Premium legal infrastructure for tokenized businesses

Premium legal identity for tokenized businesses.

We are a specialist legal firm helping crypto exchanges, custody providers, fintech startups and Web3 projects obtain regulated licenses in 17+ jurisdictions worldwide. Law-firm authority. Blockchain-native precision.

  • 17+ jurisdictions covered
  • 200+ successful licenses obtained
  • 8+ years of crypto regulation
  • 95% application success rate

01 — Who we help

Crypto, custody, DeFi — under one regulatory partner.

Most clients are not asking ‟can it be done” — they are asking ‟will the regulator agree, and will my bank accept it.” That is the exact question we answer.

Crypto Exchanges & Trading Platforms

VATP, MPI, VARA, MTL, MiCA CASP and AFSL — including the secondary onshore wrappers that real exchanges live behind.

Crypto license for an exchange →

Crypto Startups & Web3 Projects

Fastest-route licensing through MVP-friendly jurisdictions. Speed matters more than prestige in year one.

Crypto license for a startup →

DeFi, NFT & Token Issuers

Foundation structures, regulatory wrappers, token classification and treasury vehicles in BVI, Cayman, Switzerland and the UAE.

Crypto license for DeFi →


02 — Jurisdictions

17+ jurisdictions. One project manager.

All jurisdictions →

Canada

Regulator
FINTRAC + AMF (Quebec)
Timeline
8–12 weeks
Min. capital
None statutory
View licensing path →

El Salvador

Regulator
CNAD (National Commission of Digital Assets)
Timeline
4–8 weeks
Min. capital
None statutory / model-dependent
View licensing path →

United Arab Emirates

Regulator
VARA / FSRA (ADGM) / DMCC / DFSA (DIFC)
Timeline
9–14 months (VARA) · 6–10 months (ADGM)
Min. capital
USD 135,000–272,000 depending on category
View licensing path →

Panama

Regulator
No crypto-specific regulator (general law)
Timeline
1–3 weeks (incorporation)
Min. capital
None
View licensing path →

British Virgin Islands

Regulator
BVI Financial Services Commission
Timeline
8–12 weeks
Min. capital
None statutory; substance-based
View licensing path →

Cayman Islands

Regulator
CIMA (Cayman Islands Monetary Authority)
Timeline
10–16 weeks
Min. capital
Substance-based
View licensing path →

Australia

Regulator
AUSTRAC + ASIC
Timeline
DCE 6–12 weeks · AFSL 6–9 months
Min. capital
AFSL: AUD 50,000–200,000 · DCE: none
View licensing path →

United Kingdom

Regulator
Financial Conduct Authority (FCA)
Timeline
12–18 months (FCA)
Min. capital
EMI: GBP 350,000
View licensing path →

Jersey

Regulator
Jersey Financial Services Commission (JFSC)
Timeline
12–20 weeks
Min. capital
Substance-based
View licensing path →

Gibraltar

Regulator
Gibraltar Financial Services Commission (GFSC)
Timeline
16–24 weeks
Min. capital
Substance-based
View licensing path →

Switzerland

Regulator
FINMA + SROs (e.g. VQF)
Timeline
SRO 2–3 months · Fintech 6–9 months · Banking 12–18 months
Min. capital
Fintech: CHF 300,000 · Banking: CHF 10,000,000 · SRO: none
View licensing path →

Hong Kong

Regulator
SFC + HKMA + Companies Registry (TCSP)
Timeline
12+ months (VATP)
Min. capital
VATP: HKD 5–10M paid-up + HKD 3M liquid
View licensing path →

03 — Why us

What we are, and what we are not.

Specialist focus

We handle crypto licensing exclusively, not as a side practice next to corporate or M&A. Our reading list is the rulebook, not last year’s blog.

Multi-jurisdictional bench

Seventeen active jurisdictions with in-house counsel in the major hubs. One project manager coordinates across all of them.

Application success rate

We pre-qualify clients before applications, not after. If the project doesn’t fit a jurisdiction, we say so before the engagement letter is signed.

Banking matters

A licence without a bank account is a paperweight. We secure both — the regulator approval and a working banking stack — and we treat them as one engagement.

Post-license support

Year-one supervision — audit, annual returns, AML refresh, MLRO continuity — is calendared and run by the same team that obtained the licence.

Honest assessment first

If you don’t need a particular licence, we say so — even if it costs us a fee. Long-term relationships are worth more than over-sold engagements.

04 — Process

Five stages from kickoff to operational.

  1. Strategy. Map the business model to credible licence categories. Size capital, timeline, banking risk.
  2. Incorporation. Local entity, resident director, registered office, AML officer — set up in parallel.
  3. Application. AML / KYC programme, governance pack, technology audit prep, regulator-ready file.
  4. Approval. RFI cycles, weekly status, regulator-meeting prep. Authorisation issued.
  5. Ongoing support. Year-one audit, annual returns, AML refresh, MLRO continuity. Calendared.

05 — Anchor experts

Three partners. Twenty-five years of crypto regulation between them.

