Crypto licensing — the questions founders actually ask.

A crypto license is regulator authorisation to provide one or more digital-asset services — exchange, custody, brokerage, payment, token issuance. It is the legal permission to operate; without it, the activity is unauthorised in jurisdictions that regulate the perimeter.

Most operating models in 2026 do need a license. Genuine non-custodial DeFi front-ends and limited NFT collectibles platforms can fall outside, but the threshold question turns on activity scope, customer geography and whether you control client assets.

El Salvador (DASP), Georgia (FIZ + VASP), Panama and Bosnia & Herzegovina lead on total first-year cost. The full ranking is on /compare/cheapest-crypto-license/.

Panama (1–3 weeks for incorporation under general law), Georgia (4–6 weeks for FIZ + VASP) and El Salvador (4–8 weeks for DASP or BSP) are the live fastest paths in 2026.

For an institutional centralised exchange the live shortlist is UAE (VARA), Singapore (MAS MPI) and Hong Kong (SFC VATP). Switzerland (FINMA fintech) and Lithuania (MiCA CASP) are credible alternatives.

Total first-year cost for a credible crypto license ranges from USD 12,000 (El Salvador DASP) to USD 1,500,000+ (NYDFS BitLicense). The principal cost drivers are statutory capital, legal fees, substance (resident director and office), banking and ongoing supervision.

Crypto license timelines range from 1–3 weeks (Panama, no specific licence) to 18–24 months (NYDFS BitLicense). Most regimes take 8–14 weeks (offshore VASP) or 6–12 months (Tier-1 onshore).

VASP is the FATF / offshore framework (BVI, Cayman, Georgia). CASP is the EU MiCA framework — passportable across 30 EEA states. VATP is the Hong Kong SFC framework for centralised trading platforms. Overlapping activity, different legal systems.

In some jurisdictions yes — Estonia, Lithuania and Costa Rica have established secondary markets in pre-licensed entities. Validity depends on whether the regulator allows change-of-control without a fresh fit-and-proper review.

It depends on whether the protocol is genuinely non-custodial and on whether you operate the front-end as a business. A pure smart-contract layer often falls outside; the operator behind a branded front-end frequently does need authorisation.

Many NFT marketplaces do not need a licence — particularly those serving collectibles only. The threshold question is whether the platform handles fiat, custody, fractional interests or financialised assets.

Authorisation is the start, not the end. Year-one obligations typically include external audit, annual return to the regulator, AML programme refresh, MLRO continuity, material-change notifications and Travel Rule provider integration.

Yes — offshore (BVI, Cayman, Panama, Jersey) is a legitimate operating base for many crypto models. The trade-off is banking access: offshore-only structures often need an onshore wrapper to plug into institutional banking.

Yes — in cooperation with locally-admitted counsel. Our anchor partners are admitted in England & Wales, New York, BVI, Cayman, Singapore and DIFC; we engage local counsel for matters in other jurisdictions.

Send a short brief through the /contact/ form: model, target customers, capital tolerance, banking strategy, timeline. We come back within 24 hours with a roadmap and quote — no obligation.