage, wallet, custody and payment-style services can have different legal and banking implications.
It can be a low-cost regional route, but it is not a no-substance offshore setup. The CSV snapshot requires local staff, a physical office and audit.
No. The route is classified as no-passporting. EU/EEA market access should be assessed through MiCA or another appropriate EU route.
Prepare the activity scope, local staffing and office evidence, AML and sanctions controls, audit readiness, transaction flow materials and a banking or PSP feasibility package.
Not where reputation is sensitive. The route is better positioned for low-cost regional setup than for exchange-grade or custody-heavy projects that depend on strong regulatory perception.
The page is not legal advice and should not be relied on as a substitute for advice from qualified counsel in the relevant jurisdiction.
Your dedicated specialists
Enrico
Rein
Jurata
Andrej
Marta
Katrin
Inga
Request a Bosnia and Herzegovina VASP assessment
Share your planned activities, target markets and timeline. We will review which crypto licensing route is likely to fit.