Daniel R. Whitmore

Founder & Managing Partner

Jurisdictions: United Kingdom · United States · Jersey · Gibraltar · Switzerland

Languages: English, French

Layla A. Hassan

Partner — Head of MENA & APAC

Jurisdictions: United Arab Emirates · Singapore · Hong Kong · Australia

Languages: English, Arabic, Mandarin (working)

Marcus T. Andersson

Partner — Head of Americas & Offshore

Jurisdictions: Canada · El Salvador · Panama · BVI · Cayman Islands · Montenegro · Bosnia & Herzegovina

Languages: English, Swedish, Spanish

06 — Selected work

What clients say about the engagement.

★★★★★

Layla’s team made the difference between a ‟maybe’ and a ‟yes’ from VARA. The pre-application gap analysis they ran caught two governance issues that would have stopped us cold at the assessment stage. Our VARA Category 2 licence was approved in 11 months — fast for this regime.

Yusuf Al-Sayed · CEO, Falcon Digital Markets Crypto Exchange · Dubai
★★★★★

FCA cryptoasset registration has a very high bar — Daniel and his team are the reason we cleared it. Our Annex II self-assessment was rebuilt from scratch under their supervision. The financial-promotions regime work was equally rigorous.

Charlotte Pemberton · Founder, Albion Digital Assets Ltd Crypto Exchange · London
★★★★★

Hong Kong VATP is the most demanding crypto licence we have ever applied for. Layla’s team brought us through the SFC process — including the external assessment, responsible-officer fit-and-proper interviews, and the parallel TCSP setup for client-asset custody. Licence granted, business operational.

Wei Chen · CEO, Victoria Harbour Digital Virtual Asset Trading Platform · Hong Kong
★★★★★

FinCEN MSB plus a phased state MTL rollout — Daniel’s team built us a 24-month roadmap that prioritised the states by transaction volume and regulator turnaround. We launched live in five states inside the first year. Phenomenal project management.

Jordan Reeves · CEO, Liberty Crypto Inc. Crypto Exchange · Delaware / Wyoming

07 — Insights

Latest regulatory analysis.

Frequently asked questions about crypto licensing

What is a crypto license and do I need one?

A crypto license is regulator authorisation to provide one or more digital-asset services — exchange, custody, brokerage, payment, token issuance. Whether you need one depends on three things: the jurisdiction of your customers, the activities you perform, and whether you control client assets. Most operating models in 2026 do need a license; a minority (genuine non-custodial DeFi front-ends, certain NFT collectibles platforms) do not.

Which is the cheapest crypto license to obtain?

The cheapest credible crypto licenses in 2026 are El Salvador (DASP), Georgia (FIZ + VASP), Panama and Bosnia & Herzegovina. Total first-year all-in cost — including statutory capital, legal fees, substance and ongoing supervision — typically falls between USD 12,000 and USD 25,000.

Which jurisdiction is best for a crypto exchange?

For an institutional centralised exchange the live shortlist is UAE (VARA), Singapore (MAS MPI) and Hong Kong (SFC VATP). Switzerland (FINMA fintech) and Lithuania (MiCA CASP) are credible alternatives. The right answer depends on customer geography, banking strategy and capital tolerance.

How long does it take to get a crypto license?

Crypto license timelines range from 1–3 weeks (Panama, no specific licence) to 18–24 months (NYDFS BitLicense). Most regimes take 8–14 weeks (offshore VASP) or 6–12 months (Tier-1 onshore). The variance comes from RFI cycles and the quality of the application file at submission.

Can I operate a crypto business from an offshore jurisdiction?

Yes — offshore (BVI, Cayman, Panama, Jersey) is a legitimate operating base for many crypto models, particularly token issuers and custodians. The trade-off is banking access: offshore-only structures often need an onshore wrapper to plug into institutional banking and counterparty networks.

What is the difference between VASP, CASP, and VATP?

VASP is the FATF / offshore framework (BVI, Cayman, Georgia). CASP is the EU MiCA framework — passportable across 30 EEA states. VATP is the Hong Kong SFC framework for centralised trading platforms. They cover overlapping activity but live under different legal systems and capital regimes.

Do I need a license for a DeFi protocol?

It depends on whether the protocol is genuinely non-custodial and on whether you operate the front-end as a business. A pure smart-contract layer with anonymous deployers and no custody often falls outside licensing — but the operator behind a branded front-end, token treasury or governance hub frequently does need authorisation.

How much does a crypto license cost?

Total first-year cost for a credible crypto license ranges from USD 12,000 (El Salvador DASP) to USD 1,500,000+ (NYDFS BitLicense). The principal cost drivers are statutory capital, legal fees, substance (resident director and office), banking and ongoing supervision. We model three-year total cost upfront so the budget is realistic.

Can I buy a ready-made licensed crypto company?

In some jurisdictions yes — Estonia, Lithuania and Costa Rica have established secondary markets in pre-licensed entities. The legal validity depends on whether the regulator allows change-of-control without a fresh fit-and-proper review. We diligence the target before recommending the purchase.

What happens after I get the license?

Authorisation is the start, not the end. Year-one obligations typically include external audit, annual return to the regulator, AML programme refresh, MLRO continuity, material-change notifications and Travel Rule provider integration. We calendar all of this and run the post-licence supervision cycle for retainer clients.

Tell us about your project. We come back within 24 hours.

A short description of the model, target customers and timeline is enough to scope a free jurisdiction assessment. No obligation